Invalid Backweb

[BrianS]

Hi all,
Every time i restsrt, i get the same message " invalid
Backweb 4476822", i hve tried a heap of antiviras
programs but nothing seems to work.
I would really appreciate some advise.
Thanks,BrianS

 

[AndyManc]

Ignore the reference to startdreck in my post its not
needed for this and was typed by mistake.


Andy

 

[Bill Sanderson]

Do you use F-Secure, as your antivirus?

 

[BrianS]

Thanks for your reply,
I just wanted to let you know thati got rid of it and
used a backup disc, just in case i pulled any of the
other needed files with it.
Thanks for your interest anyway.
BrianS

-----Original Message-----

Hi Brian

Backweb is a hard one to comment on its classed as
spyware and removed by spybot,ad-aware etc.. but the
problem is it comes from genuine companies alot of the
time such as HP/Compaq,Kodak,Logitech & F-Secure
AntiVirus and removing backweb can cause system problems
depending on who put it there.Im not sure myself how
malicious Backweb is as its being bundled with all the
above products.It usually can be removed using the
add/remove screen but if a spyware remover has deleted
some of it the add/remove entry could be corrupted.

All the above products use Backweb to update the software
you have but in my opinion I don't see the use of having
BackWeb running all the time to get updates in the
programs that happen probably about twice a year.All
updates can still be done manually without Backweb
installed.Im not sure about F-Secure though If Backweb is
in fact Spyware then it sort of contradicts F-Secure
being a reputable security company .


can you download hijack this, I suspect Backweb has been
removed by your antispy software but it has missed the
registry run command.It should show in hijack if thats
the case then you can fix that line to remove the error
messages.Also check your Add/remove screen for backweb
and remove if found.While your on the add/remove screen
check for any updaters for HP,Kodak, Logitech or Compaq
as these could be Backweb related.


Create a new folder on your desktop or c/drive

Right click an empty spot Select NEW>>then >>FOLDER,name
it and save hijack this and startdreck into the folder


Download Hijack This :

http://www.spywareinfo.com/~merijn/files/hijackthis.zip


download it to the new folder ,
extract and run , choose to run a scan and save the
logfile ,when its finished it will display the results in
notepad copy & paste that back if you need any help but i
think it will show up similar to these:


1.

O4 - Startup: BackWeb.lnk = C:\Program
Files\BackWeb\BackWeb\Program\backweb.exe


2.

O4 - HKCU\..\Run: [LDM] \Program\BackWeb-4476822.exe


3.

O4 - Global Startup: Compaq Connections.lnk = C:\Program
Files\Compaq Connections\4476822\Program\BackWeb-
4476822.exe


4.

C:\Program Files\F-Secure Internet
Security\backweb\4476822\program\fsbwsys.exe



If it shows up as either 1 or 2 on the list above close
all open windows except hijack this,check the entries and
press 'fix checked' . If its showing as 3 or 4 then let
me know before fixing them.


reboot and see if it clears the error message.


Let me know if you have any problems



Regards

Andy



.

 

[BrianS]

Thanks for your reply,
Funny that you mention F-Secure, i used it on a trial
bases and it was after i used it, the trouble started, i
found the file and deleted it and used a backup to make
sure i never pulled anything else out with it, seems to
be going fine now, thanks
BrianS.

 

[Bill Sanderson]

That particular backweb variant is used by F-secure as their update
mechanism. I don't find any particular fault with them for using this--it's
one of the most effective and unobtrusive updates that I've ever seen in an
antivirus, and that's an important trait for me.

However, it is backweb, and a number of products are detecting backweb
regardless of source and purpose, as spyware.

Some installs of backweb are clearly there only to bring ads, and meet the
definition of spyware as far as I can see, so I can't fault the anti-spyware
folks.

--

 

[Bill Sanderson]

Glad you dealt with it successfully.
--

Thanks for your reply,
I just wanted to let you know thati got rid of it and
used a backup disc, just in case i pulled any of the
other needed files with it.
Thanks for your interest anyway.
BrianS

-----Original Message-----

Hi Brian

Backweb is a hard one to comment on its classed as
spyware and removed by spybot,ad-aware etc.. but the
problem is it comes from genuine companies alot of the
time such as HP/Compaq,Kodak,Logitech & F-Secure
AntiVirus and removing backweb can cause system problems
depending on who put it there.Im not sure myself how
malicious Backweb is as its being bundled with all the
above products.It usually can be removed using the
add/remove screen but if a spyware remover has deleted
some of it the add/remove entry could be corrupted.

All the above products use Backweb to update the software
you have but in my opinion I don't see the use of having
BackWeb running all the time to get updates in the
programs that happen probably about twice a year.All
updates can still be done manually without Backweb
installed.Im not sure about F-Secure though If Backweb is
in fact Spyware then it sort of contradicts F-Secure
being a reputable security company .


can you download hijack this, I suspect Backweb has been
removed by your antispy software but it has missed the
registry run command.It should show in hijack if thats
the case then you can fix that line to remove the error
messages.Also check your Add/remove screen for backweb
and remove if found.While your on the add/remove screen
check for any updaters for HP,Kodak, Logitech or Compaq
as these could be Backweb related.


Create a new folder on your desktop or c/drive

Right click an empty spot Select NEW>>then >>FOLDER,name
it and save hijack this and startdreck into the folder


Download Hijack This :

http://www.spywareinfo.com/~merijn/files/hijackthis.zip


download it to the new folder ,
extract and run , choose to run a scan and save the
logfile ,when its finished it will display the results in
notepad copy & paste that back if you need any help but i
think it will show up similar to these:


1.

O4 - Startup: BackWeb.lnk = C:\Program
Files\BackWeb\BackWeb\Program\backweb.exe


2.

O4 - HKCU\..\Run: [LDM] \Program\BackWeb-4476822.exe


3.

O4 - Global Startup: Compaq Connections.lnk = C:\Program
Files\Compaq Connections\4476822\Program\BackWeb-
4476822.exe


4.

C:\Program Files\F-Secure Internet
Security\backweb\4476822\program\fsbwsys.exe



If it shows up as either 1 or 2 on the list above close
all open windows except hijack this,check the entries and
press 'fix checked' . If its showing as 3 or 4 then let
me know before fixing them.


reboot and see if it clears the error message.


Let me know if you have any problems



Regards

Andy



.