Anti-Spyware on a Citrix Metaframe XP running on Windows 2000 server

[Wally]

Have anyone try to install this on a Citrix server running
on Windows 2000 server? One of my server (I know we should
not browse with it) got hit by spyware that I am having a
hard time to remove. I tried using Ad-aware and Spybot,
but it did not fix my problem.

Any known issues with Citrix server or Windows 2000
Terminal Server?

Thanks.

 

[Bill Sanderson]

It isn't well suited to multi-user situations. But if you want to run it as
an administrator to get a specific situation cleaned up, I think it'd be
fine to try it out.

I did have the "runaway errors.log file" hit on a Windows 2000 server, so
I'd keep an eye on that file which is in the install directory. (It can
grow fairly rapidly and will fill the partition if given the chance,
apparently.)

If you say more about the nature of the beast, you might get pointers to
cleanup routines.

 

[Guest]

Bill, I am having a hard time removing a spyware called
IBIS toolbar. There is 3 registry entires that cannot be
removed.

Thanks a lot.

 

[Guest]

-----Original Message-----
Have anyone try to install this on a Citrix server running
on Windows 2000 server? One of my server (I know we should
not browse with it) got hit by spyware that I am having a
hard time to remove. I tried using Ad-aware and Spybot,
but it did not fix my problem.

Any known issues with Citrix server or Windows 2000
Terminal Server?

Thanks.
.

 

[John]

First, uninstall the Web Search program and WinTools program from Add/Remove
Programs

1) Click on Start, Settings, Control Panel

2) Double click on Add/Remove Programs

3) Find "Web Search Toolbar" and "Win-Tools Easy Installer (By Web Search)"
in the list of installed programs and click on Change/Remove to uninstall
it.





During the uninstall process, you will be presented with several prompts to
guide you through uninstalling the product. Read these carefully to make
sure you are actually choosing to uninstall rather than keep the software.

** Note: I find it particularly funny that after the install, the company
actually pops up a screen telling you its not spyware and guiding you to buy
spyware removal software with what appears to be affiliate links that the
company would profit from. See a screenshot of this advertisement.

5) After rebooting the computer, run HijackThis and remove any of the
leftover lines shown above especially the following lines that do not seem
to be uninstalled completely.

R3 - URLSearchHook: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} -
C:\PROGRA~1\Toolbar\toolbar.dll

O16 - DPF: {87067F04-DE4C-4688-BC3C-4FCF39D609E7} -
http://download.websearch.com/Dnl/T_50024/QDow_AS2.cab

6) Next, open My Computer, Drive C, and double-click on the Program Files
folder

7) Right-click and delete the folder below if it still exists

a.. Toolbar

Also check for the presence of the C:\Program Files\Common Files\Wintools
directory. If this folder still remains you may have to follow the WinTools
uninstall procedure.

8) IBIS WebSearch (websearch.com) should now be completely uninstalled from
your computer.

 

[Bill Sanderson]

Thanks John!