downloader

[Starman]

i seem to be infected with 8 different trojan downloaders!! How do i remove
these as they still remain after scanning with ad-aware and anti-virus
software? some of these include downloader.5.L, downloader 5.Q etc... please
help me.

this is on top of the search assistant pest that has infected my computer.
was wondering any chance I can use my system restore and take it back 24
hours before infection, would this fix my problems?

 

[Kelly]

Run this combo:

Run Ad-Aware SE, Spybot and HijackThis:
http://www.majorgeeks.com/downloads31.html

Note: Update each program, once installed, before running.

Free Online Virus Scan
http://housecall.trendmicro.com/housecall/start_corp.asp


--
All the Best,
Kelly (MS-MVP)

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

 

[Li'l Roberto]

System restore is often the "Achilles Heel" when it comes to removing
the sort of infections you have, as viruses etc tend to install in
this area.
First thing to do is dissable SR ,reboot and then remove the @#$%,
once you are clean again you can re enable SR.

To prevent a re occurrance, ensure you have current AV and Spyware
cleaners installed.

rgds
Li'l Roberto

 

[Starman]

I've done all of this and it still remains. All the downloaders and the
Search Assistant. I have from information telling me Search Assistant can
never be removed!!! Once it's infected your computer, you have to completely
re-istall Windows!

 

[Kelly]

That is not true. I have cleaned up these issues on over 100 systems here
in my shop. Check your runkeys and msconfig and clean them up.

--
All the Best,
Kelly (MS-MVP)

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

 

[Starman]

How do i do that? I'm telling the truth, search assistant cannot be deleted,
maybe I'm doing something wrong? I did as you instructed.

 

[Paul Heslop]

I've done all of this and it still remains. All the downloaders and the
Search Assistant. I have from information telling me Search Assistant can
never be removed!!! Once it's infected your computer, you have to completely
re-istall Windows!

Try running in safe mode and see if it'll do it that way.

 

[Starman]

Did a search of my computer's files, and have the following infestations:

Xupiter/OrbitExplorer multiple High
Zango Search Assistant multiple Elevated
CWS.Searchx
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HSA High
CWS.Searchx HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SE
High
CWS.Searchx HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SW
High
EasyWebSearch HKCR\TPUSN High
XXXToolbar HKCU\Software\sais Elevated
XXXToolbar HKLM\SOFTWARE\sais Elevated
XXXToolbar HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run##sais
Elevated
Zango Search Assistant


How do I remove these all?

HKLM\SOFTWARE\Winad Client

 

[Bob I]

CWShredder and Spybot S&D

http://www.spychecker.com/program/coolwebshredder.html
And
http://www.safer-networking.org/en/index.html

 

[Guest]

Go to www.webroot.com and get the latest Spy Sweeper, install it, then update
its definitions, then run it. I had it clean off 8 spywares (in 177 traces),
including a key logger, AFTER(!) Ad-Aware, SpyBot S&D, HiJackThis,
SpyWareBlaster, and Norton Antivirus 2005, ALL said my system was clean. NOW
it's clean.
I was impressed enough to buy the 2-year subscription to Spy Sweeper and
leave it running in background. Admittedly, it uses some CPU resources, but
not nearly as much as all the *&@%%^!* spyware.

Tonight I'll be cleaning off a friends PC on which I've found Mmod,
Bargains, Nls, Cashback, Exdl, Ezstub, RB32, and Loader in the Task Manager
list. After uninstalling the obvious things from Control Panel, Ad/Remove
programs, then I'll run the Spy Sweeper paid-for version and educate the
owner about their (poor) choices of P2P sites. Most of the processes, I
identified with http://www.processlibrary.com/results/
Things that site didn't list, I simply googled for (using www.google.com and
checking various hits for descriptions.)

The unfortunate user I mention, was using only a dialup connection and
wondering why it got slower and slower as the adware and spybots kept sending
their traffic through her slow connection and using up her limited bandwidth.

Hope this helps.