malware

L

larry

A friend brought his PC over. He was online without AV protection.
All cleaned up except 3 items that SpySweeper kept flagging. I would
remove them and they popped right back. They didn't show in Task
Manager, and I couldn't find the exe's on the HDD. Nor in Msconfig.

how is this possible to have this junk running so stealthily?

i finally deleted all refs from reg. what a pain.

was prob a dialer: fukerservice fukerz.exe

cheers
 
G

Guest

Check the file that comes up again, does it
include "restore" in the lineup? It might be part of the
restore files that windows has backed up and you can't
delete it unless you turn off the restore program.
 
G

Guest

larry said:
A friend brought his PC over. He was online without AV protection.
All cleaned up except 3 items that SpySweeper kept flagging. I would
remove them and they popped right back. They didn't show in Task
Manager, and I couldn't find the exe's on the HDD. Nor in Msconfig.

how is this possible to have this junk running so stealthily?

i finally deleted all refs from reg. what a pain.

was prob a dialer: fukerservice fukerz.exe

cheers
 
L

larry

No, all exe's were in \system32

fukerz.exe
saahiiwakdasb.exe
w32usb32.exe

but they weren't there!!

any thoughts?

thanx
 
A

Alex Nichol

larry said:
A friend brought his PC over. He was online without AV protection.
All cleaned up except 3 items that SpySweeper kept flagging. I would
remove them and they popped right back. They didn't show in Task
Manager, and I couldn't find the exe's on the HDD. Nor in Msconfig.

Some is becoming very stealthy. This sounds like Cool Web Search stuff.
Unfortunately the author cannot keep CWShredder up to date, but the
version at http://aumha.org/freeware/freeware.htm#cwshred might handle
it

See also Richard Harper's guide to such things:
http://rgharper.mvps.org/cleanit.htm
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top