Howdy, Stranger!
It looks like you're new here. If you want to get involved, click one of these buttons!
Quick Links
A little help with Spyware please..
Drov
Member Posts: 32
Ok, I'm pretty sure there is spyware on my computer.. and I can't seem to get rid of it.
There are WinTools in my processes thast were never there before. Named WinToolS.exe, WSup.exe TBPS.exe, and PIB.exe. When I end the processes, they just come back instantly. I've tried closing them all at once, using EndItAll. I've tried running Ad-Aware, it says it has found them(about 49 files), I ckeck them all, and it says they've been deleted. But, they are still in my processes, and when I run ad-aware again, it still finds them.
I've also tried using SpyBot, but that doesn't even find them(both ad-aware and spybot are updated).
Also, I even tried running an anti-virus, but that didn't find any viruses.
I've tried going to where they are located at on my C drive, but when I try to delete them, it says it can't delete it because another program is using it, and same if I try to rename it.
The main reason I want them gone is because they are constanlty taking up 8-10% of my system memory(of 1gig), so they are slowing down my computer quite a bit, along with whatever else they are doing.
So I'm all out of ideas, can anyone give me a little help on what I should do(besides a complete format of my harddrive 
).
EDIT: They also come up on my starting processes when I use msconfig. I uncheck them, but every time I restart my computer they are still there, and checked again in msconfig. In fact, as soon as I uncheck them in msconfig, they are checked again even if I open it again 5 seconds after I've unchecked them.
Comments
Try this site http://www.bleepingcomputer.com/forums/topict3134.html . Its about halfway down the page. This was easily found by a Google search.
Another good site for Windows XP services is http://www.blackviper.com/ . Be sure to read his explinations and warnings about disabling services.
I recommend this
-- it helps me out a bunch
spy sweeper seems to work for me. XoftSpy is also a good tool, it gets stuff spybot s&d and ad aware dont get.
Agreed, AdAware is as good as it gets, and the personal edition which has tools for searching and removing spyware is free.
------------------------------------
Always run with scissors. The quicker you go, the quicker you'll get to your destination and the quicker you'll finish using the scissors, therefore significantly reducing your chances of injuring yourself
Ok I spent 20 min reseraching each of those .exe I had links and everything. I wrote up a nice frikin step by step and then clciked post message. You will never guess what happened then!!!
Those of you who have been here for awhile know
Basically those are browser hijackers and adware components.
goto http://www.spywareinfo.com check the forums and they will direct you to downoad a tool called Hijackthis.exe. I use it almost daily at work on employee computers to clear hijacked pages and such.
Follow the directions the folks there give you. You will have to make a username etc for the forums.
Good Luck with it. If you have further questions post again or PM me or whatnot
I would do this...
Start > Run > type "msconfig"
Goto the Startup tab and uncheck all the ones you're sure shouldn't be running. Restart, find the files and try deleting them again. If they still can't be deleted, hopefully they will at least have stopped running in the background.
Okay....this is a very simple thing to do
Just do this and don't pay any attention to the other posters.
Reboot your computer's OS into "Safe Mode" (usually using the F8 key while it is booting up)......then since you know the location of those folders on your c: drive (since you already tried to delete in regular mode) these files are usually placed into your "program files" folder or "system32" or "system" folers or even just your "windows" folder.
This will allow you to delete these folders you are trying to get rid of which are the sources because while in safe mode none of them are being used (bare bones OS while in safe mode). You usually have to get rid of those folders associated with the spyware manually in safe mode when third party programs either cannot get rid of them (because they are being used by your system) or no program can detect them after running full system scans.
Then when you reboot your system back to regular OS I would suggest to run another Ad-aware or spybot full system scan again right after that. After the scan I would then check your startup files under....Start>Run>type "Msconfig". Head to the startup tab and check out what you have checked in that list and if it looks apart from what is normal startup files for your system then I would hose them out of there (meaning uncheck them).
Very simple thing to do. You dont need to be doing anything extra other than what I have explained. It should not be made to be too difficult.
Although I should also point out that depending on the severity of the spyware infection on your computer....you may even have to go an extra step and check your OS registry for spyware placed in your registry keys as values which sometimes will not get removed by programs or manually until you actually go into your registry and find it yourself. That would be something to do if NONE of the above things work for you.
Last but not least.....take this advice and STAY AWAY FROM THE PORN SITES.
Thank you!
"Time to kick ass and chew bubble gum!...but I'm all outta gum!!!"
"Time to kick ass and chew bubble gum!...but I'm all outta gum!!!"
Are you fucking crazy?!
__________________________________________________________________
Are you fucking crazy?!
___________________________________________________________________
Are you fucking sick and twisted?!?!?
I have never heard such a big contradiction....lmao!
Perhaps you should heed the advice of my signature.
"Time to kick ass and chew bubble gum!...but I'm all outta gum!!!"
"Time to kick ass and chew bubble gum!...but I'm all outta gum!!!"