• 0

Spyware + Adaware killing my system.

Asked by r4esh,

 Share

Question

Mentor

r4esh

Posted
Posted

Okay. I left outa town for like 2 days and when I come back I notice my brother has jacked my computer up with spyware. Toolbars, programs, desktop bars etc were now implemented into my lovly system. First up I went to the and and remove programs and got rid everything foreign roaming about in there. Next up I Ran my Ad-Aware 6 to try and remove anything.... 56 threats were found. All were removed (according to Ad-Aware). Then I ran Norton AntiVirus 2004 and it detected like 8 ur so and was unable to remove them. I located them down in My Computer going though every folder and everyfile and started deleting everything related to these spywares. After that I went through my registry deleted all the entries i could find from this nasty bug. Everytime I run Ad-Aware (after rebooting), it finds more entries.

I come to Neowin need of assistance. How can I remove these when my spyware programs arn't doing the trick? If you want I CAN make up a short list of the differnt spyware programs attacking my system, just let me know if you need it. My once perfect system is now being corrupted. Can anyone out there help me? I am download spybot search and destroy as I am typing, to see if it has better luck than Ad-Aware 6.

I got most of the spyware to not start at my system boot, but now if I try and go to my task manager to end processes I always get a Access Denied error. This has never happened to be befor I was attacked by spyware. Why is this? Is there a way to fix this? I have a picture to show you what i'm talking about.

HEY JUST FOR THE RECORD I AM NOT TRYING TO END SVCHOST!!!! I CANNOT END ANY... ANYTHING!!!! IM NOT AN IDIOT!

post-12-1084410246.jpg

Link to comment
https://www.neowin.net/forum/topic/166620-spyware-adaware-killing-my-system/
Share on other sites

22 answers to this question

Recommended Posts

  • 0
Grand Master

itsnotabigtruck

Posted
Posted

svchost.exe is not spyware. It is a core Windows process; it hosts Windows services (mainly built-in essential ones) that are built as DLLs. I do not know of any virus or spyware app that is implemented as a service. If you want to stop a service, use the Services tool (Start > Run > services.msc).

Try killing Ad-watch.exe (start it again when you're done, of course) and notice that you can kill it.

  • 0
Veteran

k22

Posted
Posted

r4esh - run Spybot Search & Destroy http://www.majorgeeks.com/download2471.html and remove everything it finds. While scanning, enable the immunize function, go into advanced mode from the mode menu, go to tools on the left hand panel, remove anything that looks suspicious (i hope you do know what you are doing) from system startup. Also, download and install spyware blaster http://www.javacoolsoftware.com/spywareblaster.html , which prevents spyware from ever being installed by blocking certain registry keys from being created.

  • 0
Grand Master

aem4162

Posted
Posted

also get a proggie like tune-up to clean out your registry to get rid of any nasty bits that might remain

then do something to lock your machine so that your brother can't get to it...removing the hd and hiding the mouse and keyboard can work very well

good luck :)

  • 0
Grand Master

Jase

Posted
Posted

This has been answered before, im sure i helped answer it, so before you post please do a search.. and remember.. IE allways gets hijacked. no matter what you have to protect your pc.. It will eventually Get Hijacked. Either Upgrade to Sp2 Or use Firefox - Firefox gets the spyware/addwere Files and places them on your desktop where Ie Auto launches the Spyware/addware.

Your Process tha you are trying to end.. can and cannot be fixed. either run a spyware checker/ addware checker or .

delete your login compleately from windows xp (remember u have to delete the username from my documents too)

then create a new username and you will have full functioning services with no spyware..

Cheers ;)

  • 0
Grand Master

itsnotabigtruck

Posted
Posted
OH and for all of you know it alls that said I cannot end "svchost.exe - network service" I can end that on all of my other computers just fine... and that's without losing my internet or network connections. (idk what purpose that serves)

There are multiple copies of svchost.exe - sometimes more than one running under NETWORK SERVICE as well. It all depends on which service is actually running under it. Anyway, spyware will never run under svchost.exe. :whistle:

  • 0
Neowinian

spacetech

Posted
Posted

"OH and for all of you know it alls that said I cannot end "svchost.exe - network service" I can end that on all of my other computers just fine... and that's without losing my internet or network connections. (idk what purpose that serves)"

IF NOTHING IS WORKING TRY RESTORING YOUR SYSTEM TO AN EARLIER POINT. I HAVE DONE THIS MYSELF WHEN MY MACHINE GAVE ME ERRORS AFTER INSTALLING CERTAIN PROGRAMS OR AFTER BEING INFECTED BY MALWARES OR ADWARES OR WHATEVER U CALL IT. JUST GO TO (START>>HELP AND SUPPORT>> AND FIND SYSTEM RESTORE WIZARD). THIS WILL AUTOMATICALLY TAKE YOU THROUGH THE PROCESS. IT IS EASY AND SMART THING TO DO IF NOTHING IS WORKING. BUT BE SURE TO BACK UP YOUR IMPORTANT FILES AS SYSTEM RESTORES ERASES EVERYTHING THAT WAS CREATED AFTER THE RESTORE POINT. :yes: GOOD LUCK!!!!

  • 0
Mentor

X Statik Process

Posted
Posted

A couple of things...

1) The "all caps" thing is annoying.

2) I'd beat the crap out of your brother if I were you.

3) Maybe try a different spyware/malware program. Each one has their unique advantages/disadvatages. If all else fails, back up what you can and reformat!

  • 0
Neowinian

pyrothemaniac

Posted
Posted

I had this a few weeks ago thanks to my brother also ! I updated and ran adaware, norton and every spyware program I'd seen recommended anywhere, eventually they all showed my computer as being clean but it wasn't, there were still toolbars, popups etc. What I eventually did was goto lop.com and tried the uninstall program on there, it got rid of everything that was left and there has been no problem since.

http://lop.com/new_uninstall.exe

oh and make sure you clear your temporary internet files before doing anything.

  • 0
Collaborator

Lazlo Woodbine

Posted
Posted
don't know why nobody's mentioned spybot

k22 already did.

What he didn't mention was setting it up to run at next startup, which might help with some autostarting spyware.

Open Spybot > Settings > Settings > Automation > System Start > check Run program once at next startup and

select Run check on program start and Fix all problems on program start.

This topic is now closed to further replies.
 Share
Go to question listing

  • Recently Browsing   0 members

    • No registered users viewing this page.