Spyware + Adaware killing my system.

[r4esh]

Okay. I left outa town for like 2 days and when I come back I notice my brother has jacked my computer up with spyware. Toolbars, programs, desktop bars etc were now implemented into my lovly system. First up I went to the and and remove programs and got rid everything foreign roaming about in there. Next up I Ran my Ad-Aware 6 to try and remove anything.... 56 threats were found. All were removed (according to Ad-Aware). Then I ran Norton AntiVirus 2004 and it detected like 8 ur so and was unable to remove them. I located them down in My Computer going though every folder and everyfile and started deleting everything related to these spywares. After that I went through my registry deleted all the entries i could find from this nasty bug. Everytime I run Ad-Aware (after rebooting), it finds more entries.

I come to Neowin need of assistance. How can I remove these when my spyware programs arn't doing the trick? If you want I CAN make up a short list of the differnt spyware programs attacking my system, just let me know if you need it. My once perfect system is now being corrupted. Can anyone out there help me? I am download spybot search and destroy as I am typing, to see if it has better luck than Ad-Aware 6.

I got most of the spyware to not start at my system boot, but now if I try and go to my task manager to end processes I always get a Access Denied error. This has never happened to be befor I was attacked by spyware. Why is this? Is there a way to fix this? I have a picture to show you what i'm talking about.

HEY JUST FOR THE RECORD I AM NOT TRYING TO END SVCHOST!!!! I CANNOT END ANY... ANYTHING!!!! IM NOT AN IDIOT!

[Weasel]

svchost is needed by windows and cannot be terminated, same goes for a lot of other system processes

[null_]

Your trying to end svchost.exe... its a vital process...

[rumbleph1$h]

Two other useful tools are Hijack This and CWShredder

Both can be found: here

Without knowing more details, my only other advice is to run these spy/adware and virus scans in safe mode ;)

[itsnotabigtruck]

svchost.exe is not spyware. It is a core Windows process; it hosts Windows services (mainly built-in essential ones) that are built as DLLs. I do not know of any virus or spyware app that is implemented as a service. If you want to stop a service, use the Services tool (Start > Run > services.msc).

Try killing Ad-watch.exe (start it again when you're done, of course) and notice that you can kill it.

[AcdShdw]

thats a window sprocess u cant end that without problems

[r4esh]

NO. IM NOT TRYING TO END SVCHOST. I am not an idiot, just trust me. I cannot end anything. Not even my Network Service or anything. Please read the context carfully... I clearly stated I cannot end ANYTHING.

[rumbleph1$h]

thats a window sprocess u cant end that without problems

Thats not certain. Svchost.exe is a generic host process name for services that are run from DLLs.... ;)

To see what specifically is running go to start > run > open > cmd > tasklist /svc :p

[r4esh]

OH and for all of you know it alls that said I cannot end "svchost.exe - network service" I can end that on all of my other computers just fine... and that's without losing my internet or network connections. (idk what purpose that serves)

[k22]

r4esh - run Spybot Search & Destroy http://www.majorgeeks.com/download2471.html and remove everything it finds. While scanning, enable the immunize function, go into advanced mode from the mode menu, go to tools on the left hand panel, remove anything that looks suspicious (i hope you do know what you are doing) from system startup. Also, download and install spyware blaster http://www.javacoolsoftware.com/spywareblaster.html , which prevents spyware from ever being installed by blocking certain registry keys from being created.

[demorgoron]

check out thisarticle by pcmag

try spy sweeper 2.2

[aem4162]

also get a proggie like tune-up to clean out your registry to get rid of any nasty bits that might remain

then do something to lock your machine so that your brother can't get to it...removing the hd and hiding the mouse and keyboard can work very well

good luck :)

[Jase]

This has been answered before, im sure i helped answer it, so before you post please do a search.. and remember.. IE allways gets hijacked. no matter what you have to protect your pc.. It will eventually Get Hijacked. Either Upgrade to Sp2 Or use Firefox - Firefox gets the spyware/addwere Files and places them on your desktop where Ie Auto launches the Spyware/addware.

Your Process tha you are trying to end.. can and cannot be fixed. either run a spyware checker/ addware checker or .

delete your login compleately from windows xp (remember u have to delete the username from my documents too)

then create a new username and you will have full functioning services with no spyware..

Cheers ;)

[zhangm Supervisor]

Lets try downloading HiJack This (google for it, its a pretty small file), and run it. Then export your log and post it here. I'll probably be able to tell you what should stay and what you should check to be deleted.

[itsnotabigtruck]

OH and for all of you know it alls that said I cannot end "svchost.exe - network service" I can end that on all of my other computers just fine... and that's without losing my internet or network connections. (idk what purpose that serves)

There are multiple copies of svchost.exe - sometimes more than one running under NETWORK SERVICE as well. It all depends on which service is actually running under it. Anyway, spyware will never run under svchost.exe. :whistle:

[spacetech]

"OH and for all of you know it alls that said I cannot end "svchost.exe - network service" I can end that on all of my other computers just fine... and that's without losing my internet or network connections. (idk what purpose that serves)"

IF NOTHING IS WORKING TRY RESTORING YOUR SYSTEM TO AN EARLIER POINT. I HAVE DONE THIS MYSELF WHEN MY MACHINE GAVE ME ERRORS AFTER INSTALLING CERTAIN PROGRAMS OR AFTER BEING INFECTED BY MALWARES OR ADWARES OR WHATEVER U CALL IT. JUST GO TO (START>>HELP AND SUPPORT>> AND FIND SYSTEM RESTORE WIZARD). THIS WILL AUTOMATICALLY TAKE YOU THROUGH THE PROCESS. IT IS EASY AND SMART THING TO DO IF NOTHING IS WORKING. BUT BE SURE TO BACK UP YOUR IMPORTANT FILES AS SYSTEM RESTORES ERASES EVERYTHING THAT WAS CREATED AFTER THE RESTORE POINT. :yes: GOOD LUCK!!!!

[MSN6]

When you reply, you can quote the other person's question and reply in small letters, as everyone can read......

I hope the moderator also will say the same...... :yes:

[zhangm Supervisor]

Please don't type all in CAPS.

[X Statik Process]

A couple of things...

1) The "all caps" thing is annoying.

2) I'd beat the crap out of your brother if I were you.

3) Maybe try a different spyware/malware program. Each one has their unique advantages/disadvatages. If all else fails, back up what you can and reformat!

[pyrothemaniac]

I had this a few weeks ago thanks to my brother also ! I updated and ran adaware, norton and every spyware program I'd seen recommended anywhere, eventually they all showed my computer as being clean but it wasn't, there were still toolbars, popups etc. What I eventually did was goto lop.com and tried the uninstall program on there, it got rid of everything that was left and there has been no problem since.

http://lop.com/new_uninstall.exe

oh and make sure you clear your temporary internet files before doing anything.

[stupidape]

If you know your way around the registry use: http://www.kephyr.com/spywarescanner/index.html

Verrrry good little program, cleaned my pc completly.

[stezo2k]

don't know why nobody's mentioned spybot, its a very useful app, finds all spyware ive found on my m8s computer

[Lazlo Woodbine]

don't know why nobody's mentioned spybot

k22 already did.

What he didn't mention was setting it up to run at next startup, which might help with some autostarting spyware.

Open Spybot > Settings > Settings > Automation > System Start > check Run program once at next startup and

select Run check on program start and Fix all problems on program start.