• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

I can't remove a spyware. Help !!!

percy

OSNN Senior Addict
#1
I had inadventently install a bogus file that is a spyware and it randomly open an IE site with ads. I had already ran spybot and ad-aware again and again but it is comes back. I tried to look for an uninstall but none. What else can I use to remove this? I am using Mozilla Firefox as my browser. Thanks.
 
#3
Look for odd-looking processes running in the task manager. Usually spyware programs have telltale names, and when you end them, they keep coming back. You can reboot Windows in safe mode to delete them.
 

percy

OSNN Senior Addict
#5
when i tried to end the process of this file "wuauclt.exe" it came back and back. i will try to find and delete it from safe mode.
 
L

Lee

Guest
#6
percy said:
when i tried to end the process of this file "wuauclt.exe" it came back and back. i will try to find and delete it from safe mode.
Well thats a process for windows update.

Windows Update AutoUpdate Client
 

lancer

There is no answer!
Political User
#7
why dont you do a print screen of your processes and perhaps we can identify the process and program to delete.
 

gonaads

Beware the G-Man
Political User
#8
It prolly came through as a Java applet or something like it. One of my daughter's computers had a problem such as this. In your AdAware when it finishes it should show loctions of the spyware files. I found them as a zip file with like 20 files within the zip. took five runs of AdAware to kill them all. It just kept duplicting itself. Look in your Firefox profile directory. There should be a folder that has to do with Java or is named Java. Or in the Firefox directory. (I don't frickin remember :( ) Look in there, there could be some zip files in it that should not be there. I wish I remembered what they looked like or the names of them.


Hope this points ya in the rite direction. :)
 

percy

OSNN Senior Addict
#10
this was an EXE file that i downloaded and run. it had a different name so i thought it was the file that I was really looking for. as soon as the IE pops up then I will take a screen shot and post it. thanks.
 

percy

OSNN Senior Addict
#11
It's an = Elitum.EliteBar ..
Spybot sees it and after uninstalling it will will resintall itself again. I don't know where to find the file to delete . ???
 

lancer

There is no answer!
Political User
#13
search for it in windows, once you've found it restart your computer go in to ms dos mode, locate the file and delete, this way it shouldn't be able to replicate itself, i've had to do this a few times, with some persistant spyware.
 

Evil Marge

I Rule
Political User
#14
percy said:
It's an = Elitum.EliteBar ..
Spybot sees it and after uninstalling it will will resintall itself again. I don't know where to find the file to delete . ???
I had exact same problem with that exact same file only yesterday with stupid pop up all the time :mad:
Only way we could get rid of it was to delete it in Safe mode.It was system32 folder I think :)
 
#16
Lee said:
Well thats a process for windows update.

Windows Update AutoUpdate Client

One would hope it is Lee, but I doubt it.

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.clt.html

Run Spybot, and Adaware in safe mode. Disable system restore before you do it (you will lose your restore points)

Make sure to post your hijack this log as several have requested in this thread.

This guy got it fixed - mostly using hijackthis, and some safe mode action:

http://www.geekstogo.com/forum/spyware_removal-t11383.html
 

Members online

No members online now.

Latest posts

Latest profile posts

Hello, is there anybody in there? Just nod if you can hear me ...
Xie
What a long strange trip it's been. =)

Forum statistics

Threads
61,961
Messages
673,239
Members
89,014
Latest member
sanoravies