Spyware and WinXP

[Guest]

These Parasites are becoming more and more frequent, Ad-aware and spybot are now common names for my clients.
Unfortunately for one or two clients there are still parasites these programs can't remove.
I can identify 24 processes and 3 applications with ad-aware that it cant remove, Spybot worked fine for what it found, rapidkiller didnt detect any of those, CWSShredder found one file and deleted it.
Those 24 process still are running, and make this particular 1.7GHZ system run like a 386.
They have XP, with 4 users, only the administrator log-on has this severe problem, the limited users seem fine.
One of the process seems to be 'redirect5.exe' which does not seem familiar to me, it takes up the most memory usage.

Any suggestions? I really dont want to do an OS Reload because of internet junk...
What are you guys doing out there to protect your end-users? Are you just taking it as it comes?
Any advanced help on this topic would be great
Thank you all
-Paul

 

[musnazril mustaq khan]

paul, are you mean for preventing this to happen or to
clean it. for preventing quite difficulty especially when
it customer computer. it that happen to mine, i normally
hunt the program, and check it it product information
(like company). than i should kill the process and delete
the file, after that need to clear the registry.

sorry if not answering your question.

-----Original Message-----
These Parasites are becoming more and more frequent, Ad-

aware and spybot are now common names for my clients.

Unfortunately for one or two clients there are still

parasites these programs can't remove.

I can identify 24 processes and 3 applications with ad-

aware that it cant remove, Spybot worked fine for what it
found, rapidkiller didnt detect any of those, CWSShredder
found one file and deleted it.

Those 24 process still are running, and make this

particular 1.7GHZ system run like a 386.

They have XP, with 4 users, only the administrator log-

on has this severe problem, the limited users seem fine.

One of the process seems to be 'redirect5.exe' which

does not seem familiar to me, it takes up the most memory
usage.

Any suggestions? I really dont want to do an OS Reload because of internet junk...
What are you guys doing out there to protect your end-

users? Are you just taking it as it comes?

 

[Mike Burgess]

Stuck,
Go to: http://www.tomcoyote.org/hjt/
Download "Hijack This!" [freeware] or download direct (below):
http://www.merijn.org/files/hijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates: "hijackthis.log")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, go to the "Spyware and Hijackware Removal" section.
Press "New Topic", copy and paste hijackthis.log into your new message.
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 01-01-04]
Please post replies to this Newsgroup, email address is invalid
--

Thank you for the fast reply,

I have been hunting and killing these processes,

but these last three are quiet difficult, the filenames and program names
are not matching, and since it is a customers computer, I can not easily
identify unwanted proceses from wanted ones.

All in all, is this truly the easiest most effective way of ridding these annoyances?
Also, for cleaning up the registry afterwards... which

is best method and/or application.