HMT-Admin

lol buk thats pretty basic ----, I've already tried that and its not that easy to get rid of. Whatever it is, its intrated into explorer.exe

buk9tp

sry

do you have its name? do the files just keep coming back when u use hijackthis?

if they keep coming back use killbox to get rid of them.. but be careful with killbox :P

this is the newest version called pocket killbox.. which i cant vouch for cause i only used the previous version..

http://files4.majorgeeks.com/files/7...in/killbox.exe

i just ran it and it looks to be the same as the old version..

basically u just copy and paste the path into killbox. and it can either delete on start up or swap with a dud. works pretty well..

sorry if you already know about killbox

*edit*
kill box is also great for terminating system processes

95BoostedSol

I use these programs, they work great. Run them in this order (HJT, AdAware, Spybot, HJT)

AdAware SE PE (most up to date version) - http://www.lavasoft.com
Spybot S&D (latest version) - http://www.safer-networking.org
HiJackThis (latest version - http://www.merijn.org

a couple of great sites for posting your HJT logs:

aluriasoftware.com
castlecops.org

The idea of reformatting is not really a smart choice in the beginning. Anyone who tells you to reformat is probably taking the easy way out when they work on your computer. ----, if they want to reformat for a lot of reasons it is just a cop out. Reformatting is easy as ----, finding embedded spyware and malacious software/files is working on your computer.

I have had a ton of luck on "customers" computers using those three programs from above. You also have to have an idea about windows system files as well as how to do registry editing safely to remove some files from your system... I charge $20 a pop for massive spyware removal because all I do is sit and run those.. then chase a few shitty embedded programs on occasion... My reason for only charging $20 is because I know most of the ******* I work for will be back.. I tell them how to keep the ---- away, but they are all too stupid to follow my directions.. That leads to me making about $160 a month in stupid spyware removal jobs.. Sounds like a little bit of money, but for the work I do, its good spare change.

beerbongskickass

Your right it is the easy way out, but when your supporting 1,000+ users it's a different story. It's a lot easier and faster copying people ---- to a new computer than it is running these programs and sometimes having to manually remove spyware. It's not hard, but it takes time, and time is money. That's why we have boxes ready to deploy, but I work at a fairly large company. Your just talking about one person bringing you there computer to fix it sounds like, so we are talking about different things. The basic stuff you listed works most of the time, I'm not going to lie and say it doesn't. I have only had to reformat my personal computer once because of spyware. I'm lazy, so I'm not going to spend all day trying to remove ---- when I can just take the easy way out... I just say ---- it and reformat the thing lol. I also had a hard drive go out on me once before. That's why it's always a good idea to have everything backed up.

d0nfry

buk i'll give you some e-dap if you tell me how to get rid of cmdservice.exe

buk9tp

why dont you just search for it manually since you know the name of it and copy and paste its path into killbox and hit replace with dummy on start up.. but before that disable everything from the statup menu via msconfig. and run hijackthis...

fyi, if u disable everything from start up or run hijackthis after u set killbox to kill something it will cancel killbox out.

removal instructions which i cannot vouch for.

http://www.securemost.com/articles/rm_shanluprober.htm

i hope that helps...

95BoostedSol

OK, I have to agree, with a high number of people to work for, it would be stupid to take my advice.. lol..

Backup is important, its why I keep spare HDs and a couple of usb keys for the little stuff...
I don't have much that I am attached to on my comp, so any time it needs a reformat, I just do it. That doesn't work for "customers" (i say that because i am not a business), they want to keep everything, and can't even tell you what programs they need and don't need when I try to coach them on staying spyware free..
Me: "Do you use this toolbar, because it is really useless. It is also the root of some of your problems." (no details because I find that people know ---- about what I try to explain in detail)
Them: "Ohh, Yeah my mom installed it and we use it all the time"
My Reply: "that will be $20 please." (they'll be back)

On the occasion that I do get someone who truly doesn't care what is on their comp though, I reformat. It is best when a person wants the computer to run a bit faster, be free of excess programs, and several other obvious reasons.

As far as the OP, take a hijackthis log and I will see what I can help with if you still have trouble

jinxy

I agree that reformatting is weak sauce. You can find and remove root kits. If you need to you can replace the windows registry from the repair on the windows disk then scan the old registry then put it back when its all fixed. (Only for uber badass spyware.) But most people cant get that into computers. nor do they care enough to learn how to fix it. Im just a big ol computer dork though

ryan89crx

ad aware se personal works like a charm

jinxy

if you want to use a program use spy sweeper, it works pretty damn good. adaware doesnt catch allot of ----.