Security Basics mailing list archives

Re: removing spyware (ezula)


From: Jim McCaw <jmccaw2003 () ucsd edu>
Date: Thu, 22 May 2003 11:23:13 -0700

It was enough to just run pestpatrol as each user to remove the 'pests' from their profile.


Jim
At 10:56 AM 5/21/2003 -0700, Chris Berry wrote:
At 05:39 PM 5/16/2003 +0200, McCleskey, David wrote:
I am having a very difficult time removing ezula from a nt 4 box.
Every time I uninstall it, it reloads itself during the next logon.
I have ran Ad-aware, and Spybot Search and Destroy in combination with the ezula uninstall. Does anyone have any experience with the removal of this nasty adware program?
From: Jim McCaw <jmccaw2003 () ucsd edu>
I have used PestPatrol, which seems to do the job. However, when a new user logged in, some of the spyware returned. But, another run of the PestPatrol would get rid of it.

From: Chris Berry <compjma () hotmail com>
You wouldn't happen to be using roaming user profiles would you?

From: Jim McCaw <jmccaw2003 () ucsd edu>
Yes, we are using roaming profiles.

Then that's why it's reloading every time you log in, pest patrol only cleans your local files, not the stuff on the server. Clean it again, then delete your profile stored on the server, when you log out it will save your clean profile to the server and you'll be aok.

Chris Berry
compjma () hotmail com
Systems Administrator
JM Associates

"All I want is a few minutes alone with the source code for the universe and a quick recompile."

_________________________________________________________________
MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*.
http://join.msn.com/?page=features/virus


---------------------------------------------------------------------------
Thinking About Security Training? You Can't Afford Not To!

Vigilar's industry leading curriculum includes: Security +, Check Point, Hacking & Assessment, Cisco Security, Wireless Security & more! Register Now! --UP TO 30% off classes in select cities-- http://www.securityfocus.com/Vigilar-security-basics
----------------------------------------------------------------------------

Jim McCaw, M.S.E.E., C.N.E., M.C.P., jmccaw2003 () ucsd edu, (858) 534-2577
System Administrator
Economics Department
University of California, San Diego


---------------------------------------------------------------------------
Thinking About Security Training? You Can't Afford Not To!

Vigilar's industry leading curriculum includes: Security +, Check Point, Hacking & Assessment, Cisco Security, Wireless Security & more! Register Now! --UP TO 30% off classes in select cities-- http://www.securityfocus.com/Vigilar-security-basics
----------------------------------------------------------------------------


Current thread: