BackWeb lite spyware!

[drummerboy]

Hi

My Spybot search&destroy found this Backweb lite spyware on my computer and it removed some parts of it, but there are still 2 entries on the computer which can't be removes, because there is a window saying that they are still in use in the memory? How do I remove those remaining entries. I tried Task manager but nothing suspicious there. Virus scan shows nothing. I also tried with Spysweeper but it didn't found that spyware,just some other stuff.

So is this dangerous and how do I get rid of this?

Thanks in advance

[simbob]

boot in to safe mode then do the scan again, should deleate it then

[drummerboy]

Quote:

Originally Posted by simbob

boot in to safe mode then do the scan again, should deleate it then

Nope it didn't work. It was the same thing as in normal mode. I always get the message that I must restart the machine and then this 2 entries will be removed. When I reboot and do the scan they are still there.

[Atomic Rooster]

See if you can find it in the Task Manager and disable it before removing them.

[drummerboy]

Quote:

Originally Posted by Atomic Rooster

See if you can find it in the Task Manager and disable it before removing them.

No there is nothing in the task manager that could point to this stuff. Nothing unusual there.

[Atomic Rooster]

Found this at Spyware-Removal.com

The easiest way to disable the program is to rename it, e.g. from backweb.exe to backweb.ex_ . Note that if the program is used for a legitimate or wanted purpose (such as automatic software updating or displaying news, etc.), these will no longer happen automatically.

If you are sure you don't need it for anything, find and delete the BackWeb folder, normally in (your windows drive):\Program Files.

1: Terminate DLGLI.EXE using Windows' End Task (CTRL-ALT-DEL) dialogue. It may show up as "Downloading Software..." or "Resuming Downloading of Software..."

2: Use Find to locate DLGLI.EXE(WD Data Lifeline BackWeb Lite Installer) and delete it.

3: Locate Iadhide3.dll and delete it.

4: (Optional) Remove the entry from the StartUp folder.

Also have a read through this: Back Web?

[drummerboy]

Quote:

Originally Posted by Atomic Rooster

Found this at Spyware-Removal.com

The easiest way to disable the program is to rename it, e.g. from backweb.exe to backweb.ex_ . Note that if the program is used for a legitimate or wanted purpose (such as automatic software updating or displaying news, etc.), these will no longer happen automatically.

If you are sure you don't need it for anything, find and delete the BackWeb folder, normally in (your windows drive):\Program Files.

1: Terminate DLGLI.EXE using Windows' End Task (CTRL-ALT-DEL) dialogue. It may show up as "Downloading Software..." or "Resuming Downloading of Software..."

2: Use Find to locate DLGLI.EXE(WD Data Lifeline BackWeb Lite Installer) and delete it.

3: Locate Iadhide3.dll and delete it.

4: (Optional) Remove the entry from the StartUp folder.

Also have a read through this: Back Web?

Thanks for your help bro, but the problem is I don't have this in my Program files folder. I also tried searching the folders for dlgli.exe and nothing showed. So there isn't a thing on my PC that could point me to this bACKWEB s**t, so I can't do anything with this.

[Atomic Rooster]

Interesting read here: Backweb.com. It seems it's bundled with another proggy on your comp.

[Bill in SD, CA]

Run HijackThis
and post your log file here so that we can look at it.


Bill in SD, CA

[drummerboy]

Thanks again for the help guys. I solved it. The f****r was in my registry editor. I found the keys there and deleted them and now it's clean. Cheers.