Computing.Net > Forums > Windows 2000 > Hijack or Spyware??

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Hijack or Spyware??

Reply to Message Icon

Name: JimClark
Date: September 23, 2004 at 07:59:02 Pacific
OS: Win2000
CPU/Ram: 512
Comment:

I have a problem with internet explorer getting very slow, to the point that pages just won't load after I have been on for a little while. For example, if I try to load a specific page after having browsed through 4 or 5 pages, the new page may take a very long time to load, often not loading ever. But if I exit internet explorer then launch it fresh and type that same page URL in the address bar then it will open immediately. Then again after a very short time pages will load very slowly and the same problem comes back.

I have found that this problem doesn't exist when I log into the computer as the system administrator. Only when I log in with my own user account. This is not a practical solution, only a temporary work around.

I have compared all of the running processes shown in the task manager and only two additional items show up when logged in with my own user ID. Apoint.exe and Realsched.exe. A search indicates that neither of these are a threat.

I searched on all of the running processes and found one named ssys.exe that is reported to be a threat. I am unable to stop the process, and every attempt to remove it from the registry fails. In the registry in appears as *ssys.exe. When I delete it and then recheck it has returned. And I don't find it in the file that the registry thinks it is in.

I've tried running several spyware programs and Virtumundo keeps showing up using Adaware. I remove it but when I scan again it has come back. I'm not sure that this or the ssys.exe problem are related to the internet problem because both are there when I log in as administrator or with my own user account.

Any ideas or suggestions at this point would be greatly appreciated.

Thanks




Sponsored Link
Ads by Google

Response Number 1
Name: pmkdatabase
Date: September 23, 2004 at 20:22:48 Pacific
Reply:

Jim,

If it acts like a trojan, Googling says it is trojan, then it is probably a trojan!

These can be a real headache to get rid of, but there are things you can try at:
http://makeashorterlink.com/?C16E22C59
Also try a housecall at trendmicro.com but frankly I've never seen any success with housecalls with trojans. You usually have to get rid of them in Safe Command Prompt mode.


Peter


0

Response Number 2
Name: Oldhobo
Date: September 23, 2004 at 23:50:53 Pacific
Reply:

Hi Jim.
Try running a Trojan Program called
TDS-3 If you have a Trojan, this program will find and remove it. Have a nice day Jim.


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More


Computer freezes randomly I have no pagefile.sys (n...



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows 2000 Forum Home


Sponsored links

Ads by Google


Results for: Hijack or Spyware??

payipxw.exe spyware or no?? www.computing.net/answers/windows-2000/payipxwexe-spyware-or-no/62471.html

iefeatures and other spyware www.computing.net/answers/windows-2000/iefeatures-and-other-spyware/55458.html

Computer hijacked by spyware www.computing.net/answers/windows-2000/computer-hijacked-by-spyware/49483.html