Unknown program in process list
in [Spyware]
|
Prev: PCShowBuzz
Next: TROJAN-Need Help
From: SBC on 14 Jan 2006 17:57 Just received my new Dell PC. Have removed the bundled software, but there is a program (CLCLEAN.0001) that reapperas in the Windows task manager on boot. I've run MSCONFIG to remove it, but it doesn't appear there. It doesn't appear in the list of Services, either. The program also appears to create a new sub-directory (C:\Documents and Settings\Alex\Local Settings\Temp\clclean.0001.dir.nnnn, where nnnn starts at 0001 and increments by 1 each time) each time it runs, thus littering my PC with unnecessary junk. WinXP Pro, along with AVG anti-virus, Spywareblaster, Ad-aware, BHO Demon, and Spybot.
From: David H. Lipman on 14 Jan 2006 18:12 From: "SBC" <NoSpam(a)hotmail.com> | Just received my new Dell PC. Have removed the bundled software, but there | is a program (CLCLEAN.0001) that reapperas in the Windows task manager on | boot. | | I've run MSCONFIG to remove it, but it doesn't appear there. | | It doesn't appear in the list of Services, either. | | The program also appears to create a new sub-directory (C:\Documents and | Settings\Alex\Local Settings\Temp\clclean.0001.dir.nnnn, where nnnn starts | at 0001 and increments by 1 each time) each time it runs, thus littering my | PC with unnecessary junk. | | WinXP Pro, along with AVG anti-virus, Spywareblaster, Ad-aware, BHO Demon, | and Spybot. | Are you running the Dell Support Agent ? C:\Program Files\Dell Support\DSAgnt.exe If so, disable it then reboot and see if this is the cause. -- Dave http://www.claymania.com/removal-trojan-adware.html http://www.ik-cs.com/got-a-virus.htm
From: SBC on 14 Jan 2006 19:42 "SBC" <NoSpam(a)hotmail.com> wrote in message news:1lfyf.278$tb3.27(a)newssvr24.news.prodigy.net... > Just received my new Dell PC. Have removed the bundled software, but > there is a program (CLCLEAN.0001) that reapperas in the Windows task > manager on boot. > > I've run MSCONFIG to remove it, but it doesn't appear there. > > It doesn't appear in the list of Services, either. > > The program also appears to create a new sub-directory (C:\Documents and > Settings\Alex\Local Settings\Temp\clclean.0001.dir.nnnn, where nnnn starts > at 0001 and increments by 1 each time) each time it runs, thus littering > my PC with unnecessary junk. > > WinXP Pro, along with AVG anti-virus, Spywareblaster, Ad-aware, BHO Demon, > and Spybot. > Thank you for your thoughts. Yes, I am running the Dell Support Agent. But, unfortunately, CLCLEAN.0001 still appears in Windows task manager, even after I disbale it. The files that are in each and every version of the sub-directory C:\Documents and Settings\Alex\Local Settings\Temp\clclean.0001.dir.nnnn are:- ApiExShell.dll ActivationGui.dll Ky5s96SF.csa PfdRun.pfd ~de1785.tmp ~df394b.tmp ~efe2.tmp The product name for for the two dll files is "Sound Blaster Audigy ADVANCED MB", the company is "Creative Technology Ltd." and the description is "Activation Manager for Driver Activation (Montgomery 2 - Dangerfield)" and "Activation GUI for Driver Activation (Montgomery 2 - Dangerfield)", resp. I thus disabled all the Creative start up programs as well as all the Creative services. This didn't help, either, CLCLEAN.0001 still appears in Windows task manager.
From: David H. Lipman on 14 Jan 2006 20:08 From: "SBC" <NoSpam(a)hotmail.com> | Thank you for your thoughts. | | Yes, I am running the Dell Support Agent. But, unfortunately, CLCLEAN.0001 | still appears in Windows task manager, even after I disbale it. | | The files that are in each and every version of the sub-directory | C:\Documents and Settings\Alex\Local Settings\Temp\clclean.0001.dir.nnnn | are:- | | ApiExShell.dll | ActivationGui.dll | Ky5s96SF.csa | PfdRun.pfd | ~de1785.tmp | ~df394b.tmp | ~efe2.tmp | | The product name for for the two dll files is "Sound Blaster Audigy ADVANCED | MB", the company is "Creative Technology Ltd." and the description is | "Activation Manager for Driver Activation (Montgomery 2 - Dangerfield)" and | "Activation GUI for Driver Activation (Montgomery 2 - Dangerfield)", resp. | | I thus disabled all the Creative start up programs as well as all the | Creative services. This didn't help, either, CLCLEAN.0001 still appears in | Windows task manager. | Use the Sysinternal FileMon utility http://www.sysinternals.com/Utilities/Filemon.html and monitor the file activity to determine the causitive factor. Since the file processes are created in the "Alex" profile TEMP folder you can assume it is being loaded by the Alex profile or it was installed by the user Alex. -- Dave http://www.claymania.com/removal-trojan-adware.html http://www.ik-cs.com/got-a-virus.htm
From: XXdennismu@yahoo.XX.com rm the on 15 Jan 2006 02:41
Try Hijackthis. In article <1lfyf.278$tb3.27(a)newssvr24.news.prodigy.net>, "SBC" <NoSpam(a)hotmail.com> wrote: > >WinXP Pro, along with AVG anti-virus, Spywareblaster, Ad-aware, BHO Demon, >and Spybot. > > |