tristan
2005-11-28, 23:40
While scanning a customers machine and manually deleting things out of Program Files that are not part of the image we use, I noticed a folder call 'plaswave' which was typically set to 'read only' like alot of spyware I get rid of.
Funnily enough it was also a running process, so i'm taking a good guess at this being spyware.
Location C:\Program Files\Plaswave\ -r (read only)
Running process which cannot be located in task manager from what I can remember. I just set security permissions to disable read/listing contents etc, rebooted and then unchecked the permissions to make it accessable again.
I have attached the plaswave.exe file as a .zip for making a new definition so you don't have problems with firewalls and other security settings etc.
Hopefully this helps the fight against this crap.
-Tristan
Funnily enough it was also a running process, so i'm taking a good guess at this being spyware.
Location C:\Program Files\Plaswave\ -r (read only)
Running process which cannot be located in task manager from what I can remember. I just set security permissions to disable read/listing contents etc, rebooted and then unchecked the permissions to make it accessable again.
I have attached the plaswave.exe file as a .zip for making a new definition so you don't have problems with firewalls and other security settings etc.
Hopefully this helps the fight against this crap.
-Tristan