Support Forum Articles File Help Startup DB Tips Service DB Hijack This! Analyzer

 

Backweb Removal
Overview:
Backweb Removal - This is very widely used among corporations like Kodak, WD and HP. The original intention of this program is to easily keep your applications updated without you having to do anything. The down side to this is many variants of are floating around and some collect information about you. I suggest doing all updates yourself and removing this application!

http://www.backweb.com/corporate/html/contact_us.html

There MIGHT be a built in uninstaller for some of you so make sure you take a close look at your add/remove list before doing anything else.

Destroy Autorun:
Delete the following keys
HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\ldm

Reboot your system then:

Make sure you click start --> Run and type in msconfig. Then select the startup tab. Any references to the processes below.

End Processes (may or may not exist):
backweb.exe
backweb-137903.exe
backweb-7288971.exe
backweb-8876480.exe
comp.exe
iexpress.exe
kodak software updater.exe
ldmconf.exe
sprite.exe

Unregister DLLs:
Each file is in several locations so you'll need to search for them and unregister + delete them in every location you find. These are found in quite a few locations so you'll have to search for them, unregister them and then delete them everywhere you find it running.

backweb.dll
bwmib.dll
bwxtext.dll
bwfiles.dll
bwsec.dll
clientrc.dll
clntutil.dll
cpuinf32.dll
frcom.dll
iadhide.dll
iadhide4.dll
iadhide3.dll
inetclnt.dll
ldmrchs.dll
ldmrcht.dll
ldmrdan.dll
ldmrdeu.dll
ldmresp.dll
ldmrfin.dll
ldmrfra.dll
ldmrita.dll
ldmrjpn.dll
ldmrkor.dll
ldmrnld.dll
ldmrnor.dll
ldmrptb.dll
ldmrsve.dll
syncext.dll

Remove Directories:
programfilesdir+\backweb\
programfilesdir+\kodak\kodak software updater\

Clean your Registry:

You should be back to normal IF this was your only problem. I suggest you post in our HJT forum since its not likely that this is your only bug. Read this first.


Written By: Martin Krohn
Printer Friendly

Article Index:
Talk About it! -->
Too many connections