Re: Netpalnow

From: Alessandro Perilli (peris_at_tiscali.it)
Date: 05/29/03 

Date: Thu, 29 May 2003 12:52:25 +0200

On Thu, 29 May 2003 03:34:14 -0700, All Pennies wrote:

> Hi.
> I keep getting annoying advertisement icons on my desktop,
> startmenu and favorites of netpalnow. I been searching my
> computer for the source of this pest, but i can't find it.
> I don't have the netpalnow.exe file or the IEHelper.dll
> where everybody refers to. I even looked in my register to
> find any keys. PestPatrol can't find it neither. There
> must be a another program that puts the icons there, but
> i'm not sure what i installed just before it started.
> So if anybody here have any idea, please do tell.
> Thank you
> AP

Try downloading Autoruns and Process Explorer from www.sysinternals.com
(Autoruns is in Misc section).
With Autoruns you can check every single program launched at machine
startup: look for something you don't recognize.
With Process Explorer you can verify properties of every single process in
execution: look for something you don't recognize and analyze its
properties. Surely you'll discover path to remove it.

Good luck. 

-- 
Alessandro Perilli
Security Consultant / Trainer
MCT - MCSE 2000 - LINUX+
CCSI - CCSE 2000 - CCSE+ NG
CCNA - CIWP - CIWSA - CCA XP
SECURITY+

Relevant Pages

  • Re: Virus?!
    ... Multiple copies of svchost is normal. ... tools from SysInternals such as TCPView, Process Explorer, and Autoruns. ... destroy your data that is on the partition you format. ...
    (microsoft.public.win2000.security)
  • Re: Computer is really slow
    ... The exp file etension does not give any obvious pointers ... You can use Process Explorer to stop the process but it will reoccur ... Autoruns. ... With Autoruns you can uncheck an item, which disables it from starting, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Need help: Port 445 flood
    ... with the port use. ... Process Explorer will give a lot more detail of processes if you ... Autoruns will show much more detail what ... Filemon will display live ...
    (microsoft.public.windows.server.security)
  • Re: FN - Stinger
    ... Taking ages to download emails, ... >> or upload files. ... AutoRuns is great - at doing what it's designed to do which is *not* ... Using that, in conjunction with Process Explorer, you can get a pretty ...
    (uk.people.silversurfers)