RE: Trojan virus

From: TJ Campana [MSFT] (tcampana_at_online.microsoft.com)
Date: 08/20/04 

Date: Fri, 20 Aug 2004 18:04:07 GMT

--------------------
>Content-Class: urn:content-classes:message
>From: "Bill Wiseman" <anonymous@discussions.microsoft.com>
>Sender: "Bill Wiseman" <anonymous@discussions.microsoft.com>
>Subject: Trojan virus
>Date: Mon, 19 Jul 2004 15:08:27 -0700
>Lines: 6
>Message-ID: <025501c46ddc$eadf4530$a501280a@phx.gbl>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="iso-8859-1"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Thread-Index: AcRt3Orfu4YQUrHiQR+RzxOg9Xfasg==
>X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
>Newsgroups: microsoft.public.security.virus
>Path: cpmsftngxa06.phx.gbl
>Xref: cpmsftngxa06.phx.gbl microsoft.public.security.virus:57102
>NNTP-Posting-Host: tk2msftngxa13.phx.gbl 10.40.1.165
>X-Tomcat-NG: microsoft.public.security.virus
>
>I have an adult pop-up om my machine that I can't get rid
>of. I pulled a copy of "Microsoft Knowledge Base Article -
>810981 ' that gives 3 methods to delete it from the
>machine. It says to go to the Registry and
>find "openme.exe" using one of the 3 ways. I tried all 3
>and can't find that file. Any suggestions?
>
Have you looked at Adaware or Spybot? These tools sometime care logic to remove these types of add ins.

T.J. Campana [MSFT]
Microsoft EPS Security 

-- 
This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the 
terms specified at http://www.microsoft.com/info/cpyright.htm 
Note:  For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread 
from which they originated.

Relevant Pages

  • Final Report Vundo
    ... you led me to a place from which I could get rid of this bugger. ... Since I have a dual boot capability, ... registry is more easily done from the XP partition. ... Vundo with a now deleted file (another thing that Shedrick explained in his ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: Losing the Spyware Battle
    ... I had to go through the registry to get rid of all references to both. ... Microsoft Antispyware blocked it, but I cannot find that file on the hard drive and I cannot find any reference to it in the registry or elsewhere. ... Because I don't want to have to reinstall the applications, I'm spending unbillable time trying to clean it. ...
    (microsoft.public.windowsxp.general)
  • >> SUREBAR & SYSUPD.DLL << ???????
    ... my way to let me know how to get rid of it. ... Four in the registry and a sysupd.exe file ... registry entries to get rid of sysupd.dll but the entries ... in which the sites refer to are not in my registry. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Configuration Window Every Time I Start Word 2007 (FIXED)
    ... I however managed to get rid of the configuration window that popsup ... however I am still struggling with the Windows ... incorrectly by using Registry Editor or by using another method. ... To bypass the auto-registration for Word 2007, ...
    (microsoft.public.office.setup)
  • Re: IE from ATT
    ... but I seemed to have gotten rid of it. ... Ensure that Microsoft Internet Explorer and Microsoft ... >and would require a registry edit to remove the OE ... >If this process does not remove the branding from OE and ...
    (microsoft.public.windows.inetexplorer.ie6.setup)