Re: Adware virus in Temp

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 03/26/05 

Date: Sat, 26 Mar 2005 16:35:30 -0500

From: "Marc" <Marc@discussions.microsoft.com>

| How do I get rid of Adware in my Temp File and Registry . I have Spybot
| Search & Destroy . But when I run NAV 2005 it still shows about 31 adware
| viruses in my Registry and Temp file and NAV fails to delete them . Any help
| would be much appreciated
| --
| Suicidal-One

Adware are NOT viruses !

Adware are non-viral malware.

Dump the contents of the IE Temporary Internet Folder cache (TIF)

start --> settings --> control panel --> internet options --> delete files

1) Download the following four items...

         McAfee Stinger
         http://vil.nai.com/vil/stinger/

         Trend Sysclean Package
         http://www.trendmicro.com/download/dcs.asp

         Latest Trend Pattern File.
         http://www.trendmicro.com/download/pattern.asp

         Ad-aware SE (free personal version v1.05)
         http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download Sysclean.com and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt518.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Ad-aware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
        http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode and shutdown as many applications as possible
5) Using Trend Sysclean, Stinger and Ad-aware, perform a Full Scan of your
        platform and clean/delete any infectors/parasites found.
        (a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using the three
        utilities; Trend Sysclean, Stinger and Ad-aware
7) If you are using WinME or WinXP, Re-enable System Restore and re-apply any
        System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point

* Please report your results ! * 

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Relevant Pages

  • Adware virus in Temp
    ... How do I get rid of Adware in my Temp File and Registry. ... viruses in my Registry and Temp file and NAV fails to delete them. ...
    (microsoft.public.security.virus)
  • Re: Software Registry: is "Advanced INF" legit Explorer?
    ... Microsoft Windows AntiSpyware ... | Lately I've been having a lot of adware entering the system, ... but registry is a place where you need to know ... next I found dozens of keys under the line HKEY_LOCAL_MACHINE ...
    (comp.security.misc)
  • Re: TV Media Adware and Restore
    ... registry or on the filesystem. ... The Winsock XP fix didn't work. ... correspond to the adware, but now I don't. ... I am almost positive the worm came on my computer with the TV Media ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: adware
    ... i never had any proble after deleting these entry. ... spyware, so my advice is you get kazaalite, which can be found at ... > adware on a computer. ... > shows up in LOCAL Software etc. in my Registry. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: System Process Listening on thousands of ports
    ... Yes it's been scanned for Viruses and adware. ... >> many listening ports and wondered if anyone here had any idea how to help ... >> The System process has created a listening instance on every port from ...
    (microsoft.public.win2000.networking)