Re: Rogue Program
- From: "David H. Lipman" <DLipman~nospam~@Verizon.Net>
- Date: Wed, 9 Jul 2008 16:56:50 -0400
From: "DC4tea" <DC4tea@xxxxxxxxxxxxxxxxxxxxxxxxx>
| I have a rogue program on my desktop which I clear including the keys in
| regedit but it keeps coming back. I have contacted the originator who swears
| that I have signed up for 'Get Films Now' (Platte international). No one has
| from this PC. They say they want paying but no one has ordered anyting - nor
| will we. How do I get rid of this invasion permanently? I have Windows
| LiveOne Care and all the usual antispyware stuff but it does not pick it up
| or remove it.
| Any guidance will be appreciated
1. Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe
2. Disable Notepad's word wrap:
In Notepad.exe; Format --> uncheck; "Word wrap"
3. Download/run Deckard's System Scanner:
http://www.techsupportforum.com/sectools/Deckard/dss.exe
4. Save the scan results (Main.txt and Extra.txt)
5. And then post the contents of Main.txt and Extra.txt in your post in one of the below
expert forums...
{ Please - Do NOT post the HJT and Deckard's System Scanner Logs here ! }
Forums where you can get expert advice for HiJack This! (HJT) and Deckard's System Scanner
Logs.
NOTE: Registration is REQUIRED in any of the below before posting a log
Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0
Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.malwarebytes.org/forums/index.php?showforum=7
Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://aumha.net/viewforum.php?f=30
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13
--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
.
- Prev by Date: Re: Login Problem Explorer.exe not running
- Next by Date: RE: Rogue Program
- Previous by thread: Re: how to roll back user acct. from limited to admministrator
- Next by thread: RE: Rogue Program
- Index(es):
Relevant Pages
|