RE: Rogue Program
- From: nass <nass@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Wed, 9 Jul 2008 14:00:01 -0700
"DC4tea" wrote:
I have a rogue program on my desktop which I clear including the keys in
regedit but it keeps coming back. I have contacted the originator who swears
that I have signed up for 'Get Films Now' (Platte international). No one has
from this PC. They say they want paying but no one has ordered anyting - nor
will we. How do I get rid of this invasion permanently? I have Windows
LiveOne Care and all the usual antispyware stuff but it does not pick it up
or remove it.
Any guidance will be appreciated
Unexplained computer behaviour may be caused by deceptive software
http://support.microsoft.com/kb/827315
Go through these Cleaning steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
RootkitRevealer v1.71
By Bryce Cogswell and Mark Russinovich
http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx
Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html
You can download this tool "AutoRuns for Windows"
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
And remove the entries.
Or download this tool:
http://www.ccleaner.com and run to clean the left over entires and files.
HTH.
nass
---
http://www.nasstec.co.uk
.
- Prev by Date: Re: Rogue Program
- Next by Date: Threatfire
- Previous by thread: Re: Rogue Program
- Next by thread: Threatfire
- Index(es):
Relevant Pages
|