can't get rid of unwanted programme

akh43

For several weeks we seem to keep getting this particular download on our computer and try as we might cannot get rid.

The first you know is a shortcut on the desktop called either 'awesome !!!!!!' or 'sex' or sometimes a number '127021'.

I have lost count of the amount of times I have deleted both the shortcut, the programme file, recycle bin, etc, and it just seems to keep coming back.

I have run a complete check (norton antivirus) and it brought some up, but it did not seem able to delete them all.

I then did a file search and found two hidden ones in folder C:\windows\prefetch , which I also deleted last night and yet again they are back.

Does anyone know how I can get rid of this?

Any help would be appreciated.

Thanks

scoot1on1

Have a look at this thread..this should sort out your probs

http://forums.moneysavingexpert.com/showthread.html?t=24280

hope it helps.."hijack this" is very good and its free

akh43

thanks, have printed it off for my son to look at tomorrow.

opportunity_cost

Yes, HijackThis is a great tool but only use it AFTER you have followed the virus, trojan and spyware removal processes explained in that thread. Most nasties can be removed that way and it's easier and safer to let those programs remove them for you.

HijackThis comes in when the automated tools haven't managed to remove every instance of malware. Then a manual removal approach is needed, which calls for the use of HijackThis and the guidance of experienced users (or log file analysers for advanced users).

blinky

Killbox is useful for removing stubborn files which cannot be deleted.

http://www.bleepingcomputer.com/files/killbox.php

akh43

My problem is not deleting the file it is stopping it coming back. I have deleted the file more times than I can remember, done umpteen checks on my system and keep clearing/deleting it but next time we go online it just comes back. I know there is a dialer.wsv that is classed as the threat name but still cannot get rid.

someone advised I download 'Adware software personal' and although it found and deleted it, within 15 mins it had made its way back.

Any other suggestions would be appreciated.

jmoose

Have you tried SpySweeper? a program thats good at it's job.
Evaluation version only

http://www.webroot.com/products/spysweeper/

Direct Download

hope it helps

Cymraeg_2

http://www.safer-networking.org/en/index.html

Try Spybot also . I've found that this removes all traces of adware/malware/spyware etc.

Good Luck.

jmoose

Delete An "undeletable" File
Open a Command Prompt window and leave it open.
Close all open programs.
Click Start, Run and enter TASKMGR.EXE
Go to the Processes tab and End Process on Explorer.exe.
Leave Task Manager open.
Go back to the Command Prompt window and change to the directory the AVI (or other undeletable file) is located in.
At the command prompt type DEL <filename> where <filename> is the file you wish to delete.
Go back to Task Manager, click File, New Task and enter EXPLORER.EXE to restart the GUI shell. Close Task Manager.
Or you can try this Open Notepad.exe
Click File>Save As..> locate the folder where ur undeletable file is Choose 'All files' from the file type box click once on the file u wanna delete so its name appears in the 'filename' box put a " at the start and end of the filename (the filename should have the extension of the undeletable file so it will overwrite it) click save,
It should ask u to overwrite the existing file, choose yes and u can delete it as normal
Here's a manual way of doing it.
1. Start
2. Run
3. Type: command
4. To move into a directory type: cd c:\*** (The stars stand for your folder) 5. If you cannot access the folder because it has spaces for example Program Files or Kazaa Lite folder you have to do the following. instead of typing in the full folder name only take the first 6 letters then put a ~ and then 1 without spaces.
Example: cd c:\progra~1\kazaal~1
6. Once your in the folder the non-deletable file it in type in dir - a list will come up with everything inside.
7. Now to delete the file type in del ***.bmp, txt, jpg, avi, etc... And if the file name has spaces you would use the special 1st 6 letters followed by a ~ and a 1 rule. Example: if your file name was bad file.bmp you would type once in the specific folder thorugh command, del badfil~1.bmp and your file should be gone. Make sure to type in the correct extension.

Thanks goes to the users of https://www.NJAF.com

Chippy_Minton

akh43 wrote:

My problem is not deleting the file it is stopping it coming back. I have deleted the file more times than I can remember, done umpteen checks on my system and keep clearing/deleting it but next time we go online it just comes back. I know there is a dialer.wsv that is classed as the threat name but still cannot get rid.

You've run Norton AV, but have you also deleted the registry key mentioned on the Symantec Dialer.wsv removal page?

andy88_2

The reason it keeps coming back is not that it's downloading from the internet again, but that it's there all the time. It runs secretly in the RAM memory, so that even when you delete it off the disk, it's back straightaway. The programs that will remove it can only get it on a reboot.

Ad-Aware from Lavasoft, Spybot Search & Destroy, or Webroot SpySweeper should get to grips with it. I'd use 2 or even 3. Also Microsoft has recently bought Giant anti-spyware which has been reviewed as one of the most thorough; there's a free beta version available, but it's not clear yet whether they'll charge later. There's also a Microsoft malicious software remover somewhere via Windows Update. If it still persists after these (unlikely) you'll need help from HijackThis pundits.

Once it's clean, take preventive measures with Javacool's Spyware Blaster and maybe also their Spyware Guard.

Webroot is chargeable but the rest are free, though they'll appreciate donations