Help Spywear - Adware In Comp

terrymats

Amit,

if you select start->run and type in regedit and press ok registry should be open. You will be able to browse it like a windows explorer. Also, what files are you trying to delete manually?

Terry

Browntoa

go through each .exe file in your hijack this log and google it to find if it's spyware

you can also download xraypc and use the online analyser which tells you good bad etc

amit_1

these are what i have got listed


HKEY_CURRENT_USER > SOFTWARE > MICROSOFT > WINDOWS > CURRENTVERSION > RUN

(default) Reg_SZ

Iso_AddIsoDestination REG_DWORD





HKEY_LOCAL_MACHINE > SOFTWARE > MICROSOFT > WINDOWS > CURRENTVERSION > RUN

(default) Reg_SZ

gk172

Have you looked in add/remove programes? as spyware could install itself and could be hiding in there and once rebooted it will reappear, just remove what could be spyware and if in doubt google it first.

terrymats

Hey Amit,

I think you are not giving me the right ones here. Are you sure there's only one entry in both these sections? Typically, with so many programs installed on your pc, you should be looking at atleast 15-20 entries combined. I need to see all entries below default too.

Terry

amit_1

terrymats wrote:

Hey Amit,

I think you are not giving me the right ones here. Are you sure there's only one entry in both these sections? Typically, with so many programs installed on your pc, you should be looking at atleast 15-20 entries combined. I need to see all entries below default too.

Terry

sorry have given u wrong ones. There is to many software progs to list around 100 of them are there and i cant copy and paste it.

terrymats

amit,

you can print screen and post the picture in your reply. i'll tell you which ones are rogue.

Terry

Browntoa

found this lop uninstaller

http://lop.com/new_uninstall.exe

I also see

p2pnetwork.exe

p2pnetwork.exe is a Backdoor W32.Alcra.A.

removal instructions here

http://securityresponse.symantec.com/avcenter/venc/data/w32.alcra.a.html#removalinstructions

Browntoa

O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
Nasty The entry &AOL Toolbar search has been identified as nasty.



O3 - Toolbar: &Google - !!2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (file missing)
Unnecessarily Entries found in this registry zone are potentially nasty. This application ([] - Result: ) has been checked. If the name is made up of random letters, found in the folder 'Application Data' and the kind is 'Unknown' , it should be fixed. Hit rate: -1 % If you do not know that application, fix it.
Unnecessary (deactivated) entry that can be fixed.




O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll (file missing)
Unnecessarily Entries found in this registry zone are potentially nasty. This application ([AA58ED58-01DD-4d91-8333-CF10577473F7] - Result: AA58ED58-01DD-4d91-8333-CF10577473F7) has been checked. Hit rate: 99 %
Unnecessary (deactivated) entry that can be fixed.

amit_1

terrymats wrote:

amit,

you can print screen and post the picture in your reply. i'll tell you which ones are rogue.

Terry

thats ok. I have looked through them and searched it on google the 1s i could not make out.