-=PCTechTalk=- Re: spyware - NewDotNet
- From: "Chris Spotta" <chris@xxxxxxxxxx>
- To: <pctechtalk@xxxxxxxxxxxxx>
- Date: Wed, 17 Aug 2005 15:24:29 +0100
Boot windows normally.
Update ad-aware definitions, download spybot and update the definitions for
that too.
Reboot into safe mode > run spybot then adaware in that order
Remove everything they find.
If they crash while removing spyware post back for different instructions.
Once you have run them both go to C:/Windows/Prefetch (are you on XP? - post
does not say) and delete all files while still in safemode
Then go Start > Run and type in ' %temp% ' - delete all in that folder
Empty your recycle bin.
Reboot normally - that should have got rid of 95% of it
If you have spyware left over post back and we'll work on it one at a time
Regards
Chris
callto://spotta/
chris@xxxxxxxxxx
http://www.spotta.com
-----Original Message-----
From: pctechtalk-bounce@xxxxxxxxxxxxx
[mailto:pctechtalk-bounce@xxxxxxxxxxxxx] On Behalf Of Cris
Sent: 17 August 2005 13:20
To: pctechtalk@xxxxxxxxxxxxx
Subject: -=PCTechTalk=- spyware - NewDotNet
Please read the entire email for my problems! Also - please
don't tell me to get rid of internet explorer.
I am infected with spyware. I am getting non-stop internet
explorer pop ups.
I have scanned with norton online - panda online - microsoft
anti-spyware - adaware - I deleted a file in hijackThis -
Pest patrol - it used to be really good, but I think it is
corrupted. It didnt' find it, and it is supposed to.
microsoft finds it and deletes it and it is right back. I
don't have anything in add/remove and I don't have any extra
things appearing on the top of my internet explorer.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Panda online finds some things -
C:\DOCUME~1\CRIS\APPLIC~1\ARMYBU~\LOVESAVEPOKE.EXE
and:
c:\docume~1\cris\locals~1\temp\zcdexpxp.exe
How do you clean from c:docume~ ?
and this one -
Adware:adware/coupons Windows Registry
and - Adware:Adware/Lop C:\Documents and Settings\All
Users\Application Data\plan find scr junk\Transbyte.exe
Adware:Adware/Lop C:\Documents and
Settings\Cris\Application Data\army burn\Lovesavepoke.exe
I MANUALLY DELETED THE TWO UP ABOVE, AND THEY COME BACK.
Adware:Adware/Lop C:\Documents and
Settings\Cris\Local Settings\Temp\zcdexpxp.exe
THIS ONE WON'T DELETE.
Adware:Adware/MediaTickets C:\Documents and
Settings\Cris\Local Settings\Temporary Internet
Files\Content.IE5\2M6SFGSI\symantec[1].css
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I've run cleanUP! also - and manually tried to delete a file
from my regular temp folder - and it won't delete.
Can I get to that one in safe mode?
I haven't been so frustrated in ages!!!
Cris
--
<Please delete this line and everything below.>
To unsub or change your email settings:
//www.freelists.org/webpage/pctechtalk
To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/
--
<Please delete this line and everything below.>
To unsub or change your email settings:
//www.freelists.org/webpage/pctechtalk
To access our Archives:
http://groups.yahoo.com/group/PCTechTalk/messages/
//www.freelists.org/archives/pctechtalk/
Other related posts:
