The Help with Spyware thread

[Jaguar]

I am fairly experienced dealing with Spyware, but because I have Windows ME my security is fairly bad, and I get it a lot.

Anyway, I'm trying to get rid of a particular program that runs itself at startup. I know exactly where it has installed itself to, and I know what it's called (wintoolsA) so I should be able to delete it easily. However, it always runs itself on startup, and when I ctrl-alt-del to get rid of it, there's no effect. (It's as if once I close it it immediately starts again). Because of that, it's impossible to delete it because the program is in use. I've also tried telling it not to run on startup with msconfig, but that hasn't been any use.

I don't think it's doing anything damaging anymore, because I deleted most of its files. There's just a .dll and an .exe remaining.

Oh, and I do have Spybot and AdAware. Didn't do any good.

 

[Naked Paladin]

You could try booting into safe mode which will not allow the program to run, then you could go and delete the files. Finding the registry entries that it made to run the program on boot is another story which I won't get into because you can screw up your Windows install if you mess something up in the registry. If on the other hand after deleting the files you don't get any error messages during boot saying it can't find file blahblahblah.dll or blahblahblah.exe then you shouldn't have to worry about your registry cause its not hurting anything.

 

[Turner]

Spyware and Spam, How To Get Rid Of It.

 

[alamo]

Get it out of the startup. It is a registry entry like

HK_Local_Machine\Software\Windows\CurrentVersion\Run

 

[Jaguar]

Spyware and Spam, How To Get Rid Of It.

Useful link, but it mostly contains what I already know.

 

[Jeratain]

Useful link, but it mostly contains what I already know.

I just updated today. Feel free to check out the "If you're still having problems...:" section. See if that helps you out.

Also if you're having problems, feel free to post in that thread. That's what it's there for.

 

[Jaguar]

Thanks.

I do have HijackThis, btw.

 

[hbdragon88]

I just updated today. Feel free to check out the "If you're still having problems...:" section. See if that helps you out.

Did you read my last post there? OldVersion removed all the KL files there because Sharman told them to.