Help remove returning malware

Brownettes · Guest

Hi there can anyone help me with getting rid of "roings" and "ssprint" from my registries Question

...i have run adaware numerous times and each time it picks it up it will remove it but i do a restart and its back again. I have checked my start up also and there is nothing in there that resembles any of these please help as its driving me maddddd Exclamation

helpless · Posted: Fri May 14, 2004 3:36 am Post subject:

make sure you adaware (below are some settings to be set before running) is update when running,
then next to that follow the below :

if you already havent got these
ADAWARE

Once the update is finished click on the Gear icon to access the preferences/settings window

1. In the General window make sure the following are selected:
ˇ Automatically save log-file
ˇ Automatically quarantine objects prior to removal
ˇ Safe Mode (always request confirmation)
2. Click on the Scanning button on the left and select :
ˇ Scan Within Archives
ˇ Scan Active Processes
ˇ Scan Registry
ˇ Deep Scan Registry
ˇ Scan my IE favorites for banned URLs
ˇ Scan my Hosts file
ˇ Under Click here to select drives + folders, choose:
ˇ All of your hard drives
3. Click on the Advanced button on the left and select:
ˇ Include additional process information
ˇ Include additional file information
ˇ Include environment information
ˇ Include additional object details
4. Click the Tweak button and select:
ˇ Under the Scanning Engine:
ˇ Unload recognized processes during scanning
ˇ Include basic Ad-aware settings in logfile
ˇ Include additional Ad-aware settings in logfile
ˇ Under the Cleaning Engine:
ˇ Let Windows remove files in use at next reboot
5. Click on Proceed to save the settings.
6. Click Start and on the next screen choose Activate in-depth Scan at the bottom of the page and then choose:
ˇ Use Custom Scanning Options
7. Click Next and AdAware will scan your hard drive(s) with the options you have selected.
8. Save the log file when it asks and then click finish
9. REBOOT

Download & instal Spybot S&D from http://www.safer-networking.org/index.php?page=download or
http://spybot.safer-networking.de/index.php?page=download Update it before scanning.
After the scan is complete, have spybot fix everything marked RED.
Reboot

Download CWShredder from http://www.computercops.biz/downloads-file-349.html run it. Select the fix button & it will get rid of everything related to CoolWebSearch. Close ALL other programs & windows, including IE, before running CWShredder.
Reboot

----------------------------------------------------

if your problem comes back then :

Download : HiJack This from http://computercops.biz/downloads-cat-14.html
Create and Unzip to a folder, not your Desktop or the Temp folder, doubleclick HijackThis.exe, and hit "Scan".
When the scan is finished, use "Save Log" button, save the log in a text file, and post it here OR register "its free" and then you can post your log at this part : http://computercops.biz/forum67.html

DO NOT FIX ANYTHING YOURSELF NOW, JUST WAIT FOR AN EXPERT TO HAVE A LOOK AT YOUR LOG

Hope it helps you

brownettes · Guest

hi well thanks im new to this forum stuff as i can normally nut things out but this ones a tuff cookie ill give this ago bye now Wink

helpless · Posted: Wed Jun 02, 2004 9:36 am Post subject:

did you get anywere with this ??


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 699 pages served in previous 5 minutes. Page Rendered: 0.358 seconds.