Re: Need help about this SPyware/Adware

Running Ad-Aware and Spybot in safe mode will do a good job of removing FILES
which are causing the damage, but parts of the registry are definitely left
untouched in safe mode. Whether the system is booted in safe mode or not, the
result is sort of a "working" registry. I do not know what else to call it.
Windows boots up and builds a different working registry every time, merging in
the HKCU entries for whomever logged onto the system.

I have had to de-louse infected systems by repeatedly logging off and logging on
as a different user of a computer used by five different family members. With
each login, I ran Spybot and Ad-Aware to remove the infected registry entries
for each HKCU... Ben Myers

On Thu, 08 Dec 2005 11:20:24 -0500, Herman D. Knoble
<SkipKnobleLESS@xxxxxxxxxxxxxxx> wrote:

>Dewaine: Did you do an up-to-date scan while in SAFE MODE?
>Did you do a Full System Scan with Ad-Aware?
>
>When starting in Safe Mode only basic services are started,
>and no startup modules (e.g.,
>HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run)
>are not started.
>
>Skip
>
>On Thu, 08 Dec 2005 05:10:44 GMT, Dewaine Chan <"dchanNOSPAM"@NOSPAM PLZZZnc.rr.com>
>wrote:
>
>-|Herman:
>-|
>-|Thanks. Still no goes. Back in the hunt again.
>-|
>-|Dewaine
>-|
>-|"Herman D. Knoble" wrote:
>-|
>-|> Dewaine:
>-|>
>-|> If you really want to remove the maleware I suggest taking
>-|> the following steps:
>-|>
>-|> 1) Get latest Ad-Aware spyware definition file from:
>-|> http://www.lavasoft.de/support/download/
>-|> I suggest that you download this defs.zip file on an uninfected computer;
>-|> then copy it to a 1.44M floppy diskette or a CD-R.
>-|>
>-|> 2) Reboot your infected computer and tap F8 once per second during restart
>-|> and when the menu appears select: Safe Mode without networking.
>-|>
>-|> 3) Unzip and insert the downlaoded file, defs.ref, in file location:
>

.

Relevant Pages

  • Summary (was Re: Ok, so Im a lazy moron - Explorer crashes at startup)
    ... ALWAYS with a/v, Spybot and AAW. ... Up to date CWShredder finds nothing (even in Safe Mode). ... Data source object exploit (Registry change, ... a LOT of stuff loading but all the extra stuff appears to me tablet PC ...
    (microsoft.public.windowsxp.general)
  • Re: Need help about this SPyware/Adware
    ... It is my understanding that if Ad-Aware SE Personal is run in Safe Mode ... it will remove spyware in registry entries (it will report "deep scanning ... Also Ad-Aware has settings: ...
    (comp.sys.hp.hardware)
  • Re: Spyware,Virus???
    ... now have Kaspersky, Spybot, Ad-Aware & Spyblaster. ... for Windows update fixes it found a bug in my I.E. ... I had some trouble at first getting Spybot. ... A description of the Safe Mode Boot options in Windows XP ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Need help about this SPyware/Adware
    ... >It is my understanding that if Ad-Aware SE Personal is run in Safe Mode ... >it will remove spyware in registry entries (it will report "deep scanning ... Also Ad-Aware has settings: ...
    (comp.sys.hp.hardware)
  • Re: Can I Stop and Remove a Service Without Using Admin Tools
    ... I used Ad-aware, Spybot, and MS Anti-spyware, all ... Editing the registry was my last ... Follow-up with complete malware removal. ...
    (microsoft.public.windowsxp.help_and_support)