Help this thing is comeing back -->Apropos / Peopleonpage

[Fred Muchmore]

I do not untrstand this, I removed this Apsps threat
several times and even whent into the registry and
deleted this Browser Modifier my self several times.
However this thing comes back every time, ones I deleted
the key "hkey_local_machine\software\Aprps" and close the
registry and reopen the registry the key resets it self
and shows back up in the same location.

I do not get this, how can I remove this thing permantly?

Regards
Fred Muchmore

 

[Engel]

Hello Fred;

Have you try:
Subject: Apropos is Very Resilient
From: "Webmaster" 9/8/2005 9:39:22 AM
GENERAL Forum.

Subject: Re: AproposMedia comes back after deleting in
registry
From: "AndyManchesta" Sent: 9/15/2005 5:10:36 PM
General forum.

Good luck Fred and let us know if it works.

Engel

 

[AndyManchesta]

I think you may have a Rootkit infection

Download & Run RootkitRevealer

http://www.sysinternals.com/Files/RootkitRevealer.zip

Save to Desktop or C:\drive and Extract and press Scan

After the scan finishes choose File then Save it's log
and post back the log it produces (It may save into
Windows\system32 by default)

DO NOT attempt to fix anything it finds as entries may be
legitimate

Ive got a PacerD bundle on my test machine now which
installs SurfSideKick, Qoologic, Apropos and a few other
nasties and it also installs a device to run & hide files
on the system which are invisable untill you take away
one part of it in safe mode, F-Secure's Blacklight isnt
working that great on this but on the tests Ive done
RootkitRevealer is detecting them everytime.

Andy