problem with Notepad - malware

M

mc

I have Win XP, and noticed after I clicked on a link
while surfing the internet, that "pup.exe" and "over.exe"
(some type of malware) were unwillingly loaded onto my
system - into the Program Files folder. Those programs
placed unwanted links into my IE favorites, IE links, and
also on my Start menu and desktop. My homepage was
hijacked to "ramgo.com" After deleting those two
programs (or so I thought), deleting the associated
links, and resetting my homepage, I checked the registry
but couldn't find evidence of them. I thought I had rid
my system of this crap. But after restarting the
computer, I noticed that my normal "Notepad" had been
altered and the icon was that of a .exe file. When I
clicked on Notepad, the "pup.exe" and "over.exe"
returned, back in my Program Files and all the unwanted
links returned as well. I'm concerned that "notepad"
has become corrupted and wondering if there is a safe way
to change it back to normal, or delete it and download a
new version of it, and also to get rid of this malware
for good. I'm not sure if there are places in the
registry that I overlooked. (I ran Ad-Aware also, but
that came up with nothing unusual)

Any help would be greatly appreciated, thank you-
 
T

Taurarian

www.security.kolla.de Spybot
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm
http://support.microsoft.com/?kbid=320159
Home Page Setting Changes Unexpectedly, or You Cannot Change Your Home Page
Setting

Suggest you also download and install Spybot and make sure you run the updater.

Once the system is totally cleaned you can run sfc /scannow to replace any
missing/corrupt files. You'll need your WinXP CD in the default CD drive before
running the command.

Good luck on getting rid of the spyware/malware.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top