M
mc
I have Win XP, and noticed after I clicked on a link
while surfing the internet, that "pup.exe" and "over.exe"
(some type of malware) were unwillingly loaded onto my
system - into the Program Files folder. Those programs
placed unwanted links into my IE favorites, IE links, and
also on my Start menu and desktop. My homepage was
hijacked to "ramgo.com" After deleting those two
programs (or so I thought), deleting the associated
links, and resetting my homepage, I checked the registry
but couldn't find evidence of them. I thought I had rid
my system of this crap. But after restarting the
computer, I noticed that my normal "Notepad" had been
altered and the icon was that of a .exe file. When I
clicked on Notepad, the "pup.exe" and "over.exe"
returned, back in my Program Files and all the unwanted
links returned as well. I'm concerned that "notepad"
has become corrupted and wondering if there is a safe way
to change it back to normal, or delete it and download a
new version of it, and also to get rid of this malware
for good. I'm not sure if there are places in the
registry that I overlooked. (I ran Ad-Aware also, but
that came up with nothing unusual)
Any help would be greatly appreciated, thank you-
while surfing the internet, that "pup.exe" and "over.exe"
(some type of malware) were unwillingly loaded onto my
system - into the Program Files folder. Those programs
placed unwanted links into my IE favorites, IE links, and
also on my Start menu and desktop. My homepage was
hijacked to "ramgo.com" After deleting those two
programs (or so I thought), deleting the associated
links, and resetting my homepage, I checked the registry
but couldn't find evidence of them. I thought I had rid
my system of this crap. But after restarting the
computer, I noticed that my normal "Notepad" had been
altered and the icon was that of a .exe file. When I
clicked on Notepad, the "pup.exe" and "over.exe"
returned, back in my Program Files and all the unwanted
links returned as well. I'm concerned that "notepad"
has become corrupted and wondering if there is a safe way
to change it back to normal, or delete it and download a
new version of it, and also to get rid of this malware
for good. I'm not sure if there are places in the
registry that I overlooked. (I ran Ad-Aware also, but
that came up with nothing unusual)
Any help would be greatly appreciated, thank you-