spyware not fully removed

[Guest]

i haven't been able to access the internet, so i tried running windows
defender. sure enough, it found spyware, and i removed it and restarted...i
was now able to get on the internet. however, every time i shut down my
computer, i'm unable to use internet explorer again...it seems as though the
spyware gets reinstalled somehow. if i repeat the above process, it works.
how can i delete this spyware once and for all??

 

[Guest]

Hello nikkichik,

Report a possible spyware problem to Microsoft
http://www.microsoft.com/athome/security/spyware/software/support/reportspyware.mspx
------------------------------------

You can go to the System Event log:

Start, Run, eventvwr.msc <enter>

Click on the System event log

Go to View, choose Filter, and choose "windefend" in the source control.

Look for yellow triangle entries that give the precise path and location of
what was detected, and use the button provided to paste the content of the
detection back to a message here.

What error message do you get in trying to remove it? Have you tried doing
the scan and removal in Safe mºde?


All malware removal work should be done in Safe Mode. To get to Safe Mode,
repeatedly tap the F8 key as your computer is starting up. This will get you
to the correct menu where you can choose "Safe Mode". After you've cleaned up
your computer, simply allow the machine to boot normally and it will go into
Regular Mode.

If the malware remains even after you used Ad-aware, Spybot S&D, Windows
Defender, Ewido and your anti-virus, you can scan with HijackThis. HijackThis
is an excellent tool to discover and disable hijackers, but it requires
expert skill to use. See below for HijackThis links, including sites where
you can post your HJT logs. Again, this is an expert tool and novices should
get help with it. I'm not kidding.

Get HijackThis.exe from:
http://tomcoyote.org/hjt/hjt199//HijackThis.exe
http://computercops.biz/HijackThis.html


Tutorial
http://www.aumha.org/a/hjttutor.htm
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42

Download and Install
http://www.answers.com/ad-aware

http://www.answers.com/topic/spybot

http://www.answers.com/topic/windows-defender

http://www.answers.com/topic/ewido-networks

http://www.answers.com/topic/hijackthis

http://www.answers.com/topic/site-advisor

http://www.answers.com/topic/spywareblaster

http://www.answers.com/topic/ccleaner


For the benefit of the community reading this post, please rate the pºst.

I hope this post is helpful.

Еиçεl

 

[Guest]

Here is posting previously from Engel which best describes the procedures you
may have to go thru to remove persistant malaware/spyware from your system.
Take a look and check to see if there is anything you haven`t done that you
should. Its good advice and well worth the effort.

------------------------------------------------------------------------------------------------

All malware removal work should be done in Safe Mode. To get to Safe Mode,
repeatedly tap the F8 key as your computer is starting up. This will get you
to the correct menu where you can choose "Safe Mode". After you've cleaned up
your computer, simply allow the machine to boot normally and it will go into
Regular Mode.


If the malware remains even after you used Ad-aware, Spybot S&D, Windows
Defender, Ewido and your anti-virus, you can scan with HijackThis. HijackThis
is an excellent tool to discover and disable hijackers, but it requires
expert skill to use. See below for HijackThis links, including sites where
you can post your HJT logs. Again, this is an expert tool and novices should
get help with it. I'm not kidding.


This is a Ron Kinner case beacuse I cannot find any good advice within any
forum without using HijackThis and to be carefully guided.
Get HijackThis.exe from:
http://tomcoyote.org/hjt/hjt199//HijackThis.exe
http://computercops.biz/HijackThis.html

Save it to C:\hjt (new folder) then Open it and select Scan and Save Log.
Note where you saved the log then send it to him as an attachment. Put
Hijack in the subject so he'll know it's not spam.

Alternatively you can post it on the Dell Forum ªt:

http://forums.us.dell.com/supportforums/board?board.id=si_hijack

(if it wraps you can go tº:

http://tinyurl.com/ckuzq ; instead.)

Put Ron in the subject so he will see it. You do not need to have a Dell to
post but you will need to register.

Ron Kinner
Microsoft MVP 2004 & 2005
(e-mail address removed)

Tutorial
http://www.aumha.org/a/hjttutor.htm
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42


D/L and Install:

http://www.answers.com/ad-aware

http://www.answers.com/topic/spybot

http://www.answers.com/topic/windows-defender

http://www.answers.com/topic/ewido-networks

http://www.answers.com/topic/hijackthis

http://www.answers.com/topic/site-advisor

http://www.answers.com/topic/spywareblaster

http://www.answers.com/topic/ccleaner

 

[Guest]

Hi Engel

Sorry. Looks like we posted around the same time ....... As you can see I`ve
chosen one of your extracts. Over to you ................

Stu

 

[Guest]

I agree with the other posts. Windows Defender seems to have deficiencies
with spyware that re-instates itself so it would be good to report the
problem. I have toyed around with Superantispyware (superantispyware.com).
Download the free version. See if that product completely removes the
spyware and post your findings. Thanks.