Adware Problems

[Guest]

Have had an adware on my computer. Followed NAV 2004 instructions to remove
but I cannot delete file, whether in regular or safe mode. Name of file is
adcmd.exe. Has placed entry on registry. Cannot delete this registry entry,
it just reappears. Also have this posted in the processes on my Task Manager.
I cannot end this process either, it just reappears. Anyone else have my
problem? It's not doing any damage, but it is slowing my computer pretty bad.
Please help.

 

[Alias]

: Have had an adware on my computer. Followed NAV 2004 instructions to
remove
: but I cannot delete file, whether in regular or safe mode. Name of file is
: adcmd.exe. Has placed entry on registry. Cannot delete this registry
entry,
: it just reappears. Also have this posted in the processes on my Task
Manager.
: I cannot end this process either, it just reappears. Anyone else have my
: problem? It's not doing any damage, but it is slowing my computer pretty
bad.
: Please help.
: --
: Larry

Download and install AdAware (www.lavasoftusa.com), Spybot, Search and
Destroy (http://www.safer-networking.org/), SpywareGuard
(http://www.javacoolsoftware.com/sgdownload.html) and SpywareBlaster
(http://www.javacoolsoftware.com/spywareblaster.html) so that you can remove
and protect against any spy ware/mal ware/ad ware or scum ware from your
computer that you might get while surfing the web. The first two need to be
updated and run in safe mode. The second two will prevent beasties from
getting on your computer in the first place.

Alias

P.S. Get rid of Norton and get a decent suite. I recommend SystemSuite 5.0,
available at http://www.v-com.com

 

[Will Denny]

Hi Larry

Please try all these programs to check for any spyware that may be on your
system:

Ad-Aware - www.lavasoftusa.com
Spybot - http://www.safer-networking.org/
CWShredder - http://forum.aumha.org/downloads/cwshredder.zip
Spy Sweeper - www.webroot.com

Try SpyWareBlaster to stop intrusions:

http://www.javacoolsoftware.com/spywareblaster.html

Also see the following links:

http://aumha.org/a/parasite.htm
http://mvps.org/winhelp2002/unwanted.htm
http://www.microsoft.com/security/articles/spyware.asp

 

[Alex Nichol]

Have had an adware on my computer. Followed NAV 2004 instructions to remove
but I cannot delete file, whether in regular or safe mode. Name of file is
adcmd.exe. Has placed entry on registry. Cannot delete this registry entry,
it just reappears.

A trick that often works, is to find the file and not try to delete it -
instead right click and rename it with a different extension, say xex

Now close and reboot; you may have a complaint at startup (response
should be equivalent of 'Get Lost') and then you can delete the
renamed file, and the registry entry.

 

[Terry]

On 11/17/2004 7:14 AM On a whim, Larry Edwards pounded out on the keyboard

Have had an adware on my computer. Followed NAV 2004 instructions to remove
but I cannot delete file, whether in regular or safe mode. Name of file is
adcmd.exe. Has placed entry on registry. Cannot delete this registry entry,
it just reappears. Also have this posted in the processes on my Task Manager.
I cannot end this process either, it just reappears. Anyone else have my
problem? It's not doing any damage, but it is slowing my computer pretty bad.
Please help.

First, make note of the date of the file. I would try deleting it from a
command prompt. If necessary, boot into the Recovery Console and delete
it from there. Also, turn off System Restore before trying this.

After you remove the file, then delete the registry entry and see if it
returns. If it does, there are other files on the system that are
recreating it. As I said above, make note of the date of the file,
adcmd.exe and search your hard drive for all files with that date. You
may find other weird named files that could be part of it. I've run in
to that many times before on client machines, and none of the
adware/malware programs detected anything.

--
Terry

***Reply Note***
Anti-spam measures are included in my email address.
Delete NOSPAM from the email address after clicking Reply.