Seeker said:
Got a new problem people, seems that IE (Internet Explorer) pops up when
it
wants to, The culpret is a false site called:
"
www.sgrunt.biz/free/rnd.php598". I have tried using Norton AV, Spy bot,
and
AD-Aware. All to no avail. Am getting Desperate. Assistance is
deffinately
in order. HELP!!!
1. In IE, click on Tools - Manage Add-ons, and disable all add-on's
except those you definitely recognize. Write down the names of any
that look suspicious.
2. Press Ctrl-Alt-Del to bring up Task Manager and look in Processes
for anything suspicious. Go to
www.answersthatwork.com to look up
any that you are not sure about. If you spot any spyware in the list,
right-click it and click "End process tree" to get rid of not only that
file, but whatever may reload it. (Write down the name first.)
3. Click XP's Start button and Search and look for all *.EXE files
created in the last week. Also search by name for any suspicious
files from #1, above. To be safe, you can zip suspicious files before
deleting them.
Before doing this, I usually use File Manager (in detail list mode) to
look at the Windows directory SORTED BY DATE. Also look in
the Program Files directory since some adware/spyware will openly
create a new folder there.
Write down the names of files before deleting them.
4. Click Start - Run, and run MSCONFIG. Click the Start tab and
look for any suspicious looking files, uncheck them, and write down
the names. Also look under Services. (Check "Hide All MS Services"
to make it easier to spot spyware.)
When you exit MSCONFIG, do **NOT** reboot yet.
5. Click Start - Run and run REGEDIT. Press Ctrl-F to find the
names of files/processes which you have definitely identified as
up to no good. When you find a reference to them, delete them
from the registry.
The above steps are probably not the procedure recommended
by the pro's, but I have used it many times when all else has failed
and never had a problem.
OTOH, I rarely turn off my computer, and I always check
MSCONFIG before turning it off, so it is hard for spyware to
get too deeply entrenched on my machine.
Anyway, use the above steps at your own risk.
NFord
