pupxpman.exe. Has anyone here found a way of removing this nasty?

[Ray]

I tried Ashampoo Start-up Manager, decided it was not what I wanted and
uninstalled. It leaves behind a Start-up file pupxpman.exe which appears to
be impossible to remove by any means tried so far.

Winpatrol+ Kill and Kill at reboot both failed. Wintasks blocks it but does
not remove the file.

The exe is supposed to be in Windows/System32 but I can't find it. Also
tried regedit and msconfig.

It just keeps reproducing itself and I am reluctantly have to admit defeat.

Please advise if you know how to get rid of this nasty.

TIA

Ray

 

[Pegasus \(MVP\)]

I tried Ashampoo Start-up Manager, decided it was not what I wanted and
uninstalled. It leaves behind a Start-up file pupxpman.exe which appears to
be impossible to remove by any means tried so far.

Winpatrol+ Kill and Kill at reboot both failed. Wintasks blocks it but does
not remove the file.

The exe is supposed to be in Windows/System32 but I can't find it. Also
tried regedit and msconfig.

It just keeps reproducing itself and I am reluctantly have to admit defeat.

Please advise if you know how to get rid of this nasty.

TIA

Ray

The file is probably hidden. Tell your explorer to show hidden
files, then delete it. If the file is locked, read the post about
deleting a sys file posted here just before your post.

 

[Steve N.]

The file is probably hidden. Tell your explorer to show hidden
files, then delete it. If the file is locked, read the post about
deleting a sys file posted here just before your post.

Also delete the entry for it in the registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Steve N.

 

[Ray]

Also delete the entry for it in the registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Steve N.

Thanks everybody,

I've deleted the reg key above plus the files in System32 and all references
to Ashampoo but the PUPXPMAN.EXE still insists on being loaded in the
start-up menu although I can now disable it so it probably is now harmless.
There is still a challenge to get it finally removed.

Ray