Spyware

[Downwind]

I've posted on this before. I have a URL search hook and a
BHO hijack in the registry. I downloaded Spybot S&D,
AdAware, Hijackthis, and Winmaid. All of them show these 2
items. I have deleted them in the registry and using the
utilities. But the spyware keeps coming back! I have
Google pop-up blocker as well as Pop-Up Stopper, but they
don't block the ads.

HijackThis shows the same string of numbers for both the
URL search hook and the BHO hijack. Both were in ActiveX
in the registry and I deleted these. It also shows the
following: C:\Progra~1\COMMON~1\WinTools\WToolsB. How can
I get rid of the spyware permanently? Thanks.

 

[Dorian Gray]

http://www.webroot.com

I think this is your best shot.
You can email me:
http://home.kooee.com.au/kingull/xp.html?

 

[Ted Zieglar aka \Rocky\]

Spyware and its variants can be notoriously difficult to remove completely.

You need to try several different spyware removers.

If a spyware remover can detect, but not remove, the spyware, get the name
of the particular spyware and look for manual removal procedures, if any,
that are posted on the websites of the major spyware detection utilities.

If nothing else works, your only other recourse is restoration of a known
good disk image or a complete clean install of all your software.

 

[Michael D. Alligood]

WinTools can prove difficult to get off your PC. The only way I have
sucessfully removed it is by:

Booting into Safe Mode
Opening Regedit and performing a search for Wintools (deleting all entries)
Opening \Program Files\Common Files and deleting the Wintools folder.
Opening msconfig and unchecking the Wintools box

Hope that helps

--
Best of luck!

Michael D. Alligood
MCSA, MCP, CCNA, A+,
Network+, i-Net+, CIW A, CIW CI