still getting search popup upon opening windows

  • Thread starter Thread starter herbert feller
  • Start date Start date
H

herbert feller

I have checked regedit totally, and found no sign of
C:\WINDOWS\Nail.exe.......I am sure spy removed it from computer.
But the computer seems to still search for it. How can I eliminate the
search from appearing upon opening Windows.

Thank you........Herb
 
What you need to do is run Hijackthis, save a copy of the log file and post
it to this group for
expert analysis just click on the link No
registration required.
 
Hi,

Either go back to the original thread and reread David Lipman's addendum to
my response, or open regedit and click edit/find and search on nail.exe -
both should lead you to the same place.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org
 
herbert said:
I have checked regedit totally, and found no sign of
C:\WINDOWS\Nail.exe.......I am sure spy removed it from computer.
But the computer seems to still search for it. How can I eliminate the
search from appearing upon opening Windows.

Thank you........Herb
Click to expand...

You need to keep your posts in the same the same thread.
 
In said:
I have checked regedit totally, and found no sign of
C:\WINDOWS\Nail.exe.......I am sure spy removed it from
computer. But the computer seems to still search for it.
How can I eliminate the search from appearing upon opening
Windows.
Thank you........Herb
Click to expand...


Herb,

If you decide to use HijackThis to help fix your problem, do
not post your log to any newsgroup. You should post your log to
one of the forums listed below. These forums are staffed by
volunteers who have demonstratedtheir ability to interpret
these logs and provide safe and helpful assistance. Also, the
forums are moderated, adding a degree of assurance that the
advice given is valid. Please do not post a HijackThis log on
one of these newsgroups. You have no guarantee that the advice
given would not make a bad
situation worse.

Here's where you can safely download HijackThis:

HijackThis 1.99.1
http://www.merijn.org/files/hijackthis.zip

Run the program and save the log. There are a number of web
sites where HijackThis logs should be posted. Here are some of
the more popular ones:

CastleCops HijackThis Forum
http://castlecops.com/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html

Aumha Forums - HijackThis Logs
http://forum.aumha.org/

HijackThis Logs and Analysis
http://www.bleepingcomputer.com/forums/HijackThis_Logs_and_Analysis-f22.html

HijackThis Logs and Spyware/Malware Removal
http://forums.tomcoyote.org/index.php?showforum=27

Spyware Warrior HijackThis Logs
http://spywarewarrior.com/viewforum.php?f=5

Good luck

Nepatsfan
 
Now why would you say something like that? Apparently you know nothing about
the Why would you deliberately tell a lie like
that. That group has been around way longer then this one or any of the
forums you suggest, and it is one of the few that accepts HJT logs. There
are plenty of HJT experts in that group and MVP's as well. You know nothing
of that group so stop giving out bad information.
 
Nepatsfan said:
Herb,

If you decide to use HijackThis to help fix your problem, do
not post your log to any newsgroup. You should post your log to
one of the forums listed below. These forums are staffed by
volunteers who have demonstratedtheir ability to interpret
these logs and provide safe and helpful assistance. Also, the
forums are moderated, adding a degree of assurance that the
advice given is valid. Please do not post a HijackThis log on
one of these newsgroups. You have no guarantee that the advice
given would not make a bad
situation worse.

Here's where you can safely download HijackThis:

HijackThis 1.99.1
http://www.merijn.org/files/hijackthis.zip

Run the program and save the log. There are a number of web
sites where HijackThis logs should be posted. Here are some of
the more popular ones:

CastleCops HijackThis Forum
http://castlecops.com/f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html

Aumha Forums - HijackThis Logs
http://forum.aumha.org/

HijackThis Logs and Analysis
http://www.bleepingcomputer.com/forums/HijackThis_Logs_and_Analysis-f22.html

HijackThis Logs and Spyware/Malware Removal
http://forums.tomcoyote.org/index.php?showforum=27

Spyware Warrior HijackThis Logs
http://spywarewarrior.com/viewforum.php?f=5

Good luck

Nepatsfan
Click to expand...
This is a really good forum for posting about SpyWare issues too
(http://www.askmarvin.ca/forums/index.php?showforum=20)

There's a fellow there from Sweden who answers all the posts and his success
rate is very high :-)
 
Why would I say something like that? Because the people who
provide help at the forums I listed don't steal other people's
work and call it their own. They don't sneak around like a
thief in the night and hide their true identities.

If you want to pass yourself off as some sort of security
expert in that newsgroup, go right ahead. Hopefully, someone
who's an active participant there will get wise to your act and
warn anyone who you try to help that they're dealing with a
thief. Meanwhile, anytime I spot you in one of the MS
newsgroups, I'll alert the OP to legitimate sources of
assistance. You aren't what I'd call a "trustworthy" source.

You may not be posting as pcbutts1 anymore but your act hasn't
changed.

Nepatsfan
 
Subject: Re: still getting search popup upon opening windows
From: venus <[email protected]>
Newsgroups: microsoft.public.windowsxp.general

Why do you think everybody who defends me is me? What an idiot.
Click to expand...

No one is defending you that we've seen. In fact, you've had a couple
posters say that the tools you took from other have fixed their problem,
but none of them have defended your actions (past or present).

And it's fairly easy to see if it's you or not, even when you post from
a different IP, network, client, proxy.
 
And here I thought you were the "security expert"!

It doesn't take a genius to spot you when you try to hide your
identity. Here's one hint, when using your alternative posting
method last month you slipped up and posted as pcbutts1.

Nepatsfan
 
Back
Top