Can't delete accurl.exe rerun

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by buzz50, Sep 17, 2004.

  1. buzz50

    buzz50 Private E-2

    For the last 2 weeks, my computer attempts to connect to the internet at bootup. Downloaded Ad-Aware and Spybot S&D and deleted a lot of spyware but the problem persisted. Downloaded HJT and spotted 6 suspect files. I was able to delete 5 but the sixth one won't stay deleted. The prefix is O4 (autoloading program from the registry or startup group) - HKLM\..\RunOnce: [*accurl] C:\WINDOWS\accurl.exe rerun. Read the tutorial about closing the process with Task Manager before using HJT. As soon as I close the process it restarts. Used regedit to delete the key. It reappears. Arggg! Any help would really be appreciated. Thanks.
     
    buzz50, Sep 17, 2004
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please complete all the steps in this Sticky thread < READ ME FIRST: Basic Spyware, Trojan And Virus Removal >

    You may have already performed some of them but do the steps again in the oder we have given and double check your version (by clicking on our links) to make sure you have the latest one and that you have any/all updates for the programs.

    NOTE: In order to resolve the issues you are having it is very important that you at least try to perform all the steps as outlined. If you have any difficulty please post back letting us know what steps you have completed, what you found while doing the scans if anything and details about any problems you have encountered in completing the steps. The more details you can provide the better.

    After that if you still have the problem you should read the tutorial in this Sticky thread < Hijack This Tutorial And How To Post Your Log File >

    And post a HijackThis log as a .txt file attachment to your message.

    All running programs should be closed, including your web browser, e-mail, items in the tray, anything you can close... Close before running Hijack This!

    Do NOT run Hijack This from the Desktop, a temp folder or choose run from the downloaded ZIP file. Place it in its own folder, for example C:\Program Files\HJT
     
    chaslang, Sep 17, 2004
    #2
  3. buzz50

    buzz50 Private E-2

    Problem solved I think. I followed all the instructions in the removal thread but the problem persisted. I happened to find another thread started by susans describing the same problem but with different file names. A procedure suggested by PhilliePhan (with an additional step to delete 2 .ini and .dat files) seems to have worked. I've posted what I did in susans thread in the hope that she can also delete the offending files. Chaslang, thanks for replying to my initial posting. If the problem re-occurs, it's good to know you'll help.

    Buzz
     
    buzz50, Sep 19, 2004
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Happy to see you guys have worked this out in the other thread with PP & Susans.
     
    chaslang, Sep 19, 2004
    #4

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds