Spyware continually reloads; can not delete items in registry

Discussion in 'Malware Help (A Specialist Will Reply)' started by alippi, Apr 24, 2005.

  1. alippi

    alippi Private E-2

    I hope you can assist with this problem. I have scanned this computer using Spy Sweeper & Spybot; have deleted items from HiJack This file - only to have them return; have gone into safe mode and deleted Isrvs directory; have attempted to use regedit only to have it tell me that it can not delete desktop.exe and ffisearch.exe; have looked into Winlogon items and am not sure whether they are good or bad; have uninstalled Trend Micro and installed Norton Internet Security and can not get rid of Trend Micro items from HiJack This file (this is probably minor).

    Here is the post of the Hijack this file...

    Thank you for any help..

    Edited by chaslang: Unrequested inline log removed
     
    Last edited by a moderator: Apr 24, 2005
    alippi, Apr 24, 2005
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please read and follow the steps in our sticky threads and also read the announcements.

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus RemovalMake sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

    Also download, install, and get the updates for Microsoft® Windows AntiSpyware But do not run it yet! First reboot into safe mode (with no network connectivity) and then run a full system scan. Then reboot in normal mode and continue with the below steps.



    After doing ALL of the above you still have a problem:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
    chaslang, Apr 24, 2005
    #2

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds