Google Answers Logo
View Question
 
Q: Rogue Site-unwanted programs-unable to delete all ( No Answer,   10 Comments )
Question  
Subject: Rogue Site-unwanted programs-unable to delete all
Category: Computers
Asked by: soulfulpsy-ga
List Price: $10.00
Posted: 14 Mar 2004 20:45 PST
Expires: 13 Apr 2004 21:45 PDT
Question ID: 316790
I stumbled on a rogue site and found my computer loaded with unwanted
programs ... at least one of which I have been unable to delete.  It
is rem106.exe -- this site also installed a toolbar on google ...
called poke beep heck ... which I finally was somehow able to suppress
from loading automatically.  I ran noadware and deleted some stuff by
hand but there seems to be no end to this.  Some of the files were
bridge.exe, several with hxdl and hxiul.  Can someone help?
Answer  
There is no answer at this time.

Comments  
Subject: Re: Rogue Site-unwanted programs-unable to delete all
From: apteryx-ga on 14 Mar 2004 22:08 PST
 
You might want to take a look at my #310897.

Apteryx
Subject: Re: Rogue Site-unwanted programs-unable to delete all
From: kdsland-ga on 19 Mar 2004 03:30 PST
 
I had this problem and I ran the programme 'regedit.exe' in the main
Windows directory, then edit-find from the menus, doing a word search
on the offending programme names. I then deleted the relevant keys
from the registry. Care is needed in doing this, ensuring that only
the unwanted programmes are crippled.
Subject: Re: Rogue Site-unwanted programs-unable to delete all
From: soulfulpsy-ga on 19 Mar 2004 07:34 PST
 
Thank you both.  I have tried the second suggestion repeatedly. 
Somehow the .exe files (and there are a variety:  bridge.exe is the
most common) keep regenerating themselves.  A flingstone.com seems to
be involved.  Anyway, I will try some of the items that were in
Apteryx's extensive exchange.
Subject: Re: Rogue Site-unwanted programs-unable to delete all
From: swafnil-ga on 23 Mar 2004 05:31 PST
 
So there are several methods the program could use to replace itself:

1. ) Which Windows OS do you use? Windows XP creates backups of
recently installed system files (mainly files in "WINNT" or "WINDOWS"
including several subfolders. These backups are stored in the folder
"WINDOWS/SYSTEM32/RECENT", the restored files are mentioned in
"windir\System32\Restore\Filelist.xml".
This article on Microsoft will help you with system restore procedures:
http://www.microsoft.com/technet/community/newsgroups/faqsrwxp.mspx

2.) Locate the key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
and check if you find one of the files in there. Also have a look at
the "RunOnce" key, because this one will be checked on startup,
although the entries will be deleted afterwards - the program could
simply add itself again each time it has been loaded

3.) You probably already checked it, but have you recognized any new
items in your "autostart" folder? Files can also be hidden, so you
wouldn't see them without unhiding files.

4.) If the program is stored as a known dialer or stealth software,
you could also remove it through "Anti-spyware" tools like "AdAware"
(www.lavasoftusa.com/ - free) or "SpyBot"
(http://www.safer-networking.org/index.php?page=download - free) -
best use both of them, because they sometimes miss potential files.

5.) Have a look at your "software" entries in your control panel and
look for any new programs and also progs like "SaveNow",
"WeatherCast", "WindowFind" and so on - remove them, restart your
computer and look for "bridge.exe" and the other files, delete them,
restart again and check if they have been restored.

Hope this helps, otherwise please comment and I will try to help!

Sascha
Subject: Re: Rogue Site-unwanted programs-unable to delete all
From: swafnil-ga on 23 Mar 2004 05:35 PST
 
So you're having Spyware on your system, as I have seen now:
http://www.spywareguide.com/product_show.php?id=516
http://www.2-spyware.com/parasite-hxdl.html
-> the removal process is also described on the above URLs

Good luck and remember to install some "Anti-Spy" software tools to
block these unwanted parasites!

Sascha
Subject: Re: Rogue Site-unwanted programs-unable to delete all
From: soulfulpsy-ga on 24 Mar 2004 07:05 PST
 
Thanks, Sascha.  I will check into this.  I was able to eliminate most
of the problem when I used hijackthis.exe; at least the rebirth of the
programs stopped.  But I am very glad to know about the source of this
problem in XP since I was trying to solve a new MSIE problem (the
"_blank" browsers now open truly blank -- no content) by uninstalling
MSIE and starting from scratch.  But XP recreates the program and all
its files instantly.  Like Zombies.
Subject: Re: Rogue Site-unwanted programs-unable to delete all
From: loki008-ga on 24 Mar 2004 23:15 PST
 
i would recomend going to download.com and getting a program called
ad-aware and run that once a week, that should remove most if not all
of the problem programs

http://download.com.com/3000-8022-10214379.html?tag=lst-0-2
Subject: Re: Rogue Site-unwanted programs-unable to delete all
From: graspsome-ga on 29 Mar 2004 22:04 PST
 
It seems you have some sort of browser hijacker. I'd recommend this
shareware "Spybot - Search & Destroy" it scans for spyware, adware,
hijackers and other malicious software.
http://www.safer-networking.org/index.php?page=download
Subject: Re: Rogue Site-unwanted programs-unable to delete all
From: floe-ga on 30 Mar 2004 01:25 PST
 
Not entirely relevant... but to avoid these problems in future, you
can switch to mozilla or firefox browsers... you'll lead a happy,
patch-free, hijacker, trojan-free life...
Subject: Re: Rogue Site-unwanted programs-unable to delete all
From: dezzarezza-ga on 30 Mar 2004 11:53 PST
 
The best progams to use are :- Lavasofts - adaware, CWShredder -
Soeperman enterprises and Hijack this - Soeperman Enterprises. These
are all available free. Just stick them i  google. I have used all of
these and had great success.

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  


Google Home - Answers FAQ - Terms of Service - Privacy Policy