Google Answers Logo
View Question
 
Q: getting rid of spyware ( No Answer,   9 Comments )
Question  
Subject: getting rid of spyware
Category: Computers
Asked by: slots0-ga
List Price: $20.00
Posted: 23 Nov 2004 08:36 PST
Expires: 23 Dec 2004 08:36 PST
Question ID: 432903
Does anyone have an absolute cure for the following wuactld.exe
explor.exe msrpc32.exe
Answer  
There is no answer at this time.

Comments  
Subject: Re: getting rid of spyware
From: madim-ga on 23 Nov 2004 12:39 PST
 
First lets see what is running on your PC, there is a good chance that
you have additional Trojan horses or viruses on your computer.
Go here http://www.cybertechhelp.com/html/downloads/download.php/id/40
and download the latest version of Hijack This (remember where you
saved it), unzip
it in a permanent folder such as C:\HJT\, double click HijackThis.exe,
and hit "Scan". When the scan is finished, the "Scan" button will
change into a "Save Log" button. Press that, save the log, Ctrl-A to
Select All, and post your log here.

Most of the files listed will be harmless and/or required, so do not
make any changes just yet.
Subject: Re: getting rid of spyware
From: banjobarry-ga on 23 Nov 2004 15:58 PST
 
I got this information from the trendmicro anti-virus database on their website:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_AGOBOT.MA

Solution:

Identifying the Malware Program 

To remove this malware, first identify the malware program. 

Scan your system with your Trend Micro antivirus product. 
NOTE all files detected as WORM_AGOBOT.MA.
Trend Micro customers need to download the latest pattern file before
scanning their system. Other Internet users may use Housecall, Trend
Micro?s free online virus scanner.

Disabling the Malware Service 

This removes the running malware service from memory on systems
running Windows NT, 2000, and XP.


Click Start>Run 
In the Open input box, type: 
command /c copy %WinDir%\regedit.exe regedit.com | regedit.com 
Press Enter. Registry Editor should open. 
In the left panel of Registry Editor, double-click to the following key: 
HKEY_LOCAL_MACHINE>System>CurrentControlSet>Services 
Still in the left panel, locate and delete the following subkey: 
Monitor service 
Close Registry Editor. 
Click Start>Run, then type: 
command /c del regedit.com 
Terminating the Malware Program 

This procedure terminates the running malware process from memory. You
will need the name(s) of the file(s) detected earlier.

Open Windows Task Manager. Press
CTRL+SHIFT+ESC, then click the Processes tab. 
In the list of running programs, locate the malware file or files
detected earlier.
Select one of the detected files, then press either the End Task or
the End Process button, depending on the version of Windows on your
system.
Do the same for all detected malware files in the list of running processes. 
To check if the malware process has been terminated, close Task
Manager, and then open it again.
Close Task Manager. 
Removing Autostart Entries from the Registry 

Removing autostart entries from the registry prevents the malware from
executing during startup.

To remove the malware autostart entries: 

Open Registry Editor. To do this, click Start>Run, type Regedit, then press Enter. 
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>Software>Microsoft>
Windows>CurrentVersion>Run 
In the right panel, locate and delete the entry:
Monitor = "explor.exe" 
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>Software>Microsoft>Windows> 
CurrentVersion>RunServices 
In the right panel, locate and delete the entry or entries:
Monitor = "explor.exe" 
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>System>CurrentControlSet>Services> 
In the right panel, locate and delete the entry or entries:
Monitor service 
Close Registry Editor.
NOTE: If you were not able to terminate the malware process from
memory as described in the previous procedure, restart your system.
Subject: Re: getting rid of spyware
From: abdmanaf-ga on 24 Nov 2004 23:39 PST
 
Buy one spyware protection software. here is a good one.

http://www.webroot.com/products/spysweeper/?rc=648&ac=adw05ss

You can evaluate it initially. If you like it, buy the license for
29.95. That is what i have done (initial spyware signature download is
free. the rest needs to be paid).
Subject: Re: getting rid of spyware
From: mikepaco-ga on 26 Nov 2004 13:28 PST
 
Also Ad-Aware is a good program to remove spyware. It's completly free
as well. If you want the Pro version however you have to pay.
Download here.
http://www.lavasoftusa.com/support/download/
Subject: Re: getting rid of spyware
From: squeaksowner-ga on 26 Nov 2004 16:27 PST
 
I have success using spybot 1.3 and adaware. Both of the applications
remove malware and other applications that loads your machine up with
ad and popups. I have successfully remove over 800 these little pests
on a machine that was virtually useless.
Do a google search for these items.
Subject: Re: getting rid of spyware
From: askarz-ga on 29 Nov 2004 02:25 PST
 
Run your computer in safemode, go to the start menu (RIGHT) click on
it, then click Search, then make sure you are looking in the correct
Directory, C: most likely, search for the name of each file, one by
one, and when you get all resualts, select it and delete it.
Subject: Re: getting rid of spyware
From: bshole-ga on 08 Dec 2004 09:17 PST
 
A better solution yet would be to download Mozilla FireFox 1.0 and
never ever use Internet Explorer again.  It is a free download.
Subject: Re: getting rid of spyware
From: digitalentety-ga on 12 Dec 2004 17:06 PST
 
Try Hijackthis, its a software that checks for add-ons that have been
place with your browser.Its very effective in removing anything that
has hijacked you browser.There are many forums available for checking
Hijackthis search result, they are a google search away. Here's where
to get Hijackthis:
 
http://www.tomcoyote.org/hjt/
Subject: Re: getting rid of spyware
From: rsantos12184-ga on 30 Dec 2004 12:11 PST
 
Easy download from www.download.com adaware, spybot, spy sweeper, and
spyware doctor.. after go www.grisoft.com and download AVG free virus
protection and run the scan... you'll be golden after a defrag ;)

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  


Google Home - Answers FAQ - Terms of Service - Privacy Policy