help req regarding spyware

Discussion in 'Computer Forum' started by yogeshkohli, Mar 13, 2005.

  1. yogeshkohli

    yogeshkohli New Member

    hi ppl
    i got this spyware called best search on my laptop and im not being able to remove it can someone help.
    :nw: :eek:: :eek::
     
  2. light_of_erindi

    light_of_erindi New Member

    go in safe mode.....
    run Ad-Aware/Adblaster/MS Antispyware ...whateva....with latest updates
    u'll get rid of most of the files.....

    if that doesn't work.....do this.....
    when u dial up to a connection....keep the task manager open and look for suspiciously spawning processes.....note their ID and kill them
    Then look up (do a search in) ur registry for the same ID ....and delete all the keys associated with that ID .
    Further..... look especially in these folders...with view set to show all files including hidden and OS critical....
    c:\windows
    c:\windows\system32
    c:\windows\restore
    c:\windows\temporary internet files......don't look manually into this ....do a search

    also look into cookies for username@adapplication.com...ot whateva....here username is ur username in XP and Adapplication is in ur case bestsearch.
    delete them and clear ur browser cache.

    Then look into folowing registry folders
    hkey_local machine\software\microsoft\windows\run
    hkey_local machine\software\microsoft\windows\runonce
    hkey_local machine\software\microsoft\windows\runservices


    hkey_current_user\software\microsoft\windows\run
    hkey_current-user\software\microsoft\windows\runonce

    look for the "\software\microsoft\windows\run" folder in every section of registry

    delete any suspicious IDs u find in here.....most critical ones are decribed beside the actual key so u won't delete them ....the spyware is most probably named antiware or something of the sort

    DO NOT delete atleast these... hkcmd, igfxapp, imapp, navag


    phew......!!and lastly report it as new spayware to thw Anti spyware site so that next time they probably have the update for this.....:):)
     
  3. yogeshkohli

    yogeshkohli New Member

    thnx a lot for ur help
     
  4. jayswami

    jayswami Blue J

  5. yogeshkohli

    yogeshkohli New Member

    thnx jayswami
     
  6. rabi_sultan

    rabi_sultan <Bulla Ki Jana>

    i personally think he needs one of these
     
  7. rizaaj

    rizaaj Forum Leader

    @Light of erindir.. thanks man .. it was useful for me too.

    @Rabi - *shocked*
     

Share This Page