|
Posted by =?Utf-8?B?QW5keU1hbmNoZXN0YQ== on August 23, 2005, 5:42 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Try using Ewido Security Suite and L2MFix as I think this is going to be
hard work for standard removers both the above are free and I believe the new
look2me is really difficult and the other is probably related to Qoologic
Trojan both use random names and drop files all over the place which can
regenerate after being removed so go for the 2 removers previously suggested
then use the two I posted above and use L2mfix in normal mode then it will
reboot the machine and perform the clean up with Ewido update in normal mode
and run the scanner in safe mode also it may help to get Ccleaner to remove
all the temp and unused files after the clean up as there probably will be
more files in there.Both are easily available on the net and should make
things abit easier to remove in my view
Let us know if you have problems
Regards Andy
"David H. Lipman" wrote:
>
> | On an XP Pro system with SP2, I've been struggling with the file sspdkp.exe
> | in \windows\system32 that keeps coming back after it is deleted via booting
> | to the command prompt. It appears in the registry under local
> | machine\software\microsoft\shared tools\msconfig\startupreg. I deleted all
> | and after a short period of time after loading the desktop, Microsoft
> | Antispyware will popup a windows saying it blocked sspdkp.exe, but it really
> | didn't. It is back.
> |
> | I know that there is another exe or dll file that is generating the
> | sspdkp.exe. By the way, there is no physical connection to the internet
> | during the entire time I've been working on this. This system also had
> | adware.look2me. It kept coming back until we finally figured out the root
> | source.
> |
> | As the Beatles would say, help me if you can!
> |
> | Thanks,
> |
> | Bob
>
> As you can see, deleting a file is not enough. You need to use appropriate
anti malware
> applications.
>
> Besides MS AS, use Ad=aware SE v1.06 and SpyBot Search and Destroy v1.4 (both
fully updated)
> and see if they don't remove the rest of the adware/spyware.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>
|