A word about spyware, hijacks, trojans, worms & dialers

RawAlex · 2004-04-19, 12:08 PM

MML: There are using an EXE file attached to the startup or other routine to reinstall it. Some of them actually replace the exe file of your internet explorer so that when you open a browser, they get reinstalled. Check each of your commonly used icons.

Also, in the registry, check your RunOnce and Startup sections to see what is being run at startup.

Finally, you can boot your system with verification, and check each item as it is loaded from the registry... you might be able to spot it there.

Alex

2004-04-19, 12:08 PM	#8
RawAlex Took the hint. Join Date: Mar 2003 Posts: 5,597	MML: There are using an EXE file attached to the startup or other routine to reinstall it. Some of them actually replace the exe file of your internet explorer so that when you open a browser, they get reinstalled. Check each of your commonly used icons. Also, in the registry, check your RunOnce and Startup sections to see what is being run at startup. Finally, you can boot your system with verification, and check each item as it is loaded from the registry... you might be able to spot it there. Alex