I've had to "fix" two computers over the last two weeks because of
adware/spyware. Just logging into the computer and letting it sit would
make pop-ups all over the place. Sometimes it was so bad, you couldn't
close them quick enough. I ran ad-aware and both computers had 668
infections reported. Also found another program called Spy Hunter that
found even more "infections" than what Ad-Aware reported. BUT in order to
delete these entries, you have to buy the program; $29.99.
There were .DLL's that couldn't be deleted because they were being
used (safe mode wouldn't work as well, the spyware/adware was being started
then too). One way I was able to delete them is to use task manager and
shut down just about everything; but the one computer had adware/spyware
running that wouldn't show up in task manager. In order to fix this
problem, I found a program that would allow you to copy and rename files
such as these dlls prior to your system starting (you'd run the program,
select the file you want to rename/copy, reboot and it was done). I can't
find the program right now, but I'll do some searching for it. It was
actually pretty nice.
But one other thing, if there are registry entries that you can't
delete, take permission of these entries (right-click->permissions) and
you'll be able to delete them this way as well.
I'll let y'all know if I find that program and then send it to you
off-lists.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Doug Anderson
Sent: Thursday, April 29, 2004 5:10 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] What is it?
Been there done it. Didn't work. Recover console was the only way to kill
it.
Now I'm just trying to figure what it was....maybe prevent further
infections.
----- Original Message -----
From: "Goran Jovanovic" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, April 29, 2004 4:05 PM
Subject: RE: [Declude.Virus] What is it?
Try restarting the machine in Safe Mode and then deleting it. You can
also try to rename it and then reboot to see if you can break the
startup of it.
,
Goran Jovanovic
The LAN Shoppe
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:Declude.Virus-
> [EMAIL PROTECTED] On Behalf Of Doug Anderson
> Sent: Thursday, April 29, 2004 4:55 PM
> To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> Subject: [Declude.Virus] What is it?
>
> Anyone deal with a file called AkAAMON.DLL or AkAAMON.CPY.DLL
> Adaware found it but couldn't remove it on one of our workstations.
Mcafee
> doesn't worry about it.
>
> Anyone know what it is? Only way to get rid of it is via a repair
console
> cause it was always in use/locked.
>
>
> *Scanned for viruses by Declude Virus*
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.Virus mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus". The archives can be found
> at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
*Scanned for viruses by Declude Virus*
*Scanned for viruses by Declude Virus*
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
