One way I found to get rid of those type is to start the computer with a DOS disk and then delete or rename files that way.
John Tolmachoff Engineer/Consultant/Owner eServices For You > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Jeff Maze - Hostmaster > Sent: Friday, April 30, 2004 5:43 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] What is it? > > I've had to "fix" two computers over the last two weeks because of > adware/spyware. Just logging into the computer and letting it sit would > make pop-ups all over the place. Sometimes it was so bad, you couldn't > close them quick enough. I ran ad-aware and both computers had 668 > infections reported. Also found another program called Spy Hunter that > found even more "infections" than what Ad-Aware reported. BUT in order to > delete these entries, you have to buy the program; $29.99. > There were .DLL's that couldn't be deleted because they were being > used (safe mode wouldn't work as well, the spyware/adware was being started > then too). One way I was able to delete them is to use task manager and > shut down just about everything; but the one computer had adware/spyware > running that wouldn't show up in task manager. In order to fix this > problem, I found a program that would allow you to copy and rename files > such as these dlls prior to your system starting (you'd run the program, > select the file you want to rename/copy, reboot and it was done). I can't > find the program right now, but I'll do some searching for it. It was > actually pretty nice. > But one other thing, if there are registry entries that you can't > delete, take permission of these entries (right-click->permissions) and > you'll be able to delete them this way as well. > I'll let y'all know if I find that program and then send it to you > off-lists. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Doug Anderson > Sent: Thursday, April 29, 2004 5:10 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.Virus] What is it? > > Been there done it. Didn't work. Recover console was the only way to kill > it. > > Now I'm just trying to figure what it was....maybe prevent further > infections. > > ----- Original Message ----- > From: "Goran Jovanovic" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Thursday, April 29, 2004 4:05 PM > Subject: RE: [Declude.Virus] What is it? > > > Try restarting the machine in Safe Mode and then deleting it. You can > also try to rename it and then reboot to see if you can break the > startup of it. > > > , > Goran Jovanovic > The LAN Shoppe > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > > [EMAIL PROTECTED] On Behalf Of Doug Anderson > > Sent: Thursday, April 29, 2004 4:55 PM > > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > > Subject: [Declude.Virus] What is it? > > > > Anyone deal with a file called AkAAMON.DLL or AkAAMON.CPY.DLL > > Adaware found it but couldn't remove it on one of our workstations. > Mcafee > > doesn't worry about it. > > > > Anyone know what it is? Only way to get rid of it is via a repair > console > > cause it was always in use/locked. > > > > > > *Scanned for viruses by Declude Virus* > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > *Scanned for viruses by Declude Virus* > > > > *Scanned for viruses by Declude Virus* > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
