Discussion Locked

Kazaa Problem ???

0 helpful
8 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Computer running Windows XP and problem started after someone recently downloaded the program Kazaa on a computer in the lab...

Now I can't seem to REMOVE that program from the computer. Everytime I go to ADD/REMOVE programs and restart the computer the program appears back on the computer.

AND, I am unable to update the critical/security updates as well as any of the windows updates. When I go to install these updates, it appears to be installing them however, after I do the restart Kazaa reappears and none of the updates have applied.

HELP!! HELP!! I have no idea how this happened or what to do?

Thanks!

8 replies

by help4u

Use system restore to go back to a point before Kaaza was installed. First, delete all temp files and clear your internet cache and cookies. The reinstall likes to hide there. once you do that, try system restore.

by blackdiamond

Hey,
Here is a link to KazaaBegone. I have never used it so I don't know how well it works.

http://tinyurl.com/h8cj

I Got these steps off the web for a manual removal. I would recommend running Ad-Aware after either of these options to makesure it is clean.
http://tinyurl.com/du0h

Canning Kazaa

Here's what I have done to remove Kazaa's sleeper software from my clients' machines. These steps may not be suitable for all computers and software configurations.

1. Shut off Kazaa,by right clicking on Kazaa icon next to clock.

2. Left click on "turn kazaa off"

3. Click on "Start," "Settings," "Control Panel"

4. Click on "Add/Remove Programs"

5. Select Kazaa and "Add/Remove"

6. When it is done, close all open windows.

7. Click on "Start," and then go to "Search" or "Find" (the word will vary depending on the version of Windows you use). Search for Kazaa.

8. It should find a single directory, called Kazaa. Delete this directory. You will lose all your files, so if you want your files, copy them to another location.

9. Restart your computer.

10. Go to "Search/Find" and search for a "BDE" folder. You're likely to find it in the "WinNT" or "Windows" directory. Once you do locate it, look insideit for a file called "bdeclean.exe." Run the "bdeclean.exe" file. When it is finished, delete the BDE folder.

Warning: Many computers have a Borland Database Engine, which also produces a BDE directory. If you're not exactly sure that you have the right BDE, don't delete anything, and find someone to help.

11. Delete the "BDE" folder.

At this stage, Kazaa and Brilliant's sleeper software is at least unconscious, if not completely dead. It has remnants left, but I believe they're harmless.

12. If you insist on pressing on, look in your computer's Temp director for a folder called "Brilliant." Delete it and all of its contents

by dmiles

Here I will add some shit that is neither advanced or directly related to cleaning Kazaa of spyware.

Uninstalling Kazaa: Updated on 25/12/2002: A Kazaa uninstaller is available! It covers all versions of Kazaa as well as the bundled software thatcomes with it, you can download it here: KazaaBegone.

The Benjamin worm: There appears to be a worm spreading on the Kazaa network (also the KazaaLite and Grokster since these use the same network) named Benjamin, which masks itself as other files (mostly [something]-installer and [something]-downloader in the results list) to trick you into downloading and running it, after which it uses a SHITLOAD of disk space (and I mean several hundreds of megabytes) to generate copies of itself with literally thousands of possible names, and shares these over Kazaa. It also opens up a webserver that only servers banner ads, and uses up alot of CPU resources.
To see if you are infected with it, search for EXPLORER.SCR on your system.
To get rid of it, delete the Registry value System-Service at HKLM\Software\Microsoft\Windows\CurrentVersion\Run, reboot, and delete EXPLORER.SCR and the folder Temp\Sys32 in your Windows folder. An up-to-date virusscanner will also do this job for you, ofcourse.

The popups that appear even after deleting CyDoor: I had lots of emails saying popups still appeared after cleaning out all the shit from Kazaa. When you use Kazaa, it creates kmdb.html in your Windows\Temp folder which is opened in a popup every now and then. To stop this, block the server from which kmdb.html fetches the ad. In my case, this was ad.nl.doubleclick.net. So open up your Hosts file and add 127.0.0.1 ad.nl.doubleclick.net to the bottom. Reboot and everything should work fine.

This discussion is closed to new replies.