Software

Ask something
Discussion Locked

how to remove malware

0 helpful
5 replies

by dkzgambo 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

i have malware from VX2 and begin2search vendors on my computer. i run ad-aware se everyday. it detects and deletes it everytime. i have noticed that there is a process called drpmom.dll that runs.

I want to completely rid the malware. what should i do?

NOTE:
Editing keys in the registry dont seem to be working. its as though there is a hidden application/process that executes at startup.

i've heard of "highjack" thing but dont know how it works. Any help is appreciated

5 replies

by j.lupo

This question has been answered quite a bit here in TQ&A.

Basically you want to boot in safe mode and then run your malware program like Hijack This or Ad-Aware. They are fairly easy programs to run. Just follow the on screen directions.

Good Luck.

by dmiles

1. Boot into Safe Mode with Networking (some spyware can only be removed in Safe Mode).
2. Turn off System Restore in Windows XP/ME.
3. Open Add/Remove programs and remove any application that both you and the principal user do not recognize or deem to be spyware.
4. Install a licensed antivirus product; update and run it on the infected system. (i.e. AVG, NOD, etc.)
5. Install Spybot Search & Destroy. Update and run it on the infected system.
6. Install at least two licensed anti-spyware products such as Spy Sweeper, Microsoft Anti-Spyware, Pest Patrol and/or Ad-Aware. Update and run them on the infected system.
7. Launch HijackThis and click the "Do a system scan and save a logfile" button. Copy and paste your HijackThis log into the textbox at this URL for analysis: http://www.hijackthis.de/index.php?%20langselect=english
8. Use HijackThis to remove anything in the Nasty category.
9. Reboot and run Spybot and commercial anti-spyware products until the system is clean. You may have to run more than one, but Spy Sweeper is my personal favorite.
10. Launch Internet Explorer and browse the Web to verify Winsock was not broken while removing spyware. If you cannot browse the Web, run the LSPfix utility and perform another Web test.
11. Turn on System Restore.

This discussion is closed to new replies.