Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Cannot remove Trojan horse downloader generic kpw


  • Please log in to reply

#46
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
I actually would have thought the script deleted it.

Can you check?

If the files are gone or you can delete them easily,
copy the part in bold below into notepad and save it as clear.reg
Set Filetype to "all files"

REGEDIT4

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00212521-4FEF-4AD3-B3AA-E0531B8DC123}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{00212521-4FEF-4AD3-B3AA-E0531B8DC123}"=-


Doubleclick that file and confirm you want to merge it with the registry.

Let me know.

Regards,
  • 0

Advertisements


#47
stang

stang

    Member

  • Topic Starter
  • Member
  • PipPip
  • 43 posts
OK this is what I did just a few minutes ago. I went too. http://metallica.gee...com/alibaba.bfu and copied the script to notepad saved it in my documents restarted in safe mode and opened bfu located the script file ran the program and it looks like everything is gone. I did a reg. search for some of the reg. script info. and can't find any. I'll keep looking.........stang PS and my cpu is up to speed again.

Edited by stang, 16 January 2006 - 01:02 PM.

  • 0

#48
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Did your computer reboot after you ran the script the first time?

Check if the files are gone and stay gone when you reboot.

Great that your computer is running OK again. :tazz:

Regards,
  • 0

#49
stang

stang

    Member

  • Topic Starter
  • Member
  • PipPip
  • 43 posts
Yes, I actually ran the program three times to make sure and it rebooted each time and peer guardian could not locate the svchost file and usbadpt.dll files. I'm going to keep looking for the rest of the reg. script info. in regedit I'll get back to you before we close this.......stang
  • 0

#50
stang

stang

    Member

  • Topic Starter
  • Member
  • PipPip
  • 43 posts
Yes, I actually ran the program three times to make sure and it rebooted each time and peer guardian could not locate the svchost file and usbadpt.dll files. I'm going to keep looking for the rest of the reg. script info. in regedit I'll get back to you before we close this.......stang
  • 0

#51
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Never mind. I was dumb. :)

I always use Opera to surf and download, but you probably used IE to download the script.

So IE was keeping the files occupied untill you copied and pasted the script.

Once you did that it should have worked, as you reported. :tazz:

Regards,
  • 0

#52
stang

stang

    Member

  • Topic Starter
  • Member
  • PipPip
  • 43 posts
Hey, Metalica
It looks like everything is gone, but I'm still getting that windows message: (Windows -Delayed write failed) Windows was unable to save all data in temp. Internet explorer <<something like this, it’s always a different message...........stang
  • 0

#53
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
In IE click Tools > Internet Options On the General tab, click Delete Files in the Temporary Internet files section, select the Delete all offline content check box, and then click OK.

If that doesn't help can you copy one of the exact error messages, please?

Regards,
  • 0

#54
stang

stang

    Member

  • Topic Starter
  • Member
  • PipPip
  • 43 posts
Hey, Metalica
It looks everything is gone and back to normal and the delayed write messages stopped. We can close this issue. Thank you very much. Also I might have some off the record questions for you. Do you mind if I e-mail them to you.....stang
  • 0

#55
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
If others can learn from your questions I would prefer you to pose them here.

For other cases, you have my address. :)

Glad we could help. :tazz:
This was a nice puzzle with a happy ending. I love those. :)

Regards,
  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP