Spyware, Can't delete registry keys!!!

[Keith]

I have the BTIEIN and the ALTNET spyware entries in my registry. I
can't delete them. Yes, I've tried Ad-Aware, SpyBot S&D, and HiJAck
this. None worked. Yes, I've tried using regedit and changing the
permissions on the keys (I am an admin on the machine). Isn't there a
Microsoft person out there who can tell us how to delete a darn
registry key? The folks who wrote the spyware sure know how.
Help???????!!!!!!!!!

[David H. Lipman]

What version of Adaware ?

--
Dave




"Keith" > wrote in message
oups.com...
| I have the BTIEIN and the ALTNET spyware entries in my registry. I
| can't delete them. Yes, I've tried Ad-Aware, SpyBot S&D, and HiJAck
| this. None worked. Yes, I've tried using regedit and changing the
| permissions on the keys (I am an admin on the machine). Isn't there a
| Microsoft person out there who can tell us how to delete a darn
| registry key? The folks who wrote the spyware sure know how.
| Help???????!!!!!!!!!
|

[Keith]

Version 6.0. I also get the latest update (definitions) each time I
run it.

[Lanwench [MVP - Exchange]]

Keith wrote:
> Version 6.0. I also get the latest update (definitions) each time I
> run it.

That version is old and not supported - it won't do you much good. You need
to download the latest one - AdAware SE Personal (1.05?) and update, then
scan.
Also try Spybot 1.3.

Both can be downloaded from many places, including www.download.com

[David H. Lipman]

As moted by Lanwench, you need to replace that version.

Here is a set of instructions to follow...



1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download Sysclean.com and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt335.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adaware with the latest definitions.
3) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode and shutdown as many applications as possible
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) Create a new Restore point


* * * Please report your results ! * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html





"Keith" > wrote in message
oups.com...
| Version 6.0. I also get the latest update (definitions) each time I
| run it.
|

[Keith]

Well, I tried all that. Several times. Doesn't work. Those registry
keys are still there, and so is my spyware. I can re-run AAW 1.05
fifty times in a row (I have) and every time it finds the same two
"Critical Objects". Then I delete them and run it again. And it finds
them again. Also - the Sysclean didn't work, nor did disabling system
restore, using safe mode, yada yada. Sorry - I really don't mean to
sound ungrateful, I truly do appreciate the suggestions (otherwise I
wouldn't haev posted here). Just thoroughly disgusted.
Thanks.

[slurp812]

get the latest pattern files for both, and reboot in SAFE mode, then
scan...
Sometimes that works where all else fails...


Keith wrote:
> *Well, I tried all that. Several times. Doesn't work. Those
> registry
> keys are still there, and so is my spyware. I can re-run AAW 1.05
> fifty times in a row (I have) and every time it finds the same two
> "Critical Objects". Then I delete them and run it again. And it
> finds
> them again. Also - the Sysclean didn't work, nor did disabling
> system
> restore, using safe mode, yada yada. Sorry - I really don't mean to
> sound ungrateful, I truly do appreciate the suggestions (otherwise I
> wouldn't haev posted here). Just thoroughly disgusted.
> Thanks. *



--
slurp812
------------------------------------------------------------------------
Posted via http://www.mcse.ms
------------------------------------------------------------------------
View this thread: http://www.mcse.ms/message1336587.html

[Jyrki Nivala]

Keith wrote:
> I have the BTIEIN and the ALTNET spyware entries in my registry. I
> can't delete them. Yes, I've tried Ad-Aware, SpyBot S&D, and HiJAck
> this. None worked. Yes, I've tried using regedit and changing the
> permissions on the keys (I am an admin on the machine). Isn't there a
> Microsoft person out there who can tell us how to delete a darn
> registry key? The folks who wrote the spyware sure know how.
> Help???????!!!!!!!!!
>
Did you try this already:
http://www.microsoft.com/downloads/details.aspx?FamilyID=321cd7a2-6a57-4c57-a8bd-dbf62eda9671&DisplayLang=en

"Windows AntiSpyware (Beta) is a security technology that helps protect
Windows users from spyware and other potentially unwanted software."

[David H. Lipman]

Well you are going to have to do more work.

Run MSCONFIG and uncheck programs and/or services that look suspicious then reboot the PC
then run Adaware in Safe Mode and then perform a deep scan and remove all identified
objects.

--
Dave




"Keith" > wrote in message
oups.com...
| Well, I tried all that. Several times. Doesn't work. Those registry
| keys are still there, and so is my spyware. I can re-run AAW 1.05
| fifty times in a row (I have) and every time it finds the same two
| "Critical Objects". Then I delete them and run it again. And it finds
| them again. Also - the Sysclean didn't work, nor did disabling system
| restore, using safe mode, yada yada. Sorry - I really don't mean to
| sound ungrateful, I truly do appreciate the suggestions (otherwise I
| wouldn't haev posted here). Just thoroughly disgusted.
| Thanks.
|

[Keith]

Well, you're not gonna believe this. I figured it out. It turns out
it was my wife (the other user on my XP machine) must have been the one
who downloaded/installed the stuff, b/c I signed on as her and was able
to delete the registry keys no problemo. Also - I downloaded
Microsoft's new Beta spyware tool - that thing KICKS ASS!!!! Anyway,
thanks for the help all.
Keith

[David H. Lipman]

Great !

Glad to hear it.

--
Dave




"Keith" > wrote in message
oups.com...
| Well, you're not gonna believe this. I figured it out. It turns out
| it was my wife (the other user on my XP machine) must have been the one
| who downloaded/installed the stuff, b/c I signed on as her and was able
| to delete the registry keys no problemo. Also - I downloaded
| Microsoft's new Beta spyware tool - that thing KICKS ASS!!!! Anyway,
| thanks for the help all.
| Keith
|

[al]

Hi Keith,
I too am very annoyed with the Altnet spyware. How exactly did you remove it
from your system?I tried changing the permissions and ran Spybot, AD-A-WARE
and Microsoft antispyware beta but it still shows up in the registry.Did you
run the Microsoft antispyware in safe mode?I have my wife and 2 kids on my
computer under Windows XP log ons and tried running the Microsoft antispyware
using their log ons and I still can not remove the Altnet spyware.I think it
was loaded under my daughter's log on and tried to run all these programs
using her name but it says it removed it,and it still shows up in the
registry. I am so glad someone was able to get rid of it, please tell me how.
Thanks,
Al


"Keith" wrote:

> Well, you're not gonna believe this. I figured it out. It turns out
> it was my wife (the other user on my XP machine) must have been the one
> who downloaded/installed the stuff, b/c I signed on as her and was able
> to delete the registry keys no problemo. Also - I downloaded
> Microsoft's new Beta spyware tool - that thing KICKS ASS!!!! Anyway,
> thanks for the help all.
> Keith
>
>