View Single Post
  #2  
Old April 9th 07, 05:02 PM posted to microsoft.public.windowsxp.perform_maintain
Ed Metcalfe
external usenet poster
 
Posts: 172
Default winlogon keyhook


"~Smurf~" wrote in message
...
I've been fighting adware on my computer furiously for a while now, and
gotten pretty good at deleting it, but now that i have windows xp, there's
certain files i can't delete because windows loads them before i ever log
in.. namely, i have a file called cg.dat located in the folder
c:\documents
and setting\~Smurf~\local settings\temp that i'm not sure exactly what it
is,
but has been positively identified as deffinate malware/adware. i've tried
deleting the winlogon notification in the registry, but since the file is
loaded, it just reinserts it into the registry as soon as i delete it.
please
help!!!!!!!


Smurf,

Killing the associated process in Task Manager before removing the reg entry
may work, or you may well find that there is another process monitoring for
it being killed, which will simply relaunch it.

Booting into Safe Mode to perform your removal usually does the trick.
Failing this I'd use a DOS boot disc to access the file without having to
open up Windows.

If you're still stuck I can highly recommend this Technet video on advanced
malware cleaning:

http://www.microsoft.com/emea/itssho...px?videoid=359

Ed Metcalfe.


Ads