View Single Post
  #38  
Old August 9th 04, 06:07 AM
GaryC
external usenet poster
 
Posts: n/a
Default Ask Windows XP Expert Walter Clayton About Spyware

Walter: NAV found a trojan horse called pwsteal.banker.b on my machine. NAV
has denied access to the file but NAV always generates a pop up. It seems to
me that the trojan horse is succesfully isolated but a program is constantly
calling for it....therefore the NAV popup. The suggested Symantec fix says
to repair the registry in safe mode. I've never edited the registry before.
I have a couple of questions:

1) how do you backup the registry in WinXP Home Edition, and

2) Symantec says to delete certain values after navigating to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft NT\CurrentVersion\Winlogon\Notify\f3dsl
and to HKEY_LOCA-MACHINE\System\CurrentControlSet\Control. I can't seem to
find these. Are these in XP?

Thanks,

"Walter Clayton" wrote:

First thing is to try running Norton in safe mode (reboot the machine, start
tapping F8 while the BIOS is POSTing to get the boot menu then take the safe
mode option. If you can't get to safe mode that way, use msconfig
(start-run-msconfig) boot.ini tab. Enable the safeboot option and leave
the option for minimal boot set. If you have to use msconfig to force
safemode don't forget to reverse the process in order to return to normal
mode).

Run NAV in that environment.

If that still fails, I need to know specifically what NAV is calling the
nasties. There's some other free tools and options that can be used, but
stay with what you have at present. Depending on exactly what you've been
hit with you may have to be talked through manual removal.

--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org
http://support.microsoft.com/servicedesks/fileversion/default.asp|


"novice77" wrote in message
...
Could you tell me how to get rid of adware from my pc. Norton scan tells
me I have 9 threatning files but can't delete them.



"vtx" wrote:



Ads