possible problem-spyware or adware

http://www.esecurityplanet.com/alert...le.php/3370301

-----Original Message-----
Windows XP Professional 2000

I was having problems with popups which shut every else I
was doing down, like games or music. I got 3 different
applications for removing trogans, worms, and
adware/spyware and they removed quite a few of each.
However, there`s still one they didn`t remove but do
notify me it`s trying to connect to internet, even when
I`m off line. Since they don`t say if this is normal or
not, I traced it to two locations, one in the registry
and one he
HKEY_LOCAL_MACHINE\Windows\CurrentVersion\RunServ ices.
The remover also told this:
Data Name=Micro Process
Data Value=dosprmwin.exe

Is this something I should manually remove or leave it
where it is? Thanks,
Pat
.

"Setec" wrote in message
...
http://www.esecurityplanet.com/alert...le.php/3370301

-----Original Message-----
Windows XP Professional 2000

I was having problems with popups which shut every else I
was doing down, like games or music. I got 3 different
applications for removing trogans, worms, and
adware/spyware and they removed quite a few of each.
However, there`s still one they didn`t remove but do
notify me it`s trying to connect to internet, even when
I`m off line. Since they don`t say if this is normal or
not, I traced it to two locations, one in the registry
and one he
HKEY_LOCAL_MACHINE\Windows\CurrentVersion\RunServ ices.
The remover also told this:
Data Name=Micro Process
Data Value=dosprmwin.exe

Is this something I should manually remove or leave it
where it is? Thanks,
Pat
.


You can certainly try to remove it manually, but it may not delete. You can
try and see if it will remove in Safe Mode. If you have multiple user
accounts on your machine, you should try removing it while logged into each
user's account.

These are general instructions for removing most all type of spywa

First, you should empty your temp folders just after re-booting. To do
this, you need to make sure that your system is set to show hidden files and
folders. Open My Computer, click on View, Folder Options, and check the
radio button to Show Hidden Files and Folders. Then browse to c:\documents
and settings\username\local settings\temp and empty the folder. Next
browse to c:\windows\temp or c:\winnt\temp whichever the case may be and
empty that folder. Next, empty your recycle bin. Then start Ad-Aware and
if you haven't already done so today, click on Check For Updates. Scan your
system and remove everything it finds. The repeat the scan over and over
until everything is removed. If you get to a point where you still have one
or a few that won't remove, then you can post a message at
www.lavasoftsupport.com and someone will gladly help you remove the rest.

Important: If you have multiple user accounts on your machine, then you
should perform the above process while logged into each user's account.

Good Luck

-----Original Message-----
"Setec" wrote in
message
...

http://www.esecurityplanet.com/alert...le.php/3370301

-----Original Message-----
Windows XP Professional 2000

I was having problems with popups which shut every
else I
was doing down, like games or music. I got 3 different
applications for removing trogans, worms, and
adware/spyware and they removed quite a few of each.
However, there`s still one they didn`t remove but do
notify me it`s trying to connect to internet, even
when
I`m off line. Since they don`t say if this is normal
or
not, I traced it to two locations, one in the registry
and one he
HKEY_LOCAL_MACHINE\Windows\CurrentVersion\RunServ ices.
The remover also told this:
Data Name=Micro Process
Data Value=dosprmwin.exe

Is this something I should manually remove or leave
it
where it is? Thanks,
Pat
.


You can certainly try to remove it manually, but it may
not delete. You can
try and see if it will remove in Safe Mode. If you have
multiple user
accounts on your machine, you should try removing it
while logged into each
user's account.

These are general instructions for removing most all
type of spywa

First, you should empty your temp folders just after re-
booting. To do
this, you need to make sure that your system is set to
show hidden files and
folders. Open My Computer, click on View, Folder
Options, and check the
radio button to Show Hidden Files and Folders. Then
browse to c:\documents
and settings\username\local settings\temp and empty
the folder. Next
browse to c:\windows\temp or c:\winnt\temp whichever the
case may be and
empty that folder. Next, empty your recycle bin. Then
start Ad-Aware and
if you haven't already done so today, click on Check For
Updates. Scan your
system and remove everything it finds. The repeat the
scan over and over
until everything is removed. If you get to a point
where you still have one
or a few that won't remove, then you can post a message
at
www.lavasoftsupport.com and someone will gladly help you
remove the rest.

Important: If you have multiple user accounts on your
machine, then you
should perform the above process while logged into each
user's account.

Good Luck

Well, I tried doing what you suggested, but there is no
Folder Option to show hidden Files and Folders shown, nor
was there wasn`t a button/option called "Radio"! I have
all the updates. And according to lavasoft support, I
have to buy the full version to get the help there,
something which I`d rather not do. Money`s tight right
now. Any other suggestions?
Thanks,
Pat
.

"Pat" wrote in message
...

-----Original Message-----
"Setec" wrote in
message
...

http://www.esecurityplanet.com/alert...le.php/3370301

-----Original Message-----
Windows XP Professional 2000

I was having problems with popups which shut every
else I
was doing down, like games or music. I got 3 different
applications for removing trogans, worms, and
adware/spyware and they removed quite a few of each.
However, there`s still one they didn`t remove but do
notify me it`s trying to connect to internet, even
when
I`m off line. Since they don`t say if this is normal
or
not, I traced it to two locations, one in the registry
and one he
HKEY_LOCAL_MACHINE\Windows\CurrentVersion\RunServ ices.
The remover also told this:
Data Name=Micro Process
Data Value=dosprmwin.exe

Is this something I should manually remove or leave
it
where it is? Thanks,
Pat
.


You can certainly try to remove it manually, but it may
not delete. You can
try and see if it will remove in Safe Mode. If you have
multiple user
accounts on your machine, you should try removing it
while logged into each
user's account.

These are general instructions for removing most all
type of spywa

First, you should empty your temp folders just after re-
booting. To do
this, you need to make sure that your system is set to
show hidden files and
folders. Open My Computer, click on View, Folder
Options, and check the
radio button to Show Hidden Files and Folders. Then
browse to c:\documents
and settings\username\local settings\temp and empty
the folder. Next
browse to c:\windows\temp or c:\winnt\temp whichever the
case may be and
empty that folder. Next, empty your recycle bin. Then
start Ad-Aware and
if you haven't already done so today, click on Check For
Updates. Scan your
system and remove everything it finds. The repeat the
scan over and over
until everything is removed. If you get to a point
where you still have one
or a few that won't remove, then you can post a message
at
www.lavasoftsupport.com and someone will gladly help you
remove the rest.

Important: If you have multiple user accounts on your
machine, then you
should perform the above process while logged into each
user's account.

Good Luck

Well, I tried doing what you suggested, but there is no
Folder Option to show hidden Files and Folders shown, nor
was there wasn`t a button/option called "Radio"! I have
all the updates. And according to lavasoft support, I
have to buy the full version to get the help there,
something which I`d rather not do. Money`s tight right
now. Any other suggestions?
Thanks,
Pat
.


Pat,

Sorry, but I left out one step which I guess led to some confusion. Open up
My Computer, click on View, Folder Options, click on the View tab, and check
the radio button that says Show Hidden Files and Folders. Radio is just a
term used for the round boxes you check vs. a square box that you check.

As far as support from Lavasoft, you can get direct support from them for
paid versions only. But you can get free support from them by posting a
message at www.lavasoftsupport.com, just as you did here.

Sorry for the confusion. Let me know if you have any other questions.

Good Luck