A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Performance and Maintainance of XP
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

winlogon keyhook



 
 
Thread Tools Display Modes
  #1  
Old April 9th 07, 02:42 PM posted to microsoft.public.windowsxp.perform_maintain
~Smurf~
external usenet poster
 
Posts: 1
Default winlogon keyhook

I've been fighting adware on my computer furiously for a while now, and
gotten pretty good at deleting it, but now that i have windows xp, there's
certain files i can't delete because windows loads them before i ever log
in.. namely, i have a file called cg.dat located in the folder c:\documents
and setting\~Smurf~\local settings\temp that i'm not sure exactly what it is,
but has been positively identified as deffinate malware/adware. i've tried
deleting the winlogon notification in the registry, but since the file is
loaded, it just reinserts it into the registry as soon as i delete it. please
help!!!!!!!
Ads
  #2  
Old April 9th 07, 05:02 PM posted to microsoft.public.windowsxp.perform_maintain
Ed Metcalfe
external usenet poster
 
Posts: 172
Default winlogon keyhook


"~Smurf~" wrote in message
...
I've been fighting adware on my computer furiously for a while now, and
gotten pretty good at deleting it, but now that i have windows xp, there's
certain files i can't delete because windows loads them before i ever log
in.. namely, i have a file called cg.dat located in the folder
c:\documents
and setting\~Smurf~\local settings\temp that i'm not sure exactly what it
is,
but has been positively identified as deffinate malware/adware. i've tried
deleting the winlogon notification in the registry, but since the file is
loaded, it just reinserts it into the registry as soon as i delete it.
please
help!!!!!!!


Smurf,

Killing the associated process in Task Manager before removing the reg entry
may work, or you may well find that there is another process monitoring for
it being killed, which will simply relaunch it.

Booting into Safe Mode to perform your removal usually does the trick.
Failing this I'd use a DOS boot disc to access the file without having to
open up Windows.

If you're still stuck I can highly recommend this Technet video on advanced
malware cleaning:

http://www.microsoft.com/emea/itssho...px?videoid=359

Ed Metcalfe.


 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 10:45 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.