Stupid Ron
 

I picked up a Trojan Horse via MySpace.

AVG said it trapped, spybot couldn't find it, but i'm getting pop-ups for ads for spyware removal in Explorer, although I'm not using Explorer.

Any suggestions?

I was like "what did I do?"

less pron more lobster

My younger brother came to visit last year and used my desktop and got all sorts of spam and crap from MySpace. It took me a few days, using safemode to get rid of all of the junk he put on there. But I finally managed to get it together.

Adaware didn't do much for me in that particular instance. I think I used Spybot S&D and a program that let me go through the registry and get rid of things that didn't belong one by one.

Your name is Ron too?

www.pctools.com

Spyware doctor - I think it has a free scanner to at least see if it locates it. Best spyware fighter software I've ever used.

Spybot Search and Destroy is probably your next step. It has an Immunize function that helps prevent future attacks.

Another good spot for tools are the Sysinternals suites. Since Microsoft bought them, all of the tools are now available for free. They have a rootkit revealer, the best (IMO) program to list programs that load at startup, and a way to delete in-use files at the next reboot. Lots of good stuff here.

hxxp://www.microsoft.com/technet/sysinternals/default.mspx

Either that or look at a System Restore, if you haven't installed anything (else) reecently.

You have to watch out with System Restore. The more crafty malware writers have figured out how to take advantage of System Restore, and use it to reinstall the malware you spent so much time removing.

Running Spyware Doctor, ATM.

Thanks for the suggestions.

Yeah, me too....

Between Spybot and downloading CCleaner, I think I've nipped this.

Thanks for the help.

I thought it was Ron Reagan, Jr. I don't know why.

BUMP!

I apparently have only made things worse on this machine. It has a major case of "isamini.exe"-itis.

Have any of you ever removed this piece of shit before?

Thanks for the PM, I'll try it this afternoon.

surething