Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
How to permanently remove a dialer program 2
- Thread starter Tina2002
- Start date
-
1
- #2
-
1
- #3
TekTippy4U
Technical User
most likely a virus worm trojan
Update your AV software - or
free online scan
also
faq608-4650
faq760-3862
some are really hard to get rid of.....such as newer variants of CWS
also see /try
for recent viruses
TT4U
Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs
Update your AV software - or
free online scan
also
faq608-4650
faq760-3862
some are really hard to get rid of.....such as newer variants of CWS
also see /try
for recent viruses
TT4U
Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs
TekTippy4U
Technical User
my mistake
actually the url is (no there)....
TT4U
Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs
actually the url is (no there)....
TT4U
Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs
I recommend using the spyware removal tools within safemode environment. To get to safe mode, reboot your computer and hit F8 a few times after POST but before WIndows Splash Screen. Choose Safe Mode and then run the programs mentioned by earlier in this thread. If that does not work download Hijackthis. If you do not know what you are doing with Hijackthis then post the log here. Only post it as last resort. Follow this FAQ
Good Luck
Art
Good Luck
Art
You might be able to find the .exe file in your C/Programs folder. If you are 100% certain that what you find is the dialer in question, remove it. The orphaned registry entry will then be harmless, and might be removable using a program such as Regcleaner, which is free and available from loads of places - just do a search.
Regards, Andy.
**************************************
My pathetic attempts at learning HTML can be laughed at here:
Regards, Andy.
**************************************
My pathetic attempts at learning HTML can be laughed at here:
- Thread starter
- #7
Hi
I downloaded cwshredder, and AdAware.
I ran cwshredder, spybot, and AdAware in the order given.
When I ran AdAware, during the scan, the screen 'jumped', and one of those screens that look something like a DOS screen popped up a few times and it said I had a Trojan Horse, and it prompted me to either say yes or no to running the program. Is that normal to have those screens show up when running AdAware?
I did not have time to see what the name of the Trojan horse was.
In any case, AdAware identified some 300 problems, I don't know if it deleted or quarantined them, I just ticked them off and clicked "Next".
However, even after doing these 3 steps, that rogue dialer was disconnecting me from the internet and redialing again.
Would anyone have any ideas as to what other I can do to get rid of this rogue dialer? I guess I can't really identify it, I don't know what it is called, and don't know how to find it yet.
I am going to find some additional AV software as posted in the faqs i have been directed to in here, thanks so much.
I downloaded cwshredder, and AdAware.
I ran cwshredder, spybot, and AdAware in the order given.
When I ran AdAware, during the scan, the screen 'jumped', and one of those screens that look something like a DOS screen popped up a few times and it said I had a Trojan Horse, and it prompted me to either say yes or no to running the program. Is that normal to have those screens show up when running AdAware?
I did not have time to see what the name of the Trojan horse was.
In any case, AdAware identified some 300 problems, I don't know if it deleted or quarantined them, I just ticked them off and clicked "Next".
However, even after doing these 3 steps, that rogue dialer was disconnecting me from the internet and redialing again.
Would anyone have any ideas as to what other I can do to get rid of this rogue dialer? I guess I can't really identify it, I don't know what it is called, and don't know how to find it yet.
I am going to find some additional AV software as posted in the faqs i have been directed to in here, thanks so much.
TekTippy4U
Technical User
Yes - Viruses cause them to Re-occur, and some are REALLY nasty to try and remove......yet there are ways. Do the online scanners, then re-run CWShredder / Adaware / SpyBot....there's always HijackThis too (read the faqs posted)
TT4U
Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs
TT4U
Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs
- Thread starter
- #9
Ok, I downloaded Panda Active Scan, and it found a problem.
However, everytime it is running, I get a couple of error messages: 1) this program has done an illegal operation and needs to shut down. and 2) Microsoft internet explorer has encountered a problem and needs to shut down.
I wonder what is up now?
Thank you so much for the tips, I really appreciate your time!
However, everytime it is running, I get a couple of error messages: 1) this program has done an illegal operation and needs to shut down. and 2) Microsoft internet explorer has encountered a problem and needs to shut down.
I wonder what is up now?
Thank you so much for the tips, I really appreciate your time!
TekTippy4U
Technical User
Your welcome
Try running it in SafeMode....
But first.
Go into Explorer and into WINDOWS and Delete all the contents found in Temporary Internet Files, History, Recent, and TEMP folders.
If you d/l the Panda EXE or ZIP file into the \Temp folder, then create it's own folder for it on C:\ (say C:\PANDA), and move it there, out of the \Temp folder.
Go Start / Settings / Folder Options / View tab and tick "Show All Files" and untick " hide extensions with known file types"
Make sure AdAware and or SpyBot has not "quarentined" the Virus file and "locked" it from doing harm, but also from you getting at it....
TT4U
Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs
Try running it in SafeMode....
But first.
Go into Explorer and into WINDOWS and Delete all the contents found in Temporary Internet Files, History, Recent, and TEMP folders.
If you d/l the Panda EXE or ZIP file into the \Temp folder, then create it's own folder for it on C:\ (say C:\PANDA), and move it there, out of the \Temp folder.
Go Start / Settings / Folder Options / View tab and tick "Show All Files" and untick " hide extensions with known file types"
Make sure AdAware and or SpyBot has not "quarentined" the Virus file and "locked" it from doing harm, but also from you getting at it....
TT4U
Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs
Some suggestions.
I've cleaned up a lot of malware recently, and generally have the most luck with SpySweeper. Download their 30-day trial version from and try it. Supplement it with Ad-Aware and SpybotS&D.
Also, be sure to run your anti-spyware apps in Safe Mode, as you'll have less problems with malware that has already loaded into memory.
HijackThis is fine if you know what to delete. You'll have to do a lot of searches until you find someone who has posted a list of files associated with a particular virus or malware. Sometimes you can find this in the manual-removal info on the Symantec or McAfee websites.
Regards,
S
I've cleaned up a lot of malware recently, and generally have the most luck with SpySweeper. Download their 30-day trial version from and try it. Supplement it with Ad-Aware and SpybotS&D.
Also, be sure to run your anti-spyware apps in Safe Mode, as you'll have less problems with malware that has already loaded into memory.
HijackThis is fine if you know what to delete. You'll have to do a lot of searches until you find someone who has posted a list of files associated with a particular virus or malware. Sometimes you can find this in the manual-removal info on the Symantec or McAfee websites.
Regards,
S
- Status