- Joined
- Feb 3, 2005
- Messages
- 49
- Reaction score
- 0
Has anybody else had tihs spyware on there PC?
It's installed a toolbar (like google toolbar) in my internet explorer and I've read that it's doing a lot of bad things.
It seems to be a well known spyware and very notorious, particularly for how difficult it is to remove. I've found instructions for removing it by using google but I don't understand them, here's an extract:
Remove AutoRun Reference:
Go To the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
If you find the value HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\wintools, delete it and reboot the machine immediately.
If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\emusicclient systray, delete it and reboot the machine immediately.
If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\fash, delete it and reboot the machine immediately.
If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\wintools, delete it and reboot the machine immediately.
Link: http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453077909
I really don't understand any of this, so a more user friendly explanation would be greatly appreciated.
Thanks
It's installed a toolbar (like google toolbar) in my internet explorer and I've read that it's doing a lot of bad things.
It seems to be a well known spyware and very notorious, particularly for how difficult it is to remove. I've found instructions for removing it by using google but I don't understand them, here's an extract:
Remove AutoRun Reference:
Go To the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
If you find the value HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\wintools, delete it and reboot the machine immediately.
If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\emusicclient systray, delete it and reboot the machine immediately.
If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\fash, delete it and reboot the machine immediately.
If you find the value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\wintools, delete it and reboot the machine immediately.
Link: http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453077909
I really don't understand any of this, so a more user friendly explanation would be greatly appreciated.
Thanks