Same spyware comes back after removal

  • Thread starter Thread starter Mary
  • Start date Start date
M

Mary

I'm running the new version of Microsoft Beta spyware.
The same Trojan and browser modifier come up everytime I
log on to MSN. I remove them and here they come again.
Can these be quarantined so they will not return? Any
advise would be greatly appreciated.
 
Restart in safe mode by pressing F8 before the initial Windows screen comes
up

do Full deep scans in safe mode until one comes through clean--probably 2
scans.

If that doesn't do it, write back with the name of the bug.

Oh--before doing the safe mode thing, do a Tools, suspected spyware report
and name the bug and describe what happens.
 
Hi
I too am having same problem...I think it is MidADdle
Adware a Trojan. I is a very tricky little pain in the
arse.
Here is what I have found so far to remove it.

Make sure your internet connection is turned off or
unplug the connection, or this will not work!

You need to find this folder:

C:/Documents and Settings/user1/Local Settings/Temp/

The user (example. user1 above) part of the folder name
will be different for you, depending on what you have
named your user account. Everything else should be the
same.

Once you have found that folder, open it up and delete
everything inside, but DO NOT delete the folder itself.
Since it's a TEMP folder, deleting everything will not
cause any harm to you computer, because temp files can
always be deleted.

You should get a few error messages that say something
like "Cannot delete file [name] it is already in use."
You need to press and hold ctrl+alt+delete to open up
your task manager. Click the "applications" tab. You need
to highlight the files that the error messages showed
were in use and select the button "end task" for each one
of them. Once you have done that, go back and delete
those files from the folder.

Now you need to find this folder, and do the same thing:

C:/Windows/Temp

Once you have found that folder, open it up and delete
everything inside, but do not delete the folder itself.
Since it's a TEMP folder, deleting everything will not
cause any harm to you computer, because temp files can
always be deleted.

You should get a few error messages that say something
like "Cannot delete file [name] it is already in use."
You need to press and hold ctrl+alt+delete to open up
your task manager. Click the "applications" tab. You need
to highlight the files that the error messages showed
were in use and select the button "end task" for each one
of them. Once you have done that, go back and delete
those files from the folder.

Now go the Start Menu

Select "Search"

Select "All Files and Folders"

Look in the C: drive

Search for the following files:

addit.exe
midaddle.exe
wildwintracker.exe

If they exist, delete them. If they do not, that's ok,
just move on.

Now search for these words:

midaddle
ads234

Delete anything that you find that has those names inside
of it. You will mostly find internet explorer pages that
you visited, but delete them anyway.

Now you need to open up Internet Explorer

On the top of the browser select the "Tools" menu
click on "Internet Options"
Click on "Delete Cookies" and when the dialog box pops up
select "OK."
Click on "Delete Files" and put a check next to "Delete
all offline content" then select "OK."
Click on "Clear History" and select "Yes" when the dialog
box pops up.

Check if this folder exists on your computer:

C:/Program Files/Common Files/Midaddle

If it exists, delete the entire folder, INCLUDING the
folder itself.

So after that's completed, hopefully the nightmare is
over. Restart your computer and go on the Internet. If
your browser goes directly to your homepage (and not
www.ads234.com first) you have finally beaten MidADdle.I
spent 13 hours on figuring this out and i finally got it.
I've been to many message boards about this and it seems
like this is a VERY widespread problem. If you know
anybody that's having this particular issue, consider
giving them a link to this site or these instructions.
thank you and have a nice day!


I found this info at
http://williecrawford.com/cgi-bin/index.cgi?read=14536

I hope this helps. Please let me know, Im a newbie to all
this and need all the help I can get.
 
Back
Top