« previous next »
Pages: 1 [2]

Author Topic: Attack of the pop up monster  (Read 4705 times)

Sindawe

  • friend
  • Senior Member
  • ***
  • Posts: 2,938
  • Vashneesht
Attack of the pop up monster
« Reply #25 on: January 10, 2006, 08:07:44 AM »
Well, if your searches online show it to be the source, delete it.  If you want to be cautious (rarely a fault), edit the name so that it no longer matches that in the registry and see if anything important is broken.

The villains who write this stuff are getting sneakier by the day.  When my workstation got hit, SpySweeper, SpyBot, AdAware, MS and Symantec all failed to clean it all up.  As I said above, I had to WATCH what was occuring and being started, then track it down my hand to kill it.
Report to moderator   Logged
I am free, no matter what rules surround me. If I find them tolerable, I tolerate them; if I find them too obnoxious, I break them. I am free because I know that I alone am morally responsible for everything I do.

Lennyjoe

  • friend
  • Senior Member
  • ***
  • Posts: 2,764
Attack of the pop up monster
« Reply #26 on: January 10, 2006, 08:31:21 AM »
Problem is, it doesnt show up anywere in the files or folders when you explore or go to regedit.  The running application is ngpw36 but the hidden program is ngpw40.  Nothing has picked it up either in normal mode or safe mode.  I'm working with the folks at spywarewarrior.com now to fix the problems.

Will see what happens.   The wife keeps screaming "reformat"  Smiley
Report to moderator   Logged

Firethorn

  • friend
  • Senior Member
  • ***
  • Posts: 5,789
  • Where'd my explosive space modulator go?
Attack of the pop up monster
« Reply #27 on: January 10, 2006, 03:31:07 PM »
Quote from: Lennyjoe
Problem is, it doesnt show up anywere in the files or folders when you explore or go to regedit.  The running application is ngpw36 but the hidden program is ngpw40.  Nothing has picked it up either in normal mode or safe mode.  I'm working with the folks at spywarewarrior.com now to fix the problems.

Will see what happens.   The wife keeps screaming "reformat"  Smiley
Boot into safemode before moving/renaming the file.

Also, check in the registry for things booted in startup.  remove the line.

I cleaned out a popup program that would replace the executable and registry entries whenever you removed them unless you were in safemode.
Report to moderator   Logged

Lennyjoe

  • friend
  • Senior Member
  • ***
  • Posts: 2,764
Attack of the pop up monster
« Reply #28 on: January 10, 2006, 07:24:22 PM »
I got it done this afternoon.  Did exactly what you said. Smiley
Report to moderator   Logged
Pages: 1 [2]
« previous next »