Spyware that Adaware and Spybot can not remove

Mata

I removed it with this method (Or at least I havent seen it back yet after several restarts)


This thing uses diffrent names on the *.dll so to find it you can use this prog "VX2.BetterInternet Finder (List & Log)" @ http://download.broadbandmedic.com/

or search for *.cpy.dll and whatever comes up is the name on your computer.

First update Adaware. Disconnect from Internet (dont know if you have to but better safe then sorry). Run adaware and let it remove everything it finds. Dont restart!

Then with regedit go to:

Hkey_local_machine\software\microsoft\windows nt\current version\winlogon\notify\guardian

In the left hand Right click on the guardian folder and select permissions
Advanced button
Uncheck inherit from parent permissions


You will have to click remove on the first little window that comes up .
Then you will have to click apply, and then ok.

After that you will have to remove the offensive files.

The two files you probably want to delete are :
C:\WINDOWS\SYSTEM32\akmpvcno.cpy.dll
and
C:\WINDOWS\SYSTEM32\akmpvcno.dll

You may be able to delete akmpvcno.cpy.dll once you remove the permissions from 'guardian' I think. However, you will have to restart your machine to remove akmpvcno.dll

So restart, This worked for me, but my 'offensive' files were named afsldpc.cpy.dll and afsldpc.dll adaware only noticed afsldpc.cpy.dll .

I should also note that I am using windows XP home. I knew this worked right away when I restarted because it didn't sit there loading up my personal preferences FOREVER anymore.

good luck and i hope this works for you too.
(p.s. do an adaware scan after you are finished to see if you actually killed it, and to clean out all the gunk it leaves behind)


Then with regedit go to:

Hkey_local_machine\software\microsoft\windows nt\current version\winlogon\notify\guardian

In the left hand Right click on the guardian folder and select permissions
Advanced button
check inherit from parent permissions that you uncheckd before. And then delete the guardian key.

This works for at least some of the versions of this damnded .Vx2.BetterInternet.

dj_stick

hmm - just let spybot and adaware run after reboot - disappeared

__________________

Mata

Well the version I had prevented adaware from starting after reboot.

The_Neon_Cowboy

lol even if...


for one it's altered your windows securty! for 2 its so delply inbeded it mabe in part still in there

__________________