Ok computer gurus..I need help

StuntDouble

StuntDouble

Gold Member
Joined
Apr 26, 2004
Messages
2,458
Basically, I was stupid and clicked on a link that was sent by a friend of mine. It turned out to be a virus of some sort. Anyways, it looks like I've gotten rid of the virus, but I keep having issues with popups. When I run Ad-aware, it finds and deletes a program called ebates. The only problem is it keeps reappearing. The same with a folder named LQ that keeps reappearing in my registry. Any ideas on how to get rid of it? Also, if there's anyone that understands how to read a HijackThis log, let me know and I'll paste it here. Thanks
 
Download, install, update, and run the following:

1. Microsoft AntiSpyware Beta.
2. Spybot Search & Destroy.
3. Lavasoft AdAware 1.5
5. CWShredder 2.13

I don't care for HiJack This. Microsoft Antispyware Beta has a browser restore feature that works better. :)

You can also get a free virus scan at http://housecall.trendmicro.com

Cheers,
David
 
Chriss Mapp: Here is a HijackThis log tutorial. I've used it for a long time to interpret some of the results that program gives. Others are pretty obvious as well.


Fisher Of Men I am curious as to what in particular you don't like about hijack this. I've used it on a half dozen different computers that had some particularly difficult to remove "browser tools" installed on them and always got them fixed.

Of course, I also used hijack this only after using every other program you mention!
 
You have a trojan virus that's reinstalling the spyware faster than you can delete it. I've seen the same thing recently on a friend's computer.

Here are some instructions I found online for getting rid of it:

Windows NT/2000/XP/2003
In Windows NT/2000/XP/2003 you will also need to edit the following registry entry. The removal of this entry is optional in Windows 95/98/Me. Please read the warning about editing the registry.
At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.
Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.
Locate the HKEY_LOCAL_MACHINE entry:
HKLM\Software\Microsoft\Windows\CurrentVersion\
Run\ EbatesMoeMoneyMaker = <path to EBATESMOEMONEYMAKERRUN.EXE>
and delete it if it exists.
Close the registry editor.
Click to expand...
Good luck with that crap,
Bob
 
Bob W,

I looked in that location and didn't find the Ebates thing, but I did find theintranet.exe. From what I understand that may be causing my problems. I'll see what happens after I get rid of that and do another scan.
 
You must log in or register to reply here.
Back
Top