A Learning Experiance..xpantivirus2008...

[Steerpike]

I'm learning so much about dll files and config sys and regedit and all those wonderful things...safe mode too!
If I could only find the wonderful person who developed this spyware I would certainly give him/her the reward they deserve...

I get rid of it...but it comes back on reboot...so i must search for all the little places this bastard hides...and someday I will be free again...

we could have a whole continuing thread on how to get rid of spyware...and it would make all of us more knowledgable about our computers and just how they work!

[hobbit709]

1. Turn off system restore

clean the infection, reboot and it should be gone. System restore acts like a virus at times. That also wipes the restore points with the virus still in it. Once you're clean you can turn restore back on.

[Steerpike]

2. Thank you!

Right now I'm wandering through my registry. The domains section is inhabited by a few hundred websites I've visited. Just the names...the folders are apparently empty.

[Jazzgirl]

3. Listen to hobbit.

Turn off system restore then clean your system. If you use it then turn it back on after everything is clean. I don't use it. I backup to an external drive every week. The worst case scenario for me is I get a week old image restored. I think I can deal with that.

[Prisoner_Number_Six]

4. Here ya go

http://www.bleepingcomputer.com/forums/topic111715.html

I put together one or two tips on killing such beasties from my experience- a lot of the hiding places for spyware will be the same as for a virus. Hope this second link advances your knowledge a bit in any case.

http://www.democraticunderground.com/discuss/duboard.php?az=view_all&address=242x18605