Posted 26 June 2006 - 11:00 PM
I got some odd error message thing, my pc is running really slo, and my homepage now takes me to some anti virus site thing and won't let me change it back to my road runner homepage... I brought in my norton, an xoftspy, and ad-aware to try and get rid of whatever it is. Norton deleted some stuff, ad -aware got a bunch more....and xoftspy found a bunch but...I don't have it registered so I could not remove what it found although I did delete two of the files it found manually.
I also tried that highkjack thing on this site and fixed a couple things. After all of this I have fixed a blaring virus warning message, and took off some stuff but the homepage site still takes me to the virus site, the computers still kinda slow, and when I restart my computer like 3 things come up as running in my program thing when I press ctrl alt del. they say ssecurty things and they have been there ever since the virus came. I end them by doing end tree task but they reapppear every time I restart the comp.
The main things that the xsoftspy thing still finds are "WhenUsavenow" registry key things that are located in wusn.1, software\whenu, software\classes\wusn.1,
The other is "smitfraud" which is a registry value thing located in "software\microsoft\windows\currentversion\policies\explorer\run\kernel32.dll" this is the one that I am mostly concerned about and I think this is the main problem...it lists this one as a high risk thing and I had already deleted 2 other ones named smitfraud like this one found in the windows 32 folder thing.
So what I really want to know is how do I remove this smitfraud thing and fix my homepage, and also...but less urgently, how do I removed the whenu stuff?