Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.



  • Please log in to reply
3 replies to this topic

#1 backstabbed


  • Members
  • 2 posts
  • Local time:05:35 PM

Posted 19 August 2006 - 10:35 PM

I dlete the file and registry it comes back anyone know the main file thats recreating this? or anythiing?, this is realllly annoying!


BC AdBot (Login to Remove)


#2 rowal5555


    Just enough info to be armed & dangerous...

  • Members
  • 2,644 posts
  • Gender:Male
  • Location:St Kilda, Dunedin. South Island. NZ
  • Local time:10:35 AM

Posted 20 August 2006 - 01:25 AM

Hi backstabbed. It would appear you are infected, check out the startup tab at the top of this page.

To fix this, follow all the steps in this tutorial, and good luck.

Whatever you do, don't use HiJackThis without help. This can disable your system.


rowal5555 (Rob )                                                             

Avid supporter of Bleeping Computer's
Team 38444

You can help find a cure


#3 acklan


    Bleepin' cat's meow

  • Members
  • 8,529 posts
  • Gender:Not Telling
  • Location:Baton Rouge, La.
  • Local time:03:35 PM

Posted 20 August 2006 - 02:41 AM

If you are using XP try a Restore Point to a point before the problem.
"2007 & 2008 Windows Shell/User Award"

#4 quietman7


    Bleepin' Janitor

  • Global Moderator
  • 51,769 posts
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:35 PM

Posted 20 August 2006 - 07:14 AM

If your running Win XP/2000, download and scan with Ewido Anti-Spyware v4.0 in "SAFE MODE".
Print out the Ewido Install and Scan Instructions.

Ewido will create a report that shows it removed this malware with an entry similar to this:
C:\WINDOWS\system32\javaup.exe -> Trojan.Agent.bi : Cleaned with backup

If not, then download and scan with the free F-Bot Cleaner Tool.
1. Unzip (extract) the F-Bot utility from the ZIP archive. Read "How to create/extract a ZIP File in Win XP" if unsure how to do this.
2. Run F-Bot.exe by either double-clicking on it or start from COMMAND.COM or CMD.EXE by typing: "F-Bot.exe" at the command prompt and pressing 'Enter'.
3. Reboot the system.
Note: You must be logged in as Administrator or as a user with local admin rights for this tool to work effectively. The F-Bot tool unpacks several files into a temporary folder on a hard drive. These files are not deleted after the tool finishes cleaning a computer. The unpacked files can be deleted manually any time after disinfection.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users