Announcement

Collapse
No announcement yet.

can't delete aprogram ot uninstall it -please Help

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • can't delete aprogram ot uninstall it -please Help

    hi
    I have some ad-wear that i cant get off my computer- altnet.
    i've tried anything, someone please help me???

    thanks

  • #2
    Re: can't delete aprogram ot uninstall it -please Help

    Originally posted by synadler
    i've tried anything

    thanks
    like what then????? i really hate this posts... i tried anything....
    well appearantlly not anything.

    run ad-aware en run spybot search & destroy. run a virusscanner
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      "i've tried anything" means i already run ad-wear thar recognize this softwear as a threat but he didnt delete it!
      When i was searching for a virus he didnt metnion this program althogh it update regulary...
      i've tried also to delete the registry of that prog. but i can't.
      ammmm....

      so... NOW WHAT CAN I DO???

      Comment


      • #4
        already tried spybot?
        and whats the tread then? what does ad-aware find?
        Marcel
        Technical Consultant
        Netherlands
        http://www.phetios.com
        http://blog.nessus.nl

        MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
        "No matter how secure, there is always the human factor."

        "Enjoy life today, tomorrow may never come."
        "If you're going through hell, keep going. ~Winston Churchill"

        Comment


        • #5
          i've tried spybot, again - cant get it off.
          spybot says that it might be in the memory, so i restarted and again he couldnt get it off.

          I think that this prog. is related to a sound problem i have...

          Comment


          • #6
            ok, we need some more information from you. What is spybot reporting as the adware - usually it gives you a name.

            Have you started in safe mode and run spybot?

            Comment


            • #7
              hi!

              i wanted to thank you for helping me so far...

              there is steel aproblem, even i operated spybot on safe mode it didnt work, he is saying again that the prog. is in memory and ask me to restart again and check.

              i'm adding the result file of spybot, take alook on that

              ------------------------------------------------------------------------------------

              HKEY_LOCAL_MACHINE\SOFTWARE\Altnet

              DSO Exploit: Data source object exploit (Registry change, fixed)
              HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\0\1004!=W=3

              DSO Exploit: Data source object exploit (Registry change, fixed)
              HKEY_USERS\S-1-5-21-57989841-507921405-1060284298-1006\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\Zones\0\1004!=W=3

              DSO Exploit: Data source object exploit (Registry change, fixed)
              HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\0\1004!=W=3

              DSO Exploit: Data source object exploit (Registry change, fixed)
              HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Inter net Settings\Zones\0\1004!=W=3

              DSO Exploit: Data source object exploit (Registry change, fixed)
              HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Internet Settings\Zones\0\1004!=W=3


              --- Spybot - Search && Destroy version: 1.3 ---
              2004-05-12 Includes\LSP.sbi
              2004-11-29 Includes\Cookies.sbi
              2005-01-27 Includes\Dialer.sbi
              2005-01-27 Includes\Hijackers.sbi
              2005-01-11 Includes\Keyloggers.sbi
              2005-01-27 Includes\Malware.sbi
              2004-11-29 Includes\Revision.sbi
              2004-11-29 Includes\Security.sbi
              2005-01-27 Includes\Spybots.sbi
              2005-01-27 Includes\Trojans.sbi
              2004-11-29 Includes\Tracks.uti

              -------------------------------------------------------------------------------------

              as you can see ALTNET is the name of that prog.

              and again THANK YOU VERY MUCH!

              Comment


              • #8
                Have a look here http://www.scanspyware.net/info/Altnet.htm there are manual removal instructions there. I'd also turn off system restore before you do this, remove the spyware, reboot, scan again and if it is clean then turn system restore back on again.

                Let us know how you go - good luck.

                Comment


                • #9
                  system restore

                  hi

                  how can i "turn off system restore " ??

                  Comment


                  • #10
                    These links can help you to turn it off.
                    http://www.google.com.au/search?sour...tem+restore%22
                    1 1 was a racehorse.
                    2 2 was 1 2.
                    1 1 1 1 race 1 day,
                    2 2 1 1 2

                    Comment


                    • #11
                      altnet

                      hi again!

                      i've done everything, in the manual remove
                      but i cant remove altnet from the regestry, i just cant delete it

                      what can i do?

                      Comment


                      • #12
                        thank's for evreybody! - How to remove altnet:

                        i've manage to didect a way to do it with help of other forum:



                        I had alot of people asking me on how to remove Altnet.
                        I will post a set of instructions in order to remove this
                        anoying pest.

                        Firt make sure you boot in Safe Mode and remove all other spyware componets, using
                        PestPatrol, Spybot, hijackthis, etc.

                        Altnet Infection.

                        DO THIS IN SAFE MODE
                        DISABLE SYSTEM RESTORE (windows xp)
                        STOP Network Service

                        Key Infected: (Once you run the Registry Search tool will provide you with something like this)

                        Please go to

                        http://www.billsway.com/vbspage/

                        Look for Registry Search Tool, download it and run it

                        TYPE ALTNET, SEARCH

                        You must disable antivirus software so it wont block
                        your VB script.

                        ************************************************** ******************************

                        [HKEY_LOCAL_MACHINE\SOFTWARE\Altnet]

                        [HKEY_LOCAL_MACHINE\SOFTWARE\Altnet\Dashboard]

                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\App Management\ARPCache\AltnetDM]

                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\SharedDLLs]
                        "C:\\WINDOWS\\Temp\\Altnet\\msvcirt.dll"=dword:000 00001

                        [HKEY_USERS\S-1-5-21-14627781-1401277002-153983898-1006\Software\Microsoft\Search Assistant\ACMru\5603]
                        "000"="altnet"

                        [HKEY_USERS\S-1-5-21-14627781-1401277002-153983898-1006\Software\Microsoft\Windows\CurrentVersion\Exp lorer\MenuOrder\Start Menu2\Programs\Altnet]

                        ************************************************** *******************************

                        WHEN YOU RUN REGISTRY SEARCH TOOL IT WILL NOT REMOVE ALTNET, FOLLOW INSTRUCTIONS:

                        [HKEY_LOCAL_MACHINE\SOFTWARE\Altnet]

                        [HKEY_LOCAL_MACHINE\SOFTWARE\Altnet\Dashboard]

                        Run -->regedit-->HKEY_LOCAL_MACHINE-->SOFTWARE-->Microsoft-->Windows-CurrentVersion
                        -->App Management-->ARpCache-->AltnetDM(Right click this entry and Remove it)

                        Shut Down workstation, start

                        Then GO TO SEARCH:

                        C:\WINDOWS\Temp\Altnet\msvcirt.dl

                        DELETE ALL THIS FILES.....

                        ALSO CLEAN TEMP FOLDERS

                        FINAL STEP FOR REMOVAL:

                        Go to you must be logged in with Admin account or a user that has admin rights)

                        Right click the registry key Altnet then,
                        select PERMISSIONS. In the ADVANCE TAB, select your User Account name
                        then check the box to replace owner. Click OK. Next, GO TO OWNER TAB
                        and select your User Account name then check Replace owner and subcontainer and objects.
                        Click apply, effective permissions full control,select the box for full control.ok apply ok

                        YOU SHOULD BE ABLE TO DELETE THE ALLTNET KEY AND SUBKEYS

                        Comment


                        • #13
                          nasty little beggar isn't it? Good to hear you got rid of it

                          Comment


                          • #14
                            Good job Synadler!! Thanks for posting the solution, it is appreciated.
                            1 1 was a racehorse.
                            2 2 was 1 2.
                            1 1 1 1 race 1 day,
                            2 2 1 1 2

                            Comment


                            • #15
                              the end

                              thank's for every body!

                              and the name is yoav

                              bye bye

                              Comment

                              Working...
                              X