aagh

[den]

I let a kid on my system to "look for game cheats." As soon as I left the room he surfed for porn and something (not Gater or Kaza) installed on my system. There were a bunch of icons for porn, adult material, free music etc on my desktop.

But

Something has installed into my registry that kicks off a little thinky in my systray. It calls itself "Music Search Online" but clicking on it takes me to a hard-core porn site. I CAN'T GET RID OF IT!

Every time I boot windows something in the regsitry kicks off and creates a *random_name*.TPM file in the windws/temp dir, and runs THAT. I can't find the reg key! dammit! I really don't want to delete system.dat and user.dat and reload windows again. What a pain in the arse.

Any gurus out there?

actually, I might del the registry. It's badly bloated.

Comments

[skipai.livejournal.com]

If this has happened with 5 days or 5 reboots you could use scanreg /restore in dos and restore a old registry before this action occurred. I had mine set up for 99 days. Never know you know ;)

That or you could use and download ad-ware which could scan the registry and startup files to see where it's at.

Also, have a look in autoexec.bat, config.sys, win.ini, system.ini and startup list in msconfig. Type that in run command. Then you can go to system configuration.

Take a look in there for any entries that you know for certain shouldn't be in there and un-tick it. Then go into the registry and look for any instances that go to the path on the drive for a particular item, name of start up. You could get rid of the button thing by checking explorer settings. But I ain't in 98 right now so I can't give you the exact path in the registry to check.

Only other solution is to look in your history and see just where he had surfed to and see what would've been installed.

That or format and start again from scratch and don't let him near the computer again to do this.

[dewhitton.livejournal.com]

Thanks Skip! You gave me a clue that let me track down the offending proggy! Ta mate.