Quote:
|
Originally Posted by KdLaneJr Hope the fix that Matt posted works for you. I've seen dll files added that keep putting the pop-ups back before. Nasty stuff. Had to remove the offending stuff from the registry and then locate the offending dll and get rid of it. |
And to make matters worse, sometimes (I have seen it only one time) the registry entry will be so absolutely buried within empty registry entries that there is no way to get it removed.
I have a document around here somewhere that deals with all of the different tricks that were known about to embed spyware/malware into a system, and I have to say that some of them are just plain nasty.
.dll's that keep a process locked so that it can't be terminated, and a watcher program to run that will keep restarting and re-registering the watcher should it be terminated, and the original offending program that can't be shut down directly has a built in watcher, to protect it's protector. Very nice triangulated protection, all the while building in functionallity that watches for any changes to the current registry entry.
Really really nasty stuff, that only a format will take care of -- or at least that was the only thing that I found to take care of it. Luckily this wasn't on one of my personal machines, and I had the option to format to fix it.