Win 2K full of spyware/dialers/malware

  Chegs ® 23:30 25 Apr 2004

I have just offered to help a mate out who knows naff all about PC's to rid his machine of (at last count 1500+ spyware/malware)a collection of nasties.He used AOL's free trial to get online,and went surfing.As him and his family are turkish,and their english isn't to brilliant rather than try and explain what he needs to do I have the PC here.I have installed AdAware/Spybot S&D/SpywareBlaster and used "Stinger" and Trends "Housecall" to check for trojans(fortunately he had none)I have removed a heap of "CoolWebSearch" entries,and disposed of several dialers.I have reset IE to google,but after every restart it changes to a porn page,and I cannot find whats causing this.There is also a persistent "Click Me!" icon(with IE logo) that keeps returning,and I cannot locate this one either.I have been regediting,but cannot find the W2K version of "MSCONFIG"
I was tempted to simply wipe the HDD and reinstall,but I dont have access to any W2K install CD's.This PC was supplied "ready to go" but without even a "recovery" partition/CD(s)

  hugh-265156 23:32 25 Apr 2004
  VoG II 23:36 25 Apr 2004

CWShredder click here

  Chegs ® 00:14 26 Apr 2004

Thanks Guys,anything else I should know about fixing this lot?

  temp003 02:24 26 Apr 2004

If you want to stick to msconfig, it's better to have the XP version instead of the 98 version.

click here and click the word "here" underneath the screenshot for the download.

But a 3rd party startup manager is usually more flexible and gives you more info, such as Mike Lin's Startup Control Panel click here

For obstinate spyware, Hijack This gives you really thorough information on internet settings, plugins, browser help objects, startup applications and running processes. click here It's quite powerful so be careful in using it. If in doubt, post back.

  Chegs ® 02:38 26 Apr 2004

Thanks mate,I had already used HijackThis,I got it from VoG's link.I finally found the "Click Me!" files,deleted them and checked IE still worked(before emptying bin)as they were masquarading as IE install/repair files.The CWShredder has left AdAware/SpyBot little to do,other than remove the odd cookie,so I have returned to my own puter and will let him have his back tommorow.Now all I have to do is persuade him not to go with AOL(as this is the second PC I have had to sort after the owner strayed in the seedy corners of the net)or if he must,then contact them and advise them of his experiences,as the previous PC owner did and AOL gave him the latest version of AOL connection software(it apparently carries extra blocking abilitys)and 6 mths free dialup account.

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

AMD Radeon Adrenalin release date, new features, compatible graphics cards

Print designer Kelly Anna on confident mark making & modern femininity

New iMac Pro release date, UK price & specs rumours

Comment créer, utiliser et supprimer son compte Facebook ?