MSNarrator: Spyware/Virus - Won't go away

EnverexEnverex Worcester, UK Icrontian
edited December 2003 in Hardware
The computer down-stairs started locking up, and it turns out that this program is screwing around with IE, making popups and normally stalling it for 5 minutes when it first starts.

The file is in the "C:\Windows\" folder and killing the process and deleting it doesn't help, as soon as you open IE, it comes back (it also adds itself to HKLM:Run).
AVG finds nothing and doesn't care about it, Spy-Bot doesn't care, Adaware doesn't care. It has somehow infested itself in Internet Explorer itself, so unless something actually detects it and cleans it, I can't think of any way to remove it.

Anyone have any idea what to do? Formatting isn't an option (3 users, LOTS of files).

The actual file itself is attached if you want to have a look at it (It blatantly isn't the real Microsoft Narrator file).

Cheers,
Ex

Comments

  • ThraxThrax 🐌 Austin, TX Icrontian
    edited December 2003
    What about Hijack This?
  • edited December 2003
    you could try deleting it, uninstalling IE, and then reinstalling IE, not sure if itll work...?
  • EnverexEnverex Worcester, UK Icrontian
    edited December 2003
    I seem to have fixed it. Something was blocking Spybot from updating, so I manually updated that and then got the newer definitions (It still doesn't think it's updated though) deleted the file again, found a few other registry entries that I have deleted and restarted.

    Seems to be ok now and it hasn't come back, so I am hoping that it has gone for good, but I think it's time I limited my brothers account on this machine to "User" and nothing higher.

    Disvengeance: It was using registry entries and classes to control everything. That wouldn't have worked.

    Cheers for the ideas.
    NS
Sign In or Register to comment.