Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I had to remove this malware from a friends computer, and they've infected themselves again. It's been a while since I last removed it, so can't remember the name of the program that was successful at removing it, I think it was a ".com" program (yeah, strange!).

Hopefully superuser can help, and then what works gets voted up instead of the piles and piles of junk commercial stuff that pops up in search results.

share|improve this question
up vote 2 down vote accepted

I use Malwarebytes booted into safe mode Sometimes you need to rename the .exe file, if the malware is "smart" I also have a cd-r burnt with all these malware scanners, so its read only :) This way no matter what, the malware can't delete it (though it CAN block it from running if it detects the name, so rename the .exe files)

If they re-infected you may want to update their computer to SP3 if not already as well as any other updates.

share|improve this answer
Malwarebytes worked. – Chris Mar 9 '10 at 18:29

You could also try HijackThis to remove all sorts of spyware. It is really powerfull, but also really dangerous to mess up your computer. You should first post logs so that experienced people can evaluate them.

Using HijackThis

To analyze your computer, start HijackThis and run a scan. See the Quick Start Guide [link to Quick Start, FAQs and Feedback] for help in running a scan. HijackThis will display a list of areas on your computer that might have been changed by spyware. Do not change any settings if you are unsure of what to do. There are many popular support forums on the web that provide free technical assistance by using HijackThis log files to diagnose an infected computer.

Not an expert? Just save the HijackThis report and let a friend with more troubleshooting experience take a look. A large community of users participates in online forums, where experts help interpret HijackThis scan results to clean up infected computers.

P.S: I also liked malware bytes to scan my computer when I was still using Windows. Luckily I made the switch to linux a long time ago and no more spyware :).

share|improve this answer

I used this link's manual instructions to clean the registry when I got it on my laptop a while back. Had to boot in Safe mode (F8 on startup) to delete the files.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .