Expert: Lorry - 9/4/2005

Question
I recieved the following message after logging onto my computer (IBM Thinkpad R40, Windows XP Pro, SP 2) the other day:

Runtime Error!
Program: C:\PROGRAM FILES\ADOESYNC\SHITNAME.EXE
The application has requested the Runtime to terminate it in an unusual way. Please contact the application's support team for more information.


I found the folder Adoesync but didn't know how it got there. This folder conatined a file called WinGenerics.dll, which a search on the web showed to be a trojan. I downloaded Symantec Spyware.Apropos Removal Tool 1.0.1, which seemed to take care of it. However, after logging onto my computer as another user, the same message appeared. I ran the Symantec Spyware.Apropos Removal Tool 1.0.1 again but nothing was found. I also downloaded RegRun Security Suite Gold 4.1 trial edition, but this is a bit too complicated for me to use.

I'm still getting this error message when a log on as the other user, however the Adoesync folder can no longer be found at all.

What's going on?


Answer
Hi J. Matthews,

Did you disbale System Restore before running the removal tool from Symantec? Very important to do so, otherwise, as you found out, it will return.

I would suggest that you go to: http://sarc.com/  Scroll down and click on,"Free Online Virus and Security Check" and run the virus check. Write down exactly anything it finds, then return to: http://sarc.com/  and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually.

Make sure that you follow the removal instructions, step by step.

Hope this helps!
Lorry