Expert: Lorry - 12/28/2005

Question
hi. i scanned my computer nd i have these 2 programs as a threat.  i went to regedit , nd when i delete them they come back by themselves. can u plz show me the steps on how to delete these 2 programs. i know that i can rename them but i dont know what to do next. thnx

Answer
Hi Tom,

It's easier to let a program do it for you. Go to: http://sarc.com/  Scroll down and click on,"Free Online Virus and Security Check" and run the virus check. Write down exactly anything it finds, then return to: http://sarc.com/  and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually.

I would suggest downloading Spybot - Search & Destroy 1.4, a program that removes spyware, available from:

http://www.pcworld.com/downloads/file_description/0,fid,22262,00.asp

Once installed, enable Tea Timer. Open the Spybot Search & Destroy, click  the "+" sign next to Tools on the left side of the screen, click System Startup, then on the right side of the page check HK_CU Run Spybot Tea Timer.

The Resident TeaTimer is a new tool of Spybot-S&D which perpetually monitors the processes called/initiated. It immediately detects known malicious processes wanting to start and terminates them giving you some options, how to deal with this process in the future

Hope this helps!
Lorry