phuquit
2011-11-29, 11:03
Hello all.
I'm trying to sort out my partners computer. All evidence suggests her system has been infected by TheRealSearch. Further enqiries suggest that CWshredder should remove this. It finds it, says it has been removed, then you scan again and there it is still there.
I have found the Spybot manual removal guide for TheRealSearch and, quite frankly, it is totally beyond me (and I'm no newbie by any means). First it says...
Please use Spybot-S&D, RunAlyzer or msconfig.exe to remove the following autorun entries.
Entries named "quicken".
Entries named "winrar".
Entries pointing to "\quicken\quicken.exe".
Entries pointing to "<$WINDIR>\editpad.exe".
Entries pointing to "<$WINDIR>\quicken.exe".
Entries pointing to "<$WINDIR>\quicken.exe".
How do you do this? As far as I can see (and believe me I've been looking at Spybot for the last hour trying to figure it out) you cannot get Spybot to look for, or remove, specific files. All you can do is scan the entire system and if it doesn't find them, it can't remove them. Am I missing something? Or misunderstanding something maybe?
Then it says...
Please use Windows Explorer or another file manager of your choice to locate and delete these files.
The file at "<$WINDIR>\editpad.exe".
The file at "<$WINDIR>\quicken.exe".
The file at "<$WINDIR>\editpad.rsf".
The file at "<$FAVORITES>\!! Free Dating Chat Program !!.url".
The file at "<$FAVORITES>\!!Best FREE adult sex sites!!.url".
The file at "<$FAVORITES>\100% Free MP3 Downloads.url".
The file at "<$FAVORITES>\Online Casino- Free $200.url".
The file at "<$FAVORITES>\Over 1 million Free XXX Pics.url".
The file at "<$FAVORITES>\Preview Adult !NEW!.url".
The file at "<$WINDIR>\editpad.exe".
The file at "<$WINDIR>\quicken.exe".
The file at "<$WINDIR>\winrar.exe".
The file at "<$WINDIR>\winrar.exe".
The file at "<$WINDIR>\winrar.exe".
The file at "<$WINDIR>\waol.exe".
The file at "<$FAVORITES>\Top FREE XXX porn Pics.url".
No root path is mentioned, I've tried an all files and folders search to no avail, exactly how do you locate these files?
At my wits end here, please someone, HEEEEEEEEEEEEEEEEELLLLP!!!!!!!!!.
I'm trying to sort out my partners computer. All evidence suggests her system has been infected by TheRealSearch. Further enqiries suggest that CWshredder should remove this. It finds it, says it has been removed, then you scan again and there it is still there.
I have found the Spybot manual removal guide for TheRealSearch and, quite frankly, it is totally beyond me (and I'm no newbie by any means). First it says...
Please use Spybot-S&D, RunAlyzer or msconfig.exe to remove the following autorun entries.
Entries named "quicken".
Entries named "winrar".
Entries pointing to "\quicken\quicken.exe".
Entries pointing to "<$WINDIR>\editpad.exe".
Entries pointing to "<$WINDIR>\quicken.exe".
Entries pointing to "<$WINDIR>\quicken.exe".
How do you do this? As far as I can see (and believe me I've been looking at Spybot for the last hour trying to figure it out) you cannot get Spybot to look for, or remove, specific files. All you can do is scan the entire system and if it doesn't find them, it can't remove them. Am I missing something? Or misunderstanding something maybe?
Then it says...
Please use Windows Explorer or another file manager of your choice to locate and delete these files.
The file at "<$WINDIR>\editpad.exe".
The file at "<$WINDIR>\quicken.exe".
The file at "<$WINDIR>\editpad.rsf".
The file at "<$FAVORITES>\!! Free Dating Chat Program !!.url".
The file at "<$FAVORITES>\!!Best FREE adult sex sites!!.url".
The file at "<$FAVORITES>\100% Free MP3 Downloads.url".
The file at "<$FAVORITES>\Online Casino- Free $200.url".
The file at "<$FAVORITES>\Over 1 million Free XXX Pics.url".
The file at "<$FAVORITES>\Preview Adult !NEW!.url".
The file at "<$WINDIR>\editpad.exe".
The file at "<$WINDIR>\quicken.exe".
The file at "<$WINDIR>\winrar.exe".
The file at "<$WINDIR>\winrar.exe".
The file at "<$WINDIR>\winrar.exe".
The file at "<$WINDIR>\waol.exe".
The file at "<$FAVORITES>\Top FREE XXX porn Pics.url".
No root path is mentioned, I've tried an all files and folders search to no avail, exactly how do you locate these files?
At my wits end here, please someone, HEEEEEEEEEEEEEEEEELLLLP!!!!!!!!!.