PDA

View Full Version : Spybot doesn't autorun after I restart my computer



MidwestDrummer
2006-10-13, 01:22
Hi everyone! I'm a long time Spybot userm but a first time poster. I'm hoping someone might be able to help me remedy a problem. I'm currently in the process of trying to remove a trojan, spyware and adaware:

7FaSSt
BookedSpace
Command Service

Spybot finds all of these problems, but is unable to fix/remove them right after it finds them. It then asks me if it's ok to run again after restarting my computer, because the problems can't be fized until after a restart. Without hesitating, I click yes, and proceed to restart my computer. Upon putting in my password and logging onto Windows, nothing happens. So, I ran Spybot again (it found the problems again), clicked yes when prompted again, and proceeded to restart in Safe Mode. Again, Spybot doesn't run after a restart. What's wrong?!

Any insight/assistance would be greatly appreciated.

Thanks!
Zach

md usa spybot fan
2006-10-13, 07:14
When you indicate to run Spybot at the next system startup the following entry should be added to registry:


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"SpybotSnD"="\"C:\\Program Files\\Spybot - Search & Destroy\\SpybotSD.exe\""
The user must have authority to add that entry and the addition of that entry can not be blocked with any software designed to prevent changes to startup entries.

When running in Safe Mode you must manually start Spybot.

**********************

If you can't remove the problems with Spybot, consider posting in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum and having someone help you get rid of them.

The instructions for running preliminary scans, producing logs and posting in that forum are outlined in the following reference:
BEFORE you POST and Who will advise you. Preliminary Steps!
http://forums.spybot.info/showthread.php?t=288
After completing those steps, start a new thread (topic) in the following forum (making sure to include the HijackThis and online scan logs produced from the instructions above):
Malware Removal
http://forums.spybot.info/forumdisplay.php?f=22

MidwestDrummer
2006-10-13, 20:59
Well, I was going to attempt to back up my registry and then add that line, but it seems that I can't even access my registry. Whenever I go to Start > Run > then type "regedit" and click OK, I get the following message:

regedit is not a valid Win32 application

Call me an idiot, but I'm not so far gone that I'm gonna need to reinstall XP, am I?

md usa spybot fan
2006-10-14, 07:20
I suggest that you post in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum following the instructions above.

md usa spybot fan
2006-10-14, 17:21
MidwestDrummer:

According to LonnyRJones (http://forums.spybot.info/member.php?u=45), a Member of Team Spybot, infections such as Look2Me prevent the adding of entries to the RunOnce registry key. He is not sure why "regedit" is not working.

Again I suggest that you post in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum and have someone take a look at your system.