Re: Giant red RazeSpyware ad replaced my desktop!!

Forums » Up and Running » Security » Security » Giant red RazeSpyware ad replaced my desktop!!


Share Topic:	RSS topic:	toggle: flat / full normal / watch	Posting:

Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal

Good OE Spam Filter? »
« MS delays XP SP3

bbearchs

join:2002-12-29
Clarksville, TN

Re: Giant red RazeSpyware ad replaced my desktop!!

before starting this you need to know the path to winnt and winnt\system32 directories. I am not sure if XP uses winnt or windows.
To remove this shutdown computer and boot to safe mode command prompt. Once you have made it to a dos prompt it will help if you know dos commands type in cd\ to change to the root directory. Type in cd winnt (this is the directory for 2000). You need to search the directory for files that were add on the date the red screen appeared. To do this type dir /t/p
This command will fill one screen and pause (press enter to continue). The file I found in here was desktop.html. To delete this file type del desktop.html. Next move into winnt\system32 directory (type cd system32 and press enter).
There are two files to delete in this directory (svcnt32.exe and zybigui.dll) To verify the date on these files type dir svcnt32.dll /t (do the same for the other one then delete both files. You may want to search all of system32 directory for other files added at the same time dir /t/p (there are many many files in this directory). Once you are finish type exit and press enter. Then press alt-ctrl-delete and select shutdown. After the system reboots you still have more work to do. Click start-settings-controlpanel Click display on the web tab deselect showweb content and you should be back to normal.

permalink · 2005-08-14 09:50:18 · Print ·

hmeyn

join:2005-10-15
Marysville, KS

Re: Giant red RazeSpyware ad replaced my desktop!!

Okay listen to me for a moment

The Razespyware bug can be deleted very easily

First Search for warnhp.html yes it's a internet window

Find the File and then delete it then search for razespyware.exe in the registry or other wise if you go to the registry you get there by opening the start menu and clicking on run then type in regedit this will open the registry. go to edit then to find type in razespyware.exe it will find the file and all you have to do is click on the three items in the folder all that have the same extention as the file itself has.

To get the window off of your screen just drag your cusor up to the little gray line that appears on the top of your screen click and drag the window down there will be a close button like you would see in a normal window close it then go back to the top because there will be another window after you get your cursor to the top a drop down bar will appear also with the same set up just close the window and that should be the end of this problem if you have anymore problems go to download.com and download spybot search and destroy it's a freeware so you don't have to pay for it. this should find any other spy ware you may have if this doesn't do it for you then you can also download Spyware Nuker this should also be found there if you have any other trouble just add a reply to the forum... and I'll come to you rescue...

permalink · 2005-10-15 21:43:46 · Print ·

Mackelack

join:2005-11-21

Re: Giant red RazeSpyware ad replaced my desktop!!

Hi hmeyn.

It sounds like you know what you are talking about. But i have one problem: I cant drag the window down with my cursor. I see the little green line at the top of my (red) screen, but it just doesn´t work. I´ve tried hundred times.

I´m done with the first part you described about deleting thoose files and theres nothing left there.

The red screen seems to be the only thing left for me.

Help....Plz

permalink · 2005-11-21 14:53:46 · Print ·

Anonimos @telenordia.se	Re: Giant red RazeSpyware ad replaced my desktop!! I went to controll panel-display properties-destop items then click the web tab, then under the web pages to display on your desk top it had "security" if you uncheck this and then delete it the razespyware back ground disappered
	permalink · 2005-11-21 18:12:06 ·

Mackelack join:2005-11-21	It took care of my problem. Thank you so much
	permalink · 2005-11-22 12:10:54 ·

Anon448787 @realdsl.be	Re: Giant red RazeSpyware ad replaced my desktop!! You cant check it off, just leave it checked and then delete it, else it'll still be there.
	permalink · 2005-11-27 12:20:17 ·

(topic locked)

Forums » Up and Running » Security » Security	Good OE Spam Filter? » « MS delays XP SP3


Saturday, 05-Dec 18:15:16	Terms of Use \| Privacy Policy \| Hosting by www.nac.net - DSL,Hosting & Co-lo \| feedback \| contact over 10 years online! © 1999-2009 dslreports.com.republican-creole page compression OFF