how do i find the adware/spyware parent file infected to delete it?

Question

i only have the free version of norton spyware scan from yahoo toolbar can somebody take me step by step

Answer 1

◙ Full PC security information - All in one ◙

If you think or know that you have a certain file in your computer that was infected by a spyware/adware, the only thing I would recommend is running a removal scan.

Pick one of the following programs below and let them do the work. To prevent more work than necessary I would recommend first doing an online scan for virus and spyware. There is a link below to get to scan your computer for FREE.

→ Scan your computer for spyware/adware using a FREE software from Microsoft called Windows Defender: »»http://www.microsoft.com/athome/security/spyware/software/default.mspx

→ You can download a FREE antivirus software:
»» http://www.grisoft.com/doc/Programs/lng/us/tpl/tpl01

→ MSN Toolbar, includes Pop-up blocker, Phishing filter - FREE:
»» http://toolbar.live.com/?mkt=en-us

→Yahoo Toolbar with Pop-up blocker, spyware protection...FREE
»» http://companion.yahoo.com/ie

→Google toolbar:
»» http://toolbar.google.com/T4/?rd=f

→ Scan your computer for spyware/adware:
»» http://www.pctools.com/spyware-doctor/?ref=google_adw

→ Scan your computer for virus/trojans:
»» http://www.trendmicro.com/hc_intro/default.asp

→ The Microsoft Windows Malicious Software Removal Tool checks computers running Windows XP, Windows 2000, and Windows Server 2003 for infections:
»» http://www.microsoft.com/security/malwareremove/default.mspx

→Windows Live OneCare safety scanner is a free service designed to help ensure the health of your PC:
»» http://safety.live.com/site/en-us/default.htm?s_cid=sah

→ Use Windows Update to make sure you have the latest security updates:
»» http://www.windowsupdate.com

→ You can download the latest version of Internet Explorer, it's the new version, fast, clean and secure:
»» http://www.microsoft.com/windows/ie/default.mspx?mg_ID=10010

→ Security at home:
»» http://www.microsoft.com/athome/security/default.mspx

◙ Safe Mode ◙

If none of these programs work, your next thing to do is to log in while in Safe Mode. You will have to scan for viruses and spyware in Safe Mode. To do Safe Mode in Windows XP, please follow these steps:

→ Save all your files
→ Turn off your computer
→ Locate in your keyboard F8
→ Turn on your computer and press F8 until you see a black screen with some words on it
→ From the options given, choose Safe Mode
→ You will see all these drivers coming up, wait a few seconds
→ Then you will log in using an administrator account
→ Now you will be logged in and everything will be the same except you will see Safe Mode at every corner of your screen and most of your system drivers will be turned off
→ Please load your anti-virus and spyware programs and start scaning your system

☺While the computer is in safe mode, it will have reduced functionality, but it is easier to isolate problems because many non-core components are disabled.:)

Answer 2

All of the programs listed in the previous answer are good and might help you remove the problem. There is one other method which I used which I got off of a tech board after I tried running a large variety of programs to no avail. Open your Windows/System32 file and organize the folders by date created or modified. Go to the files created or modified at the point in time that your adware problems first surfaced. Delete them in safe mode. If you place your cursor over the suspect folder, it will show you the author and the date the file was modified. If you do not recognize the author, the chances are that this is one of the files causing your problem. One of the folders I was able to find was authored by the 'Trojan Factory'. Needless to say I deleted this file and all other files I could not place with a software provider that I recognized. This was the only way I was able to solve my adware problem. Over the past several months I have had to do this twice and each time it worked. I would also get a program called Hijack this. Run the program and look carefully at any files pulled up that begin with bho. While some of these are good, the ones that are good are usually readily identifiable. Delete the files that you cannot place with a provider that you know you have on your computer. Be aware that the method I have outlined above is not without risk. It is possible that you could delete a file that you need by mistake. But it may be worth taking this risk if you have tried everything else and are still plagued by the adware problem.

Answer 3

2

Answer 4

Do a virus scan and it should locate the file so that you can clean, delete or quarintine the file.

Answer 5

http://www.microsoft.com/windows/IE/community/columns/bugbusting.mspx