Delete registry back-ups

[Beast]

i have a problem. i have been at my friends dad's store trying to remove spyware/adware/trojans/about:blank hijackers. i got rid of all the trojans/viruses in safe mode using ewido fully updated, trojan hunter fully updated, symantec client fully up to date, MS antispyware, adaware, spybot, xoftspy, ad aware away, cws shredder, everything all up to date, and all ran in safe mode to get rid of the stuff, it gets rid of it, but it comes back when i go back into normal windows. this is windows 2000. i want to maybe find out if the problem with the spyware keeps coming back from a registry backup windows/spyware program made and it keeps restoring it back to where all the spyware was in there. is there anyway to remove registry back-ups in windows 2000? or would this just be pointless to do?

 

[Spineshank]

Do you know exaclty what spyware is hanging around?

 

[daniel49]

look in the registry key hkey_local/software/microsoft/windows/current version/run and run once and look for suspicious entries if you see one that looks suspicious do a quick google to determine if its associated with spyware if it is also use the info it gives you to search your harddrive and see if its dropped a reinstaller in your system folder. typically these will put the adware back on your reboot.


ie if an entry in run was c:/system32/adbdfg.exe
I would be suspicious research it and get rid of it.

after running all the typical spyware stuff on my sons machine a while back found about 5 more of them hiding in there I had to get rid of manually.
He was getting hijacked,popups with advertising, could not even navigate to a site with spyware in the url.

hijack this is also a great program for ferreting them out.

 

[Beast]

trek blue error nuker, homesearch, cool web search, etc, dont remember all of them because i was doing this last week, ill try to find out the others