IWETHEY v. 0.3.0 | TODO
1,095 registered users | 0 active users | 0 LpH | Statistics
Login | Create New User
IWETHEY Banner

Welcome to IWETHEY!

IWETHEY Home / IWETHEY Board / Windows vX.X Forum / Did you try this set of instructions?
Post #189,322
by Another Scott
1/7/05 2:40:38 PM
Reply
New Did you try this set of instructions?
[link|http://help.lockergnome.com/index.php?act=ST&f=65&t=29689|Lockergnome]. It seems that a combination of booting in Safe Mode and examining logs from [link|http://www.tomcoyote.org/hjt/|Hijack This] permits VX2 to be removed.

I haven't tried it myself, and hope I don't need to...

Cheers,
Scott.
Post #189,325
by Andrew Grygus
Picture of Andrew Grygus
1/7/05 2:56:43 PM
1/7/05 2:57:52 PM
Reply
New That's for older versions
The current version leaves no trace in HijackThis AdAware or anything else, and it's fully running in Safe Mode and even Safe Mode Command Prompt so it can't be removed, and the files you find with an AdAwre scan don't really exist or can't be seen by Windows.

I tried yanking the plug so there would be no chance of clean-up and then went into Windows\\System32 from a recovery boot from CD and none of the listed files was there. Only DLLCompare can find the VX2 .dlls and does so by comparing it's own list with what Windows sees. Anything Windows can't see is suspect.

Oh, and incidentally, it updates itself to the latest version every few weeks to keep ahead of the scumware removers.
[link|http://www.aaxnet.com|AAx]
Expand Edited by Andrew Grygus Jan. 7, 2005, 02:57:52 PM EST
Expand All History
Post #189,326
by Another Scott
1/7/05 3:04:28 PM
Reply
New Joy. :-( Thanks for the info.
     VX2 - (Andrew Grygus) - (9) - Jan. 7, 2005, 03:25:28 AM EST
         Did you try the new free MS antispyware tool? - (andread) - (3) - Jan. 7, 2005, 08:00:31 AM EST
             Wanna bet... - (folkert) - (2) - Jan. 7, 2005, 09:40:48 AM EST
                 Doubtful that it works. - (Andrew Grygus) - Jan. 7, 2005, 11:12:59 AM EST
                 Re: Wanna bet... - (andread) - Jan. 7, 2005, 11:52:15 AM EST
         ICLRPD (new thread) - (drewk) - Jan. 7, 2005, 11:37:15 AM EST
         Well, I can't say . . . - (Andrew Grygus) - Jan. 7, 2005, 12:00:57 PM EST
         Did you try this set of instructions? - (Another Scott) - (2) - Jan. 7, 2005, 02:40:38 PM EST
             That's for older versions - (Andrew Grygus) - (1) - Jan. 7, 2005, 02:57:52 PM EST
                 Joy. :-( Thanks for the info. -NT - (Another Scott) - Jan. 7, 2005, 03:04:28 PM EST

What a bizarre 'field' ... all about 'Information' - and nobody has any you'd trust!
74 ms