Undeletable adware... 15 replies

  • 1
  • 2

Please wait...

aeroSPACE_engineer

Something less arrogant

50 XP

20th October 2005

0 Uploads

1,050 Posts

0 Threads

#1 12 years ago

I was just browsing the internet today, and clicked on what appeared to be a harmless link, next second there were about 16 Norton Internet Security windows open. Next second I had unplugged my PC from the network... and thus the internet. Norton had blocked most of the attacks perfectly, a small number of files got through, I scanned with Norton and there were 17 files in total. I was able delete all but 4 of them there and then. These are the 4 identified by Norton, that it could not delete: C:\WINDOWS\system32\wuauclt.dll C:\WINDOWS\system32\pikapa.exe C:\WINDOWS\system32\kelmk.dll C:\WINDOWS\system32\ioapipn.dll Apart from the first one, I can't find any reference to the others on the internet... which would suggest to me they are definitely not essential to windows... Does anyone happen to know if these files are important, or just adware so I can delete them myself?




Rookie VIP Member

128,030 XP

3rd May 2005

0 Uploads

11,953 Posts

0 Threads

#2 12 years ago

The only essential one I can see there is wuauclt.exe, that's part of Windows Update - although so saying it isn't unheard of for certain Ad/Spy/MalWare to replace system processes with hacked versions. Try running SpyBot or AdAware to be sure. The others definately aren't part of Windows, as far as I know, unless you have another program that uses those files...




aeroSPACE_engineer

Something less arrogant

50 XP

20th October 2005

0 Uploads

1,050 Posts

0 Threads

#3 12 years ago

I don't want to install any additional adware/spyware software... partly because it uses more space, partly because Norton is sufficient, and partly because it would cause conflicts and probably lower my PCs defenses. I did think wuauclt.dll was the only necessary one... If anyone has heard of the other I would like to know, if I can't find out anything about them soon, I will delete manually... However, wuauclt.dll has clearly now been altered by adware, I can of course get Norton to ignore it, but I think it would be better to fix it somehow... any ideas about the best way to proceed with that. I believe it will involve backup files in the system backup... but I'm not sure of all the implications so... help would be in order.




marvinmatthew

Tech is where you'll find me..

50 XP

13th April 2005

0 Uploads

3,627 Posts

0 Threads

#4 12 years ago

You might try restoring your registry to an earlier version. If I'm not mistaken, system restore actually backs up your registry whenever it creates a system checkpoint. So you might try running system restore and reverting to an ealier regestry.




Rookie VIP Member

128,030 XP

3rd May 2005

0 Uploads

11,953 Posts

0 Threads

#5 12 years ago

If you're concerned about wuauclt.exe, just perform a repair from your XP disc. That will revert it to the version supplied with Windows.

SpyBot runs "on-demand", there are no background processes, so you may want to get that - I can't speak for AdAware though, since I don't have it. In any case, it's wise to have a few scanners lying around for emergencies - as long as you don't run them all at the same time, that could cause conflicts.




marvinmatthew

Tech is where you'll find me..

50 XP

13th April 2005

0 Uploads

3,627 Posts

0 Threads

#6 12 years ago

Well if you want real time protection, you should give Microsoft Antispyware a try. It provides decent real-time protection and creates 'system check points' that lock down certian parts of your computer from being changed (for example, it dosen't allow your IE start page to be changed without asking you first if you want the page to be changed.).

EDIT- I should also point out that it's free through Windows Update.




aeroSPACE_engineer

Something less arrogant

50 XP

20th October 2005

0 Uploads

1,050 Posts

0 Threads

#7 12 years ago

Yes... I shouldn't really be saying why, but I can't download things from Windows update on demand (Automatic update still works) and I can't use the original XP disc... both for essentially the same reason. I just want to know how to fix wuauclt on it's own without having to completely restore the system... which would cause other programs to lose most recent data. There is a folder called something like system backup... if I just copy the file from there over to the active system32 folder should that work?




Dragokatzov

GF is my bext friend *hugs GF*

50 XP

24th January 2005

0 Uploads

1,363 Posts

0 Threads

#8 12 years ago

try microsoft anti-spyware too! it works great!




Mere_Mortal

C&C Generals INI Coder

50 XP

4th November 2004

0 Uploads

480 Posts

0 Threads

#9 12 years ago

For the record, wuauclt.dll is not related to Windows Update, let alone being a Microsoft file. It is classified as a threat and should be removed. The other three files do not bring any results on Google, therefore they can be regarded as "random filenames", generated by one of the main files for whatever you've contracted.

This may be a Look2Me or SearchMiracle infection, possibly even Aurora related.

Best bet is to get [HijackThis] and post back with a saved logfile.

Also run an online scan [here] using Internet Explorer. Be sure to go into Settings and elect to scan for Extended Threats. Then proceed to scan the entire partition. The results can be saved using either the onscreen buttons or the browser's File menu, which I recommend appending to this thread. Note that this scan does not remove anything, but is superior to most other online scans, if not all.

Regards, M_M




Mere_Mortal

C&C Generals INI Coder

50 XP

4th November 2004

0 Uploads

480 Posts

0 Threads

#10 12 years ago

(duplicate)




  • 1
  • 2