Unsolved
This post is more than 5 years old
2 Posts
0
5730
October 29th, 2005 18:00
How to remove adware.qoolaid from the registry?
Hi, i am new to the forum, could someone please help me with my question. I have recently purchased a Dell Dimension 3000 with windows XP home edition. As i was scanning for viruses and spyware etc, i found out that i had a few viruses which were removed except adware.qoolaid. So I went to the semantics website and tried to determine how to remove it. According to them i should do 3 things.
1 ) update my definitions. (i did that)
2 ) Rescan. (i did that)
3 ) delete the value from the registry (this is the one i am having trouble with)
Now according to them, this is how it's done
---------------------------------------------------
To delete the value from the registry
- Click Start > Run.
- Type regedit
Then click OK. - Navigate to the subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run - In the right panel, delete the value:
"winsync" = "%System%\[6 RANDOM CHARACTERS].exe" - Exit the Registry Editor.
-----------------------------------------------------------------
Now i followed the steps a, b, and c but i don't know which values to delete from the right panel, as i have 17 values in the panel but they are not all .exe files. The only 6 random character.exe is
C:\WINDOWS\system32\APD123.exe
also i have a 7 and 8 random character .exe as follows
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxtray.exe
my question is, which files do i delete, though i think i should only delete
C:\WINDOWS\system32\APD123.exe
am i right in my conclusion? Thanks for reading my thorough and stupid question. Please respond.
No Events found!


katlim38
1 Message
0
November 9th, 2005 21:00
phillyserb
1 Message
0
August 21st, 2006 23:00
http://www.majorgeeks.com/Qoofix_d5175.html
zbestwun2001
4 Apprentice
•
8.8K Posts
0
August 22nd, 2006 17:00
We need to do this..
To start with go to here and download HiJackThis to its own folder that you create on your C:\ drive at C:\HJT.
After it is downloaded open the program and click Scan and Save to log.
Post the log that it generates in the HiJackThisForum for analysis.
Steve