View Single Post
Saintly Saintly is offline
Registered
 
Saintly's Avatar
 
Join Date: Nov 2000
Location: Sydney, NSW, Australia
Posts: 885
Did a search (should have done this first) and it's adware.
i would first make sure that you have the current version of spybot (v1.3), make sure it is updated, make sure that your immunised and then scan. then install adaware, update it and scan.
if neither can fix it automaticly then follow the manual instructions below:
good luck.

Winpup.winpup32 Manual Removal:
Follow these steps to remove Winpup.winpup32 from your machine. Begin by backing up your registry and your system, and/or setting a Restore Point, to prevent trouble if you make a mistake.
1.
Kill processes:
systemroot+\pup.exe
systemroot+\system32\20444887.exe
systemroot+\system32\23777407.exe
systemroot+\system32\24065798.exe
systemroot+\system32\25199526.exe
systemroot+\system32\27032107.exe
systemroot+\system32\4026430.exe
systemroot+\system32\61692446.exe
systemroot+\system32\64075869.exe
systemroot+\system32\6904238.exe
systemroot+\system32\73934572.exe
systemroot+\system32\75082033.exe
systemroot+\system32\77946108.exe
systemroot+\system32\8439272.exe
systemroot+\system32\92135256.exe
systemroot+\system32\96062868.exe
systemroot+\system32\winpup.exe
systemroot+\system\msdmodw.exe
systemroot+\system\sratelcm.exe
systemroot+\system\storesp.exe23058718.exe
cmpi.exe
stimem.exe
syscm.exe
trojan.win32.startpage.ae.exe
winpup32.exe

2.
Remove AutoRun Reference: Go to the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run. If you find the value dhcpv, delete it and reboot the machine immediately. If you find the value , delete it and reboot the machine immediately.

3.
Remove these DLLs with Regsvr32, then reboot:
msa32chk.dll

4.
Remove these registry items (if present) with RegEdit:
HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\explorer\pup
HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\run\asauthr
HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\run\dhcpv
HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\run\svidc32m

5.
Delete files:
systemroot+\pup.exe
systemroot+\system32\20444887.exe
systemroot+\system32\23777407.exe
systemroot+\system32\24065798.exe
systemroot+\system32\25199526.exe
systemroot+\system32\27032107.exe
systemroot+\system32\4026430.exe
systemroot+\system32\61692446.exe
systemroot+\system32\64075869.exe
systemroot+\system32\6904238.exe
systemroot+\system32\73934572.exe
systemroot+\system32\75082033.exe
systemroot+\system32\77946108.exe
systemroot+\system32\8439272.exe
systemroot+\system32\92135256.exe
systemroot+\system32\96062868.exe
systemroot+\system32\winpup.exe
systemroot+\system\msdmodw.exe
systemroot+\system\sratelcm.exe
systemroot+\system\storesp.exe23058718.exe
cmpi.exe
msa32chk.dll
stimem.exe
syscm.exe
trojan.win32.startpage.ae.exe
winpup32.exe
__________________
Saintly
'97 318Ti Sport, DASC, H&R coil overs (sold)
'07 F800ST
'10 Forester X Special Edition
Old 01-20-2005, 06:41 PM
  Pelican Parts Catalog | Tech Articles | Promos & Specials    Reply With Quote #4 (permalink)