WizYo Sytes Net: Adware launching Media Player

What a great place to share :) Here you will find flashes of brilliance caught for all the world to enjoy. .. Actually, these are brief articles describing how I fixed a problem. Every day, I find information online that helps me solve a mystery. So this is me giving back to the community. Thanks for stopping by.. and don't forget to tell your friends!

Adware launching Media Player

Adware.QoolAid got it's little hooks into a WinXP system and launched Windows Media Player during startup. Media Player's program file was a little off: gbzpzwj.exe

A few other notable items:

ntud.exe - kept appearing in All Users' Startup
joqaab.exe - appeared in System32 repeatedly
Norman API-Hooking Helper had registry keys with permissions set to deny removal

for some reason, computer management fails to open. i got around it by opening MMC.EXE and then opening the item required.

this particular system has had other techs start cleaning it, but adware remained. no telling what all has been damaged during the infection/cleaning processes.

( )

Tuesday, August 23, 2005

- Previous -

	Frozen servers courtesy of APC and Sun !

	Mas90 - Crystal Reports "database in use" Printing...

	Inaccessible or incorrect ( USB ) boot device?

	Batch file for using NTbackup to CD

	Windows repair on Citrix server may make matters w...

	Stop in the name of free space

	Reindex RentRoll

	LinkSys BEFSX41 reboots unexpectedly

	Elite fix script

	Yes, XP's recovery console works on Win2K

- Search -

0 Comments: