Forum Home
Press F1
 
Thread ID: 71090 2006-07-26 08:28:00 Hijack. Cicero (40) Press F1
Post ID Timestamp Content User
473773 2006-08-11 21:05:00 This is how I fixed it. Also works for most of spy wares or at least this is my first step in line of defense
1. Start or open the command prompt (one of way doing it is Start->run->cmd<enter>)
2. Go to directory where spy ware got installed in this case it was c:\Program Files\intcodec
3. Give command 'ren *.* *.txt' (not all files will be renamed. It will show xyz file is being used and blah blah..)
4. Give another command from same directory 'move *.txt C:\RECYCLER'
5. From same directory run isauninst.exe file which uninstall the codec
6. Try to run the other un????.exe also (if possible) (in most case message box tells you to reboot the system so after one attempt dont do it else you may end up rebooting you system 100 times)
7. Shutdown XP to restart, after initial hardware (BIOS) bootup messages keep pressing F8 key to run XP in safe mode
From Advance option select XP Professional Safe Mode or Safe Command Prompt mode
8. After system bootup, command prompt will be displayed (In safe mode, command prompt will look like all big fat letters)
9. Go to to same directory in this case c:\Program Files\intcodec
10. delete every thing in that directory with 'del *.*'
11. goto c:\Program Files directory
12. remove intcodec directory with 'rd intcodec' command
13. restart the XP with task manager (Ctrl+Alt+Del) or with shutdown command
14. After restart go to recycle bean in file explorer and empty it
15. Open registry editor with regedit and find all keys with intcodec in it
16. Delete those entries and keys too
17. Go to Control Panel->Add Remove Program remove any Internet Explorer security bar with yellow colored sun as icon to left
18. Will show error occurred while removing so and so, its ok as we deleted it manually in safe mode
19. And you are good to go. It cleared this stuff, so be happy and have good night sleep
mdk (10821)
473774 2006-08-11 22:19:00 hey Thomas..:p

does that mean you lost everything? no back ups?

:confused:

beetle
As this is a toy for me Beet,all that is lost can be found again, over time.

Billy that safe stuff is for cissy's not ciccy. ;)
Cicero (40)
473775 2006-08-11 22:52:00 Hi C. Sympathy...... Have you noticed how many visitors/viewers your post has had? Astonishing. Scouse (83)
473776 2006-08-11 23:59:00 Hi C. Sympathy...... Have you noticed how many visitors/viewers your post has had? Astonishing.
Should I cry or what S.?
Cicero (40)
473777 2006-08-12 01:04:00 mdk

So. How do you remove the other six active un-named files that it puts in the System32 directory ??
Pancake (6359)
473778 2006-08-12 02:55:00 Hi C. A small charge per head for looking might ease the pain? Or are you just feeling grumpy? Scouse (83)
473779 2006-08-12 03:56:00 I must assume that they were all hoping I had been Hijacked en route to Pakistan. Cicero (40)
473780 2006-08-12 05:05:00 C. You must admit that in the present environment your header does have certain connotations. Scouse (83)
473781 2006-08-12 06:22:00 S,I can but agree with you,I know you are easily upset. :rolleyes: Cicero (40)
473782 2006-08-12 18:04:00 Pancake's tool worked like a charm,......thank you so so so so much, god bless you and all your children, present or future Mickey101 (10820)
1 2 3 4