Crazy spyware problem

[ZGangsta]

Ok, here’s the situation. I was trying to install some free guitar tab software, and the site I got it from looked good, the EULA was clean, so I went ahead. BAM, the biggest torrent of spyware I’ve ever seen is tossed onto my system. I swear it was like Vietnam on my system as I scrambled to fix stuff. Millions of popups, installers just randomly running that I couldn’t abort, hell.

So I managed to quiet everything down, killed the 12 (yes 12) IE toolbars, uninstalled all the software, and ran all the spyware killers. Everything is back to normal exept for 1 thing. There is still one popup (Search results for poker online) that keeps appearing in an IE window (even though Opera is my default browser) every minute or so. I went for dinner and came back with like a million windows to close. I’ve run spybot, ad-aware, Giant, and Hijack-this, and it remains.

I’ve traced the problem to the key “kalvsys” in HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr entVersion\Run.

It shows up everytime I run Spybot as: Elitum.EliteBar

It shows up everytime I run Ad-Aware as: Ebates Moneymaker

Giant shows nothing

Hijack This shows: O4 - HKLM\..\Run: [kalvsys] C:\winnt\system32\kalvins32.exe

Everytime I delete this (in any program) it reappears the next time it’s run. If I delete the key in the registry it reappears after about 5 seconds. If I rename it, a new key appears. If I change its value data (C:\winnt\system32\kalvins32.exe) it resets itself. Oh I can’t find C:\winnt\system32\kalvins32.exe either.

[Red Hot Thumbtack In The Eye]

So I managed to quiet everything down, killed the 12 (yes 12)

 

That's awesome.

 

Get Firefox, consult pinned thread. That should do ya.

[ZGangsta]

Gee, get Firefox, wow that sure is usefull advice. Considering I've been USING FIREFOX for ages. I never touchded IE. And did ya miss the part where I said I used every spyware removal software on the planet already.

Sorry If I come across as a dick, but I'm at my wits end here and pretty much everywhere I turn I get some generic-ass "gee look at the pinned thread"/"get some spyware removal programs dood"/"IE sucks."

I know what I'm doing here. I've been pouring through the regisrty manually in safe mode for the last couple days.

If you don't know a solution, just say so.

[Red Hot Thumbtack In The Eye]

Now, how was I supposed to know that you use Firefox?

 

That generic responce is used because it solves 98% of the posts of this nature that show because shits don't pay attention. Maybe there's something in that pinned thread that you could try?

 

Google the names of the keys and shit infecting you. I find fixes for those things when I do that if the programs don't get it. They usually show up on the windows site or some other reputable place.

 

Furthermore and finally, fuck off with the attitude

[The Man in Blak]

Here's a couple of fixes I found:

 

http://www.computing.net/security/wwwboard/forum/14438.html

http://forums.designtechnica.com/showthrea...p?threadid=5986