Altnet Spyware

[Jubbler]

Spybot found a problem, and it will not delete, even after restarting and running again. Hijack This does not detect the problem, tried to delete registry key in safe mode, no joy. I am unable to go into regedit unless I go into safe mode. Also when I hit CTR-ALT-DEL, the window will not pop up. Would appreciate any help I could get with this one.

[badpolarbear]

Try removing the file with Killbox. Download it from here:

http://www.bleepingcomputer.com/files/killbox.php

OR try this

ltnet Removal Instructions

Before you delete it, it must have it permission changed:

Open the registry (Start->Run->regedit) and select the keys

[HKEY_LOCAL_MACHINE\Software\Altnet]
[HKEY_LOCAL_MACHINE\SOFTWARE\Altnet\Dashboard]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AltnetDM]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs]
"C:\\WINDOWS\\Temp\\Altnet\\msvcirt.dll"=dword:00000001
[HKEY_USERS\S-1-5-21-14627781-1401277002-153983898-1006\Software\Microsoft\Search Assistant\ACMru\5603]
"000"="altnet"
[HKEY_USERS\S-1-5-21-14627781-1401277002-153983898-1006\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Altnet]

Start with the top folder which is Altnet and work down and follow these instruction to change the permission for all folders.

Right click on Altnet then click on permission, click on add, click on advanced, click on find now, and look for your log on name and click on okay twice to get back to permissions for Altnet. Now, put a check mark in the boxes for allow after click on advanced, click on the tab for owner and highligt your log under 'change owner to' and check the box that say's : 'Replace permission entries on all child objects with entries shown here that apply to child objects' and click on ok, click on apply and click ok. Continue the same for the rest of the folders listed.

After the changing the permission, end the ‘Altnet’ process from the Task Manager (ctrl-alt-delete). Having successfully done this you should be able to delete the entire ‘Altnet’ folder.

[Jubbler]

[Limp]

Change the permissions on the Altnet folder to everyone. To do this right click on the altnet folder hit permissions under group or user name hit the add button then hit the advanced button in the bottom left hand corner then hit find now scroll down till you see "Everyone" highlight it and hit ok and ok again then check full control allow then hit apply then ok and then right click the altnet folder and hit delete. Also be sure that you check badpolarbears post above to make sure that you dont have any of the registry entries that are listed.
Hope this helps

[Jubbler]

I did everything that you said Limp and also deleted the files from Polar Bear's post, but when I ran Spybot again it came up with two new files that couldnt be deleted, Altnet was not there. One was called View Point, and the other is DyFuCA Internet Optimizer.

[icecube]

This should work, I've used it several times

Write down the path of the files you want to delete.

Go to Start-->Run and type in cmd and enter. move that box to the upper left hand corner. In that box change the directory path to point to the folder with the items to be removed. Leave the window open

Here's where it gets ansy. Right click on a blank area of the bottom tool bar and select Task Manager. Select explorer.exe and stop it. Your desktop just took a "lunch break."

Now go into the top window and 'del' the files in that directory that were giving you a problem.

Now go back to Task Manager and click on file and select run. Type in explorer.exe and enter. Hopefully your desktop should return from lunch and those files should be gone.

[Limp]

Supposedly you can uninstall Viewpoint from add/remove programs in control panel. I tried to uninstall viewpoint from add/remove programs and it still popped with Spybot. I have dealt with both of these before and used ad aware to get rid of them. You could give it shot. Get adaware from the helpful web links box on the upper left-hand side of this page.

Hope this helps

[Jubbler]

IceCube, I dont understand how to do that, but I tried what Limp said with the AdAware and ran that, and cleaned up those files, then I ran Spybot and the files are all gone. Thanks for all the help!!!

[icecube]

There is more than one way to skin a cat.

the easy way or my way

Score: Limp 1 Icecube 0

[badpolarbear]

[Limp]