Re: What is SWRTG?

Run the latest versions of Spybot,Search and Destroy,CWShredder,Adaware in safe mode.
start searching by typing the name of the malware and if you find any just delete it.

Also look at the following registry points:-

Start>Run>Regedit>ok
now navigate to the following keys:-
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg

Expand all the keys by simply clicking (+)signs.

Now look at the right pane and delete any string having the above mentioned file.

Now close the registry editor.

regards,
ssg MS-MVP


vg4t3mkd8 wrote:

this is an appication that suddenly showed up

i ran adaware, spybot, and nortons av and deleted it

but it still re-appears

what is it?
how  do i get rid of it

it is 80 kb

its icon is a green plus sign

thanks 
.

Relevant Pages

  • Re: Homepage keeps resetting itself
    ... > Is there some sort of idiots method, i.e. download an *.exe, run it, ... >>>difficult CWS parasite variants to remove. ... >>>using a malware provider's uninstall, ... >>>All of these removal tools should be run from Safe mode when possible. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Error during every search
    ... Safe Mode does not suppress all integrations into the shell. ... Malware integrates into the system, ... Because the likely nexus is integration of foreign code into the ...
    (microsoft.public.windowsxp.general)
  • Re: HTML.ObjectDataHTA
    ... >most malware is actively in use during Regular Mode. ... >Safe Mode Command Prompt only because it has hooked into the gui. ... Some email apps break file attachments out of the message "text" and ... store these outside the mailbox storage in another location as files ...
    (microsoft.public.security)
  • Re: Is this a virus? Nasty enough to be...
    ... Windows, you'd Ctl+Esc, Up, Enter, Enter. ... Safe mode isn't always, as far as malware goes. ... XP restarts the whole PC whenever the RPC service ...
    (microsoft.public.security.virus)
  • Re: Internet Explorer restarts computer after going on-line
    ... was heavily infested with malware which puts the issue in another ... Since the machine can get into Safe Mode, you or your friend can try ... full-featured av, install it, update it, and do a thorough scan. ... Sysclean - TrendMicro's Sysclean is an extensive antivirus tool which ...
    (microsoft.public.windowsxp.general)