[SGVLUG] Need help with clearing popups from windows system

nix.slayer at charter.net nix.slayer at charter.net
Mon Sep 4 12:17:19 PDT 2006


Joel Witherspoon wrote:

> Tom,
>
> Try the registry. Look for anything oddly named in the startup folder. 
> Here's how to do it.
>
> Click Start>>Run
> Type regedit
> Search along the following path: 
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
>     (This the the key that calls up apps at startups. This is where 
> virus writers and spyware writers place calls to their insidious 
> files. Also, if you want to load your machine faster, reduce the 
> amount of items in this folder)
>
> Investigate and remove the paths to any oddball named files. HP 
> usually have strangely named files but they all are in folders labeled 
> "HP".
>
> In addition, open and command window (Start>>run; type cmd) and run 
> "netstat -abo". You'll get the PID and executable name that running. 
> It's a fast way to find the offending process and file.
>
>

Oh, if you want to map programs to PID's, try Foundstone's Fport
http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcontent=/resources/proddesc/fport.htm


More information about the SGVLUG mailing list