| rock | Good one Reaper!
I tried AdAware. I tried AVG (I'm into free stuff).
Finally, your simple solution worked. |
| HaJ | i reformatted only 2 days ago, gave my family an account each and since then there has been 20 spyware signatures and 3 virus'...this is one! |
| Reaper | This is a stupid easy trojan to remove. I checked tonnes of walkthroughs, and people make this a lot more complicated than it is. If you're running Windows XP, just start up in safe mode, then do a system search for mssearchnet.exe and nvctrl.exe. Once you find all the correpsonding files (there should be 2 of each), delete them. Then run regedit in your command console and do a registry search for mssearchnet.exe. Everywhere mssearchnet pops up, nvctrl is there too. Just delete that entire branch, as nothing else is kept in those folders.
Poof, trojan gone, not to return.
Thanks. |
| ch2 | Thanks! Worked great. Would only add that also look out for dfrgsrv.exe, which should also be removed via the same procedure. It came bundled with the other two in my case. |
| dam427 | I'd love to dole out a shot to the head of the guy who makes this stuff. |
| Blitze | they always do reaper, however my question is how does it "copy" itself as the same name in the same directory??? |
| bunney | thanks reaper that was awesome,
you're very right, i spent about 5hrs today looking through to get rid of it and installed all this antivirus and spyware crap that only slowed my computer down more... your way was the easiest and most effective so far.
thx heaps |
| Milk | Interesting note. mssearchnet.exe makes a little yellow yield sign appear in my task bar that tells me that I need to purchase specific anti spyware software, such as winfixer or spyhunter. hmm link anyone? |
| Toljo | In WinXP to prevent forever those files to execute go to: Control Panel - Administrative Tools - Local Security Policy - Software Restriction Polices - Additional Rules. Right click with mouse and chose "New Path Rule...". Write the path of the file "C:\windows\system32\mssearchnet.exe" and set The Secuity Level to "Disallowed". Then You can kill the process from the Task Manager and will never came back. |
| Ben Dixon | Thank you for the fix, it does seem that they have introduced this trojan simply to encourage you to purchase their spyware removal software. Surely something can be done when the trojan points so aggressively towards their links time and time again. |
| shane maxfield | I would love to get ahold of the company responsable for these agressive tactics. |
| Danish989 | iz mssearch.net the same as that green wheelchair?!
cuz thats what im getting
removed it, but comes back! AND, more and more spyware gets downloaded from the internet!
wats going on?!? |
