An Adware found in my system, currently running Windows XP.  Cannot remove   thru Microsoft Antisoftware, Lavasoft Ad-Adware

Information about the threat location

File Name: (DrPMon Print Monitor) Transponder.ABetterInternet.DrPMon
Type: Adware
File Path: c:\windows\system32\drpmon.dll
Pubilisher:  Direct Revenue
File Size: 28160 bytes.

Pls help me to remove and get rid of this adware.
Thanx..
ohh....gee that rough.  What kind of stuff is it doing?  Have you tried deleting the file manually?


Scan from safe mode.

To start with I would like you to do this

Please delete your temporary files by deleting all files and folders that are in those folders (do not delete the temp folder itself) like for example
C:\WINDOWS\Temp\
C:\Temp\
C:\Documents and Settings\username\Local Settings\Temp\
Also delete your Temporary Internet Files, be sure to also select delete all offline content.

Do a virus scan  good online scanner is at :  http://housecall.trendmicro.com.

If you get report of files that can’t be cleaned / deleted please write down the filenames and locations and post that in your reply.

Then please do this since it’s better to use automated tools to get rid of the bad stuff use these 2 programs first before doing the final cleaning with HJT

First use Spybot S&D.
http://www.safer-networking.org/index.php

Unzip,  and update. Install the updates and run. Delete all that it marks in red.
Reboot

Then it’s time for Ad-Aware
http://www.lavasoftusa.com/software/adaware/

Install and update by using the globe ICON. Restart your computer and run Ad-Aware.
Press scan now and select drives and/or partitions to be scanned. When done select all and click next. Remove all checked items and then reboot your computer.

Please go to this page and read the instructions for how to configure Spybot S&D & Ad-Aware www.zerosrealm.com/scanning.php and read up:  How To Setup Spybot SD and Ad-Aware

i'll come back later and CHECK up.
globalpal_ooty.......  Ok .....here's what to do ........reboot into safe mode .......

then shut down system restore .

Go into contol panel .........folder options ....click on the view tab .... now mark show hidden files and folders ...click aply and ok .

now run your scan with Ms antispyware .......... it should find it and remove it ......


let us know

dl65  What does this spyware/adware does:

First it shows an error msg as follows:
"NOTICE: If your computer has errors in the registry database or file system, it could cause unpredictable or erratic behavior, freezes, and cratches.

Would you like to install WinFixer 2005 to check your computer for free? (Recommended)"

If we give OK or Cancel

A Security Warning error showing
"http://winfixer.com/pages/scanner/WinFixer2005Scannerinstall. signed on an unknown date/time and distributed by
Vantage Software Inc.
You should only instal view

If I press Yes or No
It autmatically installs

Then ads pop up then and there
as Aurora - part of ABI Network......
..........
Repair and protect ur PC with WinFixer.......

I am ABLE to remove it completely, but it happens again and again when I open internet explorer.. Quote

I am able to remove it completely, but it happens again and again when I open internet explorer

C:\Documents and Settings\Administrator\Local Settings\Temp\Temporary Directory 2 for hijackthis.zip\HijackThis.exe