Solve : pctatletail carnt remove it?

1.	Solve : pctatletail carnt remove it?
Answer» Hello,i have a new dell xps 210,vista primium.It has PCTATLETAIL, since day one XOFTSPY,SE detects it but dose not remove it,not even in safe mode. I have AVG,AVG SPY,SPYWARETERMINATER,AD AWARE SE, SPYWARE DOCTOR,SPYWAREDETECTOR,ADVANCED WINDOWS CARE V2, AVAST,SPYBOT SEARCH+DESTROY,CCleaner..i have ran them all in safe mode with no luck..im just an average user,any advise please. thanks for your time............ Is this your COMPUTER or do you share it with others? Who else uses this computer? PC Tattletale is a monitoring program that has to be manually installed. This program was likely added intentionally. You may want to talk about this with your parents, sibling(s), or anyone else who has access to your computer.Thanks,CBMatt no i got it myself about 2 weeks ago it had mcavee security suite on it trial 30 days but that was useless so i got a free firewall of pc doctor for vista,that wouldnt install properly,so im just on vista firewall now.So i think maybe it got through Macavee,no one else uses this but me?? Is there a prog i COULD buy££ to get rid as it seems very stuborne.... thanks for your time..............paul420 ......Quote Thanks,CBMatt no i got it myself about 2 weeks ago With all due respect, If you installed it as you would have us believe, then you will know how to remove it. dl65 No offense, but to the Original Poster: You don't have to create new lines randomly in your post, it doesn't look nice and makes it harder to read ('word wrap' will automatically move words to new lines). Excessive unnecessary capital letters don't help either.To answer the question, if the program a monitoring program as Chris states. Such as a keylogger, then it will act like a virus and 'hide' itself so others are unaware of it's presence. I think there is a special keystroke combination to expose the main screen, where from there you can remove it. If this does not work an alternative could be to boot into safe mode, and remove it's program folder, (may not be 'PC Tattletale', in order to hide) and in NORMAL mode remove its entry using hijack this or CCleaner to fix invalid entries? Also Google the name and try find a method to remove it manually, if the above is not correct. TNXThis page says PC Tattletale can be removed as following. Though it recommends scanning with Spyware Doctor 5. PCTattletale Manual Removal: Warning: The following instructions are only for advanced computer users. We recommend you to backup your system registry or create a System RESTORE Point before any risky step. We offers no warranty of any kind to manual operators. For common users we recommend to remove MALWARES using anti-spyware tools, such as PestPatrol, Spyware Doctor, BPS Spyware&Adware Remover, ... To uninstall PCTattletale: 1. Terminate the processes in TaskManager: msn6mngr.exe Netlogon.exe svchost.exe Wincmd.exe WinLoad.exe WinSysMngr.exe PCTT.exe 2. Click Start > Run. Type REGSVR32 -u . Then click OK. Replace with following: %SystemRoot%\explorer32\chattext.dll %SystemRoot%\MSN32.dll 3. Click Start > Run. Type regedit. Then click OK. Navigate to and delete the subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Explorer HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Welcome HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E8AC9B0E9894094189EA59912D1CCA3 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\39E9F6C570B40D842A0953B8A8C07ADB HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\51799C1F87136324485141E00C6A942F HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\535AAC914F48699489B746B6ADD9165A HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7D77628069B703345B8F64FB8EE22104 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\830EE956C56E84D45A51DD1CDC6E26A3 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\91E6512C39B0465449BA5314D057905E HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A45B49DECD972DF4892DD152ACF2E0E1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C12F23E87949C614289082A5A0B1BFCD HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C6D6E8663969C4142A4CDE91F63BDD38 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield Uninstall Information\{0FFA260F-8A4D-4906-B572-6028A18DE3D5} Navigate to the subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, delete the values: "(default)" = "", "WinLoad" = "%System%\Winload.exe" 4. Remove these files in Explorer: %SystemRoot%\Instructions.htm %SystemRoot%\KbdMonitor.exp %SystemRoot%\KbdMonitor.lib %SystemRoot%\mscomct2.ocx %SystemRoot%\mscomctl.ocx %SystemRoot%\msinet.ocx %SystemRoot%\MSN32.dll %SystemRoot%\mswinsck.ocx %SystemRoot%\PCTT.exe %SystemRoot%\tabctl32.ocx %SystemRoot%\UninstallPCTT.exe %SystemRoot%\Unzip32.dll %SystemRoot%\WinLoad.exe %SystemRoot%\xwebpic10.ocx %SystemRoot%\zip32.dll 5. Remove the directory in Explorer: %SystemRoot%\explorer32\ %ProgramFiles%\Common Files\InstallShield\Driver\7\Intel 32\ Hi, thankyou all for your advice i will try to remove it myself if there is no program to remove it... With all due respect dl65, i dont see were i said i installed it myself so how could i remove it???Quote from: paul420 on June 27, 2007, 10:59:42 PM Thanks,CBMatt no i got it myself about 2 weeks ago This made it sound like you installed the program yourself. I thought the same at first. I had to read it a couple of times to realize that you were talking about your computer. Like I said before, this program has to be manually installed, so if you didn't install it and you're the only user, then someone has possibly been snooping around without your knowledge. In any case, if you continue to have trouble removing it, let us know.Thanks CBMatt,im gona ask my cousin when he gets home from collage at weekend to go into the registry. cheers.......

Answer»

Hello,i have a new dell xps 210,vista primium.It has PCTATLETAIL,
since day one XOFTSPY,SE detects it but dose not remove it,not
even in safe mode. I have AVG,AVG SPY,SPYWARETERMINATER,AD AWARE SE,
SPYWARE DOCTOR,SPYWAREDETECTOR,ADVANCED WINDOWS CARE V2,
AVAST,SPYBOT SEARCH+DESTROY,CCleaner..i have ran them all in safe mode
with no luck..im just an average user,any advise please.
thanks for your time............
Is this your COMPUTER or do you share it with others?
Who else uses this computer?

PC Tattletale is a monitoring program that has to be manually installed. This program was likely added intentionally. You may want to talk about this with your parents, sibling(s), or anyone else who has access to your computer.Thanks,CBMatt no i got it myself about 2 weeks ago it had mcavee
security suite on it trial 30 days but that was useless so i got a free firewall of pc doctor for vista,that wouldnt install properly,so im just on vista firewall
now.So i think maybe it got through Macavee,no one else uses this but me??
Is there a prog i COULD buy££ to get rid as it seems very stuborne....
thanks for your time..............paul420 ......Quote

Thanks,CBMatt no i got it myself about 2 weeks ago

With all due respect, If you installed it as you would have us believe, then you will know how to remove it.

dl65 No offense, but to the Original Poster: You don't have to create new lines randomly in your post, it doesn't look nice and makes it harder to read ('word wrap' will automatically move words to new lines). Excessive unnecessary capital letters don't help either.To answer the question, if the program a monitoring program as Chris states. Such as a keylogger, then it will act like a virus and 'hide' itself so others are unaware of it's presence. I think there is a special keystroke combination to expose the main screen, where from there you can remove it.

If this does not work an alternative could be to boot into safe mode, and remove it's program folder, (may not be 'PC Tattletale', in order to hide) and in NORMAL mode remove its entry using hijack this or CCleaner to fix invalid entries?

Also Google the name and try find a method to remove it manually, if the above is not correct.

TNXThis page says PC Tattletale can be removed as following. Though it recommends scanning with Spyware Doctor 5.

PCTattletale Manual Removal:

Warning: The following instructions are only for advanced computer users. We recommend you to backup your system registry or create a System RESTORE Point before any risky step. We offers no warranty of any kind to manual operators. For common users we recommend to remove MALWARES using anti-spyware tools, such as PestPatrol, Spyware Doctor, BPS Spyware&Adware Remover, ...

To uninstall PCTattletale:

1. Terminate the processes in TaskManager:
msn6mngr.exe
Netlogon.exe
svchost.exe
Wincmd.exe
WinLoad.exe
WinSysMngr.exe
PCTT.exe

2. Click Start > Run. Type REGSVR32 -u . Then click OK. Replace with following:
%SystemRoot%\explorer32\chattext.dll
%SystemRoot%\MSN32.dll

3. Click Start > Run. Type regedit. Then click OK. Navigate to and delete the subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Welcome
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E8AC9B0E9894094189EA59912D1CCA3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\39E9F6C570B40D842A0953B8A8C07ADB
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\51799C1F87136324485141E00C6A942F
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\535AAC914F48699489B746B6ADD9165A
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7D77628069B703345B8F64FB8EE22104
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\830EE956C56E84D45A51DD1CDC6E26A3
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\91E6512C39B0465449BA5314D057905E
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A45B49DECD972DF4892DD152ACF2E0E1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C12F23E87949C614289082A5A0B1BFCD
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C6D6E8663969C4142A4CDE91F63BDD38
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield Uninstall Information\{0FFA260F-8A4D-4906-B572-6028A18DE3D5}

Navigate to the subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, delete the values:
"(default)" = "", "WinLoad" = "%System%\Winload.exe"

4. Remove these files in Explorer:
%SystemRoot%\Instructions.htm
%SystemRoot%\KbdMonitor.exp
%SystemRoot%\KbdMonitor.lib
%SystemRoot%\mscomct2.ocx
%SystemRoot%\mscomctl.ocx
%SystemRoot%\msinet.ocx
%SystemRoot%\MSN32.dll
%SystemRoot%\mswinsck.ocx
%SystemRoot%\PCTT.exe
%SystemRoot%\tabctl32.ocx
%SystemRoot%\UninstallPCTT.exe
%SystemRoot%\Unzip32.dll
%SystemRoot%\WinLoad.exe
%SystemRoot%\xwebpic10.ocx
%SystemRoot%\zip32.dll

5. Remove the directory in Explorer:
%SystemRoot%\explorer32\
%ProgramFiles%\Common Files\InstallShield\Driver\7\Intel 32\
Hi, thankyou all for your advice i will try to remove it
myself if there is no program to remove it...

With all due respect dl65, i dont see were i
said i installed it myself so how could i remove it???Quote from: paul420 on June 27, 2007, 10:59:42 PM

Thanks,CBMatt no i got it myself about 2 weeks ago

This made it sound like you installed the program yourself. I thought the same at first. I had to read it a couple of times to realize that you were talking about your computer.

Like I said before, this program has to be manually installed, so if you didn't install it and you're the only user, then someone has possibly been snooping around without your knowledge. In any case, if you continue to have trouble removing it, let us know.Thanks CBMatt,im gona ask my cousin when
he gets home from collage at weekend to go
into the registry.
cheers.......

Solve : pctatletail carnt remove it?

Discussion

No Comment Found

Related InterviewSolutions

Reply to Comment