Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Technical help with W32.sillyp2p P L E A S E !

Aug 15, 2005 8:52AM PDT

Hello! I have acquired this virus which will not allow me to search with yahoo, use microsoft update or open certain links within Internet Explorer. I am also unable to use the file Search feature from the Start menu. I have read a few posts on different sites instructing you to turn off restore options and show hidden folders followed by booting in safe mode and running a slew of reg clean programs and antivirus... All of which I did... I still have it. When I use the start menu and run c:\windows\system32\syschost.exe nothing is found nor when I look in the folder. Am I doing something wrong, or do I have multiple problems? Any assistance would greatly appreciated! Thank you!!!! Tim.

Discussion is locked

- Collapse -
Merlin, Have You Done This...
Aug 15, 2005 9:02AM PDT

First, click on either, or both of the links below and run the free online virus scanners from the links below:

Housecall Online Scanner

Panda Online Scanner

Next, if you haven't already, please download, install, update, then run ALL of the free spyware removal tools from the links below. Run them in both "normal" Windows and "Safe Mode".:

Ad-Aware">http://www.lavasoftusa.com/support/download/]Ad-Aware

- Collapse -
Merlin, How Someone Else Removed It...
Aug 15, 2005 9:43AM PDT
- Collapse -
Tried to no avail...
Aug 16, 2005 6:38AM PDT

Thanks for your recommendations Grif! I have tried your advice from the first post as well as that which you gave someone else a few days ago. When running these applications and PConPoint, I see where the applications are identifying it in safe mode and deleting it, but it reappears again when I reboot. I tried to view the stuff from Sophos, but I guess you need to be a customer? Has this happened to anyone else, or am I a complete BOOB?

Thank you again!

- Collapse -
Merlin, You'll Need To Clean Out Registry Entries Also
Aug 16, 2005 9:57AM PDT

...and those registry entries are located in the Sophos article. After clicking on the link below, then click on the tabs in the article to see other text. (Description, Recovery, etc.)

http://www.sophos.com/virusinfo/analyses/w32hagbarda.html

But it would help if we knew EXACTLY where the scanners are finding the file...and what the file's name is..

If the file is located in the System Restore volumes, then you'll need to temporarily disable System Restore before scanning again. Here's how to do that:

How To Disable System Restore

Hope this helps and let us know more.

Grif

- Collapse -
NoAdware?
Aug 16, 2005 6:43AM PDT

Should I break down and buy one of these programs online? I just downloaded NoAdware which found 43 new things, but won't repair unless I register for $30...

- Collapse -
Merlin, There's No Need..
Aug 16, 2005 9:49AM PDT

I use the free ones in the links below. After downloading and installing the first two, make sure to update them..The third tool doesn't need to be updated at this time.:

Ad-Aware">http://www.lavasoftusa.com/support/download/]Ad-Aware

- Collapse -
NoAdware Review
Sep 9, 2005 12:07AM PDT
- Collapse -
Gio, Bad Review Site...Wrong Advice
Sep 9, 2005 3:02AM PDT

Although the link Rio posted lists five of it's favorite antspyware programs, each one is on the "rogue" list of programs at the link below. That's NOT a good thing. They ALL have a history of large numbers of false positives and in most cases, they actually install spyware themselves. The only one that has recently been been removed from the rogue list is "pcOrion".

Spyware Warrrior
http://www.spywarewarrior.com/rogue_anti-spyware.htm#naw_note

I suggest ignoring anything the site tells you.

Hope this helps.

Grif

- Collapse -
(NT) have tried going to...
Aug 16, 2005 9:33AM PDT

the symantec website and looking for the removal tool for this virus? they have a long list of virus removal tools there.

- Collapse -
(NT) Finally got rid of it!
Aug 27, 2005 10:37AM PDT

Just an FYI, I tried all of the things listed in the responses and still couldn't lose it. I ended up reloading Windows in "Repair" mode and it straightened everything out. Thanks for all of your advice and assistance!! Tim.