Author Topic: Windows system directory  (Read 25528 times)

0 Members and 1 Guest are viewing this topic.

Offline whocares

  • Super Poster
  • ***
  • Posts: 1698
  • I'm not a llama! :-)
Re:Windows system directory
« Reply #30 on: November 02, 2004, 11:58:04 AM »
I'd think MoveonBoot is for FILES, not for registry-keys, but I might be wrong..

 ;)

Offline Omar

  • Sr. Member
  • ****
  • Posts: 254
Re:Windows system directory
« Reply #31 on: November 02, 2004, 12:06:11 PM »
I'd think MoveonBoot is for FILES, not for registry-keys, but I might be wrong..

 ;)

it looks like files only ???

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31335
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Windows system directory
« Reply #32 on: November 02, 2004, 12:08:37 PM »
Just a quick look at the website of that util would have told you:
Quote
Copies, moves or deletes files and folders on the next system boot. The utility is very useful when the user needs to replace or delete files which are locked by other applications, loaded into the memory or just cannot be changed until next system boot.

Offline Omar

  • Sr. Member
  • ****
  • Posts: 254
Re:Windows system directory
« Reply #33 on: November 02, 2004, 12:21:54 PM »
Just a quick look at the website of that util would have told you:
Quote
Copies, moves or deletes files and folders on the next system boot. The utility is very useful when the user needs to replace or delete files which are locked by other applications, loaded into the memory or just cannot be changed until next system boot.


I downloaded the programme last night. You are asked to submit a file. I put in

HKEY_LOCAL_MACHINE: software\altnet

but it said "invalid file name"

I accept that this is not a file but a reg key, if you can delete reg keys I would like to know.
« Last Edit: November 02, 2004, 12:22:20 PM by Omar »

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31335
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Windows system directory
« Reply #34 on: November 02, 2004, 12:26:11 PM »
That is indeed a registry key. You can edit the registry with regedit.
start > run > regedit

But be carfull not to delete the wrong thing!

Create a backup from the registry first, before changing anything there.
start > run > regedit > click on "my computer" there > file > export
It can take several minutes before the backup is created.

S.Z.Craftec

  • Guest
Re:Windows system directory
« Reply #35 on: November 02, 2004, 12:29:06 PM »
Well I'm still not sure have you carefully followed all those instructions Omar, I gave you link for...

Here is another shot:
http://www.scanspyware.net/info/Altnet.htm

You must follow instructions precisely.

First erase all those mentioned DIRECTORIES

Quote
ADMCache
Altnet
Altnet
Altnet
Temp Internet Shares
LocalPages
Skin
Points Manager
download manager
Bullguard Protection
My Altnet Shares
DBBackup
altnet
Temp Internet Shares
LocalPages
Skin
Points Manager
download manager
Bullguard Protection
My Altnet Shares
DBBackup
altnet

Then delete following files:
Quote
adm25.dll
admdata.dll
admdloader.dll
admfdi.dll
msvcirt.dll
Setup.exe
admdloader.dll
admdata.dll
admfdi.dll
adm25.dll
adm.exe
adm4.dll
admprog.dll
selectdir.txt
selectdir.txt1st
dmsetup.bmp
dmsetupbig.bmp
selectdir1st.txt
dminfo2.cab
asmend.exe
jslegals.txt
altnetuninstall.exe
DMinfo3.cab
JSinstall.cab
asm.exe
asmps.dll
dminstall3.cab
back-over.bmp
back.bmp
bottom.bmp
bottomleft.bmp
bottomright.bmp
close-over.bmp
close.bmp
forward-over.bmp
forward.bmp
help-bottom.bmp
help-over.bmp
help-sel.bmp
help-top.bmp
help-topleft.bmp
help-topright.bmp
help.bmp
Help.xml
left.bmp
maximise-over.bmp
maximise.bmp
mb_bottom.bmp
mb_bottomleft.bmp
mb_bottomright.bmp
mb_left.bmp
mb_right.bmp
mb_top.bmp
mb_topleft.bmp
mb_topright.bmp
message.xml
minimise-over.bmp
minimise.bmp
points-disabled.bmp
points-over.bmp
points-sel.bmp
points.bmp
redeem-disabled.bmp
redeem-over.bmp
redeem-sel.bmp
redeem.bmp
refresh-over.bmp
refresh.bmp
right.bmp
Sav3BD.tmp
settings-disabled.bmp
settings-over.bmp
settings-sel.bmp
settings.bmp
Skin.xml
start-disabled.bmp
start-over.bmp
start-sel.bmp
start.bmp
top.bmp
topleft-pro.bmp
topleft-reg.bmp
topleft.bmp
topright.bmp
wallet-disabled.bmp
wallet-over.bmp
wallet-sel.bmp
wallet.bmp
altnet.css
gradient.gif
local_firstuse.html
local_points.html
local_redeem.html
local_start.html
local_wallet.html
notconnected.gif
offline.gif
pixel.gif
Points Manager.exe.Manifest
settings.cab
sysdetect.dll
Points Manager.exe
Sigfiles.db
admdloader.dll
admdata.dll
admfdi.dll
adm25.dll
adm.exe
adm4.dll
admprog.dll
selectdir.txt
selectdir.txt1st
dmsetup.bmp
dmsetupbig.bmp
selectdir1st.txt
dminfo2.cab
asmend.exe
jslegals.txt
altnetuninstall.exe
DMinfo3.cab
JSinstall.cab
asm.exe
asmps.dll
dminstall3.cab
back-over.bmp
back.bmp
bottom.bmp
bottomleft.bmp
bottomright.bmp
close-over.bmp
close.bmp
forward-over.bmp
forward.bmp
help-bottom.bmp
help-over.bmp
help-sel.bmp
help-top.bmp
help-topleft.bmp
help-topright.bmp
help.bmp
Help.xml
left.bmp
maximise-over.bmp
maximise.bmp
mb_bottom.bmp
mb_bottomleft.bmp
mb_bottomright.bmp
mb_left.bmp
mb_right.bmp
mb_top.bmp
mb_topleft.bmp
mb_topright.bmp
message.xml
minimise-over.bmp
minimise.bmp
points-disabled.bmp
points-over.bmp
points-sel.bmp
points.bmp
redeem-disabled.bmp
redeem-over.bmp
redeem-sel.bmp
redeem.bmp
refresh-over.bmp
refresh.bmp
right.bmp
Sav3BD.tmp
settings-disabled.bmp
settings-over.bmp
settings-sel.bmp
settings.bmp
Skin.xml
start-disabled.bmp
start-over.bmp
start-sel.bmp
start.bmp
top.bmp
topleft-pro.bmp
topleft-reg.bmp
topleft.bmp
topright.bmp
wallet-disabled.bmp
wallet-over.bmp
wallet-sel.bmp
wallet.bmp
altnet.css
gradient.gif
local_firstuse.html
local_points.html
local_redeem.html
local_start.html
local_wallet.html
notconnected.gif
offline.gif
pixel.gif
Points Manager.exe.Manifest
settings.cab
sysdetect.dll
Points Manager.exe
Sigfiles.db
Setup.exe
msvcirt.dll
admfdi.dll
admdloader.dll
admdata.dll
adm25.dll
admD9.tmp
Peer Points Manager.lnk

Then delete following registry keys:
Quote
adm.EXE
{99A8E2B2-3405-4C0D-9110-131C14CAAF62}
ADMCache
ADM
Messages
Settings
Setup
Temp Internet Shares
Dashboard
DownloadManager
LocalFiles
TopSearch
Altnet
ADM25.ADM25.1
ADM25.ADM25
ADM25.ADM25.1
ADM25.ADM25
{1D3BCE37-7834-4579-8169-E67681420A98}
{1D3BCE37-7834-4579-8169-E67681420A98}
ADM4.ADM4.1
ADM4.ADM4
ADM4.ADM4.1
ADM4.ADM4
{DEF37997-D9C9-4A4B-BF3C-88F99EACEEC2}
{DEF37997-D9C9-4A4B-BF3C-88F99EACEEC2}
ADM.ADM.1
ADM.ADM
ADM.ADM.1
ADM.ADM
{C15B7EA2-A360-43E8-A591-5FAEDC7C4E1D}
{C15B7EA2-A360-43E8-A591-5FAEDC7C4E1D}
{E813099D-5529-47F4-9B37-4AFAFCB00A43}
{E813099D-5529-47F4-9B37-4AFAFCB00A43}
{9BBCF06C-DCD7-495D-80DF-CDD5399D0FF8}
{9BBCF06C-DCD7-495D-80DF-CDD5399D0FF8}
AltnetDM

And at the end, delete following registry values:
Quote
AltnetPointsManager

BE VERY CAREFUL WHEN YOU "PLAY" WITH REGISRY KEYS !!! Never-ever-never erase anything that is not listed in some instructions on how to remove some spyware or similar pests... If you are not so comfortable editing it, it's better if you let someone do that for you... someone who is more comfortable...
« Last Edit: November 02, 2004, 12:37:10 PM by S.Z.C »

Offline Omar

  • Sr. Member
  • ****
  • Posts: 254
Re:Windows system directory
« Reply #36 on: November 02, 2004, 12:45:21 PM »
That is indeed a registry key. You can edit the registry with regedit.
start > run > regedit

But be carfull not to delete the wrong thing!

Create a backup from the registry first, before changing anything there.
start > run > regedit > click on "my computer" there > file > export
It can take several minutes before the backup is created.

it won`t let me delete that reg key, it says "error when deleting key".

same happens in safe mode, as administartor!

Offline Omar

  • Sr. Member
  • ****
  • Posts: 254
Re:Windows system directory
« Reply #37 on: November 02, 2004, 12:48:01 PM »
S.Z.C can`t say i`m coonfident to delete all those!

but may have to try :(

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31335
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Windows system directory
« Reply #38 on: November 02, 2004, 12:49:03 PM »
Check the permissions on that key. (See the first post on top of page 2 in this thread)

Offline Omar

  • Sr. Member
  • ****
  • Posts: 254
Re:Windows system directory
« Reply #39 on: November 02, 2004, 12:56:15 PM »
Check the permissions on that key. (See the first post on top of page 2 in this thread)

the only permissions, it allows me to choose for administrator are:

1)Full control
2) read

I cannot tick "special permissions" it won`t let me, the box is, sort of faded!

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31335
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Windows system directory
« Reply #40 on: November 02, 2004, 12:59:05 PM »
Choose "full control" for the present user. If you can't do that due to restrictions, login as Administrator and do it from that account.
« Last Edit: November 02, 2004, 12:59:36 PM by Eddy »

Offline Omar

  • Sr. Member
  • ****
  • Posts: 254
Re:Windows system directory
« Reply #41 on: November 02, 2004, 01:08:54 PM »
i choose full control last night, and logged in as administartor in safe mode-still got the error message!

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31335
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Windows system directory
« Reply #42 on: November 02, 2004, 01:17:13 PM »
Try to do it from the recovery console from the command line.
Example can be found at > http://www.tek-tips.com/viewthread.cfm?qid=932152

Offline Omar

  • Sr. Member
  • ****
  • Posts: 254
Re:Windows system directory
« Reply #43 on: November 02, 2004, 03:16:48 PM »
Try to do it from the recovery console from the command line.
Example can be found at > http://www.tek-tips.com/viewthread.cfm?qid=932152


could you please tell me, what i should be typing in:

As it keeps saying error!

should i be typing in:

HKEY_LOCAL_MACHINE: software\altnet

Offline whocares

  • Super Poster
  • ***
  • Posts: 1698
  • I'm not a llama! :-)
Re:Windows system directory
« Reply #44 on: November 02, 2004, 04:28:25 PM »
Hi Omar,

a) forget about MoveonBoot
b) if you know how to get to the command-line of the recoveryConsole, and really know what you're doing there, and have recent backups AND your XP-CD AND driver- & program-installation files/CDs AND are not averse to totally setting up your machine from scratch (OR have a recent IMAGE)  AND.. AND..
then try typing there at the prompt:

reg delete "HKLM\SOFTWARE\Altnet" /v /f  [ENTER]
  or
reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Altnet" /v /f [ENTER]
(like it says in eddy's link)

b) Otherwise:
- ignore it, if your PC works ok, and AV/Spyware-Scanner don't find any other malicious regKeys/files  or
- reread your Threads and follow all advice & use all offered tools.. or
- try to delete the Altnet-regkey by removing altnet software entries via a regCleaner or
- use Avast's BART-CD to edit the registry (see avast homepage; most of the reservations from b) still apply)

 ;)
« Last Edit: November 02, 2004, 04:31:48 PM by whocares »