Hy-Jacked Again....

[TM7]

Returned home from 10 day vacation. I don't know where my son took my computor but it is hyjacked by malware or spyware.  I've cleaned it with Spybot R&D, ad-aware personal, etc. These are free cleaners which did clean up the machine, except for the main offender.
From the bottom right tray is a constant pop up warning of virus or spyware infections,,,when I click it it is of course an add for a cleaner programm....more like blackmail to me.
In addition, it has locked me out of "add-remove programs", where I have deleted these kinds of annoyances before....says I must see system administrator...in fact "My Computor" control seems to have been hyjacked.
Any suggestions for a repair, or/and way to enter 'add/remove programs'?
thanx.......TM7

[ncsurveyor]

Sounds like drive cleaner:

http://drive-cleaner.wiki-security.com/wiki/Parasite/Drive_Cleaner

I just went through this three weeks ago after my co-worker "lunch houred" my computer to check out the pics of Brittany Spears getting out of Paris Hilton's car.   

The freeware stuff typically does not do registry edits and deletions, which will have to be done in order to purge this scourge.

I believe I got the list of registry items from Norton.  Hadn't had a problem since.

As far as the administrator issue, he or the hyjacker apparently created another user, commonly done because the history and recent documents are kept separate per user.  You need to check into the identities and see whats up.  If there are multiple, you need the admin or whichever one has the most privileges and log onto that.  Hopefully, it isn't password protected.  Then you should be able to nuke what needs nuking.

Good luck

and keep the boy off the laptop.

[quickdtoo]

You should be able to access "add/remove programs" in safe mode, tap the F8 key at startup before the OS loads to access the boot menu, select administrator at login.

Tim

[quickdtoo]

Have you googled the offending program name to see what others have done to rid their PC of it?

Tim

[jgalar]

I had that problem before. Do a search using the company name that it keeps sending you to. I don't remember the company name, but there are instructions out there on how to delete the section of code.

[Graybeard]

At my house on my most times slow satellite connection things seem to be working as fast as ever here today.