Hey all-
I found an Adware.CDT file on my computer and have to remove it by going into the registry and deleting the files manually. Symantec gives a pretty thorough explanation what to delete and how but it recommends that I backup my computer's registry. I go to Microsoft's directions on how to do this but I am confused. It says that I need the Backup CD provided in the box but I can't find that CD in the disks provided for the infected PC (an HP with Windows XP Home Edition) or my laptop (also an HP with Win XP Home). So does anyone have any suggestions as to where to find a replacement disk or if I can do this without one? Do I need to backup the registry if I know the files that need to be deleted? Where do I go from here? Any suggestions are welcome.
Kyle
PS As for the Richard Cranium that put this on my computer, I want to personally string him up in the middle of town, beat him with a keyboard, flog him with a computer mouse (can you tell this has irked me?).

Have you tried this:

http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/199762382617?OpenDocument&src=sec_doc_nam

Yep, this is the site that Symantec directed me to. Unfortunately, I don't have the disk that Microsoft tells me I need nor do I know where to send the backup files. Thanks for the quick help though.
Kyle

I don't often use Windows so can't offer much help, but I would certainly recommend backing up the registry (and any other valuable data as well) before you start deleting files from it.

If you backup a single registry key, I see nothing there that says anything about a disk. You can save the backup files anywhere you want. Like your desktop.

I just use Spybot to clean up spyware. It will backup the registry and remove entries when needed.

Regardless, if you open Start, Run and type in regedit then it will open the registry. In the registry, then go to File, Export and save a copy prior to making any changes. It would be to good to also create a restore point as well.

Paul

I have dealt with so many different types of spyware/adware/malware over the years that I don't even care to remember them all. I have yet to actually do a registry backup prior to cleanup. If all you are going to do is follow instructions from some place like Symantec or Microsoft, you probably don't need to worry about making a registry backup. Microsoft wants you to backup registry any time they need you to go in and make changes. This is just so that they can cover their own butt. You know, kind of like saying WE WARNED YOU! in case something happens and you don not have a backup.

Safest bet is to use some of the freely available spywre removal utilities such as Ad-Aware, Spybot, SpySweeper, SpyBlaster.

My friend bought a new HP, a few months ago, it also came with out the disks. Microsoft told him he should have gotten disk, HP said, he didn't get disks, because everything can be done through their on line support center. He's had it back to where he bought it twice so far for service.

Kyle,
Some h/p computers have a hidden partition on the hard drive containing the recovery CD's. You have the option of creating a set of CD's or using the software repair wizard. You should have recieved a Warranty and Support Guide (paper booklet) with your PC. In this guide are instructions for using the wizard and for making and using the CD set (In my case, an 8 CD restore set plus a Recovery Tools CD). My PC is an hp pavilion vx74 and is about 9 months old. If you find that your machine has this option, my advice is to make the CD set. If anything happens to your HD and you don't have the CD's, you're lost.
Rant On Microsoft knows that you don't have the CD. They have agreements with some pc makers to use this system. hp pays Microsoft less per machine if they don't provide CD's. Rant Off
I hope this is of help.
Chuck

If you are unsure or not fully confident with backing up your registry, simply set a Restore point in the System Restore which is located in the System Tools directory.

I agree with Ken on this subject...Simply set a restore point before you make any changes. What this does..it will allow your computer to be restored to the last workable point in case something you do or dont do messes up the system.

Just make sure that once you delete the files you need to ..and everything works fine..to reset another restore point.

Mary

OK... here's my really dumb one... I used the restore point once, but never reset it.....
I guess I should reset it to maybe todays date?

That would be a good idea Dave.I lapsed about it myself a while back and when I had the occasion to use it,it fouled the box so bad it had to go to the shop.
For all kinds of virtual tools,weapons,and defenses,you can't beat this site:

www.majorgeeks.com
Even has ratings from users,reviews,etc.
Heck,I'm thinking about getting the "I Hacked Paris" T-shirt! :-) :-)8

Thanks for your help everyone. I ended up giving Ad-Aware a shot and it worked; everything is scanning as normal so I'm good to go. I will remember all of your comments if (most likely when) this type of thing comes up again.
Kyle

Dont wait for it to happen again. You should minimize your chances of re infection by enabling a firewall and use a spyware sentry. Personally I use Spyware Doctor and have my windows XP firewall enabled at a pretty high setting. I also run sweeps of my comp at the very least once per week with NOrton anti virus, Spyware doctor and Ad-Aware. No one spyware utility will work 100% so a combination is in order. No longer are the "mucky" sites the big offenders when it comes to spyware and malware, legitimate big name sites can and do infect our comps. ONce bitten twice shy ..

I will do just that Bryan. To be honest, the last full system scan I did before Friday with Norton was on August 18 and I can't remember when I last scanned with Ad-Aware. Definately need to be more diligent when it comes to computer stuff.
Kyle