removing Altnet spyware

Does anyone know how to remove the Altnet spyware?
I've tried to use Ad-A-Ware and Spybot and it shows that it found it but it
doesn't remove it.
I've tried going in safe mode and run these programs but get the same results.
When I go in Regedit to remove Altnet and subfolders it says Access Denied.
Thanks for any help.
-Al

Donna
Sun Dec 26 11:50:31 CST 2004

Hi,

Try this: Right click the registry key of the offending key (Altnet) then
select "Permissions". In the "Advance Tab", select your User Account name
then check the box to replace owner. Click OK. Next, in the "Security"
tab, select your User Account name then select the box for full control.
Click OK. Try deleting the offending keys now and it should be gone.

Note: Prior doing the above, please back-up your registry.

Regards,

--
Donna Buenaventura (MVP Windows Security)
Calendar of Updates (http://cou.dozleng.com)
"al" <al @discussions.microsoft.com> wrote in message
news:CC90363C-2AE1-4AC8-B05F-09EEB5D01D35@microsoft.com...
Does anyone know how to remove the Altnet spyware?
I've tried to use Ad-A-Ware and Spybot and it shows that it found it but it
doesn't remove it.
I've tried going in safe mode and run these programs but get the same
results.
When I go in Regedit to remove Altnet and subfolders it says Access Denied.
Thanks for any help.
-Al

BuckNakie
Mon Dec 27 09:31:05 CST 2004

Try using SpySubtract Pro it will take care of it for you

"al" wrote:

> Does anyone know how to remove the Altnet spyware?
> I've tried to use Ad-A-Ware and Spybot and it shows that it found it but it
> doesn't remove it.
> I've tried going in safe mode and run these programs but get the same results.
> When I go in Regedit to remove Altnet and subfolders it says Access Denied.
> Thanks for any help.
> -Al

thewizardofahhs
Tue Feb 01 20:04:27 CST 2005


As some people have discovered there are many cases where this advic
does not work

The usual reason is that the user who infected the computer is no
logged in or much worse, the user who infected the machine no longe
has an account

If this is the case, you can not remove it from within that version o
windows

Here is an article about what to do in such a case

ftp://ftp.wizardnco.com/pub/Docs/RemoveAltnet/removealtnet.ht

enjoy... thewizardofahh

--
thewizardofahh
-----------------------------------------------------------------------
thewizardofahhs's Profile: http://www.iamnotageek.com/member.php?userid=968
View this thread: http://www.iamnotageek.com/showthread.php?t=49265

eclectic22
Wed Feb 02 13:20:59 CST 2005

On Mon, 27 Dec 2004 01:50:31 +0800, "Donna Buenaventura [MVP]"
<dbuenaventura@mvps.org> wrote:

>Hi,
>
>Try this: Right click the registry key of the offending key (Altnet) then
>select "Permissions". In the "Advance Tab", select your User Account name
>then check the box to replace owner. Click OK. Next, in the "Security"
>tab, select your User Account name then select the box for full control.
>Click OK. Try deleting the offending keys now and it should be gone.
>
>Note: Prior doing the above, please back-up your registry.
>
>Regards,
Hi Donna,
I went through this as well and was unable to replace the owner.
Someone in another group informed me that this option was only
available in XP Pro and not in XP Home version. Can you confirm this?

To the op, I read elsewhere that if you can go into the other user
logins, (you basically can only remove the key from within the login
of the person that installed it, apparently) then you will be able to
remove it from there.

Ceegee

JoeBlogg
Thu Apr 21 15:07:18 CDT 2005




Hello.

I had the same problem and followed all the instructions listed here. I had
no problems adjusting Altnet file's permissions (tinkering the whole way
through), but got stuck on "Messages" subfile which was, I figured,
restricting Altnet's modification/deletion. I was not able to save changes,
in any way, to the Messages file to try to delete. In the end, I created the
"CREATOR OWNER" noticing it was missing. (right click) PERMISSIONS -
"Security" - ADVANCED - "Permissions" - ADD - "Select user or group" - type
CREATOR OWNER - "Object" - select DENY FULL CONTROL (including "this key
and subkeys") - OK . This overrides the files settings with the denial order
for the "CREATOR OWNER". With that done, I gave (or already had given.....??)
myself full access and deleted "Messages", this allowed me to delete the
rest. As it had taken me quite a while to reach this stage, all steps leading
to the end result had been fogged by memory. The jist is that the "Messages"
subfile is the culprit. Altnet (B@STARDS) is now gone from my computer after
all this time.