The undeletable gwang.exe!

Sheesh I've seen spyware before but this is nuts!!!NUTS I tell ya!!! There is this file(gwang.exe) that has been appearing on my hard drive some weeks ago & I found out it contains spyware.
After its appearance all these pop-ups from Internet Explorer started....well popping...even though my pop-up blocker was ALREADY on,so I used Firefox more often since then.
So I tried to delete the gwang file,but it ALWAYS comes back.
Its still here right now as I type!
So is there a way to "kick it out for good"?

Its not undeleteable, its just tricky.

You can see that your not the only one who has had this problem.

Some of the removal instructions are in this thread

Turn off System Restore

Download HijackThis and follow the instructions in the linked thread.

Reboot when done. If that fixed it, turn system restore back on.

If not
Download one or all 3 of the following apps killbox.exe, Drweb-cureit.exe, and smitfraudfix.exe *Note* remember the location you saved these files.

Boot to safe mode
Run the three apps one at a time. It takes a little time.

Reboot.

If that fixed it, restart system restore, and be on your merry way.

Read the second link I posted to help you understand how to prevent these problems in the future.

Best of luck
makeitso









[edit on 10/13/07 by makeitso]

Reminder:

Please PLEASE be careful with Hijackthis. If you aren't familiar with the good processes that run on your PC you can do a lot of damage with the program.

Be careful!!

Great information being provided.

The only thing I can add, is go to Safe Mode without networking.

And as for HijackThis, there are analyzers on the web that you can use to help determine what you should touch, and not touch.

Other then that, the information above is excellent.

reply to post by Rasobasi420


That is one of the reasons I like to use AutoRuns, it has the possibility of calling your default web browser with the selected file as a search string for a Google search.

It also has the possibility of just disabling the file instead of removing it from the list of start up programs.

Sorry for the late reply.Anyway I just wanted to say THANKS.I did try the HiJackThis program first & immediately it was finally gone for good....so far at least.

Thanks guys or gals & yes I was really careful when I used HiJackThis.


[edit on 30-10-2007 by tormentor]