Help......tried a "fix a slow computer" free download......

[a kennedy]

and now can't get it deleted. Help!!

[CK_John]

1. Need info, OS can you boot into safe mode, do you know how, do you have

CCleaner, do you have malwareBytes.

Links:

<http://www.malwarebytes.org/>

<http://www.ccleaner.com/update/?v=2.25.1025&l=1033>

[canetoad]

2. Ooops!

Free Download is a very Loaded Term.

It implies that you are receiving free software - this is usually incorrect. It means that you do not have to front up with your credit card to actually effect the download. Be very cautious about anything advertised as a Free Download. They are usually scams of some sort. Look for freeware, free software, open source etc.

What is the 'fix' you downloaded - it's name, website etc, so we can get a handle on what it is doing?

You may not like this, but with the twin problems of slow computer and unknown malware installed, I'd say reformat and reload your operating system. I assume you have the disc.

This is not as drastic a measure as many make it out to be and it's a lot less painful than diddling around for months with a half-working machine, trying to find a set of fixes that work.

[CK_John]

3. System restore would be more practial and would not comprise user data. n/t

[canetoad]

4. Lots of ifs and buts with system restore

The most important being that we need to assume that there is a *clean restore point to use.

'Compromise user date' is not a term that should be given great importance. It is the easiest thing in the world to plug in an external usb drive and copy essential personal files and make sure they are virus free.

The resistance to reloading the OS puzzles me. If more people were willing to take the step of reading how to do so (and there are a brazillion printable guides on the net), there would fewer folk intimidated by the prospect of a clean reload. Hell, once they realize how un-scary it all is, they may even go the extra few yards and partition their drive so that OS and programs are not on the same drive as their files. All part of the learning curve.

[CK_John]

5. True, many do not even have it set on. But most new machines do not come with recovery disc, and

some netbooks do not have a CD/DVD reader now. Things are getting more complex than they should.

[canetoad]

6. You know, that's sort of like buying a car

And not being given a key for it :)

You are right of course, about not having recovery/reload facilities. I can't get my head around anyone buying a computer without a copy of the OS in their hot little hand.

As far as optical drives go, I reckon they are nearly dead and software, including OSs will soon be delivered on a USB stick.

[hobbit709]

7. The problem with system restore is that at times it acts like a virus.

If the restore points are also infected, you can clean the system, then reboot and guess what happens.

[EvolveOrConvolve]

8. What is the name of the product

And where did you download it?

[Dead_Parrot]

9. I'd go with CK's suggestion

Try malwarebytes, and if it doesn't work bomb it with ccleaner. Less aggravation than a restore or rebuild.

[a kennedy]

10. I downloaded something called "Registry Patrol"

I deleted all the files that go with it, just not the one that runs it. It won't let me delete it. I'm sorry I'm not very good with computers but I do know how to delete programs etc....but this one won't let me. Thanks for all your help. edit for thanks

[CK_John]

11. CCleaner and MalwareByte have overlooked tools to get rid of files.

If you know the file and where it exists click on the "more tools" tab in MB and there is a tool "FileASSASSIN" to delete a locked file. But run a "full scan" first(may take 30-45 min) follow instruction to fix or remove bad elements.

CCleaner has a set of "tools" click on wrench. Then you will see three tools you can use uninstall, startup, system restore. Click on these and look for unwanted programs and uninstall, then look in startup and click on program("Registry Patrol") and then choose disable.

When installing software it is now common to ask to install a "yahoo toolbar" or a "google toolbar" if you DO NOT WANT these, uncheck the box. I only allow a desktop icon and uncheck everything else.

If you have these programs let us know.

[a kennedy]

13. I'm going to print your instructions......and give this baby a try.

D*mn, this patrol thing shows up everytime I sign on now......so am anxious to try your remedy. Thank you so much, will let you know if it works, and thanks again. :hug:

[canetoad]

12. What you might have to do

Is reinstall it. Yep, I know this sounds crazy, but you will be no worse off than you are now.

Then download Revo Uninstaller http://www.revouninstaller.com/ and install it.

After Revo is installed, open it up, double click on Registry Patrol, say Yes you want to uninstall and then select ADVANCED mode. Keep following the 'next' prompts, making sure you 'Select All' and delete all traces and registry entries.

[DainBramaged]

14. OK listen up and follow these instructions

http://forums.spybot.info/showthread.php?t=37660

The following instructions have been created to help you to get rid of "RegistryPatrol" manually.
Use this guide at your own risk; software should usually be better suited to remove malware, since it is able to look deeper.



Threat Details:

Categories:
malware
Description:
RegistryPatrol claims to be an antispyware solution that shows harmless entries as high risk problems. Also it marks Spybot-S&D as high threat.
Removal Instructions:

Desktop:

Please remove the following files from your desktop.
To check where they are pointing to, right-click them and choose "Properties" from the context menu appearing.
Shortcuts named "Registry Patrol v3.0.lnk" and pointing to "<$PROGRAMFILES>\RegistryPatrol3.0\*.exe".
Start Menu:

Please remove the following items from your start menu.
To check where they are pointing to, right-click them and choose "Properties" from the context menu appearing.
Items named "Registry Patrol v3.0.lnk" and pointing to "<$PROGRAMFILES>\RegistryPatrol3.0\*.exe".
Installed Software List:

You can try to uninstall products with the names listed below; for items identified by other properties or to avoid malware getting active again on uninstallation, use Spybot-S&D or RunAlyzer to locate and get rid of these entries.
Products that have a key or property named "Registry Patrol v3.0".
Files:

Please use Windows Explorer or another file manager of your choice to locate and delete these files.
The file at "<$COMMONPROGRAMS>\Registry Patrol v3.0\Remove Registry Patrol v3.0.lnk".
The file at "<$PROGRAMFILES>\RegistryPatrol3.0\uninstal.log".
The file at "<$SYSDIR>\RPUpdates.zip".
The file at "<$SYSDIR>\RPVersion.ini".
A file with an unknown location named "RegistryPatrolSetup.exe".
Make sure you set your file manager to display hidden and system files. If RegistryPatrol uses rootkit technologies, use our RootAlyzer or our Total Commander anti-rootkit plugins.
You will have to use a global search for files without a name specified. Be extra careful, because just the name might not be enough to identify files!

Important: There are more files that cannot be safely described in simple words. Please use Spybot-S&D to remove them.

Folders:

Please use Windows Explorer or another file manager of your choice to locate and delete these folders.
The directory at "<$COMMONPROGRAMS>\Registry Patrol v3.0".
The directory at "<$PROGRAMFILES>\RegistryPatrol3.0\Backup".
The directory at "<$PROGRAMFILES>\RegistryPatrol3.0".
Make sure you set your file manager to display hidden and system files. If RegistryPatrol uses rootkit technologies, use our RootAlyzer or our Total Commander anti-rootkit plugins.
You will have to use a global search for files without a name specified. Be extra careful, because just the name might not be enough to identify folders!


Download Spybot S&D HERE:

http://www.safer-networking.org/en/mirrors/index.html

[canetoad]

15. LOL you are kidding aint you?

Did you not glean any tiny glimmer of insight into the OPs experience and computer knowledge? Of course not, you just plugged away with a cut and paste from some website.

Take this on board Braim, the first way to help someone on this board is to grok where they are coming from in the first place. If ya can't do that, your help is useless.

[RoyGBiv]

16. Ummm, dude ...

I mean, come ON.

You cut and paste an entire post from another forum and put it here without another word added other than a "Listen up" admonishment. That's at the very least bad form.

More importantly, this isn't entirely helpful. Instructions like this need to come with a degree of explanation based on the experience of the individual you're trying to help. Hell, this is the kind of thing people yell at Linux hacks for doing.

Newbie Linux user: "I can't get the buttons on my mouse to work. What's wrong?"

Linux hack: "Oh, that's simple. You just need to edit xorg.conf. Fire up vi and edited the input section with the correct mappings for your mouse. Depending on your distro, you may have to add .xmodmap with duplicate of these mappings to your home directory. Once you're done restart X. Oh, and if vi confuses you, don't worry. Just check out it's man page."

In other words, huh?

If parts of this are done incorrectly, it could turn the system into a temporary doorstop.