RE: icthis.exe
"bigdaddy55513" wrote:
> i got this program on my computer, along with isfmntr.exe and one named N/A,
> and I cannot remove them in software explorer, plus they do not show up in
> the program removal site either. I know it has to be malware, but I ran
> windows update and virus scan and it did not "see" these programs. HELP!!
I just wrestled with this very same problem last night and today. None of
my spyware or virus clean-up programs found it. I finally saw the file in
the "processes" list of AVG Spyware -- "icthis.exe" = "I see this" -- told me
right away that this was the problem. I searched and found the folder with
this program under c:\Program Files\Image Ad-on, although yours may be
somewhere slightly different. Don't delete anything YET.
To clean out this pernicious malware, reboot and hit F8 and select "Safe
Mode" when prompted. BEFORE DELETING, I jotted down a list of EXEs and DLLs
found in the folder. Now delete and be sure to empty your recycle bin. Hit
your Start button, and select to "run" regedit. Do a Find for each EXE and
DLL and remove any references to them. In the alternative, you can run a
regedit cleaner tool such as CClean to get rid of the orphan remnants if you
are not familiar with editing the registry, which is risky without proper
familiarity. A registery cleaning tool is a safer method by far.
Furthermore, you should always back up your registry before attempting to
edit it.
Having done the above, I was successful at last in getting rid of these
multiple pop-ups and the hijacking of my browser. Every site I've been to
appears to be pushing the purchase of additional cleaning tools, most of
which I found not to work. I'm assuming the smitfraud tool must be purchased
and I personally was not feeling in a mood to pay someone for yet another
tool when this entire Zlob-spyware program is intended to hold you hostage
until you BUY ANOTHER CLEANING TOOL. No thanks!
Good luck!
