Spy creating problems.

hmm.. I'll try runnin' them in safe mode.. but 1 newbie dbt. .. What exactly is the reason 4 running it in safe mode.. Whats the use of safe mode ??

XNikon - when you boot up in safe mode the majority of services on XP are not started - basically it starts XP in a minimal configuration with just enough running so that you can use the OS. As groovicus points out some variants of scumware run as services or lock themselves into start up files etc. So by starting in safe mode none of these scumware variants get loaded into memory as services or startup items. If they aren't running then neither are the scum ware 'protection features' - thus allowing you to remove the little devils completely.

I'm not exactly sure how its done but I'd guess that the scumware uses something similar to windows own file protection system. Hope that explains it

Z

I had an interesting trojan some time back..it used to start itself everytime an exe file got executed,it started again..just an example ofcourse,but basically since none of your programs that're on startup get loaded in safe mode,you'll just be able to avoid problems of this kind

hmm.. ok. thanx.

Would everyone also recommend disabling System restore before running these programs?

And when should system restore be re-enabled?

BTW XNikon...
I'm sure you did this but be sure to update and run your AV program...

Neither Spybot or Adaware will harm anything, although poop happens sometimes, so it can't hurt.
Hijack this is different though. It is not a tool like Spybot and Adaware..it fixes what you tell it to fix, and it doesn't care if you picked the right thing or not. If used improperly, you can break your internet access, and worse. Let someone who knows what they are looking for look through your log.

I recommend to those I am helping, to disable, then re-enable system restore after each 'round', if you will. That way we don't lose ground if we screw up.

Another interesting note therenegade, I just had the opportunity to fight a trojan that executed itself from a hidden .dll, and once it ran, the .exe deleted itself. Fun Fun Fun!! :D