score - 9 out of 10
AO Silver Member
Join Date: Dec 2006
Location: United Kingdom
Ive seen 9 different versions of this now! The earlier versions are dead simple and you can boot into safe mode (F8 before windows starts) and remove it from the startup.
Some of them are really nasty and cause safe mode to lock up. They remove icons from your desktop and make it look like all of your documents and photo's are missing. They hide as a Wireless LAN client manager which you would not suspect as it looks like part of a harware driver.
These things normally hide in C:\Users\'Account Name'\Local Settings\Application Data\Temp
Usually an exe with a random number filename. You can just delete the whole temp folder contents although ive had a printer driver moan about doing this once.
If you cant get into safe mode, make a cd of ubuntu or I use parted magic which pxe boots over the network and you can see that all your documents do exist and you can try and delete the nasty file.
If its a later version its probably best reinstalling windows as it really does mess it up.
Sent on the back of an AA truck Using Tapatalk
2002 156 Selespeed Sportwagon|Koni FSD Dampers|Eibach Pro Springs|Fully Powerflexed Front & Rear|Eibach Sports Stabiliser ARB's|Lightweight Flywheel|Lighweight Crank Pulley|Colombo & Bariani Cams|Ported by Peak Alfa|Custom Remap by Gus|Wiechers Aluminium Strut Brace|GTA Uprights & Brembo 330mm Conversion|276mm GTA Rear's|GTA Steering Rack
|Custom K&N Intake Pipe & Induction|Brand new Gearbox/Actuator|Quaife LSD|CF2 Decat Manifolds|Supersprint Centre Section|CSC Duplex Exhaust|GTA Interior