Question

Adware Removal

Asked by: kentomnagle

I have run "Spy Sweeper" and it has detected and removed an adware titled "WildMain", however it also states that it cannot remove a file titled "midaddle" and that I must remove it manually.  I try to do this but I cannot and I receive a message that the file is in use.  When I run Spy Sweeper again, it again detects WildMain.  I believe these two items are related but I don't know for sure.  I also have been getting a lot of pop ups lately and my computer "lags" or seems to be running slower.  Are these problems also related to this adware?  And how do I get rid of this file and adware program?  I am far from any kind of computer expert and would appreciate any help I could get.  I have Windows XP.  Thanks.

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2004-08-21 at 21:55:22ID21102567
Tags

midaddle

,

removable

,

windows

Topic

Windows Network Security

Participating Experts
3
Points
500
Comments
8

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. Removing adware
    This questionn is similar to the PAQ. Although, with two added adware and/or spyware programs. I have www.ads234.com, PC Weasel and a program? called BDE on the system. I have used Hijackthis, Spybot, Adaware and other adware and spyware to remove these but ads234.com ...
  2. Strange Spyware/Adware/Malware occurrance
    I'm seeing some very weird things occur on my friends computer. We ran a virus scan, and spysweeper (removes ad/mal/spy-ware) and everything comes up clean...however, when he click to open Internet Explorer, IE will suck the CPU of the computer and it wil begin to spawn new ...
  3. spyware/adware question
    Can anyone tell me why you can load 10 different spyware/adware removal programs and update them all and then run them on the same system and it seems that even though one says all spyware/adware are removed and the system is clean, anther one will find several hundred spywar...
  4. Reocurring adware/exactadvertising
    Please help I have some sort of adware or spyware on my computer and it won't go away. It is called ExactAdvertising and it keeps reinstalling. A trojan horse called v2x.dll also keeps reocurring. I have so much adware I dont know how to get rid of it. I read a very re...
  5. Remove adware.
    Hi experts, I have an annoying problem with adware. I get random popups, which usually is more frequent when I'm surfing the net (I always use firefox and it comes up as a IE popup window). This particular adware has survived everything I've thrown at it, and I don't know ...

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: ZylochPosted on 2004-08-21 at 22:07:41ID: 11862467

Hi

You can download Adaware also (http://www.lavasoftusa.com/), but I definitely recommend Spybot S&D, which you can also Immunize your computer from further attacks. (I'm not too clear about Spy Sweeper if that has Immunize too, then you can use that no problem).

You can try several things to remove midaddle. If possible, try to set Spy Sweeper to run as soon as you start the computer, when it might be possible to delete midaddle. Also, you can try to boot into safe mode and delete it. Finally, you can try booting into DOS mode, navigate to the file using the 'cd' command, and use the 'del' command to delete it.

Regards,
Zyloch

 

by: CrazyOnePosted on 2004-08-21 at 22:48:47ID: 11862542

Then boot to Safe Mode and maually delete the file or files

Description of Safe Boot Mode in Windows 2000
http://support.microsoft.com/default.aspx?scid=kb;EN-US;202485

 

by: CrazyOnePosted on 2004-08-21 at 22:52:56ID: 11862551

If XP is using the file System NTFS then booting to DOS will not be on no use because DOS does not recognize NTFS partions. If booting to Safe Mode does not work then do it from the Recovery Console

Description of the Windows 2000 Recovery Console
http://support.microsoft.com/default.aspx?scid=kb;en-us;229716

but first do this


Set an Automatic Administrator Logon for the Recovery Console
Control Panel >  Administrative > Local Security Policy.
Security Settings > Local Policies > Security Options. Locate the "Recovery Console: Allow automatic administrative logon" policy. Double-click this policy, and then set it to "Enable".

or edit the registry
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole
SecurityLevel (DWORD) 1 = no password, 0 = ask for pass
--------------------------------------------

Access To All Drives And Folders policy
Control Panel >  Administrative > Local Security Policy.
Security Settings > Local Policies > Security Options. Locate the "Recovery Console: Allow Floppy Copy And Access To All Drives And Folders" policy. Double-click this policy, and then set it to "Enable".

or edit the registry
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole
SetCommand (DWORD) 1 = allow floppy copy etc, 0 = restrict some file
copying


HOW TO: Add More Power to Recovery Console By Using Group Policy in Windows XP Professional
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q310497

BEGIN ARTICLE

--------------------------------------------------------------------------------
The information in this article applies to:

Microsoft Windows XP Professional
--------------------------------------------------------------------------------

IN THIS TASK
SUMMARY
Use Group Policy To Add Power To Recovery Console

SUMMARY
This step-by-step article describes how to use Group Policy to add more power to the Recovery Console. Windows XP provides a Group Policy that lets you add power to the commands that are available in the Recovery Console. Under normal conditions, the Recovery Console imposes limits on the environment in which it operates.

back to the top

Use Group Policy to Add Power to Recovery Console
If you pre-install the Recovery Console on a computer, you should use Group Policy to enhance the environment settings, adding power to the available file operations. To do so:
Click Start , click Run , type mmc in the Open box, and then click OK .

On the File menu, click Add/Remove Snap-in , and then click Add .

Click Group Policy , and then click Add .

Click Local Computer , click Finish , and then click Close to return to the Add/Remove Snap-in dialog box.

Click OK to return to the Console window.

Expand the Local Computer Policy object to Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options.

Select the Security Options object in the Console pane to display the security policies in the Details pane.

In the Details pane, double-click the Recovery Console: Allow Floppy Copy And Access To All Drives And Folders policy.

Click Enabled , and then click OK .

Quit the MMC. You can save the console in case you want to make changes.

After you have enabled this Group Policy, when you enter the Recovery Console you can change the environment settings with the set command, by using the set variable = TRUE or FALSE syntax.

NOTE : Be sure to use a space on each side of the equal sign. If you do not, the set command generates a "syntax error" error message and does not work.

The following variables define the default environment. The variables, when set to TRUE, enlarge the scope of the environment setting and have the following meanings:
AllowWildCards = TRUE Enable wildcard support for some commands (such as the del command)

AllowAllPaths = TRUE Allows access to all files and folders on the computer

AllowRemovableMedia = TRUE Allow files to be copied to removable media, such as a floppy disk

NoCopyPrompt = TRUE Do not prompt when overwriting an existing file

To see the current settings for the environment, type set without parameters at a command prompt.

For additional information about the Recovery Console on Windows XP, click the article numbers below to view the articles in the Microsoft Knowledge Base:
Q314058 Description of the Windows XP Recovery Console
Q216417 How to Install the Windows Recovery Console
back to the top

--------------------------------------------------------------------------------
Published Oct 20 2001 12:35AM  Issue Type kbhowto  
Last Modifed May 22 2002 2:25AM  Additional Query Words  
Keywords kbtool kbAudITPro kbHOWTOmaster  

COPYRIGHT NOTICE. Copyright 2002 Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052-6399 U.S.A. All rights reserved.
 
END  ARTICLE\

 

by: CrazyOnePosted on 2004-08-21 at 22:54:43ID: 11862553

Ummm I am sorry the above is for Win2000

Try this for XP

HOW TO: Add More Power to Recovery Console By Using Group Policy in Windows XP Professional
http://support.microsoft.com/default.aspx?scid=kb;EN-US;314058

Description of the Windows XP Recovery Console
http://support.microsoft.com/default.aspx?scid=kb;en-us;314058

 

by: ShattucPosted on 2004-09-25 at 05:30:12ID: 12150148

Lavasoft Ad-Aware http://www.lavasoftusa.com/software/adaware/
Spybot S&D http://www.safer-networking.org/en/download/index.html
AVG Free  http://free.grisoft.com/freeweb.php/doc/2/
Spyware Blaster http://www.javacoolsoftware.com/spywareblaster.html
Spyware Guard http://www.javacoolsoftware.com/spywareguard.html

These are all programs that can be used by the average computer user

without difficulty, and without undesired results.

Lavasoft Ad-Aware will clean up alot of spyware infections.
Spybot S&D will clean up alot of spyware infections.
between these two programs, most of the nasties can be safely removed

without damaging other programs.

AVG Free Antivirus is an Excellent Antivirus, especially since it is

free. (found a nasty trojan that was giving me Fits for a week)

Spyware Blaster is a program that you only have to run weekly, the

settings and changes it makes are static, and you don't need to keep it

running for it's protection to work.
It has a large database of Identified, and known spyware/malware/activeX

controls. It instructs windows and IE, Firefox, and mozilla browsers not

to install or run any of these nasties.

Spyware Guard is like your Antivirus, but for spyware, it is a resident

and is always running, if it encounters something that should not be

downloaded, by default it will popup a dialog box and ask for

instruction.

these last two, will help keep your system running smoothly.

lastly, make sure you do not run TWO antivirus programs at the same time.

it can result in conflicts, and leaving your system wide open to attack

and infection. (Spyware Guard is not an Anti-Virus and can be run side by

side with anti-virus without conflicts)

also in Spybot S&D there is a resident program called tea-timer. it

monitors your registry entries and notifies you of changes made to your

registry.

If all else fails and you do have an infection, then get a copy of Hijack

This. HiJack this is an Advanced Diagnostic tool. not everything it finds

should be fixed. if you fix the wrong entry, it can make your system

unstable, and even cause some programs to not function. if you must

resort to using Hijack This, be sure to consult an expert about your log

before you fix anything.
you can find it here.

http://www.bleepingcomputer.com/files/hijackthis.php

I personally recommend the folks at Tom Coyote Forums found here,

http://www.tomcoyote.com
but there are many forums where volunteers help you get control of your

system back.

If you prefer to deal with it here, you can post your log here, and I can

help you to the best of my ability.

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...