Using system restore to revert to pre-spyware state

[packdragon]

A coworker of mine accidently hit a landmine of spyware evil when he accidently went to sqldev.com instead of sqldev.NET. He's gotten rid of most of them, but one seems to be a persistent little bastard. When a spyware program removes it, it comes back. When he kills its process it comes back immediately. I can find no information whatsoever on the name of this process: kyykkh.exe

I see two options: Use system restore to revert back to the day before this mess happened. Or turn off system restore and run the anti-spyware program to remove it. When system restore is turned back on, will that pesky program restore itself? Which is more likely to work?

He's a busy developer with a of work, which is why we're not playing around with our options. I'd like to get a recommended course of action so we don't waste his time. Thanks!

- Zoe, that's ZOH-EEE, get it right please
- Just a little ol' MCP at Solien Technology
-

http://www.solien.com

 

[carrr]

Turn off system restore, then run the removal. Enable system restore after reboot. This is the standard.

Tired of waiting for an answer? Try asking better questions. See: faq222-2244

 

[colin020876]

turn off system restore delete the spyware and install spybot 1.3 with registry backup and tea timer , uncheck enable on demand(internet explorer)and reboot.enable system restore . try spyware sweeper it removes a lot of spyware and spyware blaster and check all for protection

 

[packdragon]

Thanks for the advice. I think he's used just about all that software you just mentioned. Only system restore was never turned off before he used them.

- Zoe, that's ZOH-EEE, get it right please
- Just a little ol' MCP at Solien Technology
-

http://www.solien.com

 

[cmeagan656]

If you don't turn off system restore before you clean the machine the spyware will come right back.

 

[scapegoat98]

Call me stupid, but here's my question. How do you turn off system restore?

 

[greyted]

Have a look here:

http://www.pchell.com/virus/systemrestore.shtml

Ted

"The difference between a misfortune and a calamity is this: If Gladstone fell into the Thames, it would be a misfortune. But if someone dragged him out again, that would be a calamity."
Benjamin Disraeli.