RE: removing spyware (ezula)

[Ben Finegan <bfinegan () sim2k com>]

You may look in the registry under HK Local
Machine\Software\Microsoft\Windows\Current Version\Run, RunOnce, and
RunOnceEX to see if there is a key that is loading the program.

-----Original Message-----
From: McCleskey, David [mailto:dmccleskey () polymersealing com]
Sent: Friday, May 16, 2003 10:40 AM
To: 'security-basics () securityfocus com'
Subject: removing spyware (ezula)


Hi

I am having a very difficult time removing ezula from a nt 4 box.  
Every time I uninstall it, it reloads itself during the next logon.
I have ran Ad-aware, and Spybot Search and Destroy in combination with the
ezula uninstall.
Does anyone have any experience with the removal of this nasty adware
program?


---------------------------------------------------------------------------
Thinking About Security Training? You Can't Afford Not To!

Vigilar's industry leading curriculum includes:  Security +, Check Point, 
Hacking & Assessment, Cisco Security, Wireless Security & more! Register
Now!
--UP TO 30% off classes in select cities-- 
http://www.securityfocus.com/Vigilar-security-basics
----------------------------------------------------------------------------

---------------------------------------------------------------------------
Thinking About Security Training? You Can't Afford Not To!

Vigilar's industry leading curriculum includes:  Security +, Check Point, 
Hacking & Assessment, Cisco Security, Wireless Security & more! Register Now!
--UP TO 30% off classes in select cities-- 
http://www.securityfocus.com/Vigilar-security-basics
----------------------------------------------------------------------------