Now what

My Dear Niels....


Just the man I wanted to talk to.....!


Thank you for trying to help. I am at a loss....I have literally manually gone through a HECK of a lot of folders, files, etc...searching for leftovers. I did everything possible that I can think to do, and with dialup, it is sooooooooo tedious...the Root kit still won't work. Is there some way, I can install it from a separate location? It keeps saying that the engine failed to initialize. Is there someway to check on the "engine?"


Now, and this is for you specifically...


I have tried to delete Teknum off my computer...they flood my system with desktop ini files, and temp files, have made themselves administrator on my computer and have changed my settings. I am advising you to seriously think it through before you advise anyone to download Handybits or anything from that company. I have posted all over the net at different forums and it is a very very rouge and devil file, regardless. I have tried to remove from my ssms file but following the last posted instructions online, I can't seem to get them off. They've changed their tactics, apparantly. I can't even delete the registry key anymore! Once I get to the location to delete from Command prompt following online instructions, even in safe mode, it can't do it....all it says is :


"Volume in C drive has no label...volume serial # is A-42D-A66F.....that's it....can't delete it.


Secondly,


my attempt to remove them from adminstrator status.....every time I try to make a change in user accounts I can do everything but remove TEKNUM!!! I can't take away their permissions, I can't edit their account period. I have written a scathing letter to the Florida location and if necessary will get a lawyer as I have digital photos of all the places they have "doctored" my computer. Everytime I have tried to stop that freaken' updater.exe file it gets worse. I understand that using their uninstall tool really doesn't do much...so, seeing how you were the one who was the advisor, and to prove to me that you don't get commissions from them..... ;) you tell me HOW to remove them COMPLETELY so there is not even an atom or nanoparticle of them on my computer.....can you do that? They show up in CCleaner every run and it's pathetic. I am surmizing my rootkit problems are them as well. This is getting very very tiresome, Niels. Please see links:


Hi,


It looks like the program leaves traces of itself even after attempts at removal.


http://www.handybits.com/


Several other users have reported problems with the program.


http://forums.spywareinfo.com/index.php?showtopic=24462


http://www.wilderssecurity.com/archi...p/t-13100.html


http://help.lockergnome.com/windows/...ict259566.html


http://www.cybertechhelp.com/forums/...ex.php/t-32353


Some of the people still had unresolved issues after installing this "program" into their PC. You can run a Hijackthis utility and post the log on one of the tech support forums to see if they can work at getting rid of the operating system files and entries off your PC.


I read the feedback on the program website, all of the comments are dated from 2001.


http://www.handybits.com/feedback.htm


__________________


Windows XP 768MB/Antivir 7/Zone Alarm 6.1.744.001/SUPERAntispyware/


Ad-aware/Spybot S&D/SpywareBlaster/A-squared/Firefox 1.5/MS IE 6


Free scans:T. M. House Call T. M. Anti-spyware A-squared malware Ewido Anti-malware Panda Active Scan Kaspersky AV Bitdefender


ccsito


View Public Profile


Send a private message to ccsito


Find all posts by ccsito


Find all threads started by ccsito


#6 May 26th, 2007, 10:11 AM


Longboard


Very Frequent Poster Join Date: Oct 2004


Location: Sydney, Australia


Posts: 1,397


Re: Old Question


--------------------------------------------------------------------------------


@Brandialexander


I hope you have posted at the BD forums and/or pm'd a mod there re this "helper".


A very painful lesson for you, sorry to hear of it.


Get a good recovery programme: FDISR, ShadowProtect, Terabyte; whatever...


At least you'll never be burned again.


The above links are, unfortunately, good reading for you


Maybe someone here can help or as suggested go to one of the HJT forums: here is good:


http://gladiator-antivirus.com/forum/index.php?act=idx


Post your problem and I hope you will get some help


__________________

Comments

  • Hi Brandi,


    I had problem with Rootkit engine like you but now my Bd is working fine.


    What i have done is that i uninstalled BD from Add/Remove programs, deleted all the registry and files of BD.


    Also a have unistalled services like: bdfdll, BDFSDRV, bdpredir, BDRSDRV.


    After that i have deleted all the registry of profos and trufos from ControlSet01-ControlSet05 and CurrentControlSet\Services.


    If you can`t delete the registry, right click on them, select permissions and from that menu select Full control and now you will be able to delete the registry(i suggest to use regedit.exe for this).


    After that restart the pc and run the installer.


    Have luck.


    Regards


    khufu

  • Dear Brandi


    For your rootkit question look at khufu's suggestions.


    Spybot is the only antispyware program that detects the teknum update. That was for met the case other vendors didn't mark it's as an threat.


    So If it's a real threat almost every antispyware program must detect it. I don't have any problems that handybits file shredder place ini files or even changes certain system files or any temp files. So your hard disc problem must be a bad coincidence.


    You can try to uninstall it completely by first disable the service by using their tool after that you can use a tool such as your uninstaller or ashampoo uninstaller or similar. These programs make a kind of database and will remove also the leftovers. But the program must be still installed. Reboot your pc afterwards go to start,my computer,double click on the name of your hard disc go to program files,common files,teknum systems and delete that folder. If you already used that tool,ccleaner. Then you can just delete that folder. After I done that spybot didn't find it anymore.


    Regards


    Niels