HELP!!! Randreco.exe????

[SweetErika]

A friend found randreco.exe on her computer. I found some info on it, but can't figure out how to remove it. Has anyone else had this trojan? She's running XP with Norton Corporate Edition, Spybot, Adaware, and has DSL. Any ideas and suggestions would be greatly appreciated! Thanks in advance!

 

[heckle]

A good site to check for your anitvirus needs is the symantec site.

http://symantec.com/avcenter/

 

[SweetErika]

A good site to check for your anitvirus needs is the symantec site.

http://symantec.com/avcenter/

Maybe I'm just really stupid, but I couldn't find anything on the Symantec site at all. I've also read that Norton and McAfee won't pick this one up. Adaware and Spybot did since it's a data miner, but we can't figure out how to get rid of it. Thanks for the suggestion though!

 

[fgarvb1]

I'll see if I can find some links.

Sounds like a pain in the ass to get rid of!

http://forums.thetechguys.com/archive/index.php/t-5857.html


http://help.lockergnome.com/index.php?showtopic=22409&hl=randreco\.exe

 

[SweetErika]

I'll see if I can find some links.

Sounds like a pain in the ass to get rid off!

http://forums.thetechguys.com/archive/index.php/t-5857.html

Yes, that was one of the better ones I found. She's not having overt problems from it, but she certainly can't follow complicated instructions that require a tech background to remove it (I don't know if I can either). However, anything anyone can find is better than nothing at all! Thanks fgarvb1!

 

[fgarvb1]

You are welcome.

There is not a whole lot out there. That is what I fear most, getting some Trojan or virus before it gets on the big boys radar!

 

[Weird Harold]

She's running XP

One point made in one of the links is very important for those running XP -- purge your system restore to remove trojans and viruses from the back-up as well as the current settings or XP will just reinstate it if you hve to restore your sytem.

Generally, booting your system in safe mode and using the find files and folders to find the offending file and delete it is the best option when you know a specific file name.

REGEDIT or Norton's registry editor has a search function that will take youto the registry key that contains the filename "randreco.exe" so it can be deleted as well.

Ad-aware and/or Spybot S&D should be able to clean up whatever is left, but deleting the file, deleteing the registry key, and resetting your System Restore function should render the trojan impotent to affect the system.

 

[SweetErika]

Re: Re: HELP!!! Randreco.exe????

One point made in one of the links is very important for those running XP -- purge your system restore to remove trojans and viruses from the back-up as well as the current settings or XP will just reinstate it if you hve to restore your sytem.

Generally, booting your system in safe mode and using the find files and folders to find the offending file and delete it is the best option when you know a specific file name.

REGEDIT or Norton's registry editor has a search function that will take youto the registry key that contains the filename "randreco.exe" so it can be deleted as well.

Ad-aware and/or Spybot S&D should be able to clean up whatever is left, but deleting the file, deleteing the registry key, and resetting your System Restore function should render the trojan impotent to affect the system.

Thanks WeirdHarold! I believe we may have gotten rid of the problems, but I will double check that with the safe mode procedure. Good to know for me too! Just double checking...you press F8 right after the BIOS screen (in my case, the Dell screen) to get into safe mode, correct?

 

[Weird Harold]

Re: Re: Re: HELP!!! Randreco.exe????

Thanks WeirdHarold! I believe we may have gotten rid of the problems, but I will double check that with the safe mode procedure. Good to know for me too! Just double checking...you press F8 right after the BIOS screen (in my case, the Dell screen) to get into safe mode, correct?

Corrct, but the window of opportunity to press F8 is small. Try holding down the CTRL key as the system boots until you get the start-up menu. Most newer computers recognise that option.

 

[SweetErika]

Great, thanks again Harold! I hope you know and hear how much you're appreciated often!