Search This Blog

Tuesday, August 22, 2006

Removing the trustcleaner Virus (Adware program)

I used the following method to get rid of this.

Please refer to the URL ,

http://www.superantispyware.com/definition/wschtm35/

This uses the DLL , WSCHTM35.DLL. This is stored in the temporary directory (%TEMP%)
use the procexp to locate the substring.

I found that this process is owned by the explorer.
Uninstall the software first and then
Write a batch which first kills the explorer.exe and then delete the file WSCHTM35.DLL.

And delete the corresponding registry entries.





No comments: