Spyware - says my registry is hacked

[Zzman]

Trying to help a friend running Win2K with SP4.

Somehow, he's got some spyware/malware installed it would seem.

Whenever you use a dialup connect to login to your ISP, you continually get popup messages saying the registry has been hacked, go to such and such website, to get the software to fix obviously. It would seem there are 50 different websites to go to - probably all the same entity.

Adware SE doesn't see this.

1 - agree that we've been hacked?
2 - best tool to fix this?

TIA

Zzman

 

[DelJo63]

search for Hijactthis on this board. RealBackStuff has outline the usage and when
you post the log PLEASE use a txt file and ATTACH it rather than copy/paste inline.

 

[RealBlackStuff]

Use another PC to download the programs mentioned in the next post, and burn them on a CD or copy onto a USB key. Then disconnect the phoneline from that PC before you start.

Follow these instructions EXACTLY and put HijackThis in e.g C:\Program Files\HJT and NOT in Temp or on the Desktop!.
Read: How to remove Begin2Search/Coolwebsearch and Other Nasties

Then Read: How to post your Hijackthis log-files as an attachment.