How to get rid of randreco.exe?

Question

My firewall (ZoneAlarm) keeps intercepting outgoing calls to www.abetterinternet.com apparently from a program called randreco.exe. I have removed all references in HKLM/.../current version/Run and deleted the file from windows/Temp but it keeps reinstalling itself. The last time it created a folder on the desktop caller DRTemp containing the randreco.exe file..

Nothing is running in the TSR's prior to the outbound attempt. I have a feeling this may have installed itself into IE6.0 execution files.

How do I get rid of this guy?

Thanks for any help.

Answer

This question was answered on December 2, 2004. Much of the information contained herein may have changed since posting.

To the best of my knowlege to get rid of this EXE you need to first serach your HD for the EXE itself Then delete it as well as any Prefech files it created Next goto Regedit and search for randreco and delete the startup that creates it in the frist place Where it is may vary depending on where it puts itself Then Download SpyBot Search and Destory @ www.download.com and run it This will clean out any and all entries of known Trogans and spyware you may have.

Need Help with this Issue?

We help people with technology! It's what we do.
Schedule an Appointment with a location for help!

Author

Posted by Kareem of Katharine Gibbs School - New York on December 2, 2004