Desperate.Have a pest..KoolyNoody..that downloads itself each time I start.?

Question

Yahoos anti-spy seems to be the only one that caught it. They "remove" it (just quarantine really) & the next time it is back. I think the path is

hkey_current_user\software\microsoft\w... settings\zonemaps\domain\koolynoody.net

right now it is quarantined. Can I get it off in that state? I am not a comp. geek so have no idea even where the hkey setting is. Why does microsoft say no problems found as well as spybot say it's okay. Any help would be appreciated.

Answer 1

Google gives several references to it with a slightly different spelling. Another thought, what is the location shown? Possibly System Restore? If so then temporally disable Sys. Restore. This should eliminate it. Then re-enable it. Good luck.,

Answer 2

Download Ad-Aware 2007, (lavasoft.com) I'm sure it will find it. Then, Open up your internet Browser. go to Tools>Internet Options> Security Tab>Trusted Zone > Sites

If KoolyNoody is in this zone, remove it. Then go to the Restricted section, and put KoolyNoody in, then add it.

Hope this helped!

blaster

Answer 3

It is a false positive detection by your YAS.  You have used Spybot's "Immunize" feature which has added many sites into your Internet Explorer restricted zone (Tools > Internet Options > Security Zone > Restricted Zone > Sites.

YAS is detecting this registry key as a "threat" and it is actually a preventative measure from Spybot.  

Yahoo / CA is famous for detecting sites in the restricted zone as threats and has been doing it for years.

Your computer is safe.

I suggest that you discontinue use of YAS, it is as useless as b***s-on-a-bull!