Help2Go.com

TenMonkey.com Removal

by Oscar Sodani
January 22, 2006

If your web browser periodically redirects to TenMonkey.com and shows advertisements, then your computer is infected with a Trojan Dialer.

The most likely scenario is that you have a file called ctfmon.exe in either your C:\WINDOWS directory that is loaded on startup and is causing this problem. However, there is also a legitimate Microsoft Office file with the same name, which makes it more difficult to know which file is the culprit. OR it may be a file called agentsvr.exe in your C:\WINDOWS\SYSTEM32 directory.

To get rid of this file and the TenMonkey.com ads, you should first go through the steps in our Get Rid of Spyware guide. Ad-Aware or Spybot should be able to clean this infection for you.

If the pop-ups persist, when you get to the steps that deal with HijackThis and the Help2Go Detective, pay special attention to see if you have an entry in your HijackThis log for ctfmon.exe or agentsvr.exe (don't worry - this will make more sense when you read the guide). Follow the directions that the Help2Go Detective gives you, and you'll be in good shape.