Stubborn spyware: need your help

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by denglu, Oct 23, 2004.

  1. denglu

    denglu Private E-2

    Hi guys,

    I am having a problem with spyware (or whatever it is). I did go to your webpage http://forums.majorgeeks.com/showthread.php?t=35407 and followed all the steps that were prescribed. It did help to clean up my computer from lots of crap (like unnecessary files on my computer), but, unfortunately, did not solve my problem completely.

    Essentially, my problem is that every time i activate a new IE window, i am getting a popup despite the fact that i installed google pop-up blocker and activated internal IE pop-up blocker. I ran Ad-Aware SE Personal and Spybot using the latest versions of definition files, they did find some spyware and malware and i quarantined it and removed them. All this was done in a safe mode with the "System restore" being turned off. After all the cleaning i reactivated "System Restore" and rebooted in a normal mode. Opened the explorer and again the same thing: new ie window - two-three new popups.

    However, now before these popups appear, Spybot gives me the following message: "Spybot-S&D reports that you want to download "Advertising.com/Avenue A Inc./Doubleclick.com". This is a known threat. Do you want to BLOCK this download?". I click "Yes", but the popup appears nevertheless. So after running all these cleansing programs and cleaning registry, harddrive and boot memory, this goddamned spyware still sits on my computer and everytime i activate a new IE window, it generates a new popup!

    What i really find surprizing is that all these websites "Advertising.com/Avenue A. Inc./Doubleclick" are mentioned in the Spywareblaster section called "Mozilla/Firefox" and nevertheless i am still getting the popups from these websites. Though for some reason, these webistes are NOT mentioned in the Spywareblaster "Restricted websites" section...

    I am aware of the fact that i can just go to Spybot "Immunize" option and choose "Block all bad pages silently" and this will probably prevent popups from appearing, BUT my concern is that this stupid spyware will still be sitting on my computer and will keep generating the popups, making spybot block it everytime i open a new IE page. The fact that Spybot will have to do block these popups everytime a new IE window is open will considerably slow down the computer. WHAT I AM REALLY TRYING TO ACHIEVE IS NOT JUST BLOCKING THESE POPUPS, BUT RATHER GET RID OF THE SPYWARE THAT CAUSES THEM TO APPEAR ON SUCH A REGULAR BASIS!

    I know you are guys are busy, but i would so much appreciate your advice and help in this respect.

    Configuration of my computer is as follows:
    Dell Notebook, Inspiron 5100, Windows XP Professional, Service Pack 2.
     
    denglu, Oct 23, 2004
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You should read the tutorial in this Sticky thread NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

    Now post a HijackThis as a .txt file attachment to your message. All running programs should be closed, including your web browser, e-mail. Close before running Hijack This!

    Do NOT run Hijack This from the Desktop, a temp folder, or from a sub-folder of C:\Documents and Settings, or choose run it directly from the downloaded ZIP file. Place it in its own folder, for example C:\Program Files\HJT
     
    chaslang, Oct 24, 2004
    #2
  3. bailmeout

    bailmeout Specialist

    its nice but how about webroot spysweeper it menaged to get rid of all my spyware and ive tried hijack this, noadd aware, pest control u name it....
    manula registry cleaning etc..... the above program seemed to deepclean the whole system i sure would recommend it but then again thats just me :p
     
    bailmeout, Oct 24, 2004
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    SpySweeper is a good program but it is not free. It does clean lots of problems but just like Ad-Aware and Spybot (and others for that matter), they can all find things the others do not. That is why we recommend using more than one.

    NoAdware on the otherhand is on a list of rogue/suspect spyware removers and we absolutely would not recommend using it. See: http://www.spywarewarrior.com/rogue_anti-spyware.htm

    HijackThis is not a spyware scanner or automatic removal tool. It is a tool for display various entries from your registry. These entries are places that all forms of malware like to insert themselves. So HijackThis gives you an output that experts can use to sniff out malware and help to fix problems manually.

    And what does any of your post have to do with fixing Denglu's problems.
     
    chaslang, Oct 24, 2004
    #4

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds