adware problem

Hey everybody new here. I was doing a Norton virus scan the other day and it detected a adware file name: f3Setup1.exe. Norton can't delete this. I also have ad-aware SE and spybot both free versions and they can't detect this threat. So after doing some research on the computer forums it seems everybody is in agreement that I should disable system restore,reboot and then scan again. Since Norton detected this adware can Norton delete it now I wonder or should I go with another virus program to get rid of it. I also did the Hijackthis and some things were "fixed" via another forum but did not get the adware. Any suggestions? Am I on the right track? Not sure where this came from. Not very computer literate dang it but learning all the time.

 

Hi Neal,

Try looking in Add or Remove Programs for IBIS Toolbar or Wintools and Uninstall if found. It is may be that this is a remnant left over from something that Norton removed already. Perhaps you can use Pocket Killbox to delete the pesky file?

Here is the standard speech:
Generally, it is a good idea to start with the Cleanup Tutorial HERE:
READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan and Virus Removal

There are only a few of us Volunteers who regularly offer advice in this forum. Running through the above Tutorial will remove a lot of stuff that would otherwise clog a HijackThis Log and save us valuable time.

Please let us know the steps that you are able to complete and the ones that give you problems. Note that you need to be in Safe Mode with System Restore OFF (if you have it - you didn't give OS) and have the Viewing of Hidden Files ENABLED as per the instructions in the link. Make sure to do the Online Scans.

Post back and let us know how you fared. Also, send us a HijackThis Log. Be sure to follow the instructions below:

Note that your HijackThis should be up-to-date (v1.99) and MUST be extracted to its own safe folder – C:\Program Files\HijackThis!

If you need a Fresh Download of HJT, get it HERE: HijackThis v1.99

Also note that, before you scan, you MUST close all running programs including your web browser, e-mail and items in the system tray.

Please save your HJT Log as a .txt File and attach it via the "Manage Attachments" tool in the Additional Options section when you post.

ALSO, Please download the following tool: Pocket KillBox


I’ve been pretty busy with work lately, but somebody will try to take a look when they get a chance.

Best luck
PP

 

Yes and THANK YOU. Sorry but did not see the "read first" until after I had posted. My apologies everyone.

 

That happens a lot. No biggie - That's why I keep the cut&paste speech handy!
How are things progressing? Keep us posted.

PP

 

I'm going to do the read first stuff tomorrow and have a question. "Just unzip to a folder". What does this mean please?

 

That just means that you should extract everything from the ZIP File to a safe folder. Here is an example for HijackThis:

To create a new folder:

Click START > My Computer > Local Disc C: > Program Files
Now, RightClick on an Empty Area and select New > Folder & name it HijackThis and ENTER

To Unzip to that Folder:

Now, RightClick your HijackThis ZIP File and select Extract All > Next > and browse to your newly created HijackThis Folder (C:\Program Files\HijackThis)and click Next.

PP

 

Thank you Philie for your patience.

 

Like you said, you're learning all the time. Any and all questions are welcome - Nobody is born knowing ALL. . . . (Unless your name is Chaslang! )

PP

 

Alright I tried to log on to internet and can't do it. I tried as myself and as administrater but computer will not let me do it. What next? I'm talking about in safe mode with networking.

 

Ok I'm done with my XP. That machine is clean,nothing was found even that file f3setup1.exe that norton found has gone away. I scanned with Norton last night and it was clean. Don't know what the deal is on that. Now my other computer is a different story-98 second edition. Trend Micro virus scan found 2 trojans right off to bat. I took care of those and that was it for that machine. I didn't get to run cwshredder or kill2me cause I could not create a zip folder for those two-I tried but couldn't get 'er done. Thanks for the info and help and I look forward to listening and reading and learnng from this forum. I wont be doing much posting but lots of reading. Thanks again.

 

If you cannot do the online scans in safe mode, do them in normal windows. It looks like you were able to do them - I really like them because, many times, they are the more Up-To-Date than resident AV Tools. Keep in mind that you can do them whenever you feel the need and they won't conflict with your Norton.
I think f3setup1.exe was probably just a remnant of something Norton removed earlier. I doubt it is anything to worry about.

If you'd like to submit HijackThis logs for both computers, I'd be happy to doublecheck them when time permits. Just attach them as per my previous post.
Definitely stick around and take advantage of the site - you may like to start here: How to Protect yourself from malware!

Best
PP