Another victim of canada.exe, elite

gyoung · May 23, 2005

I've tried everything except tossing my computer over the balcony (I'd like to avoid that). I think I followed the steps correcty... ran spybot, adware, norton antivirus, hijack (and fixed entries) but as soon as I restart the "confirm" dialer popup appears, the "click me" shortcuts have returned and I'm getting browser ad popup about every 10 seconds (mostly for "Party poker" and Computer professor").

Read most of the threads and followed the steps, but no luck. Please, anyone who can help I'd really appreciate it. Thanks.

chaslang · May 23, 2005

Most people who have Party Poker on their PCs installed it themselves. Are you saying you do not want it? Nor do you use it?

Please follow ALL the steps in the below. I' m not sure from what you stated that you have run all the steps.

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus RemovalMake sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

gyoung · May 24, 2005

Chaslang, Thanks very much, I finally cleaned my system. The first time I went through the steps I ran a few in normal mode and I was supposed to use safe mode. Went through the steps a second time and I was fine.

Only suggestion is the Symantec Online Virus scan didn't help in safe mode; at 640x480, I couldn't scroll to see if they allowed me to delete the viruses they found. Had to run regular Norton AV in normal mode. Regardless, it did the trick. Thanks again!

chaslang · May 25, 2005

You're welcome. Happy to hear it worked for you.

Log in or Sign up

Another victim of canada.exe, elite

gyoung Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

gyoung Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member