List of Pupups and Spyware

Today my computer got a major dose of popups and
probably spyware. I used SpyBot, but it didn't seem
to help.

Then I used Hijackthis. In the list I see a number of
popup programs. Is there a list of junk or a list of
non-junk? How do you know what to remove?

 

Hi Alan,

If you have malware issues, it is always a good idea to start with the Cleanup Tutorial HERE:
READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan and Virus Removal

Please note the steps that you are able to complete and the ones that give you problems. Note that you need to be in Safe Mode with System Restore OFF (if you have it - you didn't give OS) and have the Viewing of Hidden Files ENABLED as per the instructions in the link. Make sure to do the Online Scans.

The above steps will remove a lot of crap that would otherwise show up on a HijackThis log. You should run through them and post back and let us know how you fared.
You should also note that we see - on a daily basis - people running HijackThis improperly and putting their computer at risk. We will be happy to look at your log AFTER the above is completed.

Also note that, IF we ask for a log, your HijackThis should be up-to-date (v1.98.2) and MUST be extracted to its own safe folder - C:\Program Files\HijackThis

If you need a Fresh Download of HJT, get it HERE: HijackThis 1.98.2

Also note that, before you scan, you MUST close all running programs including your web browser, e-mail and items in the system tray.

Please save your HJT Log as a .txt file and attach it via the "Manage Attachments" tool in the Additional Options section when you post.

Let us know if we can be of assistance

Best,
PP

 

I'd rather just knock out a few with Hijackthis, but OK

How do I get to safe mode? I only do that when a
problem show up.

 

Hi Alan,

The instructions are in the tutorial. I know it seems like a bit much, but it is not really that daunting. We have found that it works well.


From the Tutorial:
How to boot in safe mode: To boot into safe mode, restart your computer and tap the f8 key (after first black and white screen, but before the Windows splash screen) until you get to a black and white screen asking you what to do. With Windows XP, 2000, NT, ME: Use your arrow keys and select "safe mode with networking support".

Booting in safe mode is important because best results are achieved since safe mode disables most drivers and running programs. If you have a problem for any reason trying to run these scans in safe mode, do them in normal boot mode but make sure you tell us that in any subsequent message you may need to post about your problem.

The reason we ask people to run through this is that it clears away a lot of crap that would find its way into a HJT log. Saves time. There are only a few volunteers here who regurlarly address logs and Chaslang does 90% of them. I only do a few now and then due to time constraints.

But, if you are willing to bear with us, we'll be happy to help.

PP

 

I'm sorry. I saw that a couple of minutes later.

While I am working on this process, another question came to me.

Would using something like Foxfire or Firefox or whatever eliminate
or reduce the chance of this happening again?

 

Firefox is pretty safe right now. I imagine that if it gains in popularity, malware purveyors will begin to target it more. Its all about money and click-throughs and selling advertising. Right now, since M$ has a corner on the market, there is more money to be made attacking the flaws in IE.

Firefox will NOT protect you against malware that you knowingly (or, not so knowingly, as often is the case ) put on your computer yourself. This includes the crap (LOP, etc...) that rides along with Kazaa, P2P stuff and the like.

You should take a look at Chaslang's suggestions: How to protect yourself from malware!

You should also use the search function to search the Software Forum for Firefox - It has been discussed ad nauseum.
Also, let us know how you are doing with the Cleanup Tutorial! What specific malware problems are you having?

Best,
PP

 

I've been through the entire proceedure. I am still getting popups.

In task manager there are a couple of things running that I think are new.

Specifically.

lfjesv
CxtPls
maybe rpctpub

all exe's

 

Hi Alan,

Some of that looks familiar! Please run the Online Trojan Scan and a-squared in the Alternative Scans - If still having problems section of the tutorial.

Then, scan with HijackThis and attach your log. Make sure to follow the instructions in my first post. I am heading out the door in a few minutes - I'll try to check back tomorrow. Chaslang may beat me to it if he's not too busy. Either way, we'll get you fixed up

Best,
PP