Qoo|aid

DrOleander · Aug 29, 2005

Welp, oddly enough, ever since I switched from IE to Firefox, I started getting ads and popups on every URL change. So after running about 5 anti-spyware programs and 3 anti-virus programs, I'm at a loss as to how I'm going to permanently get rid of a piece of malicious software called "Qoo|aid". Trendmicro housecall will only find one instance of Qoo|aid on a full system scan. Norton will find about 66, and antivir finds 0.

Microsoft anti-spyware finds 0, ad-aware finds 3 cookies, spybot finds 0, hijack this! finds 0 abnormal keys, trendmicro anti-spyware finds 2 cookies, and Spyware Doctor finds 15 cookies.

In either case, no matter how often I delete/quarantine these files in safe mode or in normal windows, Qoo|aid keeps coming back. Worse yet, I can't find any information with google, because I can't pair qoo|aid since | isn't a registered character link in google. Equally as disappointing, I can't find any information on majorgeeks about this particular piece of adware.

Yes, my windows update is fully updated with all security patches and whatnot, as are all of my scanning programs.

Asus A7N8X Deluxe PCB revision 2.0
AMD Athlon XP 2500+ (Running 194 Mhz FSB, CPU multiplier of 10.5)
1.5 gigs corsair PC3200 running dual channel
BFG Geforce 6800GT (Overclocked edition... a whole 20 mhz push to the core :/)
1.5 gigs corsair PC3200 running dual channel

chaslang · Aug 29, 2005

Please follow the steps below:

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

DrOleander · Aug 30, 2005

Here's the log.

chaslang · Aug 30, 2005

DrOleander said:

Here's the log.
Click to expand...

Did you complete all of the READ ME FIRST?

You forgot to attach your log!

Log in or Sign up

Qoo|aid

DrOleander Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

DrOleander Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member