zedo popups

Discussion in 'Malware Help (A Specialist Will Reply)' started by whitelines, May 24, 2006.

  1. whitelines

    whitelines Private E-2

    Okay so today I keep getitng zedo pop ups and my spyware removal programs arent detecting it... I tried looking in your archives on how to remove zedo but I couldn't find any specific instructions. Also, if I download pest patrol will that get rid of it? I'm afraid to download anymore anti virus programs in case they end up conflicting with each other.
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.
    • Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
    • Make sure you check version numbers and get all updates.
    • Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.
    • After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:
    • When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)
      • Bitdefender
      • Panda Scan
      • HijackThis
    Let's also get an installed programs list from HijackThis!
    • Run HijackThis, click Open the Misc Tools section
    • Click Open Uninstall Manager
    • Click Save List (generates uninstall_list.txt)
    • Click Save, to save it to a file where you can find it.
    • Attach the uninstall_list.txt file to your next message.
     
  3. whitelines

    whitelines Private E-2

    Sorry - I ran CCleaner, Ad-Aware shows I have Alexa, Spbyot S&D shows nothing. I can't run CounterSpy because my mom deleted it off this computer, it was causing problems. CWS found nothing.

    I forgot about a virus I had (the setup.exe) attaching itself to kill box after I killed it. Or I am assuming that's what it did... I'm not very smart. ActiveScan showed it, though - therefore reminding me.
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You said you removed CounterSpy but it still shows in you HJT log.

    You should not have Ad-aware 6 Personal installed anymore since you have the new Ad-Aware SE. Uninstall the old version.

    Also uninstall
    BackWeb

    Do you use CompuServe ?

    What is the below? Sounds like ad-ware to me! Or is it related to a College Savings Program?
    MyPoints Point Alert!


    Is your copy of Spy Sweeper a paid version or free trial?

    You need to delete the below file if it still exists:
    C:\My Documents\My Downloads\MNPASSetup_cb.exe
     
  5. whitelines

    whitelines Private E-2

    Okay well my mom said she got rid of CounterSpy, but maybe she didn't 'fully' get rid of it yet. But I knew she wanted it off.

    And I'll remove the old Ad-Aware I didn't know we ever had it on this computer.

    My mom signed up (a long time ago) for MyPoints and it caused a lot of problems with our computer. We've never been able to get it off. So how do I remove it? It doesn't let you on Add/Remove programs.

    And isn't BackWeb apart of AOL? I've been wanting to delete it cause it causes a lot of errors on my computer, but I read somewhere that it's apart of AOL.. and i was afraid if I deleted it my AOL wouldn't run.
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Just fix the related line showing in your HJT log.

    Try using the below to remove it:

    Add/Remove Program Cleaner 2.0

    Then have HJT fix the below line:
    O9 - Extra button: Point Alert - {16BF42FD-CA0A-4f48-819D-B0343254DD67} - file://C:\Program Files\MyPointsPointAlert\System\Temp\mypoints_script0.htm (file missing) (HKCU)


    No! Backweb is junk used by many companies like HP, Compaq, Logitech, Kodak (and more) to automatically look for updates to their software and hardware. It is considered mild adware and can cause more problems than it is worth. You are better off downloading and install updates yourself rather than letting anyone do it behind your back. If you do the updates and something breaks, you would know why.

    Didn't you notice the below:
    O4 - Startup: Updates from HP.lnk = C:\Program Files\BackWeb\BackWeb\Program\backweb.exe

    Read the below for more info:
    http://www.bleepingcomputer.com/startups/backweb.exe-506.html
     
  7. whitelines

    whitelines Private E-2

    Okay, sorry I didn't notice that. Thanks for letting me know. Does that mean Frext is apart of HP then? I'm starting to get so confused now. I read that Frext was apart of BackWeb and BackWeb was apart of AOL.

    I got rid of all that you told me too, and when I went to get rid of Counter Spy the sunserver/counterspy part on the HJT log wasnt there.. and its like nowhere that I can tell on my computer. So I'm guessing last night my mom finished getting rid of it.
     
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Not necessarily. But it probably is in your case since the other line I pointed out definitely was from HP.

    I repeat! Backweb is not part of AOL.


    Where do all of your malware issues stand now? Were you able to get rid of MyPoints?

    Are you having any other problems?
     
  9. whitelines

    whitelines Private E-2

    Okay I was just wondering if it was apart of HP (the Frext) cause I get errors with it.

    And yea I was able to get rid of my points.

    Surprisingly this computer isn't taking ten minutes to load when I start it up. And its not freezing quite as much. I haven't got a zedo pop up today...so I think I'm good!
     
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Did you remove/uninstall Backweb? Is any of it showing in your HJT log now?

    What about my question on CompuServe?
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds