help me , i cannot stop the pop ups!!

Discussion in 'Spyware' started by elfkar2001, Apr 11, 2005.

  1. elfkar2001

    elfkar2001 Guest

    please help, I installed a spyware remover, called webroot spy remover,
    it ran ok and said the spyware was deleted, but when it is finished,
    all pop ups keep coming back.
    also it said i had adware trojan horses which were also deleted. but
    again when it scanned on reboot, all spyware and pop ups were back ever
    time. they even pop up when i am not in a broswer. os is win xp PLEASE
    HELP ME!!!

    WHAT DO I DO? thanks all..
     
    elfkar2001, Apr 11, 2005
    #1
    1. Advertisements

  2. elfkar2001

    AvianFlux Guest

    Try running WebRoot in Windows 'Safe Mode', and make the fixes there.

    Also get HijackThis!, and run it in Windows 'Safe Mode', copy/paste the
    HJT logfile to, I Am Not A Geek's HijackThis Log Analyzer, and 'Fix'
    any obvious RED flags with the HJT scanner, while in Windows 'Safe
    Mode'.

    Get Intermute's CWShredder, and do the same thing.

    Merijn's HijackThis! scanner: http://www.merijn.org/downloads.html

    IANAG HJT Analyzer: http://hjt.iamnotageek.com/

    Intermute's CWShredder:
    http://www.intermute.com/products/cwshredder.html
     
    AvianFlux, Apr 11, 2005
    #2
    1. Advertisements

  3. elfkar2001

    CWatters Guest

    Some of this stuff can be very difficult to remove. Some spyware/adware even
    repairs itself when you try and remove it.

    First make sure you have WinXP firewall enabled.
    Then downloading these free programs and run the scans they offer

    Spybot Search and Destroy from
    http://www.safer-networking.org/en/download/

    Microsoft antispyware from
    http://www.microsoft.com/athome/security/spyware/software/default.mspx

    Only get them from the sites listed above because fake copies may exist.

    You could also download Ad-Aware from this site (only this site)...
    http://www.lavasoftusa.com/
    ...but you need to post the results of a scan on their forum before you do
    anything - don't just delete things Ad-ware finds or you could make things
    worse. You need advice to understand what Ad-ware is telling you.

    Finally if any unexpected pop-ups offer to scan your system for
    spyware/viruses/security threats or adware don't trust them! Never respond
    to a popup like this. Some of these programs put more malware on your system
    that they remove.

    Good luck
     
    CWatters, Apr 11, 2005
    #3
  4. elfkar2001

    f/fgeorge Guest

    One last thing....BACKUP anything you want BEFORE trying to remove the
    spyware!!!! If your machine crashes while trying to remove the stuff
    you could be out of luck totally!!
    In most cases you only need to backup the documents, emails ,etc.
    programs could be re-loaded anyway.
     
    f/fgeorge, Apr 11, 2005
    #4
  5. Go here http://www.pandasoftware.com/activescan/com/activescan_principal.htm

    and run the online scan.

    It will identify all viruses, spyware and adware on your computer.

    Make a note of them, and if your Antispyware software cannot remove them,
    then Google each identified entry and find a custom fix for each one.

    This is a lot easier than it sounds, and you should have no problems.

    All the best,

    Gillian.
     
    Gillian Baskin, Apr 11, 2005
    #5
  6. [snip]

    Bad idea. VERY bad idea.

    First, that site requires that you enable Javascript in order for it to
    function. That's a VERY bad idea even when you *don't* think you have an
    infection; when you *do* think you have an infection, it's downright suicidal.
    Frankly, Panda Software completely destroys their own credibility by even
    attempting to foist this nonsense off on the public.

    But beyond that, ALL so-called "online virus scanners" are by definition
    broken and useless. Here's why:

    If you have a rational reason to run ANY "virus scanner" against the system as
    a whole (as opposed to, for example, a specific "questionable" file that you
    just downloaded), then by definition you must consider the target system to be
    at least potentially compromised. Quite beyond any issues with Javascript
    itself, allowing the system to connect to the 'net in that state is inherently
    self-defeating (not to mention highly risky); no matter what results such an
    "online virus scan" might produce, they *CANNOT* be trusted.

    The *only* way to reliably scan/disinfect such a system is to physically
    disconnect it from ALL other systems/networks, cold-boot it from known-good
    (and write-protected!) removable media which contains a stand-alone virus
    scanner and up-to-date versions of whatever definitions/signature files it
    requires, then use those tools to carry out the disinfection. Until you are
    *sure* the system is clean, you do *NOT* allow it to connect (even indirectly)
    to ANY other systems/networks.
    [snip]

    Not even close.

    --

    Jay T. Blocksom
    --------------------------------
    Appropriate Technology, Inc.
    usenet02[at]appropriate-tech.net

    "They that can give up essential liberty to obtain a little temporary
    safety deserve neither liberty nor safety."
    -- Benjamin Franklin, Historical Review of Pennsylvania, 1759.
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Unsolicited advertising sent to this domain is expressly prohibited under
    47 USC S227 and State Law. Violators are subject to prosecution.
     
    Jay T. Blocksom, Apr 13, 2005
    #6
  7. [snip]

    There is no such animal.

    Webroot makes a (bad) product named "SpySweeper". They also spam:

    <http://groups.google.co.uk/groups?q=Webroot+group:news.admin.net-abuse.*&sa=G&scoring=d>
    <http://groups.google.co.uk/groups?q="Window+Washer"+group:news.admin.net-abuse.*&sa=G&scoring=d>

    Hence, no informed and ethical person would buy anything from them.

    Meanwhile, "SpyRemover" is either:

    - a known-rogue scamware product from <rizalsoftware.com>, or

    - a putatively legitimate, but non-free, knock-off by <itcompany.com> of the
    freeware (and excellent) "SpyBot Search & Destroy".

    Even in the latter case, why anyone should prefer it to the original remains
    an open -- and very good -- question.
    [snip]

    So what does this tell you about the efficacy of whatever it is you really
    ran?
    [snip]

    That's a problem, in and of itself. There are quite a number of XP-specific
    issues you need to be aware of:

    <http://www.hevanet.com/peace/microsoft.htm>
    or <http://www.futurepower.net/microsoft.htm>

    and (read all three):
    <http://www.infoworld.com/article/03/03/14/11winman_1.html>
    <http://www.infoworld.com/article/03/03/21/12winman_1.html>
    <http://www.infoworld.com/article/03/03/28/13winman_1.html>

    and finally:
    What you *should* do is:

    A. - Learn what you're doing. Notwithstanding ANYTHING else, that is a
    prerequisite for avoiding the sort of problems you are now bemoaning (and many
    others).

    B. - Dump the crapware you've loaded onto your system, starting with WinXP
    itself, and replace it with either a less problematic version of Windows --
    Win2K being the last "acceptable" (if just barely, and even then only after a
    thorough application of 2000lite/XPlite) version -- or better yet, side-step
    the whole stinking mess: <http://www.knoppix.net/>, <http://www.linux.org:/>.

    --

    Jay T. Blocksom
    --------------------------------
    Appropriate Technology, Inc.
    usenet02[at]appropriate-tech.net

    "They that can give up essential liberty to obtain a little temporary
    safety deserve neither liberty nor safety."
    -- Benjamin Franklin, Historical Review of Pennsylvania, 1759.
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Unsolicited advertising sent to this domain is expressly prohibited under
    47 USC S227 and State Law. Violators are subject to prosecution.
     
    Jay T. Blocksom, Apr 13, 2005
    #7
  8. elfkar2001

    Ian Kenefick Guest

    Excellent post Jay! Permission to gather links and add it to the
    useful info section of my website?

    Regards,
    Ian Kenefick
    http://antivirus.ik-cs.com
     
    Ian Kenefick, Apr 13, 2005
    #8
  9. [snip]

    Thank you -- but you didn't need to re-quote it en toto to say that.
    [snip]

    I'd feel better about that if you fixed your site to not be dependant on
    JavaShit.

    --

    Jay T. Blocksom
    --------------------------------
    Appropriate Technology, Inc.
    usenet02[at]appropriate-tech.net

    "They that can give up essential liberty to obtain a little temporary
    safety deserve neither liberty nor safety."
    -- Benjamin Franklin, Historical Review of Pennsylvania, 1759.
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Unsolicited advertising sent to this domain is expressly prohibited under
    47 USC S227 and State Law. Violators are subject to prosecution.
     
    Jay T. Blocksom, Apr 16, 2005
    #9
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.