Help: Adware

[666th_birdy]

i got a serious problem I need ome help with:

 

I got an adware problem that causes IE to pop up every other minute with some random advertising.

 

Running Adware I learned that there is one or two DLL files in my WINDOWS\SYSTEM32 folder plus a file called guard.tmp that cause the problem.

 

I can delete the files all I want but after every reboot some other dll in SYSTEM32 seem to be the cause. It seems some service is started but i can't find it.

 

My up-to-date virusscanner (McAfee) did already kill some infected files so that's not the problem IMHO

 

I ran taskmanager and MSCONFIG and unchecked some apps/services but nothing seems to help.

 

Any suggestions? :cry:

[Shaman]

Try to run FULL-SCAN of Ad-Aware in Windows's boot safe-mode.

Then re-boot PC again into safe-mode and run full scan of ad-aware again.

[zaelu]

Maybe "HijackThis" could help.

 

You can download it from here: http://www.spywareinfo.com/~merijn/downloads.html a little bit down the page.

 

You make with it a system scan and it will give you a list of programs or registry settings that are suspicious. Many of them you could identify by your self that are safe (ex. if you have a saitek stick it can identify saitek applications as suspicious). Some of them you will not be able to identify if they are dangerous or not so is better to use this site http://www.hijackthis.de/ that offers a "HijackThis" log analiser.

 

All you have to do is to check create log in "HijackThis" and put the log into the site above. It will give you infos about what is what. Dangerous things will be clearly highlighted and now you can check them in "HijackThis" window and then remove them safely.

 

After that you can attempt to shut down as many programs as you can from task manager (if you know what is what)if not just give a restart and see if it repeats.

 

GL

 

PS you should try Mozila or Opera as browsers... they are great ;)

[hitman]

Lots of things you can do here as well...one of them downloading Spybot S&D and grabbing all the updates, running it in BOTH normal boot and safemode to safely delete all spyware and adware, then open your task manager and see if there are any erronious programs that are running that you dont recognize. Go to your start menu and open search, type in the .exe that you are having issues with (such as poko62) and try to manually delete them. Once you do that then do a virus scan (trend-micro's housecall is superb in this). Then keep zapping them away as they go. Its much easier if you have SP2 for windows Xp. And I agree with other posts saying switch to FireFox. OR you can try your hand on Internet Exploder 7 beta on the microsoft website. I find I like that one as much as I do Mozilla.

[bflagg]

I deal with spyware all the time.... some of my end users are....well.....end users...

 

Spybot / Adware / Windows Defender do a great job.

Pick one and clean your system.

Each have their own strengths and weaknesses...... but I usually use Defender to clean and maintain.... (if you can even install anything...)

[666th_birdy]

It was until my fellow squad member 666th_Scorpion, pointed me to the tread below, that i could get rid of the adware.

 

All's well again. Thanks for all the reply's

 

http://www.daniweb.com/techtalkforums/thread37034.html

[hitman]

:joystick: No more pr0n for you!