0
skybytch

Spyware! Pop ups! Virus? I need help!

Recommended Posts

My kid went to a website looking for a cheat code for a game. He said he clicked no on all the crap that came up, but somehow some nasty stuff got installed on my parents 'puter.

I'm trying to fix the problem. Removed two funky "search bars"; unfortunately I seem to have also removed the Google search bar (with the popup blocker). Went to the Adaware website to download it and before the page was done loading it went white. It did that several times before I got smart and clicked on the link to the download before the home page had finished loading. Got the download completed, installed the software and tried running a full scan. It finds 20+ critical items and then wierd errors start popping up - like "motmon has caused a problem in " and "keybrdmgr has caused a problem in ". These freeze the puter.

Then I went to Google to get their popup blocker/toolbar. As soon as I clicked on the link to it the entire screen went grey - and the puter froze up.

It's running Windows ME, and I know it's been awhile since it's been updated. Been using IE 6.0.

Can anybody help me fix this mess without wiping the hard drive and starting over? Should I start by updating Windows? Is there a program other than AdAware that I can download/use to get rid of this crap? How about another good popup blocker?

Share this post


Link to post
Share on other sites
Download Ad-Aware SE. It should remove anything that was installed. It's free too :)
http://www.lavasoft.de

Edit: Oops, didn't read that far down the page. I've come across some spyware lately that seems to prevent Ad-Aware or other tools from installing/working properly (most of the time it would prevent Ad-Aware from updating itself). The only thing I could do to fix it was to startup the PC in safe mode and then install and run the Spyware remoal software. I've had good luck with the Yahoo! spyware remover as well.

Share this post


Link to post
Share on other sites
Quote

Download Ad-Aware SE.



I did that. As I said above, it finds 20+ critical items and then wierd errors start popping up - like "motmon has caused a problem in " and "keybrdmgr has caused a problem in ". These freeze the puter.

I have managed to get the google toolbar/popup blocker dl'ed and installed, but it's not blocking all the popups.

Share this post


Link to post
Share on other sites
Quote

My kid went to a website looking for a cheat code for a game. He said he clicked no on all the crap that came up, but somehow some nasty stuff got installed on my parents 'puter.

I'm trying to fix the problem. Removed two funky "search bars"; unfortunately I seem to have also removed the Google search bar (with the popup blocker). Went to the Adaware website to download it and before the page was done loading it went white. It did that several times before I got smart and clicked on the link to the download before the home page had finished loading. Got the download completed, installed the software and tried running a full scan. It finds 20+ critical items and then wierd errors start popping up - like "motmon has caused a problem in " and "keybrdmgr has caused a problem in ". These freeze the puter.

Then I went to Google to get their popup blocker/toolbar. As soon as I clicked on the link to it the entire screen went grey - and the puter froze up.

It's running Windows ME, and I know it's been awhile since it's been updated. Been using IE 6.0.

Can anybody help me fix this mess without wiping the hard drive and starting over? Should I start by updating Windows? Is there a program other than AdAware that I can download/use to get rid of this crap? How about another good popup blocker?



Spybot (free) is pretty good. As is Spysweeper (30 day free trial). Google will find download sites for each. Spysweeper found incredible amounts of crap on a PC the teenager was using.



Three times is enemy action

Share this post


Link to post
Share on other sites
If the machine is running windows XP you could also try performing a system restore.

Start – All Programs - Accessories – System tools – System restore

Launch this program and pick a date you want to restore the computer to and it will eradicate any software installed since the chosen date. It works quite well.

neil

Share this post


Link to post
Share on other sites
Quote

If the machine is running windows XP you could also try performing a system restore.



She's running Windows ME as stated above. Lisa - With windows ME since the whole thing was so buggy anyway, the best option is to install win2k or XP on a secondary hard drive. Use the current as a slave to get any data files off. When done, wipe the old drive clean. If you need access to the above mentioned options, let me know.
-----
~~~Michael

Share this post


Link to post
Share on other sites
Quote

Ad Aware SE, Spybot Search & Destroy, Spyware Blaster, and Hijack This.



especially get hijack this, its complicated, but VERY GOOD. then run it, and post the results... i can understand some of it, but im sure some of the supergeeks can help you find everything weird on your computer

MB 3528, RB 1182

Share this post


Link to post
Share on other sites
Quote

If the machine is running windows XP you could also try performing a system restore.

Start – All Programs - Accessories – System tools – System restore

Launch this program and pick a date you want to restore the computer to and it will eradicate any software installed since the chosen date. It works quite well.

neil



Nothing to do with popups, A question (this seems like a good thread (not hijacking))

Will using restore on XP restore a files deleted by using shift+delete IE: files not sent to the trash can?


Now back to the thread, on a clean system my favourite is Norton firewall, stops popups dead
also trojans and worms, just my 2cents.

Gone fishing

Share this post


Link to post
Share on other sites
I agree with WFFC. I had this very same problem and none of the spyware program are effective. The problem is the spyware will get the majority of the worm off but is always unable to fix every aspect of it. Therefore the worm will rewrite itself onto the hard drive. The best stragety is to wipe the hard drive clean, reload all your programs and protect yourself with updated software, firewalls and virus protection. It is a real bitch and I hope someone comes up with a way to track these worm writers down and prosecute them. Good luck.


Share this post


Link to post
Share on other sites
Quote

Get "spyesweeper" period hon it will take all this problem away!!!!:)




That's what I have and I love it. I do a sweep every day right before I log off for the day, and I can't believe all the shit it finds.

Lisa, I hope you got it all worked out. Be sure to kick David's ass. Oh wait, he's an adult now, but still, kick his ass.
May your trails be crooked, winding, lonesome, dangerous, leading to the most amazing view. May your mountains rise into and above the clouds. - Edward Abbey

Share this post


Link to post
Share on other sites
Some times the mal ware can get too deep to be completely removed. If you the install those four programs right after you install windows, its vary hard for anything to get in that far.

Spybot Search & Destroy is particularly helpful with its immunization feature.

I have had little trouble from viruses lately. When I do I use a combination of McAffee, Norton, and Trend.

Share this post


Link to post
Share on other sites
Any suggestions.........OK...I have done "Safe Mode" start up. I had to manually remove a registry entry even though I have run Adaware, Spybot S&D, Registry clean, and McAffee. The reason I know it's still there is that EVERY time I open IE I get an alert from Spybot S&D that says I want to download something from "Advertising.com." I block that of course but I still get cookies and I KNOW something is still in the registry. How the FUCK do I get rid of this shit?

Share this post


Link to post
Share on other sites
While some of you mention Ad-aware, there is another, similiary pronounced program that works wonders. It's called adware away, located at www.adwareaway.com

It's free for three days and it's the only program that successfully rids your pc of the about:blank popup.

Norton and McAfee are fine, but they can be "too safe" sometimes, preventing key items to run in your computer, especially if your computer is equipped with bundle software (a set of disks that comes with a new computer that has not only the operating system but also extra software).

My 2 cents.

david
--------------------------------------------------
Failure to prepare is preparing to fail

Share this post


Link to post
Share on other sites
I'll try that one too. I HAVE made progress. After going into safe mode about 20 times and running the spyware stuff.......I may have it now. I'm not sure exactly how I did it but at least I'm not getting the spyware alerts anymore. Just one thing left to solve.....WTF can't I get into my work email?!?!?!?!!? It used to work.......I don't think it's a coincidence that I couldn't access my work email about the same time this crap got on my computer! [:/]

Share this post


Link to post
Share on other sites
I may have solved the mystery. Still not sure how exactly to fix it but at least I know where the problem is. I found the problems in the "add ons." Found in IE under the "tools" menu. Seems one of the Java applets in there was causing me to try to download more spyware. Spybot would block it but it gets fairly annoying when EVERY time you go to a new page.....you get the warning box. I have disabled ALL the add ons for now but I will go back and figure out which ones I need and which are crap.


I installed the Spyware Dr last night. Definately the best program I have seen. Especially since I use a Mozilla browser.

Share this post


Link to post
Share on other sites
Clay
If you have the about:blank hijack you may not be able to clean it with just the resources you have so far.http://ask-leo.com/aboutblank_hijacked_my_homepage_how_do_i_fix_it.html
This site is a very good source of info on the about:blank hijack. Also try here:http://forums.majorgeeks.com/forumdisplay.php?f=35
Majorgeeks has directions and links to needed programs.


Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

0