Sorry your browser is not supported!

You are using an outdated browser that does not support modern web technologies, in order to use this site please update to a new browser.

Browsers supported include Chrome, FireFox, Safari, Opera, Internet Explorer 10+ or Microsoft Edge.

Geek Culture / Help with some adware problem?

Author
Message
dab
20
Years of Service
User Offline
Joined: 22nd Sep 2004
Location: Your Temp Folder!
Posted: 1st Jul 2007 02:25
Link
Hey, I don't know how, but I have spyware on my comp. I ran a Hijackthis log, and this is what it came up with:



I've run AVG, and Spybot S&D but they haven't seemed to removed the problem. I keep getting popups of different things. The most popular ad is WinAntiVirus Pro. I searched and found a Symnatec thing that is supposed to remove it, but I still get prblems.

Thanks a bunch for the help.
Back to top
Profile PM Email Website
Three Score
20
Years of Service
User Offline
Joined: 18th Jun 2004
Location: behind you
Posted: 1st Jul 2007 05:09
Link
try running adaware(it's free and very good) with a full system scan

trying going into msconfig(or I think spybot SD has a startup modifier thing too) and looking for anything suspicious(or anything you don't remember having)

Robot AI|My self coded blog|

She kills puppies.
Back to top
Profile PM Email Website
zenassem
21
Years of Service
User Offline
Joined: 10th Mar 2003
Location: Long Island, NY
Posted: 1st Jul 2007 18:59
Link
I will go through your hijackThis! log in once I actually wake up.

Here is what you can do until then

1. get yourself smitfraud fix by SiRi. Just google Smitfraud fix.

2. Turn off System Restore.

3. Reboot your computer in safemode by pressing F8 after post
choose safe mode

-Under Safe Mode Run SmitFraud Fix
-Under Safe Mode Run Hijackthis and post that shorter log
-Run Avg

Do this for each user Account you have. Including the default Administrator Account:

Then restart in normal mode
In the mean Time I'll go through your Hijack this log

Back to top
Profile PM Email
dab
20
Years of Service
User Offline
Joined: 22nd Sep 2004
Location: Your Temp Folder!
Posted: 1st Jul 2007 23:06
Link
Ok, I'm running the AVG Check now for the Admin account. I'm on my laptop now. Thanks for the help zenassem . Three Score, I tried the adaware, it didn't seem to do anything. But yea. Thanks.

So, I'll post the HijackThis log for the admin and my account right?
Back to top
Profile PM Email Website
zenassem
21
Years of Service
User Offline
Joined: 10th Mar 2003
Location: Long Island, NY
Posted: 2nd Jul 2007 00:26
Link
Quote: "So, I'll post the HijackThis log for the admin and my account right? "


You can just post the one from your user account. It just helps to see the shorter version under safe mode.

I had to run outside and get some things done before it rains. But I'll look at both logs when you post them.

Back to top
Profile PM Email
Jeff Miller
19
Years of Service
User Offline
Joined: 22nd Mar 2005
Location: New Jersey, USA
Posted: 2nd Jul 2007 00:55
Link
I had an adware problem once that wouldn't quit, even using every method I found on the web (some of which took plenty of time to execute and with several freebie programs). I finally bought a program called Stopzilla. It removed it and I haven't had a problem since.
Back to top
Profile PM Email
Brain111
17
Years of Service
User Offline
Joined: 5th Feb 2007
Location: In my own little world.
Posted: 2nd Jul 2007 03:17
Link
There's a certain text file on your computer that is a list of internet sites that it will block. Shoot, I can't remember what it is. But you can just type like www.adspopupsandviruses.com, or whatever the site that's popping up is, and it will block that site forever or until you take it off the list. Sorry I couldn't help more.

Anarchy Burger - hold the Government!
Back to top
Profile PM
zenassem
21
Years of Service
User Offline
Joined: 10th Mar 2003
Location: Long Island, NY
Posted: 2nd Jul 2007 05:13
Link
the file is called hosts or lmhosts

Back to top
Profile PM Email
dab
20
Years of Service
User Offline
Joined: 22nd Sep 2004
Location: Your Temp Folder!
Posted: 2nd Jul 2007 05:14 Edited at: 2nd Jul 2007 05:38
Link
I'll take a look at Stopzilla, thanks.

Quote: "There's a certain text file on your computer that is a list of internet sites that it will block. Shoot, I can't remember what it is. But you can just type like www.adspopupsandviruses.com, or whatever the site that's popping up is, and it will block that site forever or until you take it off the list. Sorry I couldn't help more."

The problem with that is, I'd still get pop-ups, but they just wouldn't display anything. Also, the Spyware is said to reproduce (if I've found out what type it is) making newer and newer files until my comp will run like a slug. I think this might be a Trojan.Vundo is how the websites reference it.

Edit: Uhoh, I had been having with BSOD, but I never took much consideriation of it. Now, I get them, and can't log into my normal account. . Anyway, I mmanaged to get my Hijackthis log onto a Thumbdrive, here it is (from Safe Mode):

Back to top
Profile PM Email Website
dab
20
Years of Service
User Offline
Joined: 22nd Sep 2004
Location: Your Temp Folder!
Posted: 3rd Jul 2007 00:06 Edited at: 5th Jul 2007 09:46
Link
Sorry, this isn't a bump. . Anyone else think they'd be able to help? Anymore ideas?

Edit: I THINK I've GOT IT!!!

Ok, it seemed to be using my RunDLL32.exe to be running random dlls per boot. And per each boot I made, it made more random named dlls (random from a list), then had the rundll32.exe run those dlls. So, all I did was find the rundll32 on my msconfig startup thing, and turned them off, then it got rid of the popups and whatnot. Then I instlled Stopzilla, and it got rid of them.

Quote: "I had an adware problem once that wouldn't quit, even using every method I found on the web (some of which took plenty of time to execute and with several freebie programs). I finally bought a program called Stopzilla. It removed it and I haven't had a problem since. "


Great! Thanks for the help.

And thank you zenassem, for looking through my logs.
Back to top
Profile PM Email Website
Back to top

Login to post a reply

Server time is: 2024-11-18 21:57:14
Your offset time is: 2024-11-18 21:57:14