Removing persistent scumware

[ukgimp]

I have run spybot and Adaware but I still get hte odd popup on close. The ads are for slimming type stuff.

Where the hell could they have put something to allow this to happen. I have the Google popup blocker on but it still gets through.

Cheers

[troels nybo nielsen]

I don't know how good Google's popup blocker is. Have you tried proxomitron?

[Sinner_G]

Do you have the latest updates for adaware/spybot?

And maybe try if you still get the popups when using Opera. I've found that most of the popups that go through IE/Googlebar don't appear with Opera.

[ukgimp]

>>proxomitron?

No, but I will look into that.

I have the latest updates for bothg which is why I am curious.

Cheers

[troels nybo nielsen]

A quick search on my favourite search engine suggests the possibility that you have a trojan. Have you checked for viruses lately?

[ukgimp]

No running :)

I have all the lastest dat files.

I did run hijackthis and found a couple of entries for a peice of software that has since been deleted.

Cheers

[ukgimp]

Whoops Sorry Lawman

They are scumbags though :)

Incidently they are still im my system somewhere, I get popups still that appear to be on closing a window.

So where does that leave me.

Cheers

[satanclaus]

I fixed a friends computer the other day. Stripped out a bunch of scumware, etc. One I just couldn't fixure out then I noticed under the Tools tab below Internet Options there was a tag that didn't belong there reading "return original settings" or something to that effect. One click and the tab was gone and pop-ups ceased. Was very strange.

[ukgimp]

Still got the problem.

Any ideas. I dont want to reinstall.

[chris_f]

Hi Gimpo :),

Can you please provide more details. Is this happening when you close an IE window? Does it happen constantly? Is it the same popup? Is it the same site? etc...

If you can provide as much detail as possible it'll help as I know a guy who deals in this area.

atob.c

[ukgimp]

G'Day Chris

As you can see Lawman removed the specific which I cant quite remember rignt now. It generally occurs when I shut a IE window. I get two windows with no navigation. One contains the popup code for the actually ad. Stuff like smilies or weight loss. Nothing rude.

I have run adaware, spybot and hijack this. However there were thing that hijack this found that I was not sure about removing.

I have done a full sweep with norton with all the latest DAT files.

I have a feeling it is to do with a windows cleaing package that I tried on freeware (yes I know) to delete my history from the index.dat files.

Cheers

[HowlingWizard]

As a stop gap try installing the google toolbar. It will stop the popup windows.

I installed the google toolbar on all my machines after hitting a site that kept poping itself in a new windows when you browsed away or closed the windows (had to reboot to leave that site).

[SlowMove]

Adaware detected the usual stuff, and they found a folder that was used for this garbage. How did they get a folder installed on my machine? I'm thinking about saving all data files and reinstalling Win XP from disc.

[Mardi_Gras]

>As a stop gap try installing the google toolbar.

Go back to the first post ;)

[ukgimp]

still got this

despite

adaware, spybot, spysweeper

There has to be a way,. I cant face a reformat.

[Sinner_G]

Stop visiting those **** pages. :)

Sorry, couldn't resist...

Maybe you could try to check all the running processes in the task manager (i.e. IEXPLORE.EXE,...). Search for each one and with luck you'll find the one that shouldn't be there.

[TryAgain]

Maybe you could try to check all the running processes in the task manager

And do it with something like prcview: [xmlsp.com...]

Be sure to check what every process is doing before killing or deleting stuff though. ;-)
See [liutilities.com...] for example.

[ukgimp]

Sinner this is my work PC. I dont even go anywhere near anything of that nature.

TA

I will look at those. Thanks.

[PatrickDeese]

> I dont even go anywhere near anything of that nature.

Did ya try to "punch the monkey" or optimize your PC or correct your PC clock with the help of a banner advert? ;)

[ukgimp]

I am getting there.

I have gotten rid of some but I have two things left.

WINPUP and a file in the sytem32 called vxd.exe. I think they unconected.

I am close to nuking these muthas, but these are proving difficult to oust.

Any pointers.

[Sinner_G]

Not sure if this is the same winpup, but a Google search gave me a Symantec page as #1 result.

Adware.Winpup is an adware component that generates large amounts of pop-up advertisements.

Looks like what you have. Symantec have the complete removal instructions.