I have recently seen adware on my pc and i have a pop up blocker and
symentec anti virus and windows defender, i was told ad,aware is good so i
downloaded it. but when it finds adware if i click qurantine it says name
file, ive never seen that b4. Most programs you just click remove or
qurantine and its off to its location. so im not sure what to do at that
point . I will say the few days ive had it there is much less adware popping
up so im pleased . Plus how do i know if what iam remving is important to my
computer or not? i have windows xp home ed. thanks

"m" <(E-Mail Removed)> wrote
>I have recently seen adware on my pc and i have a pop up blocker and
> symentec anti virus and windows defender, i was told ad,aware is good so i
> downloaded it. but when it finds adware if i click qurantine it says name
> file, ive never seen that b4. Most programs you just click remove or
> qurantine and its off to its location. so im not sure what to do at that
> point . I will say the few days ive had it there is much less adware
> popping
> up so im pleased . Plus how do i know if what iam remving is important to
> my
> computer or not? i have windows xp home ed. thanks

It takes more than one non viral anti-malware app to keep a system clean.
Ad-Aware is one good one. There is also SpyBot S&D, Spyware Blaster, BHO
Demon, and HiJackThis. For specific questions about Ad-Aware you might want
to post to their forums. If Ad-Aware finds anything on my systems, and
tracking cookies is all it finds, I would delete, not quarantine, after
making sure it was not a false positive.

Here are some links for dealing with malware.

THE PARASITE FIGHT
Finding, Removing & Protecting Yourself From Scumware
http://aumha.org/a/parasite.htm

Richard Harper’s Guide to Cleaning Pests
http://rgharper.mvps.org/cleanit.htm

Malware Removal
http://www.elephantboycomputers.com/...moving_Malware

--
Rock [MS-MVP User/Shell]

M,

Ad Aware gives false positives & this has been proved many times in the
past.

You say that you have far less popups now, which means that this program
hasn't removed the problem at all. This proves its worth.

Despite what Rock says you can do a lot with the right application & I have
never ever, ever told anyone to install more than one adware application.

If you use Spybot for example then you can use some of the advanced options
in there to remove a lot of the things in one go & not have to install all
the apps that Rock mentioned.

Spybot (totally free) can be downloaded via mirrors from this site:

http://www.spybot.info/en/mirrors/index.html

HijackThis 1.99.1 is a great little application too, but only if you know
what you are doing with it. Although, it misses a few places that
spyware/adware... hides so, it cannot be 100% trusted to say you have a
clean system.

HijackThis 1.99.1 (totally free) can be downloaded from the developers site
here:

http://www.merijn.org/programs.php#hijackthis

When using, create a folder in your C:\ drive for example & don't run from
your Desktop or a folder on your Desktop. This is what the developer
recommends.

Has this adware also hijacked your homepage? If so, what has it changed it
to because this may help identify the problem..

Tracking cookies aren't worth worrying about as more than likely
doubleclick.net etc. The adware is a problem because it interrupts the whole
Internet experience & slows the net down for you. Plus, the chances are its
also on Windows startup too, which also can be dealt with via Spybot or
another application, but forget the schoolboy MSCONFIG tool.

I would gladly look through & help you with these logs (Spybot &
HijackThis), but other people on this site throw their toys out of their
prams if you were to post the logs here. So, a way around it if you want me
to check these logs & help you is: If you use these newsgroups via Outlook
Express then you can reply to this thread & add them like you would with an
attachment. At least this way it keeps the others from picking up their toys
& I get to view the logs which will help you remove the pests you have on
your computer.

-----------------------------------------------
Configuring Outlook Express as a newsreader:
-----------------------------------------------

To configure Outlook Express to become a newsreader, do this:

Open Outlook Exporess
From the TOOLS menu choose ACCOUNTS
Click the ADD button (top-right) & Click NEWS
Spoof a name (I chose Newbie Coder)
Spoof an e-mail (example: (E-Mail Removed))
In the news server type: 'msnews.microsoft.com' (without quotes)
Click NEXT
Click FINISH

It will ask to download a list of newsgroups
Type in 'microsoft.public.windowsxp.general' (without quotes) & subscribe
toit.
It will now download the posts, find this one, highlight it & click the
REPLY GROUP button
Drag your log file to that window & after writing a message click SEND

Awaiting your reply,

--
Newbie Coder
(It's just a name)

You say you have never told anyone to install more than one spyware
application, and then you go on to say hijackthis doesn't get everything, so
what does this mean?, it means one piece of software doesn't cure all, and
you need more than one, to do a complete scan.

"Newbie Coder" wrote:

> M,
>
> Ad Aware gives false positives & this has been proved many times in the
> past.
>
> You say that you have far less popups now, which means that this program
> hasn't removed the problem at all. This proves its worth.
>
> Despite what Rock says you can do a lot with the right application & I have
> never ever, ever told anyone to install more than one adware application.
>
> If you use Spybot for example then you can use some of the advanced options
> in there to remove a lot of the things in one go & not have to install all
> the apps that Rock mentioned.
>
> Spybot (totally free) can be downloaded via mirrors from this site:
>
> http://www.spybot.info/en/mirrors/index.html
>
> HijackThis 1.99.1 is a great little application too, but only if you know
> what you are doing with it. Although, it misses a few places that
> spyware/adware... hides so, it cannot be 100% trusted to say you have a
> clean system.
>
> HijackThis 1.99.1 (totally free) can be downloaded from the developers site
> here:
>
> http://www.merijn.org/programs.php#hijackthis
>
> When using, create a folder in your C:\ drive for example & don't run from
> your Desktop or a folder on your Desktop. This is what the developer
> recommends.
>
> Has this adware also hijacked your homepage? If so, what has it changed it
> to because this may help identify the problem..
>
> Tracking cookies aren't worth worrying about as more than likely
> doubleclick.net etc. The adware is a problem because it interrupts the whole
> Internet experience & slows the net down for you. Plus, the chances are its
> also on Windows startup too, which also can be dealt with via Spybot or
> another application, but forget the schoolboy MSCONFIG tool.
>
> I would gladly look through & help you with these logs (Spybot &
> HijackThis), but other people on this site throw their toys out of their
> prams if you were to post the logs here. So, a way around it if you want me
> to check these logs & help you is: If you use these newsgroups via Outlook
> Express then you can reply to this thread & add them like you would with an
> attachment. At least this way it keeps the others from picking up their toys
> & I get to view the logs which will help you remove the pests you have on
> your computer.
>
> -----------------------------------------------
> Configuring Outlook Express as a newsreader:
> -----------------------------------------------
>
> To configure Outlook Express to become a newsreader, do this:
>
> Open Outlook Exporess
> From the TOOLS menu choose ACCOUNTS
> Click the ADD button (top-right) & Click NEWS
> Spoof a name (I chose Newbie Coder)
> Spoof an e-mail (example: (E-Mail Removed))
> In the news server type: 'msnews.microsoft.com' (without quotes)
> Click NEXT
> Click FINISH
>
> It will ask to download a list of newsgroups
> Type in 'microsoft.public.windowsxp.general' (without quotes) & subscribe
> toit.
> It will now download the posts, find this one, highlight it & click the
> REPLY GROUP button
> Drag your log file to that window & after writing a message click SEND
>
> Awaiting your reply,
>
> --
> Newbie Coder
> (It's just a name)
>
>
>

Sgopus,

Example:

Spybot used to fail getting rid of some strains of C2LOP

HijackThis like all the others does not detect 'root kits'

Plus, HijackThis you do not INSTALL you RUN, but with things like Spybot...
you have an installer... Do you see the difference now, Sgopus?

I would never tell anyone to install Spy Doctor, Ad-aware, Windows Defender
etc - NEVER!!!!

Just noticed that HijackThis is now on version 2. It has a few extra tools,
but still scans the same locations, which isn't an improvement.

Hope this has cleared things up for you Sgopus.

--
Newbie Coder
(It's just a name)

depending on the program, it may
give you the name, locations and
other data of the infection. That
way you know what is happening.

keep in mind when system files become
corrupted as a result of infection,
then your antivirals will remove them.
there is little point with having
a system file that is infected or
corrupted.

also, when non system files are removed
by your antivirals, then it is because
they were either corrupted or were
designed to infect your system. Some
programs are secretly designed to
infect your system as you may realize.

remember that antivirals were designed to delete
or quarantine the corrupted files and
are not designed to replace the original files,
especially genuine windows system files.

so if your operating becomes unstable after
immunization, then you have to replace the files
that were removed via a repair install or
with the sfc/scannow option.

also, if some of your other programs no longer
function after an immunization then you
can choose to reinstall them. however
you may also be reinfecting your system
again.

adware, spyware, rootkits, etc...
it's simply a war out there and
like any soldier, you need a
variety of weapons and the experience
with how to use them.

however, eventually you will regain
control of your system and begin to
realize what works best.

so be attentive and continue to ask
questions.

like others have done, i would
suggest to at least use this once:
http://onecare.live.com/standard/en-...c_cid=mscom_hp

as a concluding note, you should only have one antiviral runnning
at any given time. so if you choose to run
one kind of antiviral be sure to disable the
other antiviral temporarily. that way you won't bog
down your system with multiple antivirals running
together.


- db

"m" <(E-Mail Removed)> wrote in message news:E7388BEA-60AB-43F6-8187-(E-Mail Removed)...
I have recently seen adware on my pc and i have a pop up blocker and
symentec anti virus and windows defender, i was told ad,aware is good so i
downloaded it. but when it finds adware if i click qurantine it says name
file, ive never seen that b4. Most programs you just click remove or
qurantine and its off to its location. so im not sure what to do at that
point . I will say the few days ive had it there is much less adware popping
up so im pleased . Plus how do i know if what iam remving is important to my
computer or not? i have windows xp home ed. thanks

"db" <databaseben.discussions.microsoft.com> wrote:

>
>depending on the program, it may
>give you the name, locations and
>other data of the infection. That
>way you know what is happening.

[snip]

Is there a reason why you post your replies here with line breaks at
about 34 characters?

On Thu, 15 Mar 2007 11:38:08 -0700, m <(E-Mail Removed)>
wrote:

>I have recently seen adware on my pc and i have a pop up blocker and
>symentec anti virus and windows defender, i was told ad,aware is good so i
>downloaded it. but when it finds adware if i click qurantine it says name
>file, ive never seen that b4. Most programs you just click remove or
>qurantine and its off to its location. so im not sure what to do at that
>point . I will say the few days ive had it there is much less adware popping
>up so im pleased . Plus how do i know if what iam remving is important to my
>computer or not? i have windows xp home ed. thanks

You could try asking elsewhere. AdAware is not XP. This group is for
the Windows XP OS.

"NoConsequence" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> On Thu, 15 Mar 2007 11:38:08 -0700, m <(E-Mail Removed)>
> wrote:
>
>>I have recently seen adware on my pc and i have a pop up blocker and
>>symentec anti virus and windows defender, i was told ad,aware is good so i
>>downloaded it. but when it finds adware if i click qurantine it says name
>>file, ive never seen that b4. Most programs you just click remove or
>>qurantine and its off to its location. so im not sure what to do at that
>>point . I will say the few days ive had it there is much less adware
>>popping
>>up so im pleased . Plus how do i know if what iam remving is important to
>>my
>>computer or not? i have windows xp home ed. thanks
>
> You could try asking elsewhere. AdAware is not XP. This group is for
> the Windows XP OS.


If I don't have an answer I will say,"You could try asking elsewhere.
AdAware is not XP. This group is for
> the Windows XP OS."

m wrote:
> I have recently seen adware on my pc and i have a pop up blocker and
> symentec anti virus and windows defender, i was told ad,aware is good
> so i downloaded it. but when it finds adware if i click qurantine it
> says name file, ive never seen that b4. Most programs you just click
> remove or qurantine and its off to its location. so im not sure what
> to do at that point . I will say the few days ive had it there is
> much less adware popping up so im pleased . Plus how do i know if
> what iam remving is important to my computer or not? i have windows
> xp home ed. thanks

You might want to ask your question here:

http://www.lavasoftsupport.com/index...d4&showforum=6