Hi, I'm italian and I hope you'll excuse me for my bad english..
I've got a big problem with an adware. When I reboot my pc and I open
firefox, Avast find a virus/adware (Win32:Adware-gen. [Adw]) in a file
that windows try to download (from this
link:http://www.purityscan.com/downloader...2024&product=1). I
block this download but avast find other infected files in \local
settings\Temp (for example purityScan2.exe).
Avast erases this files, but then iexplorer opens one or more windows
with ads.This repeats every 20-30 minutes.

I've already done a full scan with avast and performed scans with
spybot, Ad-aware and spyware doctor. I've erased register entryes with
"purityScan", I've erased all files in \local settings\Temp from dos,
but nothing happens...

I have winXp Sp2 and use firefox 2.0 as browser.

thanks!

sonmanu wrote:
> Hi, I'm italian and I hope you'll excuse me for my bad english..
> I've got a big problem with an adware. When I reboot my pc and I open
> firefox, Avast find a virus/adware (Win32:Adware-gen. [Adw]) in a file
> that windows try to download (from this
> link:http://www.purityscan.com/downloader...2024&product=1). I
> block this download but avast find other infected files in \local
> settings\Temp (for example purityScan2.exe).
> Avast erases this files, but then iexplorer opens one or more windows
> with ads.This repeats every 20-30 minutes.
>
> I've already done a full scan with avast and performed scans with
> spybot, Ad-aware and spyware doctor. I've erased register entryes with
> "purityScan", I've erased all files in \local settings\Temp from dos,
> but nothing happens...
>
> I have winXp Sp2 and use firefox 2.0 as browser.
>
> thanks!
>

Turn off System Restore. Do a boot scan with AVAST. Turn System Restore
back on.

Alias

Alias ha scritto:

> sonmanu wrote:
> > Hi, I'm italian and I hope you'll excuse me for my bad english..
> > I've got a big problem with an adware. When I reboot my pc and I open
> > firefox, Avast find a virus/adware (Win32:Adware-gen. [Adw]) in a file
> > that windows try to download (from this
> > link:http://www.purityscan.com/downloader...2024&product=1). I
> > block this download but avast find other infected files in \local
> > settings\Temp (for example purityScan2.exe).
> > Avast erases this files, but then iexplorer opens one or more windows
> > with ads.This repeats every 20-30 minutes.
> >
> > I've already done a full scan with avast and performed scans with
> > spybot, Ad-aware and spyware doctor. I've erased register entryes with
> > "purityScan", I've erased all files in \local settings\Temp from dos,
> > but nothing happens...
> >
> > I have winXp Sp2 and use firefox 2.0 as browser.
> >
> > thanks!
> >
>
> Turn off System Restore. Do a boot scan with AVAST. Turn System Restore
> back on.
>
> Alias

Tank you for your reply, but it did not work

Try this:
http://support.microsoft.com/kb/290301/

On 9 Dec 2006 07:02:11 -0800, "sonmanu" <(E-Mail Removed)> wrote:

>
>Alias ha scritto:
>
>> sonmanu wrote:
>> > Hi, I'm italian and I hope you'll excuse me for my bad english..
>> > I've got a big problem with an adware. When I reboot my pc and I open
>> > firefox, Avast find a virus/adware (Win32:Adware-gen. [Adw]) in a file
>> > that windows try to download (from this
>> > link:http://www.purityscan.com/downloader...2024&product=1). I
>> > block this download but avast find other infected files in \local
>> > settings\Temp (for example purityScan2.exe).
>> > Avast erases this files, but then iexplorer opens one or more windows
>> > with ads.This repeats every 20-30 minutes.
>> >
>> > I've already done a full scan with avast and performed scans with
>> > spybot, Ad-aware and spyware doctor. I've erased register entryes with
>> > "purityScan", I've erased all files in \local settings\Temp from dos,
>> > but nothing happens...
>> >
>> > I have winXp Sp2 and use firefox 2.0 as browser.
>> >
>> > thanks!
>> >
>>
>> Turn off System Restore. Do a boot scan with AVAST. Turn System Restore
>> back on.
>>
>> Alias
>
>Tank you for your reply, but it did not work

Russ ha scritto:

> Try this:
> http://support.microsoft.com/kb/290301/
>
> On 9 Dec 2006 07:02:11 -0800, "sonmanu" <(E-Mail Removed)> wrote:
>

How do I use that?

sonmanu wrote:
> Hi, I'm italian and I hope you'll excuse me for my bad english..
> I've got a big problem with an adware. When I reboot my pc and I open
> firefox, Avast find a virus/adware (Win32:Adware-gen. [Adw]) in a file
> that windows try to download (from this
> link:http://www.purityscan.com/downloader...2024&product=1). I
> block this download but avast find other infected files in \local
> settings\Temp (for example purityScan2.exe).
> Avast erases this files, but then iexplorer opens one or more windows
> with ads.This repeats every 20-30 minutes.
>
> I've already done a full scan with avast and performed scans with
> spybot, Ad-aware and spyware doctor. I've erased register entryes with
> "purityScan", I've erased all files in \local settings\Temp from dos,
> but nothing happens...

http://groups.google.com/group/alt.p...0950ca35229d40

When you install Spybot, consider adding its Teatimer. That will alert
you to anything trying to change the registry. You'll actually have to
read what it says though, and consider whether you actually made a
change where you would expect a registry change. If you merely clicked
on a link or the like, you probably won't want to allow the change.

--
Joe =o)

It's self explanitory once you install it. It should display a list of
programs installed and then you can choose which to uninstall.

On 9 Dec 2006 07:19:18 -0800, "sonmanu" <(E-Mail Removed)> wrote:

>
>Russ ha scritto:
>
>> Try this:
>> http://support.microsoft.com/kb/290301/
>>
>> On 9 Dec 2006 07:02:11 -0800, "sonmanu" <(E-Mail Removed)> wrote:
>>
>
>How do I use that?

sonmanu wrote:
> Alias ha scritto:
>
>> sonmanu wrote:
>>> Hi, I'm italian and I hope you'll excuse me for my bad english..
>>> I've got a big problem with an adware. When I reboot my pc and I open
>>> firefox, Avast find a virus/adware (Win32:Adware-gen. [Adw]) in a file
>>> that windows try to download (from this
>>> link:http://www.purityscan.com/downloader...2024&product=1). I
>>> block this download but avast find other infected files in \local
>>> settings\Temp (for example purityScan2.exe).
>>> Avast erases this files, but then iexplorer opens one or more windows
>>> with ads.This repeats every 20-30 minutes.
>>>
>>> I've already done a full scan with avast and performed scans with
>>> spybot, Ad-aware and spyware doctor. I've erased register entryes with
>>> "purityScan", I've erased all files in \local settings\Temp from dos,
>>> but nothing happens...
>>>
>>> I have winXp Sp2 and use firefox 2.0 as browser.
>>>
>>> thanks!
>>>
>> Turn off System Restore. Do a boot scan with AVAST. Turn System Restore
>> back on.
>>
>> Alias
>
> Tank you for your reply, but it did not work
>

OK, download, install and update this:

http://www.lavasoftusa.com/products/...e_personal.php

Configure it to scan the most it can (gears button, upper right) and run
it in Safe Mode.

Alias

@Elmo: I've tea timer... May be i've authorised the installation of
this adware during the installation of other programs...
@Russ: Thanks, I did not see anything strange in that list

I've downloaded hijackthis from another pc, and i've copied it into
mine. But when i open the folder containinf hijackthis.exe my system
close all the folders opened!

sonmanu wrote:
> @Elmo: I've tea timer... May be i've authorised the installation of
> this adware during the installation of other programs...
> @Russ: Thanks, I did not see anything strange in that list
>
> I've downloaded hijackthis from another pc, and i've copied it into
> mine. But when i open the folder containinf hijackthis.exe my system
> close all the folders opened!
>

And have you run AdAware SE? Spybot doesn't get everything.

Alias