I keep getting tons of popups from a site called Ceres.
How can I configure the blocker to keep this stuff OUT?

I started getting them right after installing Microsoft
AntiSpyware BETA! Don't know if it's connected but sure
is strange I didn't have them before. If you're using
Windows XP, try going to Tools/Pop-up Settings and figure
out how to add ceres to the blocked list. Not sure myself
how to do so. I just removed all files and registry items
that contained Microsoft AntiSpyware and the ceres stuff
stopped. Not sure why. :-(
>-----Original Message-----
>I keep getting tons of popups from a site called Ceres.
>How can I configure the blocker to keep this stuff OUT?
>.
>

David wrote:
> I keep getting tons of popups from a site called Ceres.
> How can I configure the blocker to keep this stuff OUT?

Ceres is a new "pest".

If possible submit a spywarereport to MS, menu tools.

Follow this below, excellent advices about spyware and
need for several tools to get rid of this.
--
plun

Hi,
No single malware removal program will remove everything.

Download and run CWShredder, Ad-aware, Spybot (in that order.)
See: http://mvps.org/winhelp2002/unwanted.htm
Also note the security tips and other important information
on that page.

Additional information at:
The Parasite Fight http://www.aumha.org/a/quickfix.htm
More security tips at http://www.aumha.org/a/parasite.htm
Bugs, Glitches & Stuffups:
http://www.mvps.org/inetexplorer/Darnit.htm

If unsuccessful with those programs, you may have to post a
HijackThis log
to one of the forums listed below. You will receive good
help at any of
these forums. You might look for a forum that doesn't have
too many
unanswered posts. You should also look for the proper forum
for HijackThis
logs and a message along the lines of "Important- Read This
First."

HijackThis instructions and download:
http://www.tomcoyote.org/hjt/
http://www.aumha.org/downloads/hijackthis.exe
(Additional information and warnings)
http://www.aumha.org/a/parasite.php#hjt

Forums:
http://forum.mvps.org/ Excellent help- low traffic. Visit
http://forum.aumha.org/viewtopic.php?t=4075 before posting
the log.

http://castlecops.com/forums.html
http://www.spywarewarrior.com/index.php
http://tomcoyote.com/forums/
http://www.spywareinfo.com/forums/

Hope this helps,
Don
[MVP- IE/OE]

Its another BHO - browser helper object - based adware - go to
www.majorgeeks.com and download BHODemon, install, undate, and then look at
the BHOs it lists. disable any you don't want.

While there I would also recommend SpywareBlaster - be sure to unpdate it
and the select Enable All Protection.

Some extra manual steps for ensuring your problem is gone:

Reboot into safe mode
Then, as some of the files or folders you need to delete may be hidden do
this:
Open Windows Explorer & Go to Tools > Folder Options.
Click on the View tab and make sure that "Show hidden files and folders" is
checked.
Also uncheck "Hide protected operating system files" and untick "hide
extensions for known file types" . Now click "Apply to all folders"
Click "Apply" then "OK"
(run MSAS in full deep mode twice and see what it finds)

Locate and if found delete:

c:\windows\system32\ztdumm.exe
C:\WINDOWS\farmmext.exe
C:\WINDOWS\wupdt.exe
C:\WINDOWS\Ceres.dll
C:\WINDOWS\systb.dll

Do a search for a file named Buddy.exeand delete it if found.

==============================
Empty the Recycle Bin.
==============================
Go to Start > Run and type %temp% in the Run box, press OK . The Temp folder
will open. Click Edit > Select All then Edit > Delete to delete the entire
contents of that Temp folder.

Then go to C:\windows\temp and select EVERYTHING except temporary internet
files, cookies and history folders and delete all that and then do the same
for C:\temp

1) Open Control Panel
2) Click on Internet Options
3) On the General Tab, in the middle of the screen, click on Delete Files
4) Check the box "Delete all offline content"
5) Click on OK.....wait for the hourglass icon to stop after it deletes the
temporary internet files
6) You can now click on "Delete Cookies" and click OK to delete cookies that
websites have placed on your hard drive.


JohnF.


"David" <(E-Mail Removed)> wrote in message
news:0ab301c51c13$df3b29c0$(E-Mail Removed)...
>I keep getting tons of popups from a site called Ceres.
> How can I configure the blocker to keep this stuff OUT?