Green AV Pop Ups

[Joy]

How do I get rid of Green AV Pop Ups? I've run my Norton Scan and Windows
Defender and it shows that this spyware is not installed. However, as soon as
I long onto my PC, I get pop ups. The icons also appear on my taskbar. I'm
confused as to whether the spyware is actually installed or not. I've also
searched for the files to remove manually from instruction found online, but
the files are not found in the search.

Can anyone help?

 

[Ǝиçεl]

Hello Joy,

You've somehow managed to install a piece of rogue software that is
itself spyware.


There is not one product that can trap every virus / spyware /
Trojan. You should consider getting MalwareBytes' Anti-Malware Free
or SUPERAntiSpyware free as additional tools.

SUPERAntiSpyware (SAS)
There is a free version
<http://www.superantispyware.com/>
-=-
MalwareBytes Anti-Malware (MBAM) Same as above.
http://www.malwarebytes.com/
-=-

Run both programs. (MBAM) and (SAS)
-=-


I hope this post is helpful.

Let us know how it works ºut.

Good luck



Ǝиçεl
◕‿◕
-=-

 

[Joy]

Hey! Thanks! So, these tools will locate and remove the spyware?

 

[Joy]

I downloaded the Super Anti Spyware and ran a scan. It found and removed 3
files but the pop ups were still there when I rebooted. Anymore suggestions?

 

[me]

Try scanning wih SAS again, you may be getting re-infected. Try
scanning in safe mode.
Try Malwarebytes, Spybot S&D, and/or AdawareAE. Although there is
some overlap, different programs detect and remove different types of
problems (virus/malware/spyware/adware)

 

[1PW]

I downloaded the Super Anti Spyware and ran a scan. It found and removed 3
files but the pop ups were still there when I rebooted. Anymore suggestions?

Hello Joy:

As was suggested by Ǝиçεl in this thread, run SAS and *MBAM*. I'll
just add that MBAM should be run in "Normal Mode" and then SAS should
be run in "Safe Mode". The freeware versions will suffice.

Please update this thread with your progress.

 

[Joy]

Thanks everyone. I'll let you know.

Hello Joy:

As was suggested by Ǝиçεl in this thread, run SAS and *MBAM*. I'll
just add that MBAM should be run in "Normal Mode" and then SAS should
be run in "Safe Mode". The freeware versions will suffice.

Please update this thread with your progress.

 

[VanguardLH]

How do I get rid of Green AV Pop Ups? I've run my Norton Scan and Windows
Defender and it shows that this spyware is not installed. However, as soon as
I long onto my PC, I get pop ups. The icons also appear on my taskbar. I'm
confused as to whether the spyware is actually installed or not. I've also
searched for the files to remove manually from instruction found online, but
the files are not found in the search.

What do the green-colored popups say?

If you get SysInternals Process Explorer, you can use it (the spider web
toolbar icon) to identify which process opened which window. Click the
web button in Process Explorer, move the mouse to the green popup, and
click in it. Process Explorer will highlight (default is gray
background) the process that has the open handle on that window object.
Once you know which process is opening that window, you'll know where to
start focusing on what program is starting that process.

 

[Ǝиçεl]

Hi Joy,

First remove all temporarily junk with CCleaner
CCleaner v2.23.993 – Slim - No Toolbar 979KB

Download the basic version via
<http://www.ccleaner.com/download/builds.aspx>
The basic version does not contain the disgusted Toolbar
-=-

If the pop ups remains even after you used MalwareBytes' Anti-Malware,
SUPERAntiSpyware, AdawareAE, Spybot S&D
and your anti-virus, you can scan with HijackThis. HijackThis is an
excellent tool to discover but it requires expert skill to use. See below
for HijackThis links, including sites where you can post your HJT logs.
Again, this is an expert tool and novices should get help with it. I'm not
kidding.

HijackThis <http://www.tomcoyote.org/hjt/>

If you run HijackThis you can check the log it prepares - just copy and
paste it to the <http://www.hijackthis.de> web page and click analyze button.

<http://www.bleepingcomputer.com/forums/topic34773.html>
-=-

Save it to C:\hjt (new folder) then Open it and select Scan and Save Log.

Tutorial
<http://www.aumha.org/a/hjttutor.htm>
<http://www.bleepingcomputer.com/forums/index.php?showtutorial=42>
-=-

In safe mode - For every user account listed under C:\Documents and
Settings, delete the entire contents of the following folders (but not the
folders themselves):

(Important: One of the normal steps in eliminating malicious programs is to
entirely delete the contents of all Temp folders. Given that, if any data
that you care about is living in those Temp folders, you need to move it to a
safe location now, or it will be erased along with everything else!)

1. Cookies
2. Local Settings\Temp
3. Local Settings\History
4. Local Settings\Temporary Internet Files

- Delete the entire content of your C:\Windows\Temp folder.

- Delete the entire content of your C:\Windows\Prefetch folder.

Note- If you get any messages concerning the deletion of system files such
as desktop.ini or index.dat, just choose to delete those files; they'll be
automatically regenerated by Windows if needed. Windows will allow you to
delete the versions of those files which exist in sub-folders within the main
Temp/Temorary folders, but might not let you delete the versions of those
files that exist in the main Temp folders themselves; this is normal and OK.

- Empty your Recycle Bin.


Reboot normally, run HijackThis .

<http://www.bleepingcomputer.com/tutorials/tutorial42.html>

<http://www.bleepingcomputer.com/tutorials/index.php?act=print&tut=42&client=printer>
-=-

Please follow the above sugestions


I hope this post is helpful.

Let us know how it works ºut.

Good luck


Ǝиçεl
◕‿◕
-=-

 

[ignys5]

You may also use Spyware Doctor if MalwareBytes anti-malware won't help you. Furthermore, there is a forum thread at CNET about this virus. It could be helpful:
http://forums.cnet.com/5208-6132_102-0.html?threadID=353508
also you may use manual removal guide:
http://www.2-spyware.com/remove-green-av.html

Good luck!

 

[Joy]

THANKS 1PW and Ǝиçεl!!!!!

No more pop ups!! You guys rock!

 

[Ǝиçεl]

Glad to help and thanx for updating the thread.

(¯`·._.·Ǝиçεl·._.·´¯)
◕‿◕
-=-