Infected by adware, can't find it

[Guest]

My NAV says I have 7 adware (6 adware.CDT, 1 adware.istbar) but delete fails.
I also tried running NAV in safe mode as directed by an earlier post but that
delete failed also. All the adare is located in C:\Documents and
Settings\Owner\Local settings\Temporary Internet Files\Content.IE5 -- but
there is no Content.IE5 folder there. I have gone to Folder Options/View and
checked it to show hidden files and folders. I have also run my Ad-Aware 6.0
to no avail. In tools/internet options I delete files regularly, almost
daily. I do not delete cookies there as some I want to keep, so I go to
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files and
delete unwanted cookies individually. How do I get rid of this stuff? The CDT
just showed up but the istbar has been there for several weeks.

 

[Guest]

Hi Spitfire4gp,

pls go to "start"->"ausführen(ger)"-> type in "msconfig"
A grey Box is shown, tab the last register..
look at the entries, there is the unwanted software listed..
unmark everything you know to 100%, that its not needed.
(Its your automaticaly startuplist for programms, your adware is there
listet, too, but other helpfull things even!)

Reboot your Machine, the Adware isnt loaded next time and you can try to
remove again with adaware

 

[Wesley Vogel]

To delete *all* Temporary Internet Files...

1) Start | Run | Type: inetcpl.cpl | OK
Or right click the Internet Explorer icon on your Desktop.
Or: Start | Settings | Control Panel | Internet Options.
Best to do this with all instances of Internet Explorer closed. Especially
if there are a large number of files.
2) On the General Tab, in the middle of the screen, click on Delete Files
3) Check the box Delete all offline content {This cleans >> C:\Documents
and Settings\YourNameHere\Local Settings\Temporary Internet Files AND
C:\Documents and Settings\YourNameHere\Local Settings\Temporary Internet
Files\Content.IE5 and \Content.MSO
4) Click on OK and wait for the hourglass icon to stop after it deletes the
temporary internet files

 

[David H. Lipman]

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (personal free version)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download sysclean.com and place it in that directory.
Dowload the signature files (pattern files) by obtaining the ZIP file.
For example; lpt210.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) If you are using WinME or WinXP,Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point

You can also try some of the below online scanners.

Trend:
http://housecall.antivirus.com
http://housecall.trendmicro.com

F-Secure:
http://support.f-secure.com/enu/home/ols.shtml

McAfee:
http://www.mcafee.com/myapps/mfs/default.asp

Panda:
http://www.pandasoftware.com/activescan/

Kaspersky:
http://www.kaspersky.com/de/scanforvirus

Symantec:
http://security.symantec.com/

BitDefender
http://www.bitdefender.com/scan/license.php

Freedom Online scanner
http://www.freedom.net/viruscenter/index.html


* * * Please report your results ! * * *

Dave





| My NAV says I have 7 adware (6 adware.CDT, 1 adware.istbar) but delete fails.
| I also tried running NAV in safe mode as directed by an earlier post but that
| delete failed also. All the adare is located in C:\Documents and
| Settings\Owner\Local settings\Temporary Internet Files\Content.IE5 -- but
| there is no Content.IE5 folder there. I have gone to Folder Options/View and
| checked it to show hidden files and folders. I have also run my Ad-Aware 6.0
| to no avail. In tools/internet options I delete files regularly, almost
| daily. I do not delete cookies there as some I want to keep, so I go to
| C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files and
| delete unwanted cookies individually. How do I get rid of this stuff? The CDT
| just showed up but the istbar has been there for several weeks.