ad,aware help

[Guest]

I have recently seen adware on my pc and i have a pop up blocker and
symentec anti virus and windows defender, i was told ad,aware is good so i
downloaded it. but when it finds adware if i click qurantine it says name
file, ive never seen that b4. Most programs you just click remove or
qurantine and its off to its location. so im not sure what to do at that
point . I will say the few days ive had it there is much less adware popping
up so im pleased . Plus how do i know if what iam remving is important to my
computer or not? i have windows xp home ed. thanks

 

[Rock]

I have recently seen adware on my pc and i have a pop up blocker and
symentec anti virus and windows defender, i was told ad,aware is good so i
downloaded it. but when it finds adware if i click qurantine it says name
file, ive never seen that b4. Most programs you just click remove or
qurantine and its off to its location. so im not sure what to do at that
point . I will say the few days ive had it there is much less adware
popping
up so im pleased . Plus how do i know if what iam remving is important to
my
computer or not? i have windows xp home ed. thanks

It takes more than one non viral anti-malware app to keep a system clean.
Ad-Aware is one good one. There is also SpyBot S&D, Spyware Blaster, BHO
Demon, and HiJackThis. For specific questions about Ad-Aware you might want
to post to their forums. If Ad-Aware finds anything on my systems, and
tracking cookies is all it finds, I would delete, not quarantine, after
making sure it was not a false positive.

Here are some links for dealing with malware.

THE PARASITE FIGHT
Finding, Removing & Protecting Yourself From Scumware
http://aumha.org/a/parasite.htm

Richard Harper’s Guide to Cleaning Pests
http://rgharper.mvps.org/cleanit.htm

Malware Removal
http://www.elephantboycomputers.com/page2.html#Removing_Malware

 

[Newbie Coder]

M,

Ad Aware gives false positives & this has been proved many times in the
past.

You say that you have far less popups now, which means that this program
hasn't removed the problem at all. This proves its worth.

Despite what Rock says you can do a lot with the right application & I have
never ever, ever told anyone to install more than one adware application.

If you use Spybot for example then you can use some of the advanced options
in there to remove a lot of the things in one go & not have to install all
the apps that Rock mentioned.

Spybot (totally free) can be downloaded via mirrors from this site:

http://www.spybot.info/en/mirrors/index.html

HijackThis 1.99.1 is a great little application too, but only if you know
what you are doing with it. Although, it misses a few places that
spyware/adware... hides so, it cannot be 100% trusted to say you have a
clean system.

HijackThis 1.99.1 (totally free) can be downloaded from the developers site
here:

http://www.merijn.org/programs.php#hijackthis

When using, create a folder in your C:\ drive for example & don't run from
your Desktop or a folder on your Desktop. This is what the developer
recommends.

Has this adware also hijacked your homepage? If so, what has it changed it
to because this may help identify the problem..

Tracking cookies aren't worth worrying about as more than likely
doubleclick.net etc. The adware is a problem because it interrupts the whole
Internet experience & slows the net down for you. Plus, the chances are its
also on Windows startup too, which also can be dealt with via Spybot or
another application, but forget the schoolboy MSCONFIG tool.

I would gladly look through & help you with these logs (Spybot &
HijackThis), but other people on this site throw their toys out of their
prams if you were to post the logs here. So, a way around it if you want me
to check these logs & help you is: If you use these newsgroups via Outlook
Express then you can reply to this thread & add them like you would with an
attachment. At least this way it keeps the others from picking up their toys
& I get to view the logs which will help you remove the pests you have on
your computer.

-----------------------------------------------
Configuring Outlook Express as a newsreader:
-----------------------------------------------

To configure Outlook Express to become a newsreader, do this:

Open Outlook Exporess
From the TOOLS menu choose ACCOUNTS
Click the ADD button (top-right) & Click NEWS
Spoof a name (I chose Newbie Coder)
Spoof an e-mail (example: (e-mail address removed))
In the news server type: 'msnews.microsoft.com' (without quotes)
Click NEXT
Click FINISH

It will ask to download a list of newsgroups
Type in 'microsoft.public.windowsxp.general' (without quotes) & subscribe
toit.
It will now download the posts, find this one, highlight it & click the
REPLY GROUP button
Drag your log file to that window & after writing a message click SEND

Awaiting your reply,

 

[Guest]

You say you have never told anyone to install more than one spyware
application, and then you go on to say hijackthis doesn't get everything, so
what does this mean?, it means one piece of software doesn't cure all, and
you need more than one, to do a complete scan.

 

[Newbie Coder]

Sgopus,

Example:

Spybot used to fail getting rid of some strains of C2LOP

HijackThis like all the others does not detect 'root kits'

Plus, HijackThis you do not INSTALL you RUN, but with things like Spybot...
you have an installer... Do you see the difference now, Sgopus?

I would never tell anyone to install Spy Doctor, Ad-aware, Windows Defender
etc - NEVER!!!!

Just noticed that HijackThis is now on version 2. It has a few extra tools,
but still scans the same locations, which isn't an improvement.

Hope this has cleared things up for you Sgopus.

 

[db]

depending on the program, it may
give you the name, locations and
other data of the infection. That
way you know what is happening.

keep in mind when system files become
corrupted as a result of infection,
then your antivirals will remove them.
there is little point with having
a system file that is infected or
corrupted.

also, when non system files are removed
by your antivirals, then it is because
they were either corrupted or were
designed to infect your system. Some
programs are secretly designed to
infect your system as you may realize.

remember that antivirals were designed to delete
or quarantine the corrupted files and
are not designed to replace the original files,
especially genuine windows system files.

so if your operating becomes unstable after
immunization, then you have to replace the files
that were removed via a repair install or
with the sfc/scannow option.

also, if some of your other programs no longer
function after an immunization then you
can choose to reinstall them. however
you may also be reinfecting your system
again.

adware, spyware, rootkits, etc...
it's simply a war out there and
like any soldier, you need a
variety of weapons and the experience
with how to use them.

however, eventually you will regain
control of your system and begin to
realize what works best.

so be attentive and continue to ask
questions.

like others have done, i would
suggest to at least use this once:
http://onecare.live.com/standard/en-us/purchase/trial.htm?sc_cid=mscom_hp

as a concluding note, you should only have one antiviral runnning
at any given time. so if you choose to run
one kind of antiviral be sure to disable the
other antiviral temporarily. that way you won't bog
down your system with multiple antivirals running
together.


- db

I have recently seen adware on my pc and i have a pop up blocker and
symentec anti virus and windows defender, i was told ad,aware is good so i
downloaded it. but when it finds adware if i click qurantine it says name
file, ive never seen that b4. Most programs you just click remove or
qurantine and its off to its location. so im not sure what to do at that
point . I will say the few days ive had it there is much less adware popping
up so im pleased . Plus how do i know if what iam remving is important to my
computer or not? i have windows xp home ed. thanks

 

[Uncle Grumpy]

depending on the program, it may
give you the name, locations and
other data of the infection. That
way you know what is happening.

[snip]

Is there a reason why you post your replies here with line breaks at
about 34 characters?

 

[NoConsequence]

I have recently seen adware on my pc and i have a pop up blocker and
symentec anti virus and windows defender, i was told ad,aware is good so i
downloaded it. but when it finds adware if i click qurantine it says name
file, ive never seen that b4. Most programs you just click remove or
qurantine and its off to its location. so im not sure what to do at that
point . I will say the few days ive had it there is much less adware popping
up so im pleased . Plus how do i know if what iam remving is important to my
computer or not? i have windows xp home ed. thanks

You could try asking elsewhere. AdAware is not XP. This group is for
the Windows XP OS.

 

[M.F.]

You could try asking elsewhere. AdAware is not XP. This group is for
the Windows XP OS.

If I don't have an answer I will say,"You could try asking elsewhere.
AdAware is not XP. This group is for

 

[Daave]

I have recently seen adware on my pc and i have a pop up blocker and
symentec anti virus and windows defender, i was told ad,aware is good
so i downloaded it. but when it finds adware if i click qurantine it
says name file, ive never seen that b4. Most programs you just click
remove or qurantine and its off to its location. so im not sure what
to do at that point . I will say the few days ive had it there is
much less adware popping up so im pleased . Plus how do i know if
what iam remving is important to my computer or not? i have windows
xp home ed. thanks

You might want to ask your question here:

http://www.lavasoftsupport.com/index.php?s=70f1da283a003ec48ee3de18bf41a6d4&showforum=6

 

[Nightowl]

I would gladly look through & help you with these logs (Spybot &
HijackThis), but other people on this site

It is not a site.

throw their toys out of their prams if you were to post the logs here.
So, a way around it if you want me to check these logs & help you is:
If you use these newsgroups via Outlook Express then you can reply to
this thread & add them like you would with an attachment. At least this
way it keeps the others from picking up their toys & I get to view the
logs which will help you remove the pests you have on your computer.

Please stop telling people to post attachments to this newsgroup. If you
want to see a log, ask the OP to email you privately. I and thousands of
others don't want to download it.

 

[Nightowl]

but when it finds adware if i click qurantine it says name
file, ive never seen that b4. Most programs you just click remove or
qurantine and its off to its location. so im not sure what to do at that
point .

m,

AdAware asks you for a filename because as well as quarantining
suspicious objects singly (like an antivirus program, for example), you
can choose to quarantine some or all of them as a group. You might want
to save all the objects from one session under a name that includes the
date and time, for example. You'll need to know the filename if you
later want to restore the object(s).

There's more detail in "What is the quarantine?" in the AdAware Help.
Good luck!

 

[Newbie Coder]

Nightowl,

You don't have to download it, do you? Plus, don't tell me or anyone else
what to do. If you don't like it then I suggest you skip the said post &
move on to one you 'maybe' able to help with

 

[Nightowl]

You don't have to download it, do you?

Yes, actually I do. Heard of NNTP?

Plus, don't tell me or anyone else what to do.

Attachments are not appropriate in this newsgroup, as you well know. But
it's true I'm wasting my time bothering to ask you to adhere to any
standards of netiquette; you were singing the same old "I can do what I
like" song two years ago, weren't you, pcbutts1? Oops, sorry, "Newbie
Coder"?

If you don't like it then I suggest you skip the said post & move on to
one you 'maybe' able to help with

Perhaps you mean "may be"? Strange how a person with all those
qualifications doesn't know the difference. *I* suggest that if you
truly wanted to help you would ask for the details privately instead of
inconveniencing thousands of others. But then I'd still advise the OP to
post the log in a proper forum rather than rely on your "help".

 

[Rock]

Yes, actually I do. Heard of NNTP?


Attachments are not appropriate in this newsgroup, as you well know. But
it's true I'm wasting my time bothering to ask you to adhere to any
standards of netiquette; you were singing the same old "I can do what I
like" song two years ago, weren't you, pcbutts1? Oops, sorry, "Newbie
Coder"?


Perhaps you mean "may be"? Strange how a person with all those
qualifications doesn't know the difference. *I* suggest that if you
truly wanted to help you would ask for the details privately instead of
inconveniencing thousands of others. But then I'd still advise the OP to
post the log in a proper forum rather than rely on your "help".

I been thinking this could be PCButts back under yet another name.

 

[Newbie Coder]

Who is PCButts?