Adware impossible to remove (PurityScan?)

[sonmanu]

Hi, I'm italian and I hope you'll excuse me for my bad english..
I've got a big problem with an adware. When I reboot my pc and I open
firefox, Avast find a virus/adware (Win32:Adware-gen. [Adw]) in a file
that windows try to download (from this
link:http://www.purityscan.com/downloader.cgi?intuid=2024&product=1). I
block this download but avast find other infected files in \local
settings\Temp (for example purityScan2.exe).
Avast erases this files, but then iexplorer opens one or more windows
with ads.This repeats every 20-30 minutes.

I've already done a full scan with avast and performed scans with
spybot, Ad-aware and spyware doctor. I've erased register entryes with
"purityScan", I've erased all files in \local settings\Temp from dos,
but nothing happens...

I have winXp Sp2 and use firefox 2.0 as browser.

thanks!

 

[Alias]

Hi, I'm italian and I hope you'll excuse me for my bad english..
I've got a big problem with an adware. When I reboot my pc and I open
firefox, Avast find a virus/adware (Win32:Adware-gen. [Adw]) in a file
that windows try to download (from this
link:http://www.purityscan.com/downloader.cgi?intuid=2024&product=1). I
block this download but avast find other infected files in \local
settings\Temp (for example purityScan2.exe).
Avast erases this files, but then iexplorer opens one or more windows
with ads.This repeats every 20-30 minutes.

I've already done a full scan with avast and performed scans with
spybot, Ad-aware and spyware doctor. I've erased register entryes with
"purityScan", I've erased all files in \local settings\Temp from dos,
but nothing happens...

I have winXp Sp2 and use firefox 2.0 as browser.

thanks!

Turn off System Restore. Do a boot scan with AVAST. Turn System Restore
back on.

Alias

 

[sonmanu]

Alias ha scritto:

Hi, I'm italian and I hope you'll excuse me for my bad english..
I've got a big problem with an adware. When I reboot my pc and I open
firefox, Avast find a virus/adware (Win32:Adware-gen. [Adw]) in a file
that windows try to download (from this
link:http://www.purityscan.com/downloader.cgi?intuid=2024&product=1). I
block this download but avast find other infected files in \local
settings\Temp (for example purityScan2.exe).
Avast erases this files, but then iexplorer opens one or more windows
with ads.This repeats every 20-30 minutes.

I've already done a full scan with avast and performed scans with
spybot, Ad-aware and spyware doctor. I've erased register entryes with
"purityScan", I've erased all files in \local settings\Temp from dos,
but nothing happens...

I have winXp Sp2 and use firefox 2.0 as browser.

thanks!

Turn off System Restore. Do a boot scan with AVAST. Turn System Restore
back on.

Alias

Tank you for your reply, but it did not work

 

[Russ]

Try this:
http://support.microsoft.com/kb/290301/

Alias ha scritto:

Hi, I'm italian and I hope you'll excuse me for my bad english..
I've got a big problem with an adware. When I reboot my pc and I open
firefox, Avast find a virus/adware (Win32:Adware-gen. [Adw]) in a file
that windows try to download (from this
link:http://www.purityscan.com/downloader.cgi?intuid=2024&product=1). I
block this download but avast find other infected files in \local
settings\Temp (for example purityScan2.exe).
Avast erases this files, but then iexplorer opens one or more windows
with ads.This repeats every 20-30 minutes.

I've already done a full scan with avast and performed scans with
spybot, Ad-aware and spyware doctor. I've erased register entryes with
"purityScan", I've erased all files in \local settings\Temp from dos,
but nothing happens...

I have winXp Sp2 and use firefox 2.0 as browser.

thanks!

Turn off System Restore. Do a boot scan with AVAST. Turn System Restore
back on.

Alias

Tank you for your reply, but it did not work

 

[sonmanu]

Russ ha scritto:

Try this:
http://support.microsoft.com/kb/290301/

How do I use that?

 

[Elmo]

Hi, I'm italian and I hope you'll excuse me for my bad english..
I've got a big problem with an adware. When I reboot my pc and I open
firefox, Avast find a virus/adware (Win32:Adware-gen. [Adw]) in a file
that windows try to download (from this
link:http://www.purityscan.com/downloader.cgi?intuid=2024&product=1). I
block this download but avast find other infected files in \local
settings\Temp (for example purityScan2.exe).
Avast erases this files, but then iexplorer opens one or more windows
with ads.This repeats every 20-30 minutes.

I've already done a full scan with avast and performed scans with
spybot, Ad-aware and spyware doctor. I've erased register entryes with
"purityScan", I've erased all files in \local settings\Temp from dos,
but nothing happens...

http://groups.google.com/group/alt....=st&q=purityscan&rnum=1&#doc_190950ca35229d40

When you install Spybot, consider adding its Teatimer. That will alert
you to anything trying to change the registry. You'll actually have to
read what it says though, and consider whether you actually made a
change where you would expect a registry change. If you merely clicked
on a link or the like, you probably won't want to allow the change.

 

[Russ]

It's self explanitory once you install it. It should display a list of
programs installed and then you can choose which to uninstall.

 

[Alias]

Alias ha scritto:

Hi, I'm italian and I hope you'll excuse me for my bad english..
I've got a big problem with an adware. When I reboot my pc and I open
firefox, Avast find a virus/adware (Win32:Adware-gen. [Adw]) in a file
that windows try to download (from this
link:http://www.purityscan.com/downloader.cgi?intuid=2024&product=1). I
block this download but avast find other infected files in \local
settings\Temp (for example purityScan2.exe).
Avast erases this files, but then iexplorer opens one or more windows
with ads.This repeats every 20-30 minutes.

I've already done a full scan with avast and performed scans with
spybot, Ad-aware and spyware doctor. I've erased register entryes with
"purityScan", I've erased all files in \local settings\Temp from dos,
but nothing happens...

I have winXp Sp2 and use firefox 2.0 as browser.

thanks!

Turn off System Restore. Do a boot scan with AVAST. Turn System Restore
back on.

Alias

Tank you for your reply, but it did not work

OK, download, install and update this:

http://www.lavasoftusa.com/products/ad-aware_se_personal.php

Configure it to scan the most it can (gears button, upper right) and run
it in Safe Mode.

Alias

 

[sonmanu]

@Elmo: I've tea timer... May be i've authorised the installation of
this adware during the installation of other programs...
@Russ: Thanks, I did not see anything strange in that list

I've downloaded hijackthis from another pc, and i've copied it into
mine. But when i open the folder containinf hijackthis.exe my system
close all the folders opened!

 

[Alias]

@Elmo: I've tea timer... May be i've authorised the installation of
this adware during the installation of other programs...
@Russ: Thanks, I did not see anything strange in that list

I've downloaded hijackthis from another pc, and i've copied it into
mine. But when i open the folder containinf hijackthis.exe my system
close all the folders opened!

And have you run AdAware SE? Spybot doesn't get everything.

Alias

 

[Kerry Brown]

Both of the following should be able to remove it.

http://www.superantispyware.com/

http://free.grisoft.com/doc/avg-anti-spyware-free/lng/us/tpl/v5

It is possible that you have some version of purityscan that neither of the
above will remove. Here are the manual steps to remove it.

http://www.safer-networking.com/removePurityScan.php

http://forums.tomcoyote.org/index.php?showtopic=72137

 

[sonmanu]

I've no one of the key listed in the link you gave me... And the
uninstaller linked (http://www.outerinfo.com/OiUninstaller.exe) is
recognised from avast as a virus too! What's happening??
P.s.: Avast detect every 30 minutes also the file gysmzajl.exe as
infected



Kerry Brown ha scritto:

Both of the following should be able to remove it.

http://www.superantispyware.com/

http://free.grisoft.com/doc/avg-anti-spyware-free/lng/us/tpl/v5

It is possible that you have some version of purityscan that neither of the
above will remove. Here are the manual steps to remove it.

http://www.safer-networking.com/removePurityScan.php

http://forums.tomcoyote.org/index.php?showtopic=72137
--
Kerry
MS-MVP Windows - Shell/User
www.vistahelp.ca/phpBB2

Hi, I'm italian and I hope you'll excuse me for my bad english..
I've got a big problem with an adware. When I reboot my pc and I open
firefox, Avast find a virus/adware (Win32:Adware-gen. [Adw]) in a file
that windows try to download (from this
link:http://www.purityscan.com/downloader.cgi?intuid=2024&product=1).
I block this download but avast find other infected files in \local
settings\Temp (for example purityScan2.exe).
Avast erases this files, but then iexplorer opens one or more windows
with ads.This repeats every 20-30 minutes.

I've already done a full scan with avast and performed scans with
spybot, Ad-aware and spyware doctor. I've erased register entryes with
"purityScan", I've erased all files in \local settings\Temp from dos,
but nothing happens...

I have winXp Sp2 and use firefox 2.0 as browser.

thanks!

 

[Kerry Brown]

It sounds like you may be infected by more than just purityscan. Follow the
directions here to clean your computer.

http://www.elephantboycomputers.com/page2.html#Removing_Malware

These are very detailed instructions and will take most of a day to
complete. Do not skip any steps. There are no shortcuts.

--
Kerry
MS-MVP Windows - Shell/User
www.vistahelp.ca/phpBB2

I've no one of the key listed in the link you gave me... And the
uninstaller linked (http://www.outerinfo.com/OiUninstaller.exe) is
recognised from avast as a virus too! What's happening??
P.s.: Avast detect every 30 minutes also the file gysmzajl.exe as
infected



Kerry Brown ha scritto:

Both of the following should be able to remove it.

http://www.superantispyware.com/

http://free.grisoft.com/doc/avg-anti-spyware-free/lng/us/tpl/v5

It is possible that you have some version of purityscan that neither
of the above will remove. Here are the manual steps to remove it.

http://www.safer-networking.com/removePurityScan.php

http://forums.tomcoyote.org/index.php?showtopic=72137
--
Kerry
MS-MVP Windows - Shell/User
www.vistahelp.ca/phpBB2

Hi, I'm italian and I hope you'll excuse me for my bad english..
I've got a big problem with an adware. When I reboot my pc and I
open firefox, Avast find a virus/adware (Win32:Adware-gen. [Adw])
in a file that windows try to download (from this
link:http://www.purityscan.com/downloader.cgi?intuid=2024&product=1).
I block this download but avast find other infected files in \local
settings\Temp (for example purityScan2.exe).
Avast erases this files, but then iexplorer opens one or more
windows with ads.This repeats every 20-30 minutes.

I've already done a full scan with avast and performed scans with
spybot, Ad-aware and spyware doctor. I've erased register entryes
with "purityScan", I've erased all files in \local settings\Temp
from dos, but nothing happens...

I have winXp Sp2 and use firefox 2.0 as browser.

thanks!

 

[sonmanu]

It seems to be resolved! I used a tool linked in a link above (this:
http://forums.tomcoyote.org/index.php?showtopic=72137). The tool's name
is combofix.
Unfortunately my system do not recognise some peripheral, I think I'll
do a restore from WinXP CD. Thanks a lot to everyone!!

 

[Guest]

PurityScan is another name for OuterInfo. I've finally stopped the unwanted
internet advertising by just going to http://www.outerinfo.com/howto.html and
downloading the Uninstaller program. The critical factor is to run this
program whille in SAFE Mode.
This has worked for the last 5 hours and I think I finally removed it!
-------------------------------------------------------------------------------------------