bad bad Internet download

[Melody]

I have no idea where this goes, but anyway --

I just now accidentally downloaded what has GOT to be THE
MOST ANNOYING, INVASIVE PROGRAM ON THE FACE OF THIS
PLANET. I was trying to find a certain MP3 for listening
pleasure (wrong of me, I know) via Google, and I came
across negativebeats.com. I inadvertently installed
something which I CANNOT entirely uninstall. The program
reset my homepage, added a slew of unwanted adult links
in my favorites folder and on the desktop, created an
annoying little bar perched permanently on the top of
whatever I'm doing, brings irritating pop-ups out of
nowhere, and I think it even did some other things too
but I've been so busy removing links I forgot what those
might have been. I tried to uninstall the programs on
the Add or Remove Programs on the Control Panel, but the
Coupons and Offers WILL NOT GO AWAY. If I try to remove
the folders manually, they disappear for one second and
pop up again. I have no idea what is going on. Can I
get rid of it? Is this even legal?

Any advice is much much appreciated; criticism (OMG I
can't believe you were stupid enough to click "Yes" in
the first place) is not (believe me, I already know it).
Thanks very much!

 

[TechGeekPro]

Try Ad-aware. http://www.snapfiles.com/get/adaware.html When you scan you
computer, pay attention to what is found. You may need to Google it to find
how to completley remove it. Anything CAN BE removed if you just find out
how.

 

[Shenan Stanley]

I have no idea where this goes, but anyway --

I just now accidentally downloaded what has GOT to be THE
MOST ANNOYING, INVASIVE PROGRAM ON THE FACE OF THIS
PLANET. I was trying to find a certain MP3 for listening
pleasure (wrong of me, I know) via Google, and I came
across negativebeats.com. I inadvertently installed
something which I CANNOT entirely uninstall. The program
reset my homepage, added a slew of unwanted adult links
in my favorites folder and on the desktop, created an
annoying little bar perched permanently on the top of
whatever I'm doing, brings irritating pop-ups out of
nowhere, and I think it even did some other things too
but I've been so busy removing links I forgot what those
might have been. I tried to uninstall the programs on
the Add or Remove Programs on the Control Panel, but the
Coupons and Offers WILL NOT GO AWAY. If I try to remove
the folders manually, they disappear for one second and
pop up again. I have no idea what is going on. Can I
get rid of it? Is this even legal?

Any advice is much much appreciated; criticism (OMG I
can't believe you were stupid enough to click "Yes" in
the first place) is not (believe me, I already know it).
Thanks very much!

You may have spyware/adware infesting your machine, follow the
appropriate section for that, making sure you use at least
THREE of the tools I list to scan and clean your machine AFTER
updating them. Cleaning up spyware/adware/malware usually
solves home page hijackers as well.

Please Notice that if you use AOL, you should at least upgrade to 9.0 or
greater before doing any of the fixes. I know you can get AOL 9.0 at almost
any convenience store, gas station, super market or other retail outlet in
the world, so this should not be a problem.


Turn on that firewall...
http://www.microsoft.com/WindowsXP/home/using/howto/homenet/icf.asp
(It has been reported that it now works with AOL 9.0+)


Make sure you have all the updates (critical) installed from:
http://windowsupdate.microsoft.com/
(Scan for updates, Review and Install)


Get rid of the spy/ad/mal-ware..
(Yes - using MORE than one of these..
I recommend at least the first three. Also..
UPDATE the definitions for them before using.)

Spybot Search and Destroy
http://www.safer-networking.net/

Lavasoft AdAware
http://www.lavasoft.de

CWSShredder
http://www.spywareinfo.com/~merijn/downloads.html

Hijack This!
http://mjc1.com/mirror/hjt/

I also like "The Cleaner" and "SpywareBlaster" and "SpywareGuard".
- http://www.moosoft.com/
- http://www.javacoolsoftware.com/

The first is a PAY product, but useable for 30 days - it has found and
eliminated problems in the past the others did not. The latter two are
prevention mechanisms. I like SpywareGuard for those with enough processor
to have something running like antivirus software - and it prevents browser
hijacking quite well. SpywareBlaster is a FANTASTIC free product, I suggest
getting this after you cleanup and keeping it updated as well....

And Assortment of Others:
http://spywareinfo.com/


After you cleanup your PC somewhat of spy/ad/mal-ware, verify your antivirus
software is updated and run a full scan of your computer. If you have no
antivirus software - get one NOW! Grisoft AntiVirus:
http://www.grisoft.com/us/us_dwnl_free.php


Empty your Temporary Internet Files and shrink the size it stores to about
80 to 120MB (seems to be an optimal size for the normal user)

- Open ONE copy of Internet Explorer.
- Select TOOLS -> Internet Options.
- Under the General tab in the "Temporary Internet Files" section,
do the following:
- Click on "Delete Cookies" (click OK)
- Click on "Settings" and change the
"Amount of disk space to use:" to something between 80MB
and 120MB. (Betting it is MUCH larger right now.)
- Click OK.
- Click on "Delete Files" and select to
"Delete all offline contents" (the checkbox) and click
OK. (If you had a LOT, this could take 2-10 minutes or
more.)
- Once it is done, click OK, close Internet Explorer
- Re-open Internet Explorer.


Uninstall any software you do not use often/ever. (If you have something
installed but never use it, uninstall it.) If you go through Control
Panel -> Add/Remove Programs and see things you seldom if ever use, it is to
your advantage to remove it.


Also, if you are tired of Web Page Pop-Ups/Unders.. You could try the
Google Toolbar.
http://toolbar.google.com/


Stop loading applications at logon.. run MSCONFIG and look under the startup
tab for things you DON'T want to startup! Search the Internet with Google
to discover what things are safe to remove and what things may even be
malware infecting your computer.


Better control your email and lessen the amount of time you spend dealing
with SPAM:
SpamBayes
http://sourceforge.net/projects/spambayes/
or
Spamihilator.
http://www.spamihilator.com

 

[H Leboeuf]

This hosts file would have prevented this and may other parasites.

The best way is to block the server from tracking you in the first place
Blocking Ads with a Hosts File and AdShield. Under the Security Tab download
the hosts.zip file.
http://www.mvps.org/winhelp2002/hosts.htm
--

For now, try this: Tools > Internet Options > Advanced > Browsing
Uncheck the Enable 3rd party browser extensions

If this clears your problem then find out who the culprit(s) is/are with
these tools.

Let AD-Aware Scan your system for advertising Spyware
http://www.lavasoftusa.com

and:

SpyBot-S&D
http://security.kolla.de/

p.s Reset the 3rd party browser setting.

Get AdAware and SpyBot and run them both. Keep them up to date.
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

If still having problems then check with this forum.
Go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.merijn.org/files/hijackthis.zip

If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, then copy and paste both files in your message.

HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/

The Tutorial if you want to know more about the results or the .log file.
http://www.merijn.org/htlogtutorial.html
_______________________________________
Source: Mike Burgess http://www.mvps.org/winhelp2002/



Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===

 

[Melody]

Hello all, and thanks for the advice. I installed Ad-
Aware and ran it like six zillion times (okay, five
actually) and disabled the third-party whatever option,
removed all the links and folders I could find, but I'm
still getting pop-ups that are clearly not part of the
webpages I'm browsing. Does that make sense?

Thanks, but help! I guess... should I try another
program?

 

[Don Varnau]

Melody,
Try these parasite removal programs, in this order.

Download and run Run CWShredder from
http://www.spywareinfo.com/~merijn/downloads.html

Then download, install, *update* and run both of these programs:
Ad-aware from http://www.lavasoft.de/software/adaware/
Spybot from http://security.kolla.de/ (Remove items listed in red-others are
optional.)
Both programs should be updated after installation- before use.

If these programs don't remove the malware, HijackThis should be used to
post a log to the appropriate forum at one of these sites.
HijackThis instructions and download:
http://www.tomcoyote.org/hjt/

Forums:
http://forum.mvps.org/ Excellent help- low traffic. Visit
http://forum.aumha.org/viewtopic.php?t=4075 before posting the log.

http://tomcoyote.com/forums/
http://www.lavasoftsupport.com/
http://www.spywareinfo.com/forums/
http://boards.cexx.org/
http://www.wilderssecurity.com/index.php

Security tips and other information at:
Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm

Hope this helps,
Don
--
MVP IE/OE
Please reply to the newsgroup so that others may participate.


"Melody" wrote in message news:[email protected]...