Can't get rid of malware

[Max Wachtel]

(e-mail address removed) AKA daslf on 12/6/2005 in

I've run Microsoft Anti Spyware, Super Ad Blocker, Spybot S and D,
ewido, Lavasoft Ad-Aware SE Personal.

None of them seem to detect/get rid of my problem. I have popups and
more recently my computer has been shutting down. The popups do NOT
seem tied to the particular site I am at.

Thanks

******************Reply Separator*************************
Hijack This!
http://www.spywareinfo.com/~merijn/index.html


Forums where you can get expert advice for Hijack This! logs.
*NOTE: Registration is REQUIRED before posting a log*
*NOTE: Web sites NOT listed in any particular order*

http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://www.dslreports.com/forum/security
http://castlecops.com/forum67.html
http://www.wilderssecurity.com/forumdisplay.php?f=24
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f
37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.iamnotageek.com/f-130.html
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://boards.cexx.org/viewforum.php?f=1
http://www.malwarebytes.biz/forums/index.php?showforum=5
--
Virus Removal Instructions: http://home.neo.rr.com/manna4u/
Keeping Windows Clean: http://home.neo.rr.com/manna4u/keepingclean.html
Windows Help: http://home.neo.rr.com/manna4u/tools.html
Playing Nice on Usenet: http://oakroadsystems.com/genl/unice.htm#xpost
To reply by e-mail change nomail.afraid.org to gmail.com
nomail.afraid.org is setup specifically for use in USENET
feel free to use it yourself. Registered Linux User #393236

 

[David H. Lipman]

From: "daslf" <[email protected]>

| I've run Microsoft Anti Spyware, Super Ad Blocker, Spybot S and D, ewido,
| Lavasoft Ad-Aware SE Personal.
|
| None of them seem to detect/get rid of my problem. I have popups and more
| recently my computer has been shutting down. The popups do NOT seem tied to
| the particular site I am at.
|
| Thanks
|

When you get these pop-ups does it indicate "Messenger Service" in the top portion ?

* Please don't post a HiJack This! log here. There are specialty anti spyware forums with
experts where the logs can be properly scrutinized. Max has posted both a proper URL to
obtain the HiJack This! software and a listing of expert forums to post the log in.

 

[Nick Skrepetos (SuperAdBlocker.com)]

Hello,

It can be extremely frustrating when encountering spyware that your
current tools cannot detect. The spyware mutates so fast, and so many
new variants come out daily.

You may wish to try Super Ad Blocker | SUPERAntispyware as we do focus
on the harder to detect and remove problems:
http://www.superadblocker.com

Super Ad Blocker is designed to be quick and easy for end-users with no
complicated setup or configuration.

On a technical side, Super Ad Blocker | SUPERAntiSpyware offers several
unique features such as using a system level driver to delete detected
items, so pests do not come back once detected and cleaned.

Super Ad Blocker offers a fully functional 15-day trial. You can scan
and clean your computer and then remove Super Ad Blocker if you do not
wish to keep it. We do appreciate when users support our development
efforts by purchasing the product

If that does not find and/or remove the spyware/adware on your machine,
you can submit a diagnostic and I will diagnose your machine for free
and post the results back to the group and update our rules with
anything found:
http://www.superadblocker.com/diagnostic.html?id=nicks

You may also wish to "see" what is running on your computer here:
http://www.fileresearchcenter.com

Nick Skrepetos
SuperAdBlocker.com - SUPERAntiSpyware
http://www.superadblocker.com
http://blogs.superadblocker.com
http://forums.superadblocker.com

** Please note that I am the author of the above programs and sites and
I do have a vested interest in Super Ad Blocker, SUPERAntiSpyware and
FileResearchCenter.com. You, the user, have no obligation to purchase
the software and are free to try the software, clean/fix your system,
and then uninstall.

 

[Noel Paton]

Hello,

It can be extremely frustrating when encountering spyware that your
current tools cannot detect. The spyware mutates so fast, and so many
new variants come out daily.

You may wish to try Super Ad Blocker | SUPERAntispyware as we do focus
on the harder to detect and remove problems:
http://www.superadblocker.com

Nick - he already said that he'd run S A B!

--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read on how to post messages to NG's

 

[Nick Skrepetos (SuperAdBlocker.com)]

Noel,

I was hoping he would do a diagnostic so I could see what was running
and post the results back to the group.
http://www.superadblocker.com/diagnostic.html?id=nicks

-Nick

 

[daslf]

no, not messenger service

 

[David H. Lipman]

From: "daslf" <[email protected]>

| no, not messenger service

OK -- So it isn't a NetBIOS popup.

I suggest downloading, installing and updating BHODemon for any Browser Helper Objects
that may be on the PC.

BHODemon
http://www.definitivesolutions.com/bhodemon.htm

 

[daslf]

OK, I ran the diagnostic. Thanks for your help.

 

[daslf]

I've run Microsoft Anti Spyware, Super Ad Blocker, Spybot S and D, ewido,
Lavasoft Ad-Aware SE Personal.

None of them seem to detect/get rid of my problem. I have popups and more
recently my computer has been shutting down. The popups do NOT seem tied to
the particular site I am at.

Thanks

 

[daslf]

Thanks for your replies Nick. I got a response about my diagnostic.
However, it asks me to run SAB but at this point my trial is over. Any way
around this besides buying at this point?

 

[Nick Skrepetos (SuperAdBlocker.com)]

Please e-mail me directly at (e-mail address removed) and I will send
you a code. I am not sure which of the diagnostics we responded to was
yours to match it to the e-mail.

-Nick

 

[daslf]

Nick,

Thanks, customer service already helped me with that.

I tried the fix, and everything looks OK so far. I'll keep you updated.

Thank you so much for your help

 

[daslf]

Running beautifully so far! One question: it seems that I needed to run
SAB in safe mode. Is this common (if I have a problem again, will I need to
go to safe mode or can I run it from the normal mode?)

I'm going to spread the word on this program.

 

[Nick Skrepetos (SuperAdBlocker.com)]

It really depends on the type of infection. Super Ad Blocker will stop
"most" installations of new spyware/adware/malware and we update our
rules daily, so you really should be able to scan in normal mode. Only
when a rootkit/kernel driver comes into play do you need to boot in
safe mode.

We just released a free product called "BootSafe" today that simplifies
the process of booting into safe mode and back to normal mode:
http://www.superadblocker.com/bootsafe.html

Nick Skrepetos
SuperAdBlocker.com
http://www.superadblocker.com