Help - Internet Explorer Pop Up trouble

[User77]

Here is the background of this problem:

Neighbor brought a Laptop, which has operation trouble.
Laptop is loaded with XP Home Edition, with Service Pack 2.
Although it has 1.50 Ghz processor, it is VERY SLOW
in operation. It was still operating with IE6, with most of
the updates. I was informed that this laptop was operating
without any Anti-Virus program (!). Neighbor loaded the
Avast antivirus software couple of weeks ago but seems
like it was not able to clean all of the viruses (may be he
or I don't know how to operate it). I am used to with
AVG, so I loaded it and it found nearly 50 Trojan Horses,
and cleaned them. Next I loaded Spybot and found about
20 different types of spywares. I also loaded Ad-Aware
and cleaned bundle of other advertisement programs.
As the cleaning went on, I am having the worst time to
clean up the Browser Modifiers. I have loaded Microsoft
Windows Defender, and it did clean up 'Win32/Fotomoto',
but seems like the same pop-up program revives somehow
and I am still getting Pop-Up problems. There is an 'Unknown'
pop-up showing up at the listing of Windows Defender. May
be that is causing the pop-up now.

Question: How do I get rid of this Pop-Up trouble from
IE7 Explorer? Any information will be highly regarded.

 

[Malke]

Here is the background of this problem:

Neighbor brought a Laptop, which has operation trouble.
Laptop is loaded with XP Home Edition, with Service Pack 2.
Although it has 1.50 Ghz processor, it is VERY SLOW
in operation. It was still operating with IE6, with most of
the updates. I was informed that this laptop was operating
without any Anti-Virus program (!). Neighbor loaded the
Avast antivirus software couple of weeks ago but seems
like it was not able to clean all of the viruses (may be he
or I don't know how to operate it). I am used to with
AVG, so I loaded it and it found nearly 50 Trojan Horses,
and cleaned them. Next I loaded Spybot and found about
20 different types of spywares. I also loaded Ad-Aware
and cleaned bundle of other advertisement programs.
As the cleaning went on, I am having the worst time to
clean up the Browser Modifiers. I have loaded Microsoft
Windows Defender, and it did clean up 'Win32/Fotomoto',
but seems like the same pop-up program revives somehow
and I am still getting Pop-Up problems. There is an 'Unknown'
pop-up showing up at the listing of Windows Defender. May
be that is causing the pop-up now.

Question: How do I get rid of this Pop-Up trouble from
IE7 Explorer? Any information will be highly regarded.

The laptop is obviously not clean. Go through these general malware
removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://pcdid.com/Multi_AV.htm - download

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the first link above (not here, please).

The only alternative to going through the malware removal tediously and
systematically, probably with online help from an HJT forum, and taking
the machine to a real professional is to back up your data and do a
clean install of Windows. It's your call. Frankly, from your description
it sounds like a clean install might be the best choice after backing up
his data.

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may
be so infested that Windows will need to be clean-installed. Have all
your data backed up before you take the machine into a shop.


Malke

 

[Frank Saunders, MS-MVP OE/WM]

Here is the background of this problem:

Neighbor brought a Laptop, which has operation trouble.
Laptop is loaded with XP Home Edition, with Service Pack 2.
Although it has 1.50 Ghz processor, it is VERY SLOW
in operation. It was still operating with IE6, with most of
the updates. I was informed that this laptop was operating
without any Anti-Virus program (!). Neighbor loaded the
Avast antivirus software couple of weeks ago but seems
like it was not able to clean all of the viruses (may be he
or I don't know how to operate it). I am used to with
AVG, so I loaded it and it found nearly 50 Trojan Horses,
and cleaned them. Next I loaded Spybot and found about
20 different types of spywares. I also loaded Ad-Aware
and cleaned bundle of other advertisement programs.
As the cleaning went on, I am having the worst time to
clean up the Browser Modifiers. I have loaded Microsoft
Windows Defender, and it did clean up 'Win32/Fotomoto',
but seems like the same pop-up program revives somehow
and I am still getting Pop-Up problems. There is an 'Unknown'
pop-up showing up at the listing of Windows Defender. May
be that is causing the pop-up now.

Question: How do I get rid of this Pop-Up trouble from
IE7 Explorer? Any information will be highly regarded.

run HijackThis; http://aumha.org/downloads/hijackthis.zip
HijackThis - Tutorial & FAQ;
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42

Register here: http://aumha.net/profile.php?mode=register
Once you have received your registration confirmation, post your HJT
log here: *(for expert analysis)*
http://aumha.net/viewforum.php?f=30
****NOT in this newsgroup!*****

Please see http://aumha.net/viewtopic.php?t=4075 and
http://aumha.org/a/quickfix.htm before posting to the forum.

HijackThis tutorial:
http://aumha.org/a/hjttutor.htm

 

[Ken Blake, MVP]

Here is the background of this problem:

Neighbor brought a Laptop, which has operation trouble.
Laptop is loaded with XP Home Edition, with Service Pack 2.
Although it has 1.50 Ghz processor, it is VERY SLOW
in operation. It was still operating with IE6, with most of
the updates. I was informed that this laptop was operating
without any Anti-Virus program (!). Neighbor loaded the
Avast antivirus software couple of weeks ago but seems
like it was not able to clean all of the viruses (may be he
or I don't know how to operate it). I am used to with
AVG, so I loaded it and it found nearly 50 Trojan Horses,
and cleaned them. Next I loaded Spybot and found about
20 different types of spywares. I also loaded Ad-Aware
and cleaned bundle of other advertisement programs.
As the cleaning went on, I am having the worst time to
clean up the Browser Modifiers. I have loaded Microsoft
Windows Defender, and it did clean up 'Win32/Fotomoto',
but seems like the same pop-up program revives somehow
and I am still getting Pop-Up problems. There is an 'Unknown'
pop-up showing up at the listing of Windows Defender. May
be that is causing the pop-up now.

Question: How do I get rid of this Pop-Up trouble from
IE7 Explorer? Any information will be highly regarded.

I'm almost always again doing clean reinstallations and starting
fresh, but when you've got a computer that's been as badly infected as
this one is/has been, I think it's probably the best course.

 

[User77]

The laptop is obviously not clean. Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do all scans in Safe
Mode.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://pcdid.com/Multi_AV.htm - download

You can also check to see if there are targeted removal steps for your malware here:
Bleeping Computer removal how-to's - http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, run HijackThis and post your log in one of the specialty forums listed at the
first link above (not here, please).

The only alternative to going through the malware removal tediously and systematically, probably
with online help from an HJT forum, and taking the machine to a real professional is to back up
your data and do a clean install of Windows. It's your call. Frankly, from your description it
sounds like a clean install might be the best choice after backing up his data.

Standard caveat: If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a professional computer repair shop (not your local
version of BigComputerStore/GeekSquad). Please be aware that not all local shops are skilled at
removing malware and even if they are, your computer may be so infested that Windows will need to
be clean-installed. Have all your data backed up before you take the machine into a shop.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Thank you so much for the advice.

User77
Sept 22, 2007
1:20 pm

 

[User77]

run HijackThis; http://aumha.org/downloads/hijackthis.zip
HijackThis - Tutorial & FAQ;
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42

Register here: http://aumha.net/profile.php?mode=register
Once you have received your registration confirmation, post your HJT
log here: *(for expert analysis)*
http://aumha.net/viewforum.php?f=30
****NOT in this newsgroup!*****

Please see http://aumha.net/viewtopic.php?t=4075 and
http://aumha.org/a/quickfix.htm before posting to the forum.

HijackThis tutorial:
http://aumha.org/a/hjttutor.htm

Thank you so much for the advice.

User77
Sept 22, 2007
1:22 pm

 

[User77]

I'm almost always again doing clean reinstallations and starting
fresh, but when you've got a computer that's been as badly infected as
this one is/has been, I think it's probably the best course.

I am just about ready to re-load XP.
Thank you so much for the advice.

User77
Sept 22, 2007
1:24 pm

 

[Ken Blake, MVP]

I am just about ready to re-load XP.
Thank you so much for the advice.

You're welcome. Glad to help.