Major Adware Computer Problem for a Beginner

[Guest]

I have no idea what has taken over or happenned to my computer. Seems that I
try logging on to the internet and I cannot get to any site. My
usual/programmed home webpage no longer pops-up, it goes to some other search
site (no-name brand) and then within a couple minutes I get an "Error has
happenned" and I'm automatically booted off. For the few moments that I am
logged in to the internet, I get pop-ups that say my computer is infected
with adware/spyware.

Since I can't even stay logged on to the internet, I can't even download a
program to scan to check. I can't even use windows update, which is another
pop-up that keeps showing up on my computer.

Does this sound like an adware/spyware infection and how can I get rid of it
so I can use the internet again? I'm a basic computer user and don't know
much about getting my computer free of stuff. Any help is appreciated.

 

[David H. Lipman]

From: "ashrat" <[email protected]>

| I have no idea what has taken over or happenned to my computer. Seems that I
| try logging on to the internet and I cannot get to any site. My
| usual/programmed home webpage no longer pops-up, it goes to some other search
| site (no-name brand) and then within a couple minutes I get an "Error has
| happenned" and I'm automatically booted off. For the few moments that I am
| logged in to the internet, I get pop-ups that say my computer is infected
| with adware/spyware.
|
| Since I can't even stay logged on to the internet, I can't even download a
| program to scan to check. I can't even use windows update, which is another
| pop-up that keeps showing up on my computer.
|
| Does this sound like an adware/spyware infection and how can I get rid of it
| so I can use the internet again? I'm a basic computer user and don't know
| much about getting my computer free of stuff. Any help is appreciated.



Two part reply..

Perform Part 1 then perform Part 2.

If the first two parts don't work, perform the alternate utility.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.

If you are using any version of Sun Java that is prior to JRE Version 5.0,
then you are strongly urged to remove any/all versions that are prior to JRE
Version 5.0. There are vulnerabilities in them and they are actively being exploited.
It is possible that is how you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of Sun Java
to Version 5 on the PC that they be removed and Sun Java JRE Version 5.0 Update 6
be installed ASAP.

http://www.java.com/en/download/manual.jsp



Part 1
-----------

Use noahdfear's SmitFraud and SpyAxe removal tool -- SmitRem.exe
http://noahdfear.geekstogo.com/click counter/click.php?id=1

http://www.bleepingcomputer.com/forums/topic36868.html


Part 2
-----------

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it will be
displayed in your browser (Opera, FireFox or Internet Explorer). However, if you are using
WinXP, Win2K or Win2003 your system will be left in a state where you will have to manually
shutdown/reboot the PC. On Win9x/ME platforms the report will not be shown in your bowser
but your PC will automatically be shutdown. It is suggested that you move the report out of
c:\mcafee before performing another scan.

It would be best to scan in both Safe Mode and in Normal Mode and save a copy of the HTML
report for each session.


ALTERNATE:

Secured2K's SpyAxe, PSGuard, Smitfraud, Sinnaka and Alemod removal tool.

http://secured2k.home.comcast.net/tools/AntiPuper.exe

http://forums.mcafeehelp.com/viewtopic.php?t=65072

Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your reply.

* * * Please report back your results * * *

 

[Guest]

Hello .You are infected and your computer needs to be cleaned.

Please ,goto my web-site and perform the malware removal instructions:

http://free.hit.bg/fightmalware/homepage_en.htm

If you have another questions,don't hesitate to contact the Community again !


Panda_man

 

[Guest]

Thank you so much for responding and your information. Unfortunately, I
can't remain logged on to the internet long enough to get to a website to
utilize any tool. It seems that I've got the aboutblank thing going on too.

Is there anything I can buy from the store or do you happen to know a way I
get around this on my computer?

Thanks.

 

[Guest]

Thanks for your reply. Unfortunately, with my limited technical computer
knowledge, I'm not sure I can perform the functions mentioned. I don't know
where the "normal" or "safe" mode choices are and I really have no idea if
I'm using Sun Java or how to find out.

I really do appreciate your response though. Since I'm so limited in
knowledge, am I in deep trouble and should consider calling a technician or
is there basic box programs that I can buy and they will walk me through this
stuff step-by-step?

Also, I can't maintain an internet connection due to pop-ups (i think) and
that causes trouble in downloading anything.

Tarsha

 

[David H. Lipman]

From: "ashrat" <[email protected]>

| Thanks for your reply. Unfortunately, with my limited technical computer
| knowledge, I'm not sure I can perform the functions mentioned. I don't know
| where the "normal" or "safe" mode choices are and I really have no idea if
| I'm using Sun Java or how to find out.
|
| I really do appreciate your response though. Since I'm so limited in
| knowledge, am I in deep trouble and should consider calling a technician or
| is there basic box programs that I can buy and they will walk me through this
| stuff step-by-step?
|
| Also, I can't maintain an internet connection due to pop-ups (i think) and
| that causes trouble in downloading anything.
|
| Tarsha
|

Then I strongly suggest that you take your computer to a reputable computer service shop and
have them clean the PC.

 

[Guest]

Hi again !

You really don't need to buy anything !
The tools I offer are free ,they are not for selling.

As you are now posting here ,you use some computer,so download the necessary
tools on that computer ,install them and then just copy the to a CD /DVD or
USB flash memory.Make sure this computer is malware free.

First make sure this computer is malware free.
Scan with Panda Software free Active Scan
http://www.activescan.com

Then ,install Ad-Aware SE ,Spybot S&D and Panda TruPrevent on that computer/
The things you'll need to copy are the folder C:\Program files\Lavasoft
C:\Program files\SpyBot Search and Destroy

and all SIG files from Panda TruPrevent 2006's folder .

Then use them on the infected computer.

If it is difficlut for you,take your computer to a reputable computer shop
where IT specialists would help you.

Panda_man

 

[Guest]

Or another easier things (but more risky) :

Boot your computer in Safe Mode with Networking:


How to boot your computer in SAFE MODE

Do this by repeatedly typing F8 while Windows is starting before
Windows logo appears.
Then you'll open the BIOS menu where you can choose to boot
the hard drive in SAFE MODE


You are in Safe Mode but you'll have internet and most of the malware will
not be active.It is risky because as it is Safe Mode some Windows Services
aren't loaded and the firewall isn't loaded ,too and that's why you need to
do the things very fast .
THE FASTER - THE BETTER.

Goto my site ,download the necessary things ,install them in regular Safe
Mode and again in Safe Mode with Networking update them fast.When this is
ready ,unplug the internet cable and start performing the malware
instructions.

Panda_man

 

[Guest]

ashrat, one thing you can do is to go to the control panel (start, click
control panel) then click switch to classic view. click internet options, in
the address bar put in panda's website and start the downloads. The programs
that panda wrote about are necessary to kepping your computer free of
spyware, adware, and malware. once you get those installed if you can then go
to grisoft.com and download the free antivirus. if you still need help then
feel free to e-mail me at (e-mail address removed).
One more thing you can do is to borrow a friends computer and if they have a
burner then download those programs and burn them to a disk and install them
that way. I would recommend that you put them in C:\Program Files. that way
the computer can find the programs easier. Hope this helps you out.

 

[Leythos]

From: "ashrat" <[email protected]>

| Thanks for your reply. Unfortunately, with my limited technical computer
| knowledge, I'm not sure I can perform the functions mentioned. I don't know
| where the "normal" or "safe" mode choices are and I really have no idea if
| I'm using Sun Java or how to find out.
|
| I really do appreciate your response though. Since I'm so limited in
| knowledge, am I in deep trouble and should consider calling a technician or
| is there basic box programs that I can buy and they will walk me through this
| stuff step-by-step?
|
| Also, I can't maintain an internet connection due to pop-ups (i think) and
| that causes trouble in downloading anything.
|
| Tarsha
|

Then I strongly suggest that you take your computer to a reputable computer service shop and
have them clean the PC.

Ha Ha Ha, that's kind of funny David. I had a client call me because he
took his home PC to a BestBuy where Computer Geeks worked on it, they
cleaned it, not wipe/restore, and when they gave it back it was "free"
of viruses/malware, except that opening IE caused 4 different pages to
be shown

I use the Multi-AV tool, and it detected nothing, then I downloaded and
ran the latest AdAwareSE and Symantec Corp 10, and it cleaned everything
out. Symantec found 6 adware programs, and AdAware removed 147 items
(other than cookies)....

I've seen lots of computers come back from computer repair places still
infected.

 

[Leythos]

ashrat, one thing you can do is to go to the control panel (start, click
control panel) then click switch to classic view. click internet options, in
the address bar put in panda's website and start the downloads. The programs
that panda wrote about are necessary to kepping your computer free of
spyware, adware, and malware. once you get those installed if you can then go
to grisoft.com and download the free antivirus. if you still need help then
feel free to e-mail me at (e-mail address removed).

If he can post here to the group then he can get help here. Typically,
when someone in usenet requests that a thread be taken to private email,
it's for some unethical reason.

There is nothing you can't help him with in public that requires private
email, and if it's public he doesn't have to worry about the security
threat.

 

[David H. Lipman]

|
| Ha Ha Ha, that's kind of funny David. I had a client call me because he
| took his home PC to a BestBuy where Computer Geeks worked on it, they
| cleaned it, not wipe/restore, and when they gave it back it was "free"
| of viruses/malware, except that opening IE caused 4 different pages to
| be shown
|
| I use the Multi-AV tool, and it detected nothing, then I downloaded and
| ran the latest AdAwareSE and Symantec Corp 10, and it cleaned everything
| out. Symantec found 6 adware programs, and AdAware removed 147 items
| (other than cookies)....
|
| I've seen lots of computers come back from computer repair places still
| infected.
|

Notice the words... "reputable computer service shop"

BestBuy is not a "reputable computer service shop". It is a high volume electronics
reseller.

 

[Leythos]

|
| Ha Ha Ha, that's kind of funny David. I had a client call me because he
| took his home PC to a BestBuy where Computer Geeks worked on it, they
| cleaned it, not wipe/restore, and when they gave it back it was "free"
| of viruses/malware, except that opening IE caused 4 different pages to
| be shown
|
| I use the Multi-AV tool, and it detected nothing, then I downloaded and
| ran the latest AdAwareSE and Symantec Corp 10, and it cleaned everything
| out. Symantec found 6 adware programs, and AdAware removed 147 items
| (other than cookies)....
|
| I've seen lots of computers come back from computer repair places still
| infected.
|

Notice the words... "reputable computer service shop"

BestBuy is not a "reputable computer service shop". It is a high volume electronics
reseller.

Yea, but so many people fall for the Extended Warranty thing, so many
people fall for the Technical Statements made by sales people, so many
people walk into a Mom/Pop computer store and listen to the kid behind
the counter.....

I have only found 1 reputable computer place in the last 10 years, and
it's a 2 hour drive from my home.

I feel sorry for all the people trusting the lowest bidder, the sales
people, the techs being paid $6.75/hr...... But they don't have much
choice.

 

[David H. Lipman]

From: "Leythos" <[email protected]>

< snip >

| I feel sorry for all the people trusting the lowest bidder, the sales
| people, the techs being paid $6.75/hr...... But they don't have much
| choice.
|

Welcome to government contracting

 

[Guest]

I am sorry but ...

If Mr.Ashrat can't connect to internet and doesn't know how and what to get
from another computer and how to use it WE ALL are unable to help .

Yes ,reputable is the most important

Panda_man

 

[Richard Urban]

I have occasionally gone "one-on-one" with people who have had problems
(when there are so many conflicting answers to his question that performing
all the procedures would make the system worse). Then I am responsible for
helping him. I have even performed "remote assistance" with people I do not
know, explaining what I am doing - as I do it.

Notice I said "occasionally"!

--


Regards,

Richard Urban
Microsoft MVP Windows Shell/User

Quote from George Ankner:
If you knew as much as you think you know,
You would realize that you don't know what you thought you knew!

 

[Leythos]

I have occasionally gone "one-on-one" with people who have had problems
(when there are so many conflicting answers to his question that performing
all the procedures would make the system worse). Then I am responsible for
helping him. I have even performed "remote assistance" with people I do not
know, explaining what I am doing - as I do it.

Notice I said "occasionally"!

I have done it also, but I don't post messages in a PUBLIC forum saying
contact me for additional help. I have fixed many VPN issues and many
firewall appliance issues from people that have emailed me, but it's a
security threat to ask people to believe that requesting people contact
them via email.

We need to make people aware that most times, when someone takes it to
email, as with a unnamed poster does, that it's a threat to be avoided.
99.9% of what needs to be done can be done via usenet if it can also be
done via email, and others have the opportunity to learn from it also.

 

[Richard Urban]

I defy anyone to learn from some of the long, convoluted strings that are
seen in these newsgroups, especially if Andrew E. is involved.

By the time the O/P has completed doing what people tell him to do, his
computer may well be taken for trash.

Maybe you have a secret for separating the practical replies from the
dangerous replies. If so, please state your methodology for those beginners
who don't have a clue.

Until then, I will, when I see fit, offer off-line assistance when I feel it
may be of use. It is up to the O/P to e-mail me if he desires.

--


Regards,

Richard Urban
Microsoft MVP Windows Shell/User

E-Mail accepted: Remove the obvious from my address when sending

Quote from George Ankner:
If you knew as much as you think you know,
You would realize that you don't know what you thought you knew!

 

[Gene K]

Thank you so much for responding and your information. Unfortunately, I
can't remain logged on to the internet long enough to get to a website to
utilize any tool. It seems that I've got the aboutblank thing going on
too.

Is there anything I can buy from the store or do you happen to know a way
I
get around this on my computer?

Thanks.

Gene K