Pop ups

[Skip]

Greetings, Ther are alot of Windows antispyware pop up
boxes that come up asking for my approval. One that is up
right now is asking me to approve a program that is
ieok32.exe. This is one of many that comes up. They even
come up when we are not on the internet. The only way to
stop them is to shut down the Micriosoft antispyware
system. What can we do to stop this problem? Thanks for
you time, Skip

 

[Engel]

Hi Skip,

Steps to take if you have spyware that is not removed by
Microsoft Windows AntiSpyware (beta)
1) Open up AntiSpyware
2) Click Tools at the top
3) Click "Submit a Suspected Spyware Report"
4) Fill out the form with as much detail so they can
analyze quickly.



Generally, in a case where the item is identified, but not
properly removed, the next steps are:

1) Update both Microsoft Antispyware and your antivirus
application.

2) Restart in safe mode by pressing the F8 function key
before the first Windows screen appears at startup.

3) Do full deep scans with Microsoft Antispyware. Repeat
scanning until a complete scan comes through clean. Ditto
with the antivirus.



Before you do anything else, you have to make sure you got
Windows up-to-date. If you use Windows 2000 or Windows XP,
we need you to install Service Pack 4 (Windows 2000) and
Service Pack 2 (Windows XP).





Before running any spyware programs, please run an online
antivirus scan at one of the below sites to make sure that
you don't have a virus. It is recommended to run a scan
online because there are some viruses that can disable or
make themselves invisible to the antivirus programs you
have on your computer. If any viruses are found, copy them
down and see the online scan can (or if you want, you can
manually) remove them. I recommend using the TrendMicro
and Panda ActiveScan. If you can, run both (TrendMicro
first). If not, use Panda ActiveScan and save the log it
created.

Panda ActiveScan - save log and post it in the forum IF
there are files that it can't delete/disinfect.
http://www.pandasoftware.com/products/activescan/com/active
scan_principal.htm


TrendMicro Online Scan - this one requires Internet
Explorer - if you have another browser which doesn't work
here, use the TrendMicro link below this one
http://housecall.trendmicro.com/

TrendMicro Online Scan - this one doesn't require Internet
Explorer to use, but you will need the Java plugin
http://uk.trendmicro-
europe.com/consumer/housecall/housecall_launch.php




Download Ewido Security Suite
http://www.ewido.net/en/download/ and install it. Update
to the newest definitions. Do NOT run the Ewido scan yet.

Boot into Safe Mode by restarting and hitting the F8 key
repeatedly until a menu shows up (choose Safe Mode from
the list). In some systems, this may be the F5 key, so try
that if F8 doesn't work.

Next run a full scan in Ewido. Save the log from the Ewido
scan so that you can post it later.

* Don't worry if you have another antivirus program
installed. Ewido is compatible
http://www.ewido.net/en/compatibility/ with most antivirus
programs and shouldn't cause any conflicts. You may,
however, uninstall it (if you wish) after we are all clear
here.

Restart your computer to get back to Normal Mode. If you
don't have any antivirus programs installed, then I
suggest keeping Ewido Security Suite. It will turn into
the free version after the 14 day trial period is over. If
you like, I suggest getting a free antivirus program
called Grisoft AVG http://free.grisoft.com/freeweb.php.
It's also compatible with Ewido, so you may keep both if
you wish.


Good luck SDkip

Engel
20050822 23:03

 

[plun]

Hi Skip and Engel

Ewido removes this one:
C:\WINDOWS\system32\ieok32.exe -> Trojan.Agent.bi : Cleaned with backup

--
plun



Engel wrote :

 

[Chuck MSN ButterFly]

Is Skip talking about toast that pops up in the lower right hand corner or
pop ups that drop down???? Could be a whole different story and a new set of
problems. I get toast from Microsoft Windows AntiSpyware and know what most
of them are, those I am not sure of I stop.

Chuck