I have popups disabled but they still come up. Help?

Question

There is a host of web urls in my Favorites menu of IE but they do not appear in my Favorites folder. I did not put them there and I cant find a way to delete them. The same urls appear on each users settings. Urls are for online gaming, viagra, and all sorts of other stuff.

Pop-ups started to appear when I opened a virus-scanned mail from a friend. It contained a .gif called "amish" and a message to say that I had downloaded the "amish virus". An internet search revealed that this was just a hoax and Microsoft help said I should delete the mail. Which I have done.

I have disabled all toolbars except for Yahoo. I have run Webroot Spysweeper, Norton System Works and McAfee Adware removal.

If I can locate the file where these urls are maybe the pop-ups will go away but I dont know where it is.

Please can anyone help?!

Answer 1

Sounds like you are talking about history -- a list of web sites you have visited. If you want to clear this out, daily:

From Int. Exp.:
cl Tools
cl Internet Options
Clear History
set days to store pages in history to 0

When you shutdown, your history will be emptied. When you power-on, it will build up, but will clear again at shutdown.

You may also want to shut off "autocomplete" so your passwords are not saved:

cl Tools
cl Internet Options
cl Content tab
cl Autocomplete
clear all boxes, forms and passwords.

As to removing Favorites, click the Favorites button. Right-click on the icon of anything you want to remove, and choose delete.

Re: popups - did you click the pop-up button on the Yahoo toolbar and choose "enable pop-up blocker"?

Answer 2

The reason the popup blocker doesn't do any good against these popups is because they are caused by an Adware program on your computer.

Most adware programs are trojans. Since I don't know the name of the program on your computer it is difficult to narrow down the number of programs I list. All the ones I list will remove most of these types of infections.

Download AdAware SE and use it. It is the best adware removal program.

http://www.filehippo.com/download_ad-aware/

Now do this procedure and use the AdAware SE also. Between the two your adware program should be removed.

Trojan Removal Procedure.

Malware is a general word for all form of Viruses, Spyware etc. This procedure works for all Malware. Replace the Ewido program with the appropriate program.

You might be unable to access the Internet after removing the Malware so you will need to run LSPfix or Winsockxpfix (as appropriate). Download one and save to desktop, run it later.

LSPfix: all Windows OS except 95.

http://www.cexx.org/lspfix.htm

Winsock XP Fix: Windows XP only.

http://www.spychecker.com/program/winsockxpfix.html



Download and Update Ewido (now called the AVG Antispyware):

http://www.ewido.net/en/download/


-- If you have problems updating see here:

http://www.ewido.net/en/download/updates/

Once the updates are installed do the following:



Let's get cleaning

Part 1

• Temporarily show hidden files.

For Windows XP:

1.
Click Start, and then click Control Panel.

2.
Click Appearance and Themes, and then click Folder Options.

3.
On the View tab, under Hidden files and folders, click "Show hidden files and folders", and clear(uncheck) the "Hide protected operating system files" check box.



For older systems:

1.
Double-click My Computer, click View, and then click Folder Options.

2.
On the View tab, under "Hidden files and folders", click "Show hidden files and folders", and clear (uncheck) the "Hide protected operating system files" check box.


IMPORTANT: Files are hidden by Windows for a very good reason. It is not wise to experiment with these files. Unfortunately, to successfully remove modern spyware we must turn this protection off temporarily. Please turn the protection back on when you have finished cleaning your system.


Empty your Internet Explorer cache and your other temporary file folders:

1.
On the Internet Explorer Tools menu, click Internet Options.

2.
On the General tab, in the Temporary Internet Files section, click the Delete Files button. This will delete all the files that are currently stored in your cache.

3.
Select the Delete all offline content check box in the confirmation dialogue box that appears, click OK.

4.
Click OK again.

Restart in Safe Mode:

To do this you need to hold down or repeatedly tap the F8 key while the computer is booting (when the computer is displaying a black screen with white text). When the boot menu appears, use your keyboard arrows to select "Safe Mode."

Safe Mode can look quite ugly. The color may look bad, and all of your desktop icons will be very large. This is normal.



Start Scan and let Ewido scan the PC


When the scan and removal are completed REBOOT COMPUTER. This will restart you in normal mode.

If you are unable to access the Internet after removing Malware you will need to run LSPfix or Winsockxpfix (as appropriate).


If you are using Windows XP Service Pack 2 (SP2) and are unable to access the Internet after removing Malware, there is a command that may fix the problem, removing the need to run Winsockxpfix. It works by resetting the winsock catalogue. Click on Start, then Run and type CMD in the dialogue box that appears. Click OK. Type "netsh winsock reset" (no quotes)into the DOS window that appears.


The last steps

If you are running Windows XP or Windows ME, and your computer has been successfully cleaned of Malware, there is one more thing that needs to be done.

Delete any old restore points and then create a new restore one. The old ones may, of course, be infected with the Malware and cannot be used.

First, start and then stop the Restore Service. This is done differently depending on what operating system you are running.

Windows XP:

1.
Click Start, and then click Control Panel.

2.
Click Performance and Maintenance, click System, and then click on the System Restore tab.

3.
Select the Turn Off System Restore check box, click Apply, then restart your computer.

4.
Return to the System Restore Tab and turn System Restore back on.


Windows ME:

1.
Click Start, click Control Panel, click System.

2.
Click Performance, click File System, and then click Troubleshooting.

3.
Enable the option Disable System Restore, click Apply then restart your computer.

4.
Return to the Troubleshooting tab and turn System Restore back on.


To set a manual restore point complete the following steps:

1.
Click the Start button.

2.
Point to Programs, then navigate to Accessories, then System Tools, then click System Restore.

3.
Choose Create a restore point, and then click Next.

4.
In the Restore point description box, type a name for your restore point, and then click Next.

5.
Click OK.


If the above programs do not remove it then try these SmitFraud Trojan removal programs and procedures.

http://www.internetinspiration.co.uk/roguefix.htm

http://siri.urz.free.fr/Fix/SmitfraudFix_En.php

Answer 3

You seem to be infected with some stubborn spyware. Have you tried AVG, Spybot, Ewido and Ad-aware. If not download them from the following page and scan your PC:
http://www.cybertopcops.com/free-downloads.php

If the problem persists follow the instructions on the following page:
http://www.cybertopcops.com/malicious-software-removal.php

Answer 4

Before attempting to remove malware you must switch off System Restore as back up files will be hiding in there, and it will just restore itself. Go to Start - programs - accessories - system tools - system restore.
Run Avast and Ewido in Safe Mode. To get into Safe Mode repeatedly press the F8 key after the bios screen loads but before Windows loads. You'll know if you made it because the screen will be at 800 x 600 and your pc will be slow.

Then beef up your security. Its easier to prevent malware getting on to your sytem in the first place rather than trying to remove it.

The Windows firewall doesn't stop malware on your pc from dialling out. Either of these firewalls are free for personal use and stop unwanted incoming and outgoing traffic. You choose which programs are allowed to access the internet. They are both fairly easy to use and updated regularly.
http://www.zonelabs.com Zone Alarm firewall
http://www.kerio.com Kerio firewall

Shields Up security site, check your firewall works
https://www.grc.com

http://www.mozilla.com/ Firefox web browser
http://www.opera.com/ Opera web browser
Instal both these web browsers, turn off javascript on one and use that browser for vising unknown websites. They don't support Active X so thats one less way for problems to get on your pc.

Winpatrol is a handy utility that tracks cookies on your pc and stops unwanted changes to your startup folder.
http://www.winpatrol.com

Spywareblaster works with Internet Explorer and Firefox. It won't uninstall spyware that is already on your pc, but it will prevent hijacks and other malicious changes to your browser.
http://www.javacoolsoftware.com

http://www.siteadvisor.com -Site Advisor warns about malware on sites you are about to visit.

http://www.avast.com - Avast Antivirus

http://www.trendmicro.com/vinfo/ - Trend Micro online virus guide
http://housecall.trendmicro.com/ - Trend Micro PCillin online scan

http://www.ewido.net - Ewido anti trojan

Ad-Aware SE Personal anti adware
http://www.lavasoft.com

Spybot Search and Destroy anti spyware
http://www.safer-networking.org

http://spywarewarrior.com/rogue_anti-spyware.htm - The Spyware Warrior site identifies fake anti spyware programs.

http://www.bitdefender.com -BitDefender can be used as a second, on demand anti virus.

http://www.ccleaner.com Cr*pcleaner Registry cleaner and privacy tool

You can also download Microsofts free Windows Defender from the official Microsoft site, and the Malicious Software Removal Tool.

Remember to update and run all of you anti malware programs at least once a week.

Answer 5

Try going into control panel and opening hidden files and scan again but you may have to wipe the drive so save everything but when you have reloaded XP scan all the things you reload

Answer 6

Pop ups are a sign that your PC is infected.

Here is a list of free scans.I would recommend running ewido first.
Spybots search and Destroy http://www.download.com/3000-8022-10122137.html?tag=pao
adaware se> http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10399602.html?tag=lst-0-1
http://www.webroot.com/land/freescan.php
a-squared Free> http://www.emsisoft.com/en/software/free/
http://housecall.antivirus.com/housecall/start_frame.asp
http://housecall65.trendmicro.com/
X -Cleaner Micro Edition scan http://www.spywareguide.com/onlinescan.php
http://www.kaspersky.com/virusscanner
http://www.windowsecurity.com/trojanscan/
http://www.bitdefender.com/scan8/ie.html
http://www.pandasoftware.com/products/activescan/com/activescan_principal.htm

http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
http://www.javacoolsoftware.com/spywareblaster.html
Spywareguard too.
http://www.javacoolsoftware.com/spywareguard.html
http://www.ewido.net/en/onlinescan/
Get free anti virus for free click here.
http://free.grisoft.com/doc/1
http://avast.com

Answer 7

have a look on majorgeeks.com you can find all kinds of anti spyware on there and loads of other usefull tools and loads of it is free they`re really good and have a good reputation and in future its good to use an anti phishing program it tells you which sites are dodgy to use

Answer 8

Run AVG spyware scan at ewido.net

Answer 9

i thought that if you disable the pop up blocker you are stopping it from working try to enable it then it should stop them i hope i am right

Answer 10

put it on disabled means its off