My computer is plagued by Ad-ware, and none of the normal fixes are working. Help?

Question

I have tried all of the normal fixes. Ad-aware SE, Spybot search and destroy, and even a lesser-known one called counterspy. My definitions are up to date, I run the scans, but I'm still infected.

The scan will catch the problem, and then delete it. Shortly after, the problem will just appear again. I think there must be a program reinstalling whatever I delete. I need to know what is the next step I can take when the normal anti-adware software is not being helpful.

I have this one program, sunThreatEngine, that is taking up a silly amount of my system resources. I highly suspect it.

Please give me some advice here. I am sick and tired of pop ups flooding my screen and gumming up my system.

Answer 1

Hi there,

Unfortunately this is a problem I'm hearing on a daily basis now.

The number of people who have AVG, adaware and Spybot installed but then get confused as to why they have been infected is increasing by the day. In all seriousness, these programs (especially spybot and adaware) are no longer good enough to be your only protection against viruses, spyware and adware (as well as trojans, rootkits and other nasties). They used to be great programs a couple of years ago, but have now been overtaken by programs with next-generation approaches.

One program I would strongly recommend you try instead is Prevx1. This has recently been proven as having the strongest protection and cleanup capabilities of ALL security solutions available today so should hopefully fix the problems your current protection has failed to.

You can download a Free Trial of Prevx1 which will scan your PC and remove all infections free of charge:
http://www.prevx.com

Answer 2

SunThreatEngine is a process used by the active (real-time) monitoring component of CounterSpy.
It has been a hugh problem since the last upgrade of the CounterSpy program,and one that is finally being addressed with the next version of CounterSpy which is in beta testing right now.

Otherwise, CS is an excellent program for detecting malware.

My advise to you is to turn off the real time protection in CS and just use it as an on-demand scanner. And wait for the new version, which is much lighter in resource usage. The new version should be out in a matter of weeks.

Now for my standard pop-up advice:

Popup blockers will only stop web based popups. They can help somewhat, but if you are getting excessive popups, and popups even when you are offline, it means you have trojan downloaders on your machine that are calling out to deliver the pop up ads.

Try a full cleaning and dis-infection routine.

This is the one I use (it will take some time).

1. Scan for virus and remove (free online scan) with BitDefender

http://www.bitdefender.com/site/home/

2. Scan for trojans and remove (free online scan) with Ewido

http://www.ewido.net/en/

3. Scan for ad/spyware and remove (free download) with Spybot Search & Destroy

http://www.safer-networking.org/en/spybotsd/index.html


If you are using an older version of Windows (pre XP-SP2) you may also be getting "Messenger Service" popups which are caused by Microsoft leaving the almost never used Windows Messenger Service enabled by default. This was corrected in Windows XP- Service Pack 2.

Understand that the Windows Messenger Service is completely different from, and not in any way related to, "MSN Messenger", "Windows Live Messenger" "yahoo Messenger", or any other well-known instant messaging system. Therefore, disabling the Windows Messenger service will have no effect upon your use of any other instant messaging applications. They will continue to work without trouble.


To disable this service in older versions of Windows use the free, Shoot The Messenger from:
http://www.grc.com/stm/ShootTheMessenger.htm

Good luck.

Answer 3

There is only one way of dealing with this problem. You must delete the partition on your hard drive and then create a new one. Format it. And then do a fresh install of windows. It is the only way. Needless to say this is anywhere from rather involved (windows XP) to a friggin pain in the *** (windows 98). You will need some instructions on this (do a google search or buy a book), your original windows installation disks, the windows license from the tag on the back of your computer, and any installation disks from various programs you use. Likely any executable on your computer is infected and isn't safe to keep.

Some tips for after the install. Immediately disable microsoft messenger. This program is no longer used by microsoft but is a huge security hole exploited mercilessly by adware/spyware people to send you popups. If you get popups immediately after the fresh install, this is why. They have your IP and are sending it to you constantly in the hopes you have messenger enabled. Just turn it off.

Replace Internet Explorer with Mozilla Firefox. Far fewer trojans and other crap are designed to work on Mozilla and it offers quite substantial protection against reinfection.

Install all Microsoft security updates and enable the firewall.

Don't surf porn sites or other suspect sites (warez, eleetz crapola....you know who you are). Don't frequent online gambling (soon to be made illegal anyway).

Answer 4

Run those programs in safe mode to eliminate more of the adware. Sometimes those programs can't remove some adware because the computer is actually using those files at the requested time of deletion. In safe mode, those files wouldn't be in use.

Answer 5

two ideas

in spybot and adaware there are options for Immunizing the system against repeat offenders.

The other idea is to run Hijack This and then post the log to the group. There you may be able to identify the process that is replicating.

Answer 6

Boot to safe mode and run the scans.
In regular mode, the spyware can be running and either evade or reinstall itself.
While in safe mode, run your antivirus scan as well.
Try the Ewido software at http://free.grisoft.com
I also like the Free AVG antivirus soiftware at the same site.

Answer 7

I found a program called wincleaner complete pc care that works pretty well -- go to www.wincleaner.com and see if you can download it from their website (I purchased the CD from a store).... it's worth a shot -- or you can try to do a system restore to a time when you computer didn't have the pop-ups -- but only do that as a last resort....it could reinfect your system trying to do the restore...

Answer 8

I used to use Ad-aware, spybot search and destroy, and zonealarm ... plus registry check every once in a while ...
now? I have an apple and dont need any of those :D

Answer 9

The only way you are going to get rid of it is to re-load windows. Back up your pictures, files and whateveer you need and do a fresh install. It is really the only way.

(I install windows on a smaller harddrive and have a larger harddrive for my important items. I can reload windows very easy that way.)

Answer 10

Hello,
I had pretty much the same problem. I downloaded windows defender from microsofts free downloads. I like it alot.It removes all that crap. I haven't had a problem since. Good luck.