i keep getting ads/popups after running various scans to no avail pleeeeese help?

Question

the main pop up is from em.gad-network.com i have tried spybot s&d windows one care scanner, windows defender ,avg anti-spy plus my own isp anti-spy how do i get rid apart from using a hammer

Answer 1

The link below will remove it.

http://free.prevx.com/

Answer 2

Hi Tracy,

First thing is that you need to follow up with me for a quite a few mails so that I will be able to remove it completely. Trust me. It will be completely gone.

Here are a few things to do prior trying anything else:

1. Let me know which Operating System you are using (Windows XP or any other)?
2. Go to this link and do a complete system scan using the link provided below:

http://www.pandasoftware.com/products/ActiveScan.htm

At the end of the scan you will get a report, do send it to me.

Once I have all this information I will be in a better position to help you.

My email is: [e-mail]

I might take around 10 hours to reply.

Answer 3

you ought to run it in secure Mode (faucet F8 because of the fact the computing device boots up and prefer to boot to secure mode). to boot to Spybot, it rather is nice to to additionally attempt super Anti-secret agent ware. ideally you will desire to run a virulent disease removal software in secure Mode (with out networking) and reboot and repeat the test and reboot until there's a cycle the place no virus is detected. the belief in the back of the secure Mode is that the working equipment would purely load your necessary classes and drivers to the memory and for this reason there's a “severe” possibility that the virus-contaminated report is at thechronic yet not loaded into memory. this would enable the AV to bathe it particularly and the subsequent reboot/test would stumble on not something. There ought to nevertheless be a small possibility that between the drivers or classes that are loaded by using the OS interior the secure Mode is contaminated. That’s why you ought to maintain rebooting and rescanning to be sure you’ve got here across all of them.

Answer 4

It's worth getting an expert to check your computer out at:

http://www.webuser.co.uk/forums/ubbthreads.php/Cat/0

Register, go to the Hijack This Forum, read the instructions on how to post a log, give a brief description of your problem (like you've just typed) and post your log there. The guys in there are fantastic and trustworthy and will guide you through in getting rid of anything nasty from your computer.

You MUST post a HijackThis log as per the instructions, not just your problem.

Answer 5

Adware that cause the popups are usually installed by Trojans. Trojans are usually placed in areas of your computer that is not scanned when the scan is performed while the computer is in the "normal" operating mode. The hidden Trojan then downloads the popups as soon as you stop scanning.

The best way to remove these types of infections is to attack and remove the Trojan first. Then remove the adware popups it downloaded. To remove the Trojans you need to open those areas it is hiding in so it can be removed.

These two programs are the very best at removing Trojans and adware. Ewido is the best Trojan remover and Adware is the best adware remover and a pretty good Trojan remover.

The setup steps for the Adware will allow it to scan and remove the infections better. If you do not want to do the setup that's ok. Just use it with the default setting it is downloaded at. You do need to do all the steps of the procedure. They are not difficult if you do each step. Just do what it says and you will do just fine.

Download and Update Ewido (now called the AVG Antispyware). Do not run:

http://www.ewido.net/en/download/

Download AdAware SE and update. Do the setup. Do not run:

http://www.filehippo.com/download_ad-aware/

AdAware SE Setup:

1. Select "use custom scanning options" then select "customize". Make sure the following options are enabled: "scan within archives," "scan active processes," "scan registry," "deep scan registry," "scan my IE favorites for banned URLs," "scan my Hosts file."

2. Select the "tweak" option. Under "scanning engine," make sure "unload recognized processes and modules during scan" is enabled. Enable "scan registry for all users instead of current users."

3. Under "cleaning engine" turn on "always try to unload modules…," "during removal unload explorer and IE if necessary," "let windows remove files in use at next restart," and "delete quarantined items after restoring."

4. Use the "select drives and folders to scan" option to ensure that your entire hard drive is scanned (if you have more than one hard drive, scan all of them (of course, do not include floppy and CD/DVD).


TEMPORARILY SHOW HIDDEN FILES AND FOLDERS.

1. Click Start, and then click Control Panel.

2. Click Appearance and Themes, and then click Folder Options.

3. On the View tab, under Hidden files and folders, click "Show hidden files and folders", and clear(uncheck) the "Hide protected operating system files" check box.

IMPORTANT: Files are hidden by Windows for a very good reason. It is not wise to experiment with these files. Unfortunately, to successfully remove modern spyware we must turn this protection off temporarily. Please turn the protection back on when you have finished cleaning your system.


EMPTY INTERNET EXPLORER BROWSER CACHE:

1. On the Internet Explorer Tools menu, click Internet Options.

2. On the General tab, in the Temporary Internet Files section, click the Delete Files button. Select the Delete all offline content check box in the confirmation dialogue box that appears, click OK. Click OK again.

RESTART IN SAFE MODE:

To do this you need to hold down or repeatedly tap the F8 key while the computer is booting (when the computer is displaying a black screen with white text). When the boot menu appears, use your keyboard arrows to select "Safe Mode."

Safe Mode can look quite ugly. The color may look bad, and all of your desktop icons will be very large. This is normal.



START THE SCAN WITH YOUR PROGRAM(S).



When the scan and removal are completed REBOOT COMPUTER. This will restart you in normal mode.

RESET HIDDEN FILES AND FOLDERS.

The RESTORE POINTS may be infected with the Malware and cannot be used. Delete the old one(s) and make a new one.

CLEAR OLD RESTORE POINT(S). HERE'S HOW:

1. Click Start, and then click Control Panel.

2. Click Performance and Maintenance, click System, and then click on the System Restore tab.

3. Select the Turn Off System Restore check box, click Apply, then restart your computer.

4. Return to the System Restore Tab and turn System Restore back on.


TO SET A NEW RESTORE POINT:

1. Click the Start button.

2. Point to Programs, then navigate to Accessories, then System Tools, then click System Restore.

3. Choose Create a restore point, and then click Next.

4. In the Restore point description box, type a name for your restore point, and then click Next.

5. Click OK.

NOTE: If you are using Windows XP Service Pack 2 (SP2) and are unable to access the Internet after removing Malware, there is a command that may fix the problem. It works by resetting the winsock catalogue. Click on Start, then Run and type CMD in the box. Click OK. Type "netsh winsock reset" (no quotes)into the DOS window that appears.

You can also reset the Winsock Catalogue using this program:

http://www.spychecker.com/program/winsockxpfix.html

Answer 6

Hi Tracy,

If you will follow the instructions at this link: http://malwaremedic.suddenlaunch3.com/index.cgi?board=Logs&action=display&num=1135140266 I could help you remove what is causing your popups.

Since you said you ran AVG Anti-Spyware, you could skip that step in my instructions. Instead, of running that, you could run SUPERAntiSpyware: http://malwaremedic.suddenlaunch3.com/index.cgi?board=AntiSpyware&action=display&num=1157707023

Please start a new thread in the location indicated in the instructions and post the following logs.

SUPERAntiSpyware
Panda ActiveScan
HijackThis


Best regards,

Windsor

Answer 7

Do you have internet explorer? If so, it might be your web browser that is creating the pop ups- try switching web browsers- it worked for me and I was getting the same one- go to firefox.com and download theirs and delete internet explorer from your computer- its a much better web browser anyways! I hope this helps!