WinAntiSpyware 2007 infected my computer, I got rid of most of it but I still have popups- I need help FAST!!!

Question

I was online earlier in the day when it happened and I checked Yahoo! Answers right away, downloaded SuperAntiSpyware to get rid of it. It got rid of most of it, but I still had the popups. So I ran it again and it got rid of more stuff. But the popups were still coming up (they weren't trying to get me to buy spyware they were like "Texas Casino" and IQ test things, hosted by 'Web Buy'). So then I turned to Spybot, and ran that twice. I still have the popups now and not only are they annoying, my father's going to be home in 3 hours and he'll blame this whole thing on me, say it's all my fault when I've done everything I can to fix it. I need something free that works quickly and will TOTALLY eliminate the popup problem without damaging my computer. Thanks!

***Right after I hit 'Next' after typing this, a popup came up for SystemDoctor- which I didn't download, but still. HELP!!!

Okay, I immunized my computer through Spybot, but for some reason it wouldn't let me download the updates. I ran like, 4 scans and ONE THING keeps recurring, some registry modification. I click 'Fix Selected Problems' and it says it has "fixed the problem" but then I run another scan and the same thing comes up again. I just downloaded Ad-Aware now and I'm running a scan with that, which I really hope works. And as for my father, who will get home in about an hour and a half, won't accept that this "just happened" he'll pin it on me and say that I did it because I went on some spyware website or clicked on an advertisement even though I have done neither. This is turning out to be a bad day...

Answer 1

Ok, sweetie try downloading Ad-Aware 2007. It is free and works. Google it...it will come up and download it...it works for me!

http://www.download.com/Ad-Aware-2007-Free/3000-8022_4-10045910.html?part=dl-ad-aware&subj=dl&tag=top5<----link I found

It can also be that your pop-up blocker is off. Try turning it on. If you have the yahoo toolbar it should be there...if you have a google one that should be on.

Try this site for other anti-spyware...http://www.consumersearch.com/www/software/anti-spyware-reviews/index.html?referrer=yahoo_ssp

Update me on what's happening. Try not to worry. Relax and everything will alright.

Answer 2

If superantispyware didn't work you probably have a stubborn infection. You need hijack this and manual removal (most likely). I'm sorry but I doubt you'll find any good answers on here. You really need an expert to look at your hijackthis log and help you with removal If it is indeed a stubborn infection. Adware/antispyware programs will have a hard time getting rid of stubborn infections. That's what Hijackthis is for. Contact me if you want help. Look at my answers profile. Contact via email

Before you do that though, you can try Vundofix located here: http://www.atribune.org/content/view/24/2/

It was made specifically to rid of the type of infection you have. but again, you will probably need hijackthis and an expert.

EDIT:

download hijack this here:
http://www.majorgeeks.com/Trend_Micro_HijackThis_d5554.html

rename the file to something else after you download it such as "hello"

run the program.
select do a system scan and save a log
open up the log file, and copy and paste it to a site like this:
http://pastebin.com/

finally, paste the url from the url pastebin.com created for you to your additional details on your question.

Those types of infections load DLL's into memory when your Windows starts up. These DLL's have random filenames that antispyware might not yet know about since the spyware you were infected with is constantly changing to thwart antispyware.

Answer 3

When you ran SpyBot, did you first immunize the computer before you ran it? If you didn't you need to do that then run it again. And be sure you have the very latest updates for SpyBot. Unless you are color blind, or legally blind, you don't need skins, but you do need everything else. And, get Ad-Aware from download.com. It works with SpyBot, in that what one can't find and fix, the other will.

Immunize first, then get and run Ad-Aware.
http://www.download.com/3000-2144-10045910.html

And hopefully, you can tell Dad to relax and not get on your case for this. EVERY computer gets spyware. You just happen to have stumbled into a particularly nasty one.

Answer 4

If I were you I would look to see if anything has installed to run on your computer in case there is something there that been put there today when you were surfing (check by the date if you
have been the only one to use the computer it shouldnt have anything installed with todays date on! Otherwise I cant really think of anything. Good luck!

Answer 5

attempt going to the commencing up menu -> administration panel -> administrative kit -> centers. locate the Messenger provider interior the checklist, double click it, and set it disabled. needless to say it must be different issues. i could propose using those loose kit: living house windows Defender and AOL energetic Virus shield (in any different case an antivirus software observed as AVG). in case you want to pay, get an antivirus software observed as NOD32. there is not any ought to apply Norton or McAfee antivirus.

Answer 6

OK, don't panic! You probably do have a version of virtumonde (vundo) but it's not a problem. It's most likely hiding in your System Restore files, which is why it keeps coming back, and/or it's hiding part of itself. What follows below is rather lengthy, but it will work in the end. So:

First, you will need to get some software programs to help you. They are free for personal use.

Anti-Spyware Software

• CWShredder - You can find it at [www.trendmicro.com/cwshredder]
• Lavasoft's Ad-Aware - You can find it at [www.lavasoftusa.com]
• Spybot S&D - You can find it at [www.spybot.info]

• AVG AntiSpyware - You can find it at [free.grisoft.com] / [www.ewido.net]
Anti-Virus Software


Download each of the above programs and then install them. After you install them, you MUST update them so you will have the latest protection. There is one small exception: CWShredder is a stand-alone program that doesn't need to be installed, but you do need to have it check for an update to ensure that you have the latest version. If you don't update these programs and you are infected with the latest parasites, you will not be able to effectively detect and clean them from your computer, so remember to update, update, update.


1) Turn off System Restore

• Viruses can hide in your restore files, and if you do restore at some point you might reinfect yourself. Because of this, it is recommended to turn off System Restore before you test, and when you're done, turn it back on so you are still protected from standard computer problems.


Click Start.
Right-click the My Computer icon, and then click Properties.
Click the System Restore tab.
Check "Turn off System Restore" or "Turn off System Restore on all drives."
Click Apply.
When turning off System Restore, the existing restore points will be deleted. Click Yes to do this.
Click OK.

2) Carefully Look at Windows Add/Remove programs for suspicious programs

• Many of the spyware threats actually install into your system like a program. Many appear to be utilities that you may think are helpful but in reality aren't. Look for add-an toolbars, while toolbars like those provided by Google, MSN, Yahoo and other are great utils, there are many more that aren't and if in doubt check it out to see if ones you have are parasitic. Another common exploit are the Search helpers, WinTools, Gator products, IE Helper, Comet Cursor and many others just to name a very few. Peer-to-Peer (P2P) programs are another common source for these and even the ones that doen't come with spyware themselves are a security risk that may lead to your system being infected or to spread infections like these. Remove all suspicious programs, if you are wrong, you may always re-install them later.

3) Run Disk Clean-Up

• This actually comes with Windows. Click the Start Button and then go to Programs / Accessories / System Tools / Disk Clean-up. I recommend selecting all of its options except the ones for Office Setup Files and Compress Old Files if you have them. While you may select those if you wish, they aren't as important. This will clean up all of the temporary files so your testing will go faster, and may also delete any spyware that may hiding there if the spyware isn't already running.

4) Empty your Internet Explorer cache

• Open Internet Explorer and go to Tools..Internet Options… and under the General tab, in the Browsing History section, click Delete… and then select Temporary Internet Files. This probably won’t eliminate any viruses but will make the scanning go faster.

5) Run CWShredder

• This is made for detecting and cleaning of the infamous CoolWebSearch exploits. Currently there are about 40 types of these, each with up to 4 variants and growing. These are some of the toughest ones to get rid of.

6) Run Ad-Aware next

• This handles the next toughest types the best. When it finally presents you with the list of parasites it has found, put a check mark in the box next to the ones you want to get rid of, I suggest checking them all. If it says it can't get rid of a problem right now, it will ask if you want to run it again after you restart your computer, answer yes and restart your computer so it may test again.

7) Run Spybot next

• When you run it, it will automatically select all the spyware that it finds, if there is something you don't want to get rid of for some reason, deselect it and then let Spybot fix all of the rest of the problems that it finds. This program also will ask to restart your computer so it can test again if it has problems removing something, so let it.


8) Now Run The AVG Program

• Run the “Complete system scan” option. AVG will scan all of the files when you scan your computer; it will likely take a long time to complete.

• If it found anything, restart your computer and test everything again. There are times that after cleaning certain parasites you will need to test again because something may have been hidden earlier by the infection. So repeat this process of testing and restarting until you find no more parasites.

• Run the scans again in Safe Mode. This will keep many of the parasites from loading and being able to hide from your protection software. To access Safe Mode on most versions of Windows, start tapping the [F8] key after you first start or restart your system, start tapping it before you ever see a Windows Splash Screen and continue until you get the Menu where you may select it from the list. On WinNT, this is called VGA mode and on Win2k you actually start tapping just after the first splash screen shows. For Detailed instructions see Restarting Your Computer in Safe Mode

9) Reboot your computer normally.
• If you're still having problems, continue with the following:

10) Go to
www.spywareinfo.com/~merijn

• and download HiJackThis. (Look on the left of the page, click on “Downloads” and select “HiJackThis”). Run the program, which will create a log file. Go to

http://forums.spywareinfo.com/

• and post your HiJackThis log. You will get an extremely rapid, very precise answer on the forum (they don’t e-mail responses to you) as to whether or not you still have any infections and, if so, exactly what to do.

11) After everything is all cleaned up
• I recommend installing SpywareTerminator (also free):
http://www.spywareterminator.com/
Good luck!

Answer 7

I take it you using Internet explorer browser>? if so, in the "tools" options at the top click on there and turn off pop ups..

Answer 8

sounds like to me you were on dads computer, an not your own,or you wouldnt be such a worry about getting rid of it