Adult Friend Finder Pop-up

Mr_Vincent

I think it might be time for a fresh operating system install.
I am as of now having trouble running Trend Micro's freeware scans.
It requires me to download Java runtime.

I am having trouble downloading that.
I am cookie conscious and clean those out at least once every week blocking all unless I am 100% sure of the site.

Panda's on-line virus scan is refusing to work too.

---

ewido anti-malware - Scan report

---

+ Created on: 02:59:57, 31/12/2005
+ Report-Checksum: 8EE2D094

+ Scan result:

C:\WINDOWS\system32\Gr0ck03.dll/bi.dll -> Spyware.BiSpy : Error during cleaning
C:\WINDOWS\system32\Gr0ck03.dll/biprep.exe -> Trojan.Bispy.B : Error during cleaning
C:\WINDOWS\system32\Gr0ck03.dll/bi.dll -> Spyware.BiSpy : Error during cleaning
C:\WINDOWS\system32\Gr0ck03.dll/biprep.exe -> Trojan.Bispy.B : Error during cleaning


::Report End

Above is this morning's scan result.
Ewido asked me if I wanted to delete the whole of this archive
C:\WINDOWS\system32\Gr0ck03.dll
I declined in precaution.

I am using Broadband,
currently have Windows XP service pack 1 installed
&
don't know if my operating system is 64bit or not
therefore will not run clean-up as a precaution.

I have a copy of WinXP service pack 3.
How do I go about removing my my current operating system to be replaced by it?

My task manager report will follow shortly.
As of now, my pop up has only appeared once and my anti-virus is slowing its activities.

Time for a reboot right now I think.
Spybot also picked up 6 pieces of scumware during safemode scan with system restore turned off.

Browntoa

I would let Ewido dlete all that archive as its the source of those failed cleans and the reason the infection is still there :-

http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453068322

DownloadWare is a process that runs on Windows startup. If a network connection is available it will connect to its servers, which can direct it to download and install software from advertisers.
It may be installed through an ActiveX control called ActiveInstall, which decodes and runs a built-in executable and then (tries to) remove itself. This executable can include DownloadWare and other bundled software - often premium-rate diallers from Movie Networks, Popcorn.net, MVPNetworks or Real-Tens.

delete it amd finish cleaning with ewido then install the windows Service pack in normal mode , then go to Windows update and finish up with the latest updates as this will close alot of the security holes that these exploit !! this may be half the problem that you are having runniing things

I would only re-install as a very last resort

Mr_Vincent

I got Ewido to delete the archives I was fearful about, saved the report under a different name and found it unavailable when I opened it.
I was fearful about my operating system because of the Win 32 bit in the archive I described.

Have just sucessfully installed Java and will do my on-line scans later. Have to go to work.

Browntoa,
your advice about telling me to allow Ewido to delete was instrumental as that told me it was safe.
What do you want me to do with Pest Patrol? Buy it or run it's on-line scans?
Is installing another operating system over another one safe?

So far no pop-ups but my anti-virus is still deleting stuff that would normally bring up those pop-ups.

Pchelpman,
will provide results of those on-line scans later.

Things appear to be improving so far :-)

Browntoa

I would not buy Pest Patrol ,there are many free alternatives out there that do as good a job for free (I have no paid for ones on my PC is case you are wondering)

Once you have done the Windows Service Pack updates (these are important I must stress as they increase the security !!) install the Micosoft Antispyware (FREE) and let if do live "Real Time" protection and auto updates, this will warn you if any apyware attempts to change any settings on your PC

Mr_Vincent

This section is no longer needed.

Mr_Vincent

(Sorry, this section is no longer needed)

I'd really love to use my card details on the net but not with the current possibilities of getting them stolen. At least I am no longer getting my pop-ups and my anti-virus is not playing up.

I've followed all advice so far.

What's next?
And what do I do with the program 'Hijack This'?

Browntoa wrote:

I would let Ewido dlete all that archive as its the source of those failed cleans and the reason the infection is still there :-

http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453068322

Browntoa

I'm still not 100% clear reading the thread, are you running Ewido in "Safe Mode " ??

Browntoa

if the 30 day pest patrol trial is not up make sure you run that in safe mode again as well

I often find I need to reboot , go back into safe mode and scan a couple of time before everything is removed

Mr_Vincent

As far as I am concerned, any issues regarding spyware have now been resloved.

Browntoa,
I did read your comments and decided to go into safe mode and run Ewido, Spybot and Adaware with System Restore turned off.
All found no traces of spyware.

Whilst reading your comments before going into safe mode, Pest patrol and Panda reported spotting spyware on my PC. I believe these to be just pushing of the need to buy their products.

I found my original problem to be that my broadband connection was not protected with my computers firewall as my last connection had.
Since applying my firewall to my connection, my anti-virus stopped playing up and I stopped getting my adultfriendfinder pop-ups.

I have not upgraded to WinXP servicepack 2 as I am quite happy with servicepack 1. What's more, a friend told me all you get with SP2 is a firewall and anti-virus.

In a few minutes, Microsofts antispyware will kick in as scheduled. I will not be expecting that to pick up anything.

The worst I have found so far have been spyware cookies, and those were found in scans last night.

Anybody else wishing to comment is free to.
All other comments will be noted and possibly reacted to.

:j
:beer:
:j

Toxteth_OGrady

What's more, a friend told me all you get with SP2 is a firewall and anti-virus.

Wrong on both counts.

SP2 corrects a whole host of security vulnerabilities and introduces enhanced functionality, inter alia, wireless networking improvements.

To illustrate the point, have you manually corrected the Messenger Service vulnerability with your SP1? If you don't know what I'm talking about I suggest you upgrade to SP2 + which fixes it by default.

:cool:

TOG