How do I stop Pop Up Windows??

pchelpman

mandy6979 wrote:

Also, I should say that when I got my computer updated last year, the guy who did it gave me a copy of Windows XP.

When you say he "gave" you a copy of XP ... did he actually give you the master program disks or did he just load up a copy and keep the disks himself? I ask because, if you don't have the actual disks yourself, we can't guarantee you've got a genuine copy of XP.

The trouble is that, unless you have genuine copy of XP, then updates etc. may be a problem in the future.

Anyway, that may not be a problem (I hope not) so please do as I recommended in my ealrier post.

Post back when done so we know what's happened. We'll go from there.

PCH

mandy6979

No, I don't have any disk copies for the Windows XP. He updated my computer from Windows ME, and as far as I know he loaded a copy of XP on to update it, so NO its not a genuine XP update.

pchelpman

Oh well, It may still not be a problem but only time will tell.

Meanwhile ... go through the advice I gave in my post #8 and you will need to allow yourself a fair bit of free time for the various online scans etc. They are thorough but very worthwhile.

Report back when you've done that.

PCH

mandy6979

Hi PCH,

Downloaded the AVG Anti-Spyware. It took 2 hours and found 21 errors. I've attached a copy of the report below.

AVG Anti-Spyware - Scan Report

---

+ Created at: 16:11:21 12/10/2006

+ Scan result:



C:\Downloads\StartersOrdersSetup-dm[1].exe -> Adware.Trymedia : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@www.burstnet[2].txt -> TrackingCookie.Burstnet : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@e-2dj6wfkoaldjagp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@e-2dj6wflielcpglp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@e-2dj6wflikpdpafo.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@e-2dj6wflyapdpwdp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@e-2dj6wfmyogdpeco.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@e-2dj6wfmywhcpgkp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@e-2dj6wgk4qodjegq.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@e-2dj6wgkoapazelq.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@e-2dj6wjl4cpcpceo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@e-2dj6wjmiggcpibo.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@adopt.euroclick[1].txt -> TrackingCookie.Euroclick : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@server.lon.liveperson[1].txt -> TrackingCookie.Liveperson : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@web-stat[1].txt -> TrackingCookie.Web-stat : Cleaned.
C:\Documents and Settings\McKay\Cookies\mckay@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\McKay\Local Settings\Temp\Cookies\mckay@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned.


::Report end


Please let me know what you think. That's the only one i've done just now because it took 2 hours!

Mandy.

pchelpman

Sorry mandy. I never thought it would take that long.

However, it has cleaned some malware from your computer.

You mentioned you had pop ups and other things in your orignal post. How are they now? Any less?

In general how is your computer behaving now?

PCH

mandy6979

So far, so good PCH. Will I just need to run that program once a week or so to keep the pop-ups away?

I hope thats them gone for good because they were cracking me up!!

I also installed and ran the CCleaner. My computer seems to be a wee bit faster as well.

Thanks very much for all your advice and hopefully its solved the problem. I'll let you know if it returns.

Mandy.
:T

pchelpman

mandy6979 wrote:

So far, so good PCH. Will I just need to run that program once a week or so to keep the pop-ups away?

Might be a good idea. And run Ccleaner as well. Not sure what's going to happen to the old Ewido program, now called AVG Anti Spyware. I wouldn't rely on it being fully functional after the free trial period.

Hopefully, Ccleaner will remain free and there are several other online scanning tools available in the malware removal sticky I referred to in post #8. Especailly Panda Activescan ... that will also take a long time (hopefully not 2 hours!) and it may not remove everything it finds. However, it will usually identify the malware do you can post the results of that scan in a thread here. Someone will help you fix it.

Now you are hopefully clean you should clear out all old System Restore points then immediately create a new one so you have something to fall back on should anything go awry again. Also remember to make SR points on a regular basis.

More on System Restore ...

http://www.microsoft.com/windowsxp/using/helpandsupport/getstarted/ballew_03may19.mspx


What may have lead up to your infection …..

http://www.castlecops.com/t7736-So_how_did_I_get_infected_in_the_first_place.html


Help keep your computer free of malware …

http://www.help2go.com/Tutorials/Protect_Your_PC/Avoid_Web_Browser_Hijackers.html


You can get Get Ccleaner again here if you need to but ensure you install it WITHOUT the optional Yahoo Toolbar download (you must untick/uncheck the relevant box on download) …

http://www.ccleaner.com/

Safe surfing!


PCH