Anti Virus

gletley

I down loaded Microsoft Security on the advice of some one who appeared to know what he was talking about as he installs systems for businesses.

To start with every thing was fine, then pop ups started to show themselves, so on advice from some one on this forum, I down loaded Adblock, the pop ups still appear. Then some ones advice was to down load adware, so I have that as well and still the ads get in, more than ever.

I've just downloaded AVG to replace Microsoft, but the popups still appear and I understand AVG is only for 30 days and is not the free continual one it used to be.

I intend to reboot my computer, but can any one advice me of a free virus protection, that will work and protect me against these constant web sites that appear.

giraffe69

AVG is not 30 days only. You can download a free version which you must then register (no charge) and re register each year. This or MSE will protect you against viruses. If you are getting a lot of pop ups it is probably worth downloading the free version of Malwarebytes and run that.
You will get a lot of argument about which AV to use. I use MSE and have found it good and unobtrusive. I use Adblock with Chrome which is effective and keep Malwarebytes and run it from time to time.

JJ_Egan

Usual story with various AV tests is that MSE is very poor and AVG not that much better . Probably best of the free is Avast though the new Qihoo is returning outstanding results .
But a lot of people have very very different opinions of AV products good or bad .
Personally i only ever use Kaspersky Internet Security .

avrilisa9

Hello, Why knot you use Avast anti virus because it's free and it works well on my PC, When I was installing the security system in my house at that time I ask them for free anti virus which not give any problem.

Pincher

Method A:
________


Go into Control Panel:


Click on Programs


Click on Uninstall a Program


Look for recently installed programs that should not be there, and uninstall.




Method B:
________


Go into Control Panel:


Select "Network and Internet" then "Internet Options"


Select Tab "Programs", then button "Manage add-ons"


Click on "Toolbars and Extensions"


There will be one or more programs under "Not Available" that look dodgy. Click on one, and see if you can Disable it. The parasites that produce pop-ups are the ones that cannot be Disabled. They have disabled the Disable function.


At least you now know the name to search for.


Run regedit (From Powershell or Search for regedit)


Press F3 or use the Edit menu to search for the name of the pop-up program. F3 will find all occurences of that name. You need to delete all keys with that name.




There is a directory for that name in C:\Program Files (x86)


You need to delete that directory.


Restart, and confirm the program is gone in
Internet Options/Program/Manage add-ons.

Pincher

Oh dear, I seem to have got re-infected, and searching for the name in regedit doesn't seem to work any more. It is still possible to search using the key. In Manage add-ons, select/click on the suspicious looking add-on, then click on "More information" (left near the bottom, in blue). This brings up a pop-up window summarising the add-on, like this:


Name: sHopndrop
Publisher: Not Available
Type: Browser Helper Object
Architecture: 32-bit and 64-bit
Version: Not available
File date: Not available
Date last accessed: Not available
Class ID: {78B65661-D473-4B1C-8648-6CC3F38EC590}
Use count: 0
Block count: 0
File: uOIeYKAxgBhwqY.x64.dll
Folder: C:\Program Files (x86)\sHopndrop



Click on the Copy button, then paste into NotePad.


The offending add-on seems to comes in pairs, so if you kill one, they other carries on. The other one on my system is:


Name: FinEeDeaalSoft
Publisher: Not Available
Type: Browser Helper Object
Architecture: 32-bit and 64-bit
Version: Not available
File date: Not available
Date last accessed: Not available
Class ID: {79A29B95-DB45-4948-8E70-4BA5A4F128AF}
Use count: 0
Block count: 0
File: LLOYiQB6UwiDEo.x64.dll
Folder: C:\Program Files (x86)\FinEeDeaalSoft


It used to be I could search for sHopndrop and FinEeDeaalSoft in Regedit, and find the entries to delete, but this time nothing is found. I had to search the key (Class ID) {78B65661-D473-4B1C-8648-6CC3F38EC590} to find the keys to delete.

It seems to work, as I am getting pop-ups, but the add-ons are still showing in Manage add-ons.

Double_V

Malwarebytes and Microsoft Security Essential that's enough.
2 years no virus no pop ups.
System really clean.

But make sure you do a clean windows install.

Pincher

There's a reset that seems to help.



Go into Control Panel:


Select "Network and Internet" then "Internet Options"


Select on "Advanced" Tab.
Click on the button "Reset..." near the bottom.


After a Restart, the two add-ons become Disabled.


Previously, I could Remove them when in the Disabled state,
but this time, the "Remove" button is still disabled.


They must have improved its defences. Oh well.

Pincher

Double_V wrote: »

Malwarebytes and Microsoft Security Essential that's enough.
2 years no virus no pop ups.
System really clean.

But make sure you do a clean windows install.

I have Microsoft Security Essentials too, but I seem to get re-infected by sHopndrop and FinEeDeaalSoft (under similar names) quite frequently. They pretend to be official messages, like "Update your Flash Player". Clicking on the "x" does close the message, but it actually triggers the add-on installation process as well.


I managed to remove them several times previously.
But it seems to have got more resilient.


I have pop-up disabled normally, but they still manage to get through. They seem to be paying customers of the webpage, and display their fake messages legitimately.

esuhl

Run Malwarebytes' Anti-Malware, adwCleaner and (if you have access to a spare PC) you could create a bootable CD or USB stick with an antivirus recovery image.

https://www.malwarebytes.org/
https://toolslib.net/downloads/viewdownload/1-adwcleaner/

The recovery image is just like running the antivirus in Windows... but... without Windows (if that makes sense?!). It juts means the antivirus has a better chance of getting rid of malware affecting Windows, because Windows itself isn't running.

If you have, say, Avast installed on the second PC, there's an option to create a Recovery Disk in that. Other well-know anti-viruses let you download the recovery image without having to install the antivirus first, but Avast is one of the better AVs.

gletley

Double_V wrote: »

Malwarebytes and Microsoft Security Essential that's enough.
2 years no virus no pop ups.
System really clean.

But make sure you do a clean windows install.

How do I do that?