Spyware Help

[fedupjohn]

I need need some help with a popup virus. Spy Bot can't see it and Microsoft's virus program can't fix it. This program redirects the browser to a website that sells software to fix the problem that it causes.

Any help will be appreciated.

[xcamel]

Spybot S&D
AdAware se
Both will kill it, both are free downloads.

[xcamel]

Oh.. also -
HijackThis will prevent it from happening again.

[SAMS]

The same damn thing has been happening on my laptop! Driving me nuts.

[Gamecock]

Concur with Spybot S&D.

Another useful one is Hijack This.

[OSHA]

Adaware from http://www.lavasoftusa.com/software/adaware/

popup blocker http://www.panicware.com/popupstopper-popupkiller.html?hop=tandt601

[kinoxi]

download 'hijackthis', post the results on a technical forum if the programs suggested here don't fix it. try the basic malware removers first

[OSHA]

If it turns out you have some variants of Cool Web Search (CWS) You may need CWS Shredder to get rid of it.

[Chode]

heae you tried to restore the registry from the last known good???

[xcamel]

Read first, then post.

[savedbygrace]

Does this pop up virus have a name?

The latest version of Zone Alarm Pro seems to catch stuff the others don't. I'm sure there are some things it doesn't catch that another ASW app wilkl catch, but it seems to do a great job of this.

[OSHA]

http://8help.osu.edu/1759.html

[fd10801]

Use the name of the Spyware as a search term -- Google, preferably. This will direct you to a Tech Forum with a solution. If it is SpyFalcon (and my guess is that that's the one) removing it for good is a multi - step process.
Good Luck

[Riley]

Download and run Ewido. Before running it- make sure you update it with current definitions.

http://www.ewido.net/en/

Run it in Safe Mode, blow away what it finds- then hit it with Spybot and Adaware. Anything that's left over- go to Spywarewarrior.com and get some specific help with it.

Be careful with Hijack This- it's a great tool, but you can accidentally do more than you planned on doing.

Also- there are a lot of bogus antispyware applications on the net that are exactly the opposite of what they claim to be. Spywarewarrior.com maintains a list of them.

[Bloody Sam Roberts]

HijackThis will prevent it from happening again.

Actually, HiJackThis will only give a listing of BHOs and browser registry entries. It's up to the user to CAREFULLY choose which ones are bogus and need to be deleted.

Run it and post the output here or Freepmail it to me fedupjohn and I can assist.

[musicman]

"This program redirects the browser to a website that sells software to fix the problem that it causes."

I'm not entirely certain, but it appears your "virus" is spreading and there isn't much to stop it since its' inception in January of 2001.

So far even there isn't a "fix" for the "MSM-Democratic-Agenda & Platfrom" virus.......

[JimRed]

Great scam; create a virus, then sell the cure! Execution is too good for hackers.

[JRios1968]

If it is Aurora, you will need to perform a fairly complex cleanup, involving HijackThis, Spybot, and Ewido. Go to this thread and it will help.

[InterceptPoint]

This is guaranteed to work:

1. Go to GeeksToGo and look for the Remove Malware/HiJackThis forum. Click on the "Please Start Here" link.

2. Read the instructions carefully. They will tell you what to do. The instructions will include running HiJackThis and posting a log to the forum.

3. Someone on the staff at GeeksToGo will respond with an analysis of your HiJackThis log and will give you further instructions and a request to post a new HiJackThis log.

If your problem is simple you may solve it in one or two HiJackThis analysis cycles. In my daughter's case, which was severe, it took about 8 cycles and two days. But it worked. The guys/gals at GeeksToGo are very good. They will point you to various free utilities that have been developed by them and others that are specific to your problem. They are very knowledgeable when it comes to adware and malware.