help me , i cannot stop the pop ups!!

[elfkar2001@yahoo.com]

please help, I installed a spyware remover, called webroot spy remover,
it ran ok and said the spyware was deleted, but when it is finished,
all pop ups keep coming back.
also it said i had adware trojan horses which were also deleted. but
again when it scanned on reboot, all spyware and pop ups were back ever
time. they even pop up when i am not in a broswer. os is win xp PLEASE
HELP ME!!!

WHAT DO I DO? thanks all..

[AvianFlux]

Try running WebRoot in Windows 'Safe Mode', and make the fixes there.

Also get HijackThis!, and run it in Windows 'Safe Mode', copy/paste the
HJT logfile to, I Am Not A Geek's HijackThis Log Analyzer, and 'Fix'
any obvious RED flags with the HJT scanner, while in Windows 'Safe
Mode'.

Get Intermute's CWShredder, and do the same thing.

Merijn's HijackThis! scanner: http://www.merijn.org/downloads.html

IANAG HJT Analyzer: http://hjt.iamnotageek.com/

Intermute's CWShredder:
http://www.intermute.com/products/cwshredder.html

[CWatters]

<elfkar2001@yahoo.com> wrote in message
news:1113197075.920565.315930@o13g2000cwo.googlegr oups.com...
> please help, I installed a spyware remover, called webroot spy remover,
> it ran ok and said the spyware was deleted, but when it is finished,
> all pop ups keep coming back.
> also it said i had adware trojan horses which were also deleted. but
> again when it scanned on reboot, all spyware and pop ups were back ever
> time. they even pop up when i am not in a broswer. os is win xp PLEASE

Some of this stuff can be very difficult to remove. Some spyware/adware even
repairs itself when you try and remove it.

First make sure you have WinXP firewall enabled.
Then downloading these free programs and run the scans they offer

Spybot Search and Destroy from
http://www.safer-networking.org/en/download/

Microsoft antispyware from
http://www.microsoft.com/athome/secu...e/default.mspx

Only get them from the sites listed above because fake copies may exist.

You could also download Ad-Aware from this site (only this site)...
http://www.lavasoftusa.com/
...but you need to post the results of a scan on their forum before you do
anything - don't just delete things Ad-ware finds or you could make things
worse. You need advice to understand what Ad-ware is telling you.

Finally if any unexpected pop-ups offer to scan your system for
spyware/viruses/security threats or adware don't trust them! Never respond
to a popup like this. Some of these programs put more malware on your system
that they remove.

Good luck

[Gillian Baskin]

Go here http://www.pandasoftware.com/actives..._principal.htm

and run the online scan.

It will identify all viruses, spyware and adware on your computer.

Make a note of them, and if your Antispyware software cannot remove them,
then Google each identified entry and find a custom fix for each one.

This is a lot easier than it sounds, and you should have no problems.

All the best,

Gillian.

<elfkar2001@yahoo.com> wrote in message
news:1113197075.920565.315930@o13g2000cwo.googlegr oups.com...
> please help, I installed a spyware remover, called webroot spy remover,
> it ran ok and said the spyware was deleted, but when it is finished,
> all pop ups keep coming back.
> also it said i had adware trojan horses which were also deleted. but
> again when it scanned on reboot, all spyware and pop ups were back ever
> time. they even pop up when i am not in a broswer. os is win xp PLEASE
> HELP ME!!!
>
> WHAT DO I DO? thanks all..
>

[Jay T. Blocksom]

On Mon, 11 Apr 2005 14:07:00 +0000 (UTC), in <alt.privacy.spyware>, "Gillian
Baskin" <streaker@jijo.com> wrote:
>
> Go here http://www.[REDACTED]
>
> and run the online scan.
>
[snip]

Bad idea. VERY bad idea.

First, that site requires that you enable Javascript in order for it to
function. That's a VERY bad idea even when you *don't* think you have an
infection; when you *do* think you have an infection, it's downright suicidal.
Frankly, Panda Software completely destroys their own credibility by even
attempting to foist this nonsense off on the public.

But beyond that, ALL so-called "online virus scanners" are by definition
broken and useless. Here's why:

If you have a rational reason to run ANY "virus scanner" against the system as
a whole (as opposed to, for example, a specific "questionable" file that you
just downloaded), then by definition you must consider the target system to be
at least potentially compromised. Quite beyond any issues with Javascript
itself, allowing the system to connect to the 'net in that state is inherently
self-defeating (not to mention highly risky); no matter what results such an
"online virus scan" might produce, they *CANNOT* be trusted.

The *only* way to reliably scan/disinfect such a system is to physically
disconnect it from ALL other systems/networks, cold-boot it from known-good
(and write-protected!) removable media which contains a stand-alone virus
scanner and up-to-date versions of whatever definitions/signature files it
requires, then use those tools to carry out the disinfection. Until you are
*sure* the system is clean, you do *NOT* allow it to connect (even indirectly)
to ANY other systems/networks.

> It will identify all viruses, spyware and adware on your computer.
>
[snip]

Not even close.

--

Jay T. Blocksom
--------------------------------
Appropriate Technology, Inc.
usenet02[at]appropriate-tech.net

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-- Benjamin Franklin, Historical Review of Pennsylvania, 1759.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Unsolicited advertising sent to this domain is expressly prohibited under
47 USC S227 and State Law. Violators are subject to prosecution.

[Jay T. Blocksom]

On 10 Apr 2005 22:24:35 -0700, in <alt.privacy.spyware>, elfkar2001@yahoo.com
wrote:
>
> please help, I installed a spyware remover, called webroot spy remover,
[snip]

There is no such animal.

Webroot makes a (bad) product named "SpySweeper". They also spam:

<http://groups.google.co.uk/groups?q=Webroot+group:news.admin.net-abuse.*&sa=G&scoring=d>
<http://groups.google.co.uk/groups?q="Window+Washer"+group:news.admin.net-abuse.*&sa=G&scoring=d>

Hence, no informed and ethical person would buy anything from them.

Meanwhile, "SpyRemover" is either:

- a known-rogue scamware product from <rizalsoftware.com>, or

- a putatively legitimate, but non-free, knock-off by <itcompany.com> of the
freeware (and excellent) "SpyBot Search & Destroy".

Even in the latter case, why anyone should prefer it to the original remains
an open -- and very good -- question.

> it ran ok and said the spyware was deleted, but when it is finished,
> all pop ups keep coming back.
[snip]

So what does this tell you about the efficacy of whatever it is you really
ran?

> os is win xp PLEASE HELP ME!!!
>
[snip]

That's a problem, in and of itself. There are quite a number of XP-specific
issues you need to be aware of:

<http://www.hevanet.com/peace/microsoft.htm>
or <http://www.futurepower.net/microsoft.htm>

and (read all three):
<http://www.infoworld.com/article/03/03/14/11winman_1.html>
<http://www.infoworld.com/article/03/03/21/12winman_1.html>
<http://www.infoworld.com/article/03/03/28/13winman_1.html>

and finally:
<http://www.cl.cam.ac.uk/~rja14/tcpa-faq.html>


> WHAT DO I DO? thanks all..

What you *should* do is:

A. - Learn what you're doing. Notwithstanding ANYTHING else, that is a
prerequisite for avoiding the sort of problems you are now bemoaning (and many
others).

B. - Dump the crapware you've loaded onto your system, starting with WinXP
itself, and replace it with either a less problematic version of Windows --
Win2K being the last "acceptable" (if just barely, and even then only after a
thorough application of 2000lite/XPlite) version -- or better yet, side-step
the whole stinking mess: <http://www.knoppix.net/>, <http://www.linux.org:/>.

--

Jay T. Blocksom
--------------------------------
Appropriate Technology, Inc.
usenet02[at]appropriate-tech.net

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-- Benjamin Franklin, Historical Review of Pennsylvania, 1759.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Unsolicited advertising sent to this domain is expressly prohibited under
47 USC S227 and State Law. Violators are subject to prosecution.

[Ian Kenefick]

On Wed, 13 Apr 2005 15:40:13 -0400, Jay T. Blocksom
<not.deliverable+usenet02@appropriate-tech.net> wrote:

>On 10 Apr 2005 22:24:35 -0700, in <alt.privacy.spyware>, elfkar2001@yahoo.com
>wrote:
> >
> > please help, I installed a spyware remover, called webroot spy remover,
> [snip]
>
>There is no such animal.
>
>Webroot makes a (bad) product named "SpySweeper". They also spam:
>
><http://groups.google.co.uk/groups?q=Webroot+group:news.admin.net-abuse.*&sa=G&scoring=d>
><http://groups.google.co.uk/groups?q="Window+Washer"+group:news.admin.net-abuse.*&sa=G&scoring=d>
>
>Hence, no informed and ethical person would buy anything from them.
>
>Meanwhile, "SpyRemover" is either:
>
> - a known-rogue scamware product from <rizalsoftware.com>, or
>
> - a putatively legitimate, but non-free, knock-off by <itcompany.com> of the
>freeware (and excellent) "SpyBot Search & Destroy".
>
>Even in the latter case, why anyone should prefer it to the original remains
>an open -- and very good -- question.
>
> > it ran ok and said the spyware was deleted, but when it is finished,
> > all pop ups keep coming back.
> [snip]
>
>So what does this tell you about the efficacy of whatever it is you really
>ran?
>
> > os is win xp PLEASE HELP ME!!!
> >
> [snip]
>
>That's a problem, in and of itself. There are quite a number of XP-specific
>issues you need to be aware of:
>
> <http://www.hevanet.com/peace/microsoft.htm>
>or <http://www.futurepower.net/microsoft.htm>
>
>and (read all three):
> <http://www.infoworld.com/article/03/03/14/11winman_1.html>
> <http://www.infoworld.com/article/03/03/21/12winman_1.html>
> <http://www.infoworld.com/article/03/03/28/13winman_1.html>
>
>and finally:
> <http://www.cl.cam.ac.uk/~rja14/tcpa-faq.html>
>
>
> > WHAT DO I DO? thanks all..
>
>What you *should* do is:d
>
>A. - Learn what you're doing. Notwithstanding ANYTHING else, that is a
>prerequisite for avoiding the sort of problems you are now bemoaning (and many
>others).
>
>B. - Dump the crapware you've loaded onto your system, starting with WinXP
>itself, and replace it with either a less problematic version of Windows --
>Win2K being the last "acceptable" (if just barely, and even then only after a
>thorough application of 2000lite/XPlite) version -- or better yet, side-step
>the whole stinking mess: <http://www.knoppix.net/>, <http://www.linux.org:/>.

Excellent post Jay! Permission to gather links and add it to the
useful info section of my website?

Regards,
Ian Kenefick
http://antivirus.ik-cs.com

[Jay T. Blocksom]

On Wed, 13 Apr 2005 23:38:19 +0100, in <alt.privacy.spyware>, Ian Kenefick
<ian_kenefick@eircom.net> wrote:
>
[snip]
>
> Excellent post Jay!
[snip]

Thank you -- but you didn't need to re-quote it en toto to say that.

> Permission to gather links and add it to the
> useful info section of my website?
>
[snip]

I'd feel better about that if you fixed your site to not be dependant on
Java****.

--

Jay T. Blocksom
--------------------------------
Appropriate Technology, Inc.
usenet02[at]appropriate-tech.net

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-- Benjamin Franklin, Historical Review of Pennsylvania, 1759.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Unsolicited advertising sent to this domain is expressly prohibited under
47 USC S227 and State Law. Violators are subject to prosecution.