Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Pop Ups


  • This topic is locked This topic is locked
15 replies to this topic

#1 HIGHTOWER

HIGHTOWER

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Local time:01:08 AM

Posted 20 February 2008 - 02:16 PM

Recently our computer went down with a windows xp problem so we were told to start again which meant resetting everything inc downloading avg,adware etc.Its only now that we have got all our stuff loaded on but now for whatever reason we are getting pop ups from CiD which includes dating agency and all that rubbish.We have ran ccleaner,adware,avg and it doesnt seem to get rid and have reset our default aswell but still keep getting em.What do you think has happened and how do i sort also we downloaded mozilla firefox and use that sometimes which helps. :flowers: :thumbsup:

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,924 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:08 PM

Posted 20 February 2008 - 04:22 PM

Hello and welcome to BC.

Please uninstall any of the following program(s) using Add/Remove Programs if they are present. To do this, go to Start > Settings > Control Panel and double-click on Add/Remove Programs. From within Add/Remove Programs highlight each one and select Remove.
Netpumper
BitRoll
CiD Help
CiD Manager
Download Plugin for Internet Explorer
Zone Media


Be sure to reboot when done.

Please download NoLop and save it to your desktop.
alternate download link 1
alternate download link 2
  • First close any other programs you have running as this will require a reboot.
  • Double click NoLop.exe to run it.
  • Now click the button labeled "Search and Destroy"
    <>
  • When scanning is finished you will be prompted to reboot only if infected. Click OK.
  • Now click the "REBOOT" button.
  • A Message should popup from NoLop. If not, double click the program again and it will finish.
  • Please post the contents of C:\NoLop.log your next reply.
--If you receive an error: "mscomctl.ocx or one of its dependencies are not correctly registered", please download mscomctl.ocx to your system32 folder then rerun NoLop..
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 HIGHTOWER

HIGHTOWER
  • Topic Starter

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Local time:01:08 AM

Posted 20 February 2008 - 05:34 PM

There was an infected file deleted but for some reason i never got the log file

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,924 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:08 PM

Posted 20 February 2008 - 05:39 PM

How the popup situation
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 HIGHTOWER

HIGHTOWER
  • Topic Starter

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Local time:01:08 AM

Posted 20 February 2008 - 05:47 PM

Since i ran NoLop i havent had any popups

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,924 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:08 PM

Posted 20 February 2008 - 06:00 PM

Try a search for C:\NoLop.log , where C is the drive windows is installed to
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 HIGHTOWER

HIGHTOWER
  • Topic Starter

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Local time:01:08 AM

Posted 20 February 2008 - 06:22 PM

still not had any luck mate but i am not sure how to find that as computers isnt a strong point :thumbsup:

#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,924 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:08 PM

Posted 20 February 2008 - 06:31 PM

Not a real big deal was just looking for confirmation of what should be fixed by the tools. But the PC seems all good now?
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#9 HIGHTOWER

HIGHTOWER
  • Topic Starter

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Local time:01:08 AM

Posted 20 February 2008 - 06:37 PM

i thought it was sorted mate but i have had a couple of pop ups again but not on the same scale as before though

#10 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,924 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:08 PM

Posted 20 February 2008 - 06:46 PM

Ok then, Run these. SAS will take over and hour.

Download Attribune's ATF Cleaner and then SUPERAntiSpyware , Free Home Version. Save both to desktop ..
DO NOT run yet.
Open SUPER from icon and install and Update it
Under Scanner Options make sure the following are checked (leave all others unchecked):
Close browsers before scanning.
Scan for tracking cookies.
Terminate memory threats before quarantining
.
Click the "Close" button to leave the control center screen and exit the program. DO NOT run yet.

Now reboot into Safe Mode: How to enter safe mode(XP)
Using the F8 Method
Restart your computer.
When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu.
Select the option for Safe Mode using the arrow keys.
Then press enter on your keyboard to boot into Safe Mode.


Double-click ATF-Cleaner.exe to run the program.
Under Main "Select Files to Delete" choose: Select All.
Click the Empty Selected button.

If you use Firefox or Opers browser click that browser at the top and choose: Select All
Click the Empty Selected button.
If you would like to keep your saved passwords, please click No at the promp
t.
Click Exit on the Main menu to close the program.

NOW Scan with SUPER
Open from the desktop icon or the program Files list
On the left, make sure you check C:\Fixed Drive.
Perform a Complete scan. After scan,Verify they are all checked.
Click OK on the summary screen to quarantine all found items.
If asked if you want to reboot, click "Yes" and reboot normally.

To retrieve the removal information after reboot, launch SUPERAntispyware again.
Click Preferences, then click the Statistics/Logs tab.
Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
If there are several logs, click the current dated log and press View log.
A text file will open in your default text editor.
Please copy and paste the Scan Log results in your next reply.
Click Close to exit the program.

Please ask any needed questions,post log and Let us know how the PC is running now.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#11 HIGHTOWER

HIGHTOWER
  • Topic Starter

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Local time:01:08 AM

Posted 20 February 2008 - 08:50 PM

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 02/21/2008 at 01:35 AM

Application Version : 3.9.1008

Core Rules Database Version : 3406
Trace Rules Database Version: 1398

Scan type : Complete Scan
Total Scan Time : 01:24:04

Memory items scanned : 167
Memory threats detected : 0
Registry items scanned : 4800
Registry threats detected : 0
File items scanned : 42070
File threats detected : 0
THIS IS SUPER ANTI SPYWARE LOG [i think] :thumbsup:

#12 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,924 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:08 PM

Posted 20 February 2008 - 11:02 PM

You're looking clean. What are these pops of. That may be the clue.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#13 HIGHTOWER

HIGHTOWER
  • Topic Starter

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Local time:01:08 AM

Posted 21 February 2008 - 03:05 PM

The pop ups are all coming from the same place CiD and are stuff like DATING,GAMBLING,ADS,HOLIDAYS etc etc and i am still getting em now.

#14 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,924 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:08 PM

Posted 21 February 2008 - 04:14 PM

Well it seems they have gooten themselves deeply rooted. You are going to need specific tools and guidance. Su let our HJT Team experts take you thru.
Please follow the instructions here. You can go right to step 9 now.
Preparation Guide for use before posting a HijackThis Log
When done be sure to post the log in the HijackThis Logs and Malware Removal Forum,not here.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#15 HIGHTOWER

HIGHTOWER
  • Topic Starter

  • Members
  • 58 posts
  • OFFLINE
  •  
  • Local time:01:08 AM

Posted 21 February 2008 - 06:58 PM

i have done all that was asked and posted my hijackthis log file on the required forum the hijackthis and malware forum. :thumbsup:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users