Re: pernicious pop-ups

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Jan Il (abuse_at_localhost.com)
Date: 06/29/04 

Date: Tue, 29 Jun 2004 11:13:04 -0700

LuckyStrike wrote:
> Hey Jan -
>
> You forgot one. ;-))
> http://forums.spywareinfo.com/index.php?showtopic=8847
>
> <paste>
> In the last few days ... This infection:
> res://<random>.dll/<random>.html#<random> has spread like wildfire
> and we are inundated with requests to help clear it. Sometimes the
> fixes that have been created work, sometimes not - Unfortunately.
>
> There has been some reported fixes by ensuring that you have a
> firewall installed like Zonealarm and having it block the calls out
> to the Internet. That, with a complete scan using the latest version
> of Ad-aware seems to clear it up - Somewhat.
>
> **Ad-Aware should be file : v6.0 Build 6.181 and you should have
> reference file: 01R324 22.06.2004 installed.** Please update your
> copy of ad-aware and boot into safe mode and run it, before posting a
> request for help. (How do I boot into "Safe" mode?)
>
> **It appears that ad-aware is cleaning the files etc but not deleting
> the registry entries associated with the clean so they may still show
> up in the HijackThis log**. If you still get the entries after
> booting into normal mode
> and are not sure what to delete, post your log in the forum but
> mention what version of ad-aware you run as well as the reference
> file version - This will help in the resolution.
>
> Also - If you request help, **DO NOT reboot your computer until you
> receive a
> response as the files change as soon as you reboot**. If you receive
> no response and you have rebooted - Post a new HijackThis log into
> your current message - DO NOT start a new message again as we cannot
> keep up with all the calls.
> <paste/>

Thank you! Dang! How did I miss that one? <g>

Jan :)

Relevant Pages

  • Re: IE comprimised
    ... > It appears that ad-aware is cleaning the files etc but not deleting the ... > response as the files change as soon as you reboot. ... > response and you have rebooted - Post a new HijackThis log into your ... >>> blocker was disabled and now I get pop-up ads to sell me ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Quick Launch disappearing
    ... Ramesh - Microsoft MVP ... There were elements of BlazeFind that Ad-Aware didn't pick up until I ... Even then there were specific items in the HijackThis log that needed to be ...
    (microsoft.public.windowsxp.customize)
  • Re: Quick Launch disappearing
    ... Chris, You don't need to set the option to run on next boot. ... There were elements of BlazeFind that Ad-Aware didn't pick up until I ... Even then there were specific items in the HijackThis log that needed to be ...
    (microsoft.public.windowsxp.customize)
  • Re: SLOW computer - ? spyware
    ... I read that Ad-aware is a good one... ... A-S applications - for non-viral malware. ... A description of the Safe Mode Boot options in Windows XP ...
    (microsoft.public.windowsxp.general)
  • Re: Power Options and Screensaver
    ... Please remember some Spy Ware and Ad Aware will load and run in a normal ... bootup and you may have to reboot into Safe Mode to run your Spy-Ware and ... Ad-Aware to remove them and clean your applications and programs. ... There are many temp files that increase everytime you use your PC. ...
    (microsoft.public.windowsxp.newusers)