Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Help
Uniqs:
165
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Is this considered a Safe Setup for Email? »
« Opinions, please: eBates MoeMoneymaker  

Swordfish II
Watching A Dream
Premium
join:2002-05-12
Cloud 9

Help

Hey my friend asked me to help her out with all these popups so I ran adaware but there are some things it cannot remove even though it says it will on the restart. Here is a pic
--
I'm not going there to die. I'm going there to see if i really am alive.
B
Premium,MVM
join:2000-10-28

Re: Help

Try running it in Safe Mode.

Then try grabbing Spybot from »safer-networking.org . It frequently works better.

Finally have her go through all the steps at »Security »I think my computer is infected or hijacked. What should I do? . Good luck.

-- B
--
In a realm outside causality and function

Kayrac
Premium
join:2001-09-29
Rochester, NH


1 edit
that means there currently running in memory, one easy way to prevent that, is to boot into safe mode, and then run ad-aware
you can also follow these steps
»Security »I think my computer is infected or hijacked. What should I do?
lol i was slower than 1.....but atleast i was faster than 1

gt7697c
Premium
join:2001-02-16
The Hive


1 edit
Suggest try running Ad-Aware in Safe Mode. Please post results.

Edit, too slow. Oh well.;)

If Safe Mode doesn't work you could try using WinBoot CD it comes with Ad-Aware and will run from a boot CD.

HTH.:)

--
Just my 2 bits.
B
Premium,MVM
join:2000-10-28

Re: Help

But does anyone think they should try it in Safe Mode?



-- B
--
In a realm outside causality and function

Swordfish II
Watching A Dream
Premium
join:2002-05-12
Cloud 9

I was kinda confused though, after restarting the computer adaware ran but didnt pick up any of the files in the screen shot. Then after a couple min the pop ups descended and when I ran adaware again, they were all back.
--
I'm not going there to die. I'm going there to see if i really am alive.

Swordfish II
Watching A Dream
Premium
join:2002-05-12
Cloud 9

Oh I forgot to mention we log into a domain, but to start in safe mode we have to log in as the admin on the computer. I know the admin user name and password, but will this affect the results?
--
I'm not going there to die. I'm going there to see if i really am alive.

siggyx
Siggy
Premium
join:2003-12-10
Cambridge

Follow the steps in the link below or the thread might get locked. Thems the rules.

»Security »I think my computer is infected or hijacked. What should I do?
--
The next best thing to being smart is being able to quote someone who is.
B
Premium,MVM
join:2000-10-28

Re: Help


Well, technically, I think the rules are broken ONLY after the first HJT log appears! So we should be safe.

Swordfish, the only potential problem with logging in as local administrator is that you'd be giving any resident trojans more privileges.

If, however, your domain user (the regularly logged in user who was infected) is ALREADY a local administrator of the machine (as is frequently the case), then it won't matter much.

It would probably be best if you took this machine off the network until you clean it up.

-- B
--
In a realm outside causality and function

Swordfish II
Watching A Dream
Premium
join:2002-05-12
Cloud 9

Re: Help

ok, I ran adaware in safe mode but none of that stuff came up. Gonna do the virus scans and hijack this scans
--
I'm not going there to die. I'm going there to see if i really am alive.
B
Premium,MVM
join:2000-10-28

Re: Help


While you're still in Safe Mode, try going to a command prompt (you can use Explorer but I don't trust it) and navigating to the directories indicated in your first screen shot -- see if those files are still there.

-- B
--
In a realm outside causality and function
Forums » Up and Running » Security » SecurityIs this considered a Safe Setup for Email? »
« Opinions, please: eBates MoeMoneymaker  


Saturday, 28-Nov 23:03:33 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [122] Time Warner Cable Fires Broadside At Broadcasters
· [112] New AT&T Ad Campaign Hits Back At Verizon
· [96] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [80] TiVo Sees Record Customer Losses
· [71] Weekend Open Thread
· [70] Verizon CEO: Hulu Will Be Dead Soon
· [69] In-Flight Internet Headed For Bumpy Landing?
· [62] Thanksgiving Open Thread
· [40] EFF Wages War On Fine Print
Most people now reading
· Windows 7 boot manager editing questions [Microsoft Help]
· [How to] Install Asterisk on an Asus WL-520GU router [VOIP Tech Chat]
· Why would I want an e reader? [General Questions]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· Why does it take so long? Mail question [General Questions]
· [ Classes] Druid tanking: rotation and glyphs [World of Warcraft]
· HOW-TO: QoS and Tomato (fixes "choppy voice") [MagicJack]
· [WotLK] Whats the level 80 pve spec for mages? [World of Warcraft]
· ToC 4th boss - Preliminary Strategy for Twin Valkyr [World of Warcraft]
· [ PVP] 3.2 DK PvP D/W Spec... [World of Warcraft]