Porn PopUps in IE7
WinXP >> Current Version C.S. w/current updates installed
Deep scan found FakeAlert (and possibly Vundo trojan) >> Cleaned/Removed OK
STILL getting porn pop-ups. What am I missing in the clean up? Subsequent scans indicate a clean system.
McAfee A.V. is also showing a clean system with it's scan.
Any help would be appreciated.
Deep scan found FakeAlert (and possibly Vundo trojan) >> Cleaned/Removed OK
STILL getting porn pop-ups. What am I missing in the clean up? Subsequent scans indicate a clean system.
McAfee A.V. is also showing a clean system with it's scan.
Any help would be appreciated.
1
person has this question
I have this question, too!
Tell me when someone answers.
The more people who ask this question, the more it gets noticed.
The more people who ask this question, the more it gets noticed.
Create a customer community for your own organization
Plans starting at $19/month
-
Inappropriate?Try running a scan from safe mode (pressing f8 during start up and choosing Safe mode from the list) In safe mode no other programs load so there is less of a chance that a threat can prevent counterspy from finding or removing an application.
-
Inappropriate?Tried the SafeMode scan long before posting :: Vundo is STILL on the machine and neither CounterSpy nor McAfee seem to be able to delete the trojan.
Client reported getting yet another notification of Vundo /_C005582A.DAT was found.
Bothers me greatly that purchased products (CounterSpy AND McAfee) that are supposed to be able to eradicate these things DON'T! -
Inappropriate?What version of counterspy and what definitions version do you have isntalled?
-
Inappropriate?Latest version available - updated prior to EACH scan
-
Inappropriate?Hi PopsTX & welcome,
Thanks for choosing Sunbelt products.
I suspect something must be re-loading those threats or something newer on the system that we don't detect yet.
Let's see if we can find it.
Once we find the issue we can work together to remove the threats.
I will need a couple logs from you to help me determine your Operating System and what the problems are.
If you have trouble understanding any of the instructions given while we work, please don't hesitate to ask for clarification.
Please download this tool and save it to your desktop:
http://download.bleepingcomputer.com/...
Temporarily disable antimalware programs to prevent its interference with running of OTViewIt.exe.
Some AV products detect this file as suspicious because of the packer used. I assure you it is not dangerous. (it simply makes logs of new files and non default registry entries on your system & makes no changes to system other than generate logs)
Double click OTViewIt.exe to run.
Click "run scan"
When done it will have produced 2 logs in same folder you saved OTViewit.exe to. (should be on desktop)
These logs you can close.
Please send both logs to me. (OTViewIt.txt & Extras.txt)
I would rather you email the logs rather than post because trying to read them in the forums will be difficult. (email below)
In your email please post a link to this thread so I know who's logs they are.
If you have an open Ticket # with Sunbelt Support please put that in email as well so we can keep track.
Don't forget to re-enable antimalware programs when done.
I may ask for more logs and/or file samples later but the above should give us a good start.
Thank you
Tammy Stewart
Sunbelt Software
tammys(AT)sunbelt-software.com (replace (AT) with @ )
"edited to fix broken URL" -
Inappropriate?Blender/PeterH
I appreciate your help in all matters. Unfortunately, the machine in question was some 50 miles from Me... And all the initial work was being done via telephone. Finally got the machine truly clean.... The hard way. A house-call, Format and Reinstall.
There was a time constraint involved; as the machine is in a medical environment and could not be "down" for any length of time. It was much quicker and more complete to wipe the HD and begin anew.
Upon initial inspection of the machine, I really think there was some sort of conflict between CounterSpy and McAfee. Cannot prove that statement: Just my opinion. Again, time was of the essence.
Thanks Again!
PopsTX
Loading Profile...


