Little Star asked:

please help ive tried everything and i cant get rid of it. although it doesnt slow my computer down like before i still get warning messages and a possible adware infection bar appears at the top of my internet explorer. The icons for “anti virus software” are still on my desktop how can i get them to go? I downloaded a virus detection and deletion package from micosoft but it hasnt taken away the icons and pop ups? how can i get rid of these? any help would be great, thankyou so much if you can help me x
i tried to download that already but it took forever and froze

suwo asked:

On spyware doctor it says i have 84 infections, and if i want to remove them i have to get a registered version. Spybot doesn’t pick them up, so does anyone either have a registered version or can you tell me how to remove it.(or a good adware remover that is free)
Thanks.
i dont get any popups, but my internet explorer crashs easily (it crashed from speedtest)

D-Scan asked:

Ever since spyware was installed the other day (and I removed it), Google has been redirecting to other spyware websites, and it says ‘analitic-checks.google.com’ in the status bar. I have used every spyware removal program under the sun.

Here is my process report from HijackThis:

R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://wapp.verizon.net/bookmarks/bmredir.asp?region=all&bw=fiber&cd=7.0unattached&bm=ho_central
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 – HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R1 – HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:8080
F2 – REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 – BHO: (no name) – {02478D38-C3F9-4efb-9B51-7695ECA05670} – (no file)
O2 – BHO: Adobe PDF Reader Link Helper – {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} – C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 – BHO: Verizon Broadband Toolbar – {4E7BD74F-2B8D-469E-8CB0-AB60BB9AAE22} – C:\PROGRA~1\VOL_TO~1\VOL_TO~1.DLL
O2 – BHO: PCTools Site Guard – {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} – C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 – BHO: SSVHelper Class – {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} – C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 – BHO: NAV Helper – {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} – C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 – Toolbar: Norton AntiVirus – {C4069E3A-68F1-403E-B40E-20066696354B} – C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 – Toolbar: Verizon Broadband Toolbar – {4E7BD74F-2B8D-469E-8CB0-AB60BB9AAE22} – C:\PROGRA~1\VOL_TO~1\VOL_TO~1.DLL
O4 – HKLM\..\Run: [Dell AIO Printer A940] “C:\Program Files\Dell AIO Printer A940\dlbabmgr.exe”
O4 – HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 – HKLM\..\Run: [Media Codec Update Service] C:\Program Files\Essentials Codec Pack\update.exe -silent
O4 – HKLM\..\Run: [QuickTime Task] “C:\Program Files\QuickTime\QTTask.exe” -atboottime
O4 – HKLM\..\Run: [SSC_UserPrompt] “C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe”
O4 – HKLM\..\Run: [NAV CfgWiz] “C:\Program Files\Norton AntiVirus\CfgWiz.exe” /GUID {0D7956A2-5A08-4ec2-A72C-DF8495A66016} /MODE CfgWiz /CMDLINE “REBOOT”
O4 – HKLM\..\Run: [ISTray] “C:\Program Files\Spyware Doctor\pctsTray.exe”
O4 – HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 – HKCU\..\Run: [DriverUpdaterPro] C:\Program Files\XPC Tools\Driver Updater Pro\DriverUpdaterPro.exe -t
O4 – HKCU\..\Run: [MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background
O4 – Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O6 – HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 – Extra context menu item: E&xport to Microsoft Excel – res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 – Extra button: AIM – {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} – C:\Program Files\AIM\aim.exe
O9 – Extra button: (no name) – {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} – (no file)
O9 – Extra button: (no name) – {e2e2dd38-d088-4134-82b7-f2ba38496583} – C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 – Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 – {e2e2dd38-d088-4134-82b7-f2ba38496583} – C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 – Extra button: Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:\Program Files\Messenger\msmsgs.exe
O9 – Extra ‘Tools’ menuitem: Windows Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:\Program Files\Messenger\msmsgs.exe
O9 – Extra button: WeatherBug – {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} – C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O16 – DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) – https://activatemyfios.verizon.net/sdcCommon/download/FIOS/Verizon%20FiOS%20Installer.cab
O16 – DPF: {1011E032-5CF3-4795-B751-3AA5E008CCA6} – http://download.verizon.net/sfp/Cabs/max_update/VOLUpdate_1-0-0.cab
O16 – DPF: {9E17A5F9-2B9C-4C66-A592-199A4BA1FBC8} – http://pictures04.aim.com/ygp/aol/plugin/upf/AOLUPF.en-US-AIM.9.5.1.8.cab
O16 – DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} – http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/yautocomplete.cab
O16 – DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) – https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O20 – Winlogon Notify: RunOnceEx – C:\WINDOWS\
O23 – Service: Lavasoft Ad-Aware Service (aawservice) – Lavasoft – F:\Programs\adware\aawservice.exe
O23 – Service: Automatic LiveUpdate Scheduler – Symantec Corpor

sgt.sarge0519 asked:

Ok, one month ago, i picked up an adware program called Outerinfo.
It uses Internet explorer to put pop ups onto my computer.
I recently switched to mozilla firefox, got spybot, and have mcafee and fix-it utilities as virus scanners.
Since i started using FireFox, i still got ads from IE, all from outerinfo.
Fix-it has picked up multiple trojans recently, which i delete quickly. Spybot has removed things like: ie.firewall.bypass

mcafee just says that my gamespy stuff is adware -.-
I delete outerinfo using search, however, each time i am unable to delete something, be it a cookie, or a program.
Eventually, the program comes back.
Before i began really searching for it, it would spam with one ad every once in a while, now it has progresed to about 3-4 ads at once.
I know i cant delete IE, and I want to avoid reformatting if i can help it.
Any tips on any scanners beyond what i have?(free of course) or how to remove this program?
Thanks for reading this, I know its long.
Help is welcome.

tinkerflys asked:

Antivirus 2010 system scan report.
Report generated 2009-02-06 22:37

TypeRun typeNameDetails
SpywareC://windows/system32/iesetup.dllSpyware.IEMonster.dSteals passwords from Internet Explorer, Mozilla Firefox, Outlook and other programs.
AdwareautorunZlob.PornAdvertiser.baAdware that displays pop-up/pop-under advertisements of pornographic or online gambling Web sites.
SpywareautorunSpyware.IMMonitorProgram that can be used to monitor and record conversations in popular instant messaging applications.
BackdoorC://windows/system32/svchost.exeWin32.Rbot.fmAn IRC controlled backdoor that can be used to gain unauthorized access to a victim’s machine.
TrojanautorunInfostealer.Banker.ESteals sensitive information from the infected computer (e.g. logins and passwords from online banking sessions).
DialerC://windows/system32/cmdial32.dllDialer.Xpehbam.biz_dialerA Dialer that loads pornographic material. The url information shows ******** Pornographic pages.
SpywareautorunSpyware.KnownBadSitesUses the Windows hosts file to redirect your browser to a malicious site when you try to access a valid site.
TrojanautorunTrojan.ToosoTrojan.Tooso is a trojan which attempts to terminate and delete security related applications.
TrojanC://windows/system32/explorer.exeTrojan.MailGrabber.sTrojan horse that gets access to e-mail accounts on the infected computer.
TrojanC://windows/system32/alg.exeTrojan.Alg.tTrojan program that can compromise your private information stored on the hard drive.
RogueC://Program Files/TrustedAntivirusTrustedAntivirusA corrupt and misleading anti-virus program that may be usually installed with the help of malcous Trojans and other malware
RogueC://Program Files/SecurePCCleanerSecurePCCleanerRogue Security Software: fake Security software that uses deceptive means for installation and purpose.
TrojanC://windows/system32/Trojan.BAT.Adduser.tThis Trojan has a malicious payload. It is a BAT file. It is 1129 bytes in size.
SpywareC://windows/system32/Spyware.007SpySoftwareProgram designed to monitor user activity. May be used with or without consent.
TrojanC://windows/hidden/Trojan.Clicker.ECTrojan.Clicker.EC is an information stealing Trojan that masquerades as a legitimate system file so as to avoid detection and subsequent removal.
DialerC://windows/hidden/Dialer.Trafficjam.aDialer.Trafficjam.a is a premium-rate phone dialer that automatically invokes paid access to various porn-related Web sites.
Trojanhidden autorunTrojan.Poison.JTrojan.Poison.J is a key-logging Trojan for the Windows platform.
AdwareRegistryAdware.eXact.BargainBuddyA browser helper object that monitors internet browsing sessions in an attempt to redirect search queries and distribute unsolicited advertisements.
WormC://windows/system32/Win32.Delbot.AIWin32.Delbot.AI is a worm and IRC backdoor that exploits system and software vulnerabilities in order to provide remote access to the host PC.
WormC://windows/temp/Win32.Sdbot.ADNA worm and IRC backdoor that exploits system and software vulnerabilities in order to provide unmitigated remote access to the host machine.
TrojanC://windows/Trojan-Dropper.Win32.Agent.botThis Trojan is designed to install and launch other malicious programs on the victim machine without the knowledge or consent of the user.
WormC://windows/temp/Win32.Rbot.CBXA worm and IRC backdoor that exploits system and software vulnerabilities in order to provide unmitigated remote access to the host machine.
SpywareautorunWin32.PerFilerWin32.PerFiler is designed to retrieve and install files when executed. Win32.PerFiler is configured to download from either a designated web or FTP site.
Wormhidden autorunWin32.Miewer.aA Trojan Downloader that masquerades as a legitimate system file. Associated processes connect to the Internet to download additional malicious files
TrojanC://windows/Trojan-Downloader.VBS.Small.dcThis Trojan downloads other files via the FTP protocol and launches them for execution on the victim machine without the user’s knowledge.
WormautorunWin32.Peacomm.damA Trojan Downloader that is spread as an attachment to emails with news headlines as the subject lines which downloads additional security threats.
TrojanC://windows/system/drivers/Win32.Spamta.KG.wormA multi-component mass-mailing worm that downloads and executes files from the Internet.
TrojanC://windows/system/drivers/etc/Trojan.IRCBot.dA worm that opens an IRC back door on the infected host. It spreads by exploiting the Windows Remote Buffer Overflow Vulnerability.
TrojanC://windows/system/mui/Trojan.Dropper.MSWord.jA Microsoft Word macro virus that drops a trojan onto the infected host.
TrojanC://windows/system/mui/Win32.Clagger.CThis is small Trojan downloader that downloads files and lowers security settings. It is spreading as an email attachment.
WormC://windows/system/Worm.Bagle.CPThis is a “”Bagle”" mass-mai
ok the cease virus thing wants you to buy a registry key to fix/remove and now a pop-up box with some warning keeping coming up whenever I try to open IE. I don’t know how to format and I need to buy the windows XP media center edition to re load it then figure out how; I’d like to keep my favorites etc if possible but I’m no computer guru so I don’t even know how to do basic stuff in some cases.

gelibean18 asked:

My nephew was looking at **** on my computer, now I keep getting this popups even when Internet explorer is closed that my computer may have spyware and adware, the problem is the warnings aren’t from any of my security programs and when clicked they send me to websites to download different spyware and adware detection software. what do I do to stop it