I have recently had the MIRAR toolbar SPYWARE on my internet browser.
I forked out £50 for a McAfee internet security sweet but this did'nt actually find the spyware to remove it and infact caused more problems on my computer.

I eventually found a copy of Ad-Aware with a £7.99 Windows XP magazine which worked a treat.

Unfortuantly I still seem to have a few bugs, which are:

A, everytime I call up my dial up connection it's a different user name and conection number and no matter how many times I change it. It still comes up with the wrong details when I dial up again.

B, Full Internet browser ads keep apearing by them selves.

Ad-Aware, PC-Cillin and Spy remover is'nt finding anything wrong!

Can anyone help:confused:

P.s hope this helps if anyone was considering splashing out on a McAfee security sweet.

Okay then, you've found out the most important bit by yourself, McAfee is crap!

Onto the dialup, in IE select 'Tools' then 'Internet Options' Click the 'Connections' tab and make sure that the only connection listed is the one you use. Once you've done that click 'OK'

Next up, pop-ups are annoying, the best way I found to get rid of them is to use Firefox instead of IE. It can be downloaded for free from here (http://www.mozilla.org/products/firefox/start/).

If you really really want to continue IE, which is the root of most of your problems, then try the Google Toolbar, it get's rid of 90% of pop-ups, but Firefox is generally a more secure browser anyway.

Originally posted by Modesty


A, everytime I call up my dial up connection it's a different user name and conection number and no matter how many times I change it. It still comes up with the wrong details when I dial up again.




im no expert but that sounds to me like u have a rouge dialer?

Originally posted by x_LoUiSe_x
im no expert but that sounds to me like u have a rouge dialer?
Maybe a different colour would help? ;)

locate and download the microsoft antispyware beta, in addition to ad-aware that should keep you safe (and remove whatever's left at the moment).

ok. ad aware can be downloaded free, but you have it which is a start.

You need to turn off system restore, right click my computer, properties, system restore.

Then boot in safe mode (press F8 when ur machine starts up, keep pressing it)

Run ad aware and get rid ok all the nasties.

Finally ad aware wont always catch anything, i use 2 programs so if one cant help the other does the job.

try windows anti spyware tool.

Originally posted by Lurch
Maybe a different colour would help? ;)

what??

Originally posted by Lurch
Okay

Onto the dialup, in IE select 'Tools' then 'Internet Options' Click the 'Connections' tab and make sure that the only connection listed is the one you use. Once you've done that click 'OK'

browser anyway.

Done that and still no joy, that's whats really annoying.

I'll try the firefox link though, Cheers.

Originally posted by 21steve
ok. ad aware can be downloaded free, but you have it which is a start.

You need to turn off system restore, right click my computer, properties, system restore.

Then boot in safe mode (press F8 when ur machine starts up, keep pressing it)

Run ad aware and get rid ok all the nasties.

Finally ad aware wont always catch anything, i use 2 programs so if one cant help the other does the job.

try windows anti spyware tool.

Downloaded the free version before I went anyway near a PC store.
It detected the spyware free of charge but wanted me to register and pay to remove it.

Don't like the sound of booting in safe mode (don't know what I'm doing) I'll leave it as a last resort. Cheers.

Originally posted by x_LoUiSe_x
what??

Rouge is a colour, foreign for red or summink! I think you meant rogue. Sorry for the off the cuff **** poor sarcasm.

Originally posted by Modesty
Downloaded the free version before I went anyway near a PC store.
It detected the spyware free of charge but wanted me to register and pay to remove it.
Is that the MS one? I've always used Spywareblaster and Ad-Aware and that's done it.

A decent antivirus scan wouldn't go amiss, Avast! (http://www.avast.com/eng/avast_4_home.html
) do a decent free one.

Safe maode isn't as scary as it sounds, it looks different but it's just the same as logging in normally but you don't get everything starting up that usually does. Some spy\adware runs as soon as Windows is started so they can't be stopped or removed. A lot of them don't start in safe mode so can be removed.

Hiya Modesty :D

My website has full instructions on how to remove spyware/malware/adware and viruses.

Click Here (http://xthost.info/vidster9/HTML/7876/index.html) for my guide on removing spyware.

Click Here (http://xthost.info/vidster9/HTML/7642/index.html) for my guide on removing viruses. You can find links to online scans about half way down the page!

Go to Add/Remove programs by selecting start>control panel>Add/Remove programs.

Look for anything that shouldn't be there such as search bars or browser helpers. Remove any that you find!

If you are still having problems let us know and we'll try something else ;)

The terrible trio never fails for me!

Ad-Aware- (You already have)
Spybot Search and Destroy (http://www.download.com/3000-2144-10122137.html?part=104443&subj=dlpage&tag=button)
Stinger (http://vil.nai.com/vil/stinger/)

Bare in mind, some viruses will close down applications such as ad-aware. So do as someone said above and boot up in safe mode.. It loads windows but none of the processes/drivers. It will appear like normal, except big and ugly.. Then just run the 3 applications above and away you go. To boot up in safe mode, when your PC is loading up, look at the bottom and it will tell you which F button to press (normally F8 but it varies). Once you've pressed this once, it will load up itself.

Originally posted by Modesty
Downloaded the free version before I went anyway near a PC store.
It detected the spyware free of charge but wanted me to register and pay to remove it.

Don't like the sound of booting in safe mode (don't know what I'm doing) I'll leave it as a last resort. Cheers.

that's not adaware if it wouldn't remove them without paying. It's on of the 'others'... which do as you suggest, in fact they'll detect spyware no matter what and then charge you to get them removed.

Safe mode is nothing to be scared of - it is starting your computer with the bare bones of drivers and apps.
Click start, then run and type in 'msconfig' and follow the instructions then reboot. to get back to normal mode use msconfig again etc.
To remove trojans, dialers, malware, etc and virus follow these instructions.
1) restart in safe mode
2) run spybot after updates (free software see www.download.com)
3) run adaware after definition updates (free software see www.download.com)
4) run spyware blaster after updates (free software see www.download.com)
5) run avg free after updates (free software see www.grisoft.com)
6) if these don't work chances are you have coolwwwsearch (very nasty) run cwshredder (free software see www.download.com)
7) restart in normal mode
8) If all this fails (and it shouldn't) let me know www.computerhell.co.uk

Did I mention that all the above software is free?

Originally posted by chrisssy
Safe mode is nothing to be scared of - it is starting your computer with the bare bones of drivers and apps.
Click start, then run and type in 'msconfig' and follow the instructions then reboot. to get back to normal mode use msconfig again etc.



You cannot start your computer in safe mode from msconfig :?
The closest you get is to start in diagnostic mode or a selective startup and when you try and reverse the process, all the items in your startup list will automatically be selected.
Useless for people who only want their spyware/virus/firewall running on startup.

To start in safe mode: Turn the PC on and start tapping f8 repeatedly until the boot screen appears. Use your arrow keys to select 'Safe Mode' and press 'Enter'

Your computer will boot in to safe mode. The graphics will look strange!.....This is perfectly normal, it is because your computer has only loaded the basic programs/drivers that are needed to operate.
Now run all the programs you have installed and have them fix anything they find.

Diagnostic startup is safe mode. Also, F8 doesn't work on every computer - some you need to press F2 others DEL others F2 x 2. Some computers (Eep laptops) you can't access bios this way. PS how do you insert the quote thingy in your reply?

Originally posted by chrisssy
Diagnostic startup is safe mode. Also, F8 doesn't work on every computer - some you need to press F2 others DEL others F2 x 2. Some computers (Eep laptops) you can't access bios this way. PS how do you insert the quote thingy in your reply?

F8 is not used to access the bios, it's used to access the windows startup menu, which includes all the safemode options and if you have it any alternatives such as command line or older operating systems.
So F8 does work on all computers (well, on all win xp computers).

to quote you can either use the 'quote' button, or use the [ quote ] and [ /quote ] tags, without the spaces.

Originally posted by vidster
[B]You cannot start your computer in safe mode from msconfig :?

http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406?OpenDocument&src=sec_doc_nam

Originally posted by chrisssy
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406?OpenDocument&src=sec_doc_nam

not quite how you described it then.

Originally posted by Cyclone
[B]F8 is not used to access the bios, it's used to access the windows startup menu

It is used to access the boot menu.

The BIOS is stored in the ROM on the computer's motherboard and is what you access when you choose where to boot from aka boot menu.

Originally posted by Cyclone
F8 does work on all computers (well, on all win xp computers).

I promise it doesn't - I've tried it after you said it does. I'm no expert in Bios but I do maintain quite a few computers here at my company.

Some BIOS's have "press f8 for boot menu", which asks you which device you want to boot from.

All Windoze PC's will (if you press F8 at the right time, or repeatedly when loading) come up with the Windows boot menu, it's worked since 95.

Wow did'nt mean to start an IT WAR!:o

Cyclone, I definetly downloaded Ad-Aware and you do have to pay now if you want it to remove nasty stuff.

Got the Firefox and that's working great, thanks Lurch.
Although I don't understand why after 2 years that IE ( with the google tool bar ) would start to let pop ups through, but that's life.

Thought I had sussed the Dial up connection by deleting it and creating it again mannually.
It stayed the same id and number all day but changed to that unknown id and number in the last hour.
So they're is still a bug in there and AVG, Ad-Aware,Pc-Cillin, Microsoft anti Spyware or Spyremover can't find it.
Could it be a rogue dialer that someone as mentioned.

Anyone any new ideas.

Oh and i rebooted in safe mode using the F8 key run the virus programs but still not found it:(

Cheers everyone for your help:thumbsup:

Originally posted by chrisssy
I promise it doesn't - I've tried it after you said it does. I'm no expert in Bios but I do maintain quite a few computers here at my company.
Maybe your company should employ someone who know's what they're doing then. F8 is used to access the Windows boot options menu. The bios is nothing to do with the Windows boot menu, it doesn't even have anything to do with Windows. I haven't come across a Windows machine yet that doesn't use F8 for the boot menu options, (XP, 2K, 98, ME I know for sure).

Modesty; I don't knopw what you've done to it then! Have you bee through the add\remove programs menu and deleted anything suspicious looking too?

I've had machines before that have had diallers etc... that keep re-installing themselves, I've had to keep re-booting and going round and round in circles deleting, scannong, and uninstalling the same things.

At this point, it's a toss up between carrying on with do trying to clean your machine up or just reiinstall Windows.

Originally posted by chrisssy
Diagnostic startup is safe mode. Also, F8 doesn't work on every computer - some you need to press F2 others DEL others F2 x 2. Some computers (Eep laptops) you can't access bios this way. PS how do you insert the quote thingy in your reply?

Diagnostic mode/Safe mode and Bios seem to be the same thing to you chrissy :?
Why would anyone want to enter the bios to remove a virus anyway (Unless you suspected a boot sector virus but that is very rare)

Modesty..........

Please follow these instructions:
Create a new folder on your desktop by right clicking your mouse on an empty part of the screen and selecting 'New' then 'Folder'. Name this folder HJT.

Now download Hijack This (http://www.download.com/HijackThis/3000-8022_4-10227353.html) and save it in the HJT folder you created.

Open Hijack This and select 'Do a system scan only'. It will take a few seconds to create the list. Once finished, go to the bottom of the page and select 'Save Log'. Save the log in the HJT folder.
Come back here and paste the entire log in this thread.

I will then analyze your log and give you instructions on what to do next.

Please do not follow any instructions posted by anyone else but myself or sccsux

A huge thanks to Vidster!

For spending his/her own time on solving my problem.

It's early day's but it looks promising:thumbsup:

This is a great example of how good this forum can be.

Do you know how much it would have cost to have someone round to look at it, and I've learn't stuff in the progress.

Cheers!

Just glad to be of service Modesty :blush:


Just a note to everyone.....

My security set up consists of: AVG7/Sygate personal firewall/SpywareGuard/SpywareBlaster and Firefox web browser.

I also have Ad-Aware and Spybot search and destroy but i have taken to not using them lately because the security above lets absolutely nothing on to my computer!

If a virus attempts to infiltrate my system AVG goes crazy and kicks ass....
If something tries changing the registry SpywareGuard has a fit!....
And SpywareBlaster takes care of the spyware :)
Hackers are kept at bay by Sygate personal firewall.

All these programs are free so anyone reading this post really have no excuse for not giving them a try ;)

Hi Vidster,

I have just had a look at two of the sites you recommended in your last post. Thank you for this. There is a mine of info there.

In one of your posts you talk about doing a partial repair of Windows XP by doing a partial reinstall. I think i may have to try this, as I have a major problem at the moment in not being able to access secure sites or print from sites (I've tried virtually everything and have come to the conclusion that a recent software installation casued some damage to my Windows configuration.

I have the Windows XP disc but have had it for so long now i can't remember if I need a password or code to reinstall it. Do i need a password for this? I have never heard of a partial repair before. Does this mean all of the data is saved, unlike in a full reinstall? Any advice would be much appreciated.

Before you start, backup your data!

1. Boot the system from the WinXP CD. Have your CDKEY ready (Usually on a sticker on the side of your PC).

2. Select the “Install” option. (Don't select repair! The first repair option only verifies XP files against the XP CD versions and makes no system setting changes).

3. Setup will find the XP install that is already there and ask if you wish to repair it. Say yes.

I've done it a few times and it's been as simple as that. Windows XP should come back up working, with all your existing programs and settings intact.

If you Google for "windows xp motherboard change" without the quotes there are a few deeper tutorials.

I'm sure someone will come up with a more detailed description before long......

I'm not 100% sure which method your talking about LordChaverly but there are 2 ways of going about it.

#1 System restore:

This is helpful if you have installed something recently and it has made your computer go crazy. You will loose any programs that you installed and any setting that you changed from the date you choose to restore to.

Start>All Programs>Accessories>System Tools>System Restore.
Now go back to a date when your computer was working ok and System Restore will do the rest.

#2 Repair install of Windows XP:

This will completely re-install the Windows operating system on your computer and you shouldn't loose any programs/files/ documents etc..

The instructions on how to perform a repair install can be found Here (http://www.cbttechs.com/forums/showthread.php?t=455)

I hope this is what you were looking for :)

[EDIT] Lurch pretty much covered the re-install ;)

Thank you Vidster for your helpful reply.

For some reason my System Restore is coming up with a blank page, so I think it must be damaged in some way. So it looks as though a reinstall is the way to go to solve my problem.

Before I do it, I would be grateful if you could answer the following two questions.

I have already copied most of my data to my D drive (i.e. second hard drive). Presumably a reinstall won't affect this and my data will still be there after the reinstall

Secondly, I have the Windows XP disc, but can't see a code or password for using it. As i bought my computer about a year ago, I may have mislaid it or alternatively there may not have been one. Am I right in thinknig that I can just put the disc in and it will reinstall witohut need for passowrd codes etc?

Thank you very much for any advice.

Originally posted by vidster
Please do not follow any instructions posted by anyone else but myself or sccsux

it must be nice to know that in the entire world only you and sccsux are qualified to give out computer advice.
Where's the big headed smiley?

Chrissy, if you're a sysadmin you really ought to know what you're talking about, but apparently you don't.
The boot menu options for xp are stored in a file called boot.ini in your root folder of your boot drive.
The bios is a completely seperate issue and although it determines which drives are searched first for an os that isn't what we are talking about. You would be correct that different keys are used to access the bios on different machines, but again, that's not what we are talking about. F8 accesses the boot menu on all win xp installations, and gives the various boot options on other ms os'es back to 95.

Can anyone else confirm that the latest version of ad-aware (I believe it's now called Ad-aware SE) does not ask you to pay for an upgrade before removing spyware. If I am correct (which i'm pretty sure I am) then Modesty does not have the real ad-aware and this is probably the spyware masquerading as antispyware!

Googling ad-aware actually brings up a link to ad-ware, as the first hit, this is a completely different program, and probably does try to charge you to remove spurious spyware that it detects

Originally posted by Cyclone
it must be nice to know that in the entire world only you and sccsux are qualified to give out computer advice.
Where's the big headed smiley?

Chrissy, if you're a sysadmin you really ought to know what you're talking about, but apparently you don't.
The boot menu options for xp are stored in a file called boot.ini in your root folder of your boot drive.
The bios is a completely seperate issue and although it determines which drives are searched first for an os that isn't what we are talking about. You would be correct that different keys are used to access the bios on different machines, but again, that's not what we are talking about. F8 accesses the boot menu on all win xp installations, and gives the various boot options on other ms os'es back to 95.

Can anyone else confirm that the latest version of ad-aware (I believe it's now called Ad-aware SE) does not ask you to pay for an upgrade before removing spyware. If I am correct (which i'm pretty sure I am) then Modesty does not have the real ad-aware and this is probably the spyware masquerading as antispyware!

Googling ad-aware actually brings up a link to ad-ware, as the first hit, this is a completely different program, and probably does try to charge you to remove spurious spyware that it detects


I hope this answers your questions.

Firstly the Ad-Aware I now have on my computer was installed from a Windows XP magazine costing £7.99, as I early explained.

The Ad-Aware I first tried to use (which requested a payment )
was downloaded from this link on the forum. http://www.sheffieldforum.co.uk/showthread.php?s=&threadid=18312&highlight=mirar

I don't think Vidster was suggesting that they are the supreme knowledge of IT in the entire world, but just to be careful of a handful of hobbyists (I don't think that's a word) that post on the forum.
The more contributions and idea's the better I think.
You just need to be wary on which advice to take.

Thanks again. Modesty.

I agree that you should probably take most advice with a pinch of salt, or at least a healthy sceptisism, but for vidster to post in bold that you only follow his or sccusx advice sounds rather arrogant to me.
Personally I have a degree in comp sci, work for an IT company doing an IT job, have 3 pc's of my own and had my first pc at the age of 12 (286 8Mhz, 20MB HD, 512k ram) - that's 15 years of pc experience.

I just downloaded ad-aware to ensure I had the latest version and ran it. It only found cookies as i'd expect, but it didn't offer to charge me to remove them.

The one that you downloaded from the followed link was AdWARE not ad-AWARE, it's spyware itself.

The original program that you installed has probably not been fully removed and is most likely the cause of some of the problems that you are having.

ModestyAlso got this stupid toolbar, downloaded the NoAdware that the link directed me to.
Then was told to pay 35 dollers to register and remove the bloody thing.

The site won't authorise my card so I 'm stuck with it and it's doing all sorts of nasty things to my computor.

Did you have to pay? how exactly did you remove it in the end

Cheers in advance.


The bit in there about your credit card would make me extremely worried. You may have had your details stolen. I'd recommend cancelling that card and getting a new one.
In fact you posted that 6 days ago. Phone your card company and check that no transactions have taken place that you weren't expecting.

Cheers for that Cyclone.

I was worried about that, took some advice and they said not to worry as the lock logo was there.

I think I'll get on the case though now:(

Originally posted by Cyclone
it must be nice to know that in the entire world only you and sccsux are qualified to give out computer advice.
Where's the big headed smiley?

I think (hope) Vidster was refering to instructions with regard to the HJT log file;).



Originally posted by Cyclone
[B]Can anyone else confirm that the latest version of ad-aware (I believe it's now called Ad-aware SE) does not ask you to pay for an upgrade before removing spyware. If I am correct (which i'm pretty sure I am) then Modesty does not have the real ad-aware and this is probably the spyware masquerading as antispyware![/B/


Ad-Aware se is indeed still free, and still rmoves files as would be expected (without any request for payment).

Originally posted by LordChaverly
I have already copied most of my data to my D drive (i.e. second hard drive). Presumably a reinstall won't affect this and my data will still be there after the reinstall

It shouldn't do. If you are worried you could physically disconnect the drive, but there shouldn't be any need if everything goes to plan.

Originally posted by LordChaverly
Secondly, I have the Windows XP disc, but can't see a code or password for using it. As i bought my computer about a year ago, I may have mislaid it or alternatively there may not have been one. Am I right in thinknig that I can just put the disc in and it will reinstall witohut need for passowrd codes etc?

No, you need the Windows XP Key. You will have to re-enter this during the install process. If you bought the PC brand new from a reputable supplier with the CD you should have a shiny hologromatic sticker, about 20mm x 50mm, on the PC stating the Windows version and also the required key. This sticker could be on either side, or even on the back. Something similar to this (http://www.microsoft.com/piracy/YourPC_COA.mspx).

Originally posted by Cyclone
it must be nice to know that in the entire world only you and sccsux are qualified to give out computer advice.
Where's the big headed smiley?



Originally posted by Cyclone
I agree that you should probably take most advice with a pinch of salt, or at least a healthy sceptisism, but for vidster to post in bold that you only follow his or sccusx advice sounds rather arrogant to me.
Personally I have a degree in comp sci, work for an IT company doing an IT job, have 3 pc's of my own and had my first pc at the age of 12 (286 8Mhz, 20MB HD, 512k ram) - that's 15 years of pc experience.

I apologise for not knowing you have a degree in comp sci and i apologise for not not knowing you have 15 years of computer experience Cyclone. Infact...I apologise to everyone in the world for not knowing their ability to analyze a HJT log :suspect:

That's the reason for my text being in bold and for instructing Modesty to only take note of myself and sccsux. I don't know if anyone else knows how to read a HJT log!

I'm not going to recommend someone run a program that can completely FUBAR an operating system without some sort of warning. As i only knew of myself and sccsux, that's all i suggested.

I will remember to include your name if this situation ever comes up again.

maybe it was just the way you phrased it vidster.

Originally posted by Cyclone
maybe it was just the way you phrased it vidster.

Probably was :hihi: Although now we have a dedicated forum for this sort of thing, it would be handy to know who knows what about computer.

Originally posted by Lurch
It shouldn't do. If you are worried you could physically disconnect the drive, but there shouldn't be any need if everything goes to plan.



No, you need the Windows XP Key. You will have to re-enter this during the install process. If you bought the PC brand new from a reputable supplier with the CD you should have a shiny hologromatic sticker, about 20mm x 50mm, on the PC stating the Windows version and also the required key. This sticker could be on either side, or even on the back. Something similar to this (http://www.microsoft.com/piracy/YourPC_COA.mspx).

Thank you Lurch and also Vidster. I intend to have a go at this over the weekend. One question though: in one post there is this advice:

Make sure the BIOS is set to boot from the CD (put the CD above the HD in the boot order)

How do I do this?

Turn your PC on and press Esc a few times. Your bios will then load.

Note: Sometimes it is a different key you need to press (Possibly f2)

Originally posted by vidster
Turn your PC on and press Esc a few times. Your bios will then load.

Note: Sometimes it is a different key you need to press (Possibly f2)


Mine's <Del>;).

Originally posted by sccsux
Mine's <Del>;).

:hihi: I tried editing my post but Sygate decided it was going to lock down my Edit/Reply functions :?

I've been playing with the advanced settings for ages and hopefully i cracked it :suspect:

[EDIT] Just checking! :heyhey: