Member Panel

joe5

Originally Posted by reveriereptile

Both computers have the same exact pop ups. I am on my boyfriends newer computer right now since I tried to download different firewalls on the other one that we have been trying to fix the pop ups on.

then you have three pc's or this was a typo i think:

My boyfriend's other computer is not getting the same pop ups as this one.

Originally Posted by reveriereptile

No, I did not set the task scheduler jobs.

Then you can delete them fom the "C:\WINDOWS\Tasks" folder.

Originally Posted by reveriereptile

I got a message saying Windows cannot find 'services.msc'.

Can you get there trough "start/all programs/administrative tools/services ?

And the link you posted is to a log with an elitebar infection wich you don't seem to have , and they mention different popups then you did.
But you can try the removal tool if you want:

http://users.pandora.be/bluepatchy/m...ools/LQfix.exe

Can you also run F-Secure Blacklight and report back the results:

http://www.f-secure.com/blacklight/try.shtml

reveriereptile

My boyfriend has 2 computers and I use 1 of them. Both of them have the same pop ups. The one he uses just started today with the pop ups. I found the Administrative Tools in the Control Panel. I will download the Blacklight and run it. The removal tool link wouldn't work so I did not use it.

joe5

The link i posted should work , and also did you look if the Application Layer Gateway service was set to automatic?

reveriereptile · 04:28 AM

I did the blacklight scan and it found 2096 hidden items. I was going to post the report but I did not find any buttons to click on for saving a report. The Gateway Service is on Manual, should I turn it onto Automatic?

joe5 · 04:40 AM

Originally Posted by reveriereptile

I did the blacklight scan and it found 2096 hidden items. I was going to post the report but I did not find any buttons to click on for saving a report.

:shocked: Ouch! Didn't Blacklight create a log automaticly in the folder the prog is running from? Or if not , can you maybe post a screenshot(s) of it then? But i must add that that sounds pretty bad..

Originally Posted by reveriereptile

The Gateway Service is on Manual, should I turn it onto Automatic?

Yup , you can set it to automatic.

And some extra info on rootkits:

If your computer has actually been hacked, removing the hidden items might not be sufficient. Even after a careful clean up the hacker might still be able to access your computer after it has been compromised once. The removed malware may have changed the system in a way that is impossible to detect or restore. An added or changed user right is a typical example of such changes. Formatting all hard disks and re-installing the computer is the only foolproof way to eliminate this risk.

If a malicious program is intentionally hiding benign, important system files. then if these files are then renamed or removed, the computer may become unusable. A technique like this, where the author of the malware is hoping that attempts to repair the computer will result in more damage is also known as a "poison pill".

reveriereptile · 04:59 AM

I can't stretch the screen bigger to get most in one picture. It will only show 6 at a time. I did take a picture of some though. I have my hidden files on the computer set so they don't show up. Could that be why it is showing so many?

I did the BL scan on my boyfriends computer and his came up clear. I'm going to run it again on this one. I think there was one hidden folder in the program files that all the files were from.

reveriereptile · 05:08 AM

They all show up when it says it is scanning the C:\Program Files\Dirolbar\Cache

I cannot find the folder when I make the hidden files show up.