Virus Pop-ups!!!

**classyfashh** · February 27th, 2008, 07:54 PM

Does anyone know how to delete viruses without using programs and actually going through your computer files? My brother used to do it all the time and my computer would be so much cleaner and it didn't take long at all. Whenever I use like, ccleaner or ad-aware or anything like that it says it deletes them but it's still just as slow. And if I leave my computer on but I'm away from it for like a day or so I have like around 70 pop-ups for fake virus sites and just random computer 'windows security alert'-"windows has detected an internet attack attempt... somebody's trying to infect your pc with spyware or harmful----etc" popups everywhere. It's really aggravating and I would just like to know how to delete these viruses by going through my computer without just using programs and/or reformatting my computer because I don't have the XP cd to do so. And that costs around 100-200 dollars.

**Niclo Iste** · February 27th, 2008, 10:18 PM

Yeah takes years of practice I've mastered removing not all but a good bit of virii I come across manually. If you know nothing about the registry or windows file structure. I suggest using a program because the books to teach you all of that will cost you more. Simply put if it was easy nobody would need Virus Scanners.

**classyfashh** · February 27th, 2008, 11:59 PM

Ohhh jeez. Well I'm totally willing to do that because I'm so sick of my computer getting screwed over all the time from crappy porn sites. What do you suggest I get [book] or where to look and learn online?

**shamus** · February 28th, 2008, 07:07 AM

Stop going to crappy porn sites.

**classyfashh** · February 28th, 2008, 07:48 AM

IT'S TOO LATE !!!!!
hahahaha heeeeeeeeelp. I hate these ridiculous "virus removing" programs that don't do ****.

**Niclo Iste** · February 28th, 2008, 07:52 AM

NOD32 is a good virus scanner, however you have to remember virus scanners are a reactive defense not a shield from danger. You must practice using good judgement and use the virus scan. If someone gave me a bullet proof jacket I wouldn't run into a battlefield to see how many bullets it can stop.

**Ferrit** · February 28th, 2008, 09:13 AM

Originally Posted by classyfashh

Ohhh jeez. Well I'm totally willing to do that because I'm so sick of my computer getting screwed over all the time from crappy porn sites. What do you suggest I get [book] or where to look and learn online?

Simple stop visiting those crappy pr0n sites

**PBase001** · February 28th, 2008, 09:41 AM

The very first place to start is to go to Add/Remove programs and see if there are things you could uninstall that are known spyware.

I would say to go to the registry, but you could get the same results from using MSCONFIG.

Go to the startup tab and uncheck items that you'll have to research to find out if it belong on your system.

Make note of what is now checked and uncheck for startup and reboot.

Go back to MSCONFIG and see what has happens. The more worrisome spyware, trojans, and viruses will put itself back in the registry RUN keys.

Than it's time for a spybot scan and perhaps a couple of online scans.

Beyond that things get much more involved and you're going to have to DL Hijackthis and get advice at that point. But the startup programs in registry is a good place to start, but by no means the cure all you're looking for.

**classyfashh** · February 28th, 2008, 05:50 PM

Ohhhh. Thanks PB. That helps a lot.
Yeah I have Hijackthisv2 downloaded on my computer for some reason but I never knew what it was for. I thought it was some virus so I never clicked it. I guess I'll try it!

**classyfashh** · February 28th, 2008, 06:14 PM

Oh would it just be under startup? Or should I also check under system.ini, win.ini, boot.ini, and services?

**NooNoo** · February 29th, 2008, 05:30 AM

Startup is the place to start. But that's what hijackthis does - it shows you everything. Run the program and post the log please.

**classyfashh** · February 29th, 2008, 12:56 PM

**classyfashh** · February 29th, 2008, 12:59 PM

http://i32.tinypic.com/16ibo75.jpg

Go to that link I uploaded it on there

**slgrieb** · February 29th, 2008, 08:42 PM

Classy, I'm thinking you have not only an active Smitfraud infection, but probably Virtumondo as well. The bmlvqkn.dll entry in your log is a filename that I often find associated with Virtumondo, and even though that file is missing, it's likely you still have an active infection. You also have a file named nwprovau.dll in the Windows LSP stack, that I'm pretty sure isn't legit. It is in the right place and has the same name as a file associated with Netware Client services, but I bet it isn't the real thing. I'd really suggest reading the sticky here to get a better handle on your problem.

But, I'm still going to give you a short answer that might well work for you. Download Spybot Search and Destroy 1.5, install it, but don't run a scan yet. Download combofix (this link takes you directly to the download), save it to the desktop, and don't run it either. Now use IE to run Eset's Online Scan. When that's done, shut down the computer, wait 30 seconds and boot into safe mode and run combofix. After you've run combofix and rebooted, run Spybot, and see if things look clean. Wouldn't hurt to run the online scan again as well. Then, get back to us with the results.

Also, this is a bit off-topic, but the current version of combofix works with Vista32, BUT NOT Vista64. Just an FYI thing.