Download File Problem When Opening Explorer

  • Thread starter Thread starter Suzanne
  • Start date Start date
S

Suzanne

All of a sudden, when I try to open Explorer, I automatically get a box
saying "Download File". The file always has a different beginning, but
the same end. E.g.: CAL48RPT.JS From Pagead2.googlesyndication.com. The
'CAL48RPT' changes to various other letters and numbers, but the JS etc.
is always the same. The options in the box are Save, Open or Cancel.
I've been canceling so far, but it's really annoying and I don't know
what it is or how to get rid of it. Any advice deeply appreciated.
 
This may be caused by spyware/malware that's gotten installed on
your system. Use Ad-Aware and/or Spybot Search & Destroy to remove it.

Ad-Aware: http://www.lavasoftusa.com/ (but I see you've already tried this
one)
Spybot: http://security.kolla.de/
Good sites on how to install and use Spybot -
http://www.net-integration.net/reviews/spybot1.html
http://tomcoyote.com/SPYBOT/index1.php

More information here:
http://www.spywareinfo.com/
http://www.mvps.org/inetexplorer/Darnit.htm
http://www.doxdesk.com/parasite/ - runs a little script when loading page to
check for common parasites

If all the above fails, then the problem could be something new that the
spyware cleaners above don't have in their databases yet. In that case....
HijackThis direct download:
http://209.133.47.200/~merijn/files/HijackThis.exe
Tutorial on how to use HijackThis:
http://www.spywareinfo.com/~merijn/htlogtutorial.html
Then post it's output log to the forum here for analysis and feedback by the
parasite experts:
http://www.spywareinfo.com/forums/
Or the other HijackThis Logs forums listed here:
http://www.spywareinfo.com/~merijn/forums.html

Or try this program to get some of the most nasty malware:
CWShredder direct download:
http://aumha.org/downloads/cwshredder.zip

An alternate resource for all of this and more:
http://www.aumha.org/secure.htm
 
Jon said:
This may be caused by spyware/malware that's gotten installed on
your system. Use Ad-Aware and/or Spybot Search & Destroy to remove it.

Ad-Aware: http://www.lavasoftusa.com/ (but I see you've already tried this
one)

OK--I give up--how did you know? I didn't mention it right?
Spybot: http://security.kolla.de/
Good sites on how to install and use Spybot -
http://www.net-integration.net/reviews/spybot1.html
http://tomcoyote.com/SPYBOT/index1.php

More information here:
http://www.spywareinfo.com/
http://www.mvps.org/inetexplorer/Darnit.htm
http://www.doxdesk.com/parasite/ - runs a little script when loading
page to
check for common parasites

If all the above fails, then the problem could be something new that the
spyware cleaners above don't have in their databases yet. In that case....
HijackThis direct download:
http://209.133.47.200/~merijn/files/HijackThis.exe
Tutorial on how to use HijackThis:
http://www.spywareinfo.com/~merijn/htlogtutorial.html
Then post it's output log to the forum here for analysis and feedback by
the
parasite experts:
http://www.spywareinfo.com/forums/
Or the other HijackThis Logs forums listed here:
http://www.spywareinfo.com/~merijn/forums.html

Or try this program to get some of the most nasty malware:
CWShredder direct download:
http://aumha.org/downloads/cwshredder.zip

An alternate resource for all of this and more:
http://www.aumha.org/secure.htm


Thanks for all of this. I had read about a couple of these programs,
but I am so paranoid now that I am afraid sites advertising fixes are
actually downloading spyware or viruses.:-(
 
No, I didn't know you had already tried AdAware - sorry about that, but I
got a bit lazy and cut and paste a reply to another post there. :-) If
AdAware and Spybot don't get this (after updating their definitions), and
CWShredder doesn't, try booting to Safe Mode and run them. If still no joy,
HijackThis is usually the last resort.
Don't worry, the links and programs I've mentioned are fully OK. The
aumha.org site is by a fellow MS MVP.
All the programs/sites are free and will not download more spyware/malware
as some of those commercial sites. You are correct to be worried about some
dubious spy-ware removal tools out there:
http://www.spywarewarrior.com/rogue_anti-spyware.htm

Update to what I've posted - the HijackThis link should be:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip
 
Thanks for all of this. I had read about a couple of these programs,
but I am so paranoid now that I am afraid sites advertising fixes are
actually downloading spyware or viruses.:-(

Just because you're paranoid, doesn't mean they're out to get you ;-))

The list of s/w from the other poster are all good at keeping your
system clean. Use them with comfort.
 
Back
Top