IE7 adware problem

  • Thread starter Thread starter Taz
  • Start date Start date
T

Taz

When I start IE7 after awhile I get random ads that open a new instance of
IE7
Windoes one care was install and so called protecting when it happened
I have since installed McAfee and it doesn't find it
I've also tried difeerent spyware and adware products to no avail
Has anyone else had this problem or know a solution
thanks
 
yes it's not acting like a popup it's like starting another instance of
IE7
first flash command has login.revenue as part of the command that flashes
then it goes to a different ad
sometimes games, sometimes registry editor program, sometimes spyware ads
wanting you to download their product
 
Try downloading Lavasofts AdAware program and running it.
It will/should find errant adware
I personally am not a fan of McAfee I prefer AVAST and they have a free
version or Vista
I use 3 different anti spy/ad ware programs.
spybot search and destroy
spywareblaster
Adaware from Lavasoft.
all of these are available for free............dp a google.

peter
 
Tried it still have the problem

pete said:
Try downloading Lavasofts AdAware program and running it.
It will/should find errant adware
I personally am not a fan of McAfee I prefer AVAST and they have a free
version or Vista
I use 3 different anti spy/ad ware programs.
spybot search and destroy
spywareblaster
Adaware from Lavasoft.
all of these are available for free............dp a google.

peter
Click to expand...
 
Taz said:
Tried it still have the problem
Click to expand...

Taz,

The last time I had to troubleshoot a very stubborn malware situation
such as yours, it turned out to be a rootkit. Go to sysinternals.com
and run theire "Root Kit Revealer". This may help you isolate the issue.

http://www.microsoft.com/technet/sysinternals/utilities/RootkitRevealer.mspx

Should it find a rootkit, they can be a bit of a hassle to get rid of. I use
the Bart PE Builder to create a bootable XP CD, then boot from that
CD to fix the issues on the C: drive. It is almost impossible to remove
a rootkit booted from the infected OS.

The last time I used the root kit revealer, there was no option to print
the results, you could only save to file. You will need to to that, then
boot from the bootable XP cd, open the file you saved and process
any issues it finds.

However, ask any certified security expert and they will almost always
say the only "real" way to clean your system after it has been compromised
is to re-image.

Good luck.

TDM
 
I took off windows live one care and put McAfee on
I then turned everything off on McAfee, ie. smart recognizer and trusted
sites and apps
I don't have the problem at this point and I'm being very careful what I
allow
I tried numerous programs and nothing found it
this has been the only thing I've tried that has worked to this point
 
PC Doctor 5 finds it as a hijacker and quarentines it but it comes right
back
It writes a file
user/tom/appdata/roaming/microsoft/windows/cookies/low/tom@cpvfeed[2].txt
if you fix that it just wrotes [3]

This is the file it writes
mgFreq
F|1|150289|1176768854437
cpvfeed.com/
1024
1290014464
29857816
4127253120
29851780
*
mgData
B|2
cpvfeed.com/
1024
1290014464
29857816
4127293120
29851780
*
myGeekConv
558343|110830|24.127.232.181|ron|24255609|1176768854437
cpvfeed.com/
1024
1290014464
29857816
4127383120
29851780
*
mgUser
1|10aecc7799c740ff9cfaf32e4f0394b2|24.127.232.181|1176768854437
cpvfeed.com/
1024
1290014464
29857816
4127423120
29851780
*
I have not been able to find the file that writes it yet
 
Back
Top