Jump to content


Photo

Computer Virus Help


  • Please log in to reply
52 replies to this topic

#1 taffy1967

taffy1967

    Whovian

  • Members
  • PipPipPipPipPipPipPipPipPipPip
  • 9,896 posts
  • Local Club: South Wales Minis

Posted 08 November 2008 - 10:15 PM

Right my daughter has been using facebook recently and downloading god knows what programmes and whilst doing a full 'Spybot - Search & Destroy' scan, it pulled up a few problems which I dealt with.

The trouble is one of them won't go and keeps on reappearing no matter how many times I run Spybot - Search & Destroy.

I also ran Ad-Aware which found a few more and deleted them though.

Anyway I'm stuck with: -

'My Way My Websearch' and it says its threat is PUPS?

The description it gives is: -

The toolbar gets installed via download from a website. It also has a plugin for Microsoft Outlook, which is run at system startup. Everytime the user looks for a statement with the search function, an obviously unique identification number ("sauid") is sent to a webserver. When uninstalled, some registry entries and files remain on the system.


I did uninstall the toolbar, but I can't get rid of the 1 entry that keeps on popping up on Spybot.

So how can I get rid of it completely and should I be worried?

Thanks for any help.

Edited by taffy1967, 08 November 2008 - 10:16 PM.


#2 Chrisss!

Chrisss!

    Mini Mad

  • Members
  • PipPipPipPip
  • 174 posts

Posted 08 November 2008 - 10:18 PM

have you done a system restore mate ??

#3 JamesF

JamesF

    Mini Mad

  • TMF+ Member
  • PipPipPipPip
  • 228 posts

Posted 08 November 2008 - 10:19 PM

Try running the antivirus software in Windows Safe Mode. Turn the computer on and keep tapping F8 until a menu comes up and choose Safe Mode. :( [Edit:] Then log on as Administrator[Edit]

The best way to completely get rid of it if it's a persistent virus is to reinstall Windows. :)

Edited by JamesF, 08 November 2008 - 10:20 PM.


#4 Shifty

Shifty

    Sponsored by Fosters (tm)

  • Admin
  • PipPipPipPipPipPipPipPipPipPipPip
  • 13,142 posts
  • Name: Sean
  • Location: Shropshire(sunny)
  • Local Club: TMF

Posted 08 November 2008 - 10:20 PM

How about trend housecall?

I usually find that to be good.

#5 taffy1967

taffy1967

    Whovian

  • Members
  • PipPipPipPipPipPipPipPipPipPip
  • 9,896 posts
  • Local Club: South Wales Minis

Posted 08 November 2008 - 10:22 PM

Thanks I'll try using safe mode and then running Spybot - Search & Destroy?

#6 nomininolife

nomininolife

    One Carb Or Two?

  • Members
  • PipPipPipPipPipPipPip
  • 982 posts
  • Location: Sheffield
  • Local Club: Mini Mates

Posted 08 November 2008 - 10:27 PM

http://www.pchell.co...websearch.shtml


Try this first, it has to be a lot worse to warrant a re-install.

Also before you un-install de-activate system restore until you have restarted the machine a coule of times with the program removed.

Only then should you re-activate system restore.


David

#7 taffy1967

taffy1967

    Whovian

  • Members
  • PipPipPipPipPipPipPipPipPipPip
  • 9,896 posts
  • Local Club: South Wales Minis

Posted 08 November 2008 - 10:59 PM

http://www.pchell.co...websearch.shtml


Try this first, it has to be a lot worse to warrant a re-install.

Also before you un-install de-activate system restore until you have restarted the machine a coule of times with the program removed.

Only then should you re-activate system restore.


David


Thanks I've gone through the hijack this list and none of it appears there. So it looks like it's gone after all.

#8 nomininolife

nomininolife

    One Carb Or Two?

  • Members
  • PipPipPipPipPipPipPip
  • 982 posts
  • Location: Sheffield
  • Local Club: Mini Mates

Posted 08 November 2008 - 11:02 PM

Thats great news.

David

#9 taffy1967

taffy1967

    Whovian

  • Members
  • PipPipPipPipPipPipPipPipPipPip
  • 9,896 posts
  • Local Club: South Wales Minis

Posted 08 November 2008 - 11:42 PM

But unfortunately it's still showing up after a Spybot - Search & Destroy scan and even though I select to delete it, it still stubbornly remains.

I even tried fixing it under safe mode, but it's still there.

Edited by taffy1967, 08 November 2008 - 11:43 PM.


#10 BadgerBaiter

BadgerBaiter

    Speeding Along Now

  • TMF+ Member
  • PipPipPipPipPip
  • 481 posts
  • Location: Marlborough

Posted 09 November 2008 - 12:56 AM

Have you run a Registry Cleaning program as well - I think the one I use alongside Spybot is called Reg-X .. or not. need to double check !

#11 Guest_iansmini_*

Guest_iansmini_*
  • Guests

Posted 09 November 2008 - 04:38 AM

All these answers are pretty strange. Why on earth do a system restore? Why re-install windows?

The problem keeps persisting for one reason only.
Its created a system restore point that means every time you switch you PC back on the virus re-installs itself to run in your OS. Its a proper pain in the arse only decent virus writers create code that it creates a system restore point.

Go into your system restore through control panel. I can't remember the exact location unfortunately and turn system restore OFF (the box will be checked for on). Re-boot your PC turn system restore on and no doubt your problem will have disappeared. You can however get to the specific system32 file yourself but it will take ages, since windows has an annoying habit of keeping .tmp files (oh yes it creates a restore point for these as well)

#12 nomininolife

nomininolife

    One Carb Or Two?

  • Members
  • PipPipPipPipPipPipPip
  • 982 posts
  • Location: Sheffield
  • Local Club: Mini Mates

Posted 09 November 2008 - 11:43 AM

Thats exactly what I said!!




David

#13 taffy1967

taffy1967

    Whovian

  • Members
  • PipPipPipPipPipPipPipPipPipPip
  • 9,896 posts
  • Local Club: South Wales Minis

Posted 09 November 2008 - 04:47 PM

Well I'm using Vista and I turned off system restore last night, but Spybot - Search & Destroy is still bringing the same file up every time I run a check and it just won't get shot of it.

Windows Defender also started up when I tried to remove it and asked me whether I wanted to allow this registry change and I said yes, but the file is still there.

It's really annoying.

#14 yorkshirechris

yorkshirechris

    11.11.11

  • TMF+ Member
  • PipPipPipPipPipPipPipPipPip
  • 3,873 posts
  • Location: Leeds
  • Local Club: www.lcmoc.com

Posted 09 November 2008 - 04:51 PM

Might be worth buying a cheap USB HDD and backing up everything you want to keep, and wiping the whole system and starting again.

My other half had SEVERE problems on her laptop, I did just that, and it's like new now.

Edited by yorkshirechris, 09 November 2008 - 04:51 PM.


#15 taffy1967

taffy1967

    Whovian

  • Members
  • PipPipPipPipPipPipPipPipPipPip
  • 9,896 posts
  • Local Club: South Wales Minis

Posted 09 November 2008 - 05:14 PM

Well it seems a bit of a drastic thing to do for one little registry entry?




2 user(s) are reading this topic

0 members, 2 guests, 0 anonymous users