I'm infested by ads again
riff.raffNOSPAM
I'm not able to get rid of a malware that runs periodically annoying
ads, when I'm navigating with Internet Explorer.
When I had got the same problem last year, I solved my problem with
Malwarebytes anti-malware, but now it isn't effective. I've used in vain
also AVG, lavasoft Ad-aware, Super Antispyware.
What program can I try?
Is there a method (e.g. file or registry monitor) to identify by myself
where the malware is located in my PC?
Thanks to all in advance!
A.
Bit Twister
> Hi,
> I'm not able to get rid of a malware that runs periodically annoying
> ads, when I'm navigating with Internet Explorer.
I am of the opinion that you should be using third party apps when
doing Internet activities. Example: firefox with NoScript addon with
everything blocked for starters.
> What program can I try?
What happens on ANY suggested program you download has more malware
for installation.
> Is there a method (e.g. file or registry monitor) to identify by myself
> where the malware is located in my PC?
If you have to ask, you have no chance of cleaning your system by hand.
Last statistic I saw from an Anti-Virus vendor was around
3,500 new malware apps released per day.
Want to see a chart of malware growth
http://www.h-online.com/security/Quantity-of-malware-booms--/news/101764
How about current detection rates in email
http://www.commtouch.com/security-center
click Malware Outbreak for latest antivirus malware email detection time
Usual "Best Fix" suggestion is unplug computer from the network, save
email/contact addresses and any data files, erase disk, including mbr,
install OS, install/enable firewall, block all inbound connections,
connect computer to network, get OS updates, install anti (virus, add,
rootkit, spyware,...), get all third party updates (java, adobe,
flash,...),,,
Create a user account with restricted/no privileges, switch to user
account, change all passwords on all accounts you have on the Internet
and at your ISP. Make a complete backup of the disk.
Then restore email addresses and any data files.
Be prepared to repeat the above or use disk backup after surfing the Internet.
Or do as I did years ago, use Linux as your OS.
David H. Lipman
Malwarebytes' Anti-Malware
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
occam
> Hi,
> I'm not able to get rid of a malware that runs periodically annoying
> ads, when I'm navigating with Internet Explorer.
>
>
> What program can I try?
Ditch IE and try Firefox browser with 'NoScript' and 'Adblock-Plus'
add-ons.
Leythos
says...
> Ditch IE and try Firefox browser with 'NoScript' and 'Adblock-Plus'
> add-ons.
>
I tried the No-Script utility/addon and found it to be mostly a PITA.
While it does work well, it also requires you to allow almost every site
that would normally not be a threat - and that's a LOT of work on a
daily basis.
--
You can't trust your best friends, your five senses, only the little
voice inside you that most civilians don't even hear -- Listen to that.
Trust yourself.
spam9...@rrohio.com (remove 999 for proper email address)
Beauregard T. Shagnasty
> From: "riff.raffNOSPAM" <"riff.raffNOSPAM"@libero.it>
>| When I had got the same problem last year, I solved my problem with
>| Malwarebytes anti-malware, but now it isn't effective. ...
>
>| What program can I try?
>
> Malwarebytes' Anti-Malware
> http://www.malwarebytes.org/mbam/program/mbam-setup.exe
Dave, are you suggesting that riff.raff hasn't updated the program or
the definitions since last year?
Perhaps he should look for the latest version, then?
--
-bts
-Friends don't let friends drive Windows
riff.raffNOSPAM
> Malwarebytes' Anti-Malware
> http://www.malwarebytes.org/mbam/program/mbam-setup.exe
>
>
Thanks!! It was effective!!! :-)
I tried Malwarebytes, but it was an old version.
A.
riff.raffNOSPAM
>>Is there a method (e.g. file or registry monitor) to identify by myself
>>where the malware is located in my PC?
>
>
> If you have to ask, you have no chance of cleaning your system by hand.
>
Wish to learn... Could you please suggest me a website where I can
start a self-training?
Bit Twister
>>
>
> Wish to learn... Could you please suggest me a website where I can
> start a self-training?
No. I gave up windows years ago.
You need to find a program which can tell what files change or have
been added. On linux I use aide from http://sourceforge.net/projects/aide.
You might want to search on sourceforge.net and http://freshmeat.net/
for a Micro$oft for a file integrity/host intrusion detection app like
aide. With those you get a clean install and run it to setup it's data
base. After that you get a report of changes. You would then have to
decide if it was a valid change or a file infection. :(
Malware has hidden in the MBR. slack space on end of file, unused
cylinders where normal file utilities do not let you look.
Think about a root kit infection. It watches for scans from Anti-Virus
programs. When it sees the scan, it reports nothing wrong to the AV
app. Any queries you use to look at the system are caught by the
root kit and it does not show up when you are looking around with
system utilities. :(
Kinda like, how do you tell if you are seeing a hallucination or not.
Unless you get a third party to check, you cannot tell your brain is
lying.
What's worse is you get a root kit infection which only
resides in memory. Nothing on hard drive, AV scanner cannot see it.
Mean time, any ids/passwords were phoned home to criminals or your system
is used in criminal activity.
Good news is, next boot it's gone.
Bad news, cops get your system and you spend bucks to get out of jail
and defend yourself from any charges. :-(
Wish you luck.
occam
> In article <hb1gml$eom$1...@news.eternal-september.org>, oc...@127.0.0.1
> says...
>> Ditch IE and try Firefox browser with 'NoScript' and 'Adblock-Plus'
>> add-ons.
>>
>
> I tried the No-Script utility/addon and found it to be mostly a PITA.
> While it does work well, it also requires you to allow almost every site
> that would normally not be a threat - and that's a LOT of work on a
> daily basis.
>
Leythos, you whitelist a trusted site /once/, and you have no pain after
that.
The PITA only returns only when you visit a new site - and that is as
should be.
Dustin Cook
$1116$4faf...@reader1.news.tin.it:
It pays to keep it updated. We work round the clock basically
--
Dustin Cook [Malware Researcher]
MalwareBytes - http://www.malwarebytes.org
BugHunter - http://bughunter.it-mate.co.uk
Dustin Cook
news:hb3rb3$ui5$2...@news.eternal-september.org:
This has been my experience with the addon as well. I also have a
downloader addon, Download Statusbar... it's a purely cosmetic thing
tho. :)
Leythos
says...
My experience, since I visit many sites, was that I needed to
selectively white-list parts of sites, but, since sites would also
provide content from other sites I had to determine which ones to white-
list, since I didn't want to blanket white-list the entire site. I found
it to be a good tool, but it was more effort than it was worth for me.