Dump the contents of the IE Temporary Internet Folder cache (TIF)
start --> settings --> control panel --> internet options --> delete files
1) Download the following three items...
Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp
Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp
Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/
Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
Download Sysclean.com and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt472.zip
Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.
2) Update Adaware with the latest definitions.
3) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode and shutdown as many applications as possible
5) Using both the Trend Sysclean utility and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) Create a new Restore point
* Please report your results ! *
--
Dave
http://www.claymania.com/removal-trojan-adware.html
Thanks for your suggestion. Unfortunately it didn't work. Sysclean found
nothing after two sweeps in Safe Mode (they took a long time but as you know
were very thorough), nor did my Ad-Aware SE Plus with the latest update. I
also did another scan in full Windows mode - not a trace of anything!
Any other suggestions? Perhaps a corrupt file?
Thanks for your help.
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:%23jWVQ4p...@TK2MSFTNGP15.phx.gbl...
The idea that it may be malware was just a "guess".
Sorry I could not be more helpful.
BTW: What application interprets the URL protocol; dtdp://
--
Dave
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:eKZZpMyI...@tk2msftngp13.phx.gbl...
Assuming the above is the problem and Chuck is using WinXP SP2, the following can fix the
problem without downloading any software...
Start --> Run
Enter the following Command Line...
%COMSPEC% /c netsh winsock reset catalog
--
Dave
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:uYI8rnyI...@TK2MSFTNGP09.phx.gbl...
>.
>
I learned how to add the folder back from another post. In Internet
Explorer, click "Tools", "Internet Options", "Settings", "Move Folder".
Then browse to Documents and Settings\MyProfile\Local
Settings\Temporary Internet Files and hit "OK". Windows will need to
log-off to make the change.
After I did this, the pop-ups stopped.
Cheers,
Phil