Welcome to the Lounge

8-Dec-13 1:38

Hi all, this is probably not the place to post this but I've just started getting popups as soon as I start browsing asking me to update my Windows 7 drivers and I can't get rid of the bastard thing has anyone here had this problem ? I'm running Firefox but it happens in IE to.

We can’t stop here, this is bat country - Hunter S Thompson RIP

DaveAuld8-Dec-13 1:44

DaveAuld

8-Dec-13 1:44

Go to windows update and do a check for updates. See what it tells you. If it is nothing, then sounds like you have malware on your box. Given what you tell us, it sounds like malware.

Dave
Find Me On: Web|Facebook|Twitter|LinkedIn|GitHub

Folding Stats: Team CodeProject

pkfox8-Dec-13 2:21

8-Dec-13 2:21

Thanks, that's what I thought, AVG hasn't picked it up though

We can’t stop here, this is bat country - Hunter S Thompson RIP

Casey Sheridan8-Dec-13 16:37

Casey Sheridan

8-Dec-13 16:37

Try Malwarebytes[^]

OriginalGriff8-Dec-13 1:54

OriginalGriff

8-Dec-13 1:54

It's not happening to me in Chrome or FF, so I would suspect it's malware.

pkfox8-Dec-13 2:22

8-Dec-13 2:22

Thanks, do you know of any ( preferably free ) malware get ridders ?

We can’t stop here, this is bat country - Hunter S Thompson RIP

DaveAuld8-Dec-13 3:05

DaveAuld

8-Dec-13 3:05

I have used http://www.lavasoft.com/products/ad_aware_free.php[^] in the past.

Dave
Find Me On: Web|Facebook|Twitter|LinkedIn|GitHub

Folding Stats: Team CodeProject

pkfox8-Dec-13 3:41

8-Dec-13 3:41

Thanks I'll give it a try

We can’t stop here, this is bat country - Hunter S Thompson RIP

User 17164928-Dec-13 4:00

User 1716492

8-Dec-13 4:00

Unlike Anti-Virus programs where you should only use one, in terms of anti-malware you should use more than one. Include MalwareBytes and SuperAntiSpyware in your arsenal. Both have free versions available. These and others you can download via here ... http://filehippo.com/software/antimalware/antispyware/[^]

modified 1-Aug-19 21:02pm.

ledtech38-Dec-13 4:14

8-Dec-13 4:14

Just looking at that "Supper Anti-Spyware" it looks like most fake antivirus stuff.

According to Wikipedia, PC Magazine reported it had the lowest detection rate and removal of the ones they tested.

A problem with Multiple scanners on a system is system performance.and sometimes the other things they install while they are at it.
True, No single offering can catch everything.

User 17164928-Dec-13 4:40

User 1716492

8-Dec-13 4:40

That product certainly is not a fake, but don't take my word for it. It may not be the world's best, but it has its uses considering that no single product, as you say, catches everything.

modified 1-Aug-19 21:02pm.

ledtech38-Dec-13 4:44

8-Dec-13 4:44

as many ligit and other sites that have it available I would assume it would be a real product.

It is getting harder to tell, you have to check reviews before downloading any of them these days.

ledtech38-Dec-13 4:24

8-Dec-13 4:24

yes you most likely got hit by a drive by download,

First disconnect from the internet, as some of these things are calling home while you are trying to clean them they reinfect you.

Next delete the temporary internet files, sometimes that is engough to get rid of them.

then check add remove programs (programs and features) for any new tool bars that may have got added.
Or any new junk ware.

Check IE and Firefox for any Add Ons.

Next run Sysinternals Autoruns and check for anything that may look like malware.
http://technet.microsoft.com/en-us/sysinternals/bb963902[^]

Next check for any new Task thru Task Scheduler, or WMI task.

As long as it did not install a driver or service you should find it in one of these places.

Ravi Bhavnani8-Dec-13 5:23

Ravi Bhavnani

8-Dec-13 5:23

I recommend replacing your hosts file[^].

IMHO, it should be your first line of defense against popups and unwanted ads. I don't use any ad or popup blockers (but have replaced my hosts file) and have yet to be hit by a virus or malware.

/ravi

My new year resolution: 2048 x 1536
Home | Articles | My .NET bits | Freeware
ravib(at)ravib(dot)com

ledtech38-Dec-13 19:29

8-Dec-13 19:29

Interesting, it can also be used by malware to do the same thing. Block antivirus or security sites.

I have a small tool that list the HOST files on the system with a open in notepad option.

I'll have to add that to the list of things to check on the next customers hijacked system.

Hmmm, they set the IP to 0.0.0.0

pkfox8-Dec-13 21:03

8-Dec-13 21:03

Interesting approach, I'll check it out.

We can’t stop here, this is bat country - Hunter S Thompson RIP

Forogar 8-Dec-13 5:33

Forogar

8-Dec-13 5:33

1. Boot from a boot floppy
2. At the command line:

a:\format c: /q /y

3. Job done.
4. What do you mean you don't have a floppy drive... or a boot floppy... or DOS 6.2? Pah! Call yourself a geek? Oh, you don't... OK, then... can't help you, sorry.

- I would love to change the world, but they won’t give me the source code.

OriginalGriff8-Dec-13 5:43

OriginalGriff

8-Dec-13 5:43

I have a bootable DOS 6.2 CD image for serious emergencies! Laugh | :laugh:

Forogar 8-Dec-13 6:35

Forogar

8-Dec-13 6:35

Quote:
DOS 6.2 CD

CD? Now that is just wrong... somehow... erm, OK, cool!

- I would love to change the world, but they won’t give me the source code.

OriginalGriff8-Dec-13 10:43

OriginalGriff

8-Dec-13 10:43

I can't remember the last time I had a floppy drive on my PC, let alone a working floppy drive!

And I think the last time I used it, it was to install a BIOS upgrade.