Hi all,

Right heres the story.....last night, i was on the web just having a look about, and then suddenly, i got a pop up saying "updates are ready for your computer, click here to download" and so i thought "bout time!" as its been about 2 months since i have got requested to download windows updates (seriously) so as soon as the download finished, i got messages from all my anti-virus programs (nortons & AVG) that it had detected a virus, so i thought "......" so the first thing i done was turned off IE and scanned it first with AVG, then with nortons (AVG picked up 5, then nortons picked up one more). then i gave it a "smart scan" with ad-aware SE. Lastly, i remembered the name of the file it downloaded (ADX.CET) and so i removed it. then i gave my machine a re-boot. but now, i have a more annoying problem. every few minutes (lets say 10) i get pop-ups saying stuff like "Critical system warning!!" and all this crap, and whenever i start up IE, instead of it taking it to my homepage, its sends me to a page saying i still have a virus on my PC!! ARGHGH!

So anyway, what i was wondering is if you guys (and gal's) could help me maybe by giving me a suggestion on how to get rid of these pop-ups?
i know some of you will suggest to re-format, but my cousin deleted my boot device (NLTDR) recently which means i cant do a smart re-store as it says (file missing) which means i have to re-format it by CD, which due to recent events, i dont have the time nor patience to do.

So, any suggestions guys?
Frenchy

EDIT: i took 2 screenies, this is what it says when i start up IE.

Stop downloading p0rn!!!!

Quote from Rish :

Stop downloading p0rn!!!!

He never said he was.

Did you try system restore?

(thought i should remove what i just said here, may be innapropriate for some people)

@ CSU, my boot device got deleted, which deleted to file i need to do a "smart re-store" so i have to do a re-store by CD, which as i said in my first post, i dont have the time nor pateince to do it due to recent events

Quote from Nathan_French_14 :

lol, why have porn when i have a girlfreind heh?

Pr0n can be muted

Quote from BigFatCat :

Pr0n can be muted

LOL. funny but true

It was a fake update message, you downloaded a virus into your computer. Restart into safe ode and run anti virus junk.

lol i got a friend he download allot of porn and also got that message... NO IT's NOT ME!

Quote from Scrabby :

lol i got a friend he download allot of porn and also got that message... NO IT's NOT ME!

That proves it was you...

Useful tools:
F-Prot: http://www.f-prot.com/ (grab a trial version)
ClamWin: http://www.clamwin.net/
HijackThis: http://www.tomcoyote.org/hijackthis/
ProcessExplorer: http://www.sysinternals.com/files/ProcessExplorerNt.zip
FileMon: http://www.sysinternals.com/files/Filemon.zip
BlackLight: http://www.f-secure.com/blacklight/


Used this lot a few days ago while trying to remove 200+ bits of spyware, adware, trojans and rootkits from my bro's bosses box.. everything from the Blaster worm to new.net ad / spyware... took around 6 or 7 hours to clean with pretty good knowledge of the registry and how malware works

As phychoman says though, that message looks fake (I don't know any reputable software company that would say the %WINDOWS% dir is "C:\windows by default" as this certainly isn't the case on Win2k and that's hardly "dead"). It looks like one of those messages that'll prompt you to download their "silver bullet" anti-spyware software that'll list nothing but false-positives and then expect you to buy the software to actually be able to "clean up" anyway

Anyways, maybe (some of) the above are useful



Regards,

Ian

Quote from Slidaaaa :

That proves it was you...

i said it wasn't me really

Why should we believe someone who likes jumpstyle?

Don't have two antivirus programs running at the same time on your computer. That will only slow it down. Remove Norton since it's crap, and keep AVG.

Download RogueRemover to remove fake antispyware programs: http://projects.securitywonks. ... jects/details.php?file=82

Spybot-S&D is also good: http://www.safer-networking.org/en/index.html
Another program you can try: http://www.superantispyware.com/

Quote from hrtburnout :

Why should we believe someone who likes jumpstyle?

shut up u weird dutchman , no i really don't watch porn

Quote from Scrabby :

no i really don't watch porn

LOL Yeah ok!
EDIT: Now i really dont believe you i just checked your profile, a 15 year old that doesnt watch pr0n?!?!?!

Anyway P5ychom4n's safe mode idea's your best bet!

Quote from wheel4hummer :

You got adware. OMG! Your parents are fools, you are way to young to be using the internet.

Adware/PestTrap

Way too use the internet? im 16 soon, and although your age is'nt revealed on your profile info, it seems like your a 10 year old (judging by most of your posts anyway) oh and btw, i dont appreciate you calling my parents fools, thats just a stupid and innapropriate comment which again makes you look like some stupid little kid.

Quote from arco :

Don't have two antivirus programs running at the same time on your computer. That will only slow it down. Remove Norton since it's crap, and keep AVG.

Download RogueRemover to remove fake antispyware programs: http://projects.securitywonks. ... jects/details.php?file=82

Spybot-S&D is also good: http://www.safer-networking.org/en/index.html
Another program you can try: http://www.superantispyware.com/

hey thanks for these, spybot is a nice program, cheers buddy

And also, thanks to ian's suggestions, some great programs there.

Also, thanks to physchoman, i took your suggestion and it helped alot,
there are no more viruses on my machine now, i just need to get rid of these damn pop-ups ^^

Edit: these suggestions are great, if you have ANYTHING you think might help, please post it up here, thanks

Quote from LFSn00b :

1. Stop cheating on your gf then, i know you were having MSN pr0n!

Damn niko, how'd you know????

seriously niko, me and you have to stop having cybersex over MSN
(were just kidding around btw guys)

Have a look in the registry Nathan.. for example:


is one common place. A lot of these popups are generated from "IE toolbars" and various other "browser helper objects". Things like AdAware / Spybot normally detect these however, but might be worth having a manual look.

Make sure ActiveX is disabled in your IE too as this is a big security issue.

If you still get them, try running HijackThis and posting a log on the site I listed for it.. you'll find some helpful people there that'll run through it (with you) and help you determine what should and shouldn't be installed.



Regards,

Ian

AVG Antispyware is pretty good: http://www.grisoft.com/doc/31/us/crp/0?prd=asw
It's only a trial version, but it allows you to remove all pests it finds. Then you can just uninstall it afterwards.
Same with CounterSpy: http://www.sunbelt-software.co ... fice/CounterSpy/Download/

in IE
tools -> internet options, and change your home page to whatever it is before.

that alert that you are getting is a Javascript Alert to make it look like you have a virus.

System alerts don't have "Windows Internet Explorer" in the title bar.

Quote from arco :

AVG Antispyware is pretty good: http://www.grisoft.com/doc/31/us/crp/0?prd=asw
It's only a trial version, but it allows you to remove all pests it finds. Then you can just uninstall it afterwards.
Same with CounterSpy: http://www.sunbelt-software.co ... fice/CounterSpy/Download/

im currently scanning with AVG, its found a couple of malware items.

@ Ian. Ill go onto there website tomorow, then i will post up a log. Atm, im just trying all of your guys suggestions, and following my own knowledge. I really appreciate this guys, thanks alot to all of you

@ Glyphon, i have tryed that but it just keeps on kicking me back to that screen....maybe if i downloaded something like firefox, would it let me have a custom homepage again or would it just show me the same screen?

yay! i scanned it with avg anti-spyware, and as much as i can see, i think them annoying pop-ups have gone

i still get that message when i open IE, but tbh, i could'nt give a $*** about that, ill just put up with it untill i do a re-store sometime.

Thanks all for your suggestions and help, i really appreciate it

(a now happy again) frenchy

Edit: lol, there back! ^^ oh well, ill just wait until i re-format it.

Lol, do you have pirate windows or legal windows?

that doesnt matter if illegal or not, it has to do with his internet spyware etc...
@ Nathan Frenchy try to go back to a restore point in Windows, that might help