replicating file help pop ups

Closed Thread

Join Date: Oct 2004
Posts: 59
Reputation: joal is an unknown quantity at this point 
Solved Threads: 0
joal joal is offline Offline
Junior Poster in Training

replicating file help pop ups

 
0
  #1
Oct 3rd, 2004
Last wednesday Mc Fee notifiied me that I had a worm or virus and it was deleted, as it runs while computer is on.
An hour later, my computer was taken over by pop ups, if I tried to x them out my computer froze .
I ran several spyware programs, but it hasn't helped.
I found files and programs installed everywhere, and some seemed impossible to get rid of. I found one file in windows, that may have identified itself as being needed by windows, it was created the same exact time that this spyware was installed, which it turns out was the same time Mc Fee did it's delete.
Many of these files had weird names, the one I now suspect is a gnjivapg.dll.
Can anyone give me imput or suggestions on installing programs that may help.
Thanks Joal
Quick reply to this message  
Join Date: Jun 2004
Posts: 253
Reputation: deonnanicole is an unknown quantity at this point 
Solved Threads: 13
deonnanicole deonnanicole is offline Offline
Posting Whiz in Training

Re: replicating file help pop ups

 
0
  #2
Oct 3rd, 2004
If you haven't done so, try running Adaware and Spybot. Be sure to update each before scanning, and reboot between each scan. You may want to also down HijackThis, be sure it is updated to version 1.98.2, and post a log so one of the experts can take a look at exactly what is running on your computer. Be sure to save it to its own permanent folder, not your desktop or a temp file, that way it can make backups in case you need them. You can download Adaware and Spybot from here:

http://www.lavasoftusa.com
http://www.safer-networking.org/en/index.html

I don't have the link for HijackThis right offhand.....if you look through some of the other threads you will find it. If I come across it before you post again, I'll have it here for you. Good luck!
Quick reply to this message  
Join Date: Jun 2004
Posts: 253
Reputation: deonnanicole is an unknown quantity at this point 
Solved Threads: 13
deonnanicole deonnanicole is offline Offline
Posting Whiz in Training

Re: replicating file help pop ups

 
0
  #3
Oct 3rd, 2004
Here's a link for HijackThis....hopefully it will work for you.

http://www.computercops.biz/zx/Merjin/hijackthis.zip
Quick reply to this message  
Join Date: Jul 2004
Posts: 2,964
Reputation: dlh6213 is on a distinguished road 
Solved Threads: 209
Team Colleague
dlh6213 dlh6213 is offline Offline
Posting Maven

Re: replicating file help pop ups

 
0
  #4
Oct 3rd, 2004
Originally Posted by joal
...An hour later, my computer was taken over by pop ups, if I tried to x them out my computer froze...
Just a tip, whenever getting popups, it's better not to 'X' them as sometimes this will cause them to 'execute' which can create more popups (or worse!). It is better to either right-click on them and select close, or use ctrl-alt-del to close each instance or, better yet, close Internet Explorer and clear all temp files and history.

When you unzip hijackthis, put it in it's own folder (like c:\hjt\hijackthis.exe).
Quick reply to this message  
Join Date: Dec 2003
Posts: 6,439
Reputation: DMR will become famous soon enough DMR will become famous soon enough 
Solved Threads: 363
Team Colleague
DMR's Avatar
DMR DMR is offline Offline
Wombat At Large

Re: replicating file help pop ups

 
0
  #5
Oct 4th, 2004
... the one I now suspect is a gnjivapg.dll.
And rightly so. Random, gibberish filenames like that are almost always components of a malicious program, and in the case of the above file that's most certainly the case.

Take the advice given by deonnanicole concerning Ad Aware, SpyBot, and HijackThis. However, before running any of those programs, do the following (assuming you're running WIn 2K or XP):

- Reboot into safe mode

- Open Windows Explorer, and in the Folder Options->View settings under the Tools menu, select "show hidden files and folders", and uncheck "Hide protected operating system files".

- For every user account listed under C:\Documents and Settings, delete the entire contents of these folders:

1. Local Settings\Temp
2. Cookies
3. History
4. Local Settings\Temporary Internet Files\Content.IE5

- Delete the entire content of your C:\Windows\Temp folder.

(If you get any messages concerning the deletion of system files such as desktop.ini or index.dat, just choose to delete those files; they'll be automatically regenerated by Windows if needed.)

- Empty your Recycle Bin.

- Reboot normally.

Then:

1. Run Ad Aware and Spybot first, have them fix everything they find in their scans.

2. Run HijackThis, but close/quit all open programs, especially your Web browser before doing so. When you do run HJT, do not have it fix anything yet! Just have it perform a scan and post the contents of the log file it generates.
"May the Wombat of Happiness snuffle through your underbrush."
- Ancient Aborigine blessing


Please do not contact me by email or PM for help. We're all volunteers here, and only have so much free time to dedicate to our efforts.

However, if I've been working on a thread with you already, and seem to have "forgotten" your thread, please do send me a message. I try not to let things slip through the cracks, but it does happen sometimes.
Quick reply to this message  
Join Date: Oct 2004
Posts: 59
Reputation: joal is an unknown quantity at this point 
Solved Threads: 0
joal joal is offline Offline
Junior Poster in Training

Re: replicating file help pop ups

 
0
  #6
Oct 4th, 2004
So far I have tried many sites to download Hijackthis, none has worked so far, I did e-mail the creator of this program...I am desperate.
Also I have run Adware, Spybot, and recently tried Xoft not sure of the name.
Plus always use a cache and cookie washer, then do delete of history, temp and temp internet... have adjusted security to high, ... my computer is refusing to allow me to delete some programs and also the window file .
If I can figure out why Hijack will not load, and I can run it, will post the log.
Meanwhile many thanxs
joal
Quick reply to this message  
Join Date: Jul 2004
Posts: 2,964
Reputation: dlh6213 is on a distinguished road 
Solved Threads: 209
Team Colleague
dlh6213 dlh6213 is offline Offline
Posting Maven

Re: replicating file help pop ups

 
0
  #7
Oct 5th, 2004
You can get hijackthis from here:
http://www.softpedia.com/progDownloa...load-5034.html

XoftSpy is not any good, you can read about it here:
http://www.spywarewarrior.com/rogue_anti-spyware.htm
Put this in your favorites list so you can check on anything you have a question about.
(I got duped into buying that one myself before I knew any better)
Quick reply to this message  
Join Date: Oct 2004
Posts: 59
Reputation: joal is an unknown quantity at this point 
Solved Threads: 0
joal joal is offline Offline
Junior Poster in Training

Re: replicating file help pop ups

 
0
  #8
Oct 7th, 2004
I eliminated xoftspy, thanks for the information, I will start a new thread.
joal
Quick reply to this message  
Join Date: Jul 2004
Posts: 2,964
Reputation: dlh6213 is on a distinguished road 
Solved Threads: 209
Team Colleague
dlh6213 dlh6213 is offline Offline
Posting Maven

Re: replicating file help pop ups

 
0
  #9
Oct 8th, 2004
Originally Posted by joal
I eliminated xoftspy, thanks for the information, I will start a new thread.
joal
You shouldn't need to start a new thead, post your log here. That way anyone reviewing your log will know what you've already done.
Quick reply to this message  
Join Date: Oct 2004
Posts: 59
Reputation: joal is an unknown quantity at this point 
Solved Threads: 0
joal joal is offline Offline
Junior Poster in Training

Re: replicating file help pop ups

 
0
  #10
Oct 8th, 2004
I still cannot download Hijackthis, I went to Merijin.org, seems that there is a possibility that there is a spyware that can prevent the download, so... tried to download the program to get rid of the problem.... nope.
I have updated spybot, and have mc fee running 24/7
I would like to have a program that prevents pop ups so that I can navigate, I can't stay on line long as I get pop ups that freeze me and have to manually shut down, then do a cache and cookie wash[old one] then run spybot and hope to get on line.
Also is there a site that lists all current virus/worm trojan problems?
Whatever I have is hiding and spybot doesn't pick it up, also I suddenly got a new system file in windows , I delete gibberish ones, that are recent, everytime a pop up freezes me, it inserts these gibberish files.
joal
Quick reply to this message  
Closed Thread

This thread is more than three months old.
Perhaps start a new thread instead?
Message:



Other Threads in the Viruses, Spyware and other Nasties Forum
Thread Tools Search this Thread



About Us | Contact Us | Advertise | DaniWeb | Acceptable Use Policy | RSS Feed

©2003 - 2009 DaniWeb® LLC