Mike Hall - MVP;1033707 Wrote:
> "rive0108" <> wrote in message
> news:...> > >
> > >
> > > Justin;1033242 Wrote:> > > > >
> > > >> Running Windows XP my cousin ended up with an infestation of spyware
> > > and
> > > >> adware after AVG ran out and it stopped updating.
> > > >> I installed AVG 8.5 ran a scan, it disinfected winlogon.exe and then
> > > >> blue screened.
> > > >> After a reboot and another scan winlogon.exe was no longer infected
> > > but
> > > >> other files were. It seems to have disinfected them.
> > > >> The only thing left is a popup that comes up everytime IE is
> > > started. I
> > > >> can't figure out what is causing it. I ran ad aware - it disposed of
> > > a
> > > >> few things but he still gets that popup when IE starts.
> > > >>
> > > >> What now?> > > >
> > >
> > > First of all, AVG and Ad-Aware are not very good, and you are
> > probably
> > > dealing with Polymorphic malware.
> > >
> > > Example, AVG is recent AV-Comparative testing [feb 2009] only
> > received
> > > 1 star certification out of 3 stars.
> > >
> > > This is what I suggest you do:
> > >
> > > 1. download/run a certified 3 star antivirus/antispyware app like
> > NOD32
> > > 4, Kaspersky, Symantec, or Mcafee with Artemis.
> > > Avira is free, as is Avast!. Both only received 2 star
> > certification in
> > > regards to On-demand scannning, but they are both better than
> > AVG.
> > >
> > > 2. download and run Malwarebytes. Real time protection is
> > disabled in
> > > the trial version, so update and use the On-Demand scanner. This
> > App is
> > > specifically geared towards Polymorphic trojans, and is not
> > designed to
> > > be used as a standalone.
> > >
> > > You can also download and run a System Inspector self Diagnostic.
> > Green
> > > is ideal, while anything In red is a problem.
> > >
> > > If it was me I would do this:
> > > Install the 30 day *Eset* *NOD32 4 Antivirus/Antimalware* (this
> > is the
> > > only program to recieve both a 3 star certification in Hueristic
> > and on
> > > demand scanning from AV-Comparatives) [Nov 08/Feb 09]
> > > then, I would Install and run Malwarebytes, and run a full Scan
> > with
> > > Defender-but I run x64 Ultimate-you would have to download this
> > app.
> > > note- you can remove NOD32 after your system is cleaned. This app
> > has
> > > self defense to prevent Malware Corruption.
> > >
> > >
> > > Chances are though, you have User/data file and Windows
> > corruption that
> > > only a re-install will fix.
> > >
> > > Antivirus Comparative testing:
> > >
> > http://www.vistax64.com/system-secur...rformance.html
> > >
> > > Antimalware/Antivirus scanners:
> > >
> > http://www.vistax64.com/system-secur...ity-tools.html
> > >
> > >
> > > --
> > > rive0108 > >
>
>
> A pity that the Vista64 forum has an add for Uniblue Registry
> Booster.. I
> understand that Uniblue pay well for displaying it..
>
>
> --
>
> Mike Hall - MVP Windows Experience
> 'Mike's Window' (http://msmvps.com/blogs/mikehall/)
Where is that? Only Visitors see Google adsense at the top of the page.
I see none, but anyhow, Registry "cleaners"/"boosters"/"performance
increasers" are just gimmicks, and often do more harm than good. I do
not recommend any type of reg cleaner/booster.
If you know how to use a reg cleaner/editor, they are ok, but most
dont, and reg cleaners are notorious for corruption of Windows as they
often cannot distinguish between legitimate and unwanted entries.
rule of thumb-
If you dont know the purpose of the entry a cleaner wants to "clean" do
not let it "clean" it.
If you dont know the difference between a .dll and a svchost executable
-YOU SHOULD NOT BE USING A REG CLEANER/PERFORMANCE BOOSTER! Otherwise
you will find yourself re-installing Windows.
--
rive0108
'::_-Win_$500_With_Vista_Forums-_::'
(
http://www.vistax64.com/competitions...r_more_info-_: