Questions

How to get rid of a pop-up

Tags:
+
0 Votes
Locked

How to get rid of a pop-up

Trish44
How do I get rid of a pop-up that's gotten on my son's computer? It sits in the tray & keeps flashing then pops up & wants you to go to a web site where they want you to buy their software. I have found no way to get rid of this thing. Does anybody have any suggestions?
  • +
    0 Votes
    blsd8243

    You can disable anything that starts up with your computer by going to msconfig. Under the start up file you can deselect the item if you know the name of it. If, however you dont know the name you can go to the general tab, choose selective start up, click off of the two check boxes there for the processes, if memory serves me correct it's process win.ini and process system.ini. Also deselect the check on load start up items. That should do it. You can also, if you want to be more prudent about it, and clean up more of what's starting up, go to the services tab, click to "hide all microsft items" then click deselect all. Hit apply, okay, and restart your computer.

    +
    0 Votes
    ThumbsUp2

    You didn't give us much detail, but I suspect the computer has become infected with any one of litterally thousands of different virus'/spyware/malware/trojan/adware bugs which install themselves and then drive you nuts with pop-ups to purchase their software. If my hunch is correct, removing them with MSConfig won't solve the problem even IF you were able to see which one/two/three programs shouldn't be starting. They just come back when disabled with MSConfig. The machine has to be de-bugged properly.

    Can you tell us what, exactly, the pop-up is trying to sell you so that we can direct you where to go for more help?

    You may eventually have to edit the registry to get rid if this thing. So, if you're not comfortable doing that, you may want to take the computer to a Pro right now to have it taken care of. It's sick.

    +
    0 Votes
    CaptBilly1Eye

    Your situation most likely due to Spyware, Adware or Malware.
    Try emptying your Internet Cache*.

    Here are excellent tools for removing spyware, malware and adware:

    Ad-Aware:
    http://tinyurl.com/5kgsl

    Spybot Search & Destroy:
    http://tinyurl.com/78ubw

    CWShredder:
    http://tinyurl.com/5lstv

    X-Cleaner Micro:
    http://tinyurl.com/357tuu

    I would also use this tool: RootKitRevealer (http://tinyurl.com/y3hgq9)
    or AVG's free RootKit detector and Remover: (http://tinyurl.com/35jq2t)

    If the issue remains, I recommend you download and run HiJackThis (http://tinyurl.com/b9h3s) and post the log file it creates in one of the many forums dedicated for that purpose. I recommend that you post your HiJackThis log where there are many people who specialize in working with them. Try here: http://tinyurl.com/2nxzqt
    You'll have to create a login but I think you'll find it to be the easiest and best way to resolve your issue.

    Additionally, here is a good source for advice: http://aumha.org/a/quickfix.htm

    When you finally get everything cleaned up and running smooth, here are great tools to help you avoid getting that garbage again:

    SpywareBlaster:
    http://tinyurl.com/g1d9

    SpywareGuard:
    http://tinyurl.com/3yj37

    and to quickly clean out the places where their installers usually hide before you shut down or reboot - ATF-Cleaner:
    http://tinyurl.com/kqmvp


    Good Luck


    * To empty the Internet Cache - if you are using IE7, open to a browser window, click on Tools, select Internet Options, in the Browsing History section click on Delete and then in the next menu click on Temporary Internet Files 'Delete Files.'
    If you are using IE6, click on Tools, select Internet Options and then under Temporary Internet Files click on the Delete Files button.

    If you're nervous about removing things found by spyware scanners, you can always create a System Restore Point as a safety net.

    +
    0 Votes
    Trish44

    Thanks all for your help. I don't have the computer here to tell you which program it is that they're trying to sell, it's at my son's house. I have tried running Ad-Aware & Spybot already & they didn't get rid of it. I have not tried anything else as of yet due to time. This all came about after his anti-virus outdated & we're going to take care of that in the next few days. In the meantime I will try the things you have suggested & see if we can get rid of this thing. I want to avoid having to reformat the drive if at all possible. By the way, he is using Firefox for his browser, not IE.

    +
    0 Votes
    trevorag

    Go to grisoft.com and download the free version of AVG Antivirus. After downloading it and updating it, run it, and it will catch all those nasty spyware programs

    +
    0 Votes
    drewy19

    If thats the software they are trying to sell you then you have vundo. Some versions are really tough to get rid of, you can try vundofix by attribune (free, just run a search for vundofix). afterwards uninstall java through add-remove, then go get the newest version of java. If that doesn't work you've got the root-kit version. a bit more complicated.

  • +
    0 Votes
    blsd8243

    You can disable anything that starts up with your computer by going to msconfig. Under the start up file you can deselect the item if you know the name of it. If, however you dont know the name you can go to the general tab, choose selective start up, click off of the two check boxes there for the processes, if memory serves me correct it's process win.ini and process system.ini. Also deselect the check on load start up items. That should do it. You can also, if you want to be more prudent about it, and clean up more of what's starting up, go to the services tab, click to "hide all microsft items" then click deselect all. Hit apply, okay, and restart your computer.

    +
    0 Votes
    ThumbsUp2

    You didn't give us much detail, but I suspect the computer has become infected with any one of litterally thousands of different virus'/spyware/malware/trojan/adware bugs which install themselves and then drive you nuts with pop-ups to purchase their software. If my hunch is correct, removing them with MSConfig won't solve the problem even IF you were able to see which one/two/three programs shouldn't be starting. They just come back when disabled with MSConfig. The machine has to be de-bugged properly.

    Can you tell us what, exactly, the pop-up is trying to sell you so that we can direct you where to go for more help?

    You may eventually have to edit the registry to get rid if this thing. So, if you're not comfortable doing that, you may want to take the computer to a Pro right now to have it taken care of. It's sick.

    +
    0 Votes
    CaptBilly1Eye

    Your situation most likely due to Spyware, Adware or Malware.
    Try emptying your Internet Cache*.

    Here are excellent tools for removing spyware, malware and adware:

    Ad-Aware:
    http://tinyurl.com/5kgsl

    Spybot Search & Destroy:
    http://tinyurl.com/78ubw

    CWShredder:
    http://tinyurl.com/5lstv

    X-Cleaner Micro:
    http://tinyurl.com/357tuu

    I would also use this tool: RootKitRevealer (http://tinyurl.com/y3hgq9)
    or AVG's free RootKit detector and Remover: (http://tinyurl.com/35jq2t)

    If the issue remains, I recommend you download and run HiJackThis (http://tinyurl.com/b9h3s) and post the log file it creates in one of the many forums dedicated for that purpose. I recommend that you post your HiJackThis log where there are many people who specialize in working with them. Try here: http://tinyurl.com/2nxzqt
    You'll have to create a login but I think you'll find it to be the easiest and best way to resolve your issue.

    Additionally, here is a good source for advice: http://aumha.org/a/quickfix.htm

    When you finally get everything cleaned up and running smooth, here are great tools to help you avoid getting that garbage again:

    SpywareBlaster:
    http://tinyurl.com/g1d9

    SpywareGuard:
    http://tinyurl.com/3yj37

    and to quickly clean out the places where their installers usually hide before you shut down or reboot - ATF-Cleaner:
    http://tinyurl.com/kqmvp


    Good Luck


    * To empty the Internet Cache - if you are using IE7, open to a browser window, click on Tools, select Internet Options, in the Browsing History section click on Delete and then in the next menu click on Temporary Internet Files 'Delete Files.'
    If you are using IE6, click on Tools, select Internet Options and then under Temporary Internet Files click on the Delete Files button.

    If you're nervous about removing things found by spyware scanners, you can always create a System Restore Point as a safety net.

    +
    0 Votes
    Trish44

    Thanks all for your help. I don't have the computer here to tell you which program it is that they're trying to sell, it's at my son's house. I have tried running Ad-Aware & Spybot already & they didn't get rid of it. I have not tried anything else as of yet due to time. This all came about after his anti-virus outdated & we're going to take care of that in the next few days. In the meantime I will try the things you have suggested & see if we can get rid of this thing. I want to avoid having to reformat the drive if at all possible. By the way, he is using Firefox for his browser, not IE.

    +
    0 Votes
    trevorag

    Go to grisoft.com and download the free version of AVG Antivirus. After downloading it and updating it, run it, and it will catch all those nasty spyware programs

    +
    0 Votes
    drewy19

    If thats the software they are trying to sell you then you have vundo. Some versions are really tough to get rid of, you can try vundofix by attribune (free, just run a search for vundofix). afterwards uninstall java through add-remove, then go get the newest version of java. If that doesn't work you've got the root-kit version. a bit more complicated.