New Windows Pop up

[mbenya@adelphia.net]

I have a HP Pavilion 7950 computer with Windows XP OS. I
believe I got hit with a bad dose of "spyware" My
problem is triggered by movements from the mouse "arrow
icon" scrolling over open applications, the Internet
Explorer browser or the Start Bar at the bottom of the
desk top. The computer rapidly launches and opens
multiple random applications or "pops up" windows from
these areas and floods the desktop. The Start window is
always one of these "pop ups".

When "Ctrl-Alt-Delete" is applied, the CPU Usage returns
to 1% control is regained on the desktop. I just close
out the windows or applications and all returns to
normal. No data is lost or screens over-written, just a
very big nuisance. Also, applications like Word or Excel
are taking longer to load up normal files, like the CPU
is "laboring".

While this problem occurs, the CPU Usage zooms to 100%
and returns to normal (around1- 5% usage) and the
file "taskmgr.exe" is repeatedly executed. All of the
movements with the mouse over a "selection key or icons"
seem to be "edgy or jumpy" like the problem is waiting to
be triggered and that is usually the next step.

I use the latest versions of AdaWare, SpyBot and PopUp
Stopper Browser Cleaner. Running these three programs
and VirusScan keep the system "clean", but has not
removed this problem. Help!!

[Jim Byrd]

Hi M. Benya - Well, you kinda need to know what the parasite(s) is/are
before you can do much about fixing them except to apply some general tools
like AdAware and/or SpyBot S&D (see below). If they don't fix it then start
here:

Download HijackThis, free, here:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip

Unzip it to any convenient folder, start it then press Scan. Click on
SaveLog when it's finished which will create hijackthis.log. Now click the
Config button, then Misc Tools and click on Generate StartupList.log which
will create Startuplist.txt

Then go to one of the following forums:

Spyware and Hijackware Removal Support, here:
http://www.spywareinfo.com/forums/index.php?s=8a236cdf61469fbad3bddbe810be0374&act=SF&f=11

or Net-Integration here:
http://www.net-integration.net/cgi-bin/forum/ikonboard.cgi?s=d3c2c886d536d57b5f65b6e40c55365e;a ct=ST;f=27;t=6949

or Tom Coyote here:
http://tomcoyote.org/forums/index.php?act=ST&f=10&t=495&s=2c6e92805e310b519b9fa61cc7098fba

Sign in, then copy and paste both files into a message asking for
assistance, Someone will answer with detailed instructions for the removal
of your parasite(s).


For the general hijack case, the best way to start is to get Ad-Aware 6.0,
Build 181 or later, here: http://www.lavasoftusa.com/support/download/.
Update and run this regularly to get rid of most "spyware/hijackware" on
your machine. If it has to fix things, be sure to re-boot and rerun
AdAware again and repeat this cycle until you get a clean scan. The reason
is that it may have to remove things which are currently "in use" before it
can then clean up others.

Another excellent program for this purpose is SpyBot Search and Destroy
available here: http://security.kolla.de/ SpyBot Support Forum here:
http://www.net-integration.net/cgi-bin/forums/ikonboard.cgi. I recommend
using both normally. After fixing things with SpyBot S&D, be sure to
re-boot and rerun SpyBot again and repeat this cycle until you get a clean
"no red" scan. The reason is that SpyBot sometimes has to remove things
which are currently "in use" before it can then clean up others.


Note that sometimes you need to make a judgement call about what these
programs report as spyware. See here, for example:
http://www.imilly.com/alexa.htm


--
Please respond in the same thread.
Regards, Jim Byrd, MS-MVP



In ,
> typed:
> I have a HP Pavilion 7950 computer with Windows XP OS. I
> believe I got hit with a bad dose of "spyware" My
> problem is triggered by movements from the mouse "arrow
> icon" scrolling over open applications, the Internet
> Explorer browser or the Start Bar at the bottom of the
> desk top. The computer rapidly launches and opens
> multiple random applications or "pops up" windows from
> these areas and floods the desktop. The Start window is
> always one of these "pop ups".
>
> When "Ctrl-Alt-Delete" is applied, the CPU Usage returns
> to 1% control is regained on the desktop. I just close
> out the windows or applications and all returns to
> normal. No data is lost or screens over-written, just a
> very big nuisance. Also, applications like Word or Excel
> are taking longer to load up normal files, like the CPU
> is "laboring".
>
> While this problem occurs, the CPU Usage zooms to 100%
> and returns to normal (around1- 5% usage) and the
> file "taskmgr.exe" is repeatedly executed. All of the
> movements with the mouse over a "selection key or icons"
> seem to be "edgy or jumpy" like the problem is waiting to
> be triggered and that is usually the next step.
>
> I use the latest versions of AdaWare, SpyBot and PopUp
> Stopper Browser Cleaner. Running these three programs
> and VirusScan keep the system "clean", but has not
> removed this problem. Help!!

[Chuck]

On Fri, 5 Dec 2003 08:20:24 -0800, "
> wrote:

>
>I have a HP Pavilion 7950 computer with Windows XP OS. I
>believe I got hit with a bad dose of "spyware" My
>problem is triggered by movements from the mouse "arrow
>icon" scrolling over open applications, the Internet
>Explorer browser or the Start Bar at the bottom of the
>desk top. The computer rapidly launches and opens
>multiple random applications or "pops up" windows from
>these areas and floods the desktop. The Start window is
>always one of these "pop ups".
>
>When "Ctrl-Alt-Delete" is applied, the CPU Usage returns
>to 1% control is regained on the desktop. I just close
>out the windows or applications and all returns to
>normal. No data is lost or screens over-written, just a
>very big nuisance. Also, applications like Word or Excel
>are taking longer to load up normal files, like the CPU
>is "laboring".
>
>While this problem occurs, the CPU Usage zooms to 100%
>and returns to normal (around1- 5% usage) and the
>file "taskmgr.exe" is repeatedly executed. All of the
>movements with the mouse over a "selection key or icons"
>seem to be "edgy or jumpy" like the problem is waiting to
>be triggered and that is usually the next step.
>
>I use the latest versions of AdaWare, SpyBot and PopUp
>Stopper Browser Cleaner. Running these three programs
>and VirusScan keep the system "clean", but has not
>removed this problem. Help!!

Mike,

If Spybot didn't help eliminate the problem, next try HijackThis (also
free). HJT looks for spyware in a different way, and you will need
expert advice at SWI Forums to interpret its findings. Complete
instructions are here:
http://forums.spywareinfo.com/index.php?showtopic=5187

BTW, posting with your email address in plaintext will likely get you
a lot of email that you don't want.

Cheers,

Chuck
I hate spam - PLEASE get rid of the spam before emailing me!
Paranoia comes from experience - and is not necessarily a bad thing.