need help with patience

I have a terrible problem… when I am online and searching for web sites some unknown pages appear on my screen… how do I get rid of them?
please please help with patience… I am really new…

I have win98M DSL connection and avast4.

Thanks in advance for your time and help…

If a virus is replicant (coming and coming again), you could follow the general cleaning procedure:

  1. Disable System Restore on Windows ME or Windows XP. System Restore cannot be disabled on Windows 9x and it’s not available in Windows 2k. After boot you can enable System Restore again after step 3).

  2. Clean your temporary files. You can use CleanUp or the Windows Advanced Care features for that.

  3. Schedule a boot time scanning with avast. Start avast! > Right click the skin > Schedule a boot-time scanning. Select for scanning archives. Boot. Other option is scanning in SafeMode (repeatedly press F8 while booting).

  4. It will be good if you download, install, update and run AVG Antispyware. Some users recommend SUPERantispyware, Spyware Terminator and/or a-squared (take care about false positives).
    If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.

  5. If you still detecting any strange behavior or even you’re sure you’re not clean, maybe it will be good to test your machine with anti-rootkit applications. I suggest AVG, Panda and/or F-Secure BlackLight.

  6. Also, if you still detecting strange behaviors or you want to be sure you’re clean, maybe making a HijackThis log to post here and, specially, scan and submit to on-line analysis the RunScanner log would help to identify the problem and the solution.

  7. After you’re clean, use the immunization of SpywareBlaster or, which is better, the Windows Advanced Care features of spyware/adware cleaning and removal.

  8. Finally, when you’re clean, check for insecure applications with Secunia Software Inspector to update insecure applications and avoid reinfection.

Two things you don’t mention:

  1. what is your browser ?
    Because you are using win98 you won’t be able to have the latest version of IE, so you should choose another browser which is more up to date and likely to be less susceptible to this kind of hijack, like Firefox or Opera.

  2. you don’t say if you have a firewall and absolute essential to security and more so with a DSL, always on connection.

thank you so much Tech and DavidR
I really mean thank you…

This is what I have done:
To Tech:

  1. I could not do number 1.
  2. clean up has lots of options. which one should I pick?
    advanced windows care is only for vista. XP and 2000… mine is 98M can I still use that?
  3. I am using avast in another language and can not find the skin to do the schedule boot scan… can I arrange that on the avast web site?
    AVG antispyware is also for vista XP and 2000
    superantispyware downloaded and I run the program.
    spyware terminator downloaded and run the program too… while downloading a warning came saying:
    Internet Explorer Error
    Line:2
    charac. 1
    Error: word order? {sorry. direct translation}
    cod: 0
    URL: http:\oyunmemo.com
    do you want to run with this error:
    yes no

I tried both yes and no. the page keeps coming…

do you know anything about this error page?

I also have the spyware terminator toolbar now…

As I said I am really new and probably a headache for you now… but really appriciate your help…

To DavidR:

I do not have a browser or a firewall… how do I get them???
my web home page is google and have avast 4 and now a spyware terminator toolbar…

really thank you for all your help…

waiting your posts…

hi nweb …
ur browser is “internet explorer”…IE
and u can do a boot time scan by right clicking on ur avast simple users interface…
trake a look at the pic

and select boot time scan…in ur language…and it’ll prompt u to restart…do it

forgot to attach a pic

The boot-time scan isn’t available for win9x or winME, an avast scan in Safe mode is all that is available for those Operating Systems.

Booting into safe mode http://www.pchell.com/support/safemode.shtml. Once in safe mode you can launch an avast scan by clicking on the avast icon on the desktop, or double clicking this file, “C:\Program Files\Alwil Software\Avast4\ashAvast.exe.”

Firewall:

However, your major problem is finding one that is compatible with win98 as the greates majority don’t support older OSes. See this google search, http://www.google.com/search?q=freeware+win98+firewall, however you need to do some research on the product before installation.

DavidR wrote:
The boot-time scan isn’t available for win9x or winME, an avast scan in Safe mode is all that is available for those Operating Systems. :cry:

Now I can understand why I do not have that option… thank you sasin44 for showing very detailed… I wish I had it…

now I did safe mode and run avast too…

and again when I type something on google another web page comes out…

on avast garantine summary these appears even I deleted them…
command.com
kernel32.dll
wsock32.dll

are these the problem? how can I find what causes this?

thanks again so much…

These files are backup copies of system files. They should be in the system file section of the chest. They will also show up in “all chest files”. Avast placed them there and will continue to replace them if you delete them from the chest. So no, they are not a problem.

System restore is not available in Win 98, sorry.

You can skip this step also…

No, forget it.

Any skin and language allows it… but not Win 98… Sorry.

Sorry, skip.

They’re backup and clean. Don’t worry… Did avast show only these three files?

yes only these 3 files…

so there is nothing I can do with win98??? :frowning:

Yes you can.
If you still detecting strange behaviors or you want to be sure you’re clean, maybe making a HijackThis log to post here and, specially, scan and submit to on-line analysis the RunScanner log would help to identify the problem and the solution.

Hi Tech

I was able to install hijack this and saw the log tried to save it could not… than now it says out of memory… aggghhhhh what can I do?

Copy paste the contents of the log here ? :slight_smile:

hi
I can not see the contents tough… when I click on it a pop up window says out of memory and that is it???

first I saw the log and trid to save but could not than closed it and check the web site then now I am trying to open it again and says out of memory… should I uninstall or do I have other options?
thanks for your patience… really…

Can you try it in safe mode ?

you want me to run the safe mode than hijack this???

Boot into safe mode and then run hijackthis, save the logfile and post it here …