Win32:Adware-gen[Adw] is this a new kind of virus?pls help me>.<

[system]

pls help me !!..im only 17yrs old and dunnO how to fix virus infections

there are 3 viruses` popping out while on access scanner is runninG

here are my screenies pls help me

http://i238.photobucket.com/albums/ff161/hOpia_photo/anutooooo.jpg

lower ryt part the 3 yellow rows…
how to remove this

[system]

windows xp home edition(laptop user)

avast anti virus home edition(free to download)

3 virus popping out…

will avast dO the trick to fix my prblem?

this is my 1st tym to encounter a viruS

[donaldbroatch]

Hi insydroxy,

Looks like adware rather than a virus- displays ads and slows your computer down.

Go to Start>Control Panel>Add/Remove programs and remove MarketScore.

Then download Spybot Search & Destroy in your language and run that:

http://www.safer-networking.org/en/spybotsd/index.html

[system]

^
^
mr. there`s no marketscore to be found in add/remove programs

http://i238.photobucket.com/albums/ff161/hOpia_photo/infos.jpg

w8 i`ll try that website pls w8

[donaldbroatch]

Seems it’s a hidden uninstaller:

# Windows NT/2000/XP

1. Click Start > Run.

2. Type the following and press the Enter key after typing each one:

   cmd
   NSCheck /uninstall

http://www.symantec.com/security_response/writeup.jsp?docid=2004-042117-5317-99&tabid=3

[donaldbroatch]

I can see RelevantKnowledge which is also adware: you should consider uninstalling that.

http://www.bleepingcomputer.com/uninstall/1054/RelevantKnowledge.html

[system]

cmd
NSCheck/ininstall doesnt work 4 me

http://i238.photobucket.com/albums/ff161/hOpia_photo/cmd.jpg

[donaldbroatch]

OneStep Search looks like adware too:

http://www.bleepingcomputer.com/startups/OneStep_Search_Service-21001.html

You should Google all the applications in Add/Remove and remove any that are adware. Ask here if you’re not sure.

Then run Spybot: it may well take care of MarketScore.

Let us know if it doesn’t.

[donaldbroatch]

It may be that uninstalling RelevantKnowledge will remove MarketScore.

[system]

@FreewheelinFrank post:8

OneStep Search looks like adware too:

http://www.bleepingcomputer.com/startups/OneStep_Search_Service-21001.html

You should Google all the applications in Add/Remove and remove any that are adware. Ask here if you’re not sure.

Then run Spybot: it may well take care of MarketScore.

Let us know if it doesn’t.

ok i`ll try this one wisH it helpS

[holpo]

Hi insydroxy,

1. Run Vundofix .
   Download it from here: http://www.atribune.org/ccount/click.php?id=4)

   • Double-click VundoFix.exe to run it.
   • Click the Scan for Vundo button.
   • Once it’s done scanning, click the Remove Vundo button.
   • You will receive a prompt asking if you want to remove the files, click YES
   • Once you click yes, your desktop will go blank as it starts removing Vundo.
   • When completed, it will prompt that it will shutdown your computer, click OK.
   • Turn your computer back on.

Note: It is possible that VundoFix encountered a file it could not remove. In this case, VundoFix will run on reboot, simply follow the above instructions starting from “Click the Scan for Vundo button” when VundoFix appears at reboot.

2. Download ComboFix from Here or Here to your Desktop
   http://download.bleepingcomputer.com/sUBs/ComboFix.exe
   http://www.forospyware.com/sUBs/ComboFix.exe
   http://subs.geekstogo.com/ComboFix.exe

   • Doubleclick combo.exe to launch the application.
   • Follow the prompts that will be displayed on the screen.
   • Don’t click on the window while the fix is running, because that will cause your system to hang.
   • Note:
     Do not mouseclick combofix’s window while it’s running. That may cause it to stall.
   • Combofix should never take more that 20 minutes including the reboot if malware is detected.
     If it does, open Task Manager then Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.

Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause “unpredictable results”.
Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don’t know how to disable it, please ask.

After you have performed this and put the ComboFix logs as an attachment to your next posting,
download ATF Cleaner by Atribune:
http://www.atribune.org/ccount/click.php?id=1

Double-click ATF-Cleaner.exe to run the program.
Click ‘Select All’ found at the bottom of the list.
Click the ‘Empty Selected’ button.

If you use Firefox browser, do this also:
Click Firefox at the top and choose ‘Select All’ from the list.
Click the ‘Empty Selected’ button.
NOTE:
If you would like to keep your saved passwords,please click ‘No’ at the prompt.

If you use Opera browser,do this also:
Click Opera at the top and choose ‘Select All’ from the list.
Click the ‘Empty Selected’ button.
NOTE:
If you would like to keep your saved passwords,please click ‘No’ at the prompt.

Click ‘Exit’ on the Main menu to close the program.

polonus

[DavidR]

[quote author=insydroxy link=topic=34100.msg285377#msg285377 date=1206465095]
cmd
NSCheck/ininstall doesnt work 4 me

First try changing directory to the c:\ drive.
In the command window first type cd c:\ and click the enter key.
Now try and run the NSCheck /uninstall command again.

[system]

@polonus post:11

Hi insydroxy,

1. Run Vundofix .
   Download it from here: http://www.atribune.org/ccount/click.php?id=4)

   • Double-click VundoFix.exe to run it.
   • Click the Scan for Vundo button.
   • Once it’s done scanning, click the Remove Vundo button.
   • You will receive a prompt asking if you want to remove the files, click YES
   • Once you click yes, your desktop will go blank as it starts removing Vundo.
   • When completed, it will prompt that it will shutdown your computer, click OK.
   • Turn your computer back on.

Note: It is possible that VundoFix encountered a file it could not remove. In this case, VundoFix will run on reboot, simply follow the above instructions starting from “Click the Scan for Vundo button” when VundoFix appears at reboot.

2. Download ComboFix from Here or Here to your Desktop
   http://download.bleepingcomputer.com/sUBs/ComboFix.exe
   http://www.forospyware.com/sUBs/ComboFix.exe
   http://subs.geekstogo.com/ComboFix.exe

   • Doubleclick combo.exe to launch the application.
   • Follow the prompts that will be displayed on the screen.
   • Don’t click on the window while the fix is running, because that will cause your system to hang.
   • Note:
     Do not mouseclick combofix’s window while it’s running. That may cause it to stall.
   • Combofix should never take more that 20 minutes including the reboot if malware is detected.
     If it does, open Task Manager then Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.

Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause “unpredictable results”.
Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don’t know how to disable it, please ask.

After you have performed this and put the ComboFix logs as an attachment to your next posting,
download ATF Cleaner by Atribune:
http://www.atribune.org/ccount/click.php?id=1

Double-click ATF-Cleaner.exe to run the program.
Click ‘Select All’ found at the bottom of the list.
Click the ‘Empty Selected’ button.

If you use Firefox browser, do this also:
Click Firefox at the top and choose ‘Select All’ from the list.
Click the ‘Empty Selected’ button.
NOTE:
If you would like to keep your saved passwords,please click ‘No’ at the prompt.

If you use Opera browser,do this also:
Click Opera at the top and choose ‘Select All’ from the list.
Click the ‘Empty Selected’ button.
NOTE:
If you would like to keep your saved passwords,please click ‘No’ at the prompt.

Click ‘Exit’ on the Main menu to close the program.

polonus

wew…what a long guide :

wish me luck …hope no error occurs dunnO what to do

[holpo]

Hi insydroxy,

If you do exactly what is spelled out for you to do, not much can go wrong. Follow the instructions to the dot, and that is it. You better learn this at an early age, so you can feel at ease with it when you get older. ;D You can do it, come on,

polonus

P.S. Click the picture to see the animation of Little Red Riding Hood…

[system]

^
^
mr. polonus that vundofix u said earlier is this recommendable even im not from US?

international 4 short ;D

[holpo]

Hi insydroxy,

Yes alas vundo is global malware, and does not stop where Philippines begin, so let it run it does all automatically, and cannot do any harm to your computer. The ComboFix program as it is left to run all by its own does not do any harm either, attach the two log files that come after you run it as an attachment to your next posting, everything will be all-right, do not worry,

polonus

[system]

^
^
okey
http://i82.photobucket.com/albums/j279/CoachBrockhoff/Mario-banana.gif

stay tuned
http://i121.photobucket.com/albums/o202/ike075/Teeny%20foods/thdancenana.gif

[system]

mr. polonus im at step 2 now…

do i have to choose only 1 link or all 3 links? ???

[holpo]

Hi insydroxy,

Take the first link only: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

put the combofix logs as an attachment to your reply,

polonus

[system]

finished all the steps weeeeeeee!

where will i put the log report mr.polonus? ???