Pop up advertisement help

[Verown]

Hello, since i've got a lovely younger brother and older sister i've been dealing with spyware and worms for a while and usually i have no problems getting rid of them, but i ran into a strange issue, i recently got a new computer that i built and finally installed everything and anything i wanted... i really don't feel like reformatting and i can't get rid of this one set of pop ups that my brother got 3 days after i formated... whenever the pop ups appear they are labeled "advertisement - NSIS MEDIA" i have tried ccleaner / norton AV / sby bot / adware pro, and nothing... i can't seem to get rid of it... i've tried checking all of my process' as well and there is nothing out of the ordinary running in the background...

After i run CCleaner it seems to pop up less often untill my cookies build up, i figured it was some type of worm and i was curious if it's a known one... does anyone have any suggestions or should i just screw it and reformat...


i also have the ad-watch monitoring active and it doesn't seem to stop anything even when i add the specific names of the pop ups to my list... either way i rather get rid of it then know it's being blocked

 

[mechBgon]

Big picture: you need to get some Limited accounts set up for yourself and your siblings, to prevent them from running loose on your system like that. It's worth the effort. If you use WinXP Professional Edition then you can add a Software Restriction Policy on top and make things even tighter; let me know if you want more info on SRP.

As an information-gathering step, could you run F-Secure's online scanner and post the output from the report at the end? This scanner looks for rootkits, spyware and viruses/Trojans/worms, and uses the Kaspersky engine combined with their BlackLight rootkit detector, so it's pretty good.

Next thing I'd do is install a free 30-day trialware of Kaspersky Antivirus Personal 6, hit Settings and max out every detection option, update, reboot, and run a full scan with it, and then dive into John's malware-removal guide and get started.

 

[Verown]

thank you so much, i just ran the f-secure, and this is what it found
Result: 1 malware found
Trojan.Win32.Agent.ye (virus)

* C:\WINDOWS\SYSTEM32\ACTSRV.EXE (Renamed & Submitted)

, i'm working on the rest thank you

 

[mechBgon]

Originally posted by: Verown
thank you so much, i just ran the f-secure, and this is what it found
Result: 1 malware found
Trojan.Win32.Agent.ye (virus)

* C:\WINDOWS\SYSTEM32\ACTSRV.EXE (Renamed & Submitted)

, i'm working on the rest thank you

Cool, hopefully you're rid of those NSIS things when you're done Your siblings will hate you, of course :evil:

There is a free version of Kaspersky available: AOL Kaspersky If you like Kaspersky, then when your trial version runs out, you can switch to this freebie version for home use. Don't install the optional security toolbar that is offered during installation, just uncheck that box.

Giving them their own Limited accounts is a super-good idea too, they can't do a lot of lasting harm to the system from a Limited account.