Computing.Net > Forums > Security and Virus > wheres the pops up come from

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

wheres the pops up come from

Reply to Message Icon

Original Message
Name: bitboyx2008
Date: April 22, 2008 at 11:57:09 Pacific
Subject: wheres the pops up come from
OS: 1
CPU/Ram: 2
Model/Manufacturer: 3
Comment:

i fully scanned my PC with AVG and Symantec online scan. no threads were found. however, when i try to search something on google, all i see is waiting. then a pops up that shows some damn ads. i also scanned with spybot. nothing but how can i get rib of that crap?


Report Offensive Message For Removal


Response Number 1
Name: TheNerd
Date: April 22, 2008 at 15:32:10 Pacific
Reply: (edit)

it could be a fairly new piece of spyware that's not getting detected yet. It could also be due to some recent software you installed. If you happened to install software that ad supported then the spyware detectors might not think they are bad.

Just in case I would try and scan with http://housecall.trendmicro.com/ and Ad-Aware by Lavasoft.

Tech Alpha Computer Forums


Report Offensive Follow Up For Removal

Response Number 2
Name: bitboyx2008
Date: April 22, 2008 at 15:43:01 Pacific
Reply: (edit)

ok, i found out this ljowbkhq.dll in my system32 folder. i search google, it has no result. if i delete it, thing seems fine so far.


Report Offensive Follow Up For Removal

Response Number 3
Name: TheNerd
Date: April 22, 2008 at 16:11:07 Pacific
Reply: (edit)

yeah that's weird. I searched for it too and couldn't find anything. Hopefully that is what was causing it.

Tech Alpha Computer Forums


Report Offensive Follow Up For Removal

Response Number 4
Name: bitboyx2008
Date: April 23, 2008 at 15:54:58 Pacific
Reply: (edit)

well, another new .dll has generated. i cant get rid of it and i certainly dont know what and where the root is. i cant delete the gebcd.dll. i even tried on safe mode. it keeps saying that it is running. i cant delete it. any idea?
man, now i can see Norton has better protection than AVG although it slows down the pc. i used norton for 2 years and havent gotten any virus in that time. after i got a new pc and try AVG 2 weeks ago, a damn virus got in and dont know where the root is.


Report Offensive Follow Up For Removal

Response Number 5
Name: btk1w1
Date: April 24, 2008 at 04:37:06 Pacific
Reply: (edit)

Don't be so quick to judge freeware AV programs... In alot of cases they DO outperform paid for varieties.

Quote: "i fully scanned my PC with AVG and Symantec online scan. no threads were found"

Norton AV is actually a Symantec product, so if an online scan didn't detect anything (the online scans have the most up to date virus definitions), I very much doubt Norton would have detected it too.

As TheNerd said, this might actually be a new piece of malware which there are no definitions for yet.

A couple of quick questions, what operating system are you running? have you downloaded anything online that might have caused this? (P2P file sharing maybe), have you installed anything immediately prior to the problem(s)? and if so what? was there anything that might have been changed before the problem(s) occurred that might have contributed (software installation)?

If you can provide as much info as possible it would be helpful. There are some malware out there that create random .dll files, virtumomde and Vundo do this, so the more info you give us the better armed we are to help.


Report Offensive Follow Up For Removal


Response Number 6
Name: bitboyx2008
Date: April 24, 2008 at 05:31:14 Pacific
Reply: (edit)

winXP pro.
i cant remember, but i remember it started Monday.
i did download a game mods last week, i remember when i clicked it, it disappeared. i doubt that could be the one. now speaking of the virtumomde. spybot did actually detected that, and gebcd.dll and gebcc.dll are part of that. i clicked fix problems. it said all problems have been fixed. however, gebcd.dll is still in windows32.


Report Offensive Follow Up For Removal

Response Number 7
Name: Brandon Winborne
Date: May 7, 2008 at 12:58:47 Pacific
Reply: (edit)

get VundoFix and run it, it'll disable the virus so it can't fight back when you delete it with your antivirus. I had this before and this is what I had to do. Also if this doesn't work, get Virtumundobegone and run it in safe mode. Other wise, I don't know sorry.

I'm here to help as best I can...


Report Offensive Follow Up For Removal






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have your own blog?

Yes
No
I did before
I will soon


View Results

Poll Finishes In 4 Days.
Discuss in The Lounge
Poll History




Data Recovery Software