Anyone recommend a decent and free anti-spyware software..?

**trickrick** · #1 (**permalink**) 04-05-2008, 07:58

I have got some goddamn annoying 'pop-unders' that accmulate whilst I am surfing..Visit TDP an I get frggin Betfair ads..Ringtones, dating agencies are amongst the other thousands. Not as annoying as 'pop-ups' but still doing my head in when I have to close about 8 of them.!

Tried a couple of free programs but they aint much cop..

**ONEDUNME** · #2 (**permalink**) 04-05-2008, 09:54

Most people usually recommend ad-aware from lavasoft I think.

type in into a search engine but make sure you download the right link as I seem to remember having problems getting one of them to work.

There should be a thread somewhere. I'll look now.

**ONEDUNME** · #3 (**permalink**) 04-05-2008, 09:57

Here's a link. See Wasik's post (number 7) and ignore RC's lame joke

I think the sun's got to his head.

Adaware no longer free

rcgills · #4 (**permalink**) 04-05-2008, 10:46

Originally Posted by ONEDUNME

See Wasik's post (number 7) and ignore RC's lame joke

What on earth makes you think I was joking?

**trickrick** · #5 (**permalink**) 04-05-2008, 11:06

Thanks chaps - Downloaded Adaware !

**kompressaur** · #6 (**permalink**) 05-05-2008, 05:59

I would get Spybot myself Rick. It's about the best free one i would say. Adaware is murder imo. BPS is my fav. Try this though-
FileForum | Spybot Search and Destroy

**kompressaur** · #7 (**permalink**) 05-05-2008, 06:05

here's the boy you want imo Rick
http://www.katzforums.com/showthread.php?t=102080

kristobal · #8 (**permalink**) 05-05-2008, 07:27

BPS's no good ... I have the same problem Rick, I was using Kaspersky to protect my computer and everything was ok but since I started using AVG free edition I have all kinds of pop-ups and I can't stop the fcukers

**kompressaur** · #9 (**permalink**) 05-05-2008, 10:46

I think there's a virus that people with AVG where getting kris. I need to go out but will look into this more. I think youve got a virus rather than spyware possibly then Rick/Kris

**kompressaur** · #10 (**permalink**) 05-05-2008, 11:23

run this kris/rick and post up the results (do scan and save log file)

http://files3.majorgeeks.com/files/4...ckthis_sfx.exe

kristobal · #11 (**permalink**) 05-05-2008, 11:59

you mean this komp?

Logfile of HijackThis v1.99.1
Scan saved at 4:57:24 AM, on 5/5/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C

WINDOWS\System32\smss.exe
C

WINDOWS\system32\winlogon.exe
C

WINDOWS\system32\services.exe
C

WINDOWS\system32\lsass.exe
C

WINDOWS\system32\svchost.exe
C

WINDOWS\System32\svchost.exe
C

WINDOWS\system32\spoolsv.exe
C

Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C

WINDOWS\ATKKBService.exe
C

WINDOWS\system32\TDSupportApp\cdrom_mon.exe
C

WINDOWS\Explorer.EXE
C

Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C

PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C

PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C

Program Files\Bonjour\mDNSResponder.exe
C

WINDOWS\eHome\ehRecvr.exe
C

WINDOWS\eHome\ehSched.exe
C

Program Files\KService\KService.exe
C

WINDOWS\system32\nvsvc32.exe
C

WINDOWS\system32\svchost.exe
C

WINDOWS\ehome\ehtray.exe
C

WINDOWS\SOUNDMAN.EXE
C

Program Files\D-Link\AirPlus G\AirGCFG.exe
C

Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C

Program Files\DAEMON Tools\daemon.exe
C

Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C

Program Files\HP\HP Software Update\HPWuSchd2.exe
C

Program Files\Google\Gmail Notifier\G001-1.0.25.0\gnotify.exe
C

Program Files\Java\jre1.6.0_05\bin\jusched.exe
C

WINDOWS\system32\RUNDLL32.EXE
C

PROGRA~1\Grisoft\AVG7\avgcc.exe
C

Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C

WINDOWS\system32\dllhost.exe
C

Program Files\Skype\Phone\Skype.exe
C

Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C

WINDOWS\eHome\ehmsas.exe
C

Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig .exe
C

Program Files\PokerOffice\bin\javaw.exe
C

Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntim e.exe
C

Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C

Program Files\Microsoft ActiveSync\Wcescomm.exe
C

PROGRA~1\MICROS~2\rapimgr.exe
C

Program Files\Veoh Networks\Veoh\VeohClient.exe
C

PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C

Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C

Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C

Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C

Program Files\OpenOffice.org 2.3\program\soffice.exe
C

Program Files\OpenOffice.org 2.3\program\soffice.BIN
C

Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C

Program Files\Skype\Plugin Manager\skypePM.exe
C

WINDOWS\system32\wuauclt.exe
C

Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C

Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
c

documents and settings\kris\local settings\application data\gpqtncz.exe
C

Program Files\Mozilla Firefox\firefox.exe
C

Documents and Settings\kris\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Search
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C

Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL
O2 - BHO: (no name) - {00C6482D-C502-44C8-8409-FCE54AD9C208} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C

Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar BHO - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C

Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C

Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C

Program Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL
O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C

Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C

Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C

Program Files\AskTBar\bar\2.bin\ASKTBAR.DLL
O3 - Toolbar: (no name) - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C

Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C

Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [ehTray] C

WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [D-Link AirPlus G] C

Program Files\D-Link\AirPlus G\AirGCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C

Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C

Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C

Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [HP Software Update] C

Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C

Program Files\Google\Gmail Notifier\G001-1.0.25.0\gnotify.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C

Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C

Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [PC Suite for Smartphones] "C

Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C

WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C

WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG7_CC] C

PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C

Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [QuickTime Task] "C

Program Files\K-Lite Codec Pack\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [POEngine] "C

Program Files\PokerOffice\POEngine.exe" C

Program Files\PokerOffice
O4 - HKCU\..\Run: [Skype] "C

Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C

Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [mRouterConfig] "C

Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig .exe"
O4 - HKCU\..\Run: [H/PC Connection Agent] "C

Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - HKCU\..\Run: [Veoh] "C

Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C

PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - Startup: OpenOffice.org 2.3.lnk = C

Program Files\OpenOffice.org 2.3\program\quickstart.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C

Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C

Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C

Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C

Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O8 - Extra context menu item: &Winamp Toolbar Search - C

Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C

PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C

Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C

Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Absolute Poker - {13C1DBF6-7535-495c-91F6-8C13714ED485} - C

Documents and Settings\kris\Start Menu\Programs\Absolute Poker\Absolute Poker.lnk
O9 - Extra 'Tools' menuitem: Absolute Poker - {13C1DBF6-7535-495c-91F6-8C13714ED485} - C

Documents and Settings\kris\Start Menu\Programs\Absolute Poker\Absolute Poker.lnk
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C

PROGRA~1\MICROS~2\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C

PROGRA~1\MICROS~2\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C

PROGRA~1\MICROS~2\INetRepl.dll
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C

Program Files\Titan Poker\casino.exe (file missing)
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C

Program Files\Titan Poker\casino.exe (file missing)
O9 - Extra button: Betdirect Poker - {6709727A-27C0-4822-ACF7-C572E1899CD6} - C

Program Files\betdirectMPP\MPPoker.exe (file missing)
O9 - Extra button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C

PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Gnuf Poker - {A99C8F70-4D5B-482c-8854-05BC0BB8B182} - C

Program Files\Gnuf\Poker\MPPoker.exe (file missing)
O9 - Extra button: bet365 Poker - {B1BA4A3F-1C95-497b-9F82-F8DA4A5C89DD} - C

Program Files\bet365MPP\MPPoker.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C

Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C

Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: Ladbrokes Poker - {C2A80015-C447-4dc4-82DD-AED83D6ED57E} - C

Program Files\ladbrokesMPP\MPPoker.exe (file missing)
O9 - Extra button: Dream Poker - {D45D9D5F-B491-4c95-8B05-FA6B6C69CA82} - C

Program Files\dreampokerMPP\MPPoker.exe (file missing)
O9 - Extra button: Bodog Poker - {F47C1DB5-ED21-4dc1-853E-D1495792D4C5} - C

Program Files\Bodog Poker\BPGame.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C

Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C

Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c

program files\bonjour\mdnsnsp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C

PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C

Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C

Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C

WINDOWS\ATKKBService.exe
O23 - Service: Autorun CDROM Monitor - Unknown owner - C

WINDOWS\system32\TDSupportApp\cdrom_mon.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C

Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C

PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C

PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C

Program Files\Bonjour\mDNSResponder.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C

Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: KService - Kontiki Inc. - C

Program Files\KService\KService.exe
O23 - Service: NBService - Nero AG - C

Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C

Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C

WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C

WINDOWS\system32\HPZipm12.exe

**trickrick** · #12 (**permalink**) 05-05-2008, 13:41

Originally Posted by kompressaur

run this kris/rick and post up the results (do scan and save log file)

http://files3.majorgeeks.com/files/4...ckthis_sfx.exe

Link desnt work ?

kristobal · #13 (**permalink**) 05-05-2008, 15:12

just managed to get kaspersky keys, all installed and working - had no pop-ups yet

**kompressaur** · #14 (**permalink**) 06-05-2008, 20:15

Sorry folks ive been off line. Lets see

Link desnt work ?

That will be the viruses Rick stopping you from getting the tools to get rid of it. Its fiendish.

Glad to see you got it fixed kris. From your scan thjough

CWINDOWS\system32\TDSupportApp\cdrom_mon.exe

R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - CProgram Files\AskTBar\SrchAstt\2.bin\A5SRCHAS.DLL

O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - CProgram Files\AskTBar\bar\2.bin\ASKTBAR.DLL

look worrying. Ask toolbar? This looks horrible-

O10 - Unknown file in Winsock LSP: cprogram files\bonjour\mdnsnsp.dll

I had that bonjour virus thing kris and it lead to bigger problems. A litlle on it here
Kaspersky Lab Forum > My Computer Restart with this new virus( I Think)

but still no definate of it being a virus . let me check. im sure it is. Actually best leave it undeleted kris as maybe i dont know what i am talkign about. im sure its a file that you get off the p2p networks. Pretending to be i-tunes or something.