Help, my computer is freaking out

[utopian]

My computer has downloaded some kind of program that downloads other programs. I'm getting bombarded with pop-ups, and my homepage keeps changing. I uninstalled a bunch of programs that I've never seen before, and my browser has new toolbars that I don't want.

Does anyone know what to do about this?

[wryter2000]

1. Do you have virus software?

Try scanning for a virus and get rid of it.

When you get things straightened out, consider buying Go Back. Roxio makes it. With it, you can take your computer back in time. I've also used it to recover files I've written over by mistake.

[catmandu57]

3. Yes

go to http://www.download.com or http://www.webattack.com and down load adaware and spybot. You've been targeted by a greedy ass unscrupulous quite possible repuke lowlife. Download adaware and spybot run them religiously and you'll be okay.

[roughsatori]

11. After you download and run "Spybot" that Feddie mentions

Use the Spybot "immunize" feature. Also, check the boxes in Spybot that will let you lock your tool-bar from being hijacked. It is very easy to use and comes with a simple tutorial.

[Mikimouse]

9. Tell me more about Go Back, please

I archive on a zip disk and on 3 1/2 as well, and have survived a number of invasions and crashes without losing anything crucial, but my wife has not gotten into the habit of archiving things and, as a result, has lost parts of research papers she was working on. She has also overwritten documents inadvertantly. It breaks my heart (out of empathy for her) when it happens. This might be a great gift package to get her. Let me know.

[wryter2000]

10. Here's a link

www.goback.com It's sold my Symantec now, I guess.

What it does is record all the changes you make on your computer for a specified amount of time. When something goes wrong, it can go back and unmake those changes so you can recreate your computer to the way it was in the past. Those changes aren't lost, though, so you can go looking for them if you need them.

As I understand it, any computer can do this without Go Back, but this makes it easy. You can also look for earlier versions of files.

[Mikimouse]

14. Thank you kindly, I will take a look

n/t

[Kellanved]

2. Get Spybot and Ad-aware

That combination eliminates most programs like that.
http://security.kolla.de
www.lavasoftusa.com

[Deja Q]

4. "Spybot Search and Destroy"

http://www.pcworld.com/downloads/file_description/0,fid,22262,00.asp

Of course, I found a more permanent solution: SuSE Linux 9.0 (coming October 24th!)

[Prisoner_Number_Six]

5. Boot to Safe Mode and do a virus scan

While there go to START then RUN and type in MSCONFIG. When the utility opens, go to the STARTUP tab and see if there's anything that doesn't look like it belongs there, such as anything web/internet related, or .exe programs with nonsense names (this can be a virus). Uncheck as much as possible, reboot normally, and do a second virus scan (assuming your virus program is up to date).

To boot into Safe Mode, when the reboot starts, keep hitting the F8 key until a boot menu comes up. Use the up/down arrow keys to select Safe Mode.

NOTE: MSCONFIG.EXE was not included with Win2000. You can google it and download it if needed. The XP version works fine in 2000. It is included in all other versions of Windows.

If your computer works normally after this, you can use the MSCONFIG to turn on things previously turned off. This should be done one at a time (restore/reboot, restore/reboot after each item). Slow, but diagnosing things ain't always fast or easy.

On edit: Also, go to CONTROL PANEL, then ADD AND REMOVE PROGRAMS. Uninstall anything you do not recall installing-- anything that looks internet/web related, and anything you do not ever use.

[starroute]

8. That's dangerous advice

There are going to be a lot of programs in the Add/Remove program listing you're not going to recall installing -- like your audio drivers and your modem drivers -- or browser plug-ins like Java that you don't ever "use" in the sense of opening them yourself.

And there are going to be names in msconfig you won't recognize but that perform vital tasks in your computer.

I strongly advice against removing anything without Googling it first to find out what it is and whether or not it's spyware.

Start by running Adaware and Spybot. Then you can check everything else over at leisure.

[oxycontinrush]

6. Are you sure you didn't subscribe to AOL?

Sounds like the way AOL works when things are set up properly.

Come on... you can admit it. You're among friends.

[lcordero]

7. can you see if you have something called f1.dll?

[utopian]

12. Thank you thank you thank you

Spybot found all kinds of nasty things, and a virus scan detected 5 infected files.

[JasonBerry]

13. SpyBot is awesome N/T

~

[myomy]

15. Does anyone know a Mac user whoÕs ever had a virus?

.

[Kellanved]

16. actually yes

The Macro viruses affect Macs just the same (thanks to MS Office) as aPC and there are Mac viruses in the wild. Those are not as common as PC viruses (and most of them can't infect MACOS X), mainly thanks to the smaller marketshare.

Many current viruses are not really OS-dependant: they use the Mail-Client to infect a system. In theory a mail client with the same "features" would compromise a Mac just the same as a PC.

[JasonBerry]

18. Not Quite

Actually, that's not quite right. A virus is code. The code has to be written so the virus does something. Viruses that are spread via email attack certain parts of the PC operating system that is simply not in a Mac. With worms and other malware being the biggest offenders these days - these are all specific as they attack by wiping out and/or creating new dll's and executable programs that are executable only on the Windows platform. A Mac virus would have to be written for the Mac and find vulnerabilities in the operating system to deliver them and allow them to do their thing. With a PC, it's pick your exploit. With Mac, it's what exploit?

[Kellanved]

19. OK

However the illusion that a mac doesn't offer exploits is just that: a illusion. They might not be as well known, nor are they as easy to find, but they are there.
My point is: many software products offer proprietary, OS-independent interfaces. Those are the same for all versions, and thus offer the same exploits. The VBA Macros for Office are a good example for this - .net will offer even more points of attack (and although has not taken off yet, there is a chance that it might do so in the future).

[TreasonousBastard]

17. Sounds like a browser hijacker.

Won't kill your machine, but annoying as hell.

By now you say you got rid of it, but if you're using IE, as you probably are since most other browsers are immune, check your security settings in addition to virus and spyware checks.

[Nomad559]

20. Advanced settings

If your using Internet Explorer, go to ... tools - Internet Options - Advanced ... make sure that - Enable Install On Demand (Internet Explorer) Is UNchecked.

[MojoKrunch]

21. Webroot Spy Sweeper!

It caught things the other two did not on my system.

Consider switching to Mozilla.

Mojo