Spyware problem: Firefox opens up random tabs

[AssaultRifle]

I'm getting random pop-up advertisements for a program called "Registry Defender" which I know for sure is a virus, and several other programs.

I have already scanned my computer with Avast and Malwarebytes and they don't detect any malware. How can I get rid of this virus?

 

[unifex]

Depending of what your configuration is, the choices may vary, but I would recommend booting up with a LiveCD (i.e. not with your native OS), then scan your hard drive with a few of the online scanners - nowadays most major antivirus vendors offer free online scans. If your LiveCD contains some antivirus software, use that as well.

After that, you could go manually through your Program Files, with the LiveCD nothing will be hidden (or at least you can easily show hidden stuff) and find any file that may have a reference to the "Registry Defender" or any other program that bothers you. Just make sure to erase all instances of them, including from prefetch folders.

If everything fails and you have no earlier restore point to fall back to, there is always an option to re-install the OS, although personally I've never done that in a situation like that - it seems to drastic a move to me.

 

[mitchell65]

I'm getting random pop-up advertisements for a program called "Registry Defender" which I know for sure is a virus, How can I get rid of this virus?

What makes you think Registry Defender is a virus?
Can you post a screenshot of one of the pop-ups please?

 

[Tews]

Registry Defender 'purports to scan and detect malware or other problems on the computer, but which attempts to dupe or badger users into purchasing the program by presenting the user with intrusive, deceptive warnings and/or false, misleading scan results.0' It's a rogue security program, which I believe should be removed.

source

 

[thathagat]

What makes you think Registry Defender is a virus?

it seems to be a rogue/adware....

Registry Defender bleepingcomputer.com

registry defender Adware.Win32

 

[AussieGuy92]

here try superantispyware it's great at getting rid of of rouge programs

heres link to the portable version (virus wont stop it from running)

SUPERAntiSpyware.com - SUPERAntiSpyware Portable Scanner

update it and run a full scan and post back the results

hope this helps

-Andrew

 

[Corrine]

What makes you think Registry Defender is a virus?

it seems to be a rogue/adware....

Registry Defender bleepingcomputer.com

Also note that Registry Defender is generally via the Vundo Trojan. This is most often a result from outdated, vulnerable Java software installed on the computer.

Please do the following:

Go to add/remove programs and uninstall any item listing J2SE or Java Runtime Environment in the name other than the most recent update, which is Java SE JRE 6u21, IF old versions are found, please download JavaRa and unzip it to your desktop.

• Double-click on JavaRa.exe to start the program. (Windows Vista users Right-click JavaRa.exe > Select Run as Administrator)
• Click on Remove Older Versions to remove older versions of Java.
• A logfile will pop up. Please save it to a convenient location.

Then download and install Java SE Runtime Environment (JRE) 6 Update 21.

Download Link: Java SE Runtime Environment 6u21

Note: UNCHECK any pre-checked toolbar and/or software options presented with the update. They are not part of the software update and are completely optional.

Next, please download Malwarebytes' Anti-Malware to your desktop.

• Double-click mbam-setup.exe and follow the prompts to install the program.
• At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, be sure Quick scan is selected, then click Scan.
• When the scan is complete, click OK, then Show Results to view the results.
• Be sure that everything is checked, EXCEPT items in System Restore as shown in this sample:
  
  
• Click Remove Selected.
• When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be found here on Windows XP: C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt and C:\Users\UserName\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt on Windows Vista and Windows 7.

If you are still having problems, post a copy of the MBAM log in your next reply.