Pop Up annoyance

[halutzparilla]

my browser are set to FF but for some reason while browsing some respectable sites, this link keeps poping up...

https://www.premiergoldcard.com/apply/app_info.php and alot more link... having issues with IE7 being dormant suddenly became active...

i'm using Ad-aware Plus as a realtime tracker blocker and Pop-up Blocker but for some reason its not kicking in...

and to the point also the popups are showing up using IE7...

okie i just installed a Zone Alarm Firewall to help the issue, i'm gana it for a day or two and see what happend, this thing popping up every 30 minutes to 1 hour even during browsing HL site...

need your help guys...

[halutzparilla]

wow, even with the ff:

AVG Free Anti-Virus
Adaware SE Plus with Ad-Watch
Zone Alram Free Firewall

the Pop-up starting with CiD: /link/ still pops up... i dont know what to do next...

it keeps using IE7...

[Carl Martin]

Something is hiding. Try SpyBot S&D and even Windows Defender. (Once or twice I've been working on infected machines and it found malware the others missed.) AVG also has free AntiSpyware which I've used, but it's very s-l-o-w. If those don't do the job, run a HijackThis scan and post the results here for the guys to analyze.

Carl

BTW, once you solve the problem, be sure to get rid of your recent system restore points and create a new "clean" one.

[halutzparilla]

****WARNING DONT CLICK ANY LINK FOLLOWING THIS MESSAGE
****THIS IS JUST A TUTORIAL ON HOW TO REMOVE THE CiD ADWARE/MALWARE...


i found the solution first its Uninstalling the CiD Help entry on the Add/Remove Programs at Control panel...

then removing the entry by Use of Windows Explorer, click to C:\WINDOWS\system32\drivers\etc\, use a text editor to remove the following entries from the hosts file:

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 DriveCleaner - Home ## added by CiD
127.0.0.1 ErrorProtector - Fix damaged documents, video, music, images. Registry optimization ## added by CiD
127.0.0.1 ErrorSafe - Fix computer problem. Fix slow computer, corrupt file and hard drive errors. ## added by CiD
127.0.0.1 SystemDoctor - Fix damaged documents, video, music, images. Registry optimization ## added by CiD
127.0.0.1 www.utils.winfixer.com ## added by CiD
127.0.0.1 WinAntiVirus Pro 2005 - powerful antivirus protection against all viruses ## added by CiD
127.0.0.1 WinAntiVirus Pro 2005 - powerful antivirus protection against all viruses ## added by CiD
127.0.0.1 WinAntiSpam - ## added by CiD
127.0.0.1 WinAntiSpyware - spyware protection. Remove spyware, adware and trojans. ## added by CiD
127.0.0.1 WinAntiSpyware - spyware protection. Remove spyware, adware and trojans. ## added by CiD
127.0.0.1 WinAntiVirus Pro 2007 - Antivirus protection against all viruses, hackers, spyware ## added by CiD
127.0.0.1 WinAntiVirus Pro 2007 - Antivirus protection against all viruses, hackers, spyware ## added by CiD
127.0.0.1 WinDriveCleaner - ## added by CiD
127.0.0.1 www.windrivesafe.com ## added by CiD
127.0.0.1 www.winfixer.com ## added by CiD
127.0.0.1 winfixer spyware anti removal free at winfixer2006.com ## added by CiD
127.0.0.1 WinSoftware ## added by CiD

CiD Help is a Malware and Adware. You could get this Malware if you download a software from some un-trusted web sites.

unfortunately, no anti-adware anti-spyware anti-virus anti-malware are capable of removing this malware/adware, i found out that this malware borruws itself even more after un-install unless you remove the above mentioned entry at HOST FILE...

i hope noone will experiences this adware...

[Carl Martin]

Glad you got it sorted out. Nasty stuff. I'm a firm believer that a very liberal dose of corporal punishment (read: 40 lashes) is the appropriate punishment for the originators of this stuff. Not a bad deterrent either.

Carl

[halutzparilla]

this is very PITA to uninstall...

[Yellowhello]

Originally Posted by halutzparilla

this is very PITA to uninstall...

But did you get it out of your system? Maybe a clean system install is the only option...

[halutzparilla]

yeah i did got it out just to PITA, it took me 4 attempts before it uninstall then i started cleaning up the HOST FILE...

[polobunny]

Originally Posted by Carl Martin

Glad you got it sorted out. Nasty stuff. I'm a firm believer that a very liberal dose of corporal punishment (read: 40 lashes) is the appropriate punishment for the originators of this stuff. Not a bad deterrent either.

Carl

Death sentence.... hehehe
BUt thinking about it, I wouldn't have work anymore, so at least i'm making money by removing those from time to time. :P

[Yellowhello]

Originally Posted by halutzparilla

yeah i did got it out just to PITA, it took me 4 attempts before it uninstall then i started cleaning up the HOST FILE...

Ah, glad you got it all fixed then.