| 0 |
Subject: Deal Helper...
Posted by: Punk42AE
- Donor [36635522] Wed, May 19, 2004, 22:41
Somehow today I got a thing called "Deal Helper" on my computer which makes popups come up the wazoo. Not sure exactly where it came from but I goto uninstall it and it says I have to remove all of the DealHelper ad-supported software. So what exactly am I suppose to do to KILL IT! |
| 1 | PermDude
ID: 2343587
Wed, May 19, 2004, 23:04
|
Do you have CleanSweep, by any chance? It's part of Norton SystemWorks.
pd
|
| 2 | Punk42AE
Donor
ID: 36635522
Wed, May 19, 2004, 23:06
|
Nope don't really have anything. Running McAfee FreeScan right now. What is the best virus scanner that is on the market to pick up? I should have gotten one along time ago, but hey what can ya do.
|
| 3 | TB
Leader
ID: 31811922
Thu, May 20, 2004, 00:04
|
Pestscan I never tried this before but noticed it today and I use Zone Alarm Firewall. It will run a free scan for you.
Panda Scan I have used this before to scan my comp and it is well recommended.
AVG Free Anti-Virus Protection I like this better than the McAfee I was paying for.
|
| 4 | Stephen
ID: 13428207
Thu, May 20, 2004, 08:39
|
Punk, most likely "Deal Helper" isn't a virus; it's part of a class of programs known as spyware. They track websites you visit and either sell that information to advertisers, display pop-up ads like crazy, or both. Downloading "Ad-Aware" will most likely get rid of the program... it scans your computer and quarantines any spyware it finds.
|
| 5 | Punk42AE
Donor
ID: 36635522
Thu, May 20, 2004, 11:19
|
Yep "Deal Helper" is a spyware, but somehow it also allowed alot of virus's into my poor computer. I'm gonna try that "ad-aware" program to see it if takes care of it.
|
| 6 | Matt G
ID: 24212268
Thu, May 20, 2004, 12:22
|
Adaware is a hell of a tool, use that to get rid of the spyware then run AVG, get that from the link that TB suggested, it works so much better than ANYTHING I have paid for. I live by those two programs and Windows Update
|
| 7 | PuNk42AE
ID: 444202011
Thu, May 20, 2004, 13:31
|
I've run both fo them and still have this stupid thing on here! And now i'm not sure if my computer is going slow due to the ad program or due to comcast being slow at the monent. But its taking me forever to open things. And each different page I try to view I get a popup by that company that says something like "Searching for ad".
|
| 8 | PermDude
ID: 2343587
Thu, May 20, 2004, 13:40
|
Run both AdAware and Spybot. Then reboot.
pd
|
| 9 | PermDude
ID: 2343587
Thu, May 20, 2004, 13:46
|
Haven't managed to look at this too much, but there could be a wealth of information here:
ComputerCops.biz
|
| 10 | PuNk42AE
ID: 444202011
Thu, May 20, 2004, 13:48
|
I've run both of them and cleaned up some stuff but this crap is still going on. My net keeps going in and out and still have those popups to anysite I goto.
Also ever since yesterday if a site has script errors I get a Internet Explorer script error that pops up asking me to continue yes or no. Now before I could just tell cause the left box on IE would say site had errors. But now this comes up everytime. Somehow these problems are tied together. Any clue why?
|
| 11 | beastiemiked
Sustainer
ID: 3531815
Thu, May 20, 2004, 16:50
|
Quick search of "How to remove DealHelper" brought up this site.
Deal Helper help
Plenty of other sites out there if this doesn't work.
|
| 12 | PuNk42AE
Donor
ID: 36635522
Sat, May 22, 2004, 18:56
|
Finally I got it mostly fixed. Got the new Ad-aware file today and it found 75 new items I wasn't picking up yesterday, most were Deal Helper and another was Z-file or something. Now hopefully there isn't something else hidden herer.
|
| 13 | beebop
ID: 84572219
Sat, May 22, 2004, 21:00
|
I have a similiar problem, but with keenval.d
i think i have gotten rid of it, but some things are still going slow or wont open, like yahoo mail and my homepage, http://sports.yahoo.com/nba
ive been using adaware and spybot, avg takes 2 hours to scan for some reason and that doesnt pick up anything. and Norton doesnt get anythign either. I used a trial version of noadware, it picked up that clint.dll file. i deleted that. But spybot is supposed to detect that file, i just wanna know why it didnt pick it up before.
Anyone know if theres anything else i should search for since my computer is still having some problems..??
Thanx
|
| 14 | beebop
ID: 114392220
Sat, May 22, 2004, 22:42
|
I also just found malware, and removed that.... but yahoo is still super slow, and wont always open the page.
|
| 15 | TB
Leader
ID: 31811922
Sat, May 22, 2004, 23:11
|
My adaware scan takes less than a minute. Something isn't right. Go to this site: HijackThis Download the program hijack this and run a scan. You might see right away what is wrong with your system start-up. If not, you can post it here or go to the forum at that site, http://forums.spywareinfo.com/, and ask for help.
|
| 16 | PermDude
ID: 2343587
Sat, May 22, 2004, 23:11
|
You pretty much have to reboot every time after you run one or the other.
|
| 17 | beebop
ID: 114392220
Sat, May 22, 2004, 23:55
|
Here is what came up:
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "c:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [BigPondCable] "C:\Program Files\Telstra\Cable Login\bpcable.exe" /r
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\MYPRES~1\Presario\XPHAPRF3EN\plugin\bin\PCHButton.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl
O4 - Global Startup: Compaq Connections.lnk = C:\Program Files\Compaq Connections\1940576\Program\BackWeb-1940576.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O8 - Extra context menu item: Add to AD Black List - C:\Program Files\Avant Browser\AddToADBlackList.htm
O8 - Extra context menu item: Block All Images from the Same Server - C:\Program Files\Avant Browser\AddAllToADBlackList.htm
O8 - Extra context menu item: Highlight - C:\Program Files\Avant Browser\Highlight.htm
O8 - Extra context menu item: Open All Links in This Page... - C:\Program Files\Avant Browser\OpenAllLinks.htm
O8 - Extra context menu item: Search - C:\Program Files\Avant Browser\Search.htm
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
|
| 18 | PermDude
ID: 2343587
Sun, May 23, 2004, 00:08
|
The "HKLM" entries are running processes, and it looks like you have a lot, which could be contributing to the slowdown. Unless you are listening to music right now, you shouldn't be running MusicMatch. NWiz.exe is a graphics and desktop layout tool--do you use it? Realupdate isn't needed.
You can close them down with Ctr+Alt+Delete and click on them one at a time, but you might have to go into each program and either delete it (with an uninstall) or change the settings so they only run when you tell them to run, not in the background hogging resources.
pd
|
| 19 | beebop
ID: 114392220
Sun, May 23, 2004, 00:23
|
Thanx, i couldnt see them listed when doing ctrl alt, del.can i just get hijacker to fix/remove them??? Also, i dont know if it means anything, it always seem to stop (if it does) at 38% on yahoo pages.....
|
| 20 | PermDude
ID: 2343587
Sun, May 23, 2004, 00:30
|
I don't know if they turn them off for the session or try to delete the actual program (which you might not want to do--you probably want RealPlayer, but you just don't want it on when you aren't using it, for example).
The forum TB linked is pretty good from what I recall--lots of good, basic information.
|
| 21 | beebop
ID: 114392220
Sun, May 23, 2004, 00:35
|
Thanx, i did it just then, coz it seemed to be goin faster a little bit...lol. And i think it makes backup copies aswell. i posted it on the other website aswell, nothing yet. The thing is, i never use RealPlayer though. i use windows media player. Everything is running fine except for yahoo sites, which is annoying because thats who i use for email.
Thanx for your help guys.
|
| 22 | CanEHdian Pride
ID: 46033123
Sun, May 23, 2004, 03:07
|
Another trick that I've learned is to boot up in SAFE MODE and run adaware. This helps to find any "hidden" spyware that is disguised by processes running on your computer when you boot up in regular mode.
|
| 23 | beebop
ID: 31415232
Sun, May 23, 2004, 03:20
|
Thanx, ill definitely try that next, since downloader.keenval.d is back again......
|
| 24 | beebop
ID: 10440236
Sun, May 23, 2004, 07:42
|
This is totally annoying, i keep getting the popup from avg saying downloader.keenval.d was found and to run the scan to get rid of it, which takes 146 minutes, and then it turns up nothing.
But i downloaded another browser and set that to the primary one or whatever, now yahoo works fine in explorer.... go figure....lol
Im still gonna do the reboot in safe mode tho.
Thanx guys.
|
|
|
|
Post a reply to this message: (But first, how about checking out this sponsor?)
|