A ver quien me puede echar un cable...
Desde ayer por la mañana cuando entro en el explorer a mirar cualquier web se me abre un popup de http://www.adblaster2.info y lo más jodido es que a partir de entonces no puedo cerrar las ventanas del explorer que vaya abriendo, salvo la del Popup de los huevos. Le doy a finalizar tarea y de da un fallo del explorer de estos que te dice "enviar" o "no enviar informe de errores".
jelp mi, plisssssss!!!
POPUPS, y fallos en el explorer...
Moderador: MODERACION
POPUPS, y fallos en el explorer...
BACKMAN, OAW, 24ª FLOTILLA
-
akerberg
Hola a todos!
Description
PowerStrip is an IE toolbar with a search field and link buttons. When you use a targeted merchant site, PowerStrip silently sets the afffiliate ID, so as to steal commission fees from your web shopping.
Note: this is unconnected to the video output tweaking utility also called PowerStrip.
Variants
PowerStrip/PSSetup and PowerStrip/PSOCX are two different versions of the ActiveX installer control used to install the toolbar and commission hijacker.
Distribution
Installed by ActiveX drive-by downloads in pop-up advertisements.
What it does
Advertising
No.
Privacy violation
No.
Security issues
Yes. Can download and install arbitrary unsigned code, as an update mechanism. Connects to its controlling server at verschk.com to ask for software and target list updates.
Stability problems
None known.
Removal
There is a 'PowerStrip' entry in Add/Remove Programs, but it requires an Internet conection and ActiveX to work, and only removes the toolbar itself, not the updates checker, commission hijacker or the installer control (which can be used on any web page to reinstall PowerString).
Manual removal
Open the registry (click 'Start', choose 'Run', enter 'regedit'), and find the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run. Delete the 'LSvr' and 'LTDMgr' entries on the right. Now find the key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run and delete the 'PowerStrip' entry.
Next, open a DOS command prompt window (from Start->Programs->Accessories) and enter the following commands:
cd "%WinDir%\System"
regsvr32 /u "\Program Files\PowerStrip\PowrStrp.dll"
Restart the computer and you should be able to delete the 'PowerStrip' folder in Program Files, and the 'Presentia' folder inside Common Files (in Program Files). You can also open the Downloaded Program Files folder (inside the Windows folder), right-click the 'PowerStrip Setup' (PSOCX variant) or 'PSSetup Class' (PSSetup variant) entry and choose 'Remove'.
If you like, you can also delete the registry keys HKEY_CURRENT_USER\Software\PowerStrip and HKEY_CLASSES_ROOT\LSvr.Application to clean up.
Description
PowerStrip is an IE toolbar with a search field and link buttons. When you use a targeted merchant site, PowerStrip silently sets the afffiliate ID, so as to steal commission fees from your web shopping.
Note: this is unconnected to the video output tweaking utility also called PowerStrip.
Variants
PowerStrip/PSSetup and PowerStrip/PSOCX are two different versions of the ActiveX installer control used to install the toolbar and commission hijacker.
Distribution
Installed by ActiveX drive-by downloads in pop-up advertisements.
What it does
Advertising
No.
Privacy violation
No.
Security issues
Yes. Can download and install arbitrary unsigned code, as an update mechanism. Connects to its controlling server at verschk.com to ask for software and target list updates.
Stability problems
None known.
Removal
There is a 'PowerStrip' entry in Add/Remove Programs, but it requires an Internet conection and ActiveX to work, and only removes the toolbar itself, not the updates checker, commission hijacker or the installer control (which can be used on any web page to reinstall PowerString).
Manual removal
Open the registry (click 'Start', choose 'Run', enter 'regedit'), and find the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run. Delete the 'LSvr' and 'LTDMgr' entries on the right. Now find the key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run and delete the 'PowerStrip' entry.
Next, open a DOS command prompt window (from Start->Programs->Accessories) and enter the following commands:
cd "%WinDir%\System"
regsvr32 /u "\Program Files\PowerStrip\PowrStrp.dll"
Restart the computer and you should be able to delete the 'PowerStrip' folder in Program Files, and the 'Presentia' folder inside Common Files (in Program Files). You can also open the Downloaded Program Files folder (inside the Windows folder), right-click the 'PowerStrip Setup' (PSOCX variant) or 'PSSetup Class' (PSSetup variant) entry and choose 'Remove'.
If you like, you can also delete the registry keys HKEY_CURRENT_USER\Software\PowerStrip and HKEY_CLASSES_ROOT\LSvr.Application to clean up.
gracias
Muchas gracias por tu ayuda, Akerberg. Creo que he solucionado todos los problemas con el ADAWARE. Tenía de todo metido en el ordenador, archivos, entradas en el registro, hijacks del browser.... de todo, vamos.
Una chulada este adaware.
Una chulada este adaware.
BACKMAN, OAW, 24ª FLOTILLA