Expert: Brian Benosky - 3/29/2008

Question
Hi Brian
I had enough spare time to do the steps you outlined.
After reboot my computer is actually working a bit faster BUT CiD's still there. One just popped up now.
One thing I couldnt do was access the link you gave :
http://nb.dns-look-up.com/bins/uninstall.exe
I get a window that says my security setting wont allow it.
I turned off my anti virus and disabled the windows firewall but sill get the same message. Help!

Answer
Hi Barry

If you want, you can send me an email at numbersix6@yahoo.com and I will attach the uninstall.exe in a reply for you.  I would also suggest turning off System Restore until the popups are cleaned out.  
1. Click Start, right-click My Computer, and then click Properties.
2. In the System Properties dialog box, click the System Restore tab.
3. Click to select the Turn off System Restore check box. Or, click to select the Turn off System Restore on all drives check box.
4. Click OK.
5. When you receive the following message, click Yes to confirm that you want to turn off System Restore:
You have chosen to turn off System Restore. If you continue, all existing restore points will be deleted, and you will not be able to track or undo changes to your computer.
Do you want to turn off System Restore?
After a few moments, the System Properties dialog box closes.

After disabling System Restore, try the following:
Download NoLop to your desktop from here:
http://www.spywareedge.net/nolop/NoLop.exe
Reboot your computer into SafeMode:
Press F8 key continuously before the Windows logo appears, then choose Boot Windows in Safe Mode with Networking from the menu
Once in Safe Mode, open Internet Explorer and run a full system scan from here:
http://www.eset.com/onlinescan/
When finished, double-click to run NoLop.exe on your desktop.
Click the button "Search and Destroy." It will searched for infected files on your computer.
Click "Reboot" if it finds infected files and prompt you to do so.

Let me know how this works, or if you need me to send you the file.

Brian