Computer Security & Viruses/CID popup removal & startups
Expert: James Filmer - 1/6/2010
QuestionQUESTION: Hi,
I inherited a Dell Inspiron 1100 laptop from my daughter. It was having problems so she bought a Mac & I really needed a laptop.
Anyway, I have installed & ran various programs such as Ad-Aware, Spybot, Windows Defender & Oibit Advanced System Care. I have defraged, disc cleanup & all the typically advised steps. I even went to add/remove programs looking for related installs as suggested. I STILL am receiving CiD popups.
Also, it's very slow upon startup but I don't know which items I can safely remove. I've been to Pacman & other sites & none of it makes sense to me.
Thank you so much for your help!!!
ANSWER: Hi Deb,
SuperAntispyware free edition should detect and remove it. Malwalebytes, e-squared - the free versions should also, and SpyDoctor (enrgy21.com has links to some of them). For more info use a search engine - CiD popup removal (or similar words). If you'd prefer to do it manually, please let me know.
As you suggested ("...don't know which items I can safely remove."), the solution to your slow start-up (if removing the CiD threat doesn't speed it up), may be other software, or a system maintenance issue, or could be a combination of the two. What Firewall and anti-virus software are you using? It could also be a security application incompatible with another, or software or toolbar automatically starting with your system, that can be safely stopped or removed, depending on your preferences.
Since you "inherited" the PC, finding the solution may take some time if other error messages aren't popping up, but removing CiD is definitely recommended.
And, though I wouldn't recommend you make changes yet unless you know what you're doing, see also:
http://www.pchell.com/support/how_to_speed_up_windows_boot_time.shtml
and
http://www.askdavetaylor.com/speed_up_windows_xp_startup.html
---------- FOLLOW-UP ----------
QUESTION: I got excited when SuperAntispyware found many items, but I still get the popups! I've already googled the problem & downloaded the programs including SpyDoctor to try to remove previously.
I'm using AVG anti-spyware & firewall but I notice the firewall keeps getting disabled every time I start it up.
I just received your message today so I haven't tried to 2 links yet for speedup you suggested. It is so slow, I have been all day checking things out on it.
ANSWER: But, if you feel you need to "purchase" Spydoctor to remove it and would rather not, please let me know.
If you disable System Restore, reboot, run SuperAntispyware again, remove threats and reboot, that should do it. If you need help disabling S/Restore, let me know. And we can remove it manually too - will help you with that if necessary.
You're using AVG's Firewall, meaning you're using AVG's security suite? Please give me the exact version.
Are you sure you have Windows Firewall disabled? Might you have any other Firewall software on your system (like Norton, Trend Micro of McAfee) that might be be completely removed or disabled?
Just to be clear, startup is slow, or the entire system? Are the any other alerts or error messages - from AVG, the system, or something else?
---------- FOLLOW-UP ----------
QUESTION: wow...these things are persistent!
I installed more ram so now the speed is no problem.
I have windows firewall and did have to fix that.
I did as you said above...actually 2 times. I even ran AVG scan afterwards and it showed clean. Each time SuperSpyware removed them, but here they are again...
http://www.adserver5.com; CiD:
http://media.fastclick.net; http://pogo.com
I have googled different ways to remove--I even added Firefox adblock plus. Nada.
Answer
Did you see these posts?
http://www.spywareinfoforum.com/index.php?showtopic=86853
and
http://forums.pcpitstop.com/lofiversion/index.php/t127000.html
Adserver5.com and mediafastclick pop ups are related to 3rd party cookies
What browser are you using? I can show you how to have more control over 3rd party cookies in IE or any browser you're using, but in Firefox and other browsers that don't use ActiveX, that will make a difference too.
Also, do you use Spybot's immunization feature? Open Spybot to Help>Index>Immunization. Enable that feature, fully immunize, and check for updates at least once a week.
http://www.siteadvisor.com/sites/pogo.com/summary/ shows that while pogo is safe, it does involve 3rd party vendors (and their cookies) that need to be more controlled according to your preferences.
To further restrict 3rd party cookies for control of pops and ads in IE go to Tools>Internet Options>Advanced>Override automatic...Accept First-Party Cookies>Check Always allow session cookies and Block or Prompt 3rd party cookies.
Test both ways, Blocked works for me in all browsers and can still access what I want but you may want to be prompted. Also, most other browsers don't use ActiveX which can be used by sites for pop-ups and redirects.