At Ask Me Help Desk you can ask questions in any topic and have them
answered for free by our experts. To ask questions or participate in
answering them you must register for a free account. By registering you
will be able to:
Get free answers from experts in any of our 300+
topics.
I keep getting these popup ads that start off with a URL that includes "documentsandsettings/localsettings/temp" and then changes to the ad's URL. I've noticed it also creates folders labeled DlfnTmp1, DlfnTmp2, etc. in the documentsandsettings/localsettings/temp folder. I can't figure out what's causing these popups. I've already uninstalled DeskAd Service using Control Panel -> Add & Remove, but the problem is still occuring. When I run Spybot, it says there's no spyware, and yet I keep getting these popups.
When I run ad-aware, I get DealHelper. So I tried a search on the net for removal instructions, but none of the files that the instructions list to delete are actually on my computer.
It seems to be only on IE, but occasionally they come up even when I'm using FireFox. Any idea what's causing this? It's been happening ever since I visited dictionary.com and not only were there a lot of popups blocked but it kept requesting access to download .exe files and eventually caused my computer to crash. (That got fixed when I used restore and restored back to the day before I visited dictionary.com.)
I look at task manager, check the Processes that are running. If you want, post a list or a screenshot for review here. I look up suspicious ones and find out what they are. It can take a while but I think it's worth it in the long run, to know what each does - it would be nice to start posting a list of them here.
Once you find the bad process, you can get it cleared. Just search for the process name and find out how to clear it (google it).
Also, mention here which OS you use, windows xp/2000/etc. - good to know for troubleshooting...
One more thing - there's a hosts file and an lmhosts file, check there too. located somewhere around here:
C:\WINDOWS\system32\drivers\etc
(that's winxp)
Open it (use notepad) and look for entries in it. All, or nearly all lines should be commented out with # symbols. There might be one or two at the end that are not commented, but certainly not any suspicious looking ones.
good thinking, i can't really know unless i know which os either, but i do know that if you are getting popups in firefox you either have a virus bringing em in or adware/spyware. oh and plus firefox is now 1.01 now, they had a serious update needed on count of a hole in the program, but they caught it before it happened unlike microsoft waiting till it happens
either do type it out or just post a pic of the task manager running with it totally open and showing all the tasks. basically just hit the print screen button right on the right side of the backspace button and go to paint and click paste and cut and copy the task manager to show. either that or type it.
I look at task manager, check the Processes that are running. If you want, post a list or a screenshot for review here. I look up suspicious ones and find out what they are. It can take a while but I think it's worth it in the long run, to know what each does - it would be nice to start posting a list of them here.
Once you find the bad process, you can get it cleared. Just search for the process name and find out how to clear it (google it).
Also, mention here which OS you use, windows xp/2000/etc. - good to know for troubleshooting...
One more thing - there's a hosts file and an lmhosts file, check there too. located somewhere around here:
C:\WINDOWS\system32\drivers\etc
(that's winxp)
Open it (use notepad) and look for entries in it. All, or nearly all lines should be commented out with # symbols. There might be one or two at the end that are not commented, but certainly not any suspicious looking ones.
i look at task manger, check the Processes that are running that sort of thing gives an idea of what may be going on, but not all the time, some can hide in the registry, etc.
unlike microsoft waiting till it happens 
gives an idea of what may be going on, but not all the time, some can hide in the registry, etc.
Linear Mode
