<font color=deepskyblue>I seem to have a Pop-up Program imbedded in PC. Whenever I go on the internet, I get numerous Pop-ups from <font color=yellow>Save Now</font>.

Has anybody had this problem? And does anybody know how to get RID of them?</font>

SURELY you've seen the millions of pieces of advice on here all telling you to use Ad-aware and Spybot Search and Destroy? If not, download those and run them, probably just spybot will do.

<font color=skyblue>Spybot and Adaware will not help you with this problem entirely. You got this by downloading Bearshare. Right? Ok...to remove it, first get that program I told you about called "Hijack This". It will remove certain inbedded craps that keep it inside your PC. Next, go to add/remove programs and remove SaveNow and Weathercast. Third: Use Adaware to remove the remaining pieces. Then reboot and you will be clean. I have to do this everytime I upgrade bearshare. </font>

Also, download google toolbar (i think the addy is googletoolbar.com, but if not just search for "google toolbar" at google.com)

This installs a searchbar on the top of your internet browser, but it also blocks most pop ups. holding control while you click a link will allow popups for the time that you are holding down the control key.

<span style="color: lightblue">Better than the google toolbar is Mozilla Firefox. I would also recomened getting Thunderbird from that webpage if you use Outlook or Outlook Express.

<font color=deepskyblue>Sorry man, it didn't work. I downloaded Hijack This before, but couldn't find it, so I just downloaded it again. It popped well over 100 files. I deleted 96 that I was sure were trash. Then I went to Add/Remove Programs. SaveNow and Weathercast were nowhere to be found. [img]graemlins/wow.gif[/img] I still did the Adaware and Rebooted. But as soon as I started Browsing the Internet again, there came all the same popups, one after another (as many as 3 at one time [img]graemlins/madhell.gif[/img] ).

I DO have the Google Bar in place and it blocks LOTS of Pop-Ups, but SaveNow seems to be immune to it's efforts. Looks like it might be time to give Mozilla and the other one a try.</font>

spybot can find what adaware cant sometimes..

<font color=deepskyblue>Sorry man, it didn't work. I downloaded Hijack This before, but couldn't find it, so I just downloaded it again. It popped well over 100 files. I deleted 96 that I was sure were trash. Then I went to Add/Remove Programs. SaveNow and Weathercast were nowhere to be found. [img]graemlins/wow.gif[/img] I still did the Adaware and Rebooted. But as soon as I started Browsing the Internet again, there came all the same popups, one after another (as many as 3 at one time [img]graemlins/madhell.gif[/img] ).

I DO have the Google Bar in place and it blocks LOTS of Pop-Ups, but SaveNow seems to be immune to it's efforts. Looks like it might be time to give Mozilla and the other one a try.</font> </font>[/QUOTE]You can also do a search on your computer and sort by modify date. Look back at the history of the newest files. More than likely, a file was executed and is continuing to execute. If you delete the file, it will stop the popups. Unless you run the program that put that file on your system in the first place. I had one in a prefetch folder. I put REM at the beginning of all the filenames that I noticed within the timeframe the popups started and it disabled it. A firewall from that point should be able to help prevent new ones from infecting you.

Perhaps this could be of some assistance? It includes some registry editing in the manual removal guide, but since you only delete two values from the run section there should be no problems at all. [img]smile.gif[/img] I don't have to remind you that you shouldn't remove anything else do I. ;) [img]smile.gif[/img] I hope this helps.

[ 04-18-2004, 08:05 AM: Message edited by: WillowIX ]

Yes, i believe everyone has Pop-up programs installed behind your PC that you never know about.

Myself, i have a few installed and i get rid of them, but they come back. Theres GAIN, and GATOR, and PILOT and PRESTO! FILEMANAGER,.... -_-

I installed Ad-Aware 6.0 from Lavasoft (guess you might find it at www.lavasoft.com) alternatively, go to download.com and search for Ad-aware.

I have run Ad-Aware twice this year, and have picked up over 96 object and programs that do all that dirty stuff... i was shocked, considering i only go to yahoo email, ironworks, 3D Total and my online game Trollscantsing.

Dont be too shocked really mate... these pop-ups are a result of spyware. They are inclosed text applications that run when certain sites are accessed, i figure i get mine through Yahoo or MIRC. TSpyware is just a system of trafficing information.

My Advice:
Download Ad-Aware 6.0 and run a system scan. Quarentine and delete the files (Their data miners - VERY BAD!!)

And go to Add/Remove Programs and remove as many of them as possible. (ie. GAIN, PILOT, GATOR, PRESTO! FILEMANAGER etc) Usually anything suspicious that you never installed on your puter is potentially a spyware program. Most are less then 10mb in size.

Finally, empty your entire Temporary Internet Files (including Cookies, but if you dont want to loose your cookies, then no need to delete ;) and make sure your Rubbish bin is empty)... Restart your computer, and then Run Norton Antivirus (or an alternative virus checker) and scan your system. Some (Not all) Spyware can contain viruses, and their just as bad as Data Miners

----

I hope this helps you, and anyone else suffering similar problems. Alas, you dont have to do everything i said even though i do it once a month to keep my computer running good, but i do advise Ad-Aware [img]smile.gif[/img]


Take care all
Marikai

Marikai - if you read, Cerek already tried Adaware. Also, deleting temp. internet files will not get rid of anything like this. It's wierd cos I've had SaveNow before but managed to get rid of it quite easily. You must have a bad case, Cerek ;) Anyway, yeah trying Opera or Mozilla is a good idea. Like I've said many times, I'm currently using Opera. Much slicker than IE, the only downsides being a small ad bar unless you subscribe and that a minority of pages aren't fully compatible due to stupid Microsoft-only code used by some people - then you can always load up IE for a bit. And yeah Moz and Opera both have built in pop-up blockers anyway. Opera is clever as it allows pop-ups that you ask for by e.g. clicking a link, but blocks all others.

<font color=skyblue>Go into the registry and type in the name "savenow" in the search field and delete every file or folder that comes up with that name. After deleteing one, hit F3 to continue the search. It is safe to do so, as long as you trust yourself to not delete anything that does not have the name savenow in the title. Note...do not delete files associated with stuff like spybot, that has the name savenow...as that is spybot's file to try to protect you from savenow. It will be clearly indicated.

I have done this when other methods do not work. Wait for me to log into MSN sometime if you want me to help out. </font>

You can get gators even when you chose for a webpage to "save your password on this computer for the next time you come back" auto filler things. Or so Spybot says.

The MySearch bar blocks quite a few popups, The avant browser makes it easier to get rid of them, it's also easier to browse as it stores the frames on it's on toolbar instead of on the main comptuer frame.

<font color=deepskyblue>Thanks again for all the advice. I downloaded SpyBot Search and Destroy. I thought I had gotten it at the same time I downloaded Adaware, but apparantly not.

I scanned my system and FINALLY found several files and folders associated with <font color=yellow>SaveNow</font>. I also found several items from Gator, Hitbox and other unsavory programs. I think I finally manage to delete the <font color=yellow>SaveNow</font> items from my system. There were two application files that SpyBot could not eliminate on the original scan, but rebooting the computer and running a second scan seemed to clear the problem up.

I'm starting to browse the internet again, just to be sure. Keeping my fingers crossed in the meantime.

BTW, I don't think I EVER had BearShare on this and I eliminated all the other P2P programs except for Kazaa (Lite and Version 2 - but I never run V2), so I don't know where the <font color=yellow>SaveNow</font> crap came from originally. But as long as it's gone, I also don't care.</font>

<font color=deepskyblue>Looks like SpyBot finally did the job for me!!! [img]graemlins/yippee.gif[/img] [img]graemlins/yippee.gif[/img] [img]graemlins/yippee.gif[/img]

While I wasn't online as long as usual and didn't go into as many sites as normal, I still managed to have NO POPUPS from <font color=yellow>SaveNow</font></font>. [img]graemlins/thumbsup.gif[/img]

<font color=orange>Spybot Search and Destroy is one of my fav altime download programs! No computer is complete with out it! [img]smile.gif[/img] </font>

You should listen to The Vask more often ;)