Need Help Immediately Computer's Infected With Adware.Systemprocess!!! Can't get rid of it. Any suggestions?

Question

We don't have a clue how, but all our computers have gotten infected with Adware.Systemprocess. Our Norton detects it and says it removed it, but it keeps coming back and Norton keep detecting it over and over again. None of our other spyware programs detect it or remove it. We're using Pest Patrol, Lavasoft Ad-Ware SE Personal, Spybot Search and Destroy, Spyware Blaster, and Norton. If you know any free programs that will get rid of this nusience please let me know ASAP before the program goes into higher mode. And also the Windows Malicious Removal tool can't get rid of it either!!!

Additional Details

I've already been in safe mode and still can't get rid of it. It took me 18 hours to build this computer I can't do it again. And my dad's infected to!!!

We've been in computers for several years. And we own our own little business. I hate to say though this is the first time we've encountered anything like this. And sad thing is it happened without warning. I just came in my room got on my computer and boom Norton said I had it. I also noticed Norton was blocking and IP port maybe that's where it came from?

To the guy that suggested Spyware Blaster was at fault well we thought the same thing except that I deleted Spyware Blaster from my computer and eventually Adware.Systemprocess still came back so I don't know if Spyware Blaster could cause it or not, but I had the same problems as you had.

Answer 1

Best Answer - Chosen by Asker

I just had the same thing happen today, Norton Security Online detected/removed "Adware.Systemprocess". After looking at it in more detail, my case looks like a false alert related to the combination of Norton & Spyware Blaster. Since you mention both, maybe you're getting this false alert as well. This only appeared after the newest Norton antivirus update, so it's possible it's an issue with the update. Anyways, I'll describe what I noticed, and you can decide if it applies to your situation.

Norton says the threat is "Adware.Systemprocess", but when I "export results" from Norton's scan, it lists only 6 registry entries as deleted:

...\Internet Settings\P3P\History\
bfast.com - Deleted
commission-junction.com - Deleted
fastclick.com - Deleted
fastclick.net - Deleted
linksynergy.com - Deleted
qksrv.net - Deleted

Everything else is "No action required", which I assume means Norton didn't find the other adware registry entries and files on my computer.

Here's some info I found on what those "P3P" registy entries are:
http://support.microsoft.com/kb/182569

Anyways, here's the interesting part: after Norton detects/removes the adware, when I check Spyware Blaster, it lists six protections disabled... pretty much the same sites listed above.

If I enable all protection in Spyware Blaster, and scan with Norton afterwards, Norton will detect/remove the adware, and I find the same six protections are disabled again in Spyware Blaster. If I leave those six items disabled within Spyware Blaster, the Norton scan is clean. I tested this a couple of times.

So, looks like Spyware Blaster adds those sites to the registry to block them, and Norton sees those sites, thinks they are part of Adware.Systemprocess, and removes them from the registry... which effectively unblocks them... confusing!

If any of your other antispyware programs blocks sites like how Spyware Blaster does (I know Spybot has an "immunize" feature that is similar), it's possible they could be causing the false alert.

Well, that's the details of my experience, check it out and see if your case is the same. I hope so!

Asker's Rating:

Asker's Comment:

That's the exact problem my dad and I are having. Sad thing is I wish I knew how to get it fixed cause I don't want any spyware protection disabled if possible. My virus protection update to 11/11/07 and it still caused a problem with Spyware Blaster so I don't know how to fix it.

Answer 2

i would turn off system restore, boot into safe mode, run nortons again, and all other scanners.

Answer 3

http://www.symantec.com/security_respons…

Follow the instructions.Pest Patrol is adware & stay off of porn sites.(JOKE)

Answer 4

It sounds like you have a serious need to infect yourself. You've got tons of crapware on your system and are still wondering what else you can install???

Most likely one of those freeware solutions you have installed is what is infecting you and/or you are continuing to run the same program or go to the same website that is infecting you or both.

I would suggest that you uninstall all of the freeware and force an update of Norton and then after you turn OFF system restore and close out of all programs... you run a complete scan. Then double check that scan by doing a web based scan from symantec.com as your Norton may need to be completely uninstalled, reboot, and reinstall.

I would then clear out the cache and if you still encounter a problem take the machine to a reliable and qualified technician who can properly troubleshoot the issue and who can train you on how to stop infecting yourself and hopefully instill some common sense.

Good Luck

Answer 5

turn system restore off
http://www.youtube.com/watch?v=QDsnIYAgj…
boot in safe mode
http://mypchelp.blogspot.com/2006/10/boo…
Now run norton antivirus, and let it delete all the infected files
(if you have any manual removal instructions, this is the place where you should delete the files/ registry entries manually)

Now boot normally
turn system restore On

Answer 6

Use SPYWARE DOCTOR www.pctools.com
COMODO FIRWALL AND ZONEALARM FORCE FIELD

Answer 7

Go to start-Run-...Type---msconfig. press ENTER. Look for unwanted program in STARTUP sub menu. Un check any such program. Must research about the program before un checking any program on Google. RESTART AND RUN YOUR SPYWARE REMOVAL AND ANTI VIRUS PROGRAM. GET IT DELETED. Know details from http://fastncleancomputer.blogspot.com/2…

Source(s):

http://fastncleancomputer.blogspot.com/2…