I cannot remove an adware.netoptimizer file.  It was deleted once
using Norton AV 2004 but still keeps popping up even though i have the
Google P.Up blocker.  I know it can be removed . Q How? and how often
do I use cleanser.

P.S. I have tried using MSoft Remove Program routine as well as Norton

---

Request for Question Clarification by aht-ga on 30 Apr 2004 08:57 PDT

Hello tworedbirds-ga:

The Adware.NetOptimizer files are installed on your computer typically
during the installation of some other software that is
advertising-supported. Sometimes, even after you have uninstalled
"Active Alert" and "Internet Optimizer" using the Add/Remove Programs
applet, the original software will reinstall the adware.

So, first you need to determine when this first appeared on your
computer, and think about whether you installed any software (perhaps
downloaded from the Internet?) around that time. Can you think of any?

aht-ga
Google Answer Researcher

There are some freeware programs.
Adaware -- http://www.lavasoft.de
SpyBot Search & Destroy http://www.safer-networking.org/index.php?page=download
Spyware Blaster http://www.javacoolsoftware.com/spywareblaster.html

I find the following practices helpful in blocking unwanted processes
on my computer.

1. Install a firewall.  It will tell you when an unauthorized program
is trying to communicate over the internet.  You then have the option
of allowing it or blocking it.  Some adware programs, viruses, etc.
may continually check for the existence of a file on your hard drive,
if it isn't there then it will download it again.  The firewall will
catch this activity.

2. Document the processes on your computer.  Take a baseline of
processes on your computer when it is clean by Alt-Ctrl-Del.  Write
them down and then periodically check the processes that are running. 
If you notice a new process, then you can trace it to an open program
or determine that it is a spurious process caused by adware, etc.  You
can end the process and investigate further.

3. Periodically use explorer to check files created by date.  Sort the
results by latest date and see if there are any suspicious files
written recently to your computer.

Just download spybot search and destroy.  It will take care of it.

http://www.safer-networking.org/

If it really bugs you and you are willing to spend money, buy Adaware
Plus. It provides you with realtime protection so everytime the adware
is reinstalled it is deleted automaticaly. It costs $26.95, at
http://www.lavasoftusa.com/software/adawareplus/

The following outlines how I've been able to remove those annoying
adware (pop-up) adds from your pc.  Read these instructions carefully,
and use at your own risk.  Open an Internet explorer window.  I'll
explain why later in the instructions.

1. First, you want to browse through you your program files folder and
look for any folders that have names of programs you don't remember
installing.  For example, if you see a folder with an unpronouncable
name such as 'QWLVD5D' in your program files, then the contents of
that folder are likely to be malicious and should be deleted.  Before
deleting any folders you should always scan it's contents carefully,
all of the files in a peculiar folder may not be virus files.

2. Repeat step 1 in your Temp folder, temporary internet files folder
for all users on the local machine, and your WINNT folders.

3. Some virus files will not allow you to delete them, stating that
they are "Currently In Use".  You should Ctrl+alt+del --> task manager
--> Processess and then scroll down to the bottom of the list of
running services.  Virus files usually acquire a process ID, (PID) in
task manager, in the range of 1700 - 26000.  Although I have seen them
as high 1300.  Be very careful in this area, although windows usually
will not let your end a process that is critical to system operation. 
Highlight the suspicious process, for example sysupd.exe, and click
end process.  Then search your C: drive for the name of the process
you just ended.  Navigate back to the file and delete it.  In the case
of sysupd.exe, it would restart itself as soon as you would kill it. 
If you run into a file that just won't let you delete it, you should
reboot and go into safe mode.  You can get into safe mode by pressing
F8 during system start-up.  Virus programs never get a chance to start
themselves when in Safe Mode, making it easy to delete them.

4. Watch out for this trick!  Okay, you've just spent hours removing
virus files from your computer, but there is one very important step
that shouldn't be overlooked.  Many virus programs set your default
home page to a website that installs a virus program to your system. 
So, as soon as you open your web browser after spending hours
identifying and removing virus files, everything you just spent so
much time removing get reinstalled.  To prevent this nightmare
scenario, go the Internet explorer window I told you to open at the
beginning.  On the toolbar choose Tools --> Internet Options.  Click
Use blank for your home page, then delete temporary files and all
offline content.  Don't forget to press apply --> OK.  Close down IE
and restart your computer.  Hopefully you will get all of the virus
files the first time.  But keep repeating the process and you will
undoubtedly get the results you're looking for.

Earl Holland
HT Internet Services, Consultant
Chicago, IL

Only do following if you're happy editing your registry!
Firstly use add/remove programs to remove netoptimiser (again!)

Then try looking in the registry (via =>Start=>Run=> then type and
enter "regedit" and press return)
Locate the key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Any reference in the right panel to DyFuca or Internet Optimizer should be deleted.
An alternative is to search the registry for these expressions just in
case it's been tucked under a user specific entry....

Good luck. Ask for clarity if not sure.