Computer help!!!!

[long board]

So we buy my son a laptop for high school graduation, and sure enough, he downloads a program called popcorn? I ran everything I know to remove this thing but . . . it doesn't stop popping up. How the hell do I get this thing off his computer?

[juanbenae]

i like popcorn while watching movies. longboard is my sister's dog that has big dog body, and small dog legs.

im just sayin'

[stomachmonkey]

What does it do?

The only software named Popcorn that I know of is from Roxio and is a pretty good app.

Scott

[rcecale]

Try starting with Ad-Aware and Spybot. Both of which are free to download and install, and work wonders to remove and protect you from malware.

You can also download and install Microsoft 's Defender program, if you can navigate the web with the problem computer.

If any or all the above fails, you can try removing it manually by following the instructions here.

As stated in the link above, one of the biggest problems with malware is it's ability to re-generate it's own executable files if you're able to delete the current set. They will also rename them each time to some random name, as opposed to an easy-to-locate "popcorn.exe". Names like hsdrrt.exe, or wtghtqp.exe.

Good luck, removing this stuff can be extremely frustrating.

Randy

[RoninLB]

I have a few pages scanned from 2600. Some of the info is based on what Randy says about regeneration. It can also exist a in a few different places at the same time.

if copy wanted hit "profile" at the bottom of this reply and hit "sending an e-mail".

[rick-l]

sometimes it is easier just to reload the operating system

[long board]

Thanks for the help guys. I'll try everything and let you know how it comes out. The website is Popcorn.net, some kind of buy a movie program? It just keeps popping up. He swears he didn't sign up, but I don't think it just jumps on your computer. He's a youth leader at his church, so I trust he isn't surfing in the wrong places. Again, thanks for the help. I'll report back.

[long board]

1st update. Downloaded and ran Microsoft 's Defender program. It did not find the problem. It said my system is fine. More updates to follow.

[HardDrive]

This is a virus called Troj/Bizves-B.

Instruction on deleting it are found here:

http://www.sophos.com/virusinfo/analyses/trojbizvesb.html

Make sure you click on the advanced tab on that page, and clear out the registry entries described there. It sets a regsitry key so that the executable loads when your keepboard profile loads. This is early in the boot process, so it may be undetectable by your anti-virus.

Then download a new webbrowser for your son. Either Firefox or Opera. I use opera myself. Its freeware if you can put up with a banner ad at the top of the browser.

[long board]

2nd update. I read the pages sent by RoninLB and followed their instructions. First I tried add/remove and guess what! There it was and there it went. I removed it and so far so good. Man, talk about not knowing what you're doing. Anyway, I'll update if it doesn't stay gone. BIG THANKS TO YOU GUYS!!!!!

[87coupe]

I would still check for the registry entry described in Hard Drive's post.

snip
Locate the HKEY_LOCAL_MACHINE entry:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ControlPanel
\popcorn.exe internat.dll,LoadKeyboardProfile

and delete it if it exists.

Close the registry editor.

snip

[long board]

I checked and can't find anything that shows "control panel"

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ControlPanel
\popcorn.exe internat.dll,LoadKeyboardProfile