Question On Pop Unders??

[wozelbeak]

Hi all,
my dad who is almost 60, has downloaded some kind of virus or trojan/worm.
whenever he clicks on is internet explorer, he gets a pop under which is advertising a porn site!(he was probably looking at porn, "you dirty old man")
i have found where the .exe file is located and deleted it, but it still keeps appearing. how would i go about removing it?
when it appeared, i opened task manager found the pop under clicked on properties and took myself to where it was located. i then deleted the file.
that did not work.
i think i need to delete it from the registry don't i?
how would i go about doing that?
thanks for anyone who can help.
woz

 

[joxley1990]

do a load of virus scans, that'll get rid of it. where abouts is the .exe file? and what is it called?

 

[~K-Pow~]

try running soem spyware stuff too that may pick it up

 

[Infin1ty1]

Lmao i tell ya those old men put more money into porn then us young people,

whats a pop under?

 

[wozelbeak]

i have scanned it with everything i can.
these things are not easy to remove i know that much.
i would just do a re-format, but i hate being beat by these things.
i tried the nod32 antivirus, which found a trojan and removed it. but alas it has re apeared today.
any other ideras about removing it?
woz
p.s, a pop under appears underneath the page which you are viewing.

 

[Infin1ty1]

p.s, a pop under appears underneath the page which you are viewing.

Ah thanks man, i have just never herd that term used

 

[root]

try using a special spyware removal tool such as spybot search and destroy...
this should remove this, (and any other) problems you have...

http://www.safer-networking.org/

 

[wozelbeak]

thanks root, but i have scanned with all of the obvious ones already.
i will try to detect where it is hiding tonight, that is if im up to the job?
woz

 

[reece296]

Try http://housecall.trendmicro.com and see if that shows anything.

 

[MiniVanMan]

Is there a web address associated with the pop "under"? Give me a name, and I might be able to track it down for you.