not-a-virus:AdWare.Win32.Vapsup.awu help to remove

[mberryaz]

the file appears to be c:\windows\system32\iebrowserc.dll.
we have constant pop ups on the computer.

[drongo]

iebrowserc.dll- is not the only one ;)

Disconnect from internet, disable antivirus, close all programs as much as you can.

Run Kaspersky Virus Remove Tool.( http://avptool.virusinfo.info/en/AVPTool_helpdesk_curescript.htm
Go to «Manual curing».
Copy the code below and paste it into the field for Step 3.


begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\WINDOWS\system32\mysidesearch_s idebar.dll','');
QuarantineFile('C:\Program Files\BrowsingTool\BrowsingTool-2.dll','');
QuarantineFile('C:\WINDOWS\system32\nsx1F.dll','') ;
QuarantineFile('C:\WINDOWS\system32\gzmrt.dll','') ;
QuarantineFile('C:\WINDOWS\system32\iebrowserc.dll ','');
QuarantineFile('C:\Program Files\Common Files\Maxtor\Common\rpc_client.dll','');
QuarantineFile('C:\Program Files\Common Files\Maxtor\Common\gc.dll','');
DeleteFile('C:\WINDOWS\system32\iebrowserc.dll');
DeleteFile('C:\WINDOWS\system32\gzmrt.dll');
DeleteFile('C:\WINDOWS\system32\nsx1F.dll');
DeleteFile('C:\Program Files\BrowsingTool\BrowsingTool-2.dll');
DeleteFile('C:\WINDOWS\system32\mysidesearch_sideb ar.dll');
DelBHO('{1D8282E6-BC4F-469B-AAED-7E4FF077AD93}');
DelBHO('{7D9362F8-77D8-4b29-97B5-621D550890C0}');
DelBHO('{9C8A568E-4201-478a-8536-526CF371D2E2}');
DelBHO('{D0661233-42D4-F7F1-80E1-8A9E0E99E71D}');
DelBHO('{DDFA1356-E6ED-42a5-9D62-93211D424A90}');
BC_ImportALL;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

Push on the Execute button .

Computer will reboot, if not- reboot it manually .
In sub-folder of the Kaspersky Virus Remove Tool, the quarantine folder will be created.
Remember to zip the created quarantine with password virus
Reactivate your antivirus.
Load the archive using : http://virusinfo.info/upload_virus_eng.php?tid=18192
P.S. Show must go on :diablo: