Morning,
Whilst assisting a friend with iTunes on his XP PC, I noticed that every use of IE resulted in an adware type popup window appearing. This window has an orange banner which features a green shopping bag with a white capital "G". The content is product that bears some relevance to the internet page displayed.

A few minutes with Google only turns up one reference for it, and no obvious solution.

His daughter told me that it has been appearing for a few weeks.

I didn't have the time to download and run any programs like HijackThis and AVG, but said I would come back and attempt to remove it.

Is this a known adware that a particular program will remove? My google-fu is weak in determining a name for it.
Thanks in advance,
lex

soi là, soi carré

Once you have the HJT LOG, you can post it here for our perusal, if you need the help...

I would suggest running Malwarebytes AntiMalware, SuperAnti Spyware...

in case either do not install, then rename the EXE to anything other than the original name, e.g. MBAM.exe to 123eter.exe and then install, there are some malwares out there that check installers for the name and block these...

download also either or both, DrWeb LiveCD and Avira Rescue System, both are LIVE CD's, from which you boot the affected PC and run a the malware scan, this leaves the installed OS out of the picture, but will take a long time to scan...

Ben
"If it works don't fix it! If it doesn't use a sledgehammer..."
How to ask a question, when posting them to a professional forum.
Only ask questions with yes/no answers if you want "yes" or "no"

Thanks, BigBadBen - I'll do that sometime next week.

If anyone knows the malware responsible, can they name it?

soi là, soi carré

Can't name it without more info.  I wouldn't wait too long. It could be stealing all your information for all you know.

Look for pricegong removal and look in add remove programs for it and if there uninstall it.
I found this link but it says the G is yellow
The pop-up has a logo consisting of a green handled bag with a yellow G

http://www.google.com/support/forum/p/Toolbar/thread?tid=258541ee4ca4a7b8&hl=en

tlcscousin,
Marvellous - that's the pop-up! Pricegong it is; I shall ask him to try the remove programs route to banish it.

goombawaho,
I appreciate your concern, however it is not my computer. I am told it is not used for banking or other financial matters, but your point is good. I am sure the owner will be relieved that removing it is simple.
 

soi là, soi carré