Random pop up issue

GEC: Discuss gaming, computers and electronics and venture into the bizarre world of STGODs.

Moderator: Thanas

Post Reply
User avatar
Stuart Mackey
Drunken Kiwi Editor of the ASVS Press
Posts: 5946
Joined: 2002-07-04 12:28am
Location: New Zealand
Contact:

Random pop up issue

Post by Stuart Mackey »

Ok..I have this wee problem..its very embarrising..so dont laugh ..
I seem to have contracted this.err, problem and it wont clear up, no matter what I try.
When connected I get these pop up ads when I have an open window, I suspect something lurks on my machine and adaware and Search and Destroy wont fix it. AVG has not found anything.
any suggestions?
Via money Europe could become political in five years" "... the current communities should be completed by a Finance Common Market which would lead us to European economic unity. Only then would ... the mutual commitments make it fairly easy to produce the political union which is the goal"

Jean Omer Marie Gabriel Monnet
--------------
User avatar
Shadowhawk
Jedi Knight
Posts: 669
Joined: 2002-07-03 07:19pm
Location: Western Washington
Contact:

Post by Shadowhawk »

Won't fix it? As in, they don't find it, or they can't remove it?

Boot into safe mode and run them both then. Also, get CWShredder and use it. If those don't work, get HijackThis and paste the scan log in this thread.
Shadowhawk
Eric from ASVS
"Sufficiently advanced technology is often indistinguishable from magic." -- Clarke's Third Law
"Then, from sea to shining sea, the God-King sang the praises of teflon, and with his face to the sunshine, he churned lots of butter." -- Body of a pharmacy spam email

Here's my avatar, full-sized (Yoshitoshi ABe's autograph in my Lain: Omnipresence artbook)
User avatar
Hamel
Sith Marauder
Posts: 3842
Joined: 2003-02-06 10:34am
Contact:

Post by Hamel »

Run msconfig and look for naughty things. My mom's computer had the same problem.
"Right now we can tell you a report was filed by the family of a 12 year old boy yesterday afternoon alleging Mr. Michael Jackson of criminal activity. A search warrant has been filed and that search is currently taking place. Mr. Jackson has not been charged with any crime. We cannot specifically address the content of the police report as it is confidential information at the present time, however, we can confirm that Mr. Jackson forced the boy to listen to the Howard Stern show and watch the movie Private Parts over and over again."
User avatar
Vertigo1
Defender of the Night
Posts: 4720
Joined: 2002-08-12 12:47am
Location: Tennessee, USA
Contact:

Post by Vertigo1 »

Oh fun....

Did you actually use the update feature on AdAware and Spybot S&D? Download a copy of Startup (use google) instead of MSCONFIG as not every version of Windows has it (98 - ME, XP only. 2000 doesn't have it.) If you haven't already, kill the messenger service. Lastly, STOP USING INTERNET EXPLOITER! You are asking for trouble if you use it. Get Mozilla.
"I once asked Rebecca to sing Happy Birthday to me during sex. That was funny, especially since I timed my thrusts to sync up with the words. And yes, it was my birthday." - Darth Wong

Leader of the SD.Net Gargoyle Clan | Spacebattles Firstone | Twitter
User avatar
Stuart Mackey
Drunken Kiwi Editor of the ASVS Press
Posts: 5946
Joined: 2002-07-04 12:28am
Location: New Zealand
Contact:

Post by Stuart Mackey »

Vertigo1 wrote:Oh fun....

Did you actually use the update feature on AdAware and Spybot S&D? Download a copy of Startup (use google) instead of MSCONFIG as not every version of Windows has it (98 - ME, XP only. 2000 doesn't have it.) If you haven't already, kill the messenger service. Lastly, STOP USING INTERNET EXPLOITER! You are asking for trouble if you use it. Get Mozilla.
Startup..very usefull that..thanks :)
Via money Europe could become political in five years" "... the current communities should be completed by a Finance Common Market which would lead us to European economic unity. Only then would ... the mutual commitments make it fairly easy to produce the political union which is the goal"

Jean Omer Marie Gabriel Monnet
--------------
User avatar
Vertigo1
Defender of the Night
Posts: 4720
Joined: 2002-08-12 12:47am
Location: Tennessee, USA
Contact:

Post by Vertigo1 »

Stuart Mackey wrote:Startup..very usefull that..thanks :)
Yeah, I got alot of use out of that when I ran Win2k Pro.
"I once asked Rebecca to sing Happy Birthday to me during sex. That was funny, especially since I timed my thrusts to sync up with the words. And yes, it was my birthday." - Darth Wong

Leader of the SD.Net Gargoyle Clan | Spacebattles Firstone | Twitter
User avatar
Stuart Mackey
Drunken Kiwi Editor of the ASVS Press
Posts: 5946
Joined: 2002-07-04 12:28am
Location: New Zealand
Contact:

Post by Stuart Mackey »

Vertigo1 wrote:
Stuart Mackey wrote:Startup..very usefull that..thanks :)
Yeah, I got alot of use out of that when I ran Win2k Pro.
Indeed, thats what I am running, for some reason I have never been a fan of XP..never gripped my imagination.
Via money Europe could become political in five years" "... the current communities should be completed by a Finance Common Market which would lead us to European economic unity. Only then would ... the mutual commitments make it fairly easy to produce the political union which is the goal"

Jean Omer Marie Gabriel Monnet
--------------
User avatar
Sokartawi
Crazy Karma Chameleon
Posts: 805
Joined: 2004-01-08 09:17pm
Contact:

Post by Sokartawi »

Stuart Mackey wrote:
Vertigo1 wrote:
Stuart Mackey wrote:Startup..very usefull that..thanks :)
Yeah, I got alot of use out of that when I ran Win2k Pro.
Indeed, thats what I am running, for some reason I have never been a fan of XP..never gripped my imagination.
Ha ha, same here, but I stick to 98 since 2k isn't too friendly on all games, unfortunately. If it was, I'd use it.

And uhh, doesnt it have something like Regedit that does the trick?
Stubborn as ever - Let's hope it pays off this time.
User avatar
Stuart Mackey
Drunken Kiwi Editor of the ASVS Press
Posts: 5946
Joined: 2002-07-04 12:28am
Location: New Zealand
Contact:

Post by Stuart Mackey »

Sokartawi wrote:
Stuart Mackey wrote:
Vertigo1 wrote: Yeah, I got alot of use out of that when I ran Win2k Pro.
Indeed, thats what I am running, for some reason I have never been a fan of XP..never gripped my imagination.
Ha ha, same here, but I stick to 98 since 2k isn't too friendly on all games, unfortunately. If it was, I'd use it.

And uhh, doesnt it have something like Regedit that does the trick?
regedit can be manipulated to play some games..Fleet Command comes to mind. I have long since gone right of 98..its a buggy sack'o'shite.
Via money Europe could become political in five years" "... the current communities should be completed by a Finance Common Market which would lead us to European economic unity. Only then would ... the mutual commitments make it fairly easy to produce the political union which is the goal"

Jean Omer Marie Gabriel Monnet
--------------
User avatar
Slartibartfast
Emperor's Hand
Posts: 6730
Joined: 2002-09-10 05:35pm
Location: Where The Sea Meets The Sky
Contact:

Post by Slartibartfast »

That sounds like Gator. Do you have regular KaZaA? (not lite) Sometimes Ad-aware can find and delete the files, but the damage is done and you'll get popups all the time.

I'm sure it has something to do with tampering with IE macros rather than spyware running in the background. One laptop with XP had this thing even after uninstalling everything, but if I created a new user, it didn't get any popups, but going back to the original user there they would be again.

(something like a popup every 30 seconds, doesn't even let you type a couple paragraphs in Word)
Image
User avatar
Stuart Mackey
Drunken Kiwi Editor of the ASVS Press
Posts: 5946
Joined: 2002-07-04 12:28am
Location: New Zealand
Contact:

Post by Stuart Mackey »

Slartibartfast wrote:That sounds like Gator. Do you have regular KaZaA? (not lite) Sometimes Ad-aware can find and delete the files, but the damage is done and you'll get popups all the time.

I'm sure it has something to do with tampering with IE macros rather than spyware running in the background. One laptop with XP had this thing even after uninstalling everything, but if I created a new user, it didn't get any popups, but going back to the original user there they would be again.

(something like a popup every 30 seconds, doesn't even let you type a couple paragraphs in Word)
I have never run Kazza..but since I put on startup I have sorted the issue.
Via money Europe could become political in five years" "... the current communities should be completed by a Finance Common Market which would lead us to European economic unity. Only then would ... the mutual commitments make it fairly easy to produce the political union which is the goal"

Jean Omer Marie Gabriel Monnet
--------------
Joe Momma
Jedi Knight
Posts: 684
Joined: 2002-12-15 06:01pm

Post by Joe Momma »

While we're on the subject here's one that was fucking me over recently: Roimoi adware.

It kept making pop-ups come up even with my yahoo pop-up blocker installed and messenger turned off. Ad aware couldn't catch it and both avast and norton anti-virus would catch it but couldn't delete it. I had to go in through regedit and physically remove it (HKEY_Local Machine/Software). It keeps coming back periodically, so I'm slowly going through my regular websites one by one to see if I'm getting it through a particular site.

I think I'll get mozilla like Vertigo 1 suggested. Fucking IE and Windows XP.

-- Joe Momma
It's okay to kiss a nun; just don't get into the habit.
Post Reply