Unwanted pop up

RandomThug · Post by **RandomThug** » Fri May 09, 2003 6:21 pm

Theres this webpage that continues to load itself up onto his machine, its driving me nuts because he cant get rid of it. Whats the best anti pop up software to use... its written itself into the damn PC i cant locate it at all... HELP

KidD01 · Post by **KidD01** » Fri May 09, 2003 6:36 pm

It is possible that you mistakenly click OK when a window pop up asking if you wanna install something when you browse a site. This sometimes was categorised as spyware.

Try using Ad Aware & SpyBot to detect and kill any unwanted "spyware" from your machine. With those two comboed for spyware checking I hardly got any spyware issue on my machine.

RandomThug · Post by **RandomThug** » Fri May 09, 2003 8:04 pm

Yeah the issue is what anti program should I dload, he has several things like "Pest control" and "Antipopup"....

It leads to a webpage thats osmething like da.ru.com

KidD01 · Post by **KidD01** » Fri May 09, 2003 8:30 pm

Judging from your info seems the PC got several Pop Up destroyer proggie already.

You also stated that when you surf you got a window pop up into this da.ru.com site. Am I right ? Does this pop up shows up when you browse to another site too ? If yes there's bigh posibilty that you got a spyware installed in the machine. DL Spybot and install it on the machine. make sure you update the list of Spybot before running any checking - this will keep data of Spybot up to date and set to kill the annoying spyware.

Lastly delete all cookies & files from temp internet file folder or cookie folder under your Windows directory.

Pop ups are annoying - but you mostly got those when you surf underground sites. I'm running Kerio Firewall personal edition in high setting (+some addition of rules I've added) They kill some add banner yet some pop ups still go thru anyway. If you want you might want to try Proxomitron They are quite good and some of users uploaded rules they created which save you some time to configure some rules. Rule links can be found on their Contact link

RandomThug · Post by **RandomThug** » Fri May 09, 2003 10:41 pm

Ok ran spybot got rid of some stuff same problem...

Its not a traditional popup its a popup that is activated by nothing... you could ist and wait and it will go off. Lock up the mouse a bit and take a bit to unfreeze. I got the ip address of the site, blocked that but now it still freeze's butat a screen that says it cant connect....

I dont know if its something in regedit becuase I cant find any suspicous exe's....

KidD01 · Post by **KidD01** » Sat May 10, 2003 12:47 am

*make Egon Spangler posture* Fascinating, that baby seems a bit persistant. Tammy recommended This site a while back. I guess you can try your luck finding some info there about that annoying thing.

Lastly have you run routine Virus scan on the system ?

Kameleon · Post by **Kameleon** » Mon May 12, 2003 4:29 am

Have you considered that it's an installed program that's doing this, that doesnt show up as spyware because its only purpose is to ad-spam? I had one of these a little while ago (my own damn fault for clicking OK to a prompt), it thoroughly infiltrated my computer, and AdAware couldn't find it, however there were a couple of suspect programs running. I used a 2000/XP version of msconfig (attached here, just because I feel like it

) to stop them starting at boot, then I went after them to delete once and for all. One had an uninstaller. How cute

Quark · Post by **Quark** » Mon May 12, 2003 7:54 am

XP has msconfig built in

You can even use XP's version of msconfig.exe on 2k supposedly.

Of course, I use Mozilla Firebird so this problem never arised for me in the first place

Gotta love no popups and no ActiveX ...

KidD01 · Post by **KidD01** » Mon May 12, 2003 5:17 pm

Originally posted by Quark
Of course, I use Mozilla Firebird so this problem never arised for me in the first place Gotta love no popups and no ActiveX ...

Heh yeah the ever annoying ActiveX. Some hackers even can exploit this into browser weakeness & other stuff

RandomThug · Post by **RandomThug** » Mon May 12, 2003 6:42 pm

Details: An instance of "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" is preparing to access the Internet for the first time

Details: An instance of "C:\Program Files\Internet Explorer\iexplore.exe" is preparing to access the Internet for the first time

Details: An instance of "C:\WINDOWS\System32\svchost.exe" is preparing to access the Internet for the first time

Details: An instance of "C:\Program Files\Symantec\LiveUpdate\LuComServer.EXE" is preparing to access the Internet for the first time

This is what the Norton Personal Firewall shows as running when he starts his machine... Help?

Kameleon · Post by **Kameleon** » Mon May 12, 2003 6:59 pm

Originally posted by RandomThug
This is what the Norton Personal Firewall shows as running when he starts his machine... Help?

They're all normal. The two Symantec things are standard Norton, svchost is a Windows process, and iexplore is Internet Explorer...the problem is somewhere else.