"Pop-ups" Anyone?

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Wogster

Thread Starter
Joined
Jan 16, 2003
Messages
312
My problem lies on these dang "Pop-ups", lately as soon as we open our browser "IE 6", we are swamped with pop-ups. Every add shooting up on our screen... it's almost not fun surfing in net anymore. Is there any trick to disabling these nasty pop-ups from within Internet Explorer 6, or is there any freebee software available that would do so?
 
Joined
Dec 5, 2001
Messages
489
There's lots of popup blocking software, and everyone seems to have a different favorite program...my personal favorite is Proxomitron (www.proxomitron.org), it's free, highly customizable, and has worked great the whole time I've been using it. (over a year)
 

Wogster

Thread Starter
Joined
Jan 16, 2003
Messages
312
Thanks to both of you, I will try both and see which one I like better. While I'm here and so are you.... I've seen many people with little pictures beside their names, like yours for instance... how do I put one on mine?
 
Joined
Dec 5, 2001
Messages
489
Click "User Panel" at the top right, and you can upload a photo of yourself to your profile.
 

TonyKlein

Malware Specialist
Joined
Aug 26, 2001
Messages
10,392
If it's just "ordinary" popups, a popup stopper will help enormously.

However, judging by how you're describing the issue, it may well be due to spy/foistware.

Please do this:

Go to http://www.spywareinfo.com/downloads.php#det , and download 'Hijack This!'.
Unzip, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log somewhere, and please show us its contents.
 
Joined
Jan 18, 2003
Messages
48
Another pop-up stopper is called Free Surfer (http://www.emsproject.com/FS). I didn't keep this app but someone else might like it. Its biggest plus is the ability to take a snapshot of all open browser pages if IE freezes.
 
E

Endemix

Well, I'm not the one with the problem up above, but I thought I would share my log with you.

Logfile of HijackThis v1.91.2
Scan saved at 11:15:29 AM, on 1/26/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.amissia.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar=http://tjem.com/searchbar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title=Steve's Browser
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.amissia.com"); (C:\Documents and Settings\Endemix\Application Data\Mozilla\Profiles\default\frtao5ib.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_02.src"); (C:\Documents and Settings\Endemix\Application Data\Mozilla\Profiles\default\frtao5ib.slt\prefs.js)
O1 - Hosts: 216.40.230.4 desktop.kazaa.com
O1 - Hosts: 216.40.230.4 alpha.kazaa.com
O1 - Hosts: 216.40.230.4 shop.kazaa.com
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\System32\taskswitch.exe
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [AtiPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HydraVisionDesktopManager] desk98.exe
O4 - HKLM\..\Run: [RAM Idle] C:\Program Files\Customizer XP\RAM_2K.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: ICQ Pro (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: MoneySide (HKLM)
O9 - Extra button: AdsGone (HKLM)
O9 - Extra 'Tools' menuitem: &AdsGone Settings (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O12 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://free.aol.com
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {1C955F3B-5B32-4393-A05D-24B4970CD2A1} - http://stream10k.redhotnetworks.com/cabs/videox.cab
O16 - DPF: {407F5185-3B2E-4196-982B-1E258C46F8FD} - ftp://ftp.ea.com/pub/easports/patches/nhl2003/en-us/nhl.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...pple.com/borris/us/win/QuickTimeInstaller.exe
O16 - DPF: {597C45C2-2D39-11D5-8D53-0050048383FE} (OPUCatalog Class) - http://www.microsoftoffice.com/productupdates/content/opuc.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} - http://a840.g.akamai.net/7/840/537/2002121801/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37610.9931944444
O16 - DPF: {A1DC3241-B122-195F-B21A-000000000000} - http://pluginaccess.com/Browser_Plugin.cab
O16 - DPF: {A7798D6C-C6B5-4F26-9363-F7CDBBFFA607} - http://www.gigex.com/ActiveX/vxpspeeddelivery.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O18 - Protocol: ayb - (no CLSID) - (no file)


Should I get rid of any of this stuff?
 

JohnWill

Retired Moderator
Joined
Oct 19, 2002
Messages
106,425
Finally, if you like to control what gets blocked, AnalogX has one called POW. The first time you visit a site and see a couple of pop-ups, you right click it and erase them by title, they will be automatically closed from that day forward. POW works well if you go to sites a lot, since it very effectively deals with the repeat offenders. If probably doens't work as well if you surf all over and rarely visit the same pages multiple times.
 
Joined
Oct 9, 2001
Messages
9,396
Should I get rid of any of this stuff?

O1 - Hosts: 216.40.230.4 desktop.kazaa.com
O1 - Hosts: 216.40.230.4 alpha.kazaa.com
O1 - Hosts: 216.40.230.4 shop.kazaa.com









endemix,anything "kazaa" related should go.
add/rem progs....uninstall kazaa.
update and run spybot.
install kazaalite.....spyware free.
 

TonyKlein

Malware Specialist
Joined
Aug 26, 2001
Messages
10,392
Nothing terrible in the log, mainly some remnants of a previous LOP browser hijack.

Run Hijack This, and check ALL of the items in bold. Doublecheck so as to be sure not to miss a single one.
Next, shut down all Internet Explorer Windows, and have HT fix all checked.
Reboot when you're done.

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar=http://tjem.com/searchbar.html

O1 - Hosts: 216.40.230.4 desktop.kazaa.com
O1 - Hosts: 216.40.230.4 alpha.kazaa.com
O1 - Hosts: 216.40.230.4 shop.kazaa.com

O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe

O16 - DPF: {1C955F3B-5B32-4393-A05D-24B4970CD2A1} - http://stream10k.redhotnetworks.com/cabs/videox.cab
O16 - DPF: {407F5185-3B2E-4196-982B-1E258C46F8FD} - ftp://ftp.ea.com/pub/easports/patch...3/en-us/nhl.cab
O16 - DPF: {A1DC3241-B122-195F-B21A-000000000000} - http://pluginaccess.com/Browser_Plugin.cab

O18 - Protocol: ayb - (no CLSID) - (no file)


Cheers,
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Members online

Top