1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

UNWANTED "sextracker.com" Popup

Discussion in 'Virus & Other Malware Removal' started by Gary R, Feb 17, 2003.

Thread Status:
Not open for further replies.
Advertisement
  1. Gary R

    Gary R Thread Starter

    Joined:
    Aug 9, 2001
    Messages:
    1,440
    A site that I regularly go to was spammed with "sextracker.com", and each time you go to it, 2 cookies are installed to run the popup for the site. :(
    How do I get Internet Explorer 5.5 to ignore the cookies/popup?
    I deleted the cookies manually, & with "WindowWasher Ver. 4.7" but each time I use the site they come back :(
     
  2. brendandonhu

    brendandonhu

    Joined:
    Jul 8, 2002
    Messages:
    14,681
    A cookie can not directly launch pop ups. It can only indicate to a site information about whether or not that popup has been opened before, what site opened it etc, but it can not execute the code.
    Do run Spybot and post your Hijack This log, because it may be spyware on your machine causing this.
    Web sites do not get infected with popup ads, the site owner is paid to put those ads there.
    Unless the web server is running Windows, and its so insecure a person can browse on that comp and install software, but if that was the case I would avoid that site at all costs for security issues.
     
  3. buckaroo

    buckaroo

    Joined:
    Mar 25, 2001
    Messages:
    3,334
  4. Gary R

    Gary R Thread Starter

    Joined:
    Aug 9, 2001
    Messages:
    1,440
    Ergh! Don't have SpyBot. Will download/figure out how to set up.
    :
    Here's what StartupList shows.
    :
    StartupList report, 2/17/03, 5:21:09 PM
    StartupList version: 1.51
    Started from : C:\PROGRAM FILES\STARTUPLIST.1.5\STARTUPLIST151\STARTUPLIST.EXE
    Detected: Windows 98 SE (Win9x 4.10.2222A)
    Detected: Internet Explorer v5.50 (5.50.4134.0600)
    * Using default options
    =======================

    Running processes:

    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\STIMON.EXE
    C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
    C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZONEALARM.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\PROGRAM FILES\STARTUPLIST.1.5\STARTUPLIST151\STARTUPLIST.EXE

    --------------------------------------------------

    Listing of startup folders:

    Shell folders Common Startup:
    [C:\WINDOWS\All Users\Start Menu\Programs\StartUp]
    ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe

    --------------------------------------------------

    Autorun entries from Registry:
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run

    ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
    SystemTray = SysTray.Exe
    OEMCleanup = C:\WINDOWS\OPTIONS\OEMRESET.EXE
    LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    TaskMonitor = C:\WINDOWS\taskmon.exe
    StillImageMonitor = C:\WINDOWS\SYSTEM\STIMON.EXE
    AVG_CC = C:\PROGRAM FILES\GRISOFT\AVG6\avgcc32.exe /startup

    --------------------------------------------------

    Autorun entries from Registry:
    HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

    LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    TrueVector = C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service

    --------------------------------------------------

    C:\WINDOWS\WININIT.BAK listing:
    (Created 13/2/2003, 15:13:10)

    [rename]
    NUL=C:\PROGRA~1\GRISOFT\AVG6\$AVGUPD$.BKP

    --------------------------------------------------

    C:\AUTOEXEC.BAT listing:

    C:\PROGRA~1\GRISOFT\AVG6\bootup.exe
    SET CLASSPATH=C:\Program Files\PhotoDeluxe 2.0\AdobeConnectables
    IF EXIST C:\WINDOWS\WIN386.SWP DEL C:\WINDOWS\WIN386.SWP

    --------------------------------------------------


    Enumerating Browser Helper Objects:

    (no name) - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}

    --------------------------------------------------

    Enumerating Task Scheduler jobs:

    Tune-up Application Start.job

    --------------------------------------------------

    Enumerating Download Program Files:

    [RdxIE Class]
    InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\RDXIE.DLL
    CODEBASE = http://207.82.221.103/259b3ce401cd899f8b23/netzip/RdxIE.cab

    [Shockwave Flash Object]
    InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX
    CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

    [{41F17733-B041-4099-A042-B518BB6A408C}]
    CODEBASE = http://a224.g.akamai.net/7/224/52/2...apple.com/qt502/us/win/QuickTimeInstaller.exe

    [HouseCall Control]
    InProcServer32 = C:\WINDOWS\DOWNLO~1\CONFLICT.1\XSCAN53.OCX
    CODEBASE = http://a840.g.akamai.net/7/840/537/2002121801/housecall.antivirus.com/housecall/xscan53.cab

    [Shockwave ActiveX Control]
    InProcServer32 = C:\WINDOWS\SYSTEM\MACROMED\DIRECTOR\SWDIR.DLL
    CODEBASE = http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

    [Cpuid Control]
    InProcServer32 = C:\WINDOWS\CPUID.OCX
    CODEBASE = http://powe45.vwh.net/downloads/upgradefinder.cab

    [Update Class]
    InProcServer32 = C:\WINDOWS\SYSTEM\IUCTL.DLL
    CODEBASE = http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37581.9365046296

    --------------------------------------------------
    End of report, 4,491 bytes
    Report generated in 0.365 seconds
     
  5. GreenIs

    GreenIs

    Joined:
    Feb 17, 2001
    Messages:
    3,245
    Just my two cents, Gary, but what about selecting "prompt for cookie" in your options for cookies. That way you can decide which cookies to allow onto your computer. I do that. keeps unwanted ones out and I keep better control over what I allow in.:)

    Tools
    INternet Options
    security tab
    custom
    cookies: enable
    disable
    PROMPT :)

    Oh and BTW, I should mention this suggestion is a pain in the butt.:D
     
  6. The_Egg

    The_Egg

    Joined:
    Sep 16, 2002
    Messages:
    1,157
    Or just add *.sextracker.com to the Restricted Sites Zone in:
    IE Options -> Security -> Restricted Sites -> Sites

    Note: You might even need to add your regularly visited site to the list.

    I always add all spyware cookie sites in the Spybot/Ad-Aware results here.
    Once they're in the restricted sites zone, they never come back.

    Or you could install Spyware Blaster which apparently automatically blocks all spyware from being installed



    btw, your system appears to be spyware free
    Though this doesn't include cookies.


    Ummm, what does this do exactly?
    OEMCleanup = C:\WINDOWS\OPTIONS\OEMRESET.EXE
     
  7. Dark Star

    Dark Star

    Joined:
    Jun 8, 2001
    Messages:
    3,054
    I agree with The Egg just add it to your Restricted Sites and be done with it.

    OEMRESET.EXE ... resets the OEM installation settings at bootup.... Not required unless you're new to PC's.

    DS
     
  8. brendandonhu

    brendandonhu

    Joined:
    Jul 8, 2002
    Messages:
    14,681
    SpywareBlaster blocks installation of ActiveX spyware, although this is almost every bit of it, ActiveX is the spyware that installs itself from web pages without another download. The rest of spyware is because of something you downloaded and installed (well, there are possible exceptions, but you get the idea)

    In this case it may be OK, but I would not say adding the site to the restricted zone is a solution to the problem often. Usually these popups are the result of spyware on your computer, not a website purposefully adding all these ads.

    And as said before, deleting a cookie will not stop popups, as a popup can not be launched by a cookie.
     
  9. The_Egg

    The_Egg

    Joined:
    Sep 16, 2002
    Messages:
    1,157
    Yeah, but ActiveX Controls (Signed/Unsigned), Active Scripting, Java, and just about everything else, are all disabled in the Restricted Zone.


    I don't use it personally, but are you saying SpywareBlaster doesn't prevent spyware from installed software?
     
  10. brendandonhu

    brendandonhu

    Joined:
    Jul 8, 2002
    Messages:
    14,681
    Correct, it only prevents spyware installed via ActiveX, and that I have never seen software install components separately through Active X, that would just be more of a hassle for the developer.

    What im saying is, if you have a problem with certain popups, adding the site to your restricted list is not a solution to the problem. Because whatever is causing the problems is still there, it is just in hiding.
     
  11. Dark Star

    Dark Star

    Joined:
    Jun 8, 2001
    Messages:
    3,054
    the site has been "spammed" with "sextracker.com". :confused:

    I'm not sure that I understand any of this, it don't really matter but I wonder if you've considered telling this site that they've been spammed? Maybe they should know about it don't you think?
    If going there causes you grief then it's probably a good idea that you stop going there.
     
  12. Gary R

    Gary R Thread Starter

    Joined:
    Aug 9, 2001
    Messages:
    1,440
    They got it fixed re the unwanted link to the sex site. :)
    Somebody from the Board did some work & got the unwanted link off, & as of this evening (Tuesday, California time) the site is still working as it should.

    Perhaps spam was the wrong term to use, but basically, someone put a message on the Board, and if you clicked on it, everytime you came back to the Board the window (with very explicit pictres) would come up, you'd close it, and about 10 seconds later it'd come up again.
     
  13. Del

    Del

    Joined:
    Aug 31, 2001
    Messages:
    3,452
    Yup, some nice person decided to enrich our surfing with a bit of eye candy..
    Some people should have a stake driven thru their computers..
     
  14. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Similar Threads - UNWANTED sextracker Popup
  1. Harry32
    Replies:
    18
    Views:
    1,430
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/119400

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice