I'm getting user logons all over the web for webtrends and doubleclick ads

[Harold Corbin]

In the last few days my browser started prompting me for User Logon
information when I visit some sites. A popup windows appears with
"Connect to ad.doubleclick.com" (and others) in the titlebar and "User
Logon" with User name and password in the dialog box. I ran Lavasofts
Ad-Aware a few days ago, (as I usually do every week or so) and can't
recall if this started happening at the same time. I've since run it
again in an attempt to troubleshoot the problem, but nothing out of
the oridinary was detected and I can't figure out why this is
happening. I even downloaded a fresh hosts file and replaced mine with
the latest version, but it still doesn't solve the issue.

On some sites I get doubleclick logins (ebay, nfl.com, yahoo), and on
other sites I get webtrends logins. It's really annoying when you are
browsing search results and have to cancel these login windows 4 or 5
times on a single page (for each ad that's embedded, I guess), and
then it starts all over again as soon as you change pages. Grrr!

I figured that Ad-aware may have deleted a cookie or some other file
and was messing with IE, so I installed Netscape and had the same
problem. Do both browsers share the same cookies? What the heck is
causing this?

I've captured the screen and published a GIF here:
http://www.envision2000.com/docs/connectIE.gif

 

[Frank Saunders, MS-MVP]

In the last few days my browser started prompting me for User Logon
information when I visit some sites. A popup windows appears with
"Connect to ad.doubleclick.com" (and others) in the titlebar and "User
Logon" with User name and password in the dialog box. I ran Lavasofts
Ad-Aware a few days ago, (as I usually do every week or so) and can't
recall if this started happening at the same time. I've since run it
again in an attempt to troubleshoot the problem, but nothing out of
the oridinary was detected and I can't figure out why this is
happening. I even downloaded a fresh hosts file and replaced mine with
the latest version, but it still doesn't solve the issue.

On some sites I get doubleclick logins (ebay, nfl.com, yahoo), and on
other sites I get webtrends logins. It's really annoying when you are
browsing search results and have to cancel these login windows 4 or 5
times on a single page (for each ad that's embedded, I guess), and
then it starts all over again as soon as you change pages. Grrr!

I figured that Ad-aware may have deleted a cookie or some other file
and was messing with IE, so I installed Netscape and had the same
problem. Do both browsers share the same cookies? What the heck is
causing this?

I've captured the screen and published a GIF here:
http://www.envision2000.com/docs/connectIE.gif

First eliminate any scumware.
See
Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each needs to be updated with the program's update function
before every use, even when just downloaded. There's also a lot more to do
than just those two programs. CWShredder is also available here:
http://www.kellys-korner-xp.com/regs_edits/cwshredder.zip
**Post your HijackThis log to
http://forums.spywareinfo.com/ or the Spyware forum at
http://forum.aumha.org/ for expert analysis, not here.**
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page:
http://aumha.org/a/parasite.htm.
CAUTION!!!!! Before you try to remove spyware using any of the programs
below, download a copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html
(if your OS is Win2k or XP) The process of removing certain malware may kill
your internet connection. If this should occur, this program, LSPFIX, will
enable you to regain your connection.

If nothing there helps, please post back to this thread.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup only. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/