Basis question about pop-ups please

[rev_otis_mcnatt]

The only ones I have anymore are those that pop up when I'm
surfing the Web....most commonly just when I go to a new
page. It's usually the same ones, pretty much, e.g. gambling,
registry cleaners (gottal love that one, considering they're
trying to sell us something to get rid of what THEY are doing),
etc. I run a pop-up stopper which gets some of them. I also
run Google toobar which has one.

But what I want to know is just **where** are these things coming
from? It doesn't much matter which site I'm visiting (even my own!),
the same ads pop up. Are these things on my computer somewhere,
and spring to life while I surf? I think I'm as curious about how they
come in as I am in getting rid of 'em---we'll not really, but I am
curious
about these pesky things. What's the deal guys? Thanks.

 

[FrankV]

Are you running anything like AdAware or PestPatrol to block things like
that?

Frank

 

[Nick Skrepetos]

The only ones I have anymore are those that pop up when I'm
surfing the Web....most commonly just when I go to a new
page. It's usually the same ones, pretty much, e.g. gambling,
registry cleaners (gottal love that one, considering they're
trying to sell us something to get rid of what THEY are doing),
etc. I run a pop-up stopper which gets some of them. I also
run Google toobar which has one.

But what I want to know is just **where** are these things coming
from? It doesn't much matter which site I'm visiting (even my own!),
the same ads pop up. Are these things on my computer somewhere,
and spring to life while I surf? I think I'm as curious about how they
come in as I am in getting rid of 'em---we'll not really, but I am
curious
about these pesky things. What's the deal guys? Thanks.

Hello,

Sounds like a typical spyware/adware infection. You may wish to try the
following (all FREE):

SUPERAntiSpyware
http://www.superantispyware.com

AdAware
http://www.lavasoftusa.com

SpyBot
http://www.spybot.info

Nick Skrepetos
SUPERAntiSpyware.com
http://www.superantispyware.com

 

[siljaline]

The only ones I have anymore are those that pop up when I'm
surfing the Web....most commonly just when I go to a new
page. It's usually the same ones, pretty much, e.g. gambling,
registry cleaners (gottal love that one, considering they're
trying to sell us something to get rid of what THEY are doing),
etc. I run a pop-up stopper which gets some of them. I also
run Google toobar which has one.

But what I want to know is just **where** are these things coming
from? It doesn't much matter which site I'm visiting (even my own!),
the same ads pop up. Are these things on my computer somewhere,
and spring to life while I surf? I think I'm as curious about how they
come in as I am in getting rid of 'em---we'll not really, but I am
curious
about these pesky things. What's the deal guys? Thanks.

Your security is only as good as your surfing habits.
Gambling, casino sites are not known to be the safest as they prompt
for software installation to "play", etc.

Common questions and tips in stopping and blocking pop-ups.
http://www.mvps.org/winhelp2002/nopopups.htm

Infected?
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/Darnit.htm
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction

Unexplained computer behavior may be caused by deceptive software.
http://support.microsoft.com/default.aspx?scid=kb;en-us;827315

Silj

--
siljaline

MS - MVP Windows (IE/OE) & Security, AH-VSOP
_________________________________________
Security Tools Updates
http://aumha.net/viewforum.php?f=31

Reply to group, as return address
is invalid that we may all benefit.

 

[rev_otis_mcnatt]

Your security is only as good as your surfing habits.
Gambling, casino sites are not known to be the safest as they prompt
for software installation to "play", etc.

I've never been to a gambling site in my life.

 

[rev_otis_mcnatt]

Hello,

Sounds like a typical spyware/adware infection. You may wish to try the
following (all FREE):

SUPERAntiSpyware
http://www.superantispyware.com

I just downloaded, installed and ran this program. It
says it found 214 problems. I had it remove all of them,
but as soon as I rebooted and went a new Webpage or
two, I got another ad. I've only gotten one so far though.
I also run Spybot occasionally. And I've found HijackThis
to be pretty good too.

 

[Nick Skrepetos]

I just downloaded, installed and ran this program. It
says it found 214 problems. I had it remove all of them,
but as soon as I rebooted and went a new Webpage or
two, I got another ad. I've only gotten one so far though.
I also run Spybot occasionally. And I've found HijackThis
to be pretty good too.

Hello,

I am happy to diagnose your system (for free) and post the results back
to the group. Click the following link (boot to safe mode first):
http://www.superadblocker.com/diagnostic.html?id=nicks

Nick Skrepetos
SUPERAntiSpyware.com / SUPERAdBlocker.com

 

[siljaline]

Now that you have Hijacked (yet another thread) - Nick - *you* fix the poster.

I'll keep an eye on the thread and see how you make out.

Silj

--
siljaline

MS - MVP Windows (IE/OE) & Security, AH-VSOP
_________________________________________
Security Tools Updates
http://aumha.net/viewforum.php?f=31

Reply to group, as return address
is invalid that we may all benefit.

 

[Nick Skrepetos]

Now that you have Hijacked (yet another thread) - Nick - *you* fix the poster.

I'll keep an eye on the thread and see how you make out.

Silj

<snip>
Silj,

What is your issue? I answer the posters question just as you did, that
is not "Hijacking yet another thread". I have the technical expertise
to backup anything I say in these groups, and can resolve any of these
users problems either through our software, or by viewing their system
diagnostic and resolving the their issue. I don't charge ANY of the
users for my assistance.

-Nick

 

[Jan Il]

Hi O.M.

You know what it is, and that you have it somewhere. If you have run
AdAware and SpyBot in Safe Mode and with Hidden Files enabled and the pests
are still there, then it may not just be adware or spyware, and you will
need more aggressive methods to find and remove it.

Be aware, your Anti-Virus won't detect all types of warez, Trojans, malware,
worms, etc., and neither can other adware or spyware related programs such
as AdAware and SpyBot, or other "Spyware" programs. They simply don't have
the proper definitions. These programs must also be run in Safe Mode with
Hidden Files enabled in order to fully scan all files. Even if you have run
such programs and nothing showed up, it does not mean your system is clean.
It takes a series of programs to fully clean your machine. *Some very
aggressive and damaging variants of malware can replicate themselves
repeatedly, or mutate, if not removed properly.*

Work through the information below and follow all the instructions
carefully.

Dealing with Unwanted Spyware and Parasites:
http://mvps.org/winhelp2002/unwanted.htm

As you already have HiJackThis installed, make sure it is installed
correctly, and then follow the instructions for posting your log:

How to download and install HiJackThis: Win 98-XP
http://www.download.com/HijackThis/3000-8022_4-10227353.html

Please.. DO NOT post your log HiJackThis log to this newsgroup. DO NOT
delete anything from the list yourself unless you are an experienced user of
this program. It is important that you post your log on one of the
HiJackThis Support Forums below and allow the experts there to analyze it
for you:
AumHa HiJackThis Forum
http://forum.aumha.org/viewforum.p
(http://www.dslreports.com/forum/security)
to allow the experts there to evaluate your log and advise you of any
necessary steps to clean your system.
(Note: You will have to Register before posting on these Forums.
http://aumha.net/profile.php?mode=register
Please follow all pre- posting instructions below carefully to avoid having
your log deleted or ignored.
http://forum.aumha.org/viewtopic.ph...ghlight=&sid=b59f8de4de1850003b79b74558a4b58b)
All responders are volunteers and they are very busy, so please be patient.
Please see http://aumha.net/viewtopic.php?t=4075 and
http://aumha.org/a/quickfix.htm before posting to the forum.

Please post a link back here to your log at AumHa so that we can follow your
progress.

Hope this helps.

Jan
MS MVP - Windows IE/OE [DTS/AumHa]
Smiles are meant to be shared,
that's why they're so contagious.

Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm

 

[rev_otis_mcnatt]

Jan Il wrote:

Hope this helps.

Thanks Jan, it does. I've supposedly gotten rid of lots
of bad stuff with the aforementioned programs, but I keep
getting the worst one, which suddenly pops up with
some "installer" that then proceeds to try and install
some "registry cleaner" onto my disk. I still don't
understand how this garbage works, and gets to
me. My wife and I (the only two people who've
ever used this computer) never visit porn, gambling
or other sites that anyone would associate with
this type junk. If the junk is residing on my h.d., then
why does it only spring to life when we're surfing?
Thanks again Jan.

-
O.M.

 

[Nick Skrepetos]

Jan Il wrote:


Thanks Jan, it does. I've supposedly gotten rid of lots
of bad stuff with the aforementioned programs, but I keep
getting the worst one, which suddenly pops up with
some "installer" that then proceeds to try and install
some "registry cleaner" onto my disk. I still don't
understand how this garbage works, and gets to
me. My wife and I (the only two people who've
ever used this computer) never visit porn, gambling
or other sites that anyone would associate with
this type junk. If the junk is residing on my h.d., then
why does it only spring to life when we're surfing?
Thanks again Jan.

-
O.M.

O.M,

What is happening is that one of the installers is most likley loaded
as a Browser Helper Object, or other extension and it only "activates"
when the browser starts. Often times the spyware will lay dormant until
it tracks surfing activity and then attempts to serve ads related to
what you are surfing. I guess the idea here is that the user "thinks"
that web page is serving the ads, and not the adware/spyware.

If you would like me to diagnose your machine for free and find out
what the problem is, simply submit a diagnostic using the link below
and I can see what is causing the problem:
http://www.superadblocker.com/diagnostic.html?id=nicks

Nick Skrepetos
SUPERAntiSypware.com / SUPERAdBlocker.com
http://www.superantispyware.com

 

[Jan Il]

Hi O.M.

Have you actually run the AdAware and SpyBot in the Safe Mode with Hidden
files enabled? Have you posted the log in the AumHa forum as recommended?
I don't see the link to your post there listed here? O.M....you can not get
rid of this unless you follow all the recommended steps to the letter. It
is obviously not a simple little adware cookie that is tucked away in the
bowels of your system, it is something that is capable of doing harm to your
system. And you need to get rid of it. I, nor, Nick, nor anyone else, can
help you unless you are willing, or capable, to do the work needed on your
end to clean the scumware causing this problem off your system. If you feel
that you are not up to doing the necessary work to do so, I can understand
that. Not everyone is computer savvy. But, if that is the case, then you
should take your machine to a reputable company and have them clean your
machine to get rid of this infection.

However, understand that, anything that is to be done to manually repair
your system, whether by email, newsgroup, or written instructions, will
require you to participate and actually do the work in the long run, no
matter who provides the information. I am truly sorry to say that there is
no 'one click' solution to resolving the problem. If you just do not feel
comfortable in trying to do this yourself, then please just take your
machine to a shop and let someone clean it for you.

Hope this helps.

Jan
MS MVP - Windows IE/OE [DTS/AumHa]
Smiles are meant to be shared,
that's why they're so contagious.

Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm