IE 6 Pop-Ups

[Guest]

Since downloading SP2 when ever I go to a web site or game room all of a
sudden the pop-up page bounces up and I have to delete it..This is horrible
and I need some help. I have reinstalled XP and IE and no help'

 

[Altrüs]

Hi,

If you are referring to obscene pop-up windows, you may
be infected with spyware.

These programs install ad programs on your computer and can
flood your machine wih pop-up boxes with pay-content that
usually includes adult material.

To crack down on the problem, try running the utilities
mentioned below and you may have a leg up on the problem.

First, download AdAware. This is an excellent program which
detects and deletes spyware, and other malware programs.
AdAware is available from:

http://www.lavasoftusa.com/support/download/

After downloading and installing AdAware, *be sure to update
it*. This will ensure you are protected against the latest
threats. Then, run it.

Next, we'll get CWShredder. This neat program catches
variants which may have been missed by AdAware. CWShredder
is available from:

http://www.spywareinfo.com/~merijn/files/cwshredder.zip

Together, they should both remove any spyware which is
present on your system.

I would recommend you read the following resource, a
valuable guide to what spyware is, and the kind of problems
it can cause. You can find it here:

http://mvps.org/winhelp2002/unwanted.htm

Best Regards,

Altrus


in message
: Since downloading SP2 when ever I go to a web site or game
room all of a
: sudden the pop-up page bounces up and I have to delete
it..This is horrible
: and I need some help. I have reinstalled XP and IE and no
help'

 

[Guest]

These are not obscene pop-ups at all..I have adaware etc and these pop-ups
are new since I downloaded sp2..there is nothing at all on the page when it
opens just the addy of the pop-ups

 

[Altrüs]

Hi,

What is the URL displayed by the pop-ups?

Altrus


in message
: These are not obscene pop-ups at all..I have adaware etc
and these pop-ups
: are new since I downloaded sp2..there is nothing at all on
the page when it
: opens just the addy of the pop-ups
:
: "Altrüs" wrote:
:
: > Hi,
: >
: > If you are referring to obscene pop-up windows, you
may
: > be infected with spyware.
: >
: > These programs install ad programs on your computer and
can
: > flood your machine wih pop-up boxes with pay-content
that
: > usually includes adult material.
: >
: > To crack down on the problem, try running the utilities
: > mentioned below and you may have a leg up on the
problem.
: >
: > First, download AdAware. This is an excellent program
which
: > detects and deletes spyware, and other malware programs.
: > AdAware is available from:
: >
: > http://www.lavasoftusa.com/support/download/
: >
: > After downloading and installing AdAware, *be sure to
update
: > it*. This will ensure you are protected against the
latest
: > threats. Then, run it.
: >
: > Next, we'll get CWShredder. This neat program catches
: > variants which may have been missed by AdAware.
CWShredder
: > is available from:
: >
: > http://www.spywareinfo.com/~merijn/files/cwshredder.zip
: >
: > Together, they should both remove any spyware which is
: > present on your system.
: >
: > I would recommend you read the following resource, a
: > valuable guide to what spyware is, and the kind of
problems
: > it can cause. You can find it here:
: >
: > http://mvps.org/winhelp2002/unwanted.htm
: >
: > Best Regards,
: >
: > Altrus
: >
: >
: > "MisseyMoose" <[email protected]>
wrote
: > in message
: >
: > : Since downloading SP2 when ever I go to a web site or
game
: > room all of a
: > : sudden the pop-up page bounces up and I have to delete
: > it..This is horrible
: > : and I need some help. I have reinstalled XP and IE
and no
: > help'
: >
: >
: >

 

[Guest]

When I click on the tools it displays either turn on or off pop-up blockers
from my browser Internet Explorer..This just started when I downloaded sp2

 

[Guest]

www.popuppers.com

 

[Guest]

www.popuppers.com

 

[eagle]

http://sarc.com/avcenter/venc/data/pf/adware.roimoi.html

reg edit it out

 

[Altrüs]

Hi,

The following thread will probably help you:

http://forums.spywareinfo.com/lofiversion/index.php/t18964.html

To summarize the above you may wish to try the following:

Download HijackThis! from the following site:
http://www.wilderssecurity.com/supportfiles/HijackThis1982.exe

Next, update AdAware, and configure it for a Full Scan (as
described below):
http://www.lavahelp.com/howto/fullscan/index.html

Next, reconfigure Windows to display all files. As quoted
from the initial link:

--
Reconfigure Windows Explorer to show Hidden Files: [required
step]
Open the Windows Explorer | Tools | Folder Options - View
[tab]:

Scroll down to the "Files and Folders" section.
Select: "Display the contents of system folders".

Scroll down to the "Hidden Files and Folders" section.
Select: "Show hidden files and folders", Ok the prompt
Uncheck: "Hide file extensions for known file types"
Uncheck: "Hide protected operating system files" Ok the
Prompt, click Apply

Click the "Apply to all Folders" button. Close Windows
Explorer.
-- (From the above thread)

Next, perform the following:

---(Quoted from the site)

O4 - HKLM\..\Run: [npmwjua] C:\WINDOWS\ckdvbt.exe
O4 - HKLM\..\Run: [jfaquqqy] C:\WINDOWS\hlcn.exe
O8 - Extra context menu item: Shorten URL -
http://www.cjb.net/menuext.html
O16 - DPF: {AD7FAFB0-16D6-40C3-AF27-585D6E6453FD} -
http://dload.ipbill.com/del/loader.cab
O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F}
(RealArcadeRdxIE Class) -
http://games-dl.real.com/gameconsole/Bundl...ArcadeRdxIE.cab
O16 - DPF: {E0CE16CB-741C-4B24-8D04-A817856E07F4} -
http://cabs.media-motor.net/cabs/mmed.cab

Then reboot, on restart, restart in Safe Mode [required
step - see "How To" below]

Start | Run (type) "%temp%" (no quotes)
Completely delete the entire contents of that "temp" folder.

Open Windows Explorer locate and delete the following:

C:\WINDOWS\ckdvbt.exe <--this file
C:\WINDOWS\hlcn.exe <--this file

While still in Safe Mode, run Ad-Aware and fix everything it
finds.
---(End Quote)

If you have different file names, or it doesn't match those
shown above, feel free to post your log here.

If you have any questions or comments, do not hesitate to
reply,

Regards,

Altrus

 

[Guest]

Thank you so very much..going to work on this now will keep you posted..Rose

Hi,

The following thread will probably help you:

http://forums.spywareinfo.com/lofiversion/index.php/t18964.html

To summarize the above you may wish to try the following:

Download HijackThis! from the following site:
http://www.wilderssecurity.com/supportfiles/HijackThis1982.exe

Next, update AdAware, and configure it for a Full Scan (as
described below):
http://www.lavahelp.com/howto/fullscan/index.html

Next, reconfigure Windows to display all files. As quoted
from the initial link:

--
Reconfigure Windows Explorer to show Hidden Files: [required
step]
Open the Windows Explorer | Tools | Folder Options - View
[tab]:

Scroll down to the "Files and Folders" section.
Select: "Display the contents of system folders".

Scroll down to the "Hidden Files and Folders" section.
Select: "Show hidden files and folders", Ok the prompt
Uncheck: "Hide file extensions for known file types"
Uncheck: "Hide protected operating system files" Ok the
Prompt, click Apply

Click the "Apply to all Folders" button. Close Windows
Explorer.
-- (From the above thread)

Next, perform the following:

---(Quoted from the site)

O4 - HKLM\..\Run: [npmwjua] C:\WINDOWS\ckdvbt.exe
O4 - HKLM\..\Run: [jfaquqqy] C:\WINDOWS\hlcn.exe
O8 - Extra context menu item: Shorten URL -
http://www.cjb.net/menuext.html
O16 - DPF: {AD7FAFB0-16D6-40C3-AF27-585D6E6453FD} -
http://dload.ipbill.com/del/loader.cab
O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F}
(RealArcadeRdxIE Class) -
http://games-dl.real.com/gameconsole/Bundl...ArcadeRdxIE.cab
O16 - DPF: {E0CE16CB-741C-4B24-8D04-A817856E07F4} -
http://cabs.media-motor.net/cabs/mmed.cab

Then reboot, on restart, restart in Safe Mode [required
step - see "How To" below]

Start | Run (type) "%temp%" (no quotes)
Completely delete the entire contents of that "temp" folder.

Open Windows Explorer locate and delete the following:

C:\WINDOWS\ckdvbt.exe <--this file
C:\WINDOWS\hlcn.exe <--this file

While still in Safe Mode, run Ad-Aware and fix everything it
finds.
---(End Quote)

If you have different file names, or it doesn't match those
shown above, feel free to post your log here.

If you have any questions or comments, do not hesitate to
reply,

Regards,

Altrus

.

 

[Altrüs]

: Thank you so very much..going to work on this now will
keep you posted..Rose

No problem - please do.

Altrus


in message
: Thank you so very much..going to work on this now will
keep you posted..Rose
:
: "Altrüs" wrote:
:
: > Hi,
: >
: > The following thread will probably help you:
: >
: >
http://forums.spywareinfo.com/lofiversion/index.php/t18964.html
: >
: > To summarize the above you may wish to try the
following:
: >
: > Download HijackThis! from the following site:
: >
http://www.wilderssecurity.com/supportfiles/HijackThis1982.exe
: >
: > Next, update AdAware, and configure it for a Full Scan
(as
: > described below):
: > http://www.lavahelp.com/howto/fullscan/index.html
: >
: > Next, reconfigure Windows to display all files. As
quoted
: > from the initial link:
: >
: > --
: > Reconfigure Windows Explorer to show Hidden Files:
[required
: > step]
: > Open the Windows Explorer | Tools | Folder Options -
View
: > [tab]:
: >
: > Scroll down to the "Files and Folders" section.
: > Select: "Display the contents of system folders".
: >
: > Scroll down to the "Hidden Files and Folders" section.
: > Select: "Show hidden files and folders", Ok the prompt
: > Uncheck: "Hide file extensions for known file types"
: > Uncheck: "Hide protected operating system files" Ok the
: > Prompt, click Apply
: >
: > Click the "Apply to all Folders" button. Close Windows
: > Explorer.
: > -- (From the above thread)
: >
: > Next, perform the following:
: >
: > ---(Quoted from the site)
: >
: > O4 - HKLM\..\Run: [npmwjua] C:\WINDOWS\ckdvbt.exe
: > O4 - HKLM\..\Run: [jfaquqqy] C:\WINDOWS\hlcn.exe
: > O8 - Extra context menu item: Shorten URL -
: > http://www.cjb.net/menuext.html
: > O16 - DPF: {AD7FAFB0-16D6-40C3-AF27-585D6E6453FD} -
: > http://dload.ipbill.com/del/loader.cab
: > O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F}
: > (RealArcadeRdxIE Class) -
: >
http://games-dl.real.com/gameconsole/Bundl...ArcadeRdxIE.cab
: > O16 - DPF: {E0CE16CB-741C-4B24-8D04-A817856E07F4} -
: > http://cabs.media-motor.net/cabs/mmed.cab
: >
: > Then reboot, on restart, restart in Safe Mode [required
: > step - see "How To" below]
: >
: > Start | Run (type) "%temp%" (no quotes)
: > Completely delete the entire contents of that "temp"
folder.
: >
: > Open Windows Explorer locate and delete the following:
: >
: > C:\WINDOWS\ckdvbt.exe <--this file
: > C:\WINDOWS\hlcn.exe <--this file
: >
: > While still in Safe Mode, run Ad-Aware and fix
everything it
: > finds.
: > ---(End Quote)
: >
: > If you have different file names, or it doesn't match
those
: > shown above, feel free to post your log here.
: >
: > If you have any questions or comments, do not hesitate
to
: > reply,
: >
: > Regards,
: >
: > Altrus
: >
: >