new pop-up on my computer

M

Molly in AL

Today I suddenly have a new "pop-up" appearing on my computer when I turn it
on, and it keeps reappearing no matter how many times I cancel it. It's
asking me for a login and password, and I have no idea where it came from or
what it is. It says it will take me to a website 67.228.53.115 and also has
the url eagle-card.com on the pop-up. If I try to just enter that url in my
browser, it won't go there because a password, etc. is required. Yesterday I
updated and ran Ad-Aware by Lavasoft for the first time in a long time. I
don't know if that has anything to do with it. But I was already sick of the
regular pop-ups that appear when I first boot up, now I have a new one with
no idea where it came from. Any help would be appreciated!

Molly
 
T

Twayne

Today I suddenly have a new "pop-up" appearing on my computer when I
turn it on, and it keeps reappearing no matter how many times I
cancel it. It's asking me for a login and password, and I have no
idea where it came from or what it is. It says it will take me to a
website 67.228.53.115 and also has the url eagle-card.com on the
pop-up. If I try to just enter that url in my browser, it won't go
there because a password, etc. is required. Yesterday I updated and
ran Ad-Aware by Lavasoft for the first time in a long time. I don't
know if that has anything to do with it. But I was already sick of
the regular pop-ups that appear when I first boot up, now I have a
new one with no idea where it came from. Any help would be
appreciated!

Molly

Well, that IP belongs to softlayer.com, NOT eagle-card.com. Ar first
glance softlayer.com appear to be a hosting service but further
inspecitions says they might be pretty dirty.
Eagle.com now, does look spammy and seems to be for a golf business
of some kind. They have credit cards, clubs, all kinds of spammy
sounding things and I wouldn't touch them with a ten foor pole.

So, unless you know exactly WHO/WHAT they are, don't go near them and
especially don't try to sign in with any of your usernames and
passwords!
I'll be honest with you, they look OK despite the info below, but
then again if you've never heard of them and this just started
happening, then maybe there is something to it that's malicious. Are
you certain it has nothing to do with your own ISP? What page should IE
open to? e.g. what did you set it to open to?

I spent about ten minutes researching their records and don't see
anything wrong with softlayer but eagle.com is pretty crummy looking
IMO. . That doesn't mean that they haven't been hacked however, or
that by clicking one of their links that you will actually go to them;
you could easily be redirected somewhere else you shouldn't be and/or no
telling what they'd try to push to you in the way of malware if you
signed into their sites. So don't.

Try changing your Home Page to a site you like that loads quickly and
see if the problem comes back. It probably won't. If it does, you
would then add it to the Unstrusted sites list in IE.


Visit:
http://www.dslreports.com/forum/r20558307-httpwwwsoftlayercom
for the only negative thing I found on softlayer. eaglecard just looks
so dirty I didn't even bother to research it.

HTH
 
M

Molly in AL

My homepage for IE is at Yahoo, has been for years. That's the page that
first comes up when I open IE.

I have no idea what softlayer.com is or eagle-card.com is. I've never
signed up for a login or password at either site. I ran my AdAware again,
and it found some more cookies, etc., which I deleted. I'm hoping that gets
rid of the pop-up, but you never know, I guess. Any other suggestions???
 
P

PA Bear [MS MVP]

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://aumha.net/viewforum.php?f=30,
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
 
T

Twayne

My homepage for IE is at Yahoo, has been for years. That's the page
that first comes up when I open IE.

I have no idea what softlayer.com is or eagle-card.com is. I've never
signed up for a login or password at either site. I ran my AdAware
again, and it found some more cookies, etc., which I deleted. I'm
hoping that gets rid of the pop-up, but you never know, I guess. Any
other suggestions???

Both Pa Bear and Kelly's advice are good ones. You should only have one
antivirus program, but Adaware is not enough to kill off the many other
forms of malware that you could have. You do of course, update your AV
and Adaware before you run them, right? If not, you're wasting your
time with them.
One good antivirus program is all you need but Adaware alone is
nowhere near enough to keep the rest of the malware at bay. You should
have an arsenal of 3 of 4 good ones. IMO adding Spyware Search &
Destroy, Windows Defender and Spyware Guard are OK ones. There are
quite a few others, too.

Start with Pa Bear's advice. If that's no help, then go the HijackThis
route advised by Kelly. For HijackThis to be most effective, you need
to have done everything you can first to eliminate a lot of things, so
that's why Pa Bear's advice is reasonable to try first.

Best of luck,

Twayne
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top