Not sure where to report....

[PoppaRex]

I have been having difficulty with an adware program that
MS antispyware (MSAS) had not been identifying as an
issue. I cleaned out all the ad/spy-ware programs
identified but still had the popups.

It looks like something called URLBrowser that appeared
in the startup section of advanced tools was the cause
but, it appeared that even blocking this failed to stop
the popups. There is a file called iexplor.exe which
loaded the URLBrowser upon rebooting. MSAS did flag that
iexplor was trying to install the URLBrowser, but i am
curious why it did not flag this program as adware?

So far i am happy with the beta product, but i should not
have to know what a BHO is to use it. It would be nice
if there was a setting that said... "block all unknown
processes from running." This would force all software
mfgs to register with someone somewhere and let us all
get clean, safe, gas.

Thanks!
Poppa

 

[Guest]

I apologoze.... I still get the popups... just took a
while. Wasn't iexplor.exe after all. :-(

 

[Ron Chamberlin]

Hi Poppa,

Boot into Safe Mode (F8) at startup;
Empty your temporary files AND your Temporary Internet Files* C:\Documents
and Settings\Username\Local Settings\Temporary Internet Files folder ;
Run the scan while in safe mode;
If you are running SP2, open IE--->Tools--->Manage Add-ons, and uncheck any
BHO's that you don't recognize.

Ron Chamberlin
MS-MVP



*The .tif are Temporary Internet Files, and are stored in a different barn
than 'normal' temp files.
Here's how I kludge thru to them: Open Windows Explorer--->C:\Documents and
Settings. Then it's to the Tool Bar--->Folder Options--->View--->Hidden
Files and Folders and check the box "Show hidden files and folders" > Now
expand C:\Documents and Settings and under each user you will now see a
folder "Local Settings". Open that puppy and choose Temporary Internet
Files. I am not concerned about the cookies therein, but everything else
can go for now.

 

[Ron Chamberlin]

Hi Poppa,
Yup. I remember when it was safe and fun to drive the Internet.

Meanwhile, may I suggest going to
http://www.microsoft.com/athome/security/default.mspx
for best practices. Be sure to watch the video!

Ron Chamberlin
MS-MVP

 

[Guest]

THanks Ron. I can try. The company where i work has had
their "experts" trying to clean my machine for two weeks
now. I am guessing they tried that (used multiple anti
adware products) but it's worth another shot.

The problem i am having is something that keeps
installing the host files "count.exitexchange.com" and
various iterations of "www01.paypopup.com" on my PC. I
am not sure if these allow the popups or are a symptom of
the popups. Blocking them just is temporary and they
return with the next pop-up.

Thanks!
Rob (poppa)