Pop-Up Ad on IE Window Close (not site related!)

[Fizz]

Every ten times I close IE I get a popup ad. It usually
has a URL of something like:
"http://www.summersinrangoon.com/go.php?l=0003".

I get this WITHOUT NAVIGATING TO A SITE!!!! I can run IE
(which goes to "about:blank" because I have it set that
way) then close it..repeat that 10 times and the ad comes
up!

It seems to happen whether it's the last IE window open or
not..after closing the 10th window, I get the ad.

I searched the registry for "summersinrangoon" but came up
empty. Where could this little pain in my butt be hidden?

--Fizz

 

[war17]

1. If you have Windows Messenger Service, disable it. The Messenger service
is typically not needed for home users.

Right-click My Computer and click Manage.
Fold out the Services and Applications option and click Services.
Right-click the Messenger entry, select Properties, and choose Disable under
Startup Type.
Click OK.

You should no longer receive messages sent via the messenger service.

2. Use Popup Stopper to get rid of the popups from the Internet.

http://www.panicware.com/product_psfree.html

3. Use the following scanners to find and remove the website.

SpyBot S&D searches your harddisk for so-called spy- or adbots;
http://security.kolla.de/
or
Adaware
http://www.lavasoftusa.com/software/adaware/

 

[Fizz]

I actually have to keep messenger services running since
this is a work machine...

Anyway...I had gotten AdAware as a recommendation from a
couple of people so I got it and ran it. It flagged 4
registry entries and a couple hundred cookies. I deleted
them all and the problem is gone.

Thanks for the help folks.

--Fizz

 

[Mike Burgess]

Fizz,
It's not really that site that's the culprit, it uses a script from another
site,
"undergroundlair.net" = Troj/AdClick-N (identified as a Trojan)
http://www.sophos.com/virusinfo/analyses/trojadclickn.html

You can stop it from running by using a HOSTS file (see below)
Then clear your cache .....
____________________________________________________________
Mike Burgess [MVP Windows Shell\User] http://www.mvps.org/winhelp2002/
Blocking Spyware, Adware, Parasites, Hijackers, Trojans, with a HOSTS file
http://www.mvps.org/winhelp2002/hosts.htm [updated 02-07-04]
Please post replies to this Newsgroup, email address is invalid