I have this computer that has windows XP on it, I have installed ad aware and spybot on it, run both of those. I have found things with both. I have removed things with both. I installed AVG anti virus on the computer. Right now spybot and ad aware don't find anything, I ran the antivirus, it found 3 things that I got rid of. Everytime this computer is connected to the internet I'm still getting popup ads on it, ads that will open up without doing anything, it's not like they are a popup that come from the site I'm going to. I have looked at all the exe's that are running, I've looked them all up on the internet and they shouldn't be causing these things. Has anyone run into this before? What could possibly be causing all the popups? Some of the adds seem to not be in a web browser that pop up in the middle of the screen, and they have a close button built into the top of them. I've even booted into safe boot with networking and even then these things come up.
and do all of the things it suggests (that you haven't already done) then post the hijackthis log here and we'll move it to the hijack forum where one of our experts can have a look at it and advise further.
Logfile of HijackThis v1.99.1
Scan saved at 11:31:30 AM, on 10/12/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
I'll move this to the relevant forum shortly.....quick question, did you tick the advanced options? as that log looks quite short.
Liam
What do you mean by advanced options? What options specifically should I check?
Do you mean check these?
list also minor sections (full)
list empty sections (complete)
Make everything found for fixing after scan
Or can you give me a list of everything I should have checked in hijackthis?
Here is the log with all that stuff checked.
Logfile of HijackThis v1.99.1
Scan saved at 12:43:34 PM, on 10/12/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Windows folder: C:\WINDOWS
System folder: C:\WINDOWS\SYSTEM32
Hosts file: C:\WINDOWS\System32\drivers\etc\hosts
Go get SpywareBlaster and IE-Spyads
After clearing all the crap off as stated,install these and update right away. Check for updates on a regular basis. In I.E.,go to tools>popup blocker and activate it. If it refuses to let you go to a trusted site,just hold the Ctrl key down and click the link. Or you can set it to allow the site on each visit...
Stupid question? No such thing!
Virtual Dr. to the rescue!
Just ask. Bookmark your post for easy reference.
==================================
Go get SpywareBlaster and IE-Spyads
After clearing all the crap off as stated,install these and update right away. Check for updates on a regular basis. In I.E.,go to tools>popup blocker and activate it. If it refuses to let you go to a trusted site,just hold the Ctrl key down and click the link. Or you can set it to allow the site on each visit...
Well, I already installed spywareblaster and as far as I can tell with that, it seems to not really get rid of anything, it just takes away vulnerabilities in internet explorer, firefox etc. If there is something you can do in spywareblaster that will actively remove spyware/adware let me know, also even with spywareblaster installed ad's still pop up just like before.
I installed ie-spyads now windows still popup but when they do they display a blank white page instead of the ad.
Right now I'm stumped, I have run numerous virus scans on the computer have removed trojans/viruses, I have run spybot and ad aware after fully updating them, I have checked the running processes, I have installed spywareblaster and even booted the computer into safe boot with networking and still the ads continue to popup on websites that have no popup ads like google. When in firefox the ad's don't pop up in a new window, instead they pop in and replace whatever page you are looking at.
Moderators, either one, can you give me a list of everything I should have checked in hijackthis and then if you still feel it would be better move this thread into the hijackthis?
Last edited by btcomm; October 13th, 2005 at 01:13 AM.
Sorry if I confused you. What I meant was to do the suggestions made by liam858 and fink. Then,if that fixes the present problems,do as I suggested to keep the crap from getting on in the first place. That's what SpywareBlaster and I.E.spyads do. They put a very large database of nasty sites into your I.E.>tools>internet options>security>restricted sites and keep the baddies from getting on in the first place. If you've enabled popup blocker and it still won't let you into sites that you know are ok, I'd be very suspicious that you still have nasties aboard. Might try the sites listed below to run a scan.
Sorry if I confused you. What I meant was to do the suggestions made by liam858 and fink. Then,if that fixes the present problems,do as I suggested to keep the crap from getting on in the first place. That's what SpywareBlaster and I.E.spyads do. They put a very large database of nasty sites into your I.E.>tools>internet options>security>restricted sites and keep the baddies from getting on in the first place. If you've enabled popup blocker and it still won't let you into sites that you know are ok, I'd be very suspicious that you still have nasties aboard. Might try the sites listed below to run a scan.
I can try running those things I guess, I've already run anti spyware anti adware, anti viruses and removed many things, run them again and there seems to be nothing left yet I still get popups.
It doesn't matter, i think the standard look of the log is what you get in the newest version, it just looks shorter than usual, did you run it in Normal Mode?
It doesn't matter, i think the standard look of the log is what you get in the newest version, it just looks shorter than usual, did you run it in Normal Mode?
Liam
Normal mode?
I don't think I've changed any options when I ran it but if you tell me where that option is I can check it and make sure it's in normal mode. Until I can do that looking at the hijack log I currently have listed, can anyone tell what might be causing these popups?
I opened up the hosts file in windows\system32\drivers\etc and this is what I got.
Is there particular adware that adds this stuff in there? Or is it normal to have all this stuff in it? Could all this stuff in the hosts file be causing all these popups? Also if this is part of it, could having this stuff in the host file randomly open up these ads without me going to a website that has ads?
Ok an update, I deleted the hosts file. It got recreated and it was 0 kb. I then rebooted the computer. I plugged in the ethernet cable, not too long after I got an error
Reply With Quote
Originally Posted by liam858
