Spyware, Viruses, & Security forum

General discussion

Help....being overran with pop-ups

by Early4 / March 18, 2007 11:24 PM PDT

Saturday while visiting a forum that I go to everyday, a few pop-ups came up. I checked to make sure my blocker was on, it was. Well since then I've been almost unable to stay online because of the amount of pop-ups...from all different sites. They interfer with everything, even typing this.

I have AV 7.5 SE, I ran SptBot, HouseCall (free version), Ad-ware and Ewido, all of them are showing a large amount of trogans. I had them all cleaned out, shut down and did a system restore. Clean out the temp files, the temp folder and the cache and emptied the recycle bin.

They will not go away.

Any help would be very appreciated.

Discussion is locked
You are posting a reply to: Help....being overran with pop-ups
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: Help....being overran with pop-ups
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
If you did a system restore
by roddy32 / March 19, 2007 12:16 AM PDT

after you cleaned the trojans out, they all came back because there are usually copies in there. I would start by rescanning and removing everything found but don't touch system restore this time. Let us know how you are doing and IF you are OK after that we will give you directions on how to purge system restore. If you still have problems after rescanning, then give us more info please as to what the names of the trojans are that you can not get rid of.

Collapse -
Still there...
by Early4 / March 19, 2007 3:49 AM PDT

I ran all the program again. The AVG anti virus came up clean. Spy Bot showed the following and fix them:

FastClick: Tracking cookie or cookie of tracking site (File, nothing done)
C:\Documents and Settings\Sandra\Cookies\sandra@media.fastclick[2].txt

FastClick: Tracking cookie or cookie of tracking site (File, nothing done)
C:\Documents and Settings\Sandra\Cookies\sandra@fastclick[2].txt

TargetNet: Tracking cookie or cookie of tracking site (File, nothing done)
C:\Documents and Settings\Sandra\Cookies\sandra@targetnet[2].txt

Ewido found 8 infection that they rated a high:

---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------

+ Created on: 1:44:43 PM, 3/19/2007
+ Report-Checksum: 6201A67D

+ Scan result:

C:\Documents and Settings\Sandra\Cookies\sandra@adopt.euroclick[2].txt -> Spyware.Cookie.Euroclick : Cleaned with backup
C:\Documents and Settings\Sandra\Cookies\sandra@fastclick[2].txt -> Spyware.Cookie.Fastclick : Cleaned with backup
C:\Documents and Settings\Sandra\Cookies\sandra@media.fastclick[2].txt -> Spyware.Cookie.Fastclick : Cleaned with backup
C:\Documents and Settings\Sandra\Cookies\sandra@targetnet[2].txt -> Spyware.Cookie.Targetnet : Cleaned with backup
C:\Documents and Settings\Sandra\Cookies\sandra@trafficmp[1].txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
C:\Documents and Settings\Sandra\Cookies\sandra@tribalfusion[2].txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP158\A0024699.exe -> Heuristic.Win32.Dialer : Cleaned with backup
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP158\A0024700.exe -> Heuristic.Win32.AVKiller : Cleaned with backup


::Report End

I went back on IE and the pop ups, by the dozens are still there. They are from all kinds of sites, no just one catagory, as like when you get hit with a porn infection, though there are some of those.

IE is pretty much useless at this point...

I posted the HiJackThis log on their forum but it hasn't been replied yet.

Thanks

Collapse -
Most of what you have there
by roddy32 / March 19, 2007 4:49 AM PDT
In reply to: Still there...

is tracking cookies which will not cause popups. The other 2 that ewido found were in system restore and were supposedly cleaned. I would recommend just waiting to see what the forum you posted the log in says. They can see more in a HJT log than we can see here with the ewido and spybot logs. Good luck and please be patient with whoever you posted the log to. All those forums are busy.

Collapse -
Issues
by Early4 / March 19, 2007 6:22 AM PDT

Thanks so much. At least I know that what you've seen isn't the root of all this evilness.

I noticed that the forum is super busy. I'll use Firefox until I hear from them.

Really appreciated the time you took to review my information.

Raven

Collapse -
Issues...
by Marianna Schmudlach / March 19, 2007 8:34 AM PDT
In reply to: Issues

Hi Raven,

I found your log and I replied with instructions Wink

Collapse -
(NT) You are welcome, You are in good hands.
by roddy32 / March 19, 2007 9:55 AM PDT
In reply to: Issues
Popular Forums
icon
Computer Newbies 10,686 discussions
icon
Computer Help 54,365 discussions
icon
Laptops 21,181 discussions
icon
Networking & Wireless 16,313 discussions
icon
Phones 17,137 discussions
icon
Security 31,287 discussions
icon
TVs & Home Theaters 22,101 discussions
icon
Windows 7 8,164 discussions
icon
Windows 10 2,657 discussions

GIVEAWAY

Turn up the volume with our Apple Byte sweeps!

Two lucky winners will take home the coveted smart speaker that lets Siri help you around your connected house. This sweepstake ends Feb. 25, 2018.