Sign in to follow this  
Guest Joshieca

OT - Porno Ad Pop Up... :(

Recommended Posts

OK...I have this pop up problem....I am running WIN XP PRO. I paid a visit to a site which has some music (mpgs on it) when a pop up ad appeared. I closed the annoying ad and a requester asked if I wanted to "install a new" feature to IE 6. I closed that (choose NO) and moved onto another site. This time it was AVSIM (not AVSIM's fault) and when I clicked to download a file two requesters came up. Not paying that much attention I accidently accepted both of them. Well one of the files was a script or a plug in or some that added to my IE6 files. NOW at random times I get this annoying pop up ad for porn. I don't even have to be in Explorer. I could be playing a game or in Eudora or Excel and it pop ups. :(- I scanned the hard drive with Adware and removed files...didn't help...- I downloaded the latest virus defs for McAfee, scanned the computer, found nothing....- I did a search for openme.exe.....not there....- I did a search in registry for the website, found a couple of keys, removed them, didn't help...still appears....- I checked with MSCONFIG to see if there were anything running out of the ordinary, nope...I am thinking that some sort of script got installed in IE6...Anyone can think of when I can do, short of nuking the whole system and starting from scratch? :(Thanks......Joshhttp://members.cox.net/joshieca/fstimeslink.gif

Share this post


Link to post
Help AVSIM continue to serve you!
Please donate today!

I wish I could help you in regards to "getting rid" of your current problem but no ideas.What made me respond is that I use a program called Atguard that blocks about 95% of the pop-up ads when you are online. You have to leave it off though when downloading files from AVSIM; it blocks TOO much.A web search with any search engine should find it for you ( or winfiles.com perhaps) and if, at the very least, it doesn't block this current window from coming up, perhaps it will at least help you in the future.I think it's a great utility and all of my friends who use it agree, wouldn't be online without it.Good luck.Sincerely,Heather

Share this post


Link to post

Thanks Heather....I do use a program called POP-UP Killer and it does work great....but sometimes these sneaky little SOB's :)get through....

Share this post


Link to post

Try running a program call AdAware. dont remember where to find it but it may helpBobG

Share this post


Link to post

Already tried that... :( Didn't helpThanks though.....>Try running a program call AdAware. dont remember where to >find it but it may help >>BobG

Share this post


Link to post

Also, you may want to go into Tools>Internet Options>Settings>View ObjectsAnd delete everything in there. Whenever a download-on-demand request pops up, the downloaded files go there, so you should be able to get rid of it. The only thing is you will lose any java/flash/shockwave plug-ins that you may have downloaded.Scott

Share this post


Link to post

A simpler way to do that would be go to Tools - Internet Options - Then clicking Delete Cookies and Delete Files. Scott's way works too... That should do it for you! :+ :)Cpudan80

Share this post


Link to post

Yeah I tried that already with a program called Tweak IE 3...it removed all of that stuff and still the thing comes back....(FYI=Nothing in my objects folder)I even tried doing a system restore to a point before I think that I got this thing and that didnt help. :(

Share this post


Link to post

There was a new version of ad-aware just a few weeks or so ago - did you get that one? Otherwise, you could try End-it-all, and see, if there are any unusual processes running, then just kill them. But it sounds, as it could be a process that's not running all the time, so you could check in the Control Panel, if there's anything in 'Scheduled Tasks', that shouldn't be there (The only entry in there on my machine is Norton's Anti-virus).There is a program called 'Ad Substract', that prevents pop-up windows, it's payware, though, but it comes with a month's free trial and also gives you a list of all windows it has blocked - maybe you could find the location from there. I suppose, you have already deleted your cookies? Anyway, if it's activated via a cookie, it shouldn't bombard you with pop-ups without IE running.Finally, in which country are you? There is a good chance you could have a legal case against the company whose ads are popping up - such practices are illegal in many European countries (Forget about that, if you're in the US, though). One possible problem here is, that the pop-ups were activated by your clicking, and therefore agreeing to it.But there are ways around that.Hope some of this is useful.Cheers,Gosta.

Share this post


Link to post

>There was a new version of ad-aware just a few weeks or so >ago - did you get that one? >>Otherwise, you could try End-it-all, and see, if there are >any unusual processes running, then just kill them. But it >sounds, as it could be a process that's not running all the >time, so you could check in the Control Panel, if there's >anything in 'Scheduled Tasks', that shouldn't be there (The >only entry in there on my machine is Norton's Anti-virus). >>There is a program called 'Ad Substract', that prevents >pop-up windows, it's payware, though, but it comes with a >month's free trial and also gives you a list of all windows >it has blocked - maybe you could find the location from >there. >>I suppose, you have already deleted your cookies? Anyway, if >it's activated via a cookie, it shouldn't bombard you with >pop-ups without IE running. >>Finally, in which country are you? There is a good chance >you could have a legal case against the company whose ads >are popping up - such practices are illegal in many European >countries (Forget about that, if you're in the US, though). >One possible problem here is, that the pop-ups were >activated by your clicking, and therefore agreeing to it. >But there are ways around that. >>Hope some of this is useful. >>Cheers, >>Gosta. Yeah I just downloaded the new ver. of Adware...thanksYep...cookies gone.....To me it looks like some kind of script is running...there are no 'Scheduled Tasks' setup, thats where I checked first...Right now I am in the US...and I got it from an ISP in the US. :(

Share this post


Link to post

Bummer!The last thing I can think of, http://www.wilderssecurity.com/B3DKiller.html , just on the off-chance, this is the software that's actually used to generate the ads. Anyway, worth a try, looks like you haven't got that much to lose...Cheers,Gosta

Share this post


Link to post

>Bummer! >>The last thing I can think of, >http://www.wilderssecurity.com/B3DKiller.html , just on the >off-chance, this is the software that's actually used to >generate the ads. Anyway, worth a try, looks like you >haven't got that much to lose... >>Cheers, >>Gosta Thanks for that site...that program did find that BD projector installed...so lets hope that took care of it...will let you all know.

Share this post


Link to post

Well, if not the pop-up porn, at least it removed something you definitely did not want on your HD...Cheers,Gosta

Share this post


Link to post

The only other thing I can suggest right now is to get rid of the windows scripting host. It's useless and is the source of all viruses spreading. I don't have it and never will. Since the porn site dl'ed a script to you, find all scripts on your system and delete all of them. You have no reason to ever have scripts. You can read through them first and see what's been installed and what sites are baing addressed. Also, install Norton Internet Security. It stops all attempts of these types of viruses (and that's what it is) from accessing the internet. It'll precent them in the first place along with an anti-virus program (I use McAfee). You also can do a complete system check with anti-virus software and it'll also find a lot of this type of thing.Finally, if you remember the site where this all started, report them to your ISP as a virus host. Get them shut down.

Share this post


Link to post

I would try going into "Control Panel" and then click on "Add or Remove Programs", and see if there are any suspicious files there. There could be an actual program installed, which is running these popup ads.Worth a try.Regards, :-waveCostasKLWMDell Dimension 4400 Pentium 4 at 1.7 GHz640MB DDR SDRAM at 266MHzNvidia GeForce2 MX400 (2832)20GB Ultra ATA Hard Drive48x Variable CD-ROM DriveMicrosoft Windows XP

Share this post


Link to post

There's zero chance a "virus" installer like this would have an uninstaller. Half the legitimate programs I have don't have uninstallers and thus aren't in the add/remove programs list. But you might be interested to see what's there in any case.So after checking that, check the obvious other places as well - start-up folder, registry run sections ("Run Service", "Run Service Once", etc). It could bt that simple, but I doubt it. I would hazard a guess that it attached itself to another system file.You say you restored back to before this happened. Did you restore everything, like all the system files and both registries and all ini files?

Share this post


Link to post

What you are looking for is BHO Cop. Internet Explorer has whats called Browser Helper Objects that get run every time you startup IE. Unfortunately (and typically for Microsoft), there is no way to get rid of these, uh ... "helpers" ... from within IE or Windows itself because you have no idea what DLL's contain them. Typical "Microsoft Security". :-batAnyways, the "helper" you installed is most likely the problem. To get rid of it (and possibly any other "helpers" you may have inadvertently installed), download BHO Cop from PCMag. This utility lets you view and remove any helpers attached to your IE. Note: some helpers may indeed be good, such as any toolbars from the likes of Google that you may have installed. In general however, most of these "helpers" are porn, spam or spy related and send your every move on the web to some huge database.http://common.ziffdavisinternet.com/util_g...1&i=1134,00.gifBHO Cophttp://www.pcmag.com/article2/0,4149,2023,00.aspGood luck,http://members.rogers.com/eelvish/elrondlogo.gifhttp://members.rogers.com/eelvish/flyurl.gif

Share this post


Link to post

That fixed it. Thanks! This may well end up on our Editor's Pick List.

Share this post


Link to post

This explains something very weird that happened to me a couple weeks ago. I'm on a cable connection with a static IP address. My machine ran very slow for several days and I couldn't find the reason. It went back to normal after defraging the hard disk but I noticed that the disk was nearly full. It had been about 50% free not long before. Zone Alarm then started telling me that a program with an obscure name was trying to act as a server and I kept blocking it. I found and deleted the program (forgot to write down the name) and started exploring my hard disk. I found about 10 gigabytes of short porno movies on it. Someone had uploaded them in the background and was trying to set my machine up as a server dishing them out in the background.I think this technology has already been hijacked. I have my machine buttoned up pretty tight. Zone Alarm kept the stuff from being transmitted but they were able to load it without detection.

Share this post


Link to post

A great program I use and can recommend is Web Washer. It blocks popups as well, but goes beyond that and blocks just about anything you don't wish to have running: Ads, popups, scripts, layers, frames, forms, flash/shockwave, animations, web bugs, referers, cookies, etc.This tool can be as proactive as you wish on all sites, or you can set it up to only block specific sites. I usually keep the scripts, popups, flash/shockwave, cookies, ads, web bugs and referers disabled for all sites, then those that I trust and visit often, I add to the "allow" list which gives them full access (such as AVSIM). Be aware that this can be somewhat of a pain if you visit lots of sites where you want these features to be enabled (eg: if you do a lot of shopping on the net, they'd need to be added, etc)... You'd be adding lots of those site manually to your "allow" list.The good thing is you can tailor it to your needs. I've tried lots of similar tools (and still recommend you run a good firewall such as Outpost: http://www.agnitum.com/products/outpost with its plugins disabled), but this one is by far the most powerful I've run across. Even better: its fully free for non-commercial use.Web Washerhttp://www.webwasher.com/en/products/wwash/index.htmA big Note here: AVSIM requires referer access be enabled for any downloads to work properly... So, make sure you add them to your "allow" list (and support their ads and the like in the process)! Just be aware that any problems you may have on the web with content working once this is installed is probably because its installed. When in doubt, don't doubt the web site you're visiting: check Web Washer first.Take care,http://members.rogers.com/eelvish/elrondlogo.gifhttp://members.rogers.com/eelvish/flyurl.gif

Share this post


Link to post

Same here Elrond. I use Outpost and WWasher right across my network here. Once configured it does kill most things.

Share this post


Link to post

>Are you sure, my man? Works in my browser... Probably >because I don't have a "helper" thats blocking my access. >:-) >>Here's a direct link to the download, if that may help: >>http://common.ziffdavisinternet.com/downlo...1023/bhocop.zip >Thanks....I will check it out tonight when I am back on my PC...Sometimes its good to have Mac....Its a lot easier to get rid of junk like that, if it every happens. :)

Share this post


Link to post

Having read all the other replies, I have one more suggestion. Go to Programs - Accessories - System Tools and run System Information. In it go to Software Environment, then to Startup Programs. Look for anything you think shouldn't be there (be careful, some obscure names are actually important to Windows, so don't go to the next step below if you don't know. Just reply here with a list of what seems weird and I'll try to help).The next step I mentioned is to get rid of what shouldn't be there. If you look in the Location column (still in System Information), it will tell you where is located the instruction that makes the program run everytime you start Windows. It's probably in the registry. You'll need to find the specified location in the registry (left part of the registry editor), find the offending entry (right part of the registry editor) and then remove it (note the value of the entry to find out where the actual file is hidden: the registry entry only tells Windows to run the program, it's not the actual program). Make sure you don't delete the entire folder (left part of the registry editor) in the registry (that's what's called "location" in the System Information program) as some other entries (right part of the registry editor) within that location can be important. To start the registry editor, go to Start - Run, and type regedit.Again, the registry is the most important item in Windows. Don't do anything if you are not 100 % sure. Just ask if you need help.It's not guaranteed that you will solve the problem that way, but it has happened to me once before and I got rid of it that way, so you never know. In the System Information tool, you can also go to Running Tasks to look at what is currently running on your computer, but be prepared for a long list (that's normal).EDITED for spelling__________________________________________________________EricList of all airlines, aircraft manufacturers and aircraft types recognised by ATC:http://www.geocities.com/eric_2203/orhttp://ftp.avsim.com/library/esearch.php?D...atID=fs2002misc

Share this post


Link to post

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this