I followed a link here last week supposedly to a tool site only it took me
to a porn site and now I keep getting popups of women doing naughty stuff at
least once per day. It's pretty darn sick and if my wife sees it she's gonna
think I did it on purpose, she's like that. Would anyone know how to get
this off my system? I've used Norton's and several Spyware killers, but to
no avail.
KY
--
http://users.adelphia.net/~kyhighland
Adaware from Lavasoft has been great. I never realized that there wa so
much crap gettig loaded on my computer just from going to regular websites.
Adawre finds it and quarantines until you decide if you want to delete it.
I had to laugh at the comment about one's wife finding the porn pop-ups.
Last year before my ISP put up a spam blocker I was working on my Outlook
Express filter trying to add in the words I wanted it to exclude. My
daughter (15 at the time) was sitting at my desk and saw the list. She went
screaming to mommy that "daddy was a pervert" I am very lucky to have the
spouse Ii do we both had a good laugh about it after I showed them what I
was actually doing.
Best rfebarfds,
Charles
"Jim Wilson" <[email protected]> wrote in message
news:MPG.1aaa71719473e337989809@localhost...
> KYHighlander wrote...
> > I've used Norton's and several Spyware killers, but to
> > no avail.
>
> Not all spyware killers are created equal, and some actually contain or
> propagate spyware or adware of their own.
>
> The best one I've used is Spybot Search & Destroy. Be sure to download
> the latest updates. You'll want the first three items from the download
> section on this page.
>
> http://www.safer-networking.org/index.php?page=download
>
> Jim
In article <[email protected]>,
[email protected] says...
> I followed a link here last week supposedly to a tool site only it took me
> to a porn site and now I keep getting popups of women doing naughty stuff at
> least once per day. It's pretty darn sick and if my wife sees it she's gonna
> think I did it on purpose, she's like that. Would anyone know how to get
> this off my system? I've used Norton's and several Spyware killers, but to
> no avail.
>
> KY
>
Have you cleared cache and removed all cookies? If that doesn't work,
uninstalling and re-installing the browser might help. I don't know if
you can do that with IE, I don't use it unless I have to.
On Sun, 29 Feb 2004 18:04:22 -0500, "KYHighlander"
<[email protected]> wrote:
>Do you do that from DOS or windows explorer? don't seem to work inside
>explorer.
from within explorer. you might not have any hidden directories,
although it sounds like you probably do. microsoft keeps making it
harder and harder to work on it's precious piece of shit browser. I
wouldn't be surprised if they have killed that particular work around
in one of the recent service packs.
I read that trick on a windows annoyances type of website. a little
sleuthing on the web should get you started.
http://www.blackviper.com/index.html
a method using the command prompt is discussed here:
http://swatit.org/bots/gtbot.html
and as always... google is your friend.
I am running a firewall, but don't know about windows messaging.
--
http://users.adelphia.net/~kyhighland
"Mark" <[email protected]> wrote in message
news:nOU%[email protected]...
>
>
> KYHighlander wrote:
> > I followed a link here last week supposedly to a tool site only it took
me
> > to a porn site and now I keep getting popups of women doing naughty
stuff at
> > least once per day. It's pretty darn sick and if my wife sees it she's
gonna
> > think I did it on purpose, she's like that. Would anyone know how to get
> > this off my system? I've used Norton's and several Spyware killers, but
to
> > no avail.
> >
>
>
>
> I bet you have windows message service enabled and/ or are not running a
firewall.
>
>
>
> --
>
> Mark
>
> N.E. Ohio
>
>
> Never argue with a fool, a bystander can't tell you apart. (S. Clemens,
A.K.A.
> Mark Twain)
>
> When in doubt hit the throttle. It may not help but it sure ends the
suspense.
> (Gaz, r.moto)
>
I had to laugh at the irony of your complaint about "women doing naughty
stuff"; your sig is "KY" LOL!
dave
KYHighlander wrote:
> I followed a link here last week supposedly to a tool site only it took me
> to a porn site and now I keep getting popups of women doing naughty stuff at
> least once per day. It's pretty darn sick and if my wife sees it she's gonna
> think I did it on purpose, she's like that. Would anyone know how to get
> this off my system? I've used Norton's and several Spyware killers, but to
> no avail.
>
> KY
>
"KYHighlander" <[email protected]> wrote
> I followed a link here last week supposedly to a tool site only it
> took me to a porn site and now I keep getting popups of women doing
> naughty stuff at least once per day. It's pretty darn sick and if my
> wife sees it she's gonna think I did it on purpose, she's like that.
> Would anyone know how to get this off my system? I've used Norton's
> and several Spyware killers, but to no avail.
I do not understand how it invaded your system unless you accepted
something from the web site.
In any case.
You can try Symantec (owns Norton) web site virus checker.
http://security.symantec.com/sscv6/default.asp
The other suggestions sound pretty good to me.
Check startup programs. Some are in MSCONFIG.
...Start - Run - "MSCONFIG" - Enter
Delete cookies.
...(in Internet Explorer) - Tools - Internet Options - Temporary Internet
files - Delete Cookies...
And try running Ad Aware.
You can try installing ZoneAlarm to see if it is phoning home.
Afterwards. You might want to get the latest security updates from Windows
Update.
Good luck.
On 2004/2/28 1:12 AM, "Jack Straight" <[email protected]> wrote:
> "KYHighlander" <[email protected]> wrote
>
>> I followed a link here last week supposedly to a tool site only it
>> took me to a porn site and now I keep getting popups of women doing
>> naughty stuff at least once per day. It's pretty darn sick and if my
>> wife sees it she's gonna think I did it on purpose, she's like that.
>> Would anyone know how to get this off my system? I've used Norton's
>> and several Spyware killers, but to no avail.
We would need a bit more information in order to help you. What OS? What web
browser do you use? What are you security settings, etc.
As has been mentioned, clear out all cookies and temporary files. You should
also check what plug-ins are installed and delete any that you are unsure
of.
>
> I do not understand how it invaded your system unless you accepted
> something from the web site.
Unfortunately, it is all too easy. Many of the Microsoft products come with
initial settings that default to allowing all kinds of potential malware. A
web browser that is set to accept without question any active content, such
as Active X components or client side Java applets, is an invitation for a
web site to drop something nasty on your machine. One weakness that some
sites are exploiting has to do with the default settings for Windows
Messaging services. This has a valid use in an enterprise where there is a
need to send out system-wide messages or alerts but can be abused and offers
little in a single user environment.
Do you do that from DOS or windows explorer? don't seem to work inside
explorer.
--
http://users.adelphia.net/~kyhighland
"Bridger" <[email protected]> wrote in message
news:[email protected]...
> On Sat, 28 Feb 2004 17:00:58 -0500, "KYHighlander"
> <[email protected]> wrote:
>
> >I've run Spybot, AdAware, Spysweep and spyware begone, all found spyware
> >that the others missed. One even found a dialer that for the life of me I
> >can't find. Another found ISTbar in a directory that don't exist inside
my
> >temporary Internet directory.
>
>
> to reveal hidden directories edit the line in the address bar thusly:
>
> if it's:
> C:\windows\temporaryinternetfiles
>
> change it to:
> C:\windows\temporaryinternetfiles/
>
> (add the forward slash...)
Think it has been solved, I think the messenger was the culprit. I stopped
the msmsg.exe process and then deleted the directory that messenger was
using in the program files directory. seems to have worked.
Thanks to everyone for the help.
--
http://users.adelphia.net/~kyhighland
"Edwin Pawlowski" <[email protected]> wrote in message
news:[email protected]...
> KYHighlander wrote:
> > Otherwise I don't know I
> > may just reformat and reinstall everything. ;-(
> >
>
> You've done everything but the System Restore. Why not try that before a
> reformat????
>
> --
> Ed
> [email protected]
> http://pages.cthome.net/edhome
>
>
Windows Update is up to date.
I have Norton's Internet Security, it shows nothing.
I deleted all cookies and temporary internet files
I ran Ad Aware and Spy Sweeper both found stuff but not the 'ladies' with
fingers where they ought not to be.
I did turn windows messenger off while I was in Msconfig.
thanks
KY
--
http://users.adelphia.net/~kyhighland
"Jack Straight" <[email protected]> wrote in message
news:[email protected]...
> "KYHighlander" <[email protected]> wrote
>
> > I followed a link here last week supposedly to a tool site only it
> > took me to a porn site and now I keep getting popups of women doing
> > naughty stuff at least once per day. It's pretty darn sick and if my
> > wife sees it she's gonna think I did it on purpose, she's like that.
> > Would anyone know how to get this off my system? I've used Norton's
> > and several Spyware killers, but to no avail.
>
> I do not understand how it invaded your system unless you accepted
> something from the web site.
>
> In any case.
>
> You can try Symantec (owns Norton) web site virus checker.
> http://security.symantec.com/sscv6/default.asp
> The other suggestions sound pretty good to me.
> Check startup programs. Some are in MSCONFIG.
> ...Start - Run - "MSCONFIG" - Enter
> Delete cookies.
> ...(in Internet Explorer) - Tools - Internet Options - Temporary Internet
> files - Delete Cookies...
> And try running Ad Aware.
>
> You can try installing ZoneAlarm to see if it is phoning home.
>
> Afterwards. You might want to get the latest security updates from Windows
> Update.
>
> Good luck.
>
>
>
>
>
>
>
>
Might also want to check applications in msconfig. If you find the obvious
culprit, uncheck the box.
"KYHighlander" <[email protected]> wrote in message
news:[email protected]...
> I followed a link here last week supposedly to a tool site only it took me
> to a porn site and now I keep getting popups of women doing naughty stuff
at
> least once per day. It's pretty darn sick and if my wife sees it she's
gonna
> think I did it on purpose, she's like that. Would anyone know how to get
> this off my system? I've used Norton's and several Spyware killers, but to
> no avail.
>
> KY
>
> --
>
> http://users.adelphia.net/~kyhighland
>
>
>
KYHighlander wrote...
> I've used Norton's and several Spyware killers, but to
> no avail.
Not all spyware killers are created equal, and some actually contain or
propagate spyware or adware of their own.
The best one I've used is Spybot Search & Destroy. Be sure to download
the latest updates. You'll want the first three items from the download
section on this page.
http://www.safer-networking.org/index.php?page=download
Jim
In article <[email protected]>,
[email protected] says...
> Windows Update is up to date.
>
> I have Norton's Internet Security, it shows nothing.
>
> I deleted all cookies and temporary internet files
>
> I ran Ad Aware and Spy Sweeper both found stuff but not the 'ladies' with
> fingers where they ought not to be.
>
> I did turn windows messenger off while I was in Msconfig.
>
> thanks
> KY
>
Now that you've got the big stuff out of the way- consider getting a
pop-up blocker if you didn't already do that as part of your first round
of cleaning. I use Proxomitron, but as that one's deadware, you'll have
better luck with web washer or ad subtract.
/vic
KYHighlander wrote:
> Would anyone know how to get this off my system? I've used Norton's
> and several Spyware killers, but to no avail.
>
> KY
You could try deleteing all cookies for a start
.
My first thought was to run spyware like Ad Aware, but you say that did not
find anything. What operating system do you use? Windows XP has a feature
that lets you go back to a time earlier than when you did this. It is under
the System Tools menu under System Restore. No data will be lost, but all
the settings and strange cookies will be changed or deleted. Worked for me
once afdter some coupon program found its way to my cmputer. .
--
Ed
[email protected]
http://pages.cthome.net/edhome
Try Ad Aware, Spy bot, and poss. "hijack this"
Tony D.
"Bay Area Dave" <[email protected]> wrote in message
news:6nV%[email protected]...
> I had to laugh at the irony of your complaint about "women doing naughty
> stuff"; your sig is "KY" LOL!
>
> dave
>
> KYHighlander wrote:
> > I followed a link here last week supposedly to a tool site only it took
me
> > to a porn site and now I keep getting popups of women doing naughty
stuff at
> > least once per day. It's pretty darn sick and if my wife sees it she's
gonna
> > think I did it on purpose, she's like that. Would anyone know how to get
> > this off my system? I've used Norton's and several Spyware killers, but
to
> > no avail.
> >
> > KY
> >
>
Like Hell It Cant!!
Dont reinstall IE, should not have to.
Tony D.
"Jack Straight" <[email protected]> wrote in message
news:[email protected]...
> "KYHighlander" <[email protected]> wrote
>
>>
> I do not understand how it invaded your system unless you accepted
> something from the web site.
>
> In any case.
>
> You can try Symantec (owns Norton) web site virus checker.
> http://security.symantec.com/sscv6/default.asp
> The other suggestions sound pretty good to me.
> Check startup programs. Some are in MSCONFIG.
> ...Start - Run - "MSCONFIG" - Enter
> Delete cookies.
> ...(in Internet Explorer) - Tools - Internet Options - Temporary Internet
> files - Delete Cookies...
> And try running Ad Aware.
>
> You can try installing ZoneAlarm to see if it is phoning home.
>
> Afterwards. You might want to get the latest security updates from Windows
> Update.
>
> Good luck.
>
>
>
>
>
>
>
>
"Hi-Jack This"
"KYHighlander" <[email protected]> wrote in message
news:[email protected]...
><<<<<<<<<<<<<<<<. How do I check for
the plugins?
Dont Do That PLEASE!! well unlell you like extra work.....lol
Try That "Hijack This" 1st
Tony D.
"KYHighlander" <[email protected]> wrote in message
news:[email protected]...
> I've run Spybot, AdAware, Spysweep and spyware begone, all found spyware
> that the others missed. One even found a dialer that for the life of me I
> can't find. Another found ISTbar in a directory that don't exist inside my
> temporary Internet directory. I just turned off windows messenger so I am
> hoping it is that. Otherwise I don't know I may just reformat and
reinstall
> everything. ;-(
>
> --
>
> http://users.adelphia.net/~kyhighland
>
>
> "Jim Wilson" <[email protected]> wrote in message
> news:MPG.1aaa71719473e337989809@localhost...
> > KYHighlander wrote...
> > > I've used Norton's and several Spyware killers, but to
> > > no avail.
> >
> > Not all spyware killers are created equal, and some actually contain or
> > propagate spyware or adware of their own.
> >
> > The best one I've used is Spybot Search & Destroy. Be sure to download
> > the latest updates. You'll want the first three items from the download
> > section on this page.
> >
> > http://www.safer-networking.org/index.php?page=download
> >
> > Jim
>
>
Windows XP, IE and medium security. Also running Norton's firewall, AV and
Internet Security.
All cookies have been cleared as well as temp Inet files. How do I check for
the plugins?
I also turned off Active X, Java and scripting. I think I can live without
these after this. ;-)
Thanks
KY
--
http://users.adelphia.net/~kyhighland
"Bob Haar" <[email protected]> wrote in message
news:BC661DBC.A5549%[email protected]...
> On 2004/2/28 1:12 AM, "Jack Straight" <[email protected]> wrote:
>
> > "KYHighlander" <[email protected]> wrote
> >
> >> I followed a link here last week supposedly to a tool site only it
> >> took me to a porn site and now I keep getting popups of women doing
> >> naughty stuff at least once per day. It's pretty darn sick and if my
> >> wife sees it she's gonna think I did it on purpose, she's like that.
> >> Would anyone know how to get this off my system? I've used Norton's
> >> and several Spyware killers, but to no avail.
>
> We would need a bit more information in order to help you. What OS? What
web
> browser do you use? What are you security settings, etc.
>
> As has been mentioned, clear out all cookies and temporary files. You
should
> also check what plug-ins are installed and delete any that you are unsure
> of.
>
> >
> > I do not understand how it invaded your system unless you accepted
> > something from the web site.
>
> Unfortunately, it is all too easy. Many of the Microsoft products come
with
> initial settings that default to allowing all kinds of potential malware.
A
> web browser that is set to accept without question any active content,
such
> as Active X components or client side Java applets, is an invitation for a
> web site to drop something nasty on your machine. One weakness that some
> sites are exploiting has to do with the default settings for Windows
> Messaging services. This has a valid use in an enterprise where there is a
> need to send out system-wide messages or alerts but can be abused and
offers
> little in a single user environment.
>
>
>
KYHighlander wrote:
> Otherwise I don't know I
> may just reformat and reinstall everything. ;-(
>
You've done everything but the System Restore. Why not try that before a
reformat????
--
Ed
[email protected]
http://pages.cthome.net/edhome
I've run Spybot, AdAware, Spysweep and spyware begone, all found spyware
that the others missed. One even found a dialer that for the life of me I
can't find. Another found ISTbar in a directory that don't exist inside my
temporary Internet directory. I just turned off windows messenger so I am
hoping it is that. Otherwise I don't know I may just reformat and reinstall
everything. ;-(
--
http://users.adelphia.net/~kyhighland
"Jim Wilson" <[email protected]> wrote in message
news:MPG.1aaa71719473e337989809@localhost...
> KYHighlander wrote...
> > I've used Norton's and several Spyware killers, but to
> > no avail.
>
> Not all spyware killers are created equal, and some actually contain or
> propagate spyware or adware of their own.
>
> The best one I've used is Spybot Search & Destroy. Be sure to download
> the latest updates. You'll want the first three items from the download
> section on this page.
>
> http://www.safer-networking.org/index.php?page=download
>
> Jim
KYHighlander wrote:
> I followed a link here last week supposedly to a tool site only it took me
> to a porn site and now I keep getting popups of women doing naughty stuff at
> least once per day. It's pretty darn sick and if my wife sees it she's gonna
> think I did it on purpose, she's like that. Would anyone know how to get
> this off my system? I've used Norton's and several Spyware killers, but to
> no avail.
>
I bet you have windows message service enabled and/ or are not running a firewall.
--
Mark
N.E. Ohio
Never argue with a fool, a bystander can't tell you apart. (S. Clemens, A.K.A.
Mark Twain)
When in doubt hit the throttle. It may not help but it sure ends the suspense.
(Gaz, r.moto)
On Sat, 28 Feb 2004 17:00:58 -0500, "KYHighlander"
<[email protected]> wrote:
>I've run Spybot, AdAware, Spysweep and spyware begone, all found spyware
>that the others missed. One even found a dialer that for the life of me I
>can't find. Another found ISTbar in a directory that don't exist inside my
>temporary Internet directory.
to reveal hidden directories edit the line in the address bar thusly:
if it's:
C:\windows\temporaryinternetfiles
change it to:
C:\windows\temporaryinternetfiles/
(add the forward slash...)
As long as hijacking is all that is being done.
--
http://users.adelphia.net/~kyhighland
"Joe Schmoe" <[email protected]> wrote in message
news:[email protected]...
> On Fri, 27 Feb 2004 22:48:03 -0500, "KYHighlander"
> <[email protected]> wrote:
>
> >I followed a link here last week supposedly to a tool site only it took
me
> >to a porn site and now I keep getting popups of women doing naughty stuff
at
> >least once per day. It's pretty darn sick and if my wife sees it she's
gonna
> >think I did it on purpose, she's like that. Would anyone know how to get
> >this off my system? I've used Norton's and several Spyware killers, but
to
> >no avail.
> >
> >KY
> Perhaps it's the CWS hack. This has become very problematic and
> frequent. Contrary to the opinion of others, this is a completely
> automatic process and can happen through firewalls. I have both
> software and hardware firewalls and still managed to get infected.
>
> Check this out for more information
>
> http://www.spywareinfo.com/articles/cws/
>
> Good luck
>
>
===========================================================================
> Joe
Abbreviated for Kentucky
--
http://users.adelphia.net/~kyhighland
"Bay Area Dave" <[email protected]> wrote in message
news:6nV%[email protected]...
> I had to laugh at the irony of your complaint about "women doing naughty
> stuff"; your sig is "KY" LOL!
>
> dave
>
> KYHighlander wrote:
> > I followed a link here last week supposedly to a tool site only it took
me
> > to a porn site and now I keep getting popups of women doing naughty
stuff at
> > least once per day. It's pretty darn sick and if my wife sees it she's
gonna
> > think I did it on purpose, she's like that. Would anyone know how to get
> > this off my system? I've used Norton's and several Spyware killers, but
to
> > no avail.
> >
> > KY
> >
>
On Fri, 27 Feb 2004 22:48:03 -0500, "KYHighlander"
<[email protected]> wrote:
>I followed a link here last week supposedly to a tool site only it took me
>to a porn site and now I keep getting popups of women doing naughty stuff at
>least once per day. It's pretty darn sick and if my wife sees it she's gonna
>think I did it on purpose, she's like that. Would anyone know how to get
>this off my system? I've used Norton's and several Spyware killers, but to
>no avail.
>
>KY
Perhaps it's the CWS hack. This has become very problematic and
frequent. Contrary to the opinion of others, this is a completely
automatic process and can happen through firewalls. I have both
software and hardware firewalls and still managed to get infected.
Check this out for more information
http://www.spywareinfo.com/articles/cws/
Good luck
===========================================================================
Joe