Internet Explorer Pop-ups

[pedstersplanet]

For the past few weeks I have experiencing random pop-up advert windows in I.E from sites that do not carry pop-ups.. Ive a pop-up killer but most bypass it. I have scanned for spyware, adware, etc, but my program (Spy Killer) just deletes cookies, etc, and doesn't find anything else.
I have the google, and ebay toolbars installed. I've tried looking in the registry for any abnomalities, but it looks ok....... And my running processes are ok, cant see any strange .exe's running.
So I thought I'd ask in here for any ideas?

[pedstersplanet]

Hmmmm, I un-installed the eBay toolbar, and the pop-up's have stopped....Strange.. Now I know what was the culprit!

[pedstersplanet]

Hmmmmmm, 24hrs later, they have started to appear again....... Any ideas....?

[Graf1771]

You could try running a program like ad-aware or hijackthis that are free to download. They scan your hard drive for spyware programs and allow you to delete any unsolicited programs.

Another useful little program i found is called SpyWareGuard - again free - that sits running in the background and warns you when anything is about to be downloaded or any changes made to your browser.

Similar to a virus checker i suppose but i've found it useful to have as well.

[mikmik]

Okay, pedstersplanet, this is an excellent topic, and I am frech from a two month battle with what has become known as parasite ware.

Now this site is a good starting point for many links and very, very good information and resources. This guy is a heavy-duty programmer, and he hates this crap.
Right at the top of his content is a box that may be able to tell you if you have a browser hijacker, or adware on your system:
http://www.doxdesk.com/parasite/.

Graf1771, you wrote

Another useful little program i found is called SpyWareGuard - again free - that sits running in the background and warns you when anything is about to be downloaded or any changes made to your browser.

That is an EXCELLENT program, it is found here:
Javacool software
(All these links are found on the above 'doxdesk.com' site, and I have used them as my "always installed" arsenal, [along with Norton AV, and a hardware firewall]. They are all FREEWARE, and work excellent)

Spybot Search & Destroy -- there are other programs of note here, but the link for downloading will take you to another page...this is the fastest link there: Download Spybot S & D from CNET

Here is the AdAware page: Lavasoft.de
Lo and behold, download this one from CNET also!

Now I am not familiar with Adaware, but when you scan with Spybot, after the scan - you may safely pick "Fix Selected problems" when it is done - after that, choose to "immunize" your computer, and finally, to "lock the hosts file from within IE". This will stop programs from changing your home page and redirecting you to sites that download more 'parasites' on to your computer.

Finally, a very serious problem that is developing, is something called "CWS", or "Cool Web Search".
I got this from my network that got infected from someone using IM and chat rooms. It is a nasty, nasty, infection, but is not very prevelant, so we are lucky, usually.
This site saved my arse, and much, much good info and resources are available here - including all about this 'CWS' and a related problem. See: http://www.spywareinfo.com/articles/cws/


Last, but not least (for now), go to TrendMicro and download & run the 'Sysclean' damage clean-up engine.
http://www.trendmicro.com/download/dcs.asp

They also have an excellent (what else lol) online scanner for AV that I use in addition to my Norton AV, it is called "Housecall" : http://housecall.trendmicro.com/

I wich I had more time to go over stuff here, but if you have anymore questions, or anyone else does, let's have 'em!

Absolutely one of the two best anti-virus sites I have seen : VirusList.com

[athena]

For the past few weeks I have experiencing random pop-up advert windows in I.E from sites that do not carry pop-ups.. Ive a pop-up killer but most bypass it. I have scanned for spyware, adware, etc, but my program (Spy Killer) just deletes cookies, etc, and doesn't find anything else.
I have the google, and ebay toolbars installed. I've tried looking in the registry for any abnomalities, but it looks ok....... And my running processes are ok, cant see any strange .exe's running.
So I thought I'd ask in here for any ideas?

try this program:
http://www.webroot.com/installations...387&oc=11&ps=F

i used various help programms like adware,
spywareblaster,hijack this, browser hijack
but with spysweeper i had the best results
so far. firewalls and virusscanners wont work...
spyware programs are nearly impossible to remove manually because they intertwine with core system functions or programs you want to keep.

greetings

[achronister]

Also you can check out http://www.spywareinfo.com/. You can usually find information on just about anything spyware related on here.

[PitterPA]

All the answers here look great. My wife ran into the same problem. She would get pop-ups from HER site. We ran the standard programs, one at a time. Spy-Bot, Spy-Blaster, etc. Finally in desperation, I had her run Spy-Bot, then Spyblaster, then McAfee then do a restart. The problem went away and hasn't come back ... yet :)

[mikmik]

Yes, achronister, it is worth mentioning that site twice...haha, great minds think alike :O)

Here is an online scan for your computer

Because the never ending war against Spyware is escalating to new heights, SpywareInfo and XBlock have joined forces to achieve the most effective malware detection.

How does it work?
This scanner is an ActiveX applet. After a short delay in which your browser downloads the control file, you will receive a "Warning Dialogue" requesting permission for the scanner to run. Click "Yes" and the applet will pop up and scan. You will be alerted if any spyware is found. When a spyware or malware is found, you will be alerted and asked if you want to remove it. If no spyware is found, the scanner will disappear on its own.

It is here,http://www.spywareguide.com/txt_onlinescan.html and the first thing that will happen, is like it says, a box will appear asking if it is okay to download and install something...

Check the security certificate confirmation, it should say all is in order, then click 'yes'...

After a few seconds or so, a scan will begin. It took about 45 seconds on my computer, DSL and 2gig, so that is relatively fast.

You can then click on the logo and go to the home page, if all is in order, that is :O)

The Spyware Guide was created to provide an all inclusive and updated resource on spy ware applications, what they do and how they’re used. These resources include: which software applications can detect and defeat spyware, an extensive database of all known spy software and adware applications and contact information as well as other privacy related products. As the spy versus spy battle rages on we have decided to document this fascinating battlefield.

Here are some other reputable and quite helpful sites, many offering other types of security scans as well:

http://www.auditmypc.com/

Firewall Test, Port Scan and Security Audit Choices
Firewall Test that performs a port scan to determine your level of security. Port scans can include all 65,535 ports or can be narrowed to just the ports you wish to test. Port scans are commonly used to find holes in your firewall and are an important part of a complete security audit.
Spyware Removal, privacy leak test and patch management software that checks for Adware and offers spyware removal instructions. Amazing what your computer gives out!
Popup Blocking and free popup blocker download. Checks popup blocking ability.
Antispam can't solve the spam problem, but it can allow you to fight back!

OKAY! I just added this one to my 'Favorites':

http://www.computercops.biz/index.php
Welcome to Computer Cops -- Where too much security is not enough!
Computer security is a vitally important and progressive field, in Information Technology and our daily lives. To stay ahead, Computer Cops Security Professionals, features updated security information through the use of News Summaries, Staff Articles, and Forum Communities, downloads, and much more without user fees. Registration is required....

I will check this site out, but it looks very good.
Any one else got suggestions?

Sigh..List of all the online scans, and support forum...(another into the 'Favorites lol)
http://www.security-forums.com/forum...b_pages&cat=27

[Andilinks]

I too am battling this problem and have found that it is an escallating arms race where more and more anti-spyware is always needed.

Just as I've always suspected the virus writing/removal industry I am wary of new anti spyware and anti adware.

In any case I continue to collect links here:
http://www.andilinks.com/sec.htm#38041

I have 26 links and am thinking of beginning an entire page for this topic (which will certainly have a link to this thread on it.

The products that I have used successfully are in a red font, and I suspect I will be working through this list, probably finding a few fake anti spyware products that are actually ad/spyware themselves...

Andi

edit: corrected error