Click to See Complete Forum and Search --> : XXX pop ups
houllier*
January 22nd, 2004, 08:02 PM
Hi
I keep getting a load of pop ups and most of them seem to be XXX ones even on sites i know that doesn't have pop ups.
I have Ad-Aware installed and run it daily so something must be installed on my comp that Ad-Aware doesn't recognise, any advice of anything else i can do?
Thnx
Stalemate
January 22nd, 2004, 08:43 PM
Stop browsing warez sites and install the Google toolbar to block popups. http://forums.windrivers.com/images/smilies/wink.gif
TripleRLtd
January 22nd, 2004, 08:55 PM
Hi
I keep getting a load of pop ups and most of them seem to be XXX ones even on sites i know that doesn't have pop ups.
I have Ad-Aware installed and run it daily so something must be installed on my comp that Ad-Aware doesn't recognise, any advice of anything else i can do?
ThnxDownload and run HijackThis and let us have a look> but not too much of a look.http://forums.windrivers.com/images/smilies/eek3.gif
http://mjc1.com/mirror/hjt/
asm481
January 23rd, 2004, 07:02 AM
Hi
I keep getting a load of pop ups and most of them seem to be XXX ones even on sites i know that doesn't have pop ups.
I have Ad-Aware installed and run it daily so something must be installed on my comp that Ad-Aware doesn't recognise, any advice of anything else i can do?
Thnx
Do you have Spybot Search and Destroy? Have you updated Ad-Aware? Delete cookies?
Adept-Why add a toolbar? Personally I hate all those toolbars, I have a 19 inch monitor and want to look at all of it.
cgonzo
January 23rd, 2004, 07:54 AM
I have had a lot of customers with this same problem. I run Ad-aware, Spybot, CWShredder, virus scan. Then I run Msconfig and do a search on anything I don't recognize. Usually end up having to boot in DOS to delete the files named in Msconfig. Good luck.
Stalemate
January 23rd, 2004, 09:35 AM
...Adept-Why add a toolbar? Personally I hate all those toolbars, I have a 19 inch monitor and want to look at all of it.It's the only thing that has successfully worked for me so far (over 1200 popups blocked since I installed it). http://forums.windrivers.com/images/smilies/wink.gif
You can read what other techs here have said about it here: Google Toolbar (http://forums.windrivers.com/showthread.php?t=50899).
It doesn't take up anymore space on my IE toolbar as I've moved it to a better position suiting my needs. I hate clutter too.
FatalException0E
January 23rd, 2004, 03:06 PM
There was a new build of ad-aware that came out a while back, and all the updates are for that new build. I think its build 181. If you've been getting 'no updated components available' for a long time, you need to uninstall what you have and download the latest version of it.
houllier*
January 24th, 2004, 11:33 AM
There was a new build of ad-aware that came out a while back, and all the updates are for that new build. I think its build 181. If you've been getting 'no updated components available' for a long time, you need to uninstall what you have and download the latest version of it.
It's the newest version.
Thanks for the replies.
It seems to coming from something called 'NCase' and 'CommonName' that is in the registry, i keep deleting them but they keep coming back :(
The Computer Valet
January 24th, 2004, 11:51 AM
It's the newest version.
Thanks for the replies.
It seems to coming from something called 'NCase' and 'CommonName' that is in the registry, i keep deleting them but they keep coming back :(
Wouldn't the XXXToolbar do this, too?
Cheers,
m
houllier*
January 24th, 2004, 12:25 PM
Wouldn't the XXXToolbar do this, too?
Cheers,
m
What's that?
Archer
January 24th, 2004, 01:15 PM
Parasite CommonName
CommonName is marketed as a 'keywords' service, allowing one to enter simple names insatead of URLs.
After its original release, the software has become a complicated (and sometimes buggy) search-hijacker and adware, aggressively bundled with many third-party apps.
Manual removal
Each successive variant of CommonName gets harder to remove by hand. Variants with an LSP (Mib, Zenet, Winnet) are particularly tricky: do not try to delete them by just deleting the files. If you manage to delete the LSP you will lose network connectivity.
CommonName/Comwiz
This variant cannot be manually uninstalled from the normal desktop. You have to boot Windows without letting the two self-restoring processes start up.
On Windows NT/2000/XP/2003, you can do this by pressing F8 just before Windows XP starts loading and choosing "Safe Mode". Open the 'Program Files' folder and delete the 'CommonName' folder inside it.
On Windows 95/98/Me, you will have to boot to DOS to do it, and enter the commands:
cd "\Program Files"
deltree /Y CommonName
This is a 'dirty' way of uninstalling the software, leaving behind a bit of a mess. If you like you can clear up by deleting the registry keys mentioned in the instructions fro CommonName/Agent.
http://www.doxdesk.com/parasite/CommonName.html
You can also try CoolWebShredder 1.46.3 http://www.spychecker.com/program/coolwebshredder.html
TripleRLtd
January 24th, 2004, 01:38 PM
Just an observation, but if you had downloaded and run HiJack this as asked in an earlier post, we could have had this all sorted by now. Now we have XXX and ncase...so what else is likely to be there? HiJack will help us sort this ALL out rather then going one slooooowwwww step at a time, don't ya think?http://forums.windrivers.com/images/smilies/thumbs.gif
BTW, Adaware (new with latest) should have caught this stuff. As I think has been noted, download and run SpyBot as well.
The Computer Valet
January 25th, 2004, 11:04 PM
Ahh, the delightful XXXToolbar. One part of the equally delightful ISTBar. You can find out more if you like:
http://www.doxdesk.com/parasite/ISTbar.html
Prince Abaddon
January 25th, 2004, 11:53 PM
If this computer is shared, it may be your older brother? Since YOU don't recognize the sites? And why would you be accepting thoes active X installers from unknown sites?
confus-ed
January 26th, 2004, 05:45 AM
Just an observation, but if you had downloaded and run HiJack this as asked in an earlier post, we could have had this all sorted by now. Now we have XXX and ncase...so what else is likely to be there? HiJack will help us sort this ALL out rather then going one slooooowwwww step at a time, don't ya think?http://forums.windrivers.com/images/smilies/thumbs.gif..
Well you said it twice, & no-one was listening ... :rolleyes: ;)
Comes top of My list for getting 'malware' anyway :)
''Immunising' with spybot (another of my 'faves') is also a top tip for those active X 'nasties' :thumbs:
As for flipping pop-up stoppers ... I want my pop-ups thank you very much, I just don't want lots of stupid adds in 'em, & I certainly don't want another 'useless' app floating about - use your Hosts file to convince your comp that the add is on your own machine, quicker & 'better' than a pop up stopper as it doesn't munch bandwidth to get an advert to then block it !!! :rolleyes:
houllier*
January 29th, 2004, 02:23 PM
If this computer is shared, it may be your older brother? Since YOU don't recognize the sites? And why would you be accepting thoes active X installers from unknown sites?
It's not shared.
I downloaded Spybot and got rid of a few things.
The XXX pop ups seem to have stopped, but i am getting normal pop ups from random sites, one being google.
I just got a pop up when i hit reply on that msg too, again from that same site.
houllier*
January 29th, 2004, 02:26 PM
Ok, i just ran that hijack program, here is the log.
Logfile of HijackThis v1.97.7
Scan saved at 19:25:20, on 29/01/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Download and install Spybot. Do an immediate update. It should catch and allow you to remove those.
http://security.kolla.de , downloads to the left.
slgrieb
January 29th, 2004, 04:45 PM
For 3X popups, I suggest the ILookUp (aka GlobalSearch) toolbar. Also a pain in the butt to get rid of. One of those searchbars that is capable of drive-by installation. Also a good bet as the culprit in houllier*s trouble. Check out http://www.spywareinfo.com/toolbars/ for a listing of registry keys associalted with toolbars of all sorts.
I have had better luck with SpyHunter for removing toolbars and such than even SpyBot and AdAware. The free trial download will list all spyware detected and the associated registry keys if you want to do a manual removal. "Course, if you have a couple of hundred keys to remove the $30 for the full version may not look too bad. You can download it at http://www.enigmasoftwaregroup.com/
TripleRLtd
January 29th, 2004, 06:06 PM
Since you've already run SpyBot, do as Doc says and make sure you download the latest updates as well. He nails it with aaalllll those searchbars and malware which in fact are why you get allll those popups, but one more needs mentioning: DAP.exe. Download accelerator is crapware and is really buggy and should be gotten rid of.
PS
I wonder what your log would have looked like a few days ago.http://forums.windrivers.com/images/smilies/eek3.gif
EDIT
Download the Google toolbar to replace all those junk ones: and it contains an effective popup stopper for freee!!!
SnowBlindGrafix
January 30th, 2004, 11:01 AM
Check Add/Remove Programs for anything nCase and CommonName, and un-install them. I know that nCase connects to a web site to install. Not sure about CommonName.
Check out this site for help finding programs that loading at startup:
http://www.answersthatwork.com/Tasklist_pages/tasklist.htm
Another thing to try if running XP is SFC /purgecache then SFC /scannow from "RUN".
And stay away from P2P software unless you know that the one you are using is ad-ware free. Good luck finding that! K++ is getting harder and harder to find.
TripleRLtd
January 30th, 2004, 11:07 AM
Check Add/Remove Programs for anything nCase and CommonName, and un-install them. I know that nCase connects to a web site to install. Not sure about CommonName.
Check out this site for help finding programs that loading at startup:
http://www.answersthatwork.com/Tasklist_pages/tasklist.htm
Another thing to try if running XP is SFC /purgecache then SFC /scannow from "RUN".
And stay away from P2P software unless you know that the one you are using is ad-ware free. Good luck finding that! K++ is getting harder and harder to find.Ummm. I think this one has been all taken care of Snowman.http://forums.windrivers.com/images/smilies/thumbs.gif He is now left with only searchbars and some leftover crap. No need for SFC any longer.
Green_Eyed
January 30th, 2004, 02:25 PM
That "HiJack This" is a really marvelous tool. Do yourself a favor and download it, save it to a disk and run it every so often.
We have encountered problems like this at work. I work in a library and we have public users that do horrendous things with our computers. HiJack This was helpful in getting rid of all sorts of things, that nCase thing included.
:thumbs:
houllier*
January 31st, 2004, 08:23 PM
That "HiJack This" is a really marvelous tool. Do yourself a favor and download it, save it to a disk and run it every so often.
:thumbs:
I did, i posted my log above ;)
I haven't had any pop ups for last couple of days so it all seems to be ok now, i got rid of everything you said and seems fine.
Thanks all for your help.
TripleRLtd
January 31st, 2004, 09:06 PM
I did, i posted my log above ;)
I haven't had any pop ups for last couple of days so it all seems to be ok now, i got rid of everything you said and seems fine.
Thanks all for your help.And THAT is the important thing. http://forums.windrivers.com/images/smilies/thumbs.gif Now: keep the crap off, right houllier? Good luck: now YOU know how to help others, right? http://forums.windrivers.com/images/smilies/wink.gif
Logan
April 19th, 2004, 10:08 AM
If you run a firewall or ad blocking you can block these and this has worked for me.
62.146.88.105 ilead.itrack.it :thumbs:
Mark
NooNoo
April 21st, 2004, 07:26 AM
Welcome to Windrivers Logan
Some "ad blockers" are the worst spyware
Spybot immunise is quicker off the mark, and its easy to add them to the host file as 127.0.0.1
No idea why you put up that ip and fqdn, there is no authorisation to view.
cat
May 4th, 2004, 12:10 PM
I use google toolbar
http://toolbar.google.com/
and it blocked 99 % of popups by now.
confus-ed
May 4th, 2004, 02:45 PM
I use google toolbar
http://toolbar.google.com/
and it blocked 99 % of popups by now.
Ah another one ! ... sucked in by all that hype :rolleyes: the google toolbar is infact effectively spyware, so yeah lets get rid of popups with that ! :eek2: - to make it not spyware you need to configure it correctly & know how cookies work - And then there were four (http://www.google-watch.org/bigbro.html) - google may not be your friend ;) - if/when it goes public expect it to get a whole lot harder to setup in a more friendly way ..
windrivers.com
Copyright WebMediaBrands Inc., All Rights Reserved.