Gggggrrrrrr ****ing Pop Ups
11 May 2004, 09:39 AM
#1
Scooby Regular
Thread Starter
Join Date: Feb 2002
Posts: 2,547
Likes: 0
Received 0 Likes
on
0 Posts
Gggggrrrrrr ****ing Pop Ups
Keep getting pops up telling me that my computer is infected with Spyware of something. Everytime I open a new page I get a new one. Internet is also running very slow and keeps crashing.
I keep re-seting my home page in internet options to Scoobynet but everytime I log on the homepage is blank.com (I think).
I've tried deleting cookies and temp int folder but nothing works.
Any suggestions please...........
Chris
I keep re-seting my home page in internet options to Scoobynet but everytime I log on the homepage is blank.com (I think).
I've tried deleting cookies and temp int folder but nothing works.
Any suggestions please...........
Chris
11 May 2004, 09:42 AM
#2
Scooby Senior
11 May 2004, 10:48 AM
#3
Scooby Regular
Thread Starter
Join Date: Feb 2002
Posts: 2,547
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by Nick
Install free Lavasoft Ad-aware from www.lavasoft.de click on the downloads section.
11 May 2004, 04:01 PM
#5
Scooby Regular
Thread Starter
Join Date: Feb 2002
Posts: 2,547
Likes: 0
Received 0 Likes
on
0 Posts
Installed and run ad-aware which has cleared up some of the mess.
Still can't get rid of about:blank which comes up as my homepage when I log on. Everytime I reset to Scoobynet it always comes back
Will try and search for spybot as suggested above, anyother ideas?
Cheers
Chris
Still can't get rid of about:blank which comes up as my homepage when I log on. Everytime I reset to Scoobynet it always comes back
Will try and search for spybot as suggested above, anyother ideas?
Cheers
Chris
Trending Topics
11 May 2004, 05:11 PM
#9
Scooby Senior
Originally Posted by chris singleton
Installed and run ad-aware which has cleared up some of the mess.
Still can't get rid of about:blank which comes up as my homepage when I log on. Everytime I reset to Scoobynet it always comes back
Chris
Still can't get rid of about:blank which comes up as my homepage when I log on. Everytime I reset to Scoobynet it always comes back
Chris
11 May 2004, 07:21 PM
#10
Scooby Regular
Join Date: Jan 2003
Posts: 518
Likes: 0
Received 0 Likes
on
0 Posts
11 May 2004, 07:30 PM
#11
Scooby Senior
Originally Posted by si325i
www.mozilla.org i use it and get no pop ups at all.
11 May 2004, 08:20 PM
#12
Scooby Regular
Join Date: Aug 2001
Location: Hampshire
Posts: 10,954
Likes: 0
Received 0 Likes
on
0 Posts
I've got the same prob on my folks pc and Ad Aware and SpyBot have done **** all with all the latest updates.
As posted on my Poxy Spyware.... thread it seems that you refresh the start page, fire up and all is ok. As soon as you close IE its running a script or something which sets the homepage back to About:Blank which in turn is tied into this pop-up/search page gremlin.
Any thoughts on where IE shutdown routines can be found?
As posted on my Poxy Spyware.... thread it seems that you refresh the start page, fire up and all is ok. As soon as you close IE its running a script or something which sets the homepage back to About:Blank which in turn is tied into this pop-up/search page gremlin.
Any thoughts on where IE shutdown routines can be found?
11 May 2004, 08:49 PM
#13
Scooby Regular
Join Date: Aug 2002
Posts: 494
Likes: 0
Received 0 Likes
on
0 Posts
Try turning your system restore off in the system settings from the control panel befofe running the adware etc and then reboot. I had a similar problem with a virus warning and this resolved it.
12 May 2004, 12:04 AM
#14
Scooby Regular
Join Date: Aug 2001
Location: Hampshire
Posts: 10,954
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by wrxmark
Try turning your system restore off in the system settings from the control panel befofe running the adware etc and then reboot. I had a similar problem with a virus warning and this resolved it.
12 May 2004, 12:23 AM
#15
Guest
Posts: n/a
Keep getting pops up telling me that my computer is infected with Spyware of something. Everytime I open a new page I get a new one. Internet is also running very slow and keeps crashing.
I keep re-seting my home page in internet options to Scoobynet but everytime I log on the homepage is blank.com (I think).
I've tried deleting cookies and temp int folder but nothing works.
Any suggestions please...........
Chris
I keep re-seting my home page in internet options to Scoobynet but everytime I log on the homepage is blank.com (I think).
I've tried deleting cookies and temp int folder but nothing works.
Any suggestions please...........
Chris
Tams
Windows XP Home
Click Start->Settings ->Control Panel
Click Performance and Maintenance
Click Administrative Tools
Double click Services Scroll
down and highlight "Messenger"
Right-click the highlighted line and choose Properties.
Click the STOP button.
Select Disable or Manual in the Startup Type scroll bar
Click OK
Windows XP Professional
Click Start->Settings ->Control Panel
Click Administrative Tools
Click Services
Double click Services Scroll
down and highlight "Messenger"
Right-click the highlighted line and choose Properties.
Click the STOP button.
Select Disable or Manual in the Startup Type scroll bar
Click OK
12 May 2004, 08:32 AM
#16
Scooby Regular
Thread Starter
Join Date: Feb 2002
Posts: 2,547
Likes: 0
Received 0 Likes
on
0 Posts
I've run adaware and spybot now and still getting about:blank and the same single pop up every time I connect to internet.
As soon as the comupter starts up now the prompt (enter password) to connect to the internet also appears which it never used to do.
To top it all off, everytime I try to open word now the entire computer freezes and I have to CTRL,ALT,DEL out. Worked fine before I ran Spybot and Adware.
I'm running Windows ME also.
Any suggestions, driving me mad now
Thanks for the replies so far.
Chris
P.S. Apologies if the Title was too rude for some, I thought the French Connection version of ****ing was acceptable
As soon as the comupter starts up now the prompt (enter password) to connect to the internet also appears which it never used to do.
To top it all off, everytime I try to open word now the entire computer freezes and I have to CTRL,ALT,DEL out. Worked fine before I ran Spybot and Adware.
I'm running Windows ME also.
Any suggestions, driving me mad now
Thanks for the replies so far.
Chris
P.S. Apologies if the Title was too rude for some, I thought the French Connection version of ****ing was acceptable
12 May 2004, 11:17 AM
#18
Moderator
Join Date: Dec 1998
Location: Staffs
Posts: 23,573
Likes: 0
Received 0 Likes
on
0 Posts
Chris, it might be worth downloading Stinger to check all is okay on your PC virus-wise.
Also run MSCONFIG and examine what's being loaded during Startup and see if there's anything you don't recognise.
Next, whole raft of stuff to work through:
http://support.microsoft.com/default...b;EN-US;320159
Also run MSCONFIG and examine what's being loaded during Startup and see if there's anything you don't recognise.
Next, whole raft of stuff to work through:
http://support.microsoft.com/default...b;EN-US;320159
12 May 2004, 03:36 PM
#19
Scooby Regular
iTrader: (1)
Join Date: Dec 2000
Location: Herts.
Posts: 1,727
Likes: 0
Received 0 Likes
on
0 Posts
Guys,
I think you have a sort of virus that has hijacked your browser. These things are not readily spotted by anti virus and spyware checkers. I cleared something similar off my machine and may be able to sort yours out. Download from here a tool called Hijack This http://www.tomcoyote.com/hjt/ It scans all the areas of your PC these things can lurk in and reports what it finds. If you post a copy of the report on here I can take a look at it and advise if it is straight forward. If not you may need to post the results on a specialist board for help. Before you run it make sure you have just run your adaware/spybot and cleared all your internet cache.
I think you have a sort of virus that has hijacked your browser. These things are not readily spotted by anti virus and spyware checkers. I cleared something similar off my machine and may be able to sort yours out. Download from here a tool called Hijack This http://www.tomcoyote.com/hjt/ It scans all the areas of your PC these things can lurk in and reports what it finds. If you post a copy of the report on here I can take a look at it and advise if it is straight forward. If not you may need to post the results on a specialist board for help. Before you run it make sure you have just run your adaware/spybot and cleared all your internet cache.
12 May 2004, 07:14 PM
#20
Scooby Regular
Join Date: Aug 2001
Location: Hampshire
Posts: 10,954
Likes: 0
Received 0 Likes
on
0 Posts
Fixed it 
I went through the microsoft doc and went to those reg keys for all the users, computer and local accounts etc and deleted all the home and search references under the Internet Explorer keys.
I then deleted all cookies, history and every Temp Internet File and c:\windows\temp file there was - including drilling down into the temp internet files folder etc.
Then ran the tool the boost II linked too and went through what that found only keeping what I know is what. (Quite a few references to mrhot.dll or something). Deleted everything else and it now works fine
The Clean boot is a waste of time BTW, doesn't fix it
I went through the microsoft doc and went to those reg keys for all the users, computer and local accounts etc and deleted all the home and search references under the Internet Explorer keys.
I then deleted all cookies, history and every Temp Internet File and c:\windows\temp file there was - including drilling down into the temp internet files folder etc.
Then ran the tool the boost II linked too and went through what that found only keeping what I know is what. (Quite a few references to mrhot.dll or something). Deleted everything else and it now works fine
The Clean boot is a waste of time BTW, doesn't fix it
12 May 2004, 07:39 PM
#21
Scooby Regular
iTrader: (1)
Join Date: Dec 2000
Location: Herts.
Posts: 1,727
Likes: 0
Received 0 Likes
on
0 Posts
That was quite brave deleting all of that stuff (unless you know a lot about it.) There are a lot of legit system files there and hopefully just a few suspicious things to pick out. Anyway glad it is fixed. After using that tool I needed to reboot in safe mode and delete the .exe file that was changing all the registry keys back each time. Now its clean, do Windows Update, install the critical ones, reboot and keep repeating until there are no critical ones left. That should close most of the ways these get in off web pages etc
18 May 2004, 10:44 AM
#24
Scooby Regular
Thread Starter
Join Date: Feb 2002
Posts: 2,547
Likes: 0
Received 0 Likes
on
0 Posts
Thanks for all the help but still not managed to fix it
Tried, adaware, spybot and hijack this. The last one seems to pick up the problem but as soon as lauch internet explorer about:blank is still there. Also tried deleting any reference to it in the registry key thing.
Poxy computers
Chris
Tried, adaware, spybot and hijack this. The last one seems to pick up the problem but as soon as lauch internet explorer about:blank is still there. Also tried deleting any reference to it in the registry key thing.
Poxy computers
Chris
18 May 2004, 03:01 PM
#25
Scooby Regular
Thread Starter
Join Date: Feb 2002
Posts: 2,547
Likes: 0
Received 0 Likes
on
0 Posts
Update,
Hijack This keeps finding the same problems. One of them is FTFF.exe which I've managed to find on the system but it wont let me delete it as it is currently being used by windows
any ideas how I can delete it?
Cheers
Chris
Hijack This keeps finding the same problems. One of them is FTFF.exe which I've managed to find on the system but it wont let me delete it as it is currently being used by windows
any ideas how I can delete it?Cheers
Chris
18 May 2004, 03:29 PM
#26
Scooby Regular
Join Date: May 2002
Posts: 94
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by chris singleton
Update,
Hijack This keeps finding the same problems. One of them is FTFF.exe which I've managed to find on the system but it wont let me delete it as it is currently being used by windows any ideas how I can delete it?
Cheers
Chris
Hijack This keeps finding the same problems. One of them is FTFF.exe which I've managed to find on the system but it wont let me delete it as it is currently being used by windows
any ideas how I can delete it?Cheers
Chris
Regards
Neilp
18 May 2004, 03:51 PM
#27
Scooby Regular
Join Date: Nov 2003
Location: where the wild roses grow
Posts: 5,122
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by ScoobyJawa
I've got the same prob on my folks pc and Ad Aware and SpyBot have done **** all with all the latest updates.
As posted on my Poxy Spyware.... thread it seems that you refresh the start page, fire up and all is ok. As soon as you close IE its running a script or something which sets the homepage back to about:Blank which in turn is tied into this pop-up/search page gremlin.
Any thoughts on where IE shutdown routines can be found?
As posted on my Poxy Spyware.... thread it seems that you refresh the start page, fire up and all is ok. As soon as you close IE its running a script or something which sets the homepage back to about:Blank which in turn is tied into this pop-up/search page gremlin.
Any thoughts on where IE shutdown routines can be found?
18 May 2004, 04:15 PM
#28
Scooby Regular
Thread Starter
Join Date: Feb 2002
Posts: 2,547
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by neilp
You may be able to rename the file rather than delete, re-boot and then see
Regards
Neilp
Regards
Neilp
Greasemonkey, don't think adaware found that, I'll check again though.
Further suggestions?
Cheers
Chris
18 May 2004, 04:30 PM
#29
Scooby Regular
iTrader: (1)
Join Date: Dec 2000
Location: Herts.
Posts: 1,727
Likes: 0
Received 0 Likes
on
0 Posts
You need to start windows in safe mode and you will be able to delete your rogue exe file. Read this http://service1.symantec.com/SUPPORT...01052409420406
19 May 2004, 04:49 AM
#30
Scooby Regular
Join Date: Aug 2002
Location: Sodding Chipbury
Posts: 2,702
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by Boost II
That was quite brave deleting all of that stuff (unless you know a lot about it.) There are a lot of legit system files there and hopefully just a few suspicious things to pick out.
