Annoying Pop-Up Adds

[idahosurge]

I starting getting pop-up adds and it is my fault since it started after I stupidly agreed to download a toolbar from a site.

Well I have removed the toolbar using add/remove programs in the control panel.  I have run Spybot and Malwarebytes and gotten rid of the adware that they found, but I still get these add popping up.  I have "block all popups" enabled in IE8.  I also have ESET NOD 32 active, but I still get these adds.  If I run Spybot all the time is there a setting in Spybot that will stop them?

How do they work, did they get my IP address and now they just send crap to that address?  If so, can I change my IP address?

How can I get this to stop?

Rod

[Hagar]

Which toolbar was this? Anything you can remember about it might help.

[ShaneG_old]

Are they random ads, or is it the same one all the time?

Sometimes these things get added to the startup registry, and turn on every time the computer does.

The "Your Computer is Infected, Scan Now?" popups are really bad for that.
Simply clicking the red x to close them will set them off. 

I run CCleaner's startup tool once a week to check if anything has been added without me knowing. Sometimes the odd program makes it through, but it's easily and quickly deleted.  8-)


Also, have you cleared all cookies, and temp internet files and such?

[JBaymore]

Does anything here look familiar:

http://205.252.250.26/cgi-bin/yabb2/YaB ... 1258377948

best,

..................john

[idahosurge]

I checked my startup and had something called internet today that was loading so I uninstalled that and deleted it out of the startup menu.

I get adds for M&M's candy, web based video games, body building products adult web sites, etc. so it is different adds and the adds are not always the same.  They seem to pop up when I go into a new website.

I have ran Spybot and Malwarebytes three times and they do not pick anything up.

I deleted all my browser history and deleted everything out of the temperary internet folders and cookies folders.

I have installed the google toolbar that also has a popup blocker and that seems to have gotten rid of most of them, but I still get them.  It can be when I go into Yahoo, CNN and other respected sites.  It also seems to happen when I log into sites that I am a member like www.trains.com

Rod

[Capt.Propwash]

what OS are you running??

I have noticed that alot of popups/unders like to use MSMessenger / Live in XP.  If you do have WinXP, if you disable that service it may help stop annoying popups.

WINXP:: Start > settings > control panel > (Administrative tools) > Services




Just a thought. if it doesnt work, sorry, i dont know much else to offer as a suggestion.

[idahosurge]

I have XP and I already had MSMessenger disabled.

This is really annoying, I go to FoxNews to read the news and by the time I get done going back and forth throught the articles I have five or more advertisements sitting on my desk top, how in the heck can I get this to stop?

I thought that the popup blocker with the google toolbar was helping, but it seems that I was wrong.

Rod

[idahosurge]

Well I just uninstalled Windows Live and that did not help.

This just started up a week ago and there has got to be a reason and a way to stop it.  The Google Toolbar does block around half, but it is not blocking them all.  Just navigating around a respected site like Fox News I get the crap and I want it to stop.

Does anybody have any ideas?

If it maybe something that got into my registry, how do I find it.  I have googled this problem and that has offered no solution other than ones that I have already tried, like tuning on popup blocker in IE8 privacy tab and installing the google toolbar.

What gets me is that some of these seem to be on the level adds, I just do not want the crap popping up on my PC.

Rod

[JBaymore]

It sounds like you have a virus or Trojan that got thru your defenses.

[idahosurge]

Well I have found that when I am running in safe mode with networking I get no popups, but running in regular mode I get popups, does that tell anyone anything?

I try the idea about googling the adds and see if I find anything.

Rod

[jime59]

Try start-run-type msconfig in the box, then click the start-up tab and check there to see if you find something suspicious. If so, uncheck the box and reboot. Might be worth a shot.

[JBaymore]

Try start-run-type msconfig in the box, then click the start-up tab and check there to see if you find something suspicious. If so, uncheck the box and reboot. Might be worth a shot.

Restrict your actions to the Statup Tab unless you know what you are doing. 

Likely you are going to find that this is a complex mess to get rid of.  This crap tends to store itself all over your computer in obscure places..... and has the ability to re-generate itself after you delete one of the places you find.  You usually have to get ALL of them, all at once.  And they almost always also store a copy of themselves in the the Windows Restore archive too....so that is not an option unless you know when you have a clean restore point before the infection.

And be VERY careful if you go to working about in the registry!  Delete or change the wrong thing and you then have a very expensive boat anchor instead of a computer.

best,

.................john

[JBaymore]

Well I have found that when I am running in safe mode with networking I get no popups, but running in regular mode I get popups, does that tell anyone anything?

I think that pretty much says "infection".

best,

.................john

[jaime]

Well I have found that when I am running in safe mode with networking I get no popups, but running in regular mode I get popups, does that tell anyone anything?

I try the idea about googling the adds and see if I find anything.

Rod

that speaks volumes...as John said...infection...best thing to try and do (inshort of the drastic step of rebuilding the file table and all that or reformatting your system) is boot into safe mode with NO NETWORKING AT ALL (and disconnect the machine from your network [IE pull the network cable out of the back side to be 100% sure you got no network]) and run both spyware, antivirus and then if you know what your doing (not recommended unless you know 100% what your doing) attempt to find the enteries (if any) that are associated with the pop ups or what ever and kill them, show no mercy...

then restart, login open IE and download firefox and make sure you have firefox built in pop up blocker turned on...I use firefox and rarely get pop ups...well if any...


sounds like you may have a virus (more like trojan)...and you need to be sure that sucker is killed...with out mercy...

[idahosurge]

Thanks for all the responses, I got rid of the trojan on 11/22, just thought that I would let you know since Jaime had a response yesterday.

Rod