Re: I can't get *certain* ads to stop popping up

[mto]

"NiC" <port_power@iprimus.com.au> wrote in message
news:3f4ab55b_1@news.iprimus.com.au...
>I have two porn ads that keep coming up on my >computer, from the minute
that I connect to the Internet >that I can't get rid of. I have emailed the
customer >address given on the bottom of the pop-up and they >replied with
instructions. <SNIP>

Download, update and then run AdAware and Spybot Search and Destroy. They
are both free. Run them both. Be sure you update them first - and don't
forget to read the user's manual, especially for Spybot. This question
comes up in this newsgroup at least once a week so you can easily use the
Find function under Edit to retrieve the URLs

NEVER NEVER NEVER respond in any way - most especially by email - to these
popup ads. All you are doing is adding your email address to some spammers
list.

And BTW, please change your news settings to send posts in PLAIN TEXT ONLY.
Html is not legible to many readers - they see the source code rather than a
post.

[NiC]

Sorry about the html, I didn't check it before I sent it.

I have AdAware which I use at least every night and I've just downloaded the
Spybot.

So far I've haven't gotten any spam from using the contact on the pop-up but
I guess I'm just lucky, I'm sure it'll arrive soon!

Thanks for the reply.

NiC



"mto" <nobody@dontsendmeanyspam.thanks> wrote in message
news:BYucnWdM540NQNeiXTWJiQ@seg.net...

"NiC" <port_power@iprimus.com.au> wrote in message
news:3f4ab55b_1@news.iprimus.com.au...
>I have two porn ads that keep coming up on my >computer, from the minute
that I connect to the Internet >that I can't get rid of. I have emailed the
customer >address given on the bottom of the pop-up and they >replied with
instructions. <SNIP>

Download, update and then run AdAware and Spybot Search and Destroy. They
are both free. Run them both. Be sure you update them first - and don't
forget to read the user's manual, especially for Spybot. This question
comes up in this newsgroup at least once a week so you can easily use the
Find function under Edit to retrieve the URLs

NEVER NEVER NEVER respond in any way - most especially by email - to these
popup ads. All you are doing is adding your email address to some spammers
list.

And BTW, please change your news settings to send posts in PLAIN TEXT ONLY.
Html is not legible to many readers - they see the source code rather than a
post.

[Dave Higham]

"NiC" <port_power@iprimus.com.au> wrote in message
news:3f4b2c25_1@news.iprimus.com.au...
> Sorry about the html, I didn't check it before I sent it.
>
> I have AdAware which I use at least every night and I've just downloaded
the
> Spybot.
>
> So far I've haven't gotten any spam from using the contact on the pop-up
but
> I guess I'm just lucky, I'm sure it'll arrive soon!
>
> Thanks for the reply.
>
> NiC
>


Might be a good idea to get HijackThis, run it and post the log.

Dave

[Dave Higham]

Damn - hit send before I told you where to post. Here ya go:

http://************/l7mr

Dave

[NiC]

I installed a program today called TechfactsXP that checks and cleans the
registry, among other things, is the same as the HijackThis program? Would
I be able to find the same things?

I used the Spybot program and (I'm not kidding here) as soon as I'd finished
using it and closed the program, up popped the ad! If the TechfactsXP is
the same as HijackThis, could I send in a screen capture or something
similar from that?

NiC


"Dave Higham" <davehighamNOSPAM@co.uk.INVALID> wrote in message
news:3f4b3d08$0$253$fa0fcedb@lovejoy.zen.co.uk...
> Damn - hit send before I told you where to post. Here ya go:
>
> http://************/l7mr
>
> Dave
>
>

[mto]

"NiC" <port_power@iprimus.com.au> wrote in message
news:3f4b44a6_1@news.iprimus.com.au...
> I installed a program today called TechfactsXP that checks and cleans the
> registry, among other things, is the same as the HijackThis program?
Would
> I be able to find the same things?
>
> I used the Spybot program and (I'm not kidding here) as soon as I'd
finished
> using it and closed the program, up popped the ad! If the TechfactsXP is
> the same as HijackThis, could I send in a screen capture or something
> similar from that?
>
> NiC
>

Never seen anyone recommend TechFacts XP here or in alt.computer.security.
Hijack This has a strong and devoted following - and it is free too.

[Aaron]

"NiC" <port_power@iprimus.com.au> wrote in
news:3f4b44a6_1@news.iprimus.com.au:

> I installed a program today called TechfactsXP that checks and cleans
> the registry, among other things, is the same as the HijackThis
> program? Would I be able to find the same things?

Not even close. The reason why people always recommend hijackthis is
because it's specially designed to create a concise readable log that
detect pests. It's become the standard used by experts to help others, so
most people who can help you are used to reading such logs.



Aaron
--
Want to learn how to use Winboard and the 150+ free Winboard
Chess engines?Visit http://www.aarontay.per.sg/Winboard/

[NiC]

Thanks Aaron. I have the page bookmarked so I'll go and get it now. Its
late here so I might be able to post or whatever again until morning.

I appreciate the help that your giving me.

I was on the XP news group and saw someone else who is having the same
problem and I've also posted there as they have suggested a different
solution. I hope this is okay as I really want to try all available options
in getting rid of this problem.

Thanks again.

NiC



"Aaron" <aarontaycheehsien@yahoo.com> wrote in message
news:Xns93E3D87F75FBBunknown23@203.116.1.193...
> "NiC" <port_power@iprimus.com.au> wrote in
> news:3f4b44a6_1@news.iprimus.com.au:
>
> > I installed a program today called TechfactsXP that checks and cleans
> > the registry, among other things, is the same as the HijackThis
> > program? Would I be able to find the same things?
>
> Not even close. The reason why people always recommend hijackthis is
> because it's specially designed to create a concise readable log that
> detect pests. It's become the standard used by experts to help others, so
> most people who can help you are used to reading such logs.
>
>
>
> Aaron
> --
> Want to learn how to use Winboard and the 150+ free Winboard
> Chess engines?Visit http://www.aarontay.per.sg/Winboard/

[Jay T. Blocksom]

On Tue, 26 Aug 2003 20:59:19 +0930, in <alt.privacy.spyware>, "NiC"
<port_power@iprimus.com.au> wrote:

> I installed a program today called TechfactsXP that checks and cleans the
> registry, among other things, is the same as the HijackThis program?
[snip]

What makes you think it would be?

> I used the Spybot program and (I'm not kidding here) as soon as I'd
> finished using it and closed the program, up popped the ad!
[snip]

Were you connected to the internet at the time? Allow me to answer that
question for you:

All of your posts to this thread so far have originated at the same IP
[203.134.67.67], despite being over a period of ~25.5 hours. This implies
that you are using a DSL or "cable modem" line, as opposed to a dial-up
(which would give you a new, and near-certainly different, IP each time you
connected). Hence, your connection to the 'net is probably live 24/7.

Given that, and especially considering the implication from above that
you're running WinXP, a proper hardware-based firewall is ABSOLUTELY
MANDATORY. Are you running such a device? If not, I rather strongly
suspect that the "pop-ups" you're seeing are using the Windows Messenger
service. If your web browser was not open at the time ANY of the pop-ups
appeared, that is solid confirmation.

For the time being, follow the instructions you'll find here:

<http://www.itc.virginia.edu/desktop/docs/messagepopup/>

to turn that service OFF.

But please understand, this will cure the *symptom*, but NOT the "disease",
which is the fact that your computer is sitting thre, wide-open and exposed
DIRECTLY to the internet. If it has not already been "r00ted" or "ow3ned",
it will be a minor miracle. (Have you perhaps heard the news reports about
MS.blast and SoBig.F?) You NEED a proper firewall. It is NOT optional.
And by "proper", I mean NOT some pseudo-firewall software running on the
same (still exposed) box it's ostensibly trying to "protect" -- that very
concept is an oxymoron.

> If the TechfactsXP is
> the same as HijackThis, could I send in a screen capture or something
> similar from that?
>
[snip]

Why do you keep trying to "get creative", when it is patently obvious that
you don't know what you're doing? You've been given some half-decent advice
by several folks here -- FOLLOW IT.

--

Jay T. Blocksom
--------------------------------
Appropriate Technology, Inc.
usenet01[at]appropriate-tech.net


"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-- Benjamin Franklin, Historical Review of Pennsylvania, 1759.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
NOTE: E-Mail address in "From:" line is INVALID! Remove +SPAMBLOCK to mail.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Unsolicited advertising sent to this E-Mail address is expressly prohibited
under USC Title 47, Section 227. Violators are subject to charge of up to
$1,500 per incident or treble actual costs, whichever is greater.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[Dick Hazeleger]

Jay T. Blocksom wrote:

> On Tue, 26 Aug 2003 20:59:19 +0930, in <alt.privacy.spyware>, "NiC"
> <port_power@iprimus.com.au> wrote:
>
> > I installed a program today called TechfactsXP that checks and
> cleans the > registry, among other things, is the same as the
> HijackThis program? [snip]
>
> What makes you think it would be?
>
> > I used the Spybot program and (I'm not kidding here) as soon as
> I'd > finished using it and closed the program, up popped the ad!
> [snip]
>
> Were you connected to the internet at the time? Allow me to answer
> that question for you:
>
> All of your posts to this thread so far have originated at the same IP
> [203.134.67.67], despite being over a period of ~25.5 hours. This
> implies that you are using a DSL or "cable modem" line, as opposed to
> a dial-up (which would give you a new, and near-certainly different,
> IP each time you connected). Hence, your connection to the 'net is
> probably live 24/7.
>
> Given that, and especially considering the implication from above that
> you're running WinXP, a proper hardware-based firewall is ABSOLUTELY
> MANDATORY. Are you running such a device? If not, I rather strongly
> suspect that the "pop-ups" you're seeing are using the Windows
> Messenger service. If your web browser was not open at the time ANY
> of the pop-ups appeared, that is solid confirmation.
>
> For the time being, follow the instructions you'll find here:
>
> <http://www.itc.virginia.edu/desktop/docs/messagepopup/>
>
> to turn that service OFF.
>
> But please understand, this will cure the symptom, but NOT the
> "disease", which is the fact that your computer is sitting thre,
> wide-open and exposed DIRECTLY to the internet. If it has not
> already been "r00ted" or "ow3ned", it will be a minor miracle. (Have
> you perhaps heard the news reports about MS.blast and SoBig.F?) You
> NEED a proper firewall. It is NOT optional. And by "proper", I mean
> NOT some pseudo-firewall software running on the same (still exposed)
> box it's ostensibly trying to "protect" -- that very concept is an
> oxymoron.
>
> > If the TechfactsXP is
> > the same as HijackThis, could I send in a screen capture or
> something > similar from that?
> >
> [snip]
>
> Why do you keep trying to "get creative", when it is patently obvious
> that you don't know what you're doing? You've been given some
> half-decent advice by several folks here -- FOLLOW IT.

Hi Jay,

Funny that the system that I was writing (running XP Home btw) about in
a reply to a message of yours in a different thread was completely
sealed and couldn't be infected after such a "pseudo firewall" as YOU
call it was installed... Now, could it be that these programs do more
than you might expect from them, Horatius ... ehhhh Jay? When did you
yourself test fw programs the last time...? Or are you a follower of
"Lead, Follow or get out the way" yourself? (sounds familiar?).

Sure a hardware FW is the best... but compared to an open system such
as XP (even with the LAN firewall "up") a decent software FW as a
protection is better than nothing!!!

Regards
Dick