Re: I can't get *certain* ads to stop popping up

[NiC]

I've installed ZoneAlarm and am getting tons of these 'ping' alert things
popping up. I'm not sure what they mean, who they're from or what to do
about it. I've clicked the more information button, but it really didn't
tell me anything at all.

Will using ZoneAlarm affect my using WinMX, a file sharing program?

NiC


"mto" <nobody@dontsendmeanyspam.thanks> wrote in message
news:ANqdnblG4YLPW9GiU-KYgg@seg.net...
>
> "NiC" <port_power@iprimus.com.au> wrote in message
> news:3f4cc300_1@news.iprimus.com.au...
> > I'm thinking I might just uninstall the Techfacts one.
> >
> > Will the Regclean, which I have just done for the first time, take away
> > those files and whatnot that are left behind when you trial a program
and
> > then don't want it anymore or it expires? I've heard that these can
leave
> > things behind.
> >
> > I posted to the Hijack this board with my log and was given
instructions,
> > which I've followed to a point. I have to reboot and then delete a
folder
> > and then apparently that should work. I posted to the XP board to start
> > with because of that darn email that claims it's from MS. I wanted to
> > double check. I was just going through old posts when I noticed that
> > another person appeared to be having similar problems and at the point
> that
> > I'm at now, any help is greatly appreciated! <lol>
> >
> > Thanks for your help. I will keep using Adaware and Spybot and I've
> > downloaded Zonealarm, which says that its for cable type connections,
I'm
> on
> > dialup, so I'm not sure if that's going to be any help, but hopefully
I'll
> > not have to deal with this problem again.
>
> I've used ZA for years now on a dialup with no problem at all.
>
>

[NiC]

What I did was delete about 4 items from the HijackThis list then I turned
off the System Restore, rebooted the computer, deleted a folder that
contained dialers, then turned back on the System Restore as I honestly
don't know enough yet to feel comfortable not having it on. I was given
some great links which I will be following up on and reading and trying to
learn and understand more about so that I hopefully don't need to use the
System Restore anymore.

NiC


"Dick Hazeleger" <Dick@post_it_in_the_newsgroup.com> wrote in message
news:vkq05qpskamef3@corp.supernews.com...
> mto wrote:
>
> >
> > "NiC" <port_power@iprimus.com.au> wrote in message
> > news:3f4cc300_1@news.iprimus.com.au...
> > > I'm thinking I might just uninstall the Techfacts one.
> > >
> > > Will the Regclean, which I have just done for the first time, take
> > > away those files and whatnot that are left behind when you trial a
> > > program and then don't want it anymore or it expires? I've heard
> > > that these can leave things behind.
> > >
> > > I posted to the Hijack this board with my log and was given
> > > instructions, which I've followed to a point. I have to reboot and
> > > then delete a folder and then apparently that should work. I
> > > posted to the XP board to start with because of that darn email
> > > that claims it's from MS. I wanted to double check. I was just
> > > going through old posts when I noticed that another person appeared
> > > to be having similar problems and at the point
> > that
> > > I'm at now, any help is greatly appreciated! <lol>
> > >
> > > Thanks for your help. I will keep using Adaware and Spybot and I've
> > > downloaded Zonealarm, which says that its for cable type
> > > connections, I'm
> > on
> > > dialup, so I'm not sure if that's going to be any help, but
> > > hopefully I'll not have to deal with this problem again.
> >
> > I've used ZA for years now on a dialup with no problem at all.
>
> Hi NiC,
>
> So you run XP... did you think of disabling your "restore points"
> before you executed the tips you got at the HiJackThis forum? If not...
> your "clever" OS might restored the culprit again from the saved
> information!
>
> I agree with MTO on ZA (or any other firewall); one thing the MBLAST
> debacle should have taught us: Even those on DUN connections should
> have a firewall present when connecting to the Internet! I've seen
> before my very eyes how fast an "open" system (running XP-home BTW) was
> infected! Within seconds the system had to be cured again, and again...
> etc. It was only because I could break through this "devious circle"
> and install a firewall from a tools CD I have, that I could desinfect
> that system and finally execute the MS patch for it! In short: A
> firewall is a necessary tool for ALL accessing the Internet!!!
>
> Dick
>

[mto]

"NiC" <port_power@iprimus.com.au> wrote in message
news:3f4d540e$3_1@news.iprimus.com.au...
> I've installed ZoneAlarm and am getting tons of these 'ping' alert things
> popping up. I'm not sure what they mean, who they're from or what to do
> about it. I've clicked the more information button, but it really didn't
> tell me anything at all.

Take some time to read thoroughly through all of the User Help Files that
come with the program - lots of possibilities and configurations available.
If you prefer not to deal with the alerts you can simply turn that function
off so that you don't see them.
>
> Will using ZoneAlarm affect my using WinMX, a file sharing program?
>
> NiC

No, you can set ZA to allow the program under the Programs tab. I
*strongly* recommend the ASK setting however.

[NiC]

I will do. Thanks for for the suggestion.

NiC


"mto" <nobody@dontsendmeanyspam.thanks> wrote in message
news:BsCcnZAFz96qx9CiXTWJkQ@seg.net...
>
> "NiC" <port_power@iprimus.com.au> wrote in message
> news:3f4d540e$3_1@news.iprimus.com.au...
> > I've installed ZoneAlarm and am getting tons of these 'ping' alert
things
> > popping up. I'm not sure what they mean, who they're from or what to do
> > about it. I've clicked the more information button, but it really
didn't
> > tell me anything at all.
>
> Take some time to read thoroughly through all of the User Help Files that
> come with the program - lots of possibilities and configurations
available.
> If you prefer not to deal with the alerts you can simply turn that
function
> off so that you don't see them.
> >
> > Will using ZoneAlarm affect my using WinMX, a file sharing program?
> >
> > NiC
>
> No, you can set ZA to allow the program under the Programs tab. I
> *strongly* recommend the ASK setting however.
>
>

[Jay T. Blocksom]

On Tue, 26 Aug 2003 19:14:46 +0930, in <alt.privacy.spyware>, "NiC"
<port_power@iprimus.com.au> wrote:
>
> Sorry about the html, I didn't check it before I sent it.
>
[snip]

Apology accepted. Now please learn to quote properly and not top-post.

> I have AdAware which I use at least every night
[snip]

Unless you're doing some *really* stupid things with your computer, there
should never be a reason to run it anywhere near that often.

> So far I've haven't gotten any spam from using the contact on the pop-up
> but I guess I'm just lucky, I'm sure it'll arrive soon!
>
[snip]

Near-certainly.

What I don't understand is... Why you would even consider asking the wolf
how to protect your hen house?

--

Jay T. Blocksom
--------------------------------
Appropriate Technology, Inc.
usenet01[at]appropriate-tech.net


"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-- Benjamin Franklin, Historical Review of Pennsylvania, 1759.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
NOTE: E-Mail address in "From:" line is INVALID! Remove +SPAMBLOCK to mail.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Unsolicited advertising sent to this E-Mail address is expressly prohibited
under USC Title 47, Section 227. Violators are subject to charge of up to
$1,500 per incident or treble actual costs, whichever is greater.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[Jay T. Blocksom]

On Tue, 26 Aug 2003 20:59:19 +0930, in <alt.privacy.spyware>, "NiC"
<port_power@iprimus.com.au> wrote:

> I installed a program today called TechfactsXP that checks and cleans the
> registry, among other things, is the same as the HijackThis program?
[snip]

What makes you think it would be?

> I used the Spybot program and (I'm not kidding here) as soon as I'd
> finished using it and closed the program, up popped the ad!
[snip]

Were you connected to the internet at the time? Allow me to answer that
question for you:

All of your posts to this thread so far have originated at the same IP
[203.134.67.67], despite being over a period of ~25.5 hours. This implies
that you are using a DSL or "cable modem" line, as opposed to a dial-up
(which would give you a new, and near-certainly different, IP each time you
connected). Hence, your connection to the 'net is probably live 24/7.

Given that, and especially considering the implication from above that
you're running WinXP, a proper hardware-based firewall is ABSOLUTELY
MANDATORY. Are you running such a device? If not, I rather strongly
suspect that the "pop-ups" you're seeing are using the Windows Messenger
service. If your web browser was not open at the time ANY of the pop-ups
appeared, that is solid confirmation.

For the time being, follow the instructions you'll find here:

<http://www.itc.virginia.edu/desktop/docs/messagepopup/>

to turn that service OFF.

But please understand, this will cure the *symptom*, but NOT the "disease",
which is the fact that your computer is sitting thre, wide-open and exposed
DIRECTLY to the internet. If it has not already been "r00ted" or "ow3ned",
it will be a minor miracle. (Have you perhaps heard the news reports about
MS.blast and SoBig.F?) You NEED a proper firewall. It is NOT optional.
And by "proper", I mean NOT some pseudo-firewall software running on the
same (still exposed) box it's ostensibly trying to "protect" -- that very
concept is an oxymoron.

> If the TechfactsXP is
> the same as HijackThis, could I send in a screen capture or something
> similar from that?
>
[snip]

Why do you keep trying to "get creative", when it is patently obvious that
you don't know what you're doing? You've been given some half-decent advice
by several folks here -- FOLLOW IT.

--

Jay T. Blocksom
--------------------------------
Appropriate Technology, Inc.
usenet01[at]appropriate-tech.net


"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-- Benjamin Franklin, Historical Review of Pennsylvania, 1759.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
NOTE: E-Mail address in "From:" line is INVALID! Remove +SPAMBLOCK to mail.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Unsolicited advertising sent to this E-Mail address is expressly prohibited
under USC Title 47, Section 227. Violators are subject to charge of up to
$1,500 per incident or treble actual costs, whichever is greater.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[Dick Hazeleger]

Jay T. Blocksom wrote:

> On Tue, 26 Aug 2003 20:59:19 +0930, in <alt.privacy.spyware>, "NiC"
> <port_power@iprimus.com.au> wrote:
>
> > I installed a program today called TechfactsXP that checks and
> cleans the > registry, among other things, is the same as the
> HijackThis program? [snip]
>
> What makes you think it would be?
>
> > I used the Spybot program and (I'm not kidding here) as soon as
> I'd > finished using it and closed the program, up popped the ad!
> [snip]
>
> Were you connected to the internet at the time? Allow me to answer
> that question for you:
>
> All of your posts to this thread so far have originated at the same IP
> [203.134.67.67], despite being over a period of ~25.5 hours. This
> implies that you are using a DSL or "cable modem" line, as opposed to
> a dial-up (which would give you a new, and near-certainly different,
> IP each time you connected). Hence, your connection to the 'net is
> probably live 24/7.
>
> Given that, and especially considering the implication from above that
> you're running WinXP, a proper hardware-based firewall is ABSOLUTELY
> MANDATORY. Are you running such a device? If not, I rather strongly
> suspect that the "pop-ups" you're seeing are using the Windows
> Messenger service. If your web browser was not open at the time ANY
> of the pop-ups appeared, that is solid confirmation.
>
> For the time being, follow the instructions you'll find here:
>
> <http://www.itc.virginia.edu/desktop/docs/messagepopup/>
>
> to turn that service OFF.
>
> But please understand, this will cure the symptom, but NOT the
> "disease", which is the fact that your computer is sitting thre,
> wide-open and exposed DIRECTLY to the internet. If it has not
> already been "r00ted" or "ow3ned", it will be a minor miracle. (Have
> you perhaps heard the news reports about MS.blast and SoBig.F?) You
> NEED a proper firewall. It is NOT optional. And by "proper", I mean
> NOT some pseudo-firewall software running on the same (still exposed)
> box it's ostensibly trying to "protect" -- that very concept is an
> oxymoron.
>
> > If the TechfactsXP is
> > the same as HijackThis, could I send in a screen capture or
> something > similar from that?
> >
> [snip]
>
> Why do you keep trying to "get creative", when it is patently obvious
> that you don't know what you're doing? You've been given some
> half-decent advice by several folks here -- FOLLOW IT.

Hi Jay,

Funny that the system that I was writing (running XP Home btw) about in
a reply to a message of yours in a different thread was completely
sealed and couldn't be infected after such a "pseudo firewall" as YOU
call it was installed... Now, could it be that these programs do more
than you might expect from them, Horatius ... ehhhh Jay? When did you
yourself test fw programs the last time...? Or are you a follower of
"Lead, Follow or get out the way" yourself? (sounds familiar?).

Sure a hardware FW is the best... but compared to an open system such
as XP (even with the LAN firewall "up") a decent software FW as a
protection is better than nothing!!!

Regards
Dick

[James Arrow]

Try LanTalk XP
http://www.lantalk.net


"Dick Hazeleger" <Dick@post_it_in_the_newsgroup.com> wrote in message news:<vkvka2pbpd5vcd@corp.supernews.com>...
> Jay T. Blocksom wrote:
>
> > On Tue, 26 Aug 2003 20:59:19 +0930, in <alt.privacy.spyware>, "NiC"
> > <port_power@iprimus.com.au> wrote:
> >
> > > I installed a program today called TechfactsXP that checks and
> > cleans the > registry, among other things, is the same as the
> > HijackThis program? [snip]
> >
> > What makes you think it would be?
> >
> > > I used the Spybot program and (I'm not kidding here) as soon as
> > I'd > finished using it and closed the program, up popped the ad!
> > [snip]
> >
> > Were you connected to the internet at the time? Allow me to answer
> > that question for you:
> >
> > All of your posts to this thread so far have originated at the same IP
> > [203.134.67.67], despite being over a period of ~25.5 hours. This
> > implies that you are using a DSL or "cable modem" line, as opposed to
> > a dial-up (which would give you a new, and near-certainly different,
> > IP each time you connected). Hence, your connection to the 'net is
> > probably live 24/7.
> >
> > Given that, and especially considering the implication from above that
> > you're running WinXP, a proper hardware-based firewall is ABSOLUTELY
> > MANDATORY. Are you running such a device? If not, I rather strongly
> > suspect that the "pop-ups" you're seeing are using the Windows
> > Messenger service. If your web browser was not open at the time ANY
> > of the pop-ups appeared, that is solid confirmation.
> >
> > For the time being, follow the instructions you'll find here:
> >
> > <http://www.itc.virginia.edu/desktop/docs/messagepopup/>
> >
> > to turn that service OFF.
> >
> > But please understand, this will cure the symptom, but NOT the
> > "disease", which is the fact that your computer is sitting thre,
> > wide-open and exposed DIRECTLY to the internet. If it has not
> > already been "r00ted" or "ow3ned", it will be a minor miracle. (Have
> > you perhaps heard the news reports about MS.blast and SoBig.F?) You
> > NEED a proper firewall. It is NOT optional. And by "proper", I mean
> > NOT some pseudo-firewall software running on the same (still exposed)
> > box it's ostensibly trying to "protect" -- that very concept is an
> > oxymoron.
> >
> > > If the TechfactsXP is
> > > the same as HijackThis, could I send in a screen capture or
> something > similar from that?
> > >
> > [snip]
> >
> > Why do you keep trying to "get creative", when it is patently obvious
> > that you don't know what you're doing? You've been given some
> > half-decent advice by several folks here -- FOLLOW IT.
>
> Hi Jay,
>
> Funny that the system that I was writing (running XP Home btw) about in
> a reply to a message of yours in a different thread was completely
> sealed and couldn't be infected after such a "pseudo firewall" as YOU
> call it was installed... Now, could it be that these programs do more
> than you might expect from them, Horatius ... ehhhh Jay? When did you
> yourself test fw programs the last time...? Or are you a follower of
> "Lead, Follow or get out the way" yourself? (sounds familiar?).
>
> Sure a hardware FW is the best... but compared to an open system such
> as XP (even with the LAN firewall "up") a decent software FW as a
> protection is better than nothing!!!
>
> Regards
> Dick

[NiC]

Was there any need to be so rude???

> > I installed a program today called TechfactsXP that checks and cleans
the
> > registry, among other things, is the same as the HijackThis program?
> [snip]
>
> What makes you think it would be?

I don't know, that's why I asked.

> > I used the Spybot program and (I'm not kidding here) as soon as I'd
> > finished using it and closed the program, up popped the ad!
> [snip]
>
> Were you connected to the internet at the time? Allow me to answer that
> question for you:
>
> All of your posts to this thread so far have originated at the same IP
> [203.134.67.67], despite being over a period of ~25.5 hours. This implies
> that you are using a DSL or "cable modem" line, as opposed to a dial-up
> (which would give you a new, and near-certainly different, IP each time
you
> connected). Hence, your connection to the 'net is probably live 24/7.

No, I wasn't connected to the internet at the time.

No, I don't have a cable connection. I have a dialup connection.

> Given that, and especially considering the implication from above that
> you're running WinXP, a proper hardware-based firewall is ABSOLUTELY
> MANDATORY. Are you running such a device? If not, I rather strongly
> suspect that the "pop-ups" you're seeing are using the Windows Messenger
> service. If your web browser was not open at the time ANY of the pop-ups
> appeared, that is solid confirmation.

At the time I wasn't running a firewall, but thanks to the helpful advice of
people here I went and did just that.

Turning off the Windows Messenger service was the first thing that I did.


> > If the TechfactsXP is
> > the same as HijackThis, could I send in a screen capture or something
> > similar from that?
> >
> [snip]
>
> Why do you keep trying to "get creative", when it is patently obvious that
> you don't know what you're doing? You've been given some half-decent
advice
> by several folks here -- FOLLOW IT.

I never once suggested that I knew what I was doing. If I did know then I
wouldn't have posted my question here. I was given great advice which I
followed to the letter and thankfully my problem appears to have been
resolved.

Lucky for me I guess that you have jumped in on this late in the game and I
didn't have to be made to feel like a moron before I got my problem fixed.
Even you to didn't know everything once upon a time, so maybe you shouldn't
be so harsh on those who are still trying to learn.

NiC

[NiC]

"Jay T. Blocksom" <usenet01+SPAMBLOCK@appropriate-tech.net> wrote in message
news:3n0qkvg98sf3fdsrhtc8ml5404sgljucph@news.rcn.c om...
> On Tue, 26 Aug 2003 19:14:46 +0930, in <alt.privacy.spyware>

Sorry about the html, I didn't check it before I sent it.
> >
> [snip]
>
> Apology accepted. Now please learn to quote properly and not top-post.

For crying out loud, what the hell is your problem??? I haven't used
newsgroups before, I'm trying to get it right.

> > I have AdAware which I use at least every night
> [snip]
>
> Unless you're doing some *really* stupid things with your computer, there
> should never be a reason to run it anywhere near that often.

No, I'm not doing something really stupid with my computer, I just do it to
be safe, how does it effect you if I do anyway?

> > So far I've haven't gotten any spam from using the contact on the
pop-up
> > but I guess I'm just lucky, I'm sure it'll arrive soon!
> >
> [snip]
>
> Near-certainly.

Still waiting for it. Maybe I'm just super lucky hey?

> What I don't understand is... Why you would even consider asking the wolf
> how to protect your hen house?

What I don't understand is you have a problem with the questions I ask
(whether they are stupid or not) why on earth do you bother responding to
them? Its pretty odvious that I've gotten plenty of help and just throwing
your attitude in is basically a waste of your odviously precious time.

NiC