POPUP!? SPYWARE? VIRUS? help please...

[Trip]

I have run Ad-Aware, Spybot S&D, and Spyhunter. I cannot seem to overcome
this problem. This is a new computer with Microsoft Windows XP Media.
Popups have always been a problem, but when my browser's address is
about:blank and pop-ups still popup (9 or 10 of them) i know somethings
wrong...

Like I said before, I have run all of those programs and searched through
files myself. I have a popup killer but its blocking so many of them it
screws up my computer. (If you have your speakers on and the 'play sound
when pop up is detected' turned on, it constantly beeps.

Im pretty sure google doesnt have pop ups but i get them from google too.
They all seem to come from the same place -- www.sandboxer.com in my 'black
list' in stopzilla the addresses are something similar to
www.sandboxer.com/redirect.aspx?id=............ and so forth.

If anyone help can me or give me any information on this problem, It would
be greatly apprectaited.

Thanks in advance.

[SmAfDiBoY]

Its instant messaging...you have to disabel it.


HTH


"Trip" <hahaha@hottiemail.com> wrote in message
news:Jp4fb.1687$qw.103465@twister.tampabay.rr.com. ..
> I have run Ad-Aware, Spybot S&D, and Spyhunter. I cannot seem to overcome
> this problem. This is a new computer with Microsoft Windows XP Media.
> Popups have always been a problem, but when my browser's address is
> about:blank and pop-ups still popup (9 or 10 of them) i know somethings
> wrong...
>
> Like I said before, I have run all of those programs and searched through
> files myself. I have a popup killer but its blocking so many of them it
> screws up my computer. (If you have your speakers on and the 'play sound
> when pop up is detected' turned on, it constantly beeps.
>
> Im pretty sure google doesnt have pop ups but i get them from google too.
> They all seem to come from the same place -- www.sandboxer.com in my
'black
> list' in stopzilla the addresses are something similar to
> www.sandboxer.com/redirect.aspx?id=............ and so forth.
>
> If anyone help can me or give me any information on this problem, It would
> be greatly apprectaited.
>
> Thanks in advance.
>
>

[YK]

Trip wrote:
> I have run Ad-Aware, Spybot S&D, and Spyhunter. I cannot seem to
> overcome this problem. This is a new computer with Microsoft Windows
> XP Media. Popups have always been a problem, but when my browser's
> address is about:blank and pop-ups still popup (9 or 10 of them) i
> know somethings wrong...
>
> Like I said before, I have run all of those programs and searched
> through files myself. I have a popup killer but its blocking so many
> of them it screws up my computer. (If you have your speakers on and
> the 'play sound when pop up is detected' turned on, it constantly
> beeps.
>
> Im pretty sure google doesnt have pop ups but i get them from google
> too. They all seem to come from the same place -- www.sandboxer.com
> in my 'black list' in stopzilla the addresses are something similar to
> www.sandboxer.com/redirect.aspx?id=............ and so forth.
>
> If anyone help can me or give me any information on this problem, It
> would be greatly apprectaited.
>
> Thanks in advance.

Hope you are using a good firewall?

By the way, dump the popup killer and get the Google Toobar as it has a
great popup killer that does not beep.
http://toolbar.google.com/

There are popups that come through Messenger Service and should be stopped
by a good firewall like Kerio.
To test if you are vunerable to these popups read this page and use the
popup tester:
http://www.mynetwatchman.com/winpopuptester.asp

Read this:
http://www.mynetwatchman.com/kb/Secu...ex.asp#prevent

[Trip]

my windows messanger program isnt activated, and when i did the test the
little window didnt pop up. So i passed the test. We can scratch the
messanger theory i think unless i forgot something...

Back to the source of the popups.... www.sanboxer.com/redirect.....etc
..... 95 %% of the pop up ads i am getting come from it.. and they always
appear in the same way... Im sure every site doesnt have the same sponser..
This computer i bought from best buy, and if i had my choice id reinstall
windows media, but i dont know if i can get back all the cool stuff like
the hd tv, etc. This is becoming a major problem for me and when the pop
ups are being blocked my mouse f*cks up and the scroller wheel either acts
as a back or foward button in the browser or it makes the font bigger or
smaller on the webpage... i just want to scroll down the page and its really
pissing me off. any help would again be greatly appereciated to any of my
problems...

[SmAfDiBoY]

this is from this site http://www.xptuneup.com

131. How to kill the IE About windows that popup from time to time
There is an Internet Explorer vulnerability to which allows some web sites
to open a hidden popup tracking minimized window either upon your first
visit or when you leave their web site or even when you close your browser
while one of their web pages is still displayed. They do this by using the
little known "about:" browser built-in command into their HTML/DHTML/XML
code. Sometimes this window Go undetected as these are not resizable as you
come to expect of a typical window app. If you do not have anything specific
with www.about.com, there could be a registry tweak that you can do. Run the
Registry Editor (REGEDIT.EXE) by going to START-RUN and type regedit and
navigate to [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\
Internet Settings\ZoneMap\ProtocolDefaults]
and add two DWORD keys"about" and "about:" and set its value to 4.

IMPORTANT DISCLAIMER: Doing this tweak would mean that you would not be able
to use the blank about page as your startup page. There is a workaround for
this by adding it to your zone ...but I do not like it and hence not
mentioning it here

Check out the site


HTH



"Trip" <hahaha@hottiemail.com> wrote in message
news:L3nfb.48381$Of2.1999948@twister.tampabay.rr.c om...
> my windows messanger program isnt activated, and when i did the test the
> little window didnt pop up. So i passed the test. We can scratch the
> messanger theory i think unless i forgot something...
>
> Back to the source of the popups.... www.sanboxer.com/redirect.....etc
> .... 95 %% of the pop up ads i am getting come from it.. and they always
> appear in the same way... Im sure every site doesnt have the same
sponser..
> This computer i bought from best buy, and if i had my choice id reinstall
> windows media, but i dont know if i can get back all the cool stuff like
> the hd tv, etc. This is becoming a major problem for me and when the pop
> ups are being blocked my mouse f*cks up and the scroller wheel either acts
> as a back or foward button in the browser or it makes the font bigger or
> smaller on the webpage... i just want to scroll down the page and its
really
> pissing me off. any help would again be greatly appereciated to any of my
> problems...
>
>

[SmAfDiBoY]

I am talking messenger service located in the services tab of msconfig

not to be confused with msn messenger


"Trip" <hahaha@hottiemail.com> wrote in message
news:L3nfb.48381$Of2.1999948@twister.tampabay.rr.c om...
> my windows messanger program isnt activated, and when i did the test the
> little window didnt pop up. So i passed the test. We can scratch the
> messanger theory i think unless i forgot something...
>
> Back to the source of the popups.... www.sanboxer.com/redirect.....etc
> .... 95 %% of the pop up ads i am getting come from it.. and they always
> appear in the same way... Im sure every site doesnt have the same
sponser..
> This computer i bought from best buy, and if i had my choice id reinstall
> windows media, but i dont know if i can get back all the cool stuff like
> the hd tv, etc. This is becoming a major problem for me and when the pop
> ups are being blocked my mouse f*cks up and the scroller wheel either acts
> as a back or foward button in the browser or it makes the font bigger or
> smaller on the webpage... i just want to scroll down the page and its
really
> pissing me off. any help would again be greatly appereciated to any of my
> problems...
>
>

[jayjwa]

Trip wrote:
> I have run Ad-Aware, Spybot S&D, and Spyhunter. I cannot seem to overcome
> this problem. This is a new computer with Microsoft Windows XP Media.
> Popups have always been a problem, but when my browser's address is
> about:blank and pop-ups still popup (9 or 10 of them) i know somethings
> wrong...
>
> Like I said before, I have run all of those programs and searched through
> files myself. I have a popup killer but its blocking so many of them it
> screws up my computer. (If you have your speakers on and the 'play sound
> when pop up is detected' turned on, it constantly beeps.
>
> Im pretty sure google doesnt have pop ups but i get them from google too.
> They all seem to come from the same place -- www.sandboxer.com in my 'black
> list' in stopzilla the addresses are something similar to
> www.sandboxer.com/redirect.aspx?id=............ and so forth.
>
> If anyone help can me or give me any information on this problem, It would
> be greatly apprectaited.
>
> Thanks in advance.
>
>

Get Mozilla. I used it when I was on Windows and now I use it still
under X Window. It don't play that Pop-Up, Cookie crap.

--
--------------nonoffensive sig.v2.2RC2?------------------------
- jayjwa 4 Spammers: mailto: listme@listme.dsbl.org
The New Atr2. PGP/GPG Keys onsite
"Why do all the noob's use RedHat,
speak 4th grade English,
and cry because their X server crashed?"
Send HTTP1.1 GET to /cgi-bin/ping-jay.cgi, my domain, 2 mail
==Atr2.Ath.Cx: Linux Tough, Powered by Slackware.=============

[Jay T. Blocksom]

On Fri, 03 Oct 2003 01:37:45 GMT, in <alt.privacy.spyware>, "Trip"
<hahaha@hottiemail.com> wrote:
>
> I have run Ad-Aware, Spybot S&D, and Spyhunter. I cannot seem to
> overcome this problem. This is a new computer with Microsoft Windows XP
> Media.
[snip]

Ouch.

Indeed, the utilites you mention would be incapable of dealing properly with
that problem.

> Popups have always been a problem, but when my browser's address is
> about:blank and pop-ups still popup (9 or 10 of them) i know somethings
> wrong...
>
[snip]

Your browser's defined "home page" and "pop-ups" are two separate (and
nearly always completely unrelated) issues.

> Like I said before, I have run all of those programs and searched through
> files myself. I have a popup killer but its blocking so many of them it
> screws up my computer. (If you have your speakers on and the 'play sound
> when pop up is detected' turned on, it constantly beeps.
>
[snip]

That's because you're treating the symptom, instead of the disease.

> Im pretty sure google doesnt have pop ups but i get them from google too.
> They all seem to come from the same place -- www.sandboxer.com in my
> 'black list' in stopzilla the addresses are something similar to
> www.sandboxer.com/redirect.aspx?id=............ and so forth.
>
[snip]

This might provide some info relevant to that specific infestation:

<http://vil.nai.com/vil/content/v_100635.htm>

However...

This too is only one *symptom* of the underlying fundamental problem: Your
system setup is obviously completely FUBAR (and no, the fact that it is new,
possibly even "just like it came out of the box" does *NOT* contradict that
statement). First, there's the matter of Windows XP itself:

<http://www.hevanet.com/peace/microsoft.htm>
or <http://www.futurepower.net/microsoft.htm>

Then there's the fact that you are presumably using MSIE to do your web
browsing. That is a major problem in and of itself, regardless of which
version of Windows you might be using. As a "quick & dirty" fix, see:

<http://www.litepc.com/ieradicator.html>

Further, based on your description of the system's behavior, it's a good bet
that you're running MSIE with most or all of the default settings (like
having Java****, ActiveX, etc., enabled, allowing BHO hijacks, etc.). This
goes well beyond "a problem"; it's downright *suicidal* -- especially given
the fact that you are apparently running off a "cable modem" connection to
the 'net (lemme guess: you don't even have a proper hardware firewall
between your system and the cable modem, right?).

You need to *seriously* re-think your entire approach to system setup.

--

Jay T. Blocksom
--------------------------------
Appropriate Technology, Inc.
usenet01[at]appropriate-tech.net


"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-- Benjamin Franklin, Historical Review of Pennsylvania, 1759.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
NOTE: E-Mail address in "From:" line is INVALID! Remove +SPAMBLOCK to mail.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Unsolicited advertising sent to this E-Mail address is expressly prohibited
under USC Title 47, Section 227. Violators are subject to charge of up to
$1,500 per incident or treble actual costs, whichever is greater.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[Sharon Westfall]

> On Fri, 03 Oct 2003 01:37:45 GMT, in <alt.privacy.spyware>, "Trip"
> <hahaha@hottiemail.com> wrote:
> > Im pretty sure google doesnt have pop ups but i get them from
> > google too. They all seem to come from the same place --
> > www.sandboxer.com in my 'black list' in stopzilla the addresses
> > are something similar to
> > www.sandboxer.com/redirect.aspx?id=............ and so forth.

Hi, sorry for jumping in on this so late; I found this thread on Google
while searching for the same solution. I run EMS Free Surfer II and
Spybot and was getting the Sandboxer generated popups constantly. But
yesterday, I found the culprit.

In Settings/Control Panel/ Add or Remove Programs, I found a program
called Memory Watcher. When I clicked on it to remove it, it then told
me it was a Ad-Supported Freeware program. Since I removed this program
I have not seen anymore Sandboxer ads. Gone. Pau. Fini.