Pop-Ups?

Post by **Trey** » Thu Jul 03, 2008 6:54 pm

Today for the first time ever I'm getting pop ups from http://www.legendsworld.net/3DSL/news.htm Something new?

Post by **Tadrio** » Thu Jul 03, 2008 8:04 pm

I don't get any... and I don't have a popup blocker. Maybe you caught some Adware?

Post by **Trey** » Thu Jul 03, 2008 8:57 pm

Yeah, now it's not doing it... If it was adware why did it stop? I didn't change anything.

Post by **Trey** » Fri Jul 04, 2008 10:20 pm

Damn it! It was Adware!

Post by **hurenBock** » Fri Jul 04, 2008 10:36 pm

its a Popup

it POPS UP

funny hihi

Post by **Trey** » Sun Jul 13, 2008 9:58 pm

So, the pop-ups never really went away, they just stopped for a bit. Appearantly my computer's been infected but a nasty piece of adware work that is tough to get rid of. The pop-up I usually get is 'The Dumb Test' which is annoying on several levels, because I can't get rid of it. From what little I've been able to find on the web about this particular problem, it gets onto your computer if you've got an older version of Java. Niether Ad-Aware or Spybot S&D could root it out.

Post by **hfric** » Sun Jul 13, 2008 10:43 pm

oh new adds on the news site , ff saves me from them

Post by **Trey** » Mon Jul 14, 2008 6:08 am

Actually I have Firefox on here to, I get the pop-ups with that to. They're actually pop-overs, they open a new window. This has been driving me absolutly nuts, I can't get rid of it. I found a forum that had steps to get rid of this thing ( http://www.bleepingcomputer.com/forums/topic131741.html ), did everything thay said. Antispyware, run from safe mode, delete all cookies and temp files, antivirus scan, update java, delete any old versions... Still got them. I found this site ( http://www.computerhope.com/forum/index ... ic=58807.0 ) which had pretty much the same advise, plus a Malware scanner. Downloaded the malware scanner, ran it, found zero. I'm not sure what else to do.

The pop-ups are coming from h**p://eas.apm.emediate.eu, there seems to be a rotation of the ads, first one is always 'The Dumb Test' , I also get ads for 'Imedix' and at least one other I can't remember.

Is this really just something associated with the http://www.legendsworld.net/3DSL/news.htm link? (I've only ever noticed it when I click on this link, it doesn't happen every time though) Or is this something in my computer?

Post by **Egon68** » Mon Jul 14, 2008 7:11 am

Are you using Adblock Plus for Firefox? http://tiny.pl/2mnr
Seems very effective.

freakboy · Post by **freakboy** » Mon Jul 14, 2008 10:44 am

I use Opera, it has an integrated popup blocker already.

Post by **InsaneFury** » Mon Jul 14, 2008 7:21 pm

If you don't really know what you're doing, stuff like this might be a too techie though. But depending on your skills with computers, I'd suggest:

To debug and identify the file:
-Running procexp and see what executables are active on your system. If killing a suspected bad process causes the popups to disappear, rename that process' related file name on your hd so it won't start on future bootups.

To remove it:
-Running services.msc, and disable any service that doesn't seem mandatory.
-Running msconfig to see if any other items are started at startup.
-Running Regedit, checking the key at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\, making sure that the 'Shell' has value "explorer.exe". Sometimes malicious software changes this value so that it's loaded right along with the shell. Programs like Spybot don't seem to check this yet.

Post by **Trey** » Mon Jul 14, 2008 11:01 pm

I've had a little experience with things like this. I was working on the assumption that I picked up some adware somewhere, but I think it's actually just pop-ups from the 3dslnews page. What was driving me nuts was that I couldn't find anything no matter how hard I seached on my computer, now I think that's because there isn't anything on my computer. Every time I've ever had this happen in the past (like the bad old days with Bonzaibuddy, and stuff) it writes itself into the registery and then it's a matter of finding it and prying it out. Every scan I've done has turned up nothing but the usual tracking cookies, no suspicious registery entries, no tainted browser add-ons, no nothing.

Post by **hfric** » Tue Jul 15, 2008 12:41 am

Trey chill , just block e0.extreme-dm.com and m1.webstats.motigo.com they make those pop up , get the add-block addon for FF and set those when you enter the news site.

Yeah Master i know they are tracking site info but they smuggle pop ups for they free services

Post by **Trey** » Tue Jul 15, 2008 1:22 am

hfric wrote:Trey chill , just block e0.extreme-dm.com and m1.webstats.motigo.com they make those pop up , get the add-block addon for FF and set those when you enter the news site.

Yeah Master i know they are tracking site info but they smuggle pop ups for they free services

I'm okay now that I've got it figured out.