Been getting popups

[ajbrun]

Every few minutes, I get a pop-up from the following site:

http://www.popuppers.com/popsn16.php...=1&oldourexe=1

Only thing is, I don't know how to get rid of it. I've run spybot and ad-aware. Is there anything else you could suggest to get rid?

Thanks, this is very annoying and I HATE pop-ups !


I don't know if this is related, but as soon as I sent this post, I got a "do you want to send an error report" message too .

[Paul Adams]

Get HijackThis and let us have a look at the logfile after a scan:

http://www.spywareinfo.com/~merijn/downloads.html

[PopUpPirate]

If you're spyware wont let you download it, I've uploaded it here

[ajbrun]

I just got another popup when I loaded this page .

[ajbrun]

Here's what hi-jack this said:


(notice what's on the 2nd line....)

[Paul Adams]

c:\windows\medload.exe looks suspect to me.

If you launch Task Manager, is that process running right now?

Kill it if it is, rename the file in c:\windows if you are then able, check that box in HijackThis and hit "Fix checked".

If you can't kill or rename it due to access denied problems, start it safe mode and try again, also run HijackThis to make sure it's not in there.

[ajbrun]

OK, I fixed that one (it was running). I'll see if I still get any more pop-ups. Thanks.

Also, are there any other programs I should use? Hi-jack this look more complicated than spybot and others, could I cause damage if I mess up?

[PMM]

you want to get rid of that medload bit...

[Paul Adams]

HijackThis is definitely not a "regular user" tool for fixing issues, but very handy for highlighting potential issues - there are too many false positives thrown out that people might remove and screw up their system for it to be used by anyone.

A handy tool for checking out what is set to run on your system at startup is "Autoruns" from sysinternals:
http://www.sysinternals.com/ntw2k/fr...autoruns.shtml

This gives a little more detail than StartupCPL and actually attempts to verify the publisher too.

I hope you are running AV too, some users say it is not worth it, but in my experience it is one of the essentials for protecting yourself.

[ajbrun]

AV? Do you mean antivirus, or a certain one or what?

[Paul Adams]

Yeah, any anti-virus product.

I am currently playing with the beta version of AVG 7.0 Freeware.
http://www.grisoft.com

[ajbrun]

I'm using PC-cillin (it's up-to-date, but only the 2002 version, as shown above in the screenshot), but that file wasn't it. Just got another pop-up. I'm just going through that start up thing you said.

Is PC-cillin good enough?

[PopUpPirate]

I trust you've got rid of medload.exe (from HijackThis) - generally if you google for a file (eg. "medload.exe") one of the top hits will tell you what the file does. Instead of going straight to the link, click "Cached" instead and the filename will be highlighted in yellow to save you scanning through pages of code. Example

[ajbrun]

I think this site my solve my problem. It says someone found some virus at the bottom of the page, I'm going to do a search/virus check etc.

http://computercops.biz/postp328183.html

[directhex]

ajbrun sweetie? can i refer you back to http://forums.hexus.net/showpost.php...79&postcount=2, from when this happened to you 3 months ago? http://forums.hexus.net/showpost.php...4&postcount=16 was actively asking for it to happen again.

[ajbrun]

ajbrun sweetie? can i refer you back to http://forums.hexus.net/showpost.php...79&postcount=2, from when this happened to you 3 months ago? http://forums.hexus.net/showpost.php...4&postcount=16 was actively asking for it to happen again.

Yes, I know I shouldn't have been using internet explorer, but I've recently re-installed windows etc, and I haven't got round to downloading firefox yet. I think the pop-ups have stopped now, and I should be able to download another browser sometime this week. I should have listened to your original post more, and downloaded it straight away - I thought I could survive with IE for a while until I got something else. I'm really sorry for not listening to you a little more - firefox will be mine.