Help With Popups !!!

[aretee]

these popups seem to come up no matter what AND IM REALLY ^%&#EN ANNOYED !!!!! they pop up when im offline, or when im not on IE !!! i've tried scanning it with norton anti virus, and spysweeper !! what could this be ?? any solution with out me buying new programs ?? because im poor !! thanx 4 ur time

 

[ZER0X]

Try....Ad-aware SE....or download Hijack this and post the log in this thread

 

[aretee]

i have winXP IE 6.0 and this is wat the log showed. My virus thing picked up aklsp.dll but i cant delete it, also what is rasautou ? is a trojan programe gud for getting rid of pop ups ?

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
E:\Program Files\keriopf\persfw.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
E:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-nz\msnappau.exe
E:\Program Files\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ycomp_wave/defaults/sp/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ycomp_wave/defaults/su/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
R3 - URLSearchHook: ScriptInocUI Class - - (no file)
O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 search.netscape.com
O1 - Hosts: 69.20.16.183 ieautosearch
O1 - Hosts: 69.20.16.183 ieautosearch
O1 - Hosts: 69.20.16.183 ieautosearch
O1 - Hosts: 69.20.16.183 ieautosearch
O1 - Hosts: 69.20.16.183 ieautosearch
O1 - Hosts: 69.20.16.183 ieautosearch
O1 - Hosts: 69.20.16.183 ieautosearch
O1 - Hosts: 69.20.16.183 ieautosearch
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-nz\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - D:\Program Files\DAP\DAPIEBar.dll
O3 - Toolbar: xtramsn - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-nz\msntb.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [QuickTime Task] "D:\program files\quicktime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [SpySweeper] E:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe /0
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Download with &DAP - D:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - D:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe (file missing)
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - D:\PROGRA~1\DAP\DAP.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O10 - Unknown file in Winsock LSP: c:\windows\system32\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\aklsp.dll
O15 - Trusted Zone: http://www.allblacks.com
O15 - Trusted Zone: http://www.aorere.ac.nz
O15 - Trusted Zone: http://www.aorere.zc.nz
O15 - Trusted Zone: http://thescore.com.au
O15 - Trusted Zone: http://www.nrl.com.au
O15 - Trusted Zone: http://*.everythinggirl.com
O15 - Trusted Zone: http://www.gameshark.com
O15 - Trusted Zone: http://www.google.co.nz
O15 - Trusted Zone: http://www.ihug.co.nz
O15 - Trusted Zone: http://www.lyricsdomain.com
O15 - Trusted Zone: http://*.by5fd.bay5.hotmail.msn.com
O15 - Trusted Zone: http://*.hotmail.msn.com
O15 - Trusted Zone: http://www.hotmail.msn.com
O15 - Trusted Zone: http://www.neopets.com
O15 - Trusted Zone: http://www.nzoom.co.nz
O15 - Trusted Zone: http://www.nzoom.com
O15 - Trusted Zone: http://www.nzrugby.com
O15 - Trusted Zone: http://www.rugbyrugby.com
O15 - Trusted Zone: http://*.top40-charts.com
O15 - Trusted Zone: http://www.tvnz.co.nz
O15 - Trusted Zone: http://*.xtra.co.nz
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://public.windupdates.com/get_f...d475b7cbee98:bb65c4c798f5b9e5c3b97d39236de5cd
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {79849612-A98F-45B8-95E9-4D13C7B6B35C} (Loader2 Control) - http://static.topconverting.com/activex/loader2.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{869D5CA5-159C-429D-A988-CF69AD159B05}: NameServer = 202.180.64.9 202.180.64.2

 

[Verrona]

This mite seem stupid but the best pop-up blocker that i had was, when i downloaded the Yahoo toolbar. It came with a pop blocker and it suprised me greatly, the best part is it's free.

Hope this helps u.

http://toolbar.yahoo.com/

 

[scottyboy20033]

spybot

Spybot -S&D:

http://www.safer-networking.org/en/download/index.html

and Ad-Aware SE 1.05 with Ad-watch are both good for catching popups and spyware/adware

but if u have Windows Xp then y not get SP2 and get the internet explorer built in popup blocker it is fairly good

 

[Fankango]

i happen to like the google toolbar better then the yahoo.

 

[Fankango]

o i forgot to say i had the same problem and the only way i found out to fix it was right click in IE on teh toolbar and it tells you all the different toolbar you can use and i found 411 ferit or something on it so i was able you discover what the problem was and it is easy from there. i hope this helps but i dont know.

 

[aretee]

awww man so theres no sort of virus or infected files on my computer ?? maaaan

My virus thing picked up aklsp.dll but i cant delete it, also what is rasautou ? is a trojan programe gud for getting rid of pop ups ?

but the pop ups come up even when im not surfing through I.E
dont i need to keep I.E up for the toolbars to werk ?

thanx for feedback

 

[Lorand]

Delete this file: c:\windows\system32\aklsp.dll
If indows won't let you, try MoveonBoot to get rid of it.

 

[Verrona]

That is a good point.

Snapfiles is a good website for apps Lorland.

 

[BlaBli]

google and yahoo tools bar r very good i agree, but they r considered as aspware (when im running hijack it always capture it as spy).

so does any 1 knows of a good anti popup application?

 

[riley454]

Some words of advice...especially for users new to popups & spyware

I've been using the net heaps for ages but not much of a tech-head and maybe through my lack of knowledge I had a similar problem. I've surfed and downloaded everything and anything. And almost still do.

Via a similar question to a similar forum I was advised to download Ad-Aware which I did. I had over 300 files that were identified as potential risks, some I knew were sites that I had a satisfactory relationship with, so i ignored but there were many that were identified as high risk, so i removed them from my system. The next start-up I did would not allow anything to run.........not even DOS. Some of the Spy programs get into system files so you have to be careful what you delete.

A re-format and $120 later, I downloaded SP2 for XP and enabled 'popup blocker' and purchased McAfee Antispyware (They are now my AV provider after disappointment with Norton) and I only get pop-ups when I disable XP blocker when some sites require pop-ups for their service.

Now when I do an Ad-Aware scan I have a couple of added files that I'm unsure of but most can be deleted through INTERNET OPTIONS/DELETE COOKIES.

My advice as a very regular (and possibly naive) net user is make sure you have a good proprietary anti-spyware program regardless of the cost and use some of the free (ie Ad-Aware) as a backup and take advantage of SP2 for XP block pop-ups, and be sure you get expert advice before you delete files that are marked as threats. Many forums including this one and many others have heaps of good advice to help, as I've only recently found out.