[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 458
  • Last Modified:

Blocked Popups Get Scattered Onto Desktop

Hi Everyone:

       Recently, I solved a friend's problem with blocked popups by going to toolbar.google.com and downloading their software which adds a plugin to the browswer which blocks popups.  Just recently though, my friend has noticed the blocked popups being moved to the desktop.  I must confess this situation is certainly peculiar.  I am not sure what direction to move in at this point.  

       Any thoughts or suggestions on this post will be appreciated.

       Thank you

       George
0
GMartin
Asked:
GMartin
  • 5
  • 4
  • 4
  • +3
5 Solutions
 
rgn2121Commented:
Not really sure about this one...

I have the google toolbar installed on my pc as well and I have not had a problem yet. (<-knocking on wood)

I would think you got a faulty download or something else is on the pc and has attached itself to the google toolbar. (virus, syware, etc.)

Here's what I would do...Uninstall the google toolbar, then update your virus definitions and run a complete scan of the system.  Also download, update and run a full scan using Adaware.

After this go back and try downloading the toolbar again...in the world of computer sometimes things can't be explained, but I am interested to see if there were viruses or AD ware/ spyware on the pc.
0
 
SheharyaarSaahilCommented:
>> my friend has noticed the blocked popups being moved to the desktop.

George.... does this mean that the links which are blocked by popup blocker are moved to desktop in form of html pages, or is there anything else which is going on.... im sorry for not understanding the situation clearly =\
0
 
GMartinAuthor Commented:
Hi There:

        I will be going over to my friend's house this weekend to get a clearer picture of what is going on.  It was explained to me as blocked popups appearing on the desktop.  When it was explained to me, it sounded vague.  In any case, I will give a more precise clarification of what is going on after my visit.

       Thanks again everyone for your willingness to help.

       George
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
SheharyaarSaahilCommented:
yeah its sound a little weird and confusing that how popups can appear on desktop.... and if they Really are, then in what format.... ??
But let's see what it comes out... keep us informed :)
0
 
huntersvcsCommented:
I think it might be an option of WHAT to do with the blocked pop-ups.  The default (if nothing is selected) might be Desk Top.  Check the settings of the blocker, and if possible, change to DELETE.  If you don't have that option, then just uninstall it.  The option may be part of the installation routine.
0
 
ZeropointNRGCommented:
He think he means, the popups that would normally appear are blocked, but are still showing the window (blank), the actual add won't be displayed, but the window will.

I would remove google toolbar, check for spyware, remove it, I'm sure he must have some, and then start again or try something else to block adds.

Good Luck
0
 
GMartinAuthor Commented:
Hi Everyone:

         I must confess this is a tough one to totally resolve.  After going over there tonight, I did find the extra icons mentioned on the desktop.  One was entitled The Many Faces of Bush.  And, there were several others too which also had references made to them within Add/Remove Programs.  When I asked my friend if he downloaded and installed them, he did not remember doing it which further confused me after seeing them within Add/Remove Programs.  In any case, I went ahead and uninstalled them from Add/Remove Programs and deleted them from the desktop.  

        In an attempt to remove the spyware/adware which could possibly cause this problem, I ran AdAware 6.0 Professional and SpyBot S & D.  Even after removing the spyware found with these programs, I was getting popups appear eventhough I was not on the internet.  One window which constantly popped up was PC Performance Wizard Window with an address of http://ads1.revenue.net/.... Also, a second window which constant came up was System Alert with an address of http://e.rn11.com/a/a174-admed.ron.  There were other windows making reference to health and beauty aids.  
Even after running AdAware Professional and SpyBot S & D, they still appeared.  

       Any further help on this one will be welcomed.  It looks like these popups are going to be tricky to totally suppress.

       George
0
 
SheharyaarSaahilCommented:
George is this machine XP, if Yes then are you disabling System Restore before cleaning the system ??
and When you are running Spyware removal tools, are you running them from safmeode ??
if NO then plzz do these two things and this time run CWShredder also, CoolWebShredder >>  http://www.softpedia.com/public/cat/10/17/10-17-150.shtml

After Disabling System restore and running the above tools in safemode, goto My Computer>Tools>Folder Options>View and turn on the feature of Show Hidden Files
then Goto C:\Documents and Settings\your usernmae\Local Settings\Temp and delete all files present here
then Goto C:\Documents and Settings\your usernmae\Local Settings\Temporary Internet Files, and delete the folder of ContentIE
then Goto C:\Windows\Temp and delete all files present here

After that boot in Normal Mode to check for the problems now ??
0
 
huntersvcsCommented:
Make sure your internet browser settings are not set to "make available offline" as well.
0
 
GMartinAuthor Commented:
Hi There:

       What are the steps for figuring out if "make available offline" is enabled within IE?

        George

       
0
 
ZeropointNRGCommented:
When you set a fav you have the option of setting it to be availabe offline, simply go to the sites you have, right click it to set as fav, then up the top it should have that option, see if it is selected.
0
 
rgn2121Commented:
Sometimes the processes on certain adware/spyware can continue to run and block their removal.

If you are familiar with what should be on the pc, c:\program files  and see if there are any folders you don't recognize or are not needed.  Delete these and if you can't then you probably need to stop the Process for the program, ctrl+alt+dlt>task manager>processes.

****Only delete folders or stop process that you are sure you don't need.  if you are unsure of what a process is used for, type it's full name into google, ex.  process.exe.

Also, you might want to turn off windows messaging if it isn't already...it can also be used by advertisers

http://www.pchell.com/support/ipmessaging.shtml

To check if a site has been made available offline just got to Favorites at the top of your browser and click Organize favorites...you can the simply click (once) on the sites and see if they are available offline.

0
 
huntersvcsCommented:
OK, I take it you've already followed part of the advice given so far:

-Deleted Temporary Internet Files (incl. cookies)
-Deleted (at the same time) all offline files
-Run SpyBot and AdAware
-Run CWShredder

You said "I was getting popups appear eventhough I was not on the internet".  That means some process running in the background is still active.  Go to the registry and check HKCU and HKLM and check what processes are under RUN, RUNONCE, RUNSERVICES.  You can also check the Task Manager to view currently running processes to see if anything looks suspicious (as recommended by rgn2121).

Have you checked the event log to see if anything strange has been happening lately?  Don't look just for errors - look at processes being started at the time of boot and when pop-ups occurr.

All local settings are determined by the files contained in the user's profile, including preferences, internet settings, desktop settings, etc.  It might also be something buried in the user's profile.  Try setting up a new account and logging on with that.  Do the pop-ups still appear?
0
 
CharlyPhillyCommented:
First: Make sure you go to microsft and get the lastest updates & security patches. http://v4.windowsupdate.microsoft.com/en/default.asp

                     **You especially need to make sure you get the internet explorer updates (SP2 is latest).**

Then: Make sure that you delete temporary Internet Files (incl offline) and cookies ...which all of this was mentioned by previous members

Last: I know you're probably tired of downloading and running programs but........

Download and run Giant Anti Spyware http://www.giantcompany.com/(e3olgravtimoyk45kgpw1fzy)/download.aspx?prodID=70&skip=true

This product has a larger database and finds way more adware/spyware than most of the other programs (over 100k of expanded threats in their database). Let me know how everything works out.
0
 
GMartinAuthor Commented:
Hi Everyone:

       I greatly appreciated each person's feedback.  After carefully reading each comment, I must confess that the feedback is full of great ideas.  At this time, it will be Saturday night before I can go back over to my friend's house and resume this project due to conflicts in day to day schedules.  In any case, I should be able to provide closing comments to this post along with allocating points to experts.

       Once again, thanks so much for sharing these great ideas and tips with me.  I am confident each comment will prove fruitful in the final resolution of this computer issue.

       George
0
 
rgn2121Commented:
Good luck George
0
 
huntersvcsCommented:
Let us know if the problem is solved when you get back.
0
 
GMartinAuthor Commented:
Hi Everyone:

      I greatly appreciated the suggestions to this post.  Like always, there are some really well thought out recommendations.  As far as I know, the problem is now fixed after trying out a combination of several different things.  Cleaning out the temp and temporary internet files from the Documents and Settings path as suggested by SheharyaarSaahil certainly proved helpful.  Unfortunately, I was unable to clean out the temp folder within the windows directory within Safe and Normal mode because of getting the error message Access Denied.  However, I believe I can go back and delete the contents by simply booting to a floppy and entering the folder and delete them from there.  

        In addition, I found Giant Anti-Spyware very handy as well.  I found this program to be comprehensive with respect to its scan for spyware.  It scanned memory processes, registry keys, folders, and all files.  This program did find much infection on the pc and allowed me the option to either perform a quartinine or deletion.  I simply deleted all reference within each component for spyware.  

        With respect to checking the Run and Runonce within the registry, I was not exactly clear with respect to the exact location for navigations, therefore, I did not exercise this option.  Since I had already got the results desired, I decided not to pursue it.  

        Once again, thanks everyone for the feedback.  I found it very helpful.

        George
0
 
SheharyaarSaahilCommented:
>> Unfortunately, I was unable to clean out the temp folder within the windows directory within Safe and Normal mode because of getting the error message Access Denied.

Remember George that you have to delete the Contents of these folders and not the folders themselves :)
and to sort the Access Denied error, just take the ownership of the files which you cannot delete and then delete them =)

Take Ownership of a File or Folder in Windows XP:
http://support.microsoft.com/?kbid=308421
0

Featured Post

Cyber Threats to Small Businesses (Part 2)

The evolving cybersecurity landscape presents SMBs with a host of new threats to their clients, their data, and their bottom line. In part 2 of this blog series, learn three quick processes Webroot’s CISO, Gary Hayslip, recommends to help small businesses beat modern threats.

  • 5
  • 4
  • 4
  • +3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now