Continuing Pop Ups after Scan

  • Thread starter Thread starter Azhar
  • Start date Start date
A

Azhar

Hello,

When I open up windows explorer, once in a while, another
window opens up automatically at
www.adultfriendfinder.com. I tried blocking this through
the internet explorer options, but it continues to do
that. I've run Norton Anti-Virus Scans and the Microsoft
Anti-Spyware scans, but it continues to do that! Any
suggestions about how I can block that specific site or
if there is a safe program online that would allow me to
completely block viewing certain sites?
Thanks
 
Restart in safe mode and do a deep scan. On the Scan Page choose Scan
Options > Full System Scan. Do this at least two times until detects
something. Also, before you restart in safe
mode, disable System Restore, some trojans and spyware programs are likely
to restore themselves with system snap shots:

Right click My Computer > Properties > System Restore, check the "Disable
System Restore" check box and restart in safe mode.

Restart in safe mode instructions:
www.microsoft.com/resources/documentation/
windows/xp/all/proddocs/en-us/boot_failsafe.mspx
 
There are products which block access to such sites by adding them to your
Hosts file, with an address of 127.0.0.1, which is your local machine. This
prevents reaching these sites by whatever name or address is added to the
hosts file.

Spybot Search & Destroy, from www.safer-networking.org is one free
anti-spyware application that uses this approach.

The downside of this approach is that it fills the hosts file with ominous
looking stuff that you may be surprised to find if you are not expecting it,
when you look at it with some other tool--like the system explorers in
Microsoft Antispyware.

Another downside is that this approach is also used by some viruses and
trojans to prevent the owner of an infected machine from getting help.
Antivirus vendor's sites are blocked, for example. If the hosts file is
filled with hundreds of entries, finding such a block is more difficult.

So--I prefer to keep the hosts file as empty as possible, myself, but tastes
vary.

Additionally--it seems likely to me that what you are seeing stems from
spyware on your system. Perhaps not-perhaps you are simply regularly going
to a site that triggers this as a pop-under or some other mechanism that
makes it harder to spot what the source of the popup is--but I'd want to
take some more time cleaning the machine--perhaps using HijackThis and
posting in a good forum devoted to this kind of cleaning work.

http://www.aumha.org/a/quickfix.htm

is a good place to start on that route.
 
Back
Top