Virus of pop ups?
 

I have been getting pop ups on sites that either don’t have pop ups, or in the case of my own site, a popup that isn’t mine.

I have used Ad Aware 6 and Spybot s&d (advanced mode) and a virus scan and I am still getting them.

A friend told me he had a similar issue a long while ago, and he looked up “hosts” in his files and deleted the one that didn’t belong.

I did this the other night and found 2 .txt files that had my name as the txt file name; both had a line of “code” and was dated the day this started, So I deleted both of them, and they also had another files that looked like a bookmark named the same thing, which I deleted, but that didn’t work either.

I have done another search for “hosts” and have5 files

Wshosts.dll
Hosts.sbs
Hosts.sbs.sig
Hosts
Imhosts.sam

The oldest is Aug 2001 and the newest is March 2003

Anyone have any idea what to do now?

I have XP and IE 6

This is one of the pop ups, the other I see is for AFF

Try this one :) http://www.spywareinfo.com/~merijn/

Thanks MML, I did this and found these 2 files (these are just the first part of a long long line)

O2 - BHO: WinShow module
O2 - BHO: winlink module

Which also included my name in them, so I'm gusseing it's these, but just to be sure I wrote the guy who has that site asking him.

Here's an easy fix if you have XP, Chop can verify this because I helped him when his OS was trashed.

1) Click on start
2) Click on accessories
3) Click on system restore
4) Choose a date prior to the start of your problem

That simple it will kick you OS back where it was. Any new files or data created will be there it doesn't delete what YOU create. HTH

MML, I owe you yet another drink in Vegas.

I went to that site and than to their message board and posted and it too all of 5 mins to get an answer, a quick program, a scan and boom, done.

If anyone has crap on their pc's I would suggest going there ASAP, really fast responses.

Thanks All


|bananna|

Doh, forgot to say I was 1/2 right

it was one of these

O2 - BHO: WinShow module
O2 - BHO: winlink module

I am glad it helped :)