DOWNLOAD: Best tool to repair Windows problems & optimize system performance | Best driver update software for your PC
 
Page 2 of 3 FirstFirst 123 LastLast
Results 11 to 20 of 23

Thread: IE7 displays login box on any page with advertising

  1. #11
    HappyAndyK's Avatar
    HappyAndyK is offline Site Administrator
    Join Date
    Jun 2008
    Posts
    7,572

    Default

    Also try this:



    Go in safe mode.
    Run your anti-malware (av and anti-spyware). Schedule a boot-time scan of your Spybot.
    Replace your hosts file with a good one as mentioned above. (which you appear to have have done)
    Run CCleaner portable lite version (available on Majorgeeks) and use it.

    Open IE > Internet Options > Security tab. Check in Trusted Sites/ Local Intranet/ Restricted sites, if you see any entries - delete them.

    You could also try ZonedOut utility to Add, Delete, Import, Export, Build a Black/WhiteList of websites . It includes Restricted, Trusted and Intranet Zones. It is an excellent too just 185kb.

    Best to always create a system restore point before making any changes to the system.

  2. #12
    saab340b is offline Beginner
    Join Date
    Nov 2009
    Posts
    10

    Default

    Well, Kaspersky caught two that 4 other scanners missed.

    kasp.html

    info.txt

    log.txt

    I've also found on the web: "Personal Web Servers and HOSTS file
    If you are running Microsoft's web server software (IIS), and you are getting "Login" pop-up prompts while using a HOSTS file, the solution is to use 0.0.0.0 instead of 127.0.0.1 for all entries except for the first entry: 127.0.0.1 localhost"

    Now how do I delete this thing?

  3. #13
    leofelix is offline Member
    Join Date
    Oct 2008
    Location
    Italy
    Posts
    1,668

    Default

    Hi+your system is infected
    please take a look at your HOSTS file

    ======Hosts File======

    127.0.0.1 localhost

    127.0.0.1 gannett.gcion.com
    127.0.0.1 usatoday1.112.2o7.net
    127.0.0.1 ads.revsci.net
    127.0.0.1 pix04.revsci.net
    127.0.0.1 ads.adsonar.com
    127.0.0.1 an.tacoda.net
    127.0.0.1 acestats.com
    127.0.0.1 www. acestats.com
    127.0.0.1 www .activesearch.com #[Adware.ActiveSearch]


    ----


    -------
    According to Kaspersky on line you catched
    File name Threat Threats count C:\0temp\dvd6070.zipInfected: Trojan.Win32.Agent.danz1

    C:\0temp\fix.zipInfected: Trojan.Win32.Buzus.cifn----------------

    Now please visit this page

    SUPERAntiSpyware.com - Online Scanner

    Download the scanner (is stand alone), double click it, update it than run a full scan.
    Let SuperAntiSpyware remove all threats found

    Please copy the log file in your reply
    Thank you

    [EDIT to say] Your SUN Java JRE is outdated, please uninstall it immediately and install SUN Java JRE 1.6.0.17
    http://www.filehippo.com/download_java_runtime/
    Last edited by leofelix; 18th November 2009 at 15:09.

  4. #14
    saab340b is offline Beginner
    Join Date
    Nov 2009
    Posts
    10

    Default

    I am a little leary of purchasing using a credit card online right now. Does this program require a purchase to fix the problem?

  5. #15
    leofelix is offline Member
    Join Date
    Oct 2008
    Location
    Italy
    Posts
    1,668

    Default

    Quote Originally Posted by saab340b View Post
    I am a little leary of purchasing using a credit card online right now. Does this program require a purchase to fix the problem?
    No it is completely free, morevover it doesn't need to be installed, since is stand alone

    http://www.superantispyware.com/sassaferun.php

  6. #16
    saab340b is offline Beginner
    Join Date
    Nov 2009
    Posts
    10

    Default

    I've pointed the program to the folder that contains the virus files (thinking i won't have to wait for another 2 hour scan) and all it found was a few advertising cookies to quarantine. Should I let it go ahead and do a full scan?]
    Last edited by leofelix; 18th November 2009 at 15:22.

  7. #17
    leofelix is offline Member
    Join Date
    Oct 2008
    Location
    Italy
    Posts
    1,668

    Default

    Run a full scan please

  8. #18
    saab340b is offline Beginner
    Join Date
    Nov 2009
    Posts
    10

    Default

    the full scan resulted in 14 adware.tracking cookies. i fixed those and cleaned my hosts file, rebooted, and no popups.

    I'm going to delete those two infected zip files and check my registry for any entries with that name.

    Thanks for all of your help. It was really appreciated.
    Eric

  9. #19
    leofelix is offline Member
    Join Date
    Oct 2008
    Location
    Italy
    Posts
    1,668

    Default

    You're welcome
    I'm glad you could solve and thank you for making me know

    I hope you uninstalled your old SUN Java JRE (which is vulnerable) and installed the latest JRE 1.6.0.17 version in the mean while

  10. #20
    rkonit's Avatar
    rkonit is offline Gold Member
    Join Date
    Jul 2008
    Location
    Pilani, India
    Posts
    1,363

    Default

    Quote Originally Posted by leofelix View Post
    You're welcome
    I'm glad you could solve and thank you for making me know

    I hope you uninstalled your old SUN Java JRE (which is vulnerable) and installed the latest JRE 1.6.0.17 version in the mean while
    + Update to Internet Explorer 8

Page 2 of 3 FirstFirst 123 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22