Periodic Internet Explorer Web Pages Advertisements Appear withouut my doing a thing

[carlwward]

I have a problem that keeps occurring on my Win98 2nd Ed PC that I need some
help clearing up.
Every morning, 3 Internet Explorer windows appear on my screen.
They are the same each day. The Explorer windows contains no address bar,
tool bars or menu bar. One of them is advertising a "screen saver" list
that I supposedly one can preview or download them free of charge. One of
them is a commercial ad to purchase AOL. And one of them is a large black
screen containing white text as follows:
------------------------
Privacy Protection Aleart [Version 3.5-BC5]]
C:\BrowserCleanser\Update\>Privacy_Protection
IMPORTANT: Your computer may be recording your Internet Activities withyout
your knowledge....etc.
Would you like to see ehat has been recorded on your computer? [Y/N}[ Y
Click the "OK" button and begin your Privacy Protection Update [RECOMMEDED]
C:\BrowserCleanser\Update\>
<C> Windows and DOS is a Copyright of Microsoft Corp 1985-2001.
BrowserCleanser is not affiltiated with Microsoft Corp
-------------------------
Every day the exact same windows appear and sometimes they appear again
during the day....!

I presume that I somehjow, accidently downloaded something or visited some
web site that caused some program to be placed on my PC and it automatically
runs.
PLEASE, Someone tell me how I can get rid of these happenings....!
Carl Ward

[AlmostBob]

You have been attacked, the ad is caused by just the kind of spyware that the
ad claims to remove, the ad is bogus. Install either(both they work a little
differently) of the first two items below update from the in-program links and
allow them to remove this and the, probably, dozens of other spyware on your
pc. regular use will stop this happening, stay away from the web sites that
installed it, dont answer yes to any email questions. set up mail rules in
your mail reader to delete spam from the server without downloading, install a
firewall, use a good antivirus and update all your protection every day.
--
Adaware http://www.lavasoft.de
spybot http://security.kolla.de
AVG free antivirus http://www.grisoft.com
Panda online AntiVirus scan http://www.pandasoftware.com/ActiveScan/
Catalog of removal tools http://www.pandasoftware.com/download/utilities/
Blocking Unwanted Parasites with a Hosts file
http://mvps.org/winhelp2002/hosts.htm
links provided as a courtesy, read all instructions on the pages before use
Grateful thanks to the authors/webmasters

"carlwward" > wrote in message
...
| I have a problem that keeps occurring on my Win98 2nd Ed PC that I need some
| help clearing up.
| Every morning, 3 Internet Explorer windows appear on my screen.
| They are the same each day. The Explorer windows contains no address bar,
| tool bars or menu bar. One of them is advertising a "screen saver" list
| that I supposedly one can preview or download them free of charge. One of
| them is a commercial ad to purchase AOL. And one of them is a large black
| screen containing white text as follows:
| ------------------------
| Privacy Protection Aleart [Version 3.5-BC5]]
| C:\BrowserCleanser\Update\>Privacy_Protection
| IMPORTANT: Your computer may be recording your Internet Activities withyout
| your knowledge....etc.
| Would you like to see ehat has been recorded on your computer? [Y/N}[ Y
| Click the "OK" button and begin your Privacy Protection Update [RECOMMEDED]
| C:\BrowserCleanser\Update\>
| <C> Windows and DOS is a Copyright of Microsoft Corp 1985-2001.
| BrowserCleanser is not affiltiated with Microsoft Corp
| -------------------------
| Every day the exact same windows appear and sometimes they appear again
| during the day....!
|
| I presume that I somehjow, accidently downloaded something or visited some
| web site that caused some program to be placed on my PC and it automatically
| runs.
| PLEASE, Someone tell me how I can get rid of these happenings....!
| Carl Ward
|
|
|

[carlwward]

thanks Bob.
I downloaded Ad-aware including its updates and rean it.
It found 3 files that were quarantined.
I don't visit these web sites often - in fact, I am not sure whick one this
even happend on.And I never answer yes to any emails - in fact, I have an
email blocker set up such that emails that are not from addresses in an
acceptable list that I set up, will in fact be deleted at my server and
never down-loaded so I don't get any (at least not hardly) junk mail. I do
also have a firewal in my Linksys router and I do in fact, have Noron's
antivirus program which gets updates frequently. I thank you tho for
directing me to Ad-aware. I'm anxisous to see if those 3 files it qurantined
will stop those dumb ads from popping up...!
Carl
"AlmostBob" > wrote in message
...
> You have been attacked, the ad is caused by just the kind of spyware that
the
> ad claims to remove, the ad is bogus. Install either(both they work a
little
> differently) of the first two items below update from the in-program links
and
> allow them to remove this and the, probably, dozens of other spyware on
your
> pc. regular use will stop this happening, stay away from the web sites
that
> installed it, dont answer yes to any email questions. set up mail rules in
> your mail reader to delete spam from the server without downloading,
install a
> firewall, use a good antivirus and update all your protection every day.
> --
> Adaware http://www.lavasoft.de
> spybot http://security.kolla.de
> AVG free antivirus http://www.grisoft.com
> Panda online AntiVirus scan http://www.pandasoftware.com/ActiveScan/
> Catalog of removal tools http://www.pandasoftware.com/download/utilities/
> Blocking Unwanted Parasites with a Hosts file
> http://mvps.org/winhelp2002/hosts.htm
> links provided as a courtesy, read all instructions on the pages before
use
> Grateful thanks to the authors/webmasters
>
> "carlwward" > wrote in message
> ...
> | I have a problem that keeps occurring on my Win98 2nd Ed PC that I need
some
> | help clearing up.
> | Every morning, 3 Internet Explorer windows appear on my screen.
> | They are the same each day. The Explorer windows contains no address
bar,
> | tool bars or menu bar. One of them is advertising a "screen saver" list
> | that I supposedly one can preview or download them free of charge. One
of
> | them is a commercial ad to purchase AOL. And one of them is a large
black
> | screen containing white text as follows:
> | ------------------------
> | Privacy Protection Aleart [Version 3.5-BC5]]
> | C:\BrowserCleanser\Update\>Privacy_Protection
> | IMPORTANT: Your computer may be recording your Internet Activities
withyout
> | your knowledge....etc.
> | Would you like to see ehat has been recorded on your computer? [Y/N}[ Y
> | Click the "OK" button and begin your Privacy Protection Update
[RECOMMEDED]
> | C:\BrowserCleanser\Update\>
> | <C> Windows and DOS is a Copyright of Microsoft Corp 1985-2001.
> | BrowserCleanser is not affiltiated with Microsoft Corp
> | -------------------------
> | Every day the exact same windows appear and sometimes they appear again
> | during the day....!
> |
> | I presume that I somehjow, accidently downloaded something or visited
some
> | web site that caused some program to be placed on my PC and it
automatically
> | runs.
> | PLEASE, Someone tell me how I can get rid of these happenings....!
> | Carl Ward
> |
> |
> |
>
>

[carlwward]

Well, Bob.
After the ads popped up yesterday, I re-ran the Ad-aware program, changing
some settings and it found several high risk and several medium risk file,
all of which I qurantined.....however, this morning, those dumb ads popped
up again.
The Ad-aware program doesn't seem to be finding this particular one...
Any suggestions....?
Carl Ward

"carlwward" > wrote in message
...
> thanks Bob.
> I downloaded Ad-aware including its updates and rean it.
> It found 3 files that were quarantined.
> I don't visit these web sites often - in fact, I am not sure whick one
this
> even happend on.And I never answer yes to any emails - in fact, I have an
> email blocker set up such that emails that are not from addresses in an
> acceptable list that I set up, will in fact be deleted at my server and
> never down-loaded so I don't get any (at least not hardly) junk mail. I
do
> also have a firewal in my Linksys router and I do in fact, have Noron's
> antivirus program which gets updates frequently. I thank you tho for
> directing me to Ad-aware. I'm anxisous to see if those 3 files it
qurantined
> will stop those dumb ads from popping up...!
> Carl
> "AlmostBob" > wrote in message
> ...
> > You have been attacked, the ad is caused by just the kind of spyware
that
> the
> > ad claims to remove, the ad is bogus. Install either(both they work a
> little
> > differently) of the first two items below update from the in-program
links
> and
> > allow them to remove this and the, probably, dozens of other spyware on
> your
> > pc. regular use will stop this happening, stay away from the web sites
> that
> > installed it, dont answer yes to any email questions. set up mail rules
in
> > your mail reader to delete spam from the server without downloading,
> install a
> > firewall, use a good antivirus and update all your protection every day.
> > --
> > Adaware http://www.lavasoft.de
> > spybot http://security.kolla.de
> > AVG free antivirus http://www.grisoft.com
> > Panda online AntiVirus scan http://www.pandasoftware.com/ActiveScan/
> > Catalog of removal tools
http://www.pandasoftware.com/download/utilities/
> > Blocking Unwanted Parasites with a Hosts file
> > http://mvps.org/winhelp2002/hosts.htm
> > links provided as a courtesy, read all instructions on the pages before
> use
> > Grateful thanks to the authors/webmasters
> >
> > "carlwward" > wrote in message
> > ...
> > | I have a problem that keeps occurring on my Win98 2nd Ed PC that I
need
> some
> > | help clearing up.
> > | Every morning, 3 Internet Explorer windows appear on my screen.
> > | They are the same each day. The Explorer windows contains no address
> bar,
> > | tool bars or menu bar. One of them is advertising a "screen saver"
list
> > | that I supposedly one can preview or download them free of charge.
One
> of
> > | them is a commercial ad to purchase AOL. And one of them is a large
> black
> > | screen containing white text as follows:
> > | ------------------------
> > | Privacy Protection Aleart [Version 3.5-BC5]]
> > | C:\BrowserCleanser\Update\>Privacy_Protection
> > | IMPORTANT: Your computer may be recording your Internet Activities
> withyout
> > | your knowledge....etc.
> > | Would you like to see ehat has been recorded on your computer?
[Y/N}[ Y
> > | Click the "OK" button and begin your Privacy Protection Update
> [RECOMMEDED]
> > | C:\BrowserCleanser\Update\>
> > | <C> Windows and DOS is a Copyright of Microsoft Corp 1985-2001.
> > | BrowserCleanser is not affiltiated with Microsoft Corp
> > | -------------------------
> > | Every day the exact same windows appear and sometimes they appear
again
> > | during the day....!
> > |
> > | I presume that I somehjow, accidently downloaded something or visited
> some
> > | web site that caused some program to be placed on my PC and it
> automatically
> > | runs.
> > | PLEASE, Someone tell me how I can get rid of these happenings....!
> > | Carl Ward
> > |
> > |
> > |
> >
> >
>
>

[Sandi - Microsoft MVP]

Short answer? AdAware cannot cope with modern malware when run using default
settings.

Long answer...

There are many people who have helped this FAQ improve over time - MVPs and
newsgroup users. I thank all of you who have made the newsgroups,
anti-malware websites and dedicated mailing lists into such a wonderful
resource.

IMPORTANT: Before trying to remove spyware, download a copy of LSPFIX from
the URL below - some malware can kill your internet connection when it is
removed, and this software should get things going for you again:
http://www.cexx.org/lspfix.htm

IMPORTANT: After obtaining the software below, make sure you check for
updates and then run the programmes in safe mode.

You can go to the link below to check your system for parasites (supplied by
Doxdesk.com):
http://inetexplorer.mvps.org/parasite.htm

Malware removal (beginners guide):

First, go to Control Panel, add/remove programs. Check for malware entries
and use the uninstall programs.

Second, get AdAware. [..Warning: AdAware is now version 6.181. All previous
versions are NO LONGER SUPPORTED and will not be updated...]

AdAware is available at www.lavasoft.de. Make sure you check for updates
every time you use it.

To be most effective, you must run AdAware while Windows is in safe mode.

Modern malware uses more than one process, and these processes are
'co-dependent'. In other words, when one processes detects that the other
has been shut down, it automatically restarts its sibling, often using a
different name.

Disable the ability of suspect processes to start automatically by using
MSCONFIG (startup tab) before booting into safe mode. Use the information
at the URL below as a guide:

http://www2.whidbey.com/djdenham/Uncheck.htm

Reboot your computer and hold down the F8 key until the boot menu options
appear. Select 'safe mode'. After you are in safe mode, check to make sure
the suspect processes did not start up. If they did start up, we are going
to have to track down *where* they are coming from before going any further.
An experienced computer technician can use programme such as AutoStart
Viewer for in-depth diagnosis:
http://www.diamondcs.com.au/index.php?page=asviewer

While still in safe mode, and after you have shut down as many malware
processes as possible, start AdAware. AdAware, when run using default
settings, simply does not cope with new 'intelligent' malware. Make sure
'activate in depth scan' is enabled. Select 'use custom scanning options'
and then click on the 'customize' button. Turn on the following scan
options - scan within archives, active processes, registry (including deep
scan), IE favorites and hosts file. You must also turn on the following
option via the 'tweak' button:

Cleaning engine: 'automatically try to unregister objects prior to deletion'

IMPORTANT: Before letting AdAware delete malware, write down on a piece of
paper exactly where the malware is stored. You will need to delete those
directories after AdAware has done its work, but ONLY IF IT IS NOT A
STANDARD WINDOWS DIRECTORY.

After running AdAware, run it again, this time using the option 'select
drives/folders to scan'. Click on 'select'. Scan your entire hard drive.
Also do the following:

Empty your IE cache and your other temporary file folders, eg:
c:\windows\temp (if using Windows 98) or C:\Documents and
Settings\<name>\Local Settings\Temp (the path to your temp folder will
change depending on your name) - sometimes programmes can be hidden in
there - watch out for mysterious *.exe files or *.dll files in those
folders.

Go to IE Tools, Internet Options, Temporary Internet Files {Settings
Button}, View Objects, Downloaded Programme Files. Check for unusual objects
there.

Go to IE Tools, Internet Options, Accessibility. Make sure there is no
style sheet chosen (under User Style Sheet - format documents using my style
sheet). If the option is turned on, turn it OFF.

It is possible to turn off third party extensions (Enable third-party
browser extensions (requires restart) at IE tools, internet options,
advanced) to disable *all* plug-ins but troubleshooting will be difficult
and it is only a BANDAID. Nothing gets fixed. There is software that
depends on 'third party browser extensions" to work, including Acrobat,
Microsoft Money, and many other programmes.

Once your computer is clean, and if it applies to your operating system,
create a new restore point. Your old ones may, of course, be infected with
the malware and therefore cannot be used. Run disk cleanup to remove old
restore points (if you operating system has this option you will find it on
the 'more options' tab of the disk cleanup utility).

If you are still having problems:

You can go to the link below to check your system for parasites and
hopefully identify your problem (supplied by Doxdesk.com):

http://inetexplorer.mvps.org/parasite.htm

Download and run the latest version of "Cool Web Shredder"
http://www.merijn.org/files/CWShredder.exe

The more experienced user can try Spybot. Again, it is a free programme
which can be downloaded from: http://spybot.eon.net.au/. Warning: it is NOT
a good programme for the inexperienced. If you want to use this programme,
please get the advice of those more experienced before 'fixing' anything
that it finds.

Another excellent programme that allows you to examine your system and
*create a results log for experts to examine* is HijackThis, available from:
http://209.133.47.12/~merijn/files/HijackThis.exe (direct download)

MS have released a limited KB article regarding what they call 'deceptive
software'.
http://support.microsoft.com/default.aspx?scid=kb;EN-US;827315

Here is advice specific to:

home page hijackings
http://inetexplorer.mvps.org/answers.htm#home_page

pop-up ads
http://inetexplorer.mvps.org/data/popup.htm

search engine hijackings
http://inetexplorer.mvps.org/answers4.htm#search_engine


--
Hyperlinks are used to ensure advice remains current
_______________________________________
Sandi - Microsoft MVP since 1999 (IE/OE)
http://inetexplorer.mvps.org/




carlwward wrote:
> Well, Bob.
> After the ads popped up yesterday, I re-ran the Ad-aware program,
> changing some settings and it found several high risk and several
> medium risk file, all of which I qurantined.....however, this
> morning, those dumb ads popped up again.
> The Ad-aware program doesn't seem to be finding this particular one...
> Any suggestions....?
> Carl Ward
>
> "carlwward" > wrote in message
> ...
>> thanks Bob.
>> I downloaded Ad-aware including its updates and rean it.
>> It found 3 files that were quarantined.
>> I don't visit these web sites often - in fact, I am not sure whick
>> one this even happend on.And I never answer yes to any emails - in
>> fact, I have an email blocker set up such that emails that are not
>> from addresses in an acceptable list that I set up, will in fact be
>> deleted at my server and never down-loaded so I don't get any (at
>> least not hardly) junk mail. I do also have a firewal in my Linksys
>> router and I do in fact, have Noron's antivirus program which gets
>> updates frequently. I thank you tho for directing me to Ad-aware.
>> I'm anxisous to see if those 3 files it qurantined will stop those
>> dumb ads from popping up...!
>> Carl
>> "AlmostBob" > wrote in message
>> ...
>>> You have been attacked, the ad is caused by just the kind of
>>> spyware that the ad claims to remove, the ad is bogus. Install
>>> either(both they work a little differently) of the first two items
>>> below update from the in-program links and allow them to remove
>>> this and the, probably, dozens of other spyware on your pc. regular
>>> use will stop this happening, stay away from the web sites that
>>> installed it, dont answer yes to any email questions. set up mail
>>> rules in your mail reader to delete spam from the server without
>>> downloading, install a firewall, use a good antivirus and update
>>> all your protection every day. --
>>> Adaware http://www.lavasoft.de
>>> spybot http://security.kolla.de
>>> AVG free antivirus http://www.grisoft.com
>>> Panda online AntiVirus scan http://www.pandasoftware.com/ActiveScan/
>>> Catalog of removal tools
> http://www.pandasoftware.com/download/utilities/
>>> Blocking Unwanted Parasites with a Hosts file
>>> http://mvps.org/winhelp2002/hosts.htm
>>> links provided as a courtesy, read all instructions on the pages
>>> before use Grateful thanks to the authors/webmasters
>>>
>>> "carlwward" > wrote in message
>>> ...
>>>> I have a problem that keeps occurring on my Win98 2nd Ed PC that I
>>>> need some help clearing up.
>>>> Every morning, 3 Internet Explorer windows appear on my screen.
>>>> They are the same each day. The Explorer windows contains no
>>>> address bar, tool bars or menu bar. One of them is advertising a
>>>> "screen saver" list that I supposedly one can preview or download
>>>> them free of charge. One of them is a commercial ad to purchase
>>>> AOL. And one of them is a large black screen containing white
>>>> text as follows: ------------------------
>>>> Privacy Protection Aleart [Version 3.5-BC5]]
>>>> C:\BrowserCleanser\Update\>Privacy_Protection
>>>> IMPORTANT: Your computer may be recording your Internet
>>>> Activities withyout your knowledge....etc.
>>>> Would you like to see ehat has been recorded on your computer?
> [Y/N}[ Y
>>>> Click the "OK" button and begin your Privacy Protection Update
>>>> [RECOMMEDED] C:\BrowserCleanser\Update\>
>>>> <C> Windows and DOS is a Copyright of Microsoft Corp 1985-2001.
>>>> BrowserCleanser is not affiltiated with Microsoft Corp
>>>> -------------------------
>>>> Every day the exact same windows appear and sometimes they appear
>>>> again during the day....!
>>>>
>>>> I presume that I somehjow, accidently downloaded something or
>>>> visited some web site that caused some program to be placed on my
>>>> PC and it automatically runs.
>>>> PLEASE, Someone tell me how I can get rid of these happenings....!
>>>> Carl Ward
>>>>