Tech Support Forum - View Single Post

fragmentsofruin · 05-30-2005, 01:08 PM

Hi--

I don't really use IE much anymore (in favor of Firefox/Mozilla), but I still get IE popups when IE is closed. It's usually when I'm entering data into a webpage while using Mozilla, but it has happened when I'm using email programs (Eudora), instant messaging, or any program really. Sometimes there are popups to generally benign ad sites, but sometimes there is no popup but the program you're using goes gray, as if you've switched to another program. The latter is the more prevalent case.
Thanks in advance . . .

This is the "new" log I got after using HijackThis Analyzer . . .
====================================================================
Log was analyzed using KRC HijackThis Analyzer - Updated on 4/1/05
Get updates at http://www.greyknight17.com/download.htm#programs

***Security Programs Detected***

C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Logfile of HijackThis v1.99.1
Scan saved at 1:44:56 PM, on 5/30/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\Documents and Settings\Gregory Jones\Start Menu\Programs\Lavasoft Ad-aware 6\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.pittsburghpenguins.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.pittsburghpenguins.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost;
O4 - HKLM\..\Run: [jsk] C:\WINDOWS\System32\jsk.exe
O4 - HKCU\..\Run: [diskcopy] C:\WINDOWS\System32\diskcopy.exe
O15 - Trusted Zone: http://www.neededware.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1117041955328
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe

End of KRC HijackThis Analyzer Log.
====================================================================

05-30-2005, 01:08 PM	#1 (permalink)
fragmentsofruin Registered User Join Date: May 2005 Posts: 14 OS: WinXP	Random IE popups Hi-- I don't really use IE much anymore (in favor of Firefox/Mozilla), but I still get IE popups when IE is closed. It's usually when I'm entering data into a webpage while using Mozilla, but it has happened when I'm using email programs (Eudora), instant messaging, or any program really. Sometimes there are popups to generally benign ad sites, but sometimes there is no popup but the program you're using goes gray, as if you've switched to another program. The latter is the more prevalent case. Thanks in advance . . . This is the "new" log I got after using HijackThis Analyzer . . . ==================================================================== Log was analyzed using KRC HijackThis Analyzer - Updated on 4/1/05 Get updates at http://www.greyknight17.com/download.htm#programs *Security Programs Detected* C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Logfile of HijackThis v1.99.1 Scan saved at 1:44:56 PM, on 5/30/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\Documents and Settings\Gregory Jones\Start Menu\Programs\Lavasoft Ad-aware 6\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.pittsburghpenguins.com/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.pittsburghpenguins.com/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost; O4 - HKLM\..\Run: [jsk] C:\WINDOWS\System32\jsk.exe O4 - HKCU\..\Run: [diskcopy] C:\WINDOWS\System32\diskcopy.exe O15 - Trusted Zone: http://www.neededware.com O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1117041955328 O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe End of KRC HijackThis Analyzer Log. ====================================================================