Annoying Popup in Internet Explorer

Anchundan

Anchundan

Anchundan

Associate
Joined
26 Feb 2004
Posts
971
Location
China (Qinhuangdao)
I can't seem to get rid of this annoying popup. I have reinstalled Windows XP and Windows 7 recently, and I'm still getting these popups :


AnnoyingPopup01.jpg


The link to the popup above is : http://www.huagujie.com/coop/hblt/hgj1.gif


AnnoyingPopup02.jpg


Some of them play media, such as music or videos. They pop up on completely innocent websites, but not every time. They are all in Chinese, whether this is because I'm based in China or some Chinese software is causing this, I don't know.

I'm really not sure how I should go about fixing this? Do people still use HijackThis?

I'd be grateful for some tips, I'm finding it really annoying!!
 
You have reinstalled your o/s and this is still happening?? That is very strange indeed. Are you installing any dodgy software on your system perhaps that would explain why it's happening even after a clean install? Failing all else I would download Malware bytes, update it, disable system restore, boot into safe mode and run a full scan which should sort your issue.
 
Well, just normal professional software. The only possibly dodgy Chinese things I have installed are QQ International (QQ is like the Chinese version of MSN) and Google PinYin IME (like a keyboard to write Chinese). And Rising Anti-Virus.

I also have some other freeware software installed, but have used those for years with no problems.

I'll try the Malware Bytes software.
 
Can't say I've run into this exact problem before; but try out Spybot - Search and Destroy... always a good one to run.
 
Last edited:
It hasn't worked. Last night I restarted in safe mode, started a full scan with MalwareBytes, and it eventually found 25 infected files across my entire system. Only one on my Win7 drive. I cleaned all 25 files, but the problem remains.


AnnoyingPopup03.jpg


After about 2 or 3 minutes, the popup disappeared.
AnnoyingPopup04.jpg




The file it found on my C drive last night was the following :

C:\Program Files (x86)\Tencent\QQIntl\Bin\TXOPShow.exe (Trojan.Backdoor)

I have found something else running called TXPlatform.exe which is also something to do with QQ, but hasn't been identified as malware.
 
Most likely QQ or similiar as the link above - but it could also be a dodgy chinese ISP thats modifying the HTML code on web pages to inject its own advertising stream.
 
I'm actually suspecting the latter at the moment. I realised that my XP installation doesn't have QQ installed, but does suffer from these popups.

I wonder if they are also logging the sites I visit.
 
This is what happens when you use a Windows firewall!

Ok rant over.

I had a similar pop up that would appear as soon as I'd connect to the internet.

The solution I found was by disconnecting my system from the net THEN reinstalling windows and a third party firewall (like ZoneAlarm) and only connecting to the net AFTER the third party firewall was installed.

IMO if you've just reinstalled your OS then it's better to reinstall again, instead of installing malware programs to try to disinfect the system.
 
Last edited:
You must log in or register to reply here.
Back
Top Bottom