adultfriendfinder

No3ntry · 2 Dec 2006 at 18:58

I keep getting popups from *** above site.

I dont get them from anywhere else at all and i dont even have to be surfing the net when it happens as far as i can tell they are completely random, which means i havent found the pattern of them yet.

However anyone know how to get rid of this specific pop-up.

Thanks James

trojan698 · 2 Dec 2006 at 19:03

scan for spyware + stop looking at p0rn sites

Richdog · 2 Dec 2006 at 19:06

No3ntry said:
I keep getting popups from *** above site.

I dont get them from anywhere else at all and i dont even have to be surfing the net when it happens as far as i can tell they are completely random, which means i havent found the pattern of them yet.

However anyone know how to get rid of this specific pop-up.

Thanks James

Post a hijackthis log... and stop looking at porn/dodgy stuff.

Cob · 2 Dec 2006 at 19:26

trojan698 said:
...stop looking at p0rn sites

Richdog said:
... and stop looking at porn/dodgy stuff.

Is that possible?

Podfather · 2 Dec 2006 at 19:29

ye it is possible, make your own porn movie lol.

Tony Williams · 2 Dec 2006 at 21:12

Take a few scans with SB S&D, Adaware and HiJackThis.

Maybe use a pop up blocker? Adult Finder are pretty out there when it comes to advertising, I get 'em too.

Heh, stick to the decent porn sites, ones with women.

Jotun · 2 Dec 2006 at 21:15

trojan698 said:
stop looking at p0rn sites

or better yet use firefox

unknowndomain · 2 Dec 2006 at 22:23

or mac

Mikesoft · 2 Dec 2006 at 23:29

or Linux

No3ntry · 3 Dec 2006 at 12:52

well wether or not you choose to believe me I don't know

I don't go on dodgy porn sites and I am the only person that uses my pc (it is locked at all times)

This is why its even more annoying that i get this thing popping up.

Logfile of HijackThis v1.99.1
Scan saved at 12:52:38, on 03/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\taskswitch.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Motherboard Monitor 5\MBM5.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mim.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Globe Software\StatBar\StatBar.exe
C:\Program Files\TGTSoft\StyleXP\StyleXP.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Harmony Remote\harmonyClient.exe
C:\Program Files\UltraMon\UltraMon.exe
C:\Program Files\ed2k link catch0r\ed2k link catch0r.exe
C:\Program Files\UltraMon\UltraMonTaskbar.exe
C:\Program Files\Motherboard Monitor 5\DLL\display.dll
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmjb.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\MMDiag.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_director.exe
C:\PROGRA~1\MUSICM~1\MUSICM~1\MM_TDM~1.EXE
C:\Program Files\eMule\emule.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\unzipped\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = No3ntry 2006
O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:\Program Files\DAP\DAPBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll
O2 - BHO: Windows Genuine Tool - {c815ace8-3dbf-4ffd-8231-ab1d21e8b7ee} - C:\WINDOWS\shginas.dll
O2 - BHO: AddressBar Class - {f65b197f-8260-4d52-909a-f70118e646eb} - C:\WINDOWS\system32\iasada.dll
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\Program Files\DAP\DAPIEBar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [StatBar] C:\Program Files\Globe Software\StatBar\StatBar.exe
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: ed2k link catch0r.lnk = C:\Program Files\ed2k link catch0r\ed2k link catch0r.exe
O4 - Startup: Musicmatch Jukebox.lnk = C:\Program Files\Musicmatch\Musicmatch Jukebox\mmjb.exe
O4 - Global Startup: Logitech Harmony Remote.lnk = C:\Program Files\Logitech\Harmony Remote\harmonyClient.exe
O4 - Global Startup: UltraMon.lnk = C:\Program Files\UltraMon\UltraMon.exe
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP.EXE
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} -
O17 - HKLM\System\CCS\Services\Tcpip\..\{46D34418-4248-48E3-8BC8-DF3BF4EDEE08}: NameServer = 158.152.1.58,158.152.1.43
O17 - HKLM\System\CCS\Services\Tcpip\..\{8FB2902C-7A14-4602-8FCF-7265A673CBEF}: NameServer = 158.152.1.58,158.152.1.43
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

Conrad11 · 3 Dec 2006 at 13:00

I say, just take the hint

modo77 · 3 Dec 2006 at 13:12

you've got a few things rated nasty on that log:

http://hijackthis.de/logfiles/fcebd931529e9953bddc56681bec9c84.html

No3ntry · 3 Dec 2006 at 15:30

Conrad11 said:
I say, just take the hint

lol not really into meeting randoms off the net.

I have deleted some of the ones rated as nasty now and left the ones I think aren't actually nasty.

Richdog · 3 Dec 2006 at 15:40

Remove the following entries:

C:\Program Files\ed2k link catch0r\ed2k link catch0r.exe

O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:\Program Files\DAP\DAPBHO.dll

O2 - BHO: Windows Genuine Tool - {c815ace8-3dbf-4ffd-8231-ab1d21e8b7ee} - C:\WINDOWS\shginas.dll

O2 - BHO: AddressBar Class - {f65b197f-8260-4d52-909a-f70118e646eb} - C:\WINDOWS\system32\iasada.dll

O4 - Startup: ed2k link catch0r.lnk = C:\Program Files\ed2k link catch0r\ed2k link catch0r.exe

O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} -

After you've done this, get rid of AVG and try and get hold of Antivir, it's a lot better http://www.free-av.com/

Or even better, try and get a copy of Kaspersky 6 by hook or by crook...

RikWebb · 5 Dec 2006 at 22:32

And stop looking at porn!!

VeNT · 5 Dec 2006 at 22:36

tbh
spybot S&D, should make it all go away!

Felix Da Housecat · 5 Dec 2006 at 22:36

No3ntry said:
However anyone know how to get rid of this specific pop-up.

Thanks James

Sorry i'll stop sending them now

Yeah stay off the naughty sites

david334 · 5 Dec 2006 at 22:39

stay of them sites man you will go blind

David334

james.miller · 5 Dec 2006 at 22:42

you dont go on porn sites, but you've got emule running. you do know dodgy mp3's and videos can have embedded links in them, right?

a friend of mine had his misses on his case because she found adultfriendfinder links on his pc, linking to a page searching for women in our area. Long story short, it was caused by a video he downloaded off a p2p program. once you get a certain lenght through the video, up the webpage pops, regular as clockwork.

this_is_gav · 5 Dec 2006 at 23:42

james.miller said:
once you get a certain lenght through the video, up the webpage pops, regular as clockwork.

Just the webpage?

Sorry, I'll leave now.....