New banner ads on this site?

**Chris** · 10-06-2004, 17:09

Hi all, I'm sat in Glasgow with my mother-in-law's misbehaving PC. Brother-in-law installed Kazaa last week and the machine has been a disaster ever since (unwanted websites loading up, you get the idea).

I have spent some time today trying to undo the damage, and just when I thought I had fixed it, I come here to relax and find some strange adverts now on the site.

So, can someone tell me if the attached advert is familiar to them, or is the banner being hijacked by some persistent piece of adware junk? I am also seeing ads for spam-free email accounts, 'turn your TV into a home theater' and other stuff priced in US dollars.

**Mick** · 10-06-2004, 17:14

I would say adware towny, we have not introduced any new advertisements on this site of any such nature which you have described.

ian@huth · 10-06-2004, 17:15

Never seen that ad, looks like it's being generated by some adware program.

The ads on here don't seem to change much, the Sky ad still saying installation ÃƒÆ’Ã†â€™ÃƒÂ¢Ã¢â€šÂ¬Ã…Â¡ÃƒÆ’Ã¢â‚¬Å¡Ãƒâ€šÃ‚Â£1 when it is actually free if you look at the Sky website.

**Chris** · 10-06-2004, 17:24

Quote:

Originally Posted by Mick

I would say adware towny, we have not introduced any new advertisements on this site of any such nature which you have described.

Pants. I worried that that might be the case. I already ran Spybot S&D today and thought the system was now clean.

Could you do me a favour and move this to an appropriate forum area then, as this is clearly not a Cable Forum issue ... hope someone might be able to offer further help. Will Adaware pick up stuff that S S&D has missed?

iadom · 10-06-2004, 17:30

Quote:

Originally Posted by towny

Pants. I worried that that might be the case. I already ran Spybot S&D today and thought the system was now clean.

Could you do me a favour and move this to an appropriate forum area then, as this is clearly not a Cable Forum issue ... hope someone might be able to offer further help. Will Adaware pick up stuff that S S&D has missed?

Quick answer is yes, I use both together with paid for Pest Patrol and sometimes things get past one to be found by the other. Also running "hijackthis" and pasting the results could help to identify the source.

http://www.spychecker.com/program/hijackthis.html

10-06-2004, 17:31

Quote:

Originally Posted by towny

Pants. I worried that that might be the case. I already ran Spybot S&D today and thought the system was now clean.

Could you do me a favour and move this to an appropriate forum area then, as this is clearly not a Cable Forum issue ... hope someone might be able to offer further help. Will Adaware pick up stuff that S S&D has missed?

in my experience spybot & adaware complement each other, spybot will pick up most stuff, but adaware is updated more often, so is likely to find 'newer' exploits. I tend to run them both.

**Chris** · 10-06-2004, 17:42

Quote:

Originally Posted by homealone

in my experience spybot & adaware complement each other, spybot will pick up most stuff, but adaware is updated more often, so is likely to find 'newer' exploits. I tend to run them both.

Just d/led and ran adaware - found 246 items (including five premium-rate diallers!!!) Just as well mother-in-law has broadband.

Ads appear to be back to normal ... thanks everyone

10-06-2004, 18:10

Quote:

Originally Posted by towny

Just d/led and ran adaware - found 246 items (including five premium-rate diallers!!!) Just as well mother-in-law has broadband.

Ads appear to be back to normal ... thanks everyone

blimey, I once 'found' over 300 on my wife's pc, but that was when she hadn't run any kind of malware detector - glad you got it sorted, though, towny

MadGamer · 10-06-2004, 18:47

Also Spywareblaster is useful because it stops spyware from being installed. You can download it from here

**Chris** · 10-06-2004, 18:54

Quote:

Originally Posted by WNA

Also Spywareblaster is useful because it stops spyware from being installed. You can download it from here

Thanks wayne, I'll look into that too.

OK everyone, I restarted the PC after running adaware, and when starting up IE again, an unwanted pop-up ad appeared. I ran adaware again, and there was more stuff! So I ran Hijackthis, and here's the logfile. Is anyone here expert enough to tell me what (if anything) in this log shouldn't be there?

**Chris** · 11-06-2004, 13:10

/bump

Are there any Hijackthis experts around then? Any help much appreciated...

therock247uk · 11-06-2004, 13:33

Post the log ive had experiance on helping people with them on forums.spywareinfo.com

danielf · 11-06-2004, 13:35

Quote:

Originally Posted by therock247uk

Post the log ive had experiance on helping people with them on forums.spywareinfo.com

It's in post number 10 (attached as a zip file)

Paul · 11-06-2004, 13:42

O16 - DPF: {5F426A93-0821-47D2-A126-5A48A874B289} (DialerWeb Class) - http://212.145.159.194/251065/dialer...ecomendada.cab this line does not look good

Paul · 11-06-2004, 13:45

and
http://www.2-spyware.com/file-dslagent-exe.html
seems to think dslagent.exe might be spyware??