Tech Talk Discuss PC Hardware, Software, Internet and Other Technology

In Desperate Need Of Help!

Old 05-30-03, 06:50 AM
  #1  
DVD Talk Hero
Thread Starter
 
Join Date: May 2001
Posts: 36,850
In Desperate Need Of Help!

I keep getting these extremely annoying pop up ads (the grand majority of these being of a pornographic nature) from http://www.win250dollar.com whenever I access any site on the internet (even hotmail). In fact, all I need to do is log on to the internet and I am greeted by one of these annoying ads. I don't know exactly how they got into my computer but I do believe it all started when I tried to download a file from Kazaa that turnedout to be one of those annoying porn dialers that instal automatically and refuse to be uninstalled. I've dealt with them before and just did what I normally did (find anywhere related files and folders were and delete them) but this one gave me particular trouble since onefile always claimed to be in use and Windows refused to delete it. So I changed it from an .exe file to a .txt file and was then able to delete it once I restarted Windows. That seemed to do the trick for a while but now the pop up ads are back and refuse to go away. I've tried everything from removing the cookies from my temporary internet files regularly to scouring every directory in my computer (even the hidden ones) one by one to no avail. Yesterday I attempted to access the web page responsible for these ads in order to find some sort of e-mail adress where I could express my grievances. Unfortunately the page only offers random ads whenever you connect to it and nothing more. Upon attempting to access an index of some sort I was taken to an error page of the site that claims that http://www.zeus.com/ is their service provider. I wrote to the webmaster of http://www.zeus.com/ but they claim they have nothing to do with http://www.win250dollar.com whatsoever.

Anybody know what else I can do. It's an annoying pain in the butt. Any help would really be appreciated.

Last edited by RocShemp; 05-30-03 at 06:52 AM.
RocShemp is offline  
Old 05-30-03, 07:02 AM
  #2  
Needs to contact an admin about multiple accounts
 
Join Date: Dec 2000
Posts: 1,392
use regedit and see what is getting startup at bootup.

hklm\software\microsoft\windows\curentversion\run
IC_Freeze is offline  
Old 05-30-03, 07:43 AM
  #3  
DVD Talk Hero
Thread Starter
 
Join Date: May 2001
Posts: 36,850
Now what do I do?
RocShemp is offline  
Old 05-30-03, 07:47 AM
  #4  
DVD Talk Legend
 
AGuyNamedMike's Avatar
 
Join Date: Jul 2000
Location: (formerly known as Inglenook Hampendick) Fairbanks, Alaska!
Posts: 15,136
Do what IC_Freeze suggested. Also, get both Ad-Aware and Spybot and update and run them both frequently. Finally, are you using a personal firewall and some antivirus software? You should be. See links below:

http://www.lavasoft.de/ - Ad-aware

http://www.security.kolla.de/ -Spybot

http://www.zonelabs.com/store/content/home.jsp - ZoneAlarm Personal Firewall

http://www.mcafee.com/ -Antivirus, including a link for a free scan
AGuyNamedMike is offline  
Old 05-30-03, 08:04 AM
  #5  
DVD Talk Legend
 
Join Date: Feb 2001
Posts: 14,812
Wow, you seem to have gone through a lot of trouble to get rid of those pop-ups. All you had to do was try the spyware removers that AGuyNamedMike recommended - I use SpyBot and Ad-Aware on a regular basis. Of course, surfing the web nowadays always certainly requires an up-to-date virus scanner and software firewall as well (don't rely on the Windows XP "built-in" firewall).
criptik28 is offline  
Old 05-30-03, 08:10 AM
  #6  
DVD Talk Hero
Thread Starter
 
Join Date: May 2001
Posts: 36,850
I have Norton Antivirus.

The following things appear when I do what IC_Freeze toldme to do:

"C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
"C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
RunDll32 cmicnfg.cpl,CMICtrlWnd
C:\WINDOWS\hpfsched.exe
C:\WINDOWS\htpatch.exe
C:\Program Files\ISTsvc\istsvc.exe
C:\WINDOWS\system32\NeroCheck.exe
pctspk.exe
"C:\Program Files\QuickTime\qttask.exe" -atboottime
"C:\Program Files\rb32\rb32.exe"
C:\WINDOWS\SiSUSBrg.exe

What am I looking for?
RocShemp is offline  
Old 05-30-03, 08:21 AM
  #7  
DVD Talk Hero
Thread Starter
 
Join Date: May 2001
Posts: 36,850
Oh and thank you guys. I really appreciate this.
RocShemp is offline  
Old 05-30-03, 10:15 AM
  #8  
DVD Talk Hero
Thread Starter
 
Join Date: May 2001
Posts: 36,850
Damn! After all that one just popped just now! I was just about to tell you guys that it all worked out A-OK just to see another one of those damned pop ups appear just this very moment!
RocShemp is offline  
Old 05-30-03, 10:43 AM
  #9  
DVD Talk Gold Edition
 
Join Date: Mar 2002
Location: Chattanooga, TN
Posts: 2,010
Did you run the ad aware program?
YellowLedbetter is offline  
Old 05-30-03, 10:47 AM
  #10  
DVD Talk Hero
Thread Starter
 
Join Date: May 2001
Posts: 36,850
Yup. And am currently running it again since I just updated it. Seems now it found 17 new objects. It's not done yet but since they're listed in red. Odd that last timeitonly found two after I used Spybot (updated that too).
RocShemp is offline  
Old 05-30-03, 11:33 AM
  #11  
DVD Talk Special Edition
 
Join Date: Sep 1999
Location: Great White North. Take Off Eh! You hosers ....
Posts: 1,455
Yeah, make sure you update the spybot. I find it to work very well. Make sure that you are scanning for *everything* in the options menu just in case you accidently changed the settings to be discriminatory.

I would also run something like Norton Utilities Windoctor to help clean up your OS and definitely a popup program of which I would recommend heartily Meaya's PopUp Ad Filter.
bill_n_opus is offline  
Old 05-30-03, 01:39 PM
  #12  
Needs to contact an admin about multiple accounts
 
Join Date: Dec 2000
Posts: 1,392
looks like the main culprit might be rb32.exe: http://www.winpatrol.com/stats.html

Rapid Blaster RB32.exe Spyware which maintains a connection to porn sites. Check your IE Trusted certificates.


you can kill/delete qttask.exe,

see here: http://www.annoyances.org/exec/forum/winxp/t1024335532


ccapp.exe and ccregvfy are norton av files....up to you if you want to keep them up.


hpfsched.exe: http://www.answersthatwork.com/Taskl...tasklist_h.htm

HPFSCHED.EXE is a background task which is installed by the drivers of some HP DeskJet printers (e.g. 660C, 670C, 680C, 690C, 720C). Its sole purpose is to remind you from time to time to clean the cartridges in your DeskJet so as to keep the print quality high. Most end-users find these popups extremely irritating and in that respect Epson have found a better compromise by implementing the cleaning of cartridges as an automatic hardware feature which kicks in at specific intervals of usage, as well as being something you can start manually.

Recommendation :
Disable or delete with Startup Manager.



htpatch.exe:
HTpatch.exe is part of the SiS AGP patch - BUT unless your processor (and motherboard) supports HyperThreading (HT) and this feature is enabled it will actually SLOW your graphics card by around 6%


istvc.exe:
ISTBar foistware
not sure what that is...


nerocheck:
Background Task installed by Nero’s CD Burning software. Straight from Ahead software : "The NeroCheck program looks for known driver conflicts with our Nero software. So that when a Nero Log file is printed, at the very bottom of the Nero log file you will find a list of drivers we have found on your system that could be causing conflicts, if you are running into problems.".

Recommendation :
If Nero is working on your system then you do not need NeroCheck to run. Disable it with Starter unless you experience problems with Nero, in which case re-enable NeroCheck to see what the log file reports.








Originally posted by RocShemp
I have Norton Antivirus.

The following things appear when I do what IC_Freeze toldme to do:

"C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
"C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
RunDll32 cmicnfg.cpl,CMICtrlWnd
C:\WINDOWS\hpfsched.exe
C:\WINDOWS\htpatch.exe
C:\Program Files\ISTsvc\istsvc.exe
C:\WINDOWS\system32\NeroCheck.exe
pctspk.exe
"C:\Program Files\QuickTime\qttask.exe" -atboottime
"C:\Program Files\rb32\rb32.exe"
C:\WINDOWS\SiSUSBrg.exe

What am I looking for?
IC_Freeze is offline  
Old 05-30-03, 02:39 PM
  #13  
Banned
 
Join Date: Feb 2003
Posts: 119
i've had a similar problem with pop-ups even with the spyware and ad-aware things runing and updated. then i got norton firewall 2003 which had an option to refuse ads i think it was or something to that effect during set-up... i removed spybot and ad-aware and only have norton firewall, and have not gotten even 1 single pop-up in two months now.
SpinDizzy is offline  
Old 05-30-03, 06:51 PM
  #14  
DVD Talk Legend
 
JimRochester's Avatar
 
Join Date: Sep 1999
Location: Rochester, NY. USA
Posts: 17,995
I use Popup Blocker from Earthlink. Works great.
JimRochester is offline  
Old 05-30-03, 09:57 PM
  #15  
DVD Talk Legend
 
Join Date: Sep 2000
Location: Banging your mother
Posts: 18,386
http://www.security.kolla.de/

Another vote for Spybot. The perfect solution. And free too.
joltaddict is offline  
Old 05-31-03, 05:36 AM
  #16  
DVD Talk Legend
 
Join Date: Feb 2001
Posts: 14,812
Mozilla has a feature where you can disable all pop-ups. Nice.
criptik28 is offline  
Old 05-31-03, 10:57 AM
  #17  
DVD Talk Hero
Thread Starter
 
Join Date: May 2001
Posts: 36,850
Well after updating Adware and Spybot and running them both again,it seems my troubles are over. I still bookmarked the pages you sent me to in case anything new should arise and I'm strapped for cash so the purchase of a firewall will have to wait. Thanks guys. I really appretiate the time you took to help me out.
RocShemp is offline  
Old 05-31-03, 12:57 PM
  #18  
DVD Talk Legend
 
gcribbs's Avatar
 
Join Date: Aug 1999
Location: Sacramento,Ca,USA member #2634
Posts: 11,963
zonealarm firewall is free

http://download.com.com/3000-2092-10...ml?tag=lst-0-1
gcribbs is offline  
Old 05-31-03, 05:36 PM
  #19  
DVD Talk Legend
 
Join Date: Feb 2001
Posts: 14,812
Originally posted by RocShemp
Well after updating Adware and Spybot and running them both again,it seems my troubles are over. I still bookmarked the pages you sent me to in case anything new should arise and I'm strapped for cash so the purchase of a firewall will have to wait. Thanks guys. I really appretiate the time you took to help me out.
Remember to run them AT LEAST once a week (more if you're always downloading from KaZaA), and update them before you scan.
criptik28 is offline  
Old 05-31-03, 06:01 PM
  #20  
DVD Talk Legend
 
Join Date: Apr 2001
Location: Mt. Olympus
Posts: 11,812
You may also want to run a pop-up stopper.

http://www.panicware.com/product_psfree.html

immortal_zeus is offline  
Old 06-04-03, 12:58 AM
  #21  
DVD Talk Hero
Thread Starter
 
Join Date: May 2001
Posts: 36,850
Originally posted by IC_Freeze
htpatch.exe:
HTpatch.exe is part of the SiS AGP patch - BUT unless your processor (and motherboard) supports HyperThreading (HT) and this feature is enabled it will actually SLOW your graphics card by around 6%
So how do I verify whether or not my processor and motherboard support HyperThreading? And what is HyperThreading?
RocShemp is offline  
Old 06-04-03, 07:01 AM
  #22  
DVD Talk Legend
 
AGuyNamedMike's Avatar
 
Join Date: Jul 2000
Location: (formerly known as Inglenook Hampendick) Fairbanks, Alaska!
Posts: 15,136
Hyperthreading is a feature of the Pentium4 3GHz (and newer) processors. It is a technology by which different subprocessing areas of the chip are allowed to be active simultaneously. Do you know what processor you have?
AGuyNamedMike is offline  
Old 06-04-03, 07:11 AM
  #23  
DVD Talk Hero
Thread Starter
 
Join Date: May 2001
Posts: 36,850
I have a 1.02 GHz AMD Duron Processor.
RocShemp is offline  
Old 06-09-03, 11:08 AM
  #24  
DVD Talk Hero
Thread Starter
 
Join Date: May 2001
Posts: 36,850
So should I disable the HTpatch.exe or not? If so, how do I go about safely disabling it?
RocShemp is offline  
Old 06-10-03, 09:12 AM
  #25  
DVD Talk Legend
 
AGuyNamedMike's Avatar
 
Join Date: Jul 2000
Location: (formerly known as Inglenook Hampendick) Fairbanks, Alaska!
Posts: 15,136
Do what IC_Freeze said, go into Regedit where you found the entry "C:\WINDOWS\htpatch.exe", highlight it in the right panel, and delete it. Reboot and it should no longer load. Easy, but be careful not to poke around in there deleting or changing stuff unless you know what you're doing.
AGuyNamedMike is offline  

Thread Tools
Search this Thread

Archive Advertising Cookie Policy Privacy Statement Terms of Service

Copyright © 2018 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.