Popups Won't Go Away!

[ShadowDaemon777]

I've used AdWare/Spybot, turned off Windows Messenger and deleted all of the registry keys which seemed suspicious to me. I also used CW Shredder and I'm still getting popups offline. Here's a HijackThis log which i ran a few minutes before posting, which I hope will help.

[Agent_Steal]

I thought that this was a little strange " blengine.exe ".

Adware.Buddylinks (http://securityresponse.symantec.com/avcenter/venc/data/adware.buddylinks.html)

Read the above link and I hope that helps you solve your problems.

[ShadowDaemon777]

I checked and I did find one of the buddylinks folders, but not the main folder or the registry key. But i did find another potential suspect, unless it's some codenamed windows thing :D
Suspect: BCMSMMSG.exe

[Soda_Popinsky]

O1 - Hosts: 64.200.25.145 gator.com #cooklop
O1 - Hosts: 64.200.25.145 tripod.com #cooklop
O1 - Hosts: 64.200.25.145 www.tripod.com #cooklop
O1 - Hosts: 64.200.25.145 adultfriendfinder.com #cooklop
O1 - Hosts: 64.200.25.145 www.adultfriendfinder.com #cooklop
O1 - Hosts: 64.200.25.145 cj.com #cooklop
O1 - Hosts: 64.200.25.145 www.cj.com #cooklop
O1 - Hosts: 64.200.25.145 paypopup.com #cooklop
O1 - Hosts: 64.200.25.145 www.paypopup.com #cooklop
O1 - Hosts: 64.200.25.145 trafficmp.com #cooklop
O1 - Hosts: 64.200.25.145 www.trafficmp.com #cooklop

check those out

[Agent_Steal]

BCMSMMSG.exe

Info :

bcmsmmsg - bcmsmmsg.exe - Process Information
Process File: bcmsmmsg or bcmsmmsg.exe
Process Name: BCMSMMSG
Description: Background task used as a BCM voice modem driver and required for dial-up modems.
Company: Broadcom Corporation.
System Process: No
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): No
Common Errors: N/A


Give this site a try :

Spyware Guide (http://www.spywareguide.com/)

- Would you like to guard your PC against malicious ActiveX components?
Check our latest FREE Spyware BlockList File.
-New! Think you are infected with a spyware or adware? Try the free online scanner!


Like Soda_Popinsky suggested you might wanna take a look at that as well.

[allenb1963]

I noticed in the log that hijackthis.exe is residing in your temp internet files...clean'em up and do a cookie dump, then go to www.mozilla.org and get a browser that isn't so damned vulnerable to bullsh*t like this.

[ShadowDaemon777]

Thanks everyone, I think i may have fixed it. But here's another question. What's WildTangent and how do i get rid of it. I've used Adware and Spybot multiple times, but it keeps reinstalling itself somehow. *Sigh* Adware/Spyware is so annoying...

[jenjen]

it's funny (wierd funny) as I think wildtangent should show up in your hijackthis log and I see no reference to it.. after you've fixed what others have suggested, rerun hijackthis and post a new log.. or go over to spywareinfo's forum and post a log there as they are a bit better at deciphering what should be deleted..

good luck..


edit: AFAIK, wildtangent will make it's own directory on your hard drive. do a search of the drive and a search of the registry

[knightstmplr1]

ShadowDaemon777 WildTangent and how do i get rid of it. wild tangent is a grouping of games some online some off line as i believe ...spybot 1.2 reports this as spyware/adware...usually found in windows millenium edition ....to get rid of ...click start...settings ...control panel....add/remove programs....then scan down till you see wild tangent ...click on wild tangent ...then click add/remove button to eliminate it completely from your system....hope this helps you ....knightstmplr1@msn.com

[ZeroOne]

Some Winamp plugins are made by WildTangent... If I recall correctly, it even installs an icon to your Control Panel and tries to contact the internet every once in a while. I recommend you to install a firewall so that you can detect those "internal extrusions" as well as external intrusions.

[knightstmplr1]

Originally posted here (http://www.AntiOnline.com/showthread.php?threadid=255163#post724572) by knightstmplr1
ShadowDaemon777 WildTangent and how do i get rid of it. wild tangent is a grouping of games some online some off line as i believe ...spybot 1.2 reports this as spyware/adware...usually found in windows millenium edition ....to get rid of ...click start...settings ...control panel....add/remove programs....then scan down till you see wild tangent ...click on wild tangent ...then click add/remove button to eliminate it completely from your system....hope this helps you ....knightstmplr1@msn.com

[knightstmplr1]

i forgot to ask if your usuing an hp computer with bundled software which in mine did include the wild tangent gameing formats ....my computer is a hp pavillion 9795c running windows me ....if your not into gaming etc please by all means follow the instructions to delete wild tangent as did i ....if you wish to keep those games ...than install a good firewall such as zone alarm which you can get as a freebie from cnet.com ....or if your usuing verizson dsl with the westell 2200 modem/router ....just call verizon to get their instructions on how to access their site to configure their device to be used as a hardware firewall which ive found to be extrememly effective after testing their device on pcpitstop.com...feel free to email me if more info is neccessary ....robb ....knightstmplr1@msn.com

[InfoStranger]

I agree with all the others. To fight this. First place a Firewall on your computer. Sorry, I don't agree with Zone Alarm. It is not flexible enough to know what is good for you and what is not. For a more flexible Firewall, download Sygate Personal Firewall. If you install it, you do not need to do anything to have good service. To have great service, you can customize it for your own needs and only allow whom you want in or out of your computer. Also, great to battle the Crackers.

After you do that, uninstall all software that you do not like. If it is not possible, terminate or block with the firewall. This also works great with some pesky pop-ups.

This firewall is also great with networks because you can specify ports, IP ranges, MAC addresses, and more. Like the saying goes. Kill two birds with one stone. Instead, Kill as many birds as you can with one FIREwall. We are going to have bird jerky tonight.

Don't forget to get rid of that pesky Gator.com program. It's annoying.

[Soda_Popinsky]

Wildtangent is bundled with the new version of AIM.

[TidaLphasE23]

:) I definately agree with InfoStranger with the Sygate firewall. I use it along with
Ad-aware6, Spybot Search and Destroy and Norton 2004 internet pro. They all seem
to work well together and i never get any pop-ups whatsoever. Most important is to
keep them all up-to date with the latest definitions and scan your computer often.
For a computer newby like myself, i like the ease of use and confidence these programs
provide. Hope this helps..... cheers TidaLphasE23

[pooh sun tzu]

Sorry, I don't agree with Zone Alarm. It is not flexible enough to know what is good for you and what is not. For a more flexible Firewall, download Sygate Personal Firewall.

What is good and what is not?

1. It automatically blocks ALL ports by default
2. Anything that wants to access the net pops up and asks for your opinion
3. Configuration of that choice is kept
4. Finetune ruleset is offered, based on program name, port, protocol, ip, host etc etc. that you decide and can add or delete at any time
5. Finetuned hostcontrol is offered, that you can add or delete at any time.

How on earth did you get that Zonealarm is making the choices when every single part of it's configuration and use requires your input, choice, and opinions? On a lesser note, the firewall should never make choices for you, as you should be the one knowing what is going in and out, what is allowed and denied. Much better responcibility control that way because you understand what is going on.

This isn't a "my firewall is better than yours" argument. But don't say Zonealarm acts a certain way when in reality, it acts completely different.