Printable View
when browsing, my IE now has green hypertext links embeded in plain text...
these links are directing to http://209.200.10.92/cgi-bin/ezlckl.fcgi?id=480 (or others like 896,200,213)...
i've used my spyware cleaners and norton antivirus... but it won't clean this up...
i have no idea where this is coming from...
also i've been getting popups from this address http://209.200.10.90
i would love to have some help with this...
jamie
First off, i strongly sugust to stop using ie and switch to firefox (less security flaws for now). Next the more information you provide the easier it will be for others to help; operating system, and so on. Ok to the problem first make sure your uptodate with all the microsoft patches. Next if running Windows xp (just assuming this) turn off system restore, and boot up in safe mode (if not sure on how to do this do a quick search). Next run your scans again, i suggust using both spyware and adware (both free). If that doesn't work i used a program about a year ago called hijackthis, google this or ask for help on how to use it. Basically what it will do is log your running process, which you then past onto there websit or i think people even here will look at it for you. Like i said google it and read up for a better explanation. Hope this helps.
A quick google gave me this site for hijackthis http://www.tomcoyote.org/hjt/
<sarcasm> hey jamicach- post in a couple other forums areas, ok ? in case we miss the first ones. </sarcasm>
ok, enough of that. you know some sites do this automaticaly. It is their way of fitting more advertising into less space.
thanks...
1st off, i have to use IE for work purposes...
all my updates are updated according to windowsupdate (using windows xp)
and i just ran the hijackthis program and got this log file...
see attached txt file
1st off, i have to use IE for work purposes...
all my updates are updated according to windowsupdate (using windows xp)
and i just ran the hijackthis program and got this log file...
see attached txt file
i'm not planning on using firefox....
i just wanna know why i'm getting these stranges links and popups from this IP...
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\PROGRA~1\AWS\WEATHE~1\Weather.exe (HKCU)
O15 - Trusted Zone: *.alpineaccess.com
O15 - Trusted Zone: https://*.webconference.com
O15 - Trusted Zone: http://www.workathomeagent.net
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www1.alpineaccess.com/alpine/login.jsp
C:\PROGRA~1\AWS\WEATHE~1\Weather.exe
take a look at those to begin wiht.
hmmm....
i like weatherbug! anyway, i've been using that a long time before this happened...
and alpineaccess and workathomeagent.net are my business links
Some people like autoerotic asphyxiation, too. That doesn't mean it's good for them.Quote:
Originally posted here by jamicach
hmmm....
i like weatherbug! anyway, i've been using that a long time before this happened...
and alpineaccess and workathomeagent.net are my business links
You asked for info, albeit in a poor netiquette fashion, and recieved some. Don't like the answer? Oh well.
You don't have spyware. It looks like someone is bringing back the
idea of smart tags
I thought that bad publicity had killed this evil idea years ago.
Lately I've been seeing these links too. They're not in the page content
but get inserted by the browser, when javascript is enabled.
I think there's a way to disable it. I'm researching it now.
If you Google "green hyperlinks", you'll see that it's being reported
by lots of people.
:cool:
OK! Late breaking news. Here it is.
http://www.vibrantmedia.com/site/web_01a5.html
I guess it looks like people with servers opt in to this service, and it then adds
the mystery links to the page.
1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/...ch/search.html
Try getting rid of this or atleast disable it and see if there is any difference.
It is almost definatley a spyware/adware problem, try using different spyware removal pograms - try spybot if you havent already.
Threads merged, title changed to reflect topic.
I would check out the following
O2 - BHO: ohb - {8037F7F0-80B6-453A-A7CB-5371A4A09BB8} - C:\WINDOWS\system32\nsk16.dll
O4 - HKCU\..\Run: [Closed Service Drivers] kiotper.exe
O4 - HKCU\..\RunServices: [Closed Service Drivers] kiotper.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
Not to say this is your problem, but I personally haven't seen those items before. Googling kiotper.exe gives you nothing which leads me to think it might be something company based.