Strange Password prompts when browsing

Howdy all,

I am running a Win2kPro box with all updates and patches. Just recently i upgraded from Netscape 7.0 to 7.1 and i get these strange password prompts when going to sites like www.msn.com and sometimes yahoo and sites like that, but i also get it here at AO. I know i keep some password in password manager in Netscape but i have never used it for the sites its asking me user names and passwords for. Any ideas on how to stop these pop-up from what looks like ADVERTISING sites, i dont want to disable password manager all together. It also happened all of sudden when i was using the latest version of I.E. with all the updates(I want to stop it on I.E.). I have taken a screen shot of what im talking about so you guys have a better idea. Any help or suggestions that i could use to stop these annoying password prompts. I also run SPYBOT and AdAWARE on a regular basis.

:rolleyes:

hi Condoor, your zip file seems to be courpt, i`ve tried downloading it twice and both times its been courpt. Cause without seeing what you mean its hard to say what it is.

homenet: the zip works for me.. contains a DOC with two Pics..

I have seen these before.. once.. try checking for (half erased) spyware (with lavasoft's add-aware or spybot s&d)

Hi,

I am sorry to say this, but you have almost certainly been invaded. Get the latest SpyBot S&D and AdAware, and boot in safe mode before running them......that stops a lot of malware stealth & countermeasures. :)


Now, try SwatIT 2.1 from http://www.swatit.org

And look at http://www.spywareinfo.com/~merijn/index.html there is a tool that looks for the CoolWeb scumware specifically...might help?

Good luck..........report back if this does not work

Cheers,

Johnno

yea its worked for me now, strange i tried twice earlier and it said the zip file was courpted.
Pity i havn`t got round to install word yet!

Thanks Guys for the replys i will try them, and then update tonight when i get home from work!

man that is Adware for sure

hi all we should be hack the americans sites
thank for all
the balck hacker president arab hackers organization

Quote:

---

Originally posted here by fire_hacker
hi all we should be hack the americans sites
thank for all
the balck hacker president arab hackers organization

---

WTF! What kind of dumbass idiot post is that? :mad:

edited to censor profanity!

first post after 14 months.impressive. must be learning big time here. good luck to you.
and from all of us %$^%^^$(*&+@#

Go play with chemicals & fire and then suicide bomb yourself, ya dumb ****er.

Quote:

---

Originally posted here by fire_hacker
hi all we should be hack the americans sites
thank for all
the balck hacker president arab hackers organization

---

This is a joke right? Why would anyone bother... your so lame that I bet Flint, Arnold, or even Gray Coleman would make a better president than you... And whats the point? There has already been countless Anti-Arab/China/U.S./France/Russia/UK defacements & kiddie wars. Gee... your "group" if it exists then it must really suck if you feel the need to spam all of this here.

Hey Guys...No luck i ran Aaware & Spybot in Safe mode rebooted then tryed Swatit and it took about 25 minutes to run and it found nothing. CoolWeb found nothing... ANything else i could try?

Arab hackers? lol, Ad-Aware always worked well for me. Try this: http://www.enigmasoftwaregroup.com/jump5.shtml It's SpyHunter. See if it helps. Also you can go to http://www.f-prot.com and download their anti-virus.

Hi Condoor,

I think your problem is with "third party cookies". If you are running IE 6 go to theInternet Options and clear your cookies, files and history.......that should zap them.

Also, go to BillP Studios' site which should be http://www.winpatrol.com and get WinPatrol, there is a free one for private use. It has a good cookie manager. You do need them for sites such as AO, but those are "first party cookies" not adscum garbage.

WinPatrol has a number of other useful features, including letting you look at what is running, and what is in your startup folder. That might be a good thing to do at this moment in time?

Please post or PM me if you still have problems, but I am about 99% certain there are cookies behind this one

Cheers,

Johnno

Hey Guys...


Same problem i have deleted temporary internet files deleted OFFLINE content and cookies to in I.E. I did the same for netscape and Winpatrol doesnt show any cookies. :(

Just a simple little pop up window killer go to http://www.google.com install their tool bar will stop the pop ups. Also check your services and turn off Messaging (switch to manual) lots of annoying Ads now are using MS Messaging.

I see from your screen shots that you have MSN messenger running in the background. Do you have it on all the time? Do you still have the messenger service enabled? And have you tried killing all unnecessary processes under task manager and then surfing to these sites to see if it still asks for passwords? First I would turn MSN messenger off and try to see if it will let you in without the passwords. You could also try uninstalling netscape since that is when your troubles started...or use the go-back function from windows.

Good luck.

1>Messenger Service is Disabled
2>I tryed it without MSN Messanger running
3>Here are the Processes

SMSS.exe
CSRSS.exe
WINLOGON.exe
SERVICES.exe
LSASS.exe
IEXPLORER.exe
svchost.exe
Mcshield.exe
Avsynmgr.exe
Ctsvccda.exe
svchost.exe
PERSFW.exe
WinPatrol.exe
VSStat.exe
TASKMGR.exe
stisvc.exe
WinMgmt.exe
Vshwin32.exe
RuLaunch.exe
svchost.exe
Avconsol.exe
WebScanX.exe
explorer.exe
atiptaxx.exe
AlogServ.exe
wuauclt.exe


:confused:

Hi condoor,

I have had time to give it a bit more thought. As you get the problem with both Netscape and IE, they are probably using the same file in windows to get it from.

This would have to be in the "hosts" file which is usually in your Windows directory. If you search for this and edit it (notepad) I think you will find a reference to mjxads.internet.com.

Delete this, and you should be OK

I will get a Win2K box running and reply to your PM when I have checked anything else I can think of.

Here are a couple of related links:

http://bbforum.virtualave.net/ubb/Fo...ML/000069.html
http://arrrr.com/hosts

I think that you may be "hosting" a parasite? :)

Cheers

Try looking at :

http://www.dslreports.com/forum/rema...ty,1~mode=flat

http://www.dslreports.com/forum/rema...ty,1~mode=flat and then http://www.sophos.com/virusinfo/analyses/trojcultb.html

May not be relevant though.

Just browsing round on this I read a post where someone thought spybot was messing with their system & adware was reporting at spyware - Anyone heard anything about this?

Hi Steve,

I think I know what you mean. If you run SpyBot first and it finds something and quarantines it, AdAware will report it (it is in a SpyBot file) and accuse SpyBot of being ad/spyware! :D

It is harmless, just use both systems' options to delete quarantined or saved items.

Cheers

Quote:

---

Originally posted here by nihil
Hi Steve,

I think I know what you mean. If you run SpyBot first and it finds something and quarantines it, AdAware will report it (it is in a SpyBot file) and accuse SpyBot of being ad/spyware! :D

It is harmless, just use both systems' options to delete quarantined or saved items.

Cheers

---

Thanks mate.

Not had the problem, just spotted someone alse complaining about it.

Steve