Pop-up Help...

[Jason1977]

I have been seeing an alarming trend here at the office...
I see a lot of pop-ups. Users call our helpd desk and complain that they get their home pages changed and tons of pop-ups. no matter what Web sites they visit. And Its true i can go on to www.yellowpages.com and get porn pop-ups on the inffected machines. they even get them when simply on the intranet.
I have been able to remove some mannualy by editing the registry.
some just keep coming back.
Is there a more efficient way to dela with this issue? any sugegstions? what shoudl i be looking for in the registry? where else should i look?
Thanks, J

[AlaynaX]

download and run these programs....

http://www.softpedia.com/public/cat/...10-17-69.shtml
http://www.lavasoftusa.com/software/adaware/
http://www.pcworld.com/downloads/fil...d,22262,00.asp
http://www.softpedia.com/public/cat/...0-17-150.shtml

you should be fine after that....also downooad the google toolbar "great for blocking usual pop-ups"

http://toolbar.google.com

[AngelicKnight]

1) Download, install, update, and run Spybot Search & Destroy and Lavasoft Adaware
2) Donwload a popup blocker. I suggest FreeSurfer which you can find at www.snapfiles.com
3) Consider a more secure browser, such as Mozilla as opposed to Internet Explorer
4) Go to www.grc.com and use "Shoot the Messenger" to shutdown your Windows Messenging service (or do it yourself through services in the administrative section of your control panel)

[SwordFish_13]

Hi

Pop-Ups really are a nuicence. I use Mozilla FireFox It has a inbuilt Pop-up Blocker. For Internet Explorer you can use Yahoo Tool bar which has a Popup Blcker.

For Adware realted Nuicence you might use AD-Aware and Spybot . And For HomePage Hyjack Kind of hijacks CWShredder is a small but effective utility.

Hope that helps

--Good Luck--

Edit

Hey you guys are fast You beat me. Sorry your Posts were not there when i started mine

And as mentioned by groovicus . these tools might not work sometime with new infections then www.google.com is also a very effective tool against new varients that these tools might not touch , Google for the Hijack and you might find a specilized removal tool or procedure someone else might have used. Hey and HijakThis might be useful too here

[groovicus]

I would just like to point out that CWS does not remove all variants, so making the assumption that "you should be fine" is a little broad, IMHO.

The NewDotCom hijack is untouched by the tools you have listed, as are the l2m, and the Pepper Trojan, all of which require special attention. Not to mention HackerDefender, of which there is no removal tool..

[AngelicKnight]

EMS FreeSurfer also has a feature to protect you from future browser hijacks.

[Soda_Popinsky]

I reccommend ad aware, spybot, and cws shredder if you are doing this alone. If those don't work, post a log from hijack this, from the merjin website.

UPDATE WINDOWS!!!

IE: Use the google toolbar for pop up blocking. I trust google
Firefox has it embedded, you can enable it in the options.

[Jason1977]

I forgot to mention this is for 500 users...

[AngelicKnight]

They landed you a position as Network Security Coordinator over 500 people without training you in this first? Dang, and I thought I had it rough! Well, you've come to the right place to learn.

I'd suggest trying out the software yourself. Probably disregard Firefox and other browsers since you don't want the hassle of walking every single user you talk to through it, so you want to focus on Internet Explorer security tools. That said, check out the suggested software, and if you think that's what you need, then that's what you suggest to your users when they call with these problems.

[!mitationRust]

Configure your browser, you can stop "POP UP's" without 3rd party software If you would like.
Open --> IE--> Tools--> Internet Options--> Security--> Custom Level--> Disable Active Scripting--> OK