Fastclick. net

Discussion in 'Windows - Virus and spyware problems' started by cmaldona, Jan 6, 2006.

  1. cmaldona

    cmaldona Regular member

    Joined:
    Dec 26, 2005
    Messages:
    230
    Likes Received:
    0
    Trophy Points:
    26
    Everytime I visit afterdawn.com I get a pop up from http://media.fastcheck.net advertising Registy Cleaner. I am using Ccleaner and Ewido and the ad keeps on poping up after is removed.

    HEEEEEEEEEEELLLLLLLLLLLLLLPPPPPPPPPPPPPPP!
     
  2. rav009

    rav009 Active member

    Joined:
    Nov 14, 2005
    Messages:
    2,204
    Likes Received:
    0
    Trophy Points:
    66
    are you using internet explorer, are they standard pop ups that only appaer while on sites or are they on the desktop etc.
    are you using a pop up blocker?
    have you got any toolbars instaled now after thsi has happend?

    more info please.

     
    Last edited: Jan 6, 2006
  3. cmaldona

    cmaldona Regular member

    Joined:
    Dec 26, 2005
    Messages:
    230
    Likes Received:
    0
    Trophy Points:
    26
    Hello Rav009,

    I am using Firefox most of the time. They keep on coming back everytime I visit afterdown. No, I am using ZoneAlarm, AVG, Ewido and Ccleaner. Do you think I would need more amunition to attack the world of popups?
     
  4. rav009

    rav009 Active member

    Joined:
    Nov 14, 2005
    Messages:
    2,204
    Likes Received:
    0
    Trophy Points:
    66
    ok have you got real time protection for ewdio and do you get pop ups on after dawn when your using firefox because that got a pretty good pop up blocker, maybe you should post a HJT log and let me see whats going on.

     
  5. ozzymary

    ozzymary Guest

    try using spywareblaster it will apear then go away
     
    Last edited by a moderator: Jan 6, 2006
  6. rav009

    rav009 Active member

    Joined:
    Nov 14, 2005
    Messages:
    2,204
    Likes Received:
    0
    Trophy Points:
    66
    HJT log please, i think thats the best bet for know cmaldona.
     
  7. ozzymary

    ozzymary Guest

    try using spywareblaster it will apear then go away
    i wonder why this fast click junk comes up when i go on afterdawn
    is it a partner of the site ????????
    and it dosent matter if you use ie ,netscape or firefox it comes up on all of them . and as i said before firefox downloading is slower than ie even at stock levels
     
  8. cmaldona

    cmaldona Regular member

    Joined:
    Dec 26, 2005
    Messages:
    230
    Likes Received:
    0
    Trophy Points:
    26
    My real time protection on Ewido is on. I am still under the 15 day trial and that gives me the real time protection. What is a HJT log?

     
  9. ozzymary

    ozzymary Guest

    link>>>>>>>>>>>>>http://www.merijn.org/files/hijackthis.zip
    download this run it and save log post it here
     
  10. ozzymary

    ozzymary Guest

  11. cmaldona

    cmaldona Regular member

    Joined:
    Dec 26, 2005
    Messages:
    230
    Likes Received:
    0
    Trophy Points:
    26
    Hello Ozzymary,

    Thank you for the tip. I just hope it does not interfere with my zonealarm or ewido.

    Have a nice weekend.
     
  12. ozzymary

    ozzymary Guest

    your welcome no it wont effect them because i use both of them also . i mean zonealarm and ewido
    ? did you enable protection on ie and other things
    ?? did it work for you
     
    Last edited by a moderator: Jan 6, 2006
  13. rav009

    rav009 Active member

    Joined:
    Nov 14, 2005
    Messages:
    2,204
    Likes Received:
    0
    Trophy Points:
    66
  14. cmaldona

    cmaldona Regular member

    Joined:
    Dec 26, 2005
    Messages:
    230
    Likes Received:
    0
    Trophy Points:
    26
    Okay here is my HJT log for my home computer:

    Logfile of HijackThis v1.99.1
    Scan saved at 10:54:38 PM, on 1/6/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\SYSTEM32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\SYSTEM32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\dvd43\dvd43_tray.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    C:\Program Files\ewido anti-malware\ewidoctrl.exe
    C:\Program Files\ewido anti-malware\ewidoguard.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ewido anti-malware\securitysuite.exe
    C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\WinRAR\WinRAR.exe
    C:\DOCUME~1\Owner\LOCALS~1\Temp\Rar$EX00.547\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://store.gamehouse.com/buybounceout.jsp?AID=13
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [dvd43] C:\Program Files\dvd43\dvd43_tray.exe
    O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
    O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Ahead\NEROPH~1\data\Xtras\mssysmgr.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
    O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

     
  15. cmaldona

    cmaldona Regular member

    Joined:
    Dec 26, 2005
    Messages:
    230
    Likes Received:
    0
    Trophy Points:
    26
    I just got this famous Fastclick. net pop up again.

    Heeeeeeeeeeeeeeelp!
     
  16. ozzymary

    ozzymary Guest

    did you enable protection with spyware blaster???if you do this it will pop up for mil second and go away.
     
  17. cmaldona

    cmaldona Regular member

    Joined:
    Dec 26, 2005
    Messages:
    230
    Likes Received:
    0
    Trophy Points:
    26
    I think everything possible is enabled. BTW, is there an icon that as to be active in the Start Up?
     
  18. ozzymary

    ozzymary Guest

    no it enable protection all the time .it dont stay in start up menu i dont know why it worked for me on both my pcs
     
  19. cmaldona

    cmaldona Regular member

    Joined:
    Dec 26, 2005
    Messages:
    230
    Likes Received:
    0
    Trophy Points:
    26
    Well,I think is working. I have not had any pop ups from these guys today.
     

Share This Page