Page 1 of 3 123 LastLast
Results 1 to 15 of 36
  1. #1
    3 Star Lounger
    Join Date
    Jan 2001
    Location
    Melbourne, Victoria, Australia
    Posts
    314
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Unsolicited Webpopups - the new Spam? (IE5.5)

    For the first time today a windows message box just popped up on my screen, offering me "University Diplomas" of my choice, to be delivered within a few days.
    I was not surfing the web, nor using IE at the time. It just popped up. I have a permanent cable connection to the Internet. I have full Anti-Virus and Firewall software
    operating. How can this be done? I know you can programme IE to bring up such a window when exiting a web page but I was not actually doing this at the time.
    Can they put it on a time delay? The message box is worded to give you the impression it is a message sent directly to you, but it ain't an email!
    See attached file for screenshot.
    Attached Images Attached Images

  2. #2
    Uranium Lounger
    Join Date
    Dec 2000
    Location
    Los Angeles Area, California, USA
    Posts
    7,453
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Unsolicited Webpopups - the new Spam? (IE5.5)

    <hr>Can they put it on a time delay?<hr>
    Yes. In fact, many pop-ups now are on delay so that you are already at a different web site when they pop up. Insidious! You need a pop-up utility to stop these...antivirus & firewalls aren't designed for this purpose. I've seen several people recommend pop-up stopper. I personally use AdSubstract Pro, which you can find at http://www.adsubtract.com/
    Cheers,

  3. #3
    5 Star Lounger ibe98765's Avatar
    Join Date
    Aug 2001
    Location
    Bay Area, California, USA
    Posts
    968
    Thanks
    19
    Thanked 4 Times in 4 Posts

    Re: Unsolicited Webpopups - the new Spam? (IE5.5)

    Yes, I go tthe same thing last evening I don't understand the comment about "time delay". How would that work? What is the driver that makes the pop-up link work when IE is closed? Is there an Active-x or Java applet running in the background? If so, why wasn't that piece of code closed when IE was closed? Something has to be running to cause something else to execute.

    Seems to me that this is could be a very serious security problem.
    Attached Images Attached Images

  4. #4
    3 Star Lounger
    Join Date
    Jan 2001
    Location
    Melbourne, Victoria, Australia
    Posts
    314
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Unsolicited Webpopups - the new Spam? (IE5.5)

    That's exactly what I believe. In my case IE was closed too. Some excecutable of some kind must be left behind.
    What else could they leave behind?

  5. #5
    3 Star Lounger
    Join Date
    Jan 2001
    Location
    Melbourne, Victoria, Australia
    Posts
    314
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Unsolicited Webpopups - the new Spam? (IE5.5)

    Also, I am in Melbourne at GMT +10 HOURS. What time zone are you in? I notice that there is close to seven hours difference exactly between the times
    displayed on the popup. It would be quite a coincidence that we both browsed the same webpage simultaneously wouldn't it?
    I am more in favour of the theory of some sort of internet broadcasting taking place.
    ps I noticed the phone number is different. I actually phoned this number out of curiosity but now I wonder if it is one of those
    numbers that charges you a fortune per minute because the voice at the other end was a very long winded voicemail message with many silly instructions.
    Sort of like they were trying to keep you on the line...if you see what I mean.

  6. #6
    5 Star Lounger ibe98765's Avatar
    Join Date
    Aug 2001
    Location
    Bay Area, California, USA
    Posts
    968
    Thanks
    19
    Thanked 4 Times in 4 Posts

    Re: Unsolicited Webpopups - the new Spam? (IE5.5)

    I am in (GMT-08:00) Pacific Time (US & Canada); The area code on my pop-up (615) is for Tennessee. The 817 on yours is for Ft. Worth, TX.

    Can you broadcast directly to an IP address? Even if you can, what is displaying the info on the screen? Why isn't my firewall (ZA Pro) blocking this?

  7. #7
    3 Star Lounger
    Join Date
    Jan 2001
    Location
    Melbourne, Victoria, Australia
    Posts
    314
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Unsolicited Webpopups - the new Spam? (IE5.5)

    It happened again. This time the phone number is different. I had not been surfing for several hours.
    Also, I activated the anti-popups feature in my Zone Alarm Pro. It made no difference.
    One wonders what else they can do to your computer with whatever scripting they are using.

  8. #8
    Silver Lounger
    Join Date
    Jan 2001
    Location
    Long Beach, California, USA
    Posts
    1,912
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Unsolicited Webpopups - the new Spam? (IE5.5)

    You have some sort of spyware (or adware) running on your computer. Download a prgram called StartupList and paste the entire contents of the text output here for us to look at.

    http://www.lurkhere.com/~nicefiles/

  9. #9
    3 Star Lounger
    Join Date
    Jan 2001
    Location
    Melbourne, Victoria, Australia
    Posts
    314
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Unsolicited Webpopups - the new Spam? (IE5.5)

    That's strange. I have RegRun Security suite installed which is supposed to prevent that kind of thing I thought. Maybe the Spyware is masquerading as something
    else that I have approved in RegRun when the warning came up?
    Anyway, here is the attached list from StartupList...(attached).
    Thanks, I'd be keen to hear what you think.
    Attached Files Attached Files

  10. #10
    Silver Lounger
    Join Date
    Jan 2001
    Location
    Northern, California, USA
    Posts
    1,886
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Unsolicited Webpopups - the new Spam? (IE5.5)

    <post#=187814>post 187814</post#> basically states to me that there doesn't have to be an executeable running in the background. Windows can retain the command in memory all by itself, and spawn the message after any programmed interval. You Could use Filemon to monitor processes on your machine, if you want to verify this, but I would think that Windows is acting all on it's own here, with a slight push from the questionable site in question. <img src=/S/wink.gif border=0 alt=wink width=15 height=15>
    <IMG SRC=http://www.wopr.com/w3tuserpics/Kel_sig.gif>
    Moderator:<font color=448800> Pix Place, Internet Explorer</font color=448800>
    <small>www.kvisions.com

  11. #11
    Silver Lounger
    Join Date
    Jan 2001
    Location
    Long Beach, California, USA
    Posts
    1,912
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Unsolicited Webpopups - the new Spam? (IE5.5)

    Well, your computer is fairly clean. I can make a few recommendations on your list -- but first let's fix your problem.

    I disagree that this is something that Windows can "retain in the memory". I also disagree that this is some delayed Internet Explorer Popup. The title bar clearly shows this is not Internet Explorer -- it says "Messenger Service". However, this is also not something that is due to an executable running on your system. This is a gift from Microsoft. The key is in the title bar -- Messenger Service.

    This is apparently due to a "Service" that Win2K runs -- eh, called Messenger Service. This service is connected to the Internet with an OPEN port and can be seen by running the "netstat -an" command in a cmd Window.

    It appears the message comes via the "RPC endpoint mapper" through port UDP-135 -- which lives in "rpcss.dll". I have to run, but a quick MSKB article on this service is here:
    http://support.microsoft.com/default.aspx?...b;en-us;Q168893

  12. #12
    5 Star Lounger ibe98765's Avatar
    Join Date
    Aug 2001
    Location
    Bay Area, California, USA
    Posts
    968
    Thanks
    19
    Thanked 4 Times in 4 Posts

    Re: Unsolicited Webpopups - the new Spam? (IE5.5)

    Umm, did you guys read my post 187817 above? Did you turn off the MESSENGER SERVICE?????

  13. #13
    3 Star Lounger
    Join Date
    Jan 2001
    Location
    Melbourne, Victoria, Australia
    Posts
    314
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Unsolicited Webpopups - the new Spam? (IE5.5)

    Thanks for that information - it is all VERY interesting...sort of.
    It seems that Microsoft is the biggest perpetrator of spam and internet insecurity.
    I have disabled the messenger service as explained but was wondering if this will disable
    normal system messages?

  14. #14
    3 Star Lounger
    Join Date
    Jan 2001
    Location
    Melbourne, Victoria, Australia
    Posts
    314
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Unsolicited Webpopups - the new Spam? (IE5.5)

    I've turned off the Messenger Service - setting it to 'disabled'.
    Those recommendations about my system would be appreciated if you have the time.
    Thanks

  15. #15
    5 Star Lounger
    Join Date
    Feb 2001
    Location
    Youngstown, Ohio, USA
    Posts
    705
    Thanks
    1
    Thanked 0 Times in 0 Posts

    Re: Unsolicited Webpopups - the new Spam? (IE5.5)

    [Edited by Leif to correct minor error in URL]

    I received a link to this page from TechTV - Spam Takes New Form The messenger service built in to WinNT/2K/XP allows unscrupulous spammers to use the command-line command NET to send a spam message directly to your IP address and have your system deliver the message automatically. I highly recommend reading this article.
    Attached Images Attached Images

Page 1 of 3 123 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •