web popup virus?

Article View: alt.comp.virus

Article #382

#382

From: Hiroko
Date: Mon, 10 Dec 2001 22:09

9 lines
1331 bytes

I seem to have a virus that pops open web sites at random times.

It spawns a IE session with only ... as the identifier, then it opens and
ad.
It has some intelligence since it wont open more than 3 ads at a time and
sometimes will resize the window of my current app so I can't ignore the ad.

How do I trace it down and kill it?
It's not through my service provider.

Technical Details

Message-ID: <9v3bqo$m0h$1@bob.news.rcn.net>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!feed2.news.rcn.net!feed1.news.rcn.net!rcn!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fcd68,6cc82d2705e4587d,start
X-Google-Attributes: gidfcd68,public
X-Google-Thread: 10e835,6cc82d2705e4587d,start
X-Google-Attributes: gid10e835,public
X-Google-ArrivalTime: 2001-12-10 14:10:01 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!feed2.news.rcn.net!feed1.news.rcn.net!rcn!not-for-mail
From: "Hiroko" <jnapier@spam@21stcentury.net>
Newsgroups: alt.comp.virus,chi.general
Subject: web popup virus?
Date: Mon, 10 Dec 2001 16:09:28 -0600
Lines: 11
Message-ID: <9v3bqo$m0h$1@bob.news.rcn.net>
X-Trace: UmFuZG9tSVYKuOBMJ3bVsMqlff8QJVSUPH9JOp79WzV8wrp8KCr7Uc8180YzVPjn
X-Complaints-To: abuse@rcn.com
NNTP-Posting-Date: 10 Dec 2001 22:09:28 GMT
X-MimeOLE:  Produced By Microsoft MimeOLE V6.00.2600.0000
X-Priority:  3
X-Newsreader:  Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority:  Normal