new pop-up on my computer

[Guest Molly in AL]

Today I suddenly have a new "pop-up" appearing on my computer when I turn it

on, and it keeps reappearing no matter how many times I cancel it. It's

asking me for a login and password, and I have no idea where it came from or

what it is. It says it will take me to a website 67.228.53.115 and also has

the url eagle-card.com on the pop-up. If I try to just enter that url in my

browser, it won't go there because a password, etc. is required. Yesterday I

updated and ran Ad-Aware by Lavasoft for the first time in a long time. I

don't know if that has anything to do with it. But I was already sick of the

regular pop-ups that appear when I first boot up, now I have a new one with

no idea where it came from. Any help would be appreciated!

 

Molly

[Guest Twayne]

Re: new pop-up on my computer

 

> Today I suddenly have a new "pop-up" appearing on my computer when I

> turn it on, and it keeps reappearing no matter how many times I

> cancel it. It's asking me for a login and password, and I have no

> idea where it came from or what it is. It says it will take me to a

> website 67.228.53.115 and also has the url eagle-card.com on the

> pop-up. If I try to just enter that url in my browser, it won't go

> there because a password, etc. is required. Yesterday I updated and

> ran Ad-Aware by Lavasoft for the first time in a long time. I don't

> know if that has anything to do with it. But I was already sick of

> the regular pop-ups that appear when I first boot up, now I have a

> new one with no idea where it came from. Any help would be

> appreciated!

>

> Molly

 

Well, that IP belongs to softlayer.com, NOT eagle-card.com. Ar first

glance softlayer.com appear to be a hosting service but further

inspecitions says they might be pretty dirty.

Eagle.com now, does look spammy and seems to be for a golf business

of some kind. They have credit cards, clubs, all kinds of spammy

sounding things and I wouldn't touch them with a ten foor pole.

 

So, unless you know exactly WHO/WHAT they are, don't go near them and

especially don't try to sign in with any of your usernames and

passwords!

I'll be honest with you, they look OK despite the info below, but

then again if you've never heard of them and this just started

happening, then maybe there is something to it that's malicious. Are

you certain it has nothing to do with your own ISP? What page should IE

open to? e.g. what did you set it to open to?

 

I spent about ten minutes researching their records and don't see

anything wrong with softlayer but eagle.com is pretty crummy looking

IMO. . That doesn't mean that they haven't been hacked however, or

that by clicking one of their links that you will actually go to them;

you could easily be redirected somewhere else you shouldn't be and/or no

telling what they'd try to push to you in the way of malware if you

signed into their sites. So don't.

 

Try changing your Home Page to a site you like that loads quickly and

see if the problem comes back. It probably won't. If it does, you

would then add it to the Unstrusted sites list in IE.

 

 

Visit:

http://www.dslreports.com/forum/r20558307-httpwwwsoftlayercom

for the only negative thing I found on softlayer. eaglecard just looks

so dirty I didn't even bother to research it.

 

HTH

[Guest Molly in AL]

Re: new pop-up on my computer

 

My homepage for IE is at Yahoo, has been for years. That's the page that

first comes up when I open IE.

 

I have no idea what softlayer.com is or eagle-card.com is. I've never

signed up for a login or password at either site. I ran my AdAware again,

and it found some more cookies, etc., which I deleted. I'm hoping that gets

rid of the pop-up, but you never know, I guess. Any other suggestions???

 

"Twayne" wrote:

>

> Well, that IP belongs to softlayer.com, NOT eagle-card.com. Ar first

> glance softlayer.com appear to be a hosting service but further

> inspecitions says they might be pretty dirty.

> Eagle.com now, does look spammy and seems to be for a golf business

> of some kind. They have credit cards, clubs, all kinds of spammy

> sounding things and I wouldn't touch them with a ten foor pole.

>

> So, unless you know exactly WHO/WHAT they are, don't go near them and

> especially don't try to sign in with any of your usernames and

> passwords!

> I'll be honest with you, they look OK despite the info below, but

> then again if you've never heard of them and this just started

> happening, then maybe there is something to it that's malicious. Are

> you certain it has nothing to do with your own ISP? What page should IE

> open to? e.g. what did you set it to open to?

>

> I spent about ten minutes researching their records and don't see

> anything wrong with softlayer but eagle.com is pretty crummy looking

> IMO. . That doesn't mean that they haven't been hacked however, or

> that by clicking one of their links that you will actually go to them;

> you could easily be redirected somewhere else you shouldn't be and/or no

> telling what they'd try to push to you in the way of malware if you

> signed into their sites. So don't.

>

> Try changing your Home Page to a site you like that loads quickly and

> see if the problem comes back. It probably won't. If it does, you

> would then add it to the Unstrusted sites list in IE.

>

>

> Visit:

> http://www.dslreports.com/forum/r20558307-httpwwwsoftlayercom

> for the only negative thing I found on softlayer. eaglecard just looks

> so dirty I didn't even bother to research it.

>

> HTH

>

>

>

>

>

[Guest PA Bear [MS MVP]]

Re: new pop-up on my computer

 

Unexplained computer behavior may be caused by deceptive software

http://support.microsoft.com/kb/827315

 

Run a /thorough/ check for hijackware, including posting your hijackthis log

to an appropriate forum.

 

Checking for/Help with Hijackware

http://aumha.org/a/parasite.htm

http://aumha.org/a/quickfix.htm

http://aumha.net/viewtopic.php?t=5878

http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction

http://mvps.org/winhelp2002/unwanted.htm

http://inetexplorer.mvps.org/data/prevention.htm

http://inetexplorer.mvps.org/tshoot.html

http://www.mvps.org/sramesh2k/Malware_Defence.htm

http://defendingyourmachine2.blogspot.com/

http://www.elephantboycomputers.com/page2.html#Removing_Malware

 

When all else fails, HijackThis v2.0.2

(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in

conjuction with some other utilities). HijackThis will NOT fix anything on

its own, but it will help you to both identify and remove any

hijackware/spyware with assistance from an expert. **Post your log to

http://aumha.net/viewforum.php?f=30,

http://forums.spybot.info/forumdisplay.php?f=22,

http://castlecops.com/forum67.html, or other appropriate forums for review

by an expert in such matters, not here.**

 

If the procedures look too complex - and there is no shame in admitting this

isn't your cup of tea - take the machine to a local, reputable and

independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.

 

--

~Robear Dyer (PA Bear)

MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002

AumHa VSOP & Admin http://aumha.net

DTS-L http://dts-l.net/

 

Molly in AL wrote:

> Today I suddenly have a new "pop-up" appearing on my computer when I turn

> it

> on, and it keeps reappearing no matter how many times I cancel it. It's

> asking me for a login and password, and I have no idea where it came from

> or

> what it is. It says it will take me to a website 67.228.53.115 and also

> has the url eagle-card.com on the pop-up. If I try to just enter that url

> in my browser, it won't go there because a password, etc. is required.

> Yesterday I updated and ran Ad-Aware by Lavasoft for the first time in a

> long time. I don't know if that has anything to do with it. But I was

> already sick of the regular pop-ups that appear when I first boot up, now

> I

> have a new one with no idea where it came from. Any help would be

> appreciated!

>

> Molly

[Guest Kelly]

Re: new pop-up on my computer

 

Start by running HijackThis:

http://majorgeeks.com/download3155.html

 

--

 

All the Best,

Kelly (MS-MVP/DTS&XP)

 

Taskbar Repair Tool Plus!

http://www.kellys-korner-xp.com/taskbarplus!.htm

 

SupportSpace

http://www.supportspace.com/pages?aiu=kellyskorner

 

"Molly in AL" <Molly in AL@discussions.microsoft.com> wrote in message

news:7C5FBF57-7407-454C-8ABC-B30190E69717@microsoft.com...

> Today I suddenly have a new "pop-up" appearing on my computer when I turn

> it

> on, and it keeps reappearing no matter how many times I cancel it. It's

> asking me for a login and password, and I have no idea where it came from

> or

> what it is. It says it will take me to a website 67.228.53.115 and also

> has

> the url eagle-card.com on the pop-up. If I try to just enter that url in

> my

> browser, it won't go there because a password, etc. is required.

> Yesterday I

> updated and ran Ad-Aware by Lavasoft for the first time in a long time. I

> don't know if that has anything to do with it. But I was already sick of

> the

> regular pop-ups that appear when I first boot up, now I have a new one

> with

> no idea where it came from. Any help would be appreciated!

>

> Molly

>

[Guest Twayne]

Re: new pop-up on my computer

 

> My homepage for IE is at Yahoo, has been for years. That's the page

> that first comes up when I open IE.

>

> I have no idea what softlayer.com is or eagle-card.com is. I've never

> signed up for a login or password at either site. I ran my AdAware

> again, and it found some more cookies, etc., which I deleted. I'm

> hoping that gets rid of the pop-up, but you never know, I guess. Any

> other suggestions???

 

Both Pa Bear and Kelly's advice are good ones. You should only have one

antivirus program, but Adaware is not enough to kill off the many other

forms of malware that you could have. You do of course, update your AV

and Adaware before you run them, right? If not, you're wasting your

time with them.

One good antivirus program is all you need but Adaware alone is

nowhere near enough to keep the rest of the malware at bay. You should

have an arsenal of 3 of 4 good ones. IMO adding Spyware Search &

Destroy, Windows Defender and Spyware Guard are OK ones. There are

quite a few others, too.

 

Start with Pa Bear's advice. If that's no help, then go the HijackThis

route advised by Kelly. For HijackThis to be most effective, you need

to have done everything you can first to eliminate a lot of things, so

that's why Pa Bear's advice is reasonable to try first.

 

Best of luck,

 

Twayne

 

>

> "Twayne" wrote:

>

>>

>> Well, that IP belongs to softlayer.com, NOT eagle-card.com. Ar first

>> glance softlayer.com appear to be a hosting service but further

>> inspecitions says they might be pretty dirty.

>> Eagle.com now, does look spammy and seems to be for a golf

>> business of some kind. They have credit cards, clubs, all kinds of

>> spammy sounding things and I wouldn't touch them with a ten foor

>> pole.

>>

>> So, unless you know exactly WHO/WHAT they are, don't go near them

>> and especially don't try to sign in with any of your usernames and

>> passwords!

>> I'll be honest with you, they look OK despite the info below, but

>> then again if you've never heard of them and this just started

>> happening, then maybe there is something to it that's malicious. Are

>> you certain it has nothing to do with your own ISP? What page

>> should IE open to? e.g. what did you set it to open to?

>>

>> I spent about ten minutes researching their records and don't see

>> anything wrong with softlayer but eagle.com is pretty crummy looking

>> IMO. . That doesn't mean that they haven't been hacked however, or

>> that by clicking one of their links that you will actually go to

>> them; you could easily be redirected somewhere else you shouldn't be

>> and/or no telling what they'd try to push to you in the way of

>> malware if you signed into their sites. So don't.

>>

>> Try changing your Home Page to a site you like that loads quickly and

>> see if the problem comes back. It probably won't. If it does, you

>> would then add it to the Unstrusted sites list in IE.

>>

>>

>> Visit:

>> http://www.dslreports.com/forum/r20558307-httpwwwsoftlayercom

>> for the only negative thing I found on softlayer. eaglecard just

>> looks so dirty I didn't even bother to research it.

>>

>> HTH

[Guest Kelly]

Re: new pop-up on my computer

 

Very well stated, Twayne. None of them work alone! As of late it takes at

least five ot them. :o(

 

--

 

All the Best,

Kelly (MS-MVP/DTS&XP)

 

Taskbar Repair Tool Plus!

http://www.kellys-korner-xp.com/taskbarplus!.htm

 

SupportSpace

http://www.supportspace.com/pages?aiu=kellyskorner

 

"Twayne" <nobody@devnull.spamcop.net> wrote in message

news:%23rPfzFKCJHA.1892@TK2MSFTNGP04.phx.gbl...

>> My homepage for IE is at Yahoo, has been for years. That's the page

>> that first comes up when I open IE.

>>

>> I have no idea what softlayer.com is or eagle-card.com is. I've never

>> signed up for a login or password at either site. I ran my AdAware

>> again, and it found some more cookies, etc., which I deleted. I'm

>> hoping that gets rid of the pop-up, but you never know, I guess. Any

>> other suggestions???

>

> Both Pa Bear and Kelly's advice are good ones. You should only have one

> antivirus program, but Adaware is not enough to kill off the many other

> forms of malware that you could have. You do of course, update your AV

> and Adaware before you run them, right? If not, you're wasting your time

> with them.

> One good antivirus program is all you need but Adaware alone is nowhere

> near enough to keep the rest of the malware at bay. You should have an

> arsenal of 3 of 4 good ones. IMO adding Spyware Search & Destroy, Windows

> Defender and Spyware Guard are OK ones. There are quite a few others,

> too.

>

> Start with Pa Bear's advice. If that's no help, then go the HijackThis

> route advised by Kelly. For HijackThis to be most effective, you need to

> have done everything you can first to eliminate a lot of things, so that's

> why Pa Bear's advice is reasonable to try first.

>

> Best of luck,

>

> Twayne

>

>

>>

>> "Twayne" wrote:

>>

>>>

>>> Well, that IP belongs to softlayer.com, NOT eagle-card.com. Ar first

>>> glance softlayer.com appear to be a hosting service but further

>>> inspecitions says they might be pretty dirty.

>>> Eagle.com now, does look spammy and seems to be for a golf

>>> business of some kind. They have credit cards, clubs, all kinds of

>>> spammy sounding things and I wouldn't touch them with a ten foor

>>> pole.

>>>

>>> So, unless you know exactly WHO/WHAT they are, don't go near them

>>> and especially don't try to sign in with any of your usernames and

>>> passwords!

>>> I'll be honest with you, they look OK despite the info below, but

>>> then again if you've never heard of them and this just started

>>> happening, then maybe there is something to it that's malicious. Are

>>> you certain it has nothing to do with your own ISP? What page

>>> should IE open to? e.g. what did you set it to open to?

>>>

>>> I spent about ten minutes researching their records and don't see

>>> anything wrong with softlayer but eagle.com is pretty crummy looking

>>> IMO. . That doesn't mean that they haven't been hacked however, or

>>> that by clicking one of their links that you will actually go to

>>> them; you could easily be redirected somewhere else you shouldn't be

>>> and/or no telling what they'd try to push to you in the way of

>>> malware if you signed into their sites. So don't.

>>>

>>> Try changing your Home Page to a site you like that loads quickly and

>>> see if the problem comes back. It probably won't. If it does, you

>>> would then add it to the Unstrusted sites list in IE.

>>>

>>>

>>> Visit:

>>> http://www.dslreports.com/forum/r20558307-httpwwwsoftlayercom

>>> for the only negative thing I found on softlayer. eaglecard just

>>> looks so dirty I didn't even bother to research it.

>>>

>>> HTH

>

>

>