Member Avatar for actfray

For several weeks I have been inundated with a constant flow of windows popping up called 69sexsearch.com. Unlike most occassional pop-ups, this one will completely take over my screen, opening as many as 40 windows in an instant. Despite closing them out immediately, they will open again at an even faster rate. They even open multiple times when my computer is in standby mode.

I have Norton antivirus, Ad-aware, Spybot, and Spyware Blaster all up and running and updated. Yet I can't seem to eliminate this one particular invasive site from infiltrating my screen. It's not a program, so I can't actually uninstall it.

Thanks for any help!


Windows XP
Pavillion a300n
2.6 ghz
256 ram

  • 4 Contributors
  • 5 Replies
  • 291 Views
  • 21 Hours Discussion Span
  • Latest Post Latest Post by caperjack

Dani AI

Generated

The behaviour described by — dozens of simultaneous windows for 69sexsearch.com that re-open even after being closed (and showing up after standby) — usually means something on the machine is launching that URL automatically rather than a single removable program. Since standard scanners were already run, the next steps are targeted, manual diagnostics focused on the things scanners often miss.

Checklist of focused checks (back up first):

  • Inspect every browser shortcut (Desktop, Quick Launch, Start Menu). Right‑click → Properties → Target: remove any URL appended after the .exe path.
  • Review startup launch points: msconfig’s Startup tab is a quick view; Sysinternals Autoruns shows Run keys, Services, Scheduled Tasks, BHOs and toolbars. Look for unfamiliar filenames or command lines that contain the domain.
  • Check Scheduled Tasks (Control Panel → Scheduled Tasks) for jobs that open a browser or script. Standby/resume popups are often triggered by scheduled tasks or "wake" timers.
  • Examine Internet Explorer add‑ons / BHOs and toolbars and disable unknown items. Also open the hosts file (C:\Windows\system32\drivers\etc\hosts) to ensure there are no suspicious redirects.
  • Inspect Run registry keys (HKCU/HKLM\Software\Microsoft\Windows\CurrentVersion\Run) and Services for entries that reference an unknown exe or the domain. Always export a registry backup before making changes.

A HijackThis log remains the most precise diagnostic for helpers: look for O2 (BHOs), O4 (Run) and R1/R3 (homepage/URL) lines that reference the offending domain or unfamiliar DLLs/EXEs — this is what responders such as will use to pinpoint the culprit. Manual removal typically consists of disabling the offending startup/task/BHO, deleting the associated file from Safe Mode, then rebooting and making a clean restore point. Editing registry or deleting system files can break the PC; back up the registry and create a restore point before changes.

Recommended Answers

All 5 Replies

Member Avatar for helloimtim

spybot search and destroy. Downloads.com. Its free

Member Avatar for caperjack

This problem could occur because of Spyware , go on over to the Security section of this fourm and post you problem along with a hijackthis log .
Spyware & Trojans and Other Nasties
,,,,,,,,,,,,,,,,,,,,,,,,
Please Don't post the hijackthis log in this section Thanks .
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
,,,,,,,,,,,,,,,,,
Goand Get Trojan-Hunter Fully working trial!
,,,,,,,,,,,,,,,,,,,,,

Please delete your temporary files by deleting all files and folders that are in those folders (do not delete the temp folder itself) like for example
C:\WINDOWS\Temp\
C:\Temp\
C:\Documents and Settings\username\Local Settings\Temp\
Also delete your , be sure to also select delete all offline content.

Do a virus scan here.
If you get report of files that can’t be cleaned / deleted please write down the filenames and locations and post that in your reply.
,,,,,,,,,,,,,,,,,,,,,,,,,,
Download then unzip and run CWShredder to clean up clicking "FIX" to have it remove all it finds.

CWShredder available from these places :-


http://www.aluriasoftware.com/tools/cwshredder.zip
Or this as a full download without any unzipping required

We have found that some of the CWS infections can be removed better from safe mode, rather than normal mode.
To get to safe mode use the F8 key while booting the machine. Detailed instructions from :-

,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Then please do this since it’s better to use automated tools to get rid of the bad stuff use these 2 programs first before doing the final cleaning with HJT

First use Spybot S&D. (Version 1.3)
Spybot
Unzip, and update. Install the updates and run. Delete all that it marks in red.
Reboot

Then it’s time for Ad-Aware

Install and update by using the globe icon. Restart your computer and run Ad-Aware.
Press scan now and select drives and/or partitions to be scanned. When done select all and click next. Remove all checked items and then reboot your computer.

Please go to this page and read the instructions for how to configure Spybot S&D & Ad-Aware
How To Setup Spybot SD and Ad-Aware


Please do this.
Download 'Hijack This!'. http://www.spywareinfo.com/~merijn/files/HijackThis.exe
Save it in a convenient permanent folder such as C:\HJT\, double click HijackThis.exe, and hit "Scan".

Your copy of HijackThis needs to be in a folder of it's own. When HJT fixes anything, it makes backups of the original files in the folder it is in. Since Temporary folders are emptied now and then (the files are DELETED), it would not be a good idea to have your backups there. Those backups would be VITAL to restoring your system if something went wrong in the FIX process!


1. Please go to you're 'My Documents' folder, right-click and select 'New > Folder' then name the folder 'HJT'.

2. Copy and paste HijackThis.exe to the new folder.

3. Close ALL windows except HJT

4. SCAN with HJT

5. POST the new log in this thread using 'Add Reply'

DO NOT MAKE ANY CHANGES OR CLICK "FIX CHECKED" UNTIL WE CHECK THE LOG, AS SOME OF THE FILES ARE LEGIT AND VITAL TO YOUR COMPUTER'S HEALTH


Then post a HJT log as a reply to this topic.

Member Avatar for actfray

Thanks for the suggestions, folks, but if you read my original post, you'll see that I have run all those programs - Spybot, Ad-aware, etc. - but they have not gotten rid of that window. However, I will try some of the other suggestions too.

Member Avatar for dlh6213

Caperjack, your link to "How To Setup Spybot SD and Ad-Aware" doesn't work (not for me anyway).

Member Avatar for caperjack

Caperjack, your link to "How To Setup Spybot SD and Ad-Aware" doesn't work (not for me anyway).

Thanks ,will fix it ,with this link !

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.