Regedit install caused pop ups to appear, etc. - Tilted Forum Project Discussion Community

choskins · 06-29-2004, 07:08 PM

So I download this autofix:
http://features.engadget.com/entry/3239236478279892/

I read about it in "The Cure" thread. It was supposed to stop CD autorun, so you could rip new CDs. Since I did it, I am getting pop ups on every site, including this one. I have Norton Antivirus 2004 on auto protect; I have Pop Up Stopper; I have Search and Destroy. Before tonight, my computer never showed "at risk" files. After downloading this fix, Norton pulled 17 "at risk" files, Search and Destroy pulled 10, and I am getting pop ups out the ass with Pop Up stopper on.

Can someone tell me how to restore my registration files and undo the damage I have done? Thanks.

phukraut · 06-29-2004, 08:13 PM

well whatever happened, it doesn't look like the registry file is the cause. this is the content of the file:

REGEDIT4

[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CdRom]
"Autorun"="0"

---
some questions: what browser did you use to download the file? did you change your browser settings right before or after getting the file? what sites did you surf on before or after that page? did you do a fullscan for spyware recently before changing your registry?

choskins · 06-30-2004, 08:46 AM

That's good to know.

what browser did you use to download the file? Explorer
did you change your browser settings right before or after getting the file? No
what sites did you surf on before or after that page? This one
did you do a fullscan for spyware recently before changing your registry? No.

I reinstalled Pop Up stopper and Spybot. I went through and cleaned up most of the adware. I will keep my eye on it and do frequent scans for now. Thanks.

phukraut · 06-30-2004, 11:13 AM

some possibilities which are sort of unlikely but all i can think of is that there was a banner or something that did a driveby install, but if your IE settings are set high enough you'd be warned, so that's probably not it. the other possibility could be that you had some adware 'sleeping' on your system or something that woke at the coincidental moment you were surfing around there. another possibility is that you had adware on your system that was blocked from action or broken from bad programming but got an 'automatic update', but if you're running a firewall then that's also pretty unlikely.

hope you figure it out. i know it would drive me nuts finding the cause.

06-29-2004, 07:08 PM	#1 (permalink)
choskins Psycho Location: Greenville, SC	Regedit install caused pop ups to appear, etc. So I download this autofix: http://features.engadget.com/entry/3239236478279892/ I read about it in "The Cure" thread. It was supposed to stop CD autorun, so you could rip new CDs. Since I did it, I am getting pop ups on every site, including this one. I have Norton Antivirus 2004 on auto protect; I have Pop Up Stopper; I have Search and Destroy. Before tonight, my computer never showed "at risk" files. After downloading this fix, Norton pulled 17 "at risk" files, Search and Destroy pulled 10, and I am getting pop ups out the ass with Pop Up stopper on. Can someone tell me how to restore my registration files and undo the damage I have done? Thanks. __________________ "Sometimes a cigar is just a cigar." - Sigmund Freud

06-30-2004, 08:46 AM	#3 (permalink)
choskins Psycho Location: Greenville, SC	That's good to know. what browser did you use to download the file? Explorer did you change your browser settings right before or after getting the file? No what sites did you surf on before or after that page? This one did you do a fullscan for spyware recently before changing your registry? No. I reinstalled Pop Up stopper and Spybot. I went through and cleaned up most of the adware. I will keep my eye on it and do frequent scans for now. Thanks. __________________ "Sometimes a cigar is just a cigar." - Sigmund Freud

06-29-2004, 08:13 PM	#2 (permalink)
phukraut Addict	well whatever happened, it doesn't look like the registry file is the cause. this is the content of the file: REGEDIT4 [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CdRom] "Autorun"="0" --- some questions: what browser did you use to download the file? did you change your browser settings right before or after getting the file? what sites did you surf on before or after that page? did you do a fullscan for spyware recently before changing your registry?

06-30-2004, 11:13 AM	#4 (permalink)
phukraut Addict	some possibilities which are sort of unlikely but all i can think of is that there was a banner or something that did a driveby install, but if your IE settings are set high enough you'd be warned, so that's probably not it. the other possibility could be that you had some adware 'sleeping' on your system or something that woke at the coincidental moment you were surfing around there. another possibility is that you had adware on your system that was blocked from action or broken from bad programming but got an 'automatic update', but if you're running a firewall then that's also pretty unlikely. hope you figure it out. i know it would drive me nuts finding the cause.