Did someone else receive a popup window while
visiting here that rewrote their homepage?
Before Yann talks about how it's not his fault,
I am not the least bit interested in that. I
don't care if it's because the site is run
through someone else's server or backbone that
likes to install spyware on people. I'm only
interested in killing the problem permanently.
Once in a while (starting today), I open up this
forum's URL and up pops up a javascript window
which runs an ad for SpyWiper software. It
doesn't happen every time, but refresh the forum
enough times and it shows up.
It doesn't even matter if you I click on the
link inside the javascript window (which is
coded such that you cannot find out the IP or
URL address it's operating from). By
automatically opening, the javascript window
immediately rewrites my homepage to:
default-homepage-network.com
Now I've encountered this attack before and I
took all the steps found in several spyware
forums to perform the necessary fixes. I also
disabled the URL's that this spyware company has
been operating under. However, I cannot track
down what IP/URL this javascript window is
located in.
What that all means is that every time this
stupid window pops up, my homepage gets hijacked
again and I have to do all the spyware clean-ups
once again. Every time I kill it, having that
stupid window spring up on me starts the trouble
all over again.
I just visited some spyware forums because of
this and found out that the company involved
(Mail Wiper Inc. from Georgia) recently obtained
new IP addresses. I've disabled whatever
addresses I've found so far, but that hasn't
prevented this window from showing up and
causing me grief again.
I'm about ready to drop using IE permanently but
since this particular problem ONLY occurs when I
visit the Animanga forum (I've had several
windows open to other sites and those were
unaffected, so I'm pretty sure), I would like to
hear about alternate solutions. Disabling
javascript on Animanga permanently would prevent
me from ever posting but perhaps that may be
something I have to consider.
Suggestions and recommendations welcome. BTW, I
input all grief-causing URL's and IP's into my
maximum security zone on IE plus I run
HijackThis, Spybot, and Norton Internet Security |