Download the eval version of PestPatrol and scan the systems on your network. It will find the culprit. http://www.pestpatrol.com/ Ed Sullivan IT Director esullivan@xxxxxxx <mailto:esullivan@xxxxxxx> KMA Direct Communications Confidential and Proprietary -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Thursday, May 29, 2003 9:59 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Off topic - But important http://www.ISAserver.org John's right. Google neither supports, nor installs any adware or popup ads. If you think you're getting popups, then you need to reexamine the apps installed on your computer. One of the most notorious is "HotBar", which masquerades as a "neat-o browser plugin", while also installing adware and spyware. Take a look at http://www.lavasoftusa.com/ for one of my favorite "get the jerks out of my computer" tools. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://www.microsoft.com/isaserver http://isaserver.org/Jim_Harrison http://isatools.org Read the help, books and articles! ----- Original Message ----- From: "Rami SIK" <rami@xxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Thursday, May 29, 2003 07:02 Subject: [isalist] RE: Off topic - But important http://www.ISAserver.org Believe or not, I have seen *machines* on which that open pop-up screens when connecting to google. I said *machines* because my machine does not open such pop-up. However, on two of my colleague machines, this happens time to time. You can also search google groups for "spyware google" , you can see how many people have questions about google in mind. -------------------------------------------------------------------- Rami SIK System & Network Administrator CCNA Kimyatas Istanbul / Turkey Tel:90-212-334 4963 -------------------------------------------------------------------- -----Original Message----- From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] Sent: Thursday, May 29, 2003 4:45 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Off topic - But important http://www.ISAserver.org Be extremely careful of accusations. I highly doubt they are from the google.com site. Google does not allow popup ads. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com -----Original Message----- From: Rami SIK [mailto:rami@xxxxxxxxxxxxxxx] Sent: Thursday, May 29, 2003 6:41 AM To: [ISAserver.org Discussion List] Subject: [isalist] Off topic - But important http://www.ISAserver.org We have seen some spyware programs and/or trojan viruses coming from google search site via pop-up ad screens. So far, I have detected 3 files; syslog.exe, OWMng.exe and tpss.exe. Please check your task manager to see anyone of these running. If so, then check your registry, and use netstat command to check which of these listening on what port? I strongly suspect that these come from google search site, if correct what does google try to? Any idea? -------------------------------------------------------------------- Rami SIK System & Network Administrator CCNA Kimyatas Istanbul / Turkey Tel:90-212-334 4963 -------------------------------------------------------------------- ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: johnlist@xxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: rami@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: esullivan@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')