Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Problems with POPUPER (Trojan)

  • Please log in to reply
1 reply to this topic

#1 rolandcarr


  • Members
  • 1 posts
  • Local time:12:23 PM

Posted 06 June 2005 - 08:42 AM

Using a Windows 95 PC and AOL 7.0, I am having a problem with a Trojan/Malware named POPUPER.EXE which appears only when online with AOL. It does not appear when using the PC offnet and it is not in the startup programs (I used Autoruns program to check).
The file POPUPER.EXE is in C:\Windows and if I delete it, it reappears back in that location later on.
After starting to use AOL (about 5 mins) the PC freezes and the task manager is full of Popuper tasks. The only fix is a reboot. As I mentioned, a File search shows that it is back in C:\Windows despite being deleted earlier. I can't find any other files/programs that might be associated with this.

Can you help me sort this problem out ?

BC AdBot (Login to Remove)


#2 Pandy



  • Members
  • 9,559 posts
  • Gender:Female
  • Local time:01:23 PM

Posted 06 June 2005 - 09:30 AM

Hello rolandcarr. What you need to do is have an HijackThis log analyzed for your mavhine. HijackThis is a little application that examines startup and running processes. Please read up on HjT here.
HijackThis Tutorial
Once you get familiar with the HjT program, read up on how to submit a HjT log here.

How To Submit A HijackThis Log.

Please keep in mind that the HijackThis team are all volunteers. Please do not post a reply or bump your log. The team looks for logs to work on that have zero replies. If you make a reply before a team member does your topic will show a reply and they will think someone is all ready helping you. It is also important to mention that if you do not know how to use HjT you should never fix anything with it without an experienced team member's guidance.

Do not anticipate trouble, or worry about what may never happen. Keep in the sunlight.

Hide not your talents. They for use were made. What's a sundial in the shade?

~ Benjamin Franklin

I am a Bleeping Computer fan! Are you?


Follow us on Twitter

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users