Xupiter Trojan Horse on this site.

[Dis]

Thanks for looking into this Markg

yes Xupiter was what I accidently put on my system. I hate clutter. I'm almost obsessive about that . I like to keep my system free from clutter. When I tried to remove this Xupiter I ran into problems with my windows explorer. A hard drive wipe took care of that .

[canimoo2]

MarkG

FYI

I have this URL from paypoup - 66.227.36.231

I logged on to forum approx 9:10PM CST

[LotC]

Popups

Markos: What, if any, popups get served to logged in users on a regular basis? I have regular hits to paypopup.com and thought that you had gone to serving popups to logged in users. I've turned off popups in Opera now so I won't be getting them anymore. I can probide URLs if you need. I don't seem to have been infected with this Xupiter parasite though.

[Imran Siddiqui]

Thanks for bringing this up, guys! I had this crap on my PC as well!

[MarkG]

What, if any, popups get served to logged in users on a regular basis?

logged in users have always goten popups, just like non logged in(guests)

are you saying that you got to many of them(e.g. one at every page)? if this happened, you should make sure cookies are enabled

[SpencerH]

I havent seen the Xupiter again yet, it was pretty rare for me to see it though. What I am getting a lot of is a page fault (I dunno if thats really what it is) that has

UUUUUUUUUUUUUUUUUUUUUUUUU

at the top and nothing else.

[Lefty Scaevola]

Originally posted by MarkG
[q]if this happened, you should make sure cookies are enabled

Even with cookies enabled and auto log on, the time/date utility pop up thats come from the "system tray update" banner ad pop ups every page that it is on. I now have 4 time/date utility popup windows on, after veiwing just 6 pages.

[Thrawn05]

Let's see, even though I have a pop-up blocker, I get a IE browser icon on my system tray from xupiter (It starts as xupiter.com then switches the name Pop-under). When I click on it no browser window pops up, but when I try to right-click close it the comptuer freakin' freezes. And that sucks on a laptop since I can't just pull the plug and restart. I need to wait for 2 hours for the BIOS to see that the battery is almost dead and kill the power.


Here are a few links I found in the history page.

http://www2.paypopup.com/loading.php?id=apolyton&pop=enter&t=5&subid=3449&tid=1039817174&ref=http%3A//apolyton.net/counter.php%3Fpage%3DForums%26group%3D2

http://www1.paypopup.com/loading.php?id=apolyton&pop=enter&t=5&subid=3449&tid=1039720849&ref=http%3A//apolyton.net/counter.php%3Fpage%3DForums%26group%3D2

I have a screenshot of my systemtray to show you what I mean. On the far right is that xupiter thing.

[MarkG]

Even with cookies enabled and auto log on, the time/date utility pop up thats come from the "system tray update" banner ad pop ups every page that it is on.

Lefty, these popups unfortunately come from the RealMedia ads that american visitors get. This is actually a ad that we have already asked for it's removal, since the advertised utilities when installed also include Gator.

To avoid it, please use a special or ultra special style.

More details in the faq

http://apolyton.net/forums/misc.php?action=faq&page=10#154

[MarkG]

Let's see, even though I have a pop-up blocker, I get a IE browser icon on my system tray from xupiter (It starts as xupiter.com then switches the name Pop-under).

Thrawn, the paypopup.com popups are first titled(or it's title start with) paypopup and then change to the advertiser title. What you describe sounds like you're infected with Xupiter. The solution is to download Adaware

http://www.lavasoftusa.com/downloads.html

[War4ever]

i am going to run adaware now, and let you know my findings......

[War4ever]

i forgot to come back and let you know, NO virus or trojan on my computer from this site...

instead i had something called ***tracker :/

anyways, not sure how i got that one

[Jaguar]

Originally posted by MarkG

Even with cookies enabled and auto log on, the time/date utility pop up thats come from the "system tray update" banner ad pop ups every page that it is on.

Lefty, these popups unfortunately come from the RealMedia ads that american visitors get. This is actually a ad that we have already asked for it's removal, since the advertised utilities when installed also include Gator.

To avoid it, please use a special or ultra special style.

I'm using default ultra special. I've gotten the Xupiter download twice.

[War4ever]

actually i found something else when i logged on to poly, and i deleted whatever it was, in my windows downloaded programs file....

at least the website detected it when i logged on

[MarkG]

I've gotten the Xupiter download twice.

it's two different things. What Lefty described is not Xupiter.

did you get the Xupiter ad after 12.Dec.02 23:00 gmt?