Forum Home
Press F1
 
Thread ID: 46328 2004-06-20 06:14:00 Proxies phil.b (4456) Press F1
Post ID Timestamp Content User
246292 2004-06-20 06:14:00 Like a complete idiot I installed a program called ZillerPopupKiller. It was supposed to be a registry cleaner & pop up killer in one. I read up a bit about it before installing & it appeared to do what it was supposed to. There was no mention of any spurios software that went with it.

Then I ran Spybot & afterwards Adaware. They cleaned out heaps of spyware created by this program. I tried to uninstall it. It didn't appear on the uninstall list. So I deleted the folder, searched through "C" drive & deleted anything to do with it. Searched the registry & deleted again. Ran Windoctor & cleared out some more junk & re-started windows. It appears to have gone, well almost.

I use Windows xp pro & Mozilla as my browser with an ethernet router. Under edit/preferences/advanced/proxies in Mozilla, Zillapopupkiller has entered itself a manual proxy configuration under HTTP as ZillaPopupKiller on port 8100. If I select direct internet connection & click ok, I can access the internet. When I close Mozilla & re-open it, the proxy setting has reset itself to manual & I have to re-configure to direct again.

Does anyone know how to rid me of this evil

Thanks

Phil
phil.b (4456)
246293 2004-06-20 07:08:00 ZillerpopupKiller or ZillapopupKiller? I guess you've had a look already but I will too. :D mark c (247)
246294 2004-06-20 07:31:00 ZillaPopupKiller phil.b (4456)
246295 2004-06-20 07:35:00 Here (www.computercops.biz) is the only ref I can find, and that was in altavista. Mind you it's all about logfile stuff from Hijackthis with which I am unfamiliar but reading this will be start.

Haven't tried every SE on the net either. :^O
mark c (247)
246296 2004-06-20 08:05:00 Thanks Mark. I had already seen that one but couldn't find anything in my registry that related to it. Probably because I'd already manually deleted lots of entries.
I'll keep looking

Phil
phil.b (4456)
246297 2004-06-20 08:09:00 You might want to re-scan with Adaware and Spybot, but with altered settings. Reference [url=http://www.computercops.biz/postt18681.html]here[/url. It's not the exact same problem, but may shed some light.

Another thought is you may find reference to it in one of the "proxy" type folders within Mozilla. Do a search for "proxy" on your drive and have a nosy at the results. You should find one called nsProxyAutoConfig.js. If you can find it it may be possible to manually edit the file using a text editor.

Alternatively search for Zillapopupkiller on your drive - use the feature to search within text in folders
Greg S (201)
246298 2004-06-20 08:21:00 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = http=ZillaPopupKiller:8100

Did you see that registry line in the logfile? :D
mark c (247)
246299 2004-06-20 08:34:00 you don't say if you have hijackthis
Here (www.spywareinfo.com)
that will help finding it
johnboy (217)
246300 2004-06-20 12:27:00 Thanks for the replies. But no joy. It doesn't show up with Hijackthis or Startuplist. I've searched the hard drive as well as the registry to no avail. It must be in numeric form rather than the written word.

I'll keep trying

Phil
phil.b (4456)
246301 2004-06-20 23:41:00 Have you tried a System Restore? See if you can back to before you intalled this prog? mark c (247)
1 2