I am a fairly savvy computer user…indeed much of my job revolves around them (not just using them but building and configuring servers and such).
As such I have my computer fairly well locked down from internet baddies. If something does sneak on I know how to peruse my task list and check what processes are running and in a pinch will even muck about in the registry. My system here at home is very stable.
Even so I keep getting popups while surfing the internet every once in awhile. I have opups blocked with my browser (Internet Explorer and Firefox). I have Microsoft Antispyware and Spybot running in realtime modes to block things trying to creep onto my PC. I have Norton Antivirus for viruses and trojans and such as a hardware firewall that is pretty much closed to most traffic (I poke holes in it only when needed then close then again). I also use AdAware for good measure for an added scan sometimes. My home e-mail is known only to a relatively small number of friends and family so I get near zero spam there (and potential viruses). I use Yahoo as my catch all for junk and Yahoo runs its own scans on e-mail in addition to mine.
Despite keeping all those up-to-date and running fairly regular scans (which turn up mostly if not totally clean most times) the popups still occur. Not a lot but enough. I cannot tell if the sites I am visiting have just managed to program around all this somehow or if something is lurking on my PC (one such site that always seems to manage a popup is www.m-w.com – Merriam-Webster’s online dictionary). The other day my Messenger reported it was logging me out because someone logged in as me somewhere else. Needless to say it wasn’t me and I promptly changed my password.
So is there something I am missing? Anyone know of any particularly sneaky nasties I should be on the lookout for?
But I am using the NoScript extension to prevent websites from running JavaScript/Java unless I specifically permit them. Temporarily turning on scripting authority for that site brought the popup windows.
So it appears the popups are being triggered by scripts. That’s becoming fairly common; so many people have blocked normal popups that websites are using scripting techinques to get around people’s defenses against popups. So now we need to go to turning off scripts to fight these hijackers. What’s next?
I recently helped a friend with her computer. She is blind, and has her browser set to only text, so it works well with her screen reader. It was surprising how much faster browsing was, and how much exterraneous junk was eliminated!
In FF, turn off Java and JavaScript (or use NoScript, like t-bonham suggested). Also install adblock and block .fastclick., .doubleclick., .vibrantmedia. and .tribalfusion.. That’ll get rid of a lot of them.
In IE, turn off Java, JavaScript, and ActiveX. Change the popup stopper level to High instead of Medium. If this is too restrictive, either stop using IE altogether or customize the “Security Zones”. Make the “Internet zone” operate without any of the scripting technologies and change the “Trusted sites” zone to security level Medium. Then, regular sites that you browse won’t be able to do anything and you can manually add sites that you trust to the Trusted sites zone for normal functionality. It’s kinda like a makeshift NoScript.
Some of this new type of popups use Flash. I don’t know if Firefox 1.5 is affected by them, but at least with other versions of Firefox you can prevent them by following the instructions at http://www.petebevin.com/archives/2005/03/10/firefox_popups.html :
Type about:config into the Firefox location bar.
Right-click on the page and select New and then Integer.
I notice my version of firefox already has that value, but I still get those annoying flash ads that obscure the page (I guess they’re not technically popups since they’re in the same window).
I’ve found the best solution for me is to have IE with all the plugins and fancy stuff for when if I want to play games or funny animations or any of that stuff, and a barebones Firefox with no plugins for “information only” or privacy purposes.