Do a malware check with a few malware scan programs.
You need to use all programs because each detects different malware.
Make sure that you update each program to get the latest version of the database.

• http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
• http://www.superantispyware.com/ - SuperAntispyware
• http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
• http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free
• http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page

See also "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked and What to do when searches take you to the wrong search website

Hello,

I tried above tools but didn't got sucess. can anyone tell me what is the solution for above problem.

It's not only with firefox it also open popup when i start IE/Opera.

Please help me.

Hello mukund_ce,

                                       if the advise from cor-el was bad news ,

hasn't give any salvage , here's some more.

You should read the Windows Defender Home Page .

I've done some research ( on the globalcloudcontroller link)

Don't click it on your system , but that's to late an advise .

The XP on your system , when was it updated last time ?

As we know , from the good old DOS day's :

format C:

And the hijacker is killed by his victim .

Well , ... of course "your" XP also ...

Its been hijacked , because XP runs on its last breath .

Re install and try to keep it updated and from harm away.

Handle it , as you would do with a now very expensive old timer !

I'm afraid , this is the only way .

PS could you give some info about your hardware ?

Maybe an other OS could give it a lease on new life.

Greetings

Martin

Hello Martin,

My Xp is up to date with latest windows updates and also i have trend micro firewall so my firewall keep it blocked (Popup will not be open due to firewall. Thank to God !! )

I also scanned my system with windows defender.

Is format of XP is only solution for it ?

I checked my system with "netstat -ab" command and it gives me that spoolsv.exe opened that all pop up windows. Is it so ?

-- Mukund

Hello Mukund ,

                           Sorry can't make sense of last phases , 

English isn't my first language , I'm Flemish (Dutch) of origin.

and it gives me that spoolsv.exe opened that all pop up windows. Is it so ?

Glad to hear that the "oldtimer" is at least updated  ;)

Now for the issue itself ; its not a problem of getting pop-up's .

It's far worse , you have an "intruder" , the initiator goal is to stay stale , hidden , for the owner AND the OS ("your" XP) AND for any defender or analyzing software you may have installed !

That it became visible for once , means in fact 2 things :

it has flaws on it own :)

it has done some unintended damage.

The link in itself , isn't the cause or the offender .

Its one of the means by witch it communicates with his initiator .

Its nearly impossible to now how you got that intruder installed .

In most cases it changes some rules , ini , configure , DLL , files . (there are many more)

So when your defender or analyzing soft doesn't detect it ,

then maybe , they are unaware of it's existence .

That's why one needs to keep updated with there rules .

Every day there is a new pile of malware to investigate.

Maybe you should post a question towards Windows Defender and Trend Micro .

In any case I'm SURE that you have an intruder .

What to do on first hand ?

Install a Net log program , and when connected , keep a healthy eye

on its results , keep those logs , they might help Trends Micro or

Windows Defender localize the bad guys !

Greetings

Martin

Hello Martin,

I solved this problem. After investigation, I found that pop-up comes only when i logged with specific user. I just changed my user name and will delete old user from windows(Including specific configuration as well)

One more thing i observed is, It's not only one site that malware try to access but it also try to open another IP address. I observed all activities via network monitor program (WIRESHARK)

Any ways, My computer is safe now.

Thanks for you help

-- Mukund

your welcome

It's possible , only your profile folder infected .

But don't be to sure , keep an eye on your net traffic .

And sure , it wants to connect to other IP's , when it succeeds ,

thousands !

And you being polled by your country's security services  :)

Martin