esampler - highjack of IE or what? 2

[BernardStewart]

Everytime I log on to aol a message appears on my toolbar appearing to open up an IE page. The reference is:-

http://esampler.tns-global.com/esampler/writeaoltest.html?harvest,AOL

I run NIS, Adware, spybot, spyware doctor, MS antivirus and AOL antispam. All have latests updates and none detect anything or remove this.

Does anyone know exactly what this is and how to get rid of it?

All I could find of value doing a web search was the following:-

"Hi, the problem is TNS is sending you a tracking cookie which monitors your activities for market research! how you respond to advertising, that sort of thing. I think they are doing it on behalf of AOL? Cant confirm this though!

TNS web site:

http://www.tns-global.com/corporate...tInitial?Container=com.webridge.entity.Entity

[OID[FCAC1D931F80F3459B1034CD2304EC38]]

Dont think its any real threat, block your cookies from the above site?
This is from the blocked cookie in IE!
This window has appeard to send a cookie, called 'eSampler' from TNS Interactive, to record that you have seen certain online content, such as an online Ad. The data in this cookie will not be read unless you later agree to a clear online request from TNS. TNS operates a strict online privacy policy and no data is being collected from your computer.
Our apologies for any incovenience the window has

This forum has been my salvation. I picked up the esampler popup this evening and it has been driving me mad. I phoned AOL - very polite but obviously(?) hadn't a clue what I was talking about. Told me to block popups - I already do. I've system restored, run Norton Anti Virus, Ad-aware and AOL Spyware Protection but to no avail. By chance I found this forum so at least I know I am not alone. "

 

[2ffat]

Have you run HiJackThis? Start with these: faq760-4897, faq760-4866, faq760-5577, faq760-4849, & faq760-4764.

James P. Cottingham
-----------------------------------------
^{To determine how long it will take to write and debug a program, take your best estimate, multiply that by two, add one, and convert to the next higher units.}

 

[erikhertzel]

You could run a Hijack this and we will help you analyze it and get rid of the bad stuff.

Erik

 

[BernardStewart]

Thanks chaps for your kind offers:-

It would still be great if anyone could throw light on this 'esampler'

Found another web reference:-

"Ok, cracked the problem.
These esampler popups are on behalf of an advertiser on aol, and are there with aol's permission and approval. Although it is well hidden by aol, i have found out how to disable them. If you go to the aol browser and then go to the "keywords "drop down menu, select "go to keyword", then enter the following in the go to box
aeidpreferences
click the NO button and then click OK, then that should sort the problem.
btw, this particular keyword is not listed in their keyword directory, and the default setting is to accept the cookies. They are also using web beacons so they are next on my list.
Jock"

Below is nt Highjack log file:-

Logfile of HijackThis v1.99.1
Scan saved at 13:47:41, on 18/03/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
F:\WINDOWS\Explorer.EXE
F:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
F:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
F:\WINDOWS\system32\spoolsv.exe
F:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
F:\Program Files\Real\RealPlayer\RealPlay.exe
F:\Program Files\QuickTime\qttask.exe
F:\Program Files\Common Files\Symantec Shared\ccProxy.exe
F:\Program Files\Microsoft Hardware\Keyboard\type32.exe
F:\Program Files\ASUS\Probe\AsusProb.exe
F:\Program Files\Common Files\AOL\ACS\AOLDial.exe
L:\DiskeeperWorkstation\DKService.exe
F:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
F:\Program Files\Microsoft AntiSpyware\gcasServ.exe
F:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
F:\WINDOWS\system32\ctfmon.exe
F:\Program Files\Messenger\msmsgs.exe
F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
F:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
F:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
F:\Program Files\Norton Internet Security Professional\Norton AntiVirus\AdvTools\NPROTECT.EXE
F:\WINDOWS\system32\nvsvc32.exe
F:\Program Files\Norton Internet Security Professional\Norton AntiVirus\SAVScan.exe
F:\WINDOWS\System32\svchost.exe
F:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
L:\AOL 9.0b\aoltray.exe
F:\Program Files\Logitech\SetPoint\KEM.exe
F:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
L:\QUICKEN 2002 RAIDE EIDE\QWDLLS.EXE
F:\Program Files\WinZip\WZQKPICK.EXE
F:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
J:\Microsoft Office\Office10\msoffice.exe
F:\Program Files\Norton Internet Security Professional\Norton AntiVirus\navapsvc.exe
F:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSPS~1.EXE
F:\Program Files\Internet Explorer\iexplore.exe
F:\Program Files\Internet Explorer\iexplore.exe
F:\Program Files\Spyware Doctor\swdoctor.exe
L:\AOL 9.0b\waol.exe
L:\AOL 9.0b\shellmon.exe
F:\Program Files\Common Files\AOL\aoltpspd.exe
J:\Microsoft Office\Office10\WINWORD.EXE
K:\My Documents\Software updates\Microsoft maliscius software removal tool\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

http://www.google.co.uk

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

http://www.google.co.uk

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =

http://oca.microsoft.com/resredir.aspx?SID=604&iBucketTable=1&iBucket=1273827&LCID=1033

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - I:\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - F:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - F:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - F:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - F:\Program Files\Norton Internet Security Professional\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - F:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - F:\Program Files\Norton Internet Security Professional\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "F:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] F:\Program Files\Norton Internet Security Professional\UrlLstCk.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] F:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [RealTray] F:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE F:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [IntelliType] "F:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [ASUS Probe] f:\Program Files\ASUS\Probe\AsusProb.exe
O4 - HKLM\..\Run: [AOLDialer] F:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [Advanced Tools Check] F:\PROGRA~1\NORTON~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] F:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [gcasServ] "F:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [MMTray] F:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [AOL Spyware Protection] "F:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe"
O4 - HKCU\..\Run: [ctfmon.exe] F:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "F:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Spyware Doctor] "F:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [SpybotSD TeaTimer] F:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = I:\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AOL 9.0 Tray Icon.lnk = L:\AOL 9.0b\aoltray.exe
O4 - Global Startup: AOL Companion.lnk = F:\Program Files\AOL Companion\companion.exe
O4 - Global Startup: Logitech SetPoint.lnk = F:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Microsoft Office.lnk = J:\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = F:\Program Files\WinZip\WZQKPICK.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - F:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - F:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone:

http://Download.Windowsupdate.com

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -

http://go.microsoft.com/fwlink/?linkid=34738&clcid=0x409

O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) -

http://www.pcpitstop.com/internet/pcpConnCheck.cab

O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) -

https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab

O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) -

https://support.microsoft.com/OAS/ActiveX/odc.cab

O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) -

http://aolcc.aolsvc.aol.co.uk/computercheckup/qdiagcc.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -

http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1102935797453

O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) -

https://www-secure.symantec.com/techsupp/asa/SymAData.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{603EF977-5715-4FC3-8432-FB852F2D9DFE}: NameServer = 205.188.146.145
O17 - HKLM\System\CS1\Services\Tcpip\..\{603EF977-5715-4FC3-8432-FB852F2D9DFE}: NameServer = 205.188.146.145
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - F:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - F:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - F:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - F:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - F:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - L:\DiskeeperWorkstation\DKService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - F:\Program Files\Norton Internet Security Professional\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - F:\Program Files\Norton Internet Security Professional\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\system32\nvsvc32.exe
O23 - Service: OmniFormat from Pdf995 - Unknown owner - c:\omniformat\ntservice.exe
O23 - Service: SAVScan - Symantec Corporation - F:\Program Files\Norton Internet Security Professional\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - F:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - F:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - F:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - F:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

 

[erikhertzel]

OK,

Your Hijack This looks really good. Do you recognize these:

O17 - HKLM\System\CCS\Services\Tcpip\..\{603EF977-5715-4FC3-8432-FB852F2D9DFE}: NameServer = 205.188.146.145

O17 - HKLM\System\CS1\Services\Tcpip\..\{603EF977-5715-4FC3-8432-FB852F2D9DFE}: NameServer = 205.188.146.145

Is your NameServer really that, or is it hijacked? If it's hijacked, remove the 017's

For clean up remove:

O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - F:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll

You look pretty good, is ensampler still giving you fits?

Erik

 

[BernardStewart]

Erik,

Thanks so much for such a speedy response.

1) Don't know what the nameserver reference is - can you explain what it means?

2) Why do I need to clean the spyware doctor reference?

3)I did what Jock suggested (see above) and blocked aol's ad process. Also blocked the site

http://www.esampler.tns-global.com

in both IE and NIS.

So far not getting any more of the page opening referencces. Not sure if I have cured it or blocked it or whether this is soe nasty that AOL is perpetrating.

Thanks again for your help.

Bernard

 

[erikhertzel]

It's probably a new spyware targeting AOL, I suspect which is why nothing is picking it up. But, it sounds like you got it blocked.

Also, Nameserver is your DNS Server which allows you to resolve Internet webpages from just an IP address. So, they may be legit, and now looking at it, your SpyDoctor is legit too...

Thanks,

Erik

 

[2ffat]

WhoIs indicates that 205.188.146.145 belongs to AOL. One thing I didn't recognize is F:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSPS~1.EXE. Anybody heard of this.

My question is if this is being installed with AOL's knowledge, if not its blessing, will it be reinstalled automatically by AOL or will it stop AOL from functioning after removing it?

James P. Cottingham
-----------------------------------------
^{To determine how long it will take to write and debug a program, take your best estimate, multiply that by two, add one, and convert to the next higher units.}

 

[erikhertzel]

I wondered about that one too, so the NameServer is good to go, but that one file F:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSPS~1.EXE is interesting. I would say to be say don't delete it if the problem is under control, but I am not really sure.

That a good question.

Erik

 

[BernardStewart]

spoke to aol - they said a lot of aol members are having this problem.

 

[BernardStewart]

Had a tech chat with AOL and thought I was getting somewhere (see below). Didn't get the promised HELP email. 2 more tech chats each becoing more evasive about the cause left me little wiser. I'll let you judge for yourselves!

Great if anyone can throw furthwr light on this.

Aol response to esampler

ChatAmitS: Welcome to Member Help Interactive. Please present your question, and I will be with you in just a moment.
IPD100: I have had an odd event - it seems that either aol has something funny or else a new spyware is attaching aol
IPD100: see link below for my full blurb and responses
IPD100:

http://www.tek-tips.com/viewthread.cfm?qid=1027310

IPD100: that should have read 'attacking AOL'
IPD100: see specifically the reference to
IPD100:

http://esampler.tns-global.com/esampler/writeaoltest.html?harvest,AOL

IPD100: and to
ChatAmitS: May I know if you get this as pop up or error message?
IPD100: "Ok, cracked the problem. These esampler popups are on behalf of an advertiser on aol, and are there with aol's permission and approval. Although it is well hidden by aol, i have found out how to disable them. If you go to the aol browser and then go to the "keywords "drop down menu, select "go to keyword", then enter
IPD100: Everytime I log on to aol a message appears on my toolbar appearing to open up an IE page. The reference is:-

http://esampler.tns-global.com/esampler/writeaoltest.html?harvest,AOL

IPD100: see also
IPD100: "Hi, the problem is TNS is sending you a tracking cookie which monitors your activities for market research! how you respond to advertising, that sort of thing. I think they are doing it on behalf of AOL? Cant confirm this though!
IPD100: see also
IPD100: This forum has been my salvation. I picked up the esampler popup this evening and it has been driving me mad. I phoned AOL - very polite but obviously(?) hadn't a clue what I was talking about. Told me to block popups - I already do. I've system restored, run Norton Anti Virus, Ad-aware and AOL Spyware Protection but
IPD100: - not my comments but others for this problem
ChatAmitS: I would suggest you to not to go to that site as that would create problem for your PC.
IPD100: I haven't been to that site
IPD100: what is the site and why would it create a problem
ChatAmitS: Let me send you a mail which will clear this problem from your PC.
IPD100: ok


WsminSunilK: Welcome to Member Help Interactive. Please present your question, and I will be with you in just a moment.
IPD100: was speaking to tech help
IPD100: ChatAmitS: Let me send you a mail which will clear this problem from your PC.
IPD100: not received email
IPD100: can you ask him/her for the email please
WsminSunilK: may i know your exact concern?
IPD100: it's a long story
IPD100: ChatAmitS has all the details
IPD100: see link below for the full story
IPD100:

http://www.tek-tips.com/viewthread.cfm?qid=1027310

WsminSunilK: I am sorry but i do not have access to your previous chat
IPD100: can u chase him/her for the email
WsminSunilK: so please restste your query?
IPD100: I can't you chase him up
IPD100: see for full details:-

http://www.tek-tips.com/viewthread.cfm?qid=1027310

IPD100: Everytime I log on to aol a message appears on my toolbar appearing to open up an IE page. The reference is:-

http://esampler.tns-global.com/esampler/writeaoltest.html?harvest,AOL

IPD100: I run NIS, Adware, spybot, spyware doctor, MS antivirus and AOL antispam. All have latests updates and none detect anything or remove this.
IPD100: see
IPD100: "Hi, the problem is TNS is sending you a tracking cookie which monitors your activities for market research! how you respond to advertising, that sort of thing. I think they are doing it on behalf of AOL? Cant confirm this though!
IPD100: see also
IPD100: This forum has been my salvation. I picked up the esampler popup this evening and it has been driving me mad. I phoned AOL - very polite but obviously(?) hadn't a clue what I was talking about. Told me to block popups - I already do.
IPD100: not my comments
IPD100: see also
IPD100: These esampler popups are on behalf of an advertiser on aol, and are there with aol's permission and approval. Although it is well hidden by aol, i have found out how to disable them. If you go to the aol browser and then go to the "keywords "drop down menu, select "go to keyword", then enter the following in the go to
IPD100: and
IPD100: It's probably a new spyware targeting AOL, I suspect which is why nothing is picking it up. But, it sounds like you got it blocked.
IPD100: hellooo
IPD100: I have to go out for 5 mins - will be back shortly
WsminRakeshD: Welcome to Member Help Interactive. Please present your question, and I will be with you in just a moment.
WsminRakeshD: Thank you for calling in to Live Help!! I may be with some other members at the moment, please state your query and I will be with you as soon as possible
WsminRakeshD: Hi! How may I help you today?
IPD100: I have wasted ages outlining a problem to two of your agents
IPD100: WsminSunilK
WsminRakeshD: May i ask the exact problem that you are facing ?
IPD100: and
IPD100: IPD100: I have had an odd event - it seems that either aol has something funny or else a new spyware is attaching aol IPD100: see link below for my full blurb and responses IPD100:

http://www.tek-tips.com/viewthread.cfm?qid=1027310

IPD100: that should have read 'attacking AOL' IPD100: see specifically the reference to
IPD100: ChatAmitS: May I know if you get this as pop up or error message? IPD100: "Ok, cracked the problem. These esampler popups are on behalf of an advertiser on aol, and are there with aol's permission and approval. Although it is well hidden by aol, i have found out how to disable them. If you go to the aol browser and the
IPD100: IPD100: This forum has been my salvation. I picked up the esampler popup this evening and it has been driving me mad. I phoned AOL - very polite but obviously(?) hadn't a clue what I was talking about. Told me to block popups - I already do. I've system restored, run Norton Anti Virus, Ad-aware and AOL Spyware Protect
IPD100: pleas
IPD100: I was promised an email by the first agent
WsminRakeshD: May i ask that you wish to delete it ?
IPD100: ChatAmitS
IPD100: pardon?????
WsminRakeshD: Please do not worry i will surely help you in this problem
WsminRakeshD: Can you please tell me the version of AOL and Windows that you are using?
IPD100: xp pro and 9
WsminRakeshD: Thankyou
IPD100: please listen
WsminRakeshD: Please follow the steps below :-
WsminRakeshD: 1. Double click 'My Computer' 2. Go to C:\ --> Program Files --> AOL 9.0 -->Organize 3. Delete the Cache folder and restart AOL
WsminRakeshD: 1. Double click 'My Computer' 2. Go to C:\ --> Program Files --> AOL 9.0 -->Organize 3. Delete the Cache folder and restart AOL
IPD100: I have spent ages explaining this to 2 agents, and promised an email from him and asked the second to chaase him up
WsminRakeshD: Please follow the steps i am sending you
WsminRakeshD: 1. Click Settings --> Toolbar --> Clear History Trail Now --> Click save Note: If you want to clear the History after each sign off or switching of screen names, please put a tick in the appropriate box.
WsminRakeshD: Click on START -> SETTINGS -> CONTROL PANEL. In Control Panel double click on the INTERNET OPTIONS icon. In here click on the PROGRAMS tab. Click on RESET WEB SETTINGS then click OK.
IPD100: what is causing this problem?
WsminRakeshD: Please follow the steps that i have mentioned above and i am sure that problem wil resolve
IPD100: the second agent said lots of aol members are getting it
IPD100: did you read my link?
IPD100:

http://www.tek-tips.com/viewthread.cfm?qid=1027310

WsminRakeshD: These are some pop ups that are sent to aol members from esampler please do not worry
WsminRakeshD: try the above steps and your problem will resolve
IPD100: is esampler working for aol


WsminRakeshD: No it is not an aol part
WsminRakeshD: That is a site and please do not accept any popup or link from there
IPD100: i was told

http://esampler.tns-global.com/esampler/writeaoltest.html?harvest,AOL

was working for aol
IPD100: that is the company 'sampler.tns-global.com' - are they working for aol?
WsminRakeshD: I am afriad but this is not aol`s part and please follow the steps mentioned above
WsminRakeshD: Is there anything else I may help you with?
IPD100: Iknow it is not an aol 'part' but is the company working for aol?
IPD100: apparently it is a market research company
WsminRakeshD: I really apologise for the inconvenience please ignore all that this is not related to aol by any means please do not worry your problem will definitely resolve after trying those steps