Hi ShadowMeph. If the ad / pop up has a url address bar you can copy that or write it down etc and do a whois lookup on a site like
http://centralops.net/co/ using their domain dossier page.
Often though ads / popups will have a hidden address bar, so you may need to track it down another way. A firewall log would be one way to nail it, if you use one that has good logging like Outpost, makes things very easy..
One freeware app that can help you find the sites that have been visited is Cache Monitor :
http://www.snapfiles.com/reviews/Cache_Mon.../cachemoni.htmlScreenshot:
http://www.snapfiles.com/screenshots/cachemoni.htmI think it doesn't even need to be installed, just run it from a directory somewhere to scan the cache folder and it will build up a list like you can see in the screenshot. I used to use this a little when tracking malware and was very handy.
-
Another very simple app to try out app is this basic packet sniffer called what is transferring:
http://www.wfshome.com/wit.htmNo install needed, just run it from a directory somewhere.
-
More info on using packet sniffers here -
http://www.bluetack.co.uk/forums/index.php?showtopic=1191-
TCPView that will display active connections, but you wont get a log using this so you gotta be quick to copy the IP address. Press the A button I think to toggle between resolving the IP addresses, which will just display the host name etc , or alternatively dont resolve the IP Address so you can grab the IP directly.
http://technet.microsoft.com/en-us/sysinte...s/bb897437.aspxNo install needed with this either.
-
If you use Firefox there's all kinds of cool free extensions to get an IP address or log the HTTP traffic for you.
There's prob lots of other ways and applications that might help , try one of these and see if it works for you.. Someone else may be feeling generous and have some other suggestions for you as well.
So basically if you can get the domain name, use a whois to get the IP address from it, or if using TCPview it will be able to display the IP for you.