ooook.. how the hell do i stop this..

**_Ender_** · 02-03-2005, 10:49 AM

Ho all,

I'm having a little pop up problem... again The real problem is. I cant seem to get rid of it. I run adaware and spybot. They will get the problem, but when I begin to surf the web again, it will start all over again. Now I'm getting these window things that pop up that say its from some messenger service... no idea where they came from and no idea how to stop them.

Any ideas?

**_Ender_** · 02-03-2005, 10:54 AM

Quote:

Originally Posted by Ad-Aware log

Ad-Aware SE Build 1.05
Logfile Created on:Thursday, February 03, 2005 10:03:11 AM
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R26 25.01.2005
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» »

References detected during the scan:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
CoolWebSearch(TAC index:10):4 total references
MRU List(TAC index:0):26 total references
Tracking Cookie(TAC index:3):3 total references
VX2(TAC index:10):3 total references
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Ad-Aware SE Settings
===========================
Set : Search for negligible risk entries
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan my Hosts file

Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Include alternate data stream details in log file
Set : Play sound at scan completion if scan locates critical objects

2-3-2005 10:03:11 AM - Scan started. (Smart mode)

Listing running processes
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ProcessID : 304
ThreadCreationTime : 2-3-2005 12:33:38 PM
BasePriority : Normal

#:2 [winlogon.exe]
FilePath : \??\C:\WINDOWS\system32\
ProcessID : 384
ThreadCreationTime : 2-3-2005 12:33:41 PM
BasePriority : High

#:3 [services.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 428
ThreadCreationTime : 2-3-2005 12:33:42 PM
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Services and Controller app
InternalName : services.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : services.exe

#:4 [lsass.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 440
ThreadCreationTime : 2-3-2005 12:33:42 PM
BasePriority : Normal
FileVersion : 5.1.2600.1106 (xpsp1.020828-1920)
ProductVersion : 5.1.2600.1106
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : lsass.exe

#:5 [ati2evxx.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 584
ThreadCreationTime : 2-3-2005 12:33:42 PM
BasePriority : Normal

#:6 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 612
ThreadCreationTime : 2-3-2005 12:33:42 PM
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:7 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 648
ThreadCreationTime : 2-3-2005 12:33:42 PM
BasePriority : Normal
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:8 [ati2evxx.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 940
ThreadCreationTime : 2-3-2005 12:33:45 PM
BasePriority : Normal

CoolWebSearch Object Recognized!
Type : Process
Data : euzozi.dll
Category : Malware
Comment : (CSI MATCH)
Object : C:\WINDOWS\System32\

Warning! CoolWebSearch Object found in memory(C:\WINDOWS\System32\euzozi.dll)

"C:\WINDOWS\system32\Ati2evxx.exe"Process terminated successfully

#:9 [explorer.exe]
FilePath : C:\WINDOWS\
ProcessID : 988
ThreadCreationTime : 2-3-2005 12:33:45 PM
BasePriority : Normal
FileVersion : 6.00.2800.1106 (xpsp1.020828-1920)
ProductVersion : 6.00.2800.1106
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Windows Explorer
InternalName : explorer
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : EXPLORER.EXE

CoolWebSearch Object Recognized!
Type : Process
Data : euzozi.dll
Category : Malware
Comment : (CSI MATCH)
Object : C:\WINDOWS\System32\

Warning! CoolWebSearch Object found in memory(C:\WINDOWS\System32\euzozi.dll)

#:10 [spoolsv.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1084
ThreadCreationTime : 2-3-2005 12:33:46 PM
BasePriority : Normal
FileVersion : 5.1.2600.0 (XPClient.010817-1148)
ProductVersion : 5.1.2600.0
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : spoolsv.exe

#:11 [devldr32.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1820
ThreadCreationTime : 2-3-2005 12:40:40 PM
BasePriority : Normal
FileVersion : 1, 0, 0, 17
ProductVersion : 1, 0, 0, 17
ProductName : Creative Ring3 NT Inteface
CompanyName : Creative Technology Ltd.
FileDescription : DevLdr32
InternalName : DevLdr
LegalCopyright : Copyright (C) Creative Technology Ltd. 1998-2001
OriginalFilename : DevLdr32.exe

CoolWebSearch Object Recognized!
Type : Process
Data : euzozi.dll
Category : Malware
Comment : (CSI MATCH)
Object : C:\WINDOWS\System32\

Warning! CoolWebSearch Object found in memory(C:\WINDOWS\System32\euzozi.dll)

"C:\WINDOWS\System32\devldr32.exe"Process terminated successfully

#:12 [atiptaxx.exe]
FilePath : C:\Program Files\ATI Technologies\ATI Control Panel\
ProcessID : 1932
ThreadCreationTime : 2-3-2005 12:40:58 PM
BasePriority : Normal
FileVersion : 6.14.10.5120
ProductVersion : 6.14.10.5120
ProductName : ATI Desktop Component
CompanyName : ATI Technologies, Inc.
FileDescription : ATI Desktop Control Panel
InternalName : Atiptaxx.exe
LegalCopyright : Copyright (C) 1998-2004 ATI Technologies Inc.
OriginalFilename : Atiptaxx.exe

CoolWebSearch Object Recognized!
Type : Process
Data : euzozi.dll
Category : Malware
Comment : (CSI MATCH)
Object : C:\WINDOWS\System32\

Warning! CoolWebSearch Object found in memory(C:\WINDOWS\System32\euzozi.dll)

"C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"Process terminated successfully

#:13 [viewmgr.exe]
FilePath : C:\Program Files\Viewpoint\Viewpoint Manager\
ProcessID : 1972
ThreadCreationTime : 2-3-2005 12:41:00 PM
BasePriority : Normal
FileVersion : 2, 0, 0, 42
ProductVersion : 2, 0, 0, 42
ProductName : Viewpoint Manager
CompanyName : Viewpoint Corporation
FileDescription : ViewMgr
InternalName : Viewpoint Manager
LegalCopyright : Copyright © 2004
OriginalFilename : ViewMgr.exe
Comments : Viewpoint Manager

#:14 [woyiyv.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 832
ThreadCreationTime : 2-3-2005 12:42:27 PM
BasePriority : Normal

VX2 Object Recognized!
Type : Process
Data : woyiyv.exe
Category : Malware
Comment : (CSI MATCH)
Object : C:\WINDOWS\System32\

Warning! VX2 Object found in memory(C:\WINDOWS\System32\woyiyv.exe)

"C:\WINDOWS\System32\woyiyv.exe"Process terminated successfully
"C:\WINDOWS\System32\woyiyv.exe"Process terminated successfully

#:15 [iexplore.exe]
FilePath : C:\Program Files\Internet Explorer\
ProcessID : 480
ThreadCreationTime : 2-3-2005 2:58:39 PM
BasePriority : Normal
FileVersion : 6.00.2800.1106 (xpsp1.020828-1920)
ProductVersion : 6.00.2800.1106
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Internet Explorer
InternalName : iexplore
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : IEXPLORE.EXE

#:16 [ad-aware.exe]
FilePath : C:\Program Files\Lavasoft\Ad-Aware SE Personal\
ProcessID : 168
ThreadCreationTime : 2-3-2005 3:03:01 PM
BasePriority : Normal
FileVersion : 6.2.0.206
ProductVersion : VI.Second Edition
ProductName : Lavasoft Ad-Aware SE
CompanyName : Lavasoft Sweden
FileDescription : Ad-Aware SE Core application
InternalName : Ad-Aware.exe
LegalCopyright : Copyright © Lavasoft Sweden
OriginalFilename : Ad-Aware.exe
Comments : All Rights Reserved

Memory scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 1
Objects found so far: 5

Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Registry Scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 5

Started deep registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Deep registry scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 5

Started Tracking Cookie scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : james t@z1.adserver[1].txt
Category : Data Miner
Comment : Hits:3
Value : Cookie:james t@z1.adserver.com/
Expires : 2-3-2006 7:44:46 AM
LastSync : Hits:3
UseCount : 0
Hits : 3

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : james t@ads.addynamix[1].txt
Category : Data Miner
Comment : Hits:1
Value : Cookie:james t@ads.addynamix.com/
Expires : 2-4-2005 8:04:24 AM
LastSync : Hits:1
UseCount : 0
Hits : 1

Tracking Cookie Object Recognized!
Type : IECache Entry
Data : james t@atdmt[2].txt
Category : Data Miner
Comment : Hits:3
Value : Cookie:james t@atdmt.com/
Expires : 2-1-2010 7:00:00 PM
LastSync : Hits:3
UseCount : 0
Hits : 3

Tracking cookie scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 3
Objects found so far: 8

Deep scanning and examining files...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Disk Scan Result for C:\WINDOWS
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 8

Disk Scan Result for C:\WINDOWS\System32
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 8

Disk Scan Result for C:\DOCUME~1\JAMEST~1\LOCALS~1\Temp\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 8

Scanning Hosts file......
Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts".
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» »»»»»»»»»»»»»»»»»»»»»»»»»»

Hosts file scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
0 entries scanned.
New critical objects:0
Objects found so far: 8

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\windows\currentversion\app lets\wordpad\recent file list
Description : list of recent files opened using wordpad

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\windows\currentversion\app lets\paint\recent file list
Description : list of files recently opened using microsoft paint

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\windows\currentversion\exp lorer\runmru
Description : mru list for items opened in start | run

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\search assistant\acmru
Description : list of recent search terms used with the search assistant

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\windows\currentversion\exp lorer\comdlg32\opensavemru
Description : list of recently saved files, stored according to file extension

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\windows\currentversion\exp lorer\comdlg32\lastvisitedmru
Description : list of recent programs opened

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\windows\currentversion\exp lorer\recentdocs
Description : list of recent documents opened

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\internet explorer
Description : last download directory used in microsoft internet explorer

MRU List Object Recognized!
Location: : software\microsoft\directdraw\mostrecentapplicatio n
Description : most recent application to use microsoft directdraw

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\microsoft management console\recent file list
Description : list of recent snap-ins used in the microsoft management console

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\google\navclient\1.1\history
Description : list of recently used search terms in the google toolbar

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\mediaplayer\preferences
Description : last cd record path used in microsoft windows media player

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\internet explorer\typedurls
Description : list of recently entered addresses in microsoft internet explorer

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\adobe\acrobat reader\6.0\avgeneral\crecentfiles
Description : list of recently used files in adobe reader

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\directinput\mostrecentappl ication
Description : most recent application to use microsoft directinput

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\direct3d\mostrecentapplica tion
Description : most recent application to use microsoft direct3d

MRU List Object Recognized!
Location: : software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use microsoft direct3d

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\mediaplayer\preferences
Description : last playlist index loaded in microsoft windows media player

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\windows\currentversion\app lets\regedit
Description : last key accessed using the microsoft registry editor

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\directinput\mostrecentappl ication
Description : most recent application to use microsoft directinput

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\mediaplayer\preferences
Description : last playlist loaded in microsoft windows media player

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\direct3d\mostrecentapplica tion
Description : most recent application to use microsoft direct X

MRU List Object Recognized!
Location: : software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use microsoft direct X

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\winrar\dialogedithistory\extrpath
Description : winrar "extract-to" history

MRU List Object Recognized!
Location: : S-1-5-21-1409082233-1563985344-842925246-1003\software\microsoft\windows media\wmsdk\general
Description : windows media sdk

MRU List Object Recognized!
Location: : C:\Documents and Settings\James T\recent
Description : list of recently opened documents

Performing conditional scans...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

VX2 Object Recognized!
Type : RegValue
Data :
Category : Malware
Comment :
Rootkey : HKEY_CURRENT_USER
Object : software\microsoft\internet explorer\toolbar\webbrowser
Value : {0E5CBF21-D15F-11D0-8301-00AA005B4383}

VX2 Object Recognized!
Type : RegValue
Data :
Category : Malware
Comment :
Rootkey : HKEY_LOCAL_MACHINE
Object : software\microsoft\windows\currentversion\run
Value : Narrator

Conditional scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 2
Objects found so far: 36

10:05:25 AM Scan Complete

Summary Of This Scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Total scanning time:00:02:14.554
Objects scanned:77704
Objects identified:6
Objects ignored:0
New critical objects:6

My log from just now. Its the same ones I an always removing and they keep coming back.

**Wyzcrak** · 02-03-2005, 10:57 AM

I had something called "Slotch" on my computer which gave me popups. I don't use AdAware, but Spybot claimed several times to have fixed it despite the fact that it never really left.

I ran Microsoft's AntiSpyware and have had nothing of the sort on my machine since. Maybe that would do the trick.

**TheFeniX** · 02-03-2005, 11:32 AM

If it's from the messenger service, then you are probably running directly connected to the internet (no NAT or firewall) without Windows firewall enabled.

Solution: enable XP's firewall.

**_Ender_** · 02-03-2005, 11:57 AM

How do I do that fenix?

Wintermute · 02-03-2005, 12:12 PM

First make sure you have windows service pack 2. If unsure, run automatic update from the control panel or go to the windows update website. This includes changes to the windows firewall and a popup blocker in Internet Explorer. You might want to disable the popup blocker while you make sure the spyware is gone.

To turn on firewall:
Go to start > control panel > Windows Firewall > tick the "on" radio button.
Leave "don't allow exceptions" unchecked.
Whenever a program tries to connect to the internet windows will ask you if it's OK.

The firewall wont get rid of the spyware, but might stop it doing anything. It is best to make sure it is removed though.

Make sure you are using latest versions of spybot/adaware or try the MS program.

A registry cleaner my help get rid of your spyware if all else fails. Always back up!

**_Ender_** · 02-03-2005, 12:18 PM

Its cool, I got it.

I also downloaded the microsoft antispyware program. I must say, wtg MS!

Vap0r · 02-03-2005, 01:25 PM

Sounds like a problem I had with a Messenger Service popup, not sure how I stopped it but windows update and firewall is the first step.

Also check your msconfig and see what programmes are running at startup, a lot of them you will not need.

**TheFeniX** · 02-03-2005, 01:54 PM

You can disable the messenger service, but that's what I consider "treating the symptoms, not curing the disease."

**=DdogG=** · 02-03-2005, 03:33 PM

control panel > classic view > administrative options > services > messenger > disable on all three tabs.

**Wolfie** · 02-03-2005, 03:45 PM

Quote:

Originally Posted by _Ender_

I also downloaded the microsoft antispyware program. I must say, wtg MS!

Not to be nit picking (okay maybe I am)

but shouldn't it be "wtg company program that was purchased by MS!"

02-03-2005, 10:49 AM	#1 (permalink)
_Ender_ Join Date: May 2003 Location: I am lost, if you know where I am then please feel free to tell me. Age: 29 Posts: 2,048	ooook.. how the hell do i stop this.. Ho all, I'm having a little pop up problem... again The real problem is. I cant seem to get rid of it. I run adaware and spybot. They will get the problem, but when I begin to surf the web again, it will start all over again. Now I'm getting these window things that pop up that say its from some messenger service... no idea where they came from and no idea how to stop them. Any ideas?

02-03-2005, 10:57 AM	#3 (permalink)
Wyzcrak Join Date: May 2003 Location: Memphis, TN Posts: 14,148	Re: ooook.. how the hell do i stop this.. I had something called "Slotch" on my computer which gave me popups. I don't use AdAware, but Spybot claimed several times to have fixed it despite the fact that it never really left. I ran Microsoft's AntiSpyware and have had nothing of the sort on my machine since. Maybe that would do the trick. __________________ Steam Community? Add me. \| Join #tacticalgamer \| Search Results Legend \| New Posts Forum Filter \| Postbox Toggle \| Live Thread Review \| One Line Results \| Free Remote, Encrypted Backup Darkilla: In short, NS is pretty much really fast chess. With guns. Apophis: I haven't seen anyone say that SM's are better than non-SMs. Nordbomber: This is THE first server I've seen where either side can comeback from out of seemingly nowhere with the right teamwork. en4rcment: I have NEVER experienced the type of gameplay that I have found here. Nightly I am amazed at the personalities and gaming talent. Root: Welcome to TG. Feel free to punctuate your sentences correctly. Monkerz: Its gonna take all my skills to beat those boys off in the future.

02-03-2005, 11:32 AM	#4 (permalink)
TheFeniX Join Date: Jan 2004 Location: Houston, TX Age: 26 Posts: 4,478	Re: ooook.. how the hell do i stop this.. If it's from the messenger service, then you are probably running directly connected to the internet (no NAT or firewall) without Windows firewall enabled. Solution: enable XP's firewall. __________________ - - - - - - - - - - - - - - - - - TheFeniX's Steam Profile TG's Team Fortress 2 Steam Group

02-03-2005, 11:57 AM	#5 (permalink)
_Ender_ Join Date: May 2003 Location: I am lost, if you know where I am then please feel free to tell me. Age: 29 Posts: 2,048	Re: ooook.. how the hell do i stop this.. How do I do that fenix?

02-03-2005, 12:12 PM	#6 (permalink)
Wintermute Join Date: Jul 2003 Location: UK Age: 24 Posts: 1,166	Re: ooook.. how the hell do i stop this.. First make sure you have windows service pack 2. If unsure, run automatic update from the control panel or go to the windows update website. This includes changes to the windows firewall and a popup blocker in Internet Explorer. You might want to disable the popup blocker while you make sure the spyware is gone. To turn on firewall: Go to start > control panel > Windows Firewall > tick the "on" radio button. Leave "don't allow exceptions" unchecked. Whenever a program tries to connect to the internet windows will ask you if it's OK. The firewall wont get rid of the spyware, but might stop it doing anything. It is best to make sure it is removed though. Make sure you are using latest versions of spybot/adaware or try the MS program. A registry cleaner my help get rid of your spyware if all else fails. Always back up! __________________ Wintermute Play EVE online. It's like being an accounting addict in space. www.MakePovertyHistory.com

02-03-2005, 12:18 PM	#7 (permalink)
_Ender_ Join Date: May 2003 Location: I am lost, if you know where I am then please feel free to tell me. Age: 29 Posts: 2,048	Re: ooook.. how the hell do i stop this.. Its cool, I got it. I also downloaded the microsoft antispyware program. I must say, wtg MS!

02-03-2005, 01:25 PM	#8 (permalink)
Vap0r Join Date: May 2003 Posts: 310	Re: ooook.. how the hell do i stop this.. Sounds like a problem I had with a Messenger Service popup, not sure how I stopped it but windows update and firewall is the first step. Also check your msconfig and see what programmes are running at startup, a lot of them you will not need.

02-03-2005, 01:54 PM	#9 (permalink)
TheFeniX Join Date: Jan 2004 Location: Houston, TX Age: 26 Posts: 4,478	Re: ooook.. how the hell do i stop this.. You can disable the messenger service, but that's what I consider "treating the symptoms, not curing the disease." __________________ - - - - - - - - - - - - - - - - - TheFeniX's Steam Profile TG's Team Fortress 2 Steam Group

02-03-2005, 03:33 PM	#10 (permalink)
=DdogG= Join Date: Nov 2003 Location: Ennis, TX Age: 31 Posts: 1,773	Re: ooook.. how the hell do i stop this.. control panel > classic view > administrative options > services > messenger > disable on all three tabs. __________________ Only two things are infinite, the universe and human stupidity, and I'm not sure about the former. -Albert Einstein The two most common elements in the universe are Hydrogen and stupidity. -Harlan Ellison If all else fails: "rm -rf /"

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
9/11 Highway to Hell - The angry amphibian's foot	BHack	Battlefield 2 - After Action Reports	7	09-12-2006 06:51 PM
Theology question	Rick_the_new_guy	The Sandbox	37	08-15-2006 06:08 PM
Hell Is Chucked Full :D	MONKERZ	The Sandbox	0	03-15-2005 07:12 PM
Your own personal Hell!	USN_Squid	The Sandbox	10	09-24-2004 06:50 PM

Sponsored links

Sponsored links

Sponsored links

Sponsored links