Ok it just started happening today. We get on the computer and this little pop up box comes up. The heading says actulice the message is No modF. we click *ok* and then another box the same comes up that says Funk and then we click *ok* and it goes away for a minute. I've deleted over.exe,pup.exe and any other file i could find from the other advice places and restarted. Nothing changed. I also deleted my history,temporary internet, and cookie files. Help would be much appreciated.

look down about 10. it is always good to do a search before posting.

To solve the "actulice" problem:

1) Go to "start"
2) Click "run"
3) Type in "msconfig"
4) Click "OK"
5) Click on "Startup" tab
6) Find "pg4ds32m" in the list
7) Uncheck its box
8) Restart your computer
9) Smile
______________________

It didn't change names in my particular case, like it apparently did for others.

Oh, I forgot to mention something else of utmost importance. After the above, you need to erase "pg4ds32m" completely off of your computer. To do so, follow these instructions:

1) Go to "start"
2) Go to "Find"
3) Select "Files or Folders"
4) Type in "pg4ds32m"
5) When it's found, highlight it and hit the delete key.
6) Also delete it from your trash bin.

Now you should be able to smile.

Thank you soon as I get home i'll try it out and hopefully smile :).

Blackdogx thank you for the advice but believe or not I did check those other forums but they're suggestions did not help me.

Hi,

I have tried everything all the other forums suggested like Amber did and nothing worked. I just tried your suggestion Yadirf but I couldn't find the pg4ds32m file you are talking about. Needless to say, I still have the pop up.

Please see my comments under "Response Number 12" at the following URL: http://www.computing.net/security/wwwboard/forum/11720.html

Please let us all know if this (or whatever) fixes the problem.

Erin,

Try Response Number 9 at http://www.computing.net/security/wwwboard/forum/11722.html

The actulice problem Amber described happened to me yesterday and plagued me all of today. I followed Yadirf's instructions in Response 12 and have been actulice free ever since. Thank you for the advice!

I have followed some of the advice you suggested and cannot find the file in msconfig, is there something else that I can do about this actulice pop-up?

Hi I have this pop up problem as well and I am trying your suggestions now but i was wondering...... what exactly does this thing do. I mean is it just a pop up or is it doing something else.
PS: Im running XP is there any change in wut i should do?

Hi I have this problem too running windows xp. After checking my startup tab as suggested through several boot iterations I found I was getting one startup that constantly changed names. I finally tracked it down as aveej.exe, it was located in my windows32 folder. After Ctrl-Alt-Del and stopping the aveej process I was able to delete this file.

This seems to have fixed my pop-up problem but I still have the file aveej.exe in my startup tab. Anyone know how to get rid of this?

Anyway, my solution was to look for the mutating startup program. Just write'em all down and see which new one pops up, then KILL it.

Matt

I tried everything that all of you had suggested but to no avail. Finally I did a search of the .exe files in my windows folder. I knew about which date the actulice pop-up started so I checked all .exe files that had a corresponding modification date. I found the culprit. For me it was SOCK2W.exe., located in my Windows system file.

I was unable to simply delete the file because a window pops up that says Windows is using the program, however, if you go to your start menu, click on "run" and type in "msconfig" go to "startup" and scroll down until you find the culprit file (for me SOCK2W.exe) Uncheck it and then restart your computer. After the computer has rebooted you can delete the file. don't forget to empty your trash bin after you have deleted the file.

THEN, you can smile!

One correction about the comprehensive fix for remvoing actulice popups and other malware program files manually posted on

http://computing.net/security/wwwboard/forum/11720.html
http://computing.net/security/wwwboard/forum/11722.html
http://computing.net/windows95/wwwboard/forum/158218.html
http://computing.net/security/wwwboard/forum/11772.html

The free Sysclean engine and the matching virus definition sofware were downloaded from TrendMicro.com and not from microtrend.com as I stated. I can't believe there is also a microtrend website.

In case anyone wants a free antivirus program, I got the free virus scan from Trendmicro through www.housecall.antivirus.com to do the online scan first. I download and update the sysclean engine and the matching virus definition files as they become available.

Top Speed

just to say that in my computer, actulice pop-up name is not pg4ds32m but xapid.exe!!! I hope it will serve to somebody!

I have tried all of the suggestions you all have made! None of them have worked for me.I have looked all the names up under the startup tab and none of them end in .exe! I am not sure what to do!!!!!!!!! Someone please help me if you can!

ali

i used system restore a few days ago... And that worked , but only for a short amount of time

ali

I ctrl-alt-deleted and went to show process, i found it was a program called atimed.exe, so i ran a search for it and found it located in //windows/system32 folder. It also found a file containing 'atimed' in "//windows/prefetch" folder. This actuilice modf business wouldnt go away with spy sweeper and other programs but ive deleted it and it hasnt come back since. I hope this helps.
-zack

Yet, another variation - this one was called dbcinsto.exe in \windows\system. I found that after having disabled this in MSCONFIG (Win98SE BTW), I then Clicked on Actulice and responded OK to both "OK" prompts. After doing so, I noticed a DUPLICATE of the DBCINSTO.EXE option that WAS CHECKED OFF!!

Nasty...

I had the actulice popup for several days and couldn't get rid of it.

I followed Matt's suggestion (#12) and wrote down the startup names on the startup tab. I rebooted, and sure enough, one of the names had changed. I unchecked that one, rebooted again and then deleted that name.

Seems to be OK so far.

Earlier, a virus scan had detected six files related to this, including pup.exe, S32GTD.exe, and twaintec.dll.

You are all HERO's!
decided to go to my dads today cos i havent been for ages.
Found out he'd spent all day trying to get rid of sum other virus, so i got a "DONT KNACK THE PC!" when i went on.
He went out and 10 minutes later....
"ping" actulice, No modF.
Just managed to sort before he got back!

I still have the file (XTRANSD) in the start up tho, how do i get rid of it?

Well, I just noticed "my" Aculice problem last night. After reading the posts I THINK I have it fixed. I'm running XP... So I ran a search for the pup.exe file and I found it. Before I deleated it I checked the time and date of it's creation (03-16-04!) Next, I ran a search for all files created on that date and time (there were 7!) I was able to delete all but one (msinet.ocx). So then I went to the system start up tab in msconfig, disabled it, deleted it and BINGO! Good stuff. It looks like the problem file hides in the C://windows/system32 file. That may help to narrow down which process it is calling itself on the start up tab. I found it on the second try. Please take this all with a grain of salt. I really don't know much of anything when it comes to computers. I just followed the advice I found here and made my own observations. I hope I didn't screw something else up! Now my big question. HOW DO I GET THE THING OFF MY START UP TAB!!!! Oh PS, It was labeled "ASSDOI" on my start up tab! Thanks to all for the advice and good luck!

Just to add to the fun... Helped a friend clean off this actulice thing. On her machine (W98SE) the culprit was called WCIM.exe in \windows\system. It was in the startup list (MSCONFIG) but didn't change its name. The easiest way to find it is to run MSCONFIG, select Selective Start UP, go to the Start Up tab and uncheck anything you don't recognize (unless, of course, you see one of the names in this thread of messages, then start by unchecking just that). Then click Apply and re-boot. If Actulice doesn't come up, go back to MSCONFIG and turn half the things you unchecked back on and re-boot. Repeat this until you isolate the culprit. Find the program it runs and delete it. Then run REGEDIT. Expand the directories to get to My Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion
There will be a key called Run and another called Run-. Click on Run- and the culprit should be there all by itself. Delete the whole Run- key. Exit REGEDIT, re-boot, and you should be clean. Good Luck.

I Have windows XP- May 19, 2004 at 7:40
I think i have a simple solution to your problem! Thanks to Jack

Go to windows>system32, let your pc search for all "exe" files. (also the hidden files) When the search engine is ready, you select the list of files, on volume (Kb's).

You only have to be interested in files with 64kb. The files may have differend names
but if you watch in "properties" you will see if its a "totempole" "werule" "thunderdome" file. ( could be more names out their too )

First i was not able to delete the exe files because they were active at the moment.
This problem can be solved if you shut down your pc and restart it in
"save mode"

Now you just repeat the same things and you will see that it is possible to eliminate
the "exe" files.

If you wan't to be sure that all the files are eliminated, you also need to run a
search on "program files"!

Good luck

i just got rid of it too.

i dont think this is a virus, its just a simple lil stupid program some stupid person wrote.

Anyways -

go to "my computer"
and into "c drive"
into your "windows folder"
then into "system 32"

look for an rectangle icon with a light
blue top, it should look exactly like the one on the actulice pop-up.

now you know the name of it !!

press "crtl", "alt" and "del"
and disable that program

then delete it from your system32 folder

EASY~

good luck to the rest of you.

um.. i did what all you guys suggested and i DID find the files that you told me to delete but um whenever i start up the computer, i still have the actulice popup that says "modup" .. i have a windows xp .. is there anything you guys can do? :P

I found the worm in windows startup as TSENUXXA (run msconfig click startup and uncheck the box), when i first did this and didnt delete it it reappeared under another name but it always seems to end with exe so I suggest you check all files in startup ending in exe particularly those that dont seem to relate to anything on your computer and gradually uncheck them one at a time rebooting each time untill the problem disappears dont worry there arent many that end in exe when you have located the culprit do a file check to find it delete it and also empty the trash bin good luck!

I just started this joyous expedition yesterday! I got this even though I HAVE Norton Antivirus with latest definitions! I installed webroots spyware software and it found hundreds of those adware pop up things but it couldn't find actulice. I even had a £1.50 a minute conversation with a guy from Symantec who was just argumentative and unhelpful - its not even on thier radar. What a disappointment - looks like we are alone and these companies probably sponsor people to write this stuff to make themselves rich while we have all this enjoyment! Lets see how long it take me to get rifd of this thing.

I ran into this problem myself and i downloaded ad-aware and ran it and it took care of the problem. Its a free for download at www.download.com.

Just a reminder, after you install and open up ad-aware, make sure that you update it before you run it.

Thank-you Yadrif!

The process of elimination worked!! I unchecked half the processes in msconfig startup tab. Didn't get the pop-up on reboot so I knew it was one of those. I rechecked half of them trying to select ones I suspected to be valid... still no pop-up. Repeat until I got down to the last 4 then just guessed until it came up again. Upon reboot the task in that slot was renamed to AVAPERMJ.exe int windows/system. Sorry guys, I forgot what it was named before - but it was NOT that. ANyway, disabled it, deleted it, and I have been pop-up free for 20 minutes.. yeah!

Thank-you all for your ideas and help!

One more for the pop-up. What a pain.
Run MSCONFIG and in the startup find a file running that is not required to the best of your knowledge. It changes it's name all the time. It's a .exe in Windows\system32.
Remove the check mark from that file and select Apply. You will need to reboot. Then go to \windows\system32 find that file and delete it. Reboot. Then run MSCONFIG and in the General tab reselect to load all drivers at startup, reboot. Took care of my pop-up, finally......

pcannie

Don't forget to delete from recycle bin.

pcannie

Obviously this worm is a bit tricky. In addition to installing a lot of crap on your computer, it overwrites windows media player and reinstalls it self everytime you try to use it (wmplayer.exe). The problem is complicated even further by the fact that MS has made it so difficult to uninstall this application.

Here is what worked for me
1) Close all the pop-up windows and clear temporary files
2) Run you updated ad-aware and remove alle the junk that it findes
3) Run HiJackThis and disable any remaining entries related (look for pup, msbb, 180Solutions)
4) Open your windows folder and delete actulice.exe and bdl14026
5) Open your system32 folder and delete any additional instances of bdl14026
6) Go to programs/windows media player/ and delete all files
7) Reinstall windows media player
8) Reboot in safe mode and run your updated AVG
9) Reboot again

Now you should be safe

Just another webaddicted dude

I tried to delete the files in Windows media player but it wont work. Every time i delete them they come back!

I could have just saved you if u have xp. Simply, if you rememb wen u downloaded it, just go all programmes>accecories>system tools>system restore. Now just restore the computer to a date before you had this actulice thing, and it should be gone. Was for me.

Now.........Smile

I was so glad to find this thread. I searched for anything about actulice about a week and a half ago and found nothing!

Well, following the advice I have read in the previous responses- so far so good NO actulice pop-up.

I am trying to remove it from the registry editor as suggested in response 23 but cant find the right thing to rid. Any help? The file was sutbm.exe, by the way.

I got the actulice thing yesterday. Searched system32 for files modified on the day i got it as suggested. This revealed a .exe file that was on my startup list named 'x7vbd.exe' that was created by a company (read arsehole) named thunderdome, hope that helps. Deleted it and all is well, still get the name in the startup list but at least i dont get a bloody message ordering me to funk everytime i start up. Its not my kind of music ;)

Hey Kiwi377
Thanks for the suggestion - adaware 6 solution is looking good (fingers crossed)
ais

Thank you, Anssi!! I do have XP and your solution worked - at least I haven't had the pop-up for over 45 min.! Let's hope it lasts.

The new name it has come up wih is CWPHBKI

Hmm...I also got actulice but i also found some strange stuff that was created the second actulice got onto the comp. A bunch of tmp files starting with GLCA2.tmp ending with GLCF4.tmp. They all were created within 3 seconds of actulice and im not sure whether they are related to it or not...

I was having the same annoying problem as everyone else with Actulice, No ModF, Funk, etc. I am running Windows 2000 and the following removal worked for me.

STEP 1 follow KOYUREI's Responce No. 25 above. (i.e. delete the .exe file in the system 32 file with the rectangular light blue icon)
remember the file name.

STEP 2 run regedit.

Click Start
Click Run
type "regedit"

then expand paths to

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

examine the keys and one of them with a system32 path will contain the file name above .exe that you just deleted

select the key and delete it.

STEP 3 Delete file from STEPS 1 from the recycle bin.

Reboot

Problem should be solved.

After 3 days of trying to rid this thing and following everyones suggestion, I completed steps very similar to Response 13 (Betsy) and FINALLY it worked. I had several culprits and located them by doing a search for all .exe files and then clicking modified date and once that put all files in order I was able to see a large number of files that had similiar icons like someone had mentioned before.

I then clicked on the properties of many of them and found they all came from the same company so I deleted them all. Did a run-msconfig and unchecked unfamiliar and same name files I found in my search then restarted the pc. Betsy was right you can't delete one of the files mine was UNONCER because it said windows was using it so you must uncheck it in run-msconfig, then keep doing cntrl alt delete to restart your pc.

I couldn't restart my pc the typical way because of the darn pop up. Once I restarted I went back and did another search for UNONCER the one I was not able to delete and then deleted it. Don't forget to empty recycle bin when you initially find and delete the files. I knew I was cured when I restarted and the ACUTULICE box did not load! It took alot but you just have to keep on trying different things. good luck

Thanx to Koyurei (nr 25) and Chris C. (nr 43). Looks like I killed "actulice"with their help. On my Win XP is was called 'insw'(by thunderdome), hope I never see it again.

Just out of curiosity, does this "actulice modF" box that appears do anything worse to your computer?
And how do you get it???
I keep getting it and I have tried many of the tips in here, but my knowledge of computers is very low. I am afraid I will just screw my computer up more if I start unchecking all those things.
I hate this. I really want to know what I did to get this. And what the hell it even is

Have battled with the actulice pop-up since yesterday in XP Pro and have finally tracked it to a variant .exe file name "DBCJTNWO.exe". Properties indicates a 'thunderdome' derivation and when removed from start up tab and then recycle bin followed by restart resolves the problem.
Yadirf's directives in post #3 above is the best method to remove the worm, however tracking down the variations in the name of the actulice file is the trouble. When the pop up is active, ctrl + alt + delete will give you the option to end task, highlight actulice and then select the "process" tab, this will give you the active process associated with the bug. Track this process name down on the start tab of your msconfig and follow Yadirf's directives from there. Funny little bug...

We had this little "bug" yesterday...instead of spending all the time trying to find the file, we did a search for all ".exe" files and sorted them by modified date. Then we deleted all the files that had today's (in this case yesterday) date.

Curious about this one, how does it propogate? it does not appear to be a worm. it seems more like a spyware trojan.

I had the same problem, mine was found under msconfig as "mswspl", I also found a visual basic script file under c:\windows.

It was simply called actulice, I noticed it and I deleted it. Spybot did find a file called pg4ds32m and has deleted all it's .dll's and other files attached to it, but there was one file I couldn't delete. A few days later it came back. Thank God I got rid of it now and I hope this story will help somebody out.

Good luck from Holland!

I actually found the executable and deleted it but that did not work. I tried all the suggestions too but nothing worked except that, when you do a search for all executables by the date that you noticed the pop-up, you get a long list of weird executables. Just delete them all, empty your recycle bin and restart your computer. If you get an error saying you can't delete, go to the task manager and end the process of the particular .exe. By the way, I found that if you just do a search for files without the date of creation to narrow your search, some of them are untraceable. I hope this info helps someone too because my computer was rendered unusable for six hours with this problem.

Thank You.
I succesfully removed the actulice pop up after following #12 the mutating file name in my case was pxcoinss.exe.
The problem I am now having is windows media player will not open and my internet connection is having issues I am connecting to the access point but I cant send and receive E-mails and I cant access the internet.

Any Suggestions?

Thanks.

Dudes, I followed the instructions stated here, specifically Top Speed's to remove this malware. I got myself a good news-bad news situation.

Good news

- the files, registry keys and the task manager entries have been cleared of this file

Bad News

- I noticed that my media files (mp3, wma, various movie files) changed icons, specifically the icon where there is no associated program installed to open these file types, and what's more, the windows media player icon changed form it's standard appeareance to that of a setup/install - type file, and when I try to open media player, boom! the horrid things are back...

done the stated removal procedures twice and I'm getting the same results... It seems that this program binded with my media player... what should i do about it?

Hi . .

I just got rid of the pesky little bugger myself (I think) only in my case I'm running windows ME and it was lodged in the Windows/System directory calling itself CAEGT32T.exe . . I get the feeling it uses an alphabet substitution algorithm for all these name changes. At any rate, that half blue icon and the thunderdome creator were dead giveaways, so many thanks to whomever posted that.

I unchecked that file in the startup, restarted in safe mode, deleted the file and then cleaned up the startup. So far, so good . .

Hello,

I too had a problem with the actulice pop-up
I finally found the file, in windows/system
It was called ctiveskina.exe

good luck!

From other site i searched Sabaser.exe..because it sounded strange, and it was!!!! i deleted it right now, i wait it works...the properties tell thunderdome.com, actulice, etc, so you can“t get wrong..greetings from Peru

I have ZoneAlarm Pro installed on my Win2k server computer. ZoneAlarm Pro found program actulice trying to run the following:

C:\WINNT\system32\actulice.exe
C:\WINNT\system32\axocmf.exe
C:\WINNT\system32\shtmf.exe
C:\WINNT\system32\enss.exe
C:\WINNT\system32\uicktimeQ.exe
C:\WINNT\system32\NMPAPIS.exe

Delete these files if you have them.

I found another executable in the registry named ejavohkf.exe in C:\WINNT but it might have a different name on your computer. I deleted this line in the registry and found it in WINNT folder.

Make sure to delete the actulice.exe file in the WINNT folder.

It doesn't hurt to install Adaware and update the reference file then run it.

GOOOD LUCK...

I am running XP Pro and managed to join the actulice club last night (21 May). I had the usual message boxes but on my system it also tried to connect to the internet every time it popped up, even though I had disconnected manually as soon as I received it.
I have Panda antivirus titanium installed, ran a complete system check but failed to find a virus. Spybot also failed to get rid of it, as did Window Washer. Like most people I found it residing in system 32 but could not delete the little f*****. As I am not that computer literate, response 36 by Anssi filled me with hope of an easy fix and it certainly appears to have worked. Well recommended. Good work fella! And a special thank you must go to "thunderdome" for giving me a late night headache and a free membership to the U.K. chapter of this exclusive club!

I have followed Chris (no.43) and Kyurei (no.25) advices and get my Win 2000 free from this annoying bug.

But I got a little problem while deleting the bug, appears that it has ability to "runaway" while I was attempt to deleting it.
I try to delete it(r549b.exe)at place (without moving it), the windows says it couldn't be deleted because used by the system, then the file just dissapear, and change to another name(mload"something".exe), but thanks for Kyurei it still have a same icon, so I move it, delete the file and the running registry (this one also has changing names).

And for ashcrimson0083 (no.52), I almost got the same problem, appears the actulice has hijacked my WMP player (ver.9), when I try to running it, it says that the system has error and offers to reinstall it, so just uninstall completly any programs that change to setup program from add/remove program (at control panel), you can reinstall it later.

What a happy bug....

For Windows 2000.
Thank you Koyurei!
I did a File or Folder Search for text containing none other than "Actulice" and behold, the ennoying, whatever you want to call it, file appeared.
(2 Files, both in c:\winnt\system32, about 68kb in size)
1)Search text for "Actulice"
2)Verify these are the files through properties. (Original file name "Actulice", from Thunderdome.) DON'T CLOSE THAT SEARCH WINDOW
3)Press Ctrl/Alt/Delete
4)Match the name/names of the searched/found files to the files on the processes tab.
5)Right click the matching files from the processes tab listing and select end process.
6)Then go back to your search window and delete the file/files.
Last)Empty your recycle bin!
This seems to have worked for me.
Good luck.

The question was asked, but never answered: so what does this little bug DO? Other than having the pain of having it pop up, what's the problem? I read all this crap about how to deal with it (won't someone just make a patch eventually?) and my brain swims....

so what's the cost or potential cost of doing nothing?

a firewall sometimes is usefull:
zonealarm pro detects the files that actulice uses

so, just install zonealarm, block those files, go to the directory that zonealarm provides for you and delete the 'whatever-its-name-is'.exe's. (you may have to terminate it first from memory in Task Manager)

Carpe Diem.

I just got rid of the actulice pop-up. Here's how I did it and I can assure you, this will work for you whoever you are and regardless of what OP system you are running. Go to your start menu. Select run. Type msconfig and hit enter or OK. When the window opens, select the start up tab. Then what you want to do is maximize this window. If the list of files is short enough to fit your entire screen, hit the print screen button. Now open Word or whatever word processing program you are running. Once your word window is open type ctrl+V. This will paste the file list from the start up window into word. Now you can print the list. You can also just write down the list of files from the start up window if it is short enough of if you cant figure out how to print the screen.

Now exit and quit everything and restart your computer. Go back to the start up tab using run msconfig and compare the files in your start up list. One of the names will have changed. Uncheck the box next to that file. Select apply and OK. Write down the name of the file. Restart your computer. Now go to start, find, files, and type the name of the file you found. When your computer finds it, delete it and then also delete it from your trash bin. Close all actulice windows or say OK and restart. It should be gone. By the way, the name of my file was BAR332V.exe located in C:\Windows\System\BAR332V.exe. Your file will probably be called something else but it doesnot matter, just follow these instructions and promise you will be happy.

How do you keep from getting this again? I have "modF" not "No modF", does that make a difference?

Most important of all:
Does this "actulice" pop-up do more than make annoying pop-ups?

Flak

just another tip to try, Worked for me
Start,run, msconfig, Click startup tab and look for any file name with "32" in it. uncheck the box. go back to Start, run, regedit, click (+)on HKEY_LOCAL_MACHINE, click (+)on SOFTWARE, click (+)Microsoft, Click (+)windows, click (+)CurrentVersion, click (+)explorer, and delete folder named "PUP". Reboot your computer. if it works go back to msconfig and write down the file name you unchecked. Do a find file on that file name and delete it. Happy hunting

Jumante

in startup tab (start, run, msconfig,startup) uncheck autoenrp.exe and it should stop.. Accept startup window changes and reboot. Good luck.
JMB

Arissi's Response 36 stops this little bugger from popping up in XP by taking it out of the startup BUT it does not remove it from your computer!!!! It just sits there docile.

I did the *.exe search and sorted by date and found 4 files with that familiar icon that had been created within the past 6 weeks. The most recent ones had "Thunderdome" in the Properties>Version>Value, but older ones had TotemPole instead of Thunderdome.

Here's what I had to do to get rid of it:

I'm running Windows 2000 with Office XP.

I found "actulice.exe" in the C:\WINNT directory. I searched for a light blue file icon that appears with the popu in the C:\WINNT\System32 directory and found the file "insevntw.exe". File was 68KB, created on May 19, 2004 10:52:00 AM and modified on May 12, 2004 10:52:00 AM. This file is unique to my system. The file get's renamed so you have to find the one with that particular icon. Leave the search windos open.

I opened Task Manager, selected "insevntw.exe", then clicked "End Process". I went back and deleted both "insevntw.exe" and actulice.exe". I also searched the registry for "actulice" and deleted the entry there. Finally, I ran Adaware 6 (do the update since it was last updated May 13, 2004). I deleted all the files it found.

After this, Media Player would not start. I got a popup saying istallation could not be completed. I uninstalled Windows Media Player, then deleted all files. Five files in the "Windows Media Player" directory would not stay deleted. They would reappear everytime I backed out of the directory and went back in. I rebooted, then downloaded the latest version of Media Player and installed it.

I haven't seen the popup again yet. I've got my fingers crossed.

The only destruction I've noticed is that it renders Windows Media Player useless. Other than that, it's just very annoying.

Good luck and I hope this is useful.

webdevmb
Colorado Springs, CO

i tried what yadirf said to do and my file was sdamg9xm.exe and the date modified was 5/13/04. just around when this started so i deleted it and no problems so far

I fully agree with Webdevmb (response 67). I run as well XP and noticed the prob this morning trying to open mp3 files with wmplayer.

In windows\system32 was a 68 Kb file called "svcrt40m.exe" (by thunderdome), which was at the same time an active process in the startup tab. Furthermore, there was as well ONLY one file (165 Kb size) in the same folder with the date of today: bdl14026.exe. I deleted both, even from the bin and ... voilą... no more pop-ups for the time being, BUT the wmplayer is still not active. This is an additional problem.

I`m sure I need to complete the wmplayer un-install, delete and new install suggested by 67.

Good luck to all and greetings from Madrid, SPAIN.

Andy.

none of your advice worked for me but it set me on the right track i did this

open my computer
open drive c
open windows
open system32
leave this open
open run on the start menu
type msconfig
click ok
click on the start up tab
go back to system32
look for the actulice boxes
look for the name under the actulice boxes on the start up tab
un tick it's box
there will be many of these so do it for each actulice icon in systems32
once your sure there all unticked restart the computer
if the pop up returns all actulice files on the start up tab are not unticked
if no pop ups appear go back to systems32 and delete all actulice icons
empty recycle bin

you should now be actulice free

I just got rid of actulice following the advice of responder #25. I would add just one useful suggestion: When you arrive in the system 32 folder, go to VIEW to arrange the icons by modified. The culprit file(s) --as described below-- will appear among the most recently dated exe files.

*************Anyways -

go to "my computer"
and into "c drive"
into your "windows folder"
then into "system 32"

look for an rectangle icon with a light
blue top, it should look exactly like the one on the actulice pop-up.

now you know the name of it !!

press "crtl", "alt" and "del"
and disable that program

then delete it from your system32 folder ************

Thanks PRIMETIME,

found the little devil at bottom of system32
it's gone now finally

Hi everyone,
I'm a desperate PC user with a "actulice box"
in my face everytime a start my computer.
I run on XP Please can someone walk me trought step by step also hanging a lot
thank y

There are like 100 "little blue boxes" that look like the actulice window... how do I know which one to delete? Thanks again, this this surpassess annoying and goes far into hair pulling.

There are like 100 "little blue boxes" that look like the actulice window... how do I know which one to delete? Thanks

look for a box that look like all others but his more a light blue

Have Fun there his about 1000 files

Hi everyone,
I'm a desperate PC user with a "actulice box"
in my face everytime a start my computer.
I run on XP Please can someone walk me trought step by step also hanging a lot
thank y

I think I just got rid of it.

I tried taking a peek at the start up list and