Cannot Get Rid of Pop-Ups
|
Original Message
|
Name: Tage
Date: September 3, 2003 at 14:50:10 Pacific
Subject: Cannot Get Rid of Pop-Ups
OS: Windows 2000 Pro SP2
CPU/Ram: AMD-K6-III 500/327mb
|
Comment: Some program keeps popping up ads on my computer (not in IE), it's title is "Messenger Service". I would appreciate any help possible, thanks. Here is my hijackthis log. Logfile of HijackThis v1.96.4
Scan saved at 4:40:48 PM, on 9/3/2003
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\PackethSvc.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Norton Utilities\NPROTECT.EXE
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\Speed Disk\nopdb.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\Explorer.EXE
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\WINNT\System32\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe
C:\WINNT\loadqm.exe
C:\WINNT\wt\updater\wcmdmgr.exe
C:\WINNT\AGRSMMSG.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\America Online 6.0\waol.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Jon\Programs\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neopets.com/loginpage.phtml
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [QuickTime Task] C:\WINNT\System32\qttask.exe
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\Run: [wcmdmgr] C:\WINNT\wt\updater\wcmdmgrl.exe -launch
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\System32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} (WTHoster Class) - http://www.wildtangent.com/install/wdriver/ddc/shockwave/blasterballwild/wtinst.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D32C3BAD-5213-49BD-A7D5-E6DE6C0D8249} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{951FB8E5-D384-4F30-AA6E-1220922C6CB4}: NameServer = 64.12.107.134
Report Offensive Message For Removal
|
|
Response Number 1
|
Name: ctcnetwork
Date: September 3, 2003 at 14:54:25 Pacific
Subject: Cannot Get Rid of Pop-Ups |
Reply: (edit)Hi, You have a problem with the internal Windows messenger service, by the looks. I assume that the pop-up has an "OK" button on it? If so Right Click "My Computer" and select "Manage". Go to the "Services" section and find "Messenger"> Select it right click it and "Disable" it... Hopefully no more Pop-Ups . . Good Luck . . . :o)
 Report Offensive Follow Up For Removal
|
|
Response Number 2
|
Name: Tage
Date: September 3, 2003 at 18:37:37 Pacific
Subject: Cannot Get Rid of Pop-Ups
|
Reply: (edit)Thank you! It has not popped up again after I did what you said. =)
Report Offensive Follow Up For Removal
|
|
Response Number 4
|
Name: jpers
Date: September 3, 2003 at 22:50:13 Pacific
Subject: Cannot Get Rid of Pop-Ups
|
Reply: (edit)sheesh! I've been taking the long way around to the CM console.
Report Offensive Follow Up For Removal
|
|
Response Number 5
|
Name: dekon
Date: September 30, 2003 at 09:29:09 Pacific
Subject: Cannot Get Rid of Pop-Ups
|
Reply: (edit)Tage: Have you had any success. I am plagued with the same problem. I tried Spybot and Hijack this but I have not been able to get rid of that pop up problem. I seems that some program is hijacking IE and directing it to some site. The Popup Popper control panel just alerts me to what is happening but it cannot be averted.
Report Offensive Follow Up For Removal
|
|
Response Number 6
|
Name: ctcnetwork
Date: September 30, 2003 at 13:44:58 Pacific
Subject: Cannot Get Rid of Pop-Ups |
Reply: (edit)dekon, This particular PopUp Tage is/was getting relates to the "internal" Windows messenger Service. Try the quoted from above to turn off the messenger service:- If so Right Click "My Computer" and select "Manage". Go to the "Services" section and find "Messenger"> Select it right click it and "Disable" it... If you are still having problems try either Ad-Aware 6, or SpyBot - Search and Destroy. Both programs will help you clean up your system.. Witht SpyBot DO PLEASE RTFM! Good Luck. . . :o)
Report Offensive Follow Up For Removal
|
Use following form to reply to current message:
