popups on desktop every minute HELP!!!

[Prizmm]

okay, very angry. I somehow got something installed that pops open a different popup message on my desktop. We are on a LAN(always on conn.). I have searched the registry, Dl'ed and installed 5 different popup/adware/registry programs and nothing is stopping it. I cant find anything in startup or program files or anything that even remotly resembles this type of intrusion. Anyway, its driving me nuts, please help if you have ever seen this before. Thanks in advance!

Prizmm

 

[noellees1]

Seeing as you havent named what you have tried these are in my opinon the best
Spybot Search and Destroy
Adaware 6
Run adaware (with updates first)
Then spybot (with updates)
Then Adaware agen for the fun of it normally clears things up for me.
Probbably best to disconnect from LAN first and use spybots immunize button.
I would also suggest scanning the server for virus's and with the afformentioned programs

 

[lmoe]

Also try
Start, Run, msconfig, ok
Selective Startup and see what is running there.

L.M.C.
IT/MIS

 

[Prizmm]

Thanks, my bad, I have been using:
Spybot
Adaware
Spysweeper
Registry mechanic
Norton Antivirus
and a few more I cant remember right now.
Im on a Win XP desktop, all the latest updates, yada yada.
Thanks

 

[gpalmer711]

This can be one of many things, but is most likely to be something installed with a ligitimate piece of software. The most common is GAIN supported software, developers include GAIN software with their own as a way to give the software to users for free but still gain an income. You can find a piece of software on the GAIN website that will allow you to uninstall the advertising, however you will also have to uninstall the software that was supported by the Gain software. The officially released software can be found here

http://www.claria.com/help/

however the advertising plug-in has been released to the open market so there are literally hundreds of pieces of software including this technology.

Go here for the software that will tell you if you have any GAIN supported software and if so which software it is.

http://www.gainpublishing.com/

Take a look at the section which starts "Users receive advertising" for details.

Greg Palmer

----------------------------------------
Any feed back is appreciated.

 

[noellees1]

I would check event logger and also what do these popups contain, i had some come up with XXX this and XXX that the only way i could stop them was to use a firewall, sygates good

 

[gpalmer711]

Also something else I should have mentioned is what type of message appears? Does it appear as a web page or as a windows style dialog box? If it is the latter then this is due to a part of windows XP that people have been exploiting for ages now. However this is something that is easily disabled.

Greg Palmer

----------------------------------------
Any feed back is appreciated.

 

[satrow]

Have you disabled the Messenger service? (Right-click My Computer - Manage - Services and Applications - Services)

If the problem is not there, maybe you need to use CWShredder/HiJackThis (

http://computercops.biz/downloads-cat-14.html

).

Andy.

 

[Prizmm]

they are all browser popups, everything from "sto padaware now" to "ebay homepage." the way that I am combatting them currently is using analog X's POW which is just a learner/blocker. I've dealt with gator before, and it appears not be that this time, unless they buried it pretty deep, Ill try and run the script to find it. Thanks

 

[Prizmm]

yep, used "Shredder" and "Hijackthis", also disabled the messenger the other day, crazy!

 

[scilogic]

install a firewall program and I bet it'll go away like magic. Trust me...

 

[scilogic]

http://www.zonealarm.com

 

[Prizmm]

I am on a educational network, (school system) so we have a very robust firewall. The deal is, the popup program is on my machine somewhere, becuase even when I unplug from the network, the popups still happen, or atleast try to happen, if there is no connection, then I get a 404. So somewhere in my system there is an app installed that triggers these things. I was hoping that someone had seen this before. Ill keep looking and trying differnet apps to stop them, these things are so frustrating. Thanks for all your help though so far!

 

[noellees1]

Check through your add remove programs list or get a program that monitors internet activity. You could then see what program is asking for acess

 

[nlm9802]

time for a fresh install of xp (off the network!), antivirus, spybot, adaware, and some sort of personal firewall (even xp's built in one should help).
then go online for a short time to update everything, run spybot/adaware, install security updates for xp, reboot, then go back online and restore your data if you backed anything up

 

[carrr]

You can do a reinstall if you like, but that's the equivalent of tossing a grenade at a roach that got in the house.
You could download Hijack This! (

http://mjc1.com/mirror/hjt/

), scan your machine, and post the log in forum760.
Log posting in a desktop forum, however, is discouraged.

"'Tis an ill wind that blows no minds." - Malaclypse the Younger