Printable View
I have a box keep popping up when using the laptop. It says I need to run a registry cleaner and to access it from www,fix64.com.(I have used a comma as the forum is opening a link) Is this kosher or have I picked up a virus?
Any feedback would be appreciated as it will not go away and pops up every couple of minutes.
Trev - Team Mouse
Sounds like a virus.
--
Mike
http://www.bobblebot.co.ukhttp://www.bobblebot.co.uk
http://www.antweights.co.ukhttp://www.antweights.co.uk
thats a spybot programme i think, im sure when ive run my spy bot programme that its checked for that.
I agree with Bex, tis adware for sure. Run either microsoft defender or adaware personal (http://www.lavasoft.comwww.lavasoft.com).
Trevor ...Pop along here .....http://free.grisoft.com/doc/1http://free.grisoft.com/doc/1
Download AVG Anti-Spyware Free ......It should get rid of any spyware floating around in your puter.
I use Spybot http://www.spybot.info/en/http://www.spybot.info/en/
and run Cr@p Cleaner regularly http://www.ccleaner.com/http://www.ccleaner.com/
(Message edited by woody on March 28, 2007)
yeah Grisoft is good thats what i use also, but might not pick it up.
Woody - thanks for the reply
Ed - I think you are right
Ran spybot and AVG spyware. AVG found a possible culprit - a file I found from msconfig, startup - as a trace but did not say what could be done.
AVG also found a logger as I logged onto the forum site, so anyone reading this might find it prudent to run their spyware ASAP.
BTW - the popup is still there but only once every 15 mins or so. Also noticed that the web address it advocates is different every time so it is definitely malicious.
Trev
I used to have AVG but it has alot of problems with its detection and removal of things, i wouldnt rate it myself, I once removed something one day done a second check to make sure it had gone and it had, also not been on the internet, disconnected it and the next day ran AVG and it was back, I run spyware blaster along side spybot and find it works pretty well, never had that many problems in the three years ive had this laptop
Ive had this before, i think the solution was to remove IE the computer (from control panel), the run scans etc. Then reinstall IE, cos I think it is embedded in IE.
Otherwise, I will email you a program called HiJack This, which is very usefull but only if you know what to look for. I can help you with this if you want.
Update
AVG has found it - I think.
It was called a trojan.obfuscaber.en. Apparently it masquerades as a useful programme but does nothing of the sort.
Trev
Update 2
It is still there - it pops up with a bing now - its either scared or angry.
Ed - the programme is embedded in msconfig, startup and rewrites itself every boot-up - if you can e-mail that programme I would be very grateful.
Trev
Done
You could give this a whirl....
http://bughunter.it-mate.co.uk/http://bughunter.it-mate.co.uk/
Try googling toolbarcop. There is a lot of good info at castlecops.
I use Avast anti-virus software on my laptop (http://www.avast.comwww.avast.com) Theres a free version of it to download for home use - since getting my laptop in October 2005, Ive had ONE warning about a virus message, nothing else.
It also runs a boot-time scan when you first install it, so when you next turn your PC on, itll run a scan as part of the booting process, find any crud in your system and get rid of it.
Trevor,
I think Ive had that! If I have, Ive in fact had 4 different companies version of the sods!
The message box uses the (normally redundant) network messaging program (used by admins to inform about updates/repairs to linked computers.) that comes with Windows since NT.
Other than that and its influence on the registry theres probably nothing wrong with your registry.
Hope this is of use here. Quoting MS help:
Stop receiving pop-up ads that have the title Messenger Service If advertisements open on your computer in a window titled Messenger Service, your system might not be secure. Although the name is similar, these messages€â€which are sometimes called messenger spam€â€are not related to Windows Messenger, MSN Messenger, or other instant messaging programs.
Disabling instant messaging programs is not necessary and will not prevent Messenger service spam. To help protect your computer, you should enable Windows Firewall (or a firewall of your choice) and also make sure that the Messenger service feature in Windows XP is disabled.
To disable the Messenger service feature in Windows XP
You must be logged on as an administrator or a member of the Administrators group in order to complete this procedure. If your computer is connected to a network, network policy settings might also prevent you from completing this procedure.
Open Services in Administrative Tools.
Double-click Messenger.
In the Services list, double-click Messenger.
In the Startup type list, click Disabled.
Click Stop, and then click OK.
Ceri; Exactly, to the letter.
Ed; scan log sent - I await your reply.
Woody; Thanks, I will work my way thro those progs after I have sorted this.
Trying Ceris advice now......
And thanks to everyone for their input
Trev:uhoh:
Sorry to be a bore, but when accessing user accounts - to find admin tools - there is another user account called ASP.NET with a password. Is this normal?
BTW Ceri - instructions AOK and hopefully it has worked. Many thanks again.
Trev
ASP.NET is indeed a seperate user account. Leave that one alone, it is fine.
Ceri I am fairly sure that if you have service pack 2 for XP the the messenger service is automatically disabled.
Trev - you have email.
Tried Symantec lately? Its a good online virus scanner. :) Though it doesnt get rid of viruses. :lame:
Spyware doctor is pretty good
how about going in http://www.zonealarm.comhttp://www.zonealarm.com ? You can even try their free trial full version for either 15 or 30 days (im into freebies)just a thought...
If you like free stuff, try out a completely free virus killer (I use this one at home)
http://free.grisoft.com/softw/70free/setup/avg75free_446a991.exehttp://free.grisoft.com/softw/70free...ee_446a991.exe