Pop-Up Virus

[Alphadog24]

Hey guys,

I got this Pop Up virus, more like a worm on my computer. Im pretty sure i contracted it from kazaa becuase thats where i contract the majority of my viruses from.

It pops up about once and hour and uses the system messenger as its header. An important message that cannot wait. You cannot minimize it or anything you have to keep closing it every hour. When i am playing multiplayer games on the internet, it inturups that too. It forces me to exit the game and i have to close the message then go back in the game. (Costing me a valuble 20 seconds in the game that sometimes gets me killed :d )

Anyways, i was just wondering if anyone else has had this same experience of if anyone here knows how best to deal with it. My nortons anti-virus is completely up to date but it does not detect it. And i tried hunting for it myself but its like finding a needle in a haystack, more so when i dont even know what im looking for.

*sigh*

[shawshank62]

Run this program
http://download.com.com/3000-2144-10...ml?tag=lst-0-2

and this program:
http://download.com.com/3000-2144-10...ml?tag=lst-0-1

Hopefully that will wipe out the stuff.

[Alphadog24]

I dont even go to church anymore, im a heathen now. But i just have to say praise the lord. That pop up worm was the most annoying deleted i have ever experienced. Now i can play multi-player AOK in peace

Thanks alot for the link man!

I really appriciate your help.


watch your language please

GroundZero3

[shawshank62]

no problem, welcome to techimo. hope you stick around.

[Alphadog24]

Hey shawshank,

That program you showed me found alot of spyware on my computer and removed them. But the pop up messages in question are still coming up every hour on the hour.

They display this message like.....

Tired of all these pop ups? Go to
http://www.messengerkiller.com
or another message will say go to
http://www.endads.com

They people got this worm on my computer, now they want me to pay them $29 to buy a program to uninstall it..lool

I was trying to figure out how i could report this to norton antivirus or microsoft or i dunno....somebody. Is there no one that can do anything about it?

I dont even think they are actually selling this product, got bless them if they are becuase they are really slick.
Im worried they are just getting people to go to thier websites so they can collect the I.P. addresses of the visitors and raid thier computers. I wonder if its some kind of trojan. My anti-virus does'nt see a thing.

[shawshank62]

did you download the updates in Adaware and Spybot?

Make sure you cleaned out your internet cookies and other cache, this program can do it
http://download.com.com/3000-2094-10...ml?tag=lst-0-1

[Alphadog24]

Yea man, i updated the spybot and adware and cleared the cache, and it still goes on undetected.

I pressed cntrl+alt+del when the message comes up and i traced to to the process csrss....system process. It cannot be shut down. I dont see any forseable way to stop this other than maybe reloading windows. Would be a damn shame because this is the only computer ive ever had running on windows that has had absolutely no problems. No blue screens, no freezing, no nothing. Just these annoying pop ups.

What do you think?

[AzKidd69]

go to start>> run type in "services.msc" no quotes and look for messenger service right click on it select properties then set it to disabled or manual instead of automatic.....

also since you are getting these messages you have another problem.. your netbios ports are open to the internet.. time to get a firewall installed

also you have to be logged into an admin account to do this

it's NOT a worm BTW it's an abuse of a service that is installed by default in all NT based os's that allows system admins on a network to send messages to users on the network about thenetwork status and stuff like that (also commonly abused by the more tech savvy users on a work network to harass/annoy/confuse their fellow employees)

[Alphadog24]

Cool, i was thinking about getting a firewall but i am just incredible lazy, and i suppose i've been fortunate up to now not incurring any serious attacks on my pc.

Question though....I play alot of computer games on the internet....multiplayer rts. How do i do that with a firewall installed?

Will it still work?

[shawshank62]

Yes games still work, the firewall pops up witha message, do you want to allow "XXXXXX" through, u click yes and remember this. I suggest to get Sygate

http://download.com.com/3000-2092-10...ml?tag=lst-0-1

It has more features than ZoneAlarm, and IMO does a better job, best free firewall available.