Hope you had a nice Easter. Unfortunately, I still have problems. I've tried every little thing that you suggested (i.e. firewall stuff, & Ad-Aware changes) and nothing has knocked it out. I'm still using "Zone Alarm" though & will probably continue to do so. Minor thing though (with "Zone Alarm")is that it slows my system down a little (online & offline). Since my computer only throws about 4-5 pop-ups at me when I first log onto the web, I don't think that it's worth all the trouble of wiping out the hard drive just to get rid of it. What do you think? And also, do you have any other ideas? Thanks once again!
Sincerely,
Ron
-------------------------
Followup To
Question -
Hey Lorry,
I'm a little confused when you say "Messenger Service". Do you mean "Windows Messenger"? If so, I have that installed but, I've never logged on to it. I never use it because of so many possible viruses picked up with using it (even though I do have Norton Antivirus).
Sincerely,
Ron
-------------------------
Followup To
Question -
Hello once again Lorry,
Please forgive my persistent bugging but I'm really trying to resolve this problem. I found, downloaded, and installed that "Zone Alarm". It's been picking up a few things trying to invade my system but, it did not take care of those initial pop-ups on entrance to the web. Other than reconfiguring and rerunning "Ad-Aware" do you have any other ideas? I also wanted to take this time to compliment you on your computer savy. You REALLY know what you're doing! You should be proud. Do you work in this field though? Please let me know about the problem discussed above.
Sincerely,
Ron Reynolds
--------------
Followup To
Question -
Hello Lorry,
Ron Reynolds here again. Hopefully for the last time...huh? :) I greatly appreciate your VERY detailed help but, I think I'm going to just hold onto this information for now. It appears that after the last scan & fix that I did with "Ad-Aware" it may have helped some. I have a cable modem. I always leave my computer online (obviously), but I always log off my computer when I am done with a session. When I log back on & first get on the web, I have 4-5 pop-ups appear one every about 30 seconds & then the pop-ups quit. I can live with that now. Don't know the explanation of this but as the adage goes (which I've learned to believe in), if it ain't broke, don't fix it!). :) The only thing you didn't address though is if you know how to wipe the hard drive in Windows XP (as I explained below). I'd like to know this for future reference so I don't ever have to take my computer in to be fixed again. Thanks so much again!
Sincerely,
Ron Reynolds
------------------------
Followup To
Question -
Hi again Lorry,
I've gotten a very severe problem now & need your help bad! I evidently have picked up some adware on my computer. I have used the freeware programs "Spybot" & "Ad-Aware" on it & have deleted many problems off my computer, but have not knocked off the pop-up adware that is plagueing me. Are there any other adware killers out there (freeware or commercial) that I can try that would help better or have I done just about all I can as far as trying to wipe it out, with an adware killer, already? I have found recently though that the adware seems to be very inconsistent. It throws a few pop-ups at me & then takes a long time before I get any more thrown at me. I'm really getting confused! Also, if it comes down to having to completely wipe my hard drive, how do you do it with Windows XP? XP is not like Windows 98 where you can restart the system in DOS mode. I've heard that XP doesn't essentially even have a "DOS". Please make sure to answer all of my questions. I know I threw a lot at you, but I really do need serious help. Thanks again in advance!
Sincerely,
Ron Reynolds
Answer -
Hi Ron,
When you ran Ad-aware SE, did you do the following?
Check for updates before running program. Then follow the directions here to do a full scan:
1. If you have a previous version of Ad-Aware installed, during the installation of the new version you will be prompted to uninstall or keep the older version - be sure to uninstall the previous version.
2. After installing Ad-aware, you will be prompted to update the program and run a full scan. De-select all boxes so that it does not run.
3. Manually run "Ad-Aware SE Personal" and from the main screen Click on "Check for Updates Now".
4. Once the definitions have been updated:
5. Reconfigure Ad-Aware for Full Scan as per the following instructions:
* Launch the program, and click on the Gear at the top of the start screen.
* Under General Settings the following boxes should all be checked off: (Checked will be indicated by a green circle with a check mark in it, Un-Checked is a red circle with an X in it. If it is greyed out, those features are only available in the retail version.)
o "Automatically save logfile"
o Automatically quarantine objects prior to removal"
o Safe Mode (always request confirmation)
o Prompt to update outdated confirmation) - Change to 7 days.
* Click the "Scanning" button (On the left side).
* Under Drives & Folders, select "Scan within Archives"
* Click "Click here to select Drives + folders" and select your installed hard drives.
* Under Memory & Registry, select all options.
* Click the "Advanced" button (On the left hand side).
* Under "Shell Integration", select "Move deleted files to Recycle Bin".
* Under "Log-file detail", select all options.
* Click on the "Defaults" button on the left.
* Type in the full url of what you want as your default homepage and searchpage e.g. http://www.google.com.
* Click the "Tweak" button (Again, on the left hand side).
* Expand "Scanning Engine" by clicking on the "+" (Plus) symbol and select the following:
o "Unload recognized processes during scanning."
o "Obtain command line of scanned processes"
o "Scan registry for all users instead of current user only"
* Under "Cleaning Engine", select the following:
o "Automatically try to unregister objects prior to deletion."
o "During removal, unload explorer and IE if necessary"
o "Let Windows remove files in use at next reboot."
o "Delete quarrantined objects after restoring"
* Click on "Safety Settings" and select "Write-protect system files after repair (Hosts file, etc)"
* Click on "Proceed" to save these Preferences.
* Click on the "Scan Now" button on the left.
* Under "Select Scan Mode, be sure to select "Use Custom Scanning Options".
6. Close all programs except ad-aware.
7. Click on "Next" in the bottom right corner to start the scan.
8. Run the Ad-Aware scan and allow it to remove everything it finds and then REBOOT - Even if not prompted to.
9. After you log back in, Ad-Aware may run to finalize the scan and remove any locked files that it may of found. Allow it to finish.
You'll be amazed that running a full scan finds - I was.
Have you checked for viruses? Go to: http://sarc.com/ Scroll down and click on,"Free Online Virus and Security Check" Write down exactly anything it finds, then return to: http://sarc.com/ and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually.
Hope this helps!
Lorry
Answer -
Hi Ron,
I'm sorry I didn't address that problem, please forgive me, didn't do it intentially. Please see the following for information:
Regarding the pop-ups when you first start the computer, the following is from a Kim Komando newsletter:
Messenger Service should not be confused with Windows Messenger, an instant messaging system included in XP. Disabling your instant messaging service will have no effect on this problem.
This problem hit the radar screen less than a year ago. It continues to grow. Victims, like my friend, are swamped with ads. Most have no idea what hit them.
Several companies are selling software to facilitate these attacks. Spammers use it to sniff hundreds of thousands of computers. When it finds a computer with an open Messenger Service communications port, the software requests the computer's name. It then sends the spam to the computer, and the machine displays it.
One spam my friend received was a solicitation for software that would block the spam. That's right; he was being spammed for a product to block the spam. But the truth is, the spam is easy to block with settings in Windows. You don't need to buy software.
One way to block the spam is to turn off Messenger Service. To do that:
--In Windows XP, click Start>>Control Panel
--In Windows 2000, click Start>>Settings>>Control Panel
In both versions:
--Double click Administrative Tools
--Double click Services
--Double click Messenger
--Under Service Status, click Stop
--In the box next to Startup Type, select Disabled
--Click Apply>>OK
Alternatively, you can download a small program that will disable Messenger Service. Called Shoot The Messenger, it's available at http://grc.com/stm/shootthemessenger.htm.
Problem is, you could conceivably need Messenger Service. Some anti-virus programs use it to send warnings, for instance. So rather than turn it off, I recommend that you use a firewall. Firewall programs block access to communications ports. You then configure the firewall to accept the programs you want to use.
My favorite firewall is ZoneAlarm (http://www.zonelabs.com). Just download and install it. ZoneAlarm is free for personal use; Zone Labs charges $40 for business use.
Windows XP also includes a firewall that will stop Messenger Service spam. I don't usually recommend the Windows firewall because it does not stop outgoing messages. That's a serious shortcoming. Intruders today will try to plant programs on your system that send messages back to the Internet. They can be used to steal your passwords and other sensitive data. However, the XP firewall, called Internet Connection Firewall, will stop Messenger spam. It can be configured with a few clicks. Here's how:
--Go to Control Panel
--Double click Network Connections
--Right-click the connection you want to protect
--Click Properties and select the Advanced tab
--Check the box under Internet Connection Firewall
--Click OK
According to Microsoft, you must have Service Pack 1 installed in XP to make this work. To check for Service Pack 1:
--Click Start and right-click My Computer
--Click Properties
--On the System tab, check the Windows XP information.
If Service Pack 1 is not listed there, it is available on the Microsoft site (http://www.microsoft.com). It is a free 30-megabyte download. It is also available on CD for $9.95.
You should be running a firewall regardless of the spam problem. There are a lot of dangers on the Internet. A good firewall will protect you from many of them. Microsoft does not view Messenger spam as a security threat. So it is unlikely to change the default configuration of XP to block it. It is up to you to take care of this problem.
Hope this helps!
Lorry
Answer -
Hi Ron,
Did you disable the Messenger Service? Another thought, you might want to download Micorosofts Windows AntiSpyware, check it out at:
PS - Thank you for the compliment. To answer your question, do I work in this field, not really - sometimes but not really.
Answer -
Hi Ron,
Messenger Service should not be confused with Windows Messenger, an instant messaging system included in XP. Disabling your instant messaging service will have no effect on this problem.
This problem hit the radar screen less than a year ago. It continues to grow. Victims, like my friend, are swamped with ads. Most have no idea what hit them.
Several companies are selling software to facilitate these attacks. Spammers use it to sniff hundreds of thousands of computers. When it finds a computer with an open Messenger Service communications port, the software requests the computer's name. It then sends the spam to the computer, and the machine displays it.
One spam my friend received was a solicitation for software that would block the spam. That's right; he was being spammed for a product to block the spam. But the truth is, the spam is easy to block with settings in Windows. You don't need to buy software.
From a Kim Komando newsletter
As long as you have Norton AntiVirus installed, Run a LiveUpdate every week and run a virus scan after LiveUpdate you should feel free to use any instant messaging program you want. As usual though, don't download anything that you're not sure of.
Yes, you want to disabl;e the Windows Messenger Service as explained earlier.
Hope this helps!
Lorry
Answer Hi Ron,
I'm surprised that disabling Windows Messenger didn't do the trick. The only other thing I can think of is for you to take a look at what PC WOrld says about spyware at:
Yes I did have a nice Easter thank you. I couldn't be with my family but I had lunch/early dinner with a very good friend of mine. Hope you had a happy Easter also!
