1 annoyin popup

Discussion in 'Malware Help (A Specialist Will Reply)' started by SpAzZqNK, Mar 11, 2005.

  1. SpAzZqNK

    SpAzZqNK Private E-2

    well ive fixed all my other virus problems i believe but i have this
    MediaPassK it keeps makin this popup come up and when im playin it drops me to desktop
    It says Do you want to install and run "free access ________
    Click yes - If you agree to end user license agreement and privacy policy accesible by clicking here - CLICK YES TO ACCESS THIS FREE SITE"
    Signed on 11/03/2005 5:34 pm and distribuated by:

    6247971 Canada Inc.

    Publisher Authenticity verified by verisign Class 3 Code Signing 2004 CA

    Caution: 6247971 Canada Inc Asserts that this content is safe. You should only install/view this content if you trust 6247971 Canada Inc to make that asseration.
    then when i click the "X" is says u must pick yes to continue is this safe so i can get it to shutup?

    Heres my logfile
     

    Attached Files:

  2. Turcoloco

    Turcoloco MajorGeek

    Sounds like an adware type infection, this is relatively mild and the virus scanner might not be catching. I would suggest you turn off the 'Messenger' service to prevent the service based pop-ups which could be playing a sidekick role:
    START > RUN > services.msc > on the list find and disable the Messenger.exe service

    Also scan your system with (updated) spybot search and destroy to make sure, I doubt it would come up clean but if it does using a 'Startup Manager' such as StartupControlPanel view the entries in the Window Registry startup and delete related entries.

    If you confirm the problem to be the spyware/adware infection then I suggest you go thru the stickies in the 'Spyware Specific' section to make sure your system is thoroughly clean.
     
  3. SpAzZqNK

    SpAzZqNK Private E-2

    I take it you mean stop and yea my comp is completely clean i ran various spyware/virus programs and hmmm that didnt fix it
     
  4. PhilliePhan

    PhilliePhan Guest

    According to your HJT log, your computer is far from clean! Suggest you take a spin through our Cleanup Tutorial below and then post a fresh log to see what remains for manual removal!

    I can tell you that stuff like C:\Program Files\Warez P2P Client\warez.exe is begging to keep infecting you!! It is likely responsible for your NewDotNet and a few of those trojans.


    READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan and Virus Removal

    Also, you should relocate HJT to a safer folder - C:\Program Files\HijackThis

    PP :)

    EDIT PP: I should add that, to have Spybot fix the NewDotNet issues, you first need to do the following:

    Run SpyBot and get into the Advanced mode by selecting Mode and then Advanced mode. Then select Settings and the in the left column select Ignore Products.
    In the right window pane make sure the All products tab is selected. Then in that window, right click your mouse and choose "Deselect all". Then, exit out and close Spybot.

    Then, run Spybot as directed in the Cleanup Tutorial.
     
    Last edited by a moderator: Mar 11, 2005

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds