POP UP from Messenger Service

I have no pop ups when I surf the internet.... BUT I have this annoying window that always pops up while i am online. It is from the same place "Messenger Service" althought they always say different things. I walk away from the computer and come back to have a stack of them I have to X out of. They say I have critical errors, or a corrupted registery...etc. to go here and download a program to scan my system. It could be fixregistry.com, scanmyreg.com or others. I tried to copy and paste the last one, but it won't let me, to show what it says. Yesterday I installed the same operating system in my mother n laws computer....XP professional edition. When I logged her on the internet... she is now getting these. Where do I look to stop these?
Thanks
Gina

 

Go to control panel/Administrative tools/ services scroll down to Messenger, double click and set to disable.

 

thank you
I didn't think it was part of my system, I did a search and nothing came up. I thought somehow I picked up something from the internet. By the way... is that related to MSN Messenger also???

 

No, it's to send messages over a network. Usually only used by businesses.

 

You may have picked up a bug. Those pop up messages are from Windows Messenger, you may have installed a rogue application that is sending you those messages. What do you have installed for Anti-Spyware applications?

 

I have no anti spyware software installed. Only Norton internet security professional.
I get no spam email, or ads ever. My dial up sends me a quarantine file with all the spam. i usually just delete it. Other than that, should I install a anti spyware? I thought that was just for like making sure someone isn't monitoring the system with a keylogger, etc.
Thanks for all the help

 

If you were getting pop-ups from Windows Messenger, then your system is infected.

Please follow the steps below:

- Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis:

Downloading, Installing, and Running HijackThis

You'll also want to read this thread How to Protect yourself from malware!.

Once you have completed the above post back in the Spyware Specific forum.

 

Just to clarify, Always_Enuff does your spam look like this ? If it does, then I still say my advice stands. Let us know if stopping the Messemger service stopped the spam. The link shows a Netsend message.

 

Yes, disabling the service will stop the pop-ups. That doesn't change the fact that AlwaysEnuff shouldn't have been receiving them in the first place. If you are receiving Windows Messenger pop-ups then the system is infected or has a rogue application installed. Either way a full system scan is in order here.

 

I would also strongly urge you to follow Shadow's advice in post #7.

If your system was secure, you would not have this problem.

Disabling Messenger Service will stop the pop-ups, however, you still need good security.

 

A full scan is always good. I enabled Messenger service about 4 hours ago and I haven't had any pop ups. I have my XPP fully uptodate and I'm running AVG and ZA free. One of those has to be blocking them though I don't know which. I remember getting them a long time ago before SP1 and disabling the service worked for me. I had no nasties either. Perhaps AlwaysEnuff needs to be patched?

 

Perhaps.

 

Yes.... It looks like that... But does not say the same thing. I disabled it, and it doesn't come up again. But every so often it enables itself all over again. LOL!

THANK YOU SO SO MUCH

(All of you)
I so love this site!

 

I WILL take advice of all! Can't hurt anything... right????
Thank you!

 

That is a GOOD sign that you have some sort of malware/spyware, etc. on there that is periodically messing with your settings!!!

That being the case...I too, STRONGLY recommend you follow Shadows advice!!

Roger

 

I rebooted my computer and logged back online. The messenger enabled itself again... SOOO, I am going through all the steps directed to me.
It will take a while....(a year or so...LOL) Well.... after all these download, I may not be able to do anything to late late. It is noon already here.
I will be back once I have done all required things.

 

Okay. You are definately right, and I have overlooked this way too long. Now.. First things first. I am in the middle of following all the steps to what the sticky list says.
In the middle of a download I got this message window. "System shutting down..blah blah blah.. save all.... Intiated from NT Authority/System
Remote procedure RPC service terminated unexpectedly.

OKAY.... maybe you also should know this while I am scanning my system.
I was out of the country for about 6 months. I left my PC with a trusted friend... HA!
When I got it back, there had been extra partitions... AND now I have a screen when it boots up in black that says this:
WARNING! Dell's disk moonitoring system has detected that drive 0 on the primary eide controller is operating outside of normal specs. It is adverable to immedately back up your data and replace your harddisk drive by calling your support disk or dell computer corp.

F1 to continue

When you hit f1 it goes to a operating system menu with windows xp options. There are two the same. You have to go in on the first one, or system won't boot.
The second one has been partitioned with 8mb and that is it.

This really is A Problem..... I guess I should have mentioned this with the pop ups.......
I have to contunue downloading now.. hopefully I don't shut down again, OR do a DEATH screen memory dump.

 

We can deal with the extra parition and OS install at any time, that is actually a fairly simple fix. The System
Remote procedure RPC service terminated unexpectedly is a bit problematic and will have to be dealt with at some point. Removing the infections may help.

 

Here we go:
The messages do not come up anymore. My antispyware program brought up atleast 25 and fixed them, deleted.
I used Microsoft anti spyware... the spybot search and destroy wouldn't go anywhere unless you updated. Unfortunately it updated but said it was not sucessful. Errors.
I went to bitdefender.com and (you won't believe this, cuz I have norton) 16 viruses, and 92 infected files. 90 were deleted. Didn't say what they did with the other two.
WOW..... I was always doing scan with norton and nothing came up. That blew me away.

 

Spybot gives some difficulties updating via the first time run wizard. Try exiting the app, going back in, and using the update button in its gui.
And as for your viruses, most people will believe it, beacuse alot of people, including myself don't rate NAV all that highly. I recommend you research some nice free alternatives like AVG or Avast. There are a few available on this site.

 

in the past 45 minutes I have received atleast 45 ads. I never receive ads. I have this stuff active that I got from here. Unfortunately, I did another scan and have more trojans that can't be deleted. I tried manually deleting them and they wont' go away. Not to mention this address bar under my IE bar I didn't ask for.
I am now thinking I worked better WITH problems.
In my files, they are fading away. This is bad.

 

Keep plugging away at the malware removal thread. It WILL do more good than harm. If you complete it, and still have a problem, post in the spyware specific forum. Chaslang is one smart mutha (shut your mouth), and I almost guarantee he will be able to help you. There's also a thread there dedicated to protecting yourself from malware that I would recommend that you follow, so that these kind of problems don't happen again.

Don't let a nasty infection 'cause you to lose faith in the geeks.

 

You need to precisely follow the steps outlined in the Spyware Forum.

Simply scanning with a few programs won't work, and you need more than one spyware program.

Read the stickies posted, and religiously follow the recommendations.

 

Also...read the sticky on how to protect yourself in the future!! Otherwise...when you do get it all cleaned up, a few days later you will be right back to where you started!!!!

Roger

 

Alrighty Then!
Its amazing how After I went to Microsofts website and was considered unvalidated... I ended up getting pops up by microsoft out the A**!
Anyways..... during my scanning, and deleting... etc., I found that everytime I got onto IE, I didn't go anywhere. Nothing would delete either.
I looked in my C: drive and saw my folders turning transparent on me. Imagine that!

Computer did a complete shut down, and wouldn't boot back up.
Thank heavens I was equipped with Partition Majic, and some other goodies.
I took care of the partitions, Now have one. I reformatted it completely, and reinstalled every clean.
Right now, I put a temp NAV in that comes with a new computer just so I can download one from here. It is downloading now... I can install in morning.
Been a long Day and Night.... Thanks ALL YOU are all wonderful!
And my friends think I just know this stuff.... LOL! (Don't tell)
Gina

 

All you need now is a MajorGeeks T-shirt and glasses.

 

Well....... Maybe I will Just go and order some!!!! LMAO!

You made my morning!

 

Don't forget a Firewall!!!! I prefer Sygate Personal Firewall, myself...but being that Symantec (Norton) just bought them out...I don't know how much longer the free version will be effective!!!!

But...if it helps any...here are the links to a couple ggod ones!!!!

Sygate

http://majorgeeks.com/Sygate_Personal_Firewall_Free_d3356.html

Zone Alarm

http://majorgeeks.com/ZoneAlarm_Free_d388.html

Hope that helps!!!!

Roger

 

Just finished windows update. Now working on spyware downloads, AND Okay... a firewall.... Thank you!
I am going through the steps listed in a post on the spyware thread.
I don't think I can do it all, I am getting a bit PC burnt in the past 24 hours.
Again thanks!