Jasper
|
| posted on 3/5/04 at 11:54 AM |
|
|
Irritating Pop-Up - help!!
I've got ome insidious bit of b*llocks on my machine that gives me a pop-up whenever I open a new new page, it's for a Time Life video of
Mike Myers, and it's driving me nuts.
Ad-aware (basic version) finds it, and will delete the entry, but as soon as I open a new window, back it comes. Google tool-bar adblocker hs no
effect either, and Window Washer doesn't find it.
What can I do?
|
|
|
|
|
Peteff
|
| posted on 3/5/04 at 12:55 PM |
|
|
Buy the video!!!
Is it malware which enters a registry key? It will keep reappearing until the entry is deleted. It could be using a feature in windows to come back.
Look on here.
http://grc.com/stm/ShootTheMessenger.htm
yours, Pete
I went into the RSPCA office the other day. It was so small you could hardly swing a cat in there.
|
|
|
Jasper
|
| posted on 3/5/04 at 01:10 PM |
|
|
Yes, it is a registry key according to Ad-aware, but I have already got rid of Windows Messenger Service, so it's not using that to run.
Any other ideas????
|
|
|
Peteff
|
| posted on 3/5/04 at 01:41 PM |
|
|
Do you use system restore because that can reenter stuff you remove from registry. I helped a mate to get rid of dropper on his xp home the other day,
had to disable restore to do it. Windows me has it as well as xp. Disable restore then remove the entry and restart with it still disabled and check
if it's there again. Some are very devious and get back in by renaming themselves every startup so you can't find them.
yours, Pete
I went into the RSPCA office the other day. It was so small you could hardly swing a cat in there.
|
|
|
Surrey Dave
|
| posted on 3/5/04 at 01:47 PM |
|
|
I had a similar thing the other week it kept reinstalling itself , even though i deleted the registry key.
If you cant remove it successfully you can find the file it is using ( .dll ,.htm, etc ,easier said than done!) and edit the file so that it is
blank , then although the pesky program executes it doesn't do anything.
in my case that worked until Adaware fortunately did un update that took the little bugger out.
Just out of interest these little execute files always seem to live in the windows system folder and be around 64kb ,so you can arrange the files by
size and see if there's anything unusual, mine was called pup.exe ,which sounds logical considering what it did!!!!!!!!!!
|
|
|
Jasper
|
| posted on 3/5/04 at 02:59 PM |
|
|
Still no joy, too many .dlls at around 64kb to try deleting any, none with obvious names, trying doing what ad aware suggests, that did nothing
either.
Tried the System restore stuff, didn't work.
Can't find the file to edit as I don't know what it's called or how to do it!
Thanks anyway chaps...
|
|
|
flak monkey
|
| posted on 3/5/04 at 03:08 PM |
|
|
The attached file gives a list of all running processes on your computer and allows you to get rid of registry keys and files that are causing
problems. It gives you a brief description of each file to allow you to decide if its crap or not.
Mind you be careful what you delete! As once its done you cant get it back...
Hope it helps, it worked for me when i had the same trouble...
Cheers
David 
Sera
http://www.motosera.com
|
|
|
Jasper
|
| posted on 3/5/04 at 03:29 PM |
|
|
Thanks David
I'll send a log file to our web site builders who will know what's safe to delete.
|
|
|
flak monkey
|
| posted on 3/5/04 at 03:40 PM |
|
|
No problem, just hope it solves your problem
Cheers,
David
Sera
http://www.motosera.com
|
|
|
Hellfire
|
| posted on 3/5/04 at 05:05 PM |
|
|
Dave - that hijackthis program is a killer! Lot's of cr*p in the system registry now deleted! THANKS!
|
|
|
flak monkey
|
| posted on 3/5/04 at 05:59 PM |
|
|
Heres another program for you. Its tells you everything that runs on startup, where it is etc. But its all manual removal, you have to delete the
files with this one....
Hijackthis is very useful, it came from this webpage...which appears to be down at the moment....
http://www.spywareinfo.com/~merijn/downloads.html
Cheers,
David
[Edited on 3/5/04 by flak monkey]
Sera
http://www.motosera.com
|
|
|
Peteff
|
| posted on 3/5/04 at 06:16 PM |
|
|
Registry pruner
I've used this program for a while, it finds entries left in registry by programs you've removed and is easy to use.
http://www.karenware.com/powertools/ptpruner.asp
I put stuff on and take it off all the time and not all uninstalls work as they should
yours, Pete
I went into the RSPCA office the other day. It was so small you could hardly swing a cat in there.
|
|
|
