Reformatted and I'm still getting adware... - Tilted Forum Project Discussion Community

-Ever- · 06-01-2005, 01:59 PM

I was recently infected with some crazy adware that I couldn't remove even after unleashing my entire arsenal of removal tricks. I decided that it was time for my few-times-a-year backup/reformat so I figured I'd go ahead and do it. I just got done installing Windows, customizing certain things, and installing just my video drivers. Things were running smoothly until I started getting adware popups already! And they're not the usual kind. They disguise themselves as Windows System messages saying that things like my system software is corrupt and I need to download patches. I did some research and thinking though and I think it's somehow the remenants of an old spyware trying to reinstall itself or something. Every time it pops up it tells me to go to a new site, for example "SPW3C.com" which is definitely a sketchy site. Any ideas how to remove something like this? How did it hang on through a complete reformat? I'll try to get a screenshot the next time it happens.

Thanks for any help.
-T

cyrnel · 06-01-2005, 02:13 PM

Nothing will survive across a format unless it's on your install disks. That isn't likely so I'd look elsewhere first.

Which version of Windows?

If you don't think you've browsed enough to invite problems then you may just be seeing Messenger windows. What do they look like? Edit: Guess you already said they look like system windows. That definitely sounds like Messenger.

Just in case, run "services.msc". Scroll down to "Messenger", make sure it's stopped and set to disabled.

-Ever- · 06-01-2005, 02:26 PM

Thanks. I went ahead and stopped Messenger. I accidentally closed the last popup so I'll take notes on the next few and get back. Another odd thing is that I get a motherboard beep whenever they popup (not an external speaker alert beep...)

Thanks again.
-Tim

cyrnel · 06-01-2005, 03:00 PM

No problem. Windows Messenger (the service) has been a thorn in side of Windows users for years. Not sure who had what on whom but they only recently disabled it by default in SP2.

Now, for your browser blight...

<a href="http://www.proxomitron.info/">Proxomitron</a>

Mephisto2 · 06-01-2005, 03:30 PM

Proxomitron is the King of All Utilities.

Come, join us...

Mr Mephisto

-Ever- · 06-01-2005, 03:38 PM

I'm yet to get another popup since disabling Messanger, looks like things will be fine for now! Is there any immediate downside to disabling that though?

Thanks again guys, I knew I could cound on you

-T

MikeSty · 06-01-2005, 03:55 PM

What Service Pack are you running?

phukraut · 06-01-2005, 03:59 PM

Quote:

Originally Posted by -Ever-

I'm yet to get another popup since disabling Messanger, looks like things will be fine for now! Is there any immediate downside to disabling that though?

None at all unless your machine is at work or in a library or something and the admin likes sending out messages with the service like "the library will close in 10 minutes, log off now."

God of Thunder · 06-01-2005, 04:01 PM

Messenger service was designed for network admins to broadcast messages to all users, so there is no downside to disabling it.

For all users who don't know how to disable it Gibson Research has a neat little utility for disabling it.

Slavakion · 06-01-2005, 07:03 PM

I remember when we used to get those messages and my dad would blame me for it.

cyrnel · 06-01-2005, 07:07 PM

Quote:

Originally Posted by God of Thunder

For all users who don't know how to disable it Gibson Research has a neat little utility for disabling it.

Go Steve!

Another option would be to sign up for AOL since they disable it automa... *urp*...wait for it... RETCH!!GAG!!!AOL!!BLEEEEEAAAAGH!!!!!

Sorry if that got on your shoes.

06-01-2005, 01:59 PM	#1 (permalink)
-Ever- Junkie Location: San Francisco	Reformatted and I'm still getting adware... I was recently infected with some crazy adware that I couldn't remove even after unleashing my entire arsenal of removal tricks. I decided that it was time for my few-times-a-year backup/reformat so I figured I'd go ahead and do it. I just got done installing Windows, customizing certain things, and installing just my video drivers. Things were running smoothly until I started getting adware popups already! And they're not the usual kind. They disguise themselves as Windows System messages saying that things like my system software is corrupt and I need to download patches. I did some research and thinking though and I think it's somehow the remenants of an old spyware trying to reinstall itself or something. Every time it pops up it tells me to go to a new site, for example "SPW3C.com" which is definitely a sketchy site. Any ideas how to remove something like this? How did it hang on through a complete reformat? I'll try to get a screenshot the next time it happens. Thanks for any help. -T __________________ Embracing the goddess energy within yourselves will bring all of you to a new understanding and valuing of life. A vision that inspires you to live and love on planet Earth. Like a priceless jewel buried in dark layers of soil and stone, Earth radiates her brilliant beauty into the caverns of space and time. Perhaps you are aware of those who watch over your home And experience of this place to visit and play with reality. You are becoming aware of yourself as a gamemaster... --Acknowledge your weaknesses--

06-01-2005, 02:13 PM	#2 (permalink)
cyrnel Adequate Location: In my angry-dome.	Nothing will survive across a format unless it's on your install disks. That isn't likely so I'd look elsewhere first. Which version of Windows? If you don't think you've browsed enough to invite problems then you may just be seeing Messenger windows. What do they look like? Edit: Guess you already said they look like system windows. That definitely sounds like Messenger. Just in case, run "services.msc". Scroll down to "Messenger", make sure it's stopped and set to disabled. __________________ There are a vast number of people who are uninformed and heavily propagandized, but fundamentally decent. The propaganda that inundates them is effective when unchallenged, but much of it goes only skin deep. If they can be brought to raise questions and apply their decent instincts and basic intelligence, many people quickly escape the confines of the doctrinal system and are willing to do something to help others who are really suffering and oppressed." -Manufacturing Consent: Noam Chomsky and the Media, p. 195 Last edited by cyrnel; 06-01-2005 at 02:23 PM..

06-01-2005, 02:26 PM	#3 (permalink)
-Ever- Junkie Location: San Francisco	Thanks. I went ahead and stopped Messenger. I accidentally closed the last popup so I'll take notes on the next few and get back. Another odd thing is that I get a motherboard beep whenever they popup (not an external speaker alert beep...) Thanks again. -Tim __________________ Embracing the goddess energy within yourselves will bring all of you to a new understanding and valuing of life. A vision that inspires you to live and love on planet Earth. Like a priceless jewel buried in dark layers of soil and stone, Earth radiates her brilliant beauty into the caverns of space and time. Perhaps you are aware of those who watch over your home And experience of this place to visit and play with reality. You are becoming aware of yourself as a gamemaster... --Acknowledge your weaknesses--

06-01-2005, 03:00 PM	#4 (permalink)
cyrnel Adequate Location: In my angry-dome.	No problem. Windows Messenger (the service) has been a thorn in side of Windows users for years. Not sure who had what on whom but they only recently disabled it by default in SP2. Now, for your browser blight... <a href="http://www.proxomitron.info/">Proxomitron</a> __________________ There are a vast number of people who are uninformed and heavily propagandized, but fundamentally decent. The propaganda that inundates them is effective when unchallenged, but much of it goes only skin deep. If they can be brought to raise questions and apply their decent instincts and basic intelligence, many people quickly escape the confines of the doctrinal system and are willing to do something to help others who are really suffering and oppressed." -Manufacturing Consent: Noam Chomsky and the Media, p. 195

06-01-2005, 03:38 PM	#6 (permalink)
-Ever- Junkie Location: San Francisco	I'm yet to get another popup since disabling Messanger, looks like things will be fine for now! Is there any immediate downside to disabling that though? Thanks again guys, I knew I could cound on you -T __________________ Embracing the goddess energy within yourselves will bring all of you to a new understanding and valuing of life. A vision that inspires you to live and love on planet Earth. Like a priceless jewel buried in dark layers of soil and stone, Earth radiates her brilliant beauty into the caverns of space and time. Perhaps you are aware of those who watch over your home And experience of this place to visit and play with reality. You are becoming aware of yourself as a gamemaster... --Acknowledge your weaknesses--

06-01-2005, 03:30 PM	#5 (permalink)
Mephisto2 Junkie	Proxomitron is the King of All Utilities. Come, join us... Mr Mephisto

06-01-2005, 03:55 PM	#7 (permalink)
MikeSty The Computer Kid :D Location: 127.0.0.1	What Service Pack are you running?

06-01-2005, 04:01 PM	#9 (permalink)
God of Thunder Talk nerdy to me Location: Flint, MI	Messenger service was designed for network admins to broadcast messages to all users, so there is no downside to disabling it. For all users who don't know how to disable it Gibson Research has a neat little utility for disabling it. __________________ I reject your reality, and substitute my own -- Adam Savage

06-01-2005, 07:03 PM	#10 (permalink)
Slavakion Mjollnir Incarnate Location: Lost in thought	I remember when we used to get those messages and my dad would blame me for it.