Annoying popups

[jonlake]

I have a user at work that keeps getting the same pop-ups. Here is a list of what he got, along with the times.
8:55 a.m. -- Websearch.com
9:00 a.m. -- Wintools for Internet Explorer
9:20 a.m. -- Websearch.com
9:35 a.m. -- Wintools for Internet Explorer
9:53 a.m. -- Websearch.com
10:18 a.m. -- Websearch.com
10:23 a.m. -- Wintools for Internet Explorer
10:28 a.m. -- My Free Internet Update (VeriSign)
11:00 a.m. -- FastSeeker toolbar/Teknosurf.com
11:01 a.m. -- Websearch.com
11:03 a.m. -- Wintools for Internet Explorer
11:19 a.m. -- Websearch.com
during lunch hour -- Websearch.com (3X)
during lunch hour -- FastSeeker toolbar/Teknosurf.com
1:19 p.m. -- SpyBlast/Teknosurf.com
1:23 p.m. -- Websearch.com
2:03 p.m. -- FastSeeker toolbar/Teknosurf.com
3:17 p.m. -- Websearch.com

I have downloaded ad-aware, spybot, hijack this, bhodemon, went to

http://www.mvps.org/inetexplorer/Darnit.htm

and looked as much as I could, from that website had him try the following:

msbb.exe

Apparently related to software called Songspy - causes IE to pop up advertising Windows every hour or so. Deleting it solved pop-up window problems for some - I would recommend renaming.

wnad.exe

Also comes with wnad.dat, wnad-update.exe and wnad.lgc. Use Task Manager (ctrl, alt, del) to turn off wnad then do the following:

Navigate to this key and delete any reference to the programme:

hklm\software\microsoft\windows\run

Also check the run keys listed above for any reference to the programme.

If you are nervous about using regedit, you can go to start/run and type MSCONFIG. Then go to the startup tab and take the tick out of the box that refers to the programme.

Rename the wnad files listed above.

Here is Microsoft's Knowledgebase article about this troublesome programme:

http://support.microsoft.com/default.aspx?scid=KB;EN-US;q312931

, haven't gotten back if this has worked yet. Does anyone know how to get rid of these? We have cleared cookies (through ie and manually), temp files, history.

I have searched the web and found out how to remove some of them after they have been installed, but these are just pop ups. I know I could have him download a pop-up stopper, but, I would like to find out how to get rid of these (at least the majority of them).

Thanks,
Jon

 

[redbluesocks22]

I had the same problem as you did, once I setup win2000 pro.
These popup ads were popping up all day long. I downloaded spybot and adaware but had no luck finding the source.
Then I went to msn help page, searching for answers, that is where I read about a built in program called messenger that win2000 used to send and receives imforamtion to and from other database. I'm not sure if you need to have this running on your system, but if you disable it as I did, then these pop up ads will stop. Advertisers figure out a way to send pop up thought this program.
In your control panel under Administrative Tools, open up Computer Management there click on Service, stroll down until you see a file called Messenger, double click, will open up a pop up menu, then disable this program. Your pop ups ads will stop.
Hope this helps you

 

[bcastner]

"I have downloaded ad-aware, spybot, hijack this, bhodemon"

I am not sure downloading any of thse is sufficient. Post the scan from Hihack This! here.

 

[jrbarnett]

redbluesocks22,

While it is true that disabling the messenger service will stop these popups, remember that in a networked environment, it is used by the network to send legitimate alerts around other machines, although for a standalone computer this is a useful technique.
A much better approach is to block the NetBios ports 135 througg 139 at the external gateway - so no file and printer sharing traffic passes either way.

John

 

[jprice]

I had the same problem and downloaded the SPYBOT which seemed to cause even more problems. Did clear for awhile but eventually had to restore and reload the system. Looks like GATOR was the culprit that caused the problem.