I keep getting this error message.

[stu]

Message from FROM to TO on 8/27/2006 6:55:39 PM

STOP! WINDOWS REQUIRES IMMEDIATE ATTENTION.

Windows has found 55 Critical System Errors.

To fix the errors please do the following:

1.Download Registry Update from: www.regfixit.com
2.Install Registry Update
3.Run Registry Update
4.Reboot your computer

FAILURE TO ACT NOW MAY LEAD TO SYSTEM FAILURE!


This pops up on my screen every few minutes, and each time, it switches between the website it wants me to go to. It switches between this website and one other one.

When I got my computer fixed, I lost everything on my hard drive and the guy who fixed the computer put a pirated copy of Windows on the computer. I'm afraid that if I get some update, I won't be able to use my computer again. I need to keep my computer up and running until I can get a real copy of Windows. Is this a real warning, or just some spyware?

I also just ran Spybot, but I keep getting this message. Also, it shows up on my screen as a pop up box.

Any help?

[Evil_SpeedRacer]

If it is a pirated copy, then you will be unable to recieve any updates. That is spyware sir, I see it everyday. Who is your ISP?

[stu]

Comcast. I just got the internet set up this morning, and I've had that error message from the beginning. I'm terrible at removing spyware. Any advice?

[Evil_SpeedRacer]

Yep, PM me your number. I am an IP specialist for Comcast :) I have some free antivirus for you!

[Street_Kings]

i'm assuming this is a windows XP setup?

that's actually not spyware per se. there's nothing installed on your computer that isn't supposed to be that is causing that to pop up, so spyware scanners won't catch it.

The problem is it's an open port that bots are using to send you this message. Get a proper firewall up and they'll stop. Actually, I believe as a comcast subscriber you're entitled to McAfee completely free, but I could be wrong. If anything, I also have a few firewalls (blackice is great) i can send you.

For an quick fix to the annoyances while you get a firewall, do the following:


start -> run -> service.msc -> ok

In the window that pops up, select "Messenger", right click on it, select "Properties", and another box should come up. Stop the service, and change the "Startup Type" to Disabled. Reboot, and you'll never see any of them again, ever.


Here's what's going on basically:
The Messenger "service" is a program that's installed and always running with windows. it's basically designed so that if you were, for example, running a company with 100 computers in a lab, and you need to relay a message to everyone using those computers, you can send the message over messenger. It's kinda like an internal only AIM or Yahoo chat client.

The problem is, there's a hole that allows people from outside to send messages through this program. That's why spysweepers won't detect anything amiss, because the Messenger program is supposed to be there. By running the commands I showed you, it stops/exits the messenger program, and tells windows not to start the program/"service" anymore when you reboot =)

[Street_Kings]

oh, by the way, you don't have to worry about windows locking you out of it because it's not legit. You won't be able to download updates is all.

[Evil_SpeedRacer]

Thanks, I informed him of all of that. :) (edit) except for the firewall info, well done sir! I also helped him get his new email username and password up. Actually we find that that is indeed spyware and is installed on the computer, but McAfee will not find it. We get a lot of this, and the customer comes back to chat. Spyware scanners will pickup where McAfee leaves off. Spybot is the one I suggest most of the time, but there is anoher real good one that I cannot remember now... I will have to fin it when I get to work.

[myshtern]

That's a really shitty virus i got like 2 years ago. There is a special procedure for taking it off, you have to look online. Plenty of people have gone through it.

[stu]

Thanks for all the help guys.

[Eric]

Ad-Aware Se does a fine job, and is free.

[Evil_SpeedRacer]

Yeah I forgot to tell ya Stu, ad aware or spybot search and destroy work very good. The latter may be the one to find and resolve it.

[stu]

I ran Spybot, before I called you, but it didn't come up with anything. I'll run it again when I get home.

[Evil_SpeedRacer]

When I get to work, if that does not work out I have some other resources.

[stu]

Okay. I think the best spyware I ever had was AVG, but I don't have it anymore. I'll look into it when I get home.

I haven't been to work in two weeks and I had 190 new emails this morning. :(

[Terry]

Download Ad-Ware SE from download.com

[Deceptakhan]

+1 to all who said ad aware. And fuck AVG. Mind as well leave your pc open.

[Evil_SpeedRacer]

Ever seen an AVG related spyware case? I have! Just today!

[stu]

i

start -> run -> service.msc -> ok



The run box does not recognize "service.msc" what else can I try?

[Evil_SpeedRacer]

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es

[stu]

That doesn't work for me either. I noticed that space between the last two letters and the rest of the command and tried eliminating that but it still won't work. What am I doing wrong here? I'd really like to get rid of this virus. It sure sucks having to close 300 windows every time I come home because it's been sending this stupid message as often as every 2 minutes throughout the day.

[Evil_SpeedRacer]

Alright. Sorry this took so long buddy! Windows Messenger Services is the culprit. It allows anyone to post messages on your computer. Why Microsoft does this I have no idea. Go to this site to learn how to disable messenger services for Windows 2000 (http://www.techspot.com/vb/all/windows/t-52768-Critical-Error-Messages.html#), XP, & NT http://www.itc.virginia.edu/desktop/docs/messagepopup/

You also want to make sure that your firewall is configured properly and is in place. And just out of curiosity, do you have service pack 2 on your machine?

[Street_Kings]

That doesn't work for me either. I noticed that space between the last two letters and the rest of the command and tried eliminating that but it still won't work. What am I doing wrong here? I'd really like to get rid of this virus. It sure sucks having to close 300 windows every time I come home because it's been sending this stupid message as often as every 2 minutes throughout the day.


my bad stu, it's services.msc, missed the s at the end =X

So, in the run box, type services.msc and the services menu will pop up. find "Messenger" in the list, and left click on it once. Then, hit the stop button up top to "Stop Service".

After that, right click on the "Messenger" item in the list, and select properties. A new screen will pop up, and in the middle it will have a drop down box to select "Startup type:" change that to Disabled.

Hit OK on the properties window, and close the services window.

All should be good after that.

[Evil_SpeedRacer]

Stupid messenger service....

[stu]

. And just out of curiosity, do you have service pack 2 on your machine?

No idea, but I doubt it.

[Evil_SpeedRacer]

Be sure you visit this link and install. It is important if you want the crap to stay off your machine.

http://go.microsoft.com/?linkid=3646727

[stu]

Thanks Street Kings, I'll let you know if that worked.

[Bedlam]

Pay for a copy of windows and not deal with all that BS :p

[stu]

That's on my to do list. :)

Street Kings, that worked and I no longer have that damn pop up.

Thanks for all the help everyone.

[M@]

Ad-Aware + SAD = Win.

[Aracheon]

Pay for a copy of windows and not deal with all that BS :p


Pffft. Fawk no. Let someone else pay for it. Volume licensing FTW.

[stu]

Pffft. Fawk no. Let someone else pay for it. Volume licensing FTW.

Tell me how to do it.