How do I get rid of this annoying spyware popup?

Factual Questions
1

For the last day or two, I have had this annoying popup appear on my computer every half hour or so.

It’s made to look like a windows alert box and it says something like SYSTEM ALERT and UNSAFE USER and then (conveniently) gives the URL of a website that I can visit to “learn how to stop these popups forever.” It seems to vary the URL between Fightpopups.com and Bustpopups.com.

It appears that this is some sort of spyware because it pops up throughout the day, no mateer what web site I am on.

I ran Spybot and Adaware (and made sure both had their latest updates as of last night) and neither one found this thing.

Anybody else have this problem or know how to get rid of it?

2

Had that problem until I went back to adaware version 6 got rid of it all…oh yeah and stinger got rid of a bunch of little pesky viruses that were clogging up the works too. Wish I could remember where I got stinger but was suggested by someone on this site, captain evil or something.

Hope this helps

3

Which O/S are you using?

4

It’s probably a Messaging pop up. Go into Administrative Tools (I think) and pick Services. Find the one called Messenger and turn it off.

5

Control Panel
Administrative Tools
Services
Find Messenger and double click to get its properties
Stop the service and set it to disabled
OK and close all windows

HTH

6

The message looks like windows alert box because that’s exactly what it is. They’re exploiting a service on your computer intended for local network messaging (Things like your printer saying it’s out of paper, or your network server announcing it’s going offline.) As they are mis-using a legitimate pre-installed service they leave no trace and won’t show up as spyware or adware.

You’re right that it doesn’t make any difference what your doing at the time. These spammers fire out the message to computers pretty much at random on the offchance that you’re online.

Install a firewall like ZoneAlarm that’ll block them from external computers without affecting your local setup.

7

chillihead and jbird3000 have it just right. I had the same thing. Annoying as heck. Just make sure it says disabled because I set it to start again every time I restarted my computer. Just my own personal stupidity.

8

Whoops. Fortgot to mention the OS. It’s Windows XP Pro.

Thanks for the help chillihead and jbird. I disabled Messenger so I’ll see if that stops the alerts.

Just a followup question – does disabling messenger affect anything else? In other words, should I be prepared for other things that use mesenger to behave differently (i only ask because the info box for the messenger service says “If this service is stopped, Alerter messages will not be transmitted. If this service is disabled, any services that explicitly depend on it will fail to start.” I assume this is no biggie, but is there anything I should be aware of when it is disabled?

9

That’s another thing I’m confused about. I’m running Zonealarm so I thought I was blocking this sort of thing. Is there a setting in ZA I should change, or a specific program I should look at in the ZA program control so I am not allowing this sort of activity?

10

Nothing will be disrupted unless you sometimes get legitimate messages this way. In short, it is one of XP’s official security holes.

11

I’ve found this to be very useful. It contains a list of almost every possible program that could be running in the “background” upon startup. Simply follow the recommendations as to whether the program is required to operate your computer.

I use cntrl+alt+del to see what programs are running. Then I use the “find” function of my web browser to search the page in the link I provided. Once I find a malicious program (rare these days) I use Start > Run > “MSCONFIG” > Startup to identify and disable all the uncessary programs scheduled to open upon startup. . Hope this helps.

12

And here is a list of “services” that is part of XP, a ton of which you may not need running at all.