Thread: ANTI VIRUS POPUPS

maybe it's a good thing
that you are suspicious about
that warning and didn't swallow
the lure.....

eventhough the uninstall may have
appeared successful, it's likely there
are remnants of the malware keys in the
registry and possibly there may have
been other programs installed that
piggybacked the one you uninstalled.

i suggest that you try a system restore
and see if there is a restore point prior
to installing that software.

if the above is helpful then a clean
boot, then a registry cleaner and then running an
antiviral is likely to be a reasonable idea.

if you want to try to target that particular
file then i suggest to download a freeware from
Microsoft.com called autoruns.

in it there will be a number of tabs but one
of them will indicate a process related
to that warning. you can
then check it off and double click the
filename to disable it in the registry.

you may want to pay close attention and
see if the parent folder for it is also revealed
so that you can delete it as well.
Then reboot and see what happens....

It's not clear if that msg is an indication
of an actual infection or a lure to get
infected. But once the phony warning
is disabled, i would begin the process
of cleaning your system...

- db
"taileon" <taileon@discussions.microsoft.com> wrote in message news:ACDA7E60-9CF6-40E9-A01B-2CE070E5F0D1@microsoft.com...
There's a blue colored icon with a question mark in the bottom right hand
part of my toolbar that keeps flashing asking me to download software.
"System has detected a number of active spyware..." I snooped around my comp
and found a SpyDawn and I uninstalled it. My roommate probably looked around
some sites that he shouldn't have and now I'm stuck with this annoying bubble
that asks me to download anti-virus software. Can anyone help me ?

Sharon Franks wrote:
> I am Sharon Franks and I did post that message. it was not some impersonator
> that you are obsessed with. Now I would appreciate it if you would stop
> replying to my posts in this newsgroup. Every time I reply to someone you
> always reply to me about your obsession. What is wrong with you?. Now thanks
> to you I have tried and tested spyerase and it works, I don't care who made
> it, it's none of my business. The fact is that it works that is why I
> recommend it.
>


You are Christopher Butts [ aka; PCBUTTS1 ! ]
You are fooling nobody.

You are a fake and a phony and are guilty of falsifying creditations.
You are full of sh!t and so is you bullsh!t Blog. Most of your
so-called feedback replies are YOU using sock puppets and the ones that
you think are real are us [ ha, ha, ha... ].

You still have NO idea who you are providing Spyerase to password
protected or not. That's how we know you are a thief and plagiarizer.

--
The enemies of Christopher Butts

In article <OcdK2ZHWHHA.1016@TK2MSFTNGP04.phx.gbl>, noheret@realorther
says...
> I am Sharon Franks and I did post that message. it was not some impersonator
> that you are obsessed with. Now I would appreciate it if you would stop
> replying to my posts in this newsgroup. Every time I reply to someone you
> always reply to me about your obsession. What is wrong with you?. Now thanks
> to you I have tried and tested spyerase and it works, I don't care who made
> it, it's none of my business. The fact is that it works that is why I
> recommend it.

You are PC BUTT S1 and we've tracked it back several times through
several sources.

Any ethical person, a professional, would never make a statement that "I
don't care who made it, it's none of my business."

You will be called out each time nymshifter, it's what happens to
pirates and their supporters.

--

spam999free@rrohio.com
remove 999 in order to email me

Abuse report filed with your isp for harassment.
abuse@rr.com



From: Leythos <void@nowhere.lan>
Newsgroups: microsoft.public.windowsxp.general
Subject: Re: ANTI VIRUS POPUPS - PC BUTT S1 impersonating again
Date: Sat, 24 Feb 2007 21:25:17 -0500
References: <ACDA7E60-9CF6-40E9-A01B-2CE070E5F0D1@microsoft.com>
<OEowGc8VHHA.1036@TK2MSFTNGP03.phx.gbl>
<45e0bb03$0$5259$4c368faf@roadrunner.com>
<OcdK2ZHWHHA.1016@TK2MSFTNGP04.phx.gbl>
Organization: Void
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-15"
Content-Transfer-Encoding: 7bit
User-Agent: MicroPlanet-Gravity/2.70.2067
X-No-archive: yes
X-Face:
GdB\,+)nB_`=bi~37a!$XsV?,J0P;Mn)uP="TZP>NbO2\<7d4' ;Nf!QJi2uH;-[#3>hjr1G
3+Lq:jkuw%Y1-wLmm$=B$QsV+m~+g}r[(#C;(#f,h{;c_^;laO^h"V8.gHDVB$+SkqF8MZw:>=#XWh
asX3=0EPo}"~n/.W[ba5ch0R)yb-|++q<lWMZ,VlP5"74UE?)"p)'
Lines: 23
Message-ID: <45e0f399$0$5275$4c368faf@roadrunner.com>
X-Complaints-To: abuse@rr.com
Path:
TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS01.phx.gbl!news-out.cwix.com!newsfeed.cwix.com!newscon02.news.prod igy.net!prodigy.net!nx02.iad01.newshosting.com!new shosting.com!post01.iad01!roadrunner.com!not-for-mail
Xref: TK2MSFTNGP01.phx.gbl microsoft.public.windowsxp.general:1677867
X-Antivirus: avast! (VPS 000716-3, 02/23/2007), Inbound message
X-Antivirus-Status: Clean



--

Sharon Franks
MCC group
Microsoft Certified Solutions Developer (MCSD)
Microsoft Certified Trainer (MCT).



"Leythos" <void@nowhere.lan> wrote in message
news:45e0f399$0$5275$4c368faf@roadrunner.com...
> In article <OcdK2ZHWHHA.1016@TK2MSFTNGP04.phx.gbl>, noheret@realorther
> says...
>> I am Sharon Franks and I did post that message. it was not some
>> impersonator
>> that you are obsessed with. Now I would appreciate it if you would stop
>> replying to my posts in this newsgroup. Every time I reply to someone you
>> always reply to me about your obsession. What is wrong with you?. Now
>> thanks
>> to you I have tried and tested spyerase and it works, I don't care who
>> made
>> it, it's none of my business. The fact is that it works that is why I
>> recommend it.
>
> You are PC BUTT S1 and we've tracked it back several times through
> several sources.
>
> Any ethical person, a professional, would never make a statement that "I
> don't care who made it, it's none of my business."
>
> You will be called out each time nymshifter, it's what happens to
> pirates and their supporters.
>
> --
>
> spam999free@rrohio.com
> remove 999 in order to email me

In article <eBUQKtIWHHA.4796@TK2MSFTNGP05.phx.gbl>, noheret@realorther
says...
> Abuse report filed with your isp for harassment.
> abuse@rr.com

Strangely enough, since one of the RR Security chaps in the NOC knows
all about PC BUTT S1 (you), they will laugh at this, and ignore your
complaint as unfounded.

You can't claim harassment just because someone states the truth and/or
calls you out for posting links to pirated code.

Oh, and even better, your complain is worthless unless filed with a real
name and address, which they have to provide to users that complaints
are filed against.

--

spam999free@rrohio.com
remove 999 in order to email me