Spyware? Or real?

[Lucifers_Ghost]

Hello everyone,

I am getting these frequent pop-ups from "windows" saying the registry has found 55 errors and may cause windows to crash, and to go to msregistrycleaner.com and and a couple of other ones saying to download programs to fix it.

Right off the bat, I assumed spyware. I ran adaware and spybot and found only a few small spyware that i promptly deleted. Rebooted and still the same thing.

So, are these actually spyware or is my registry actually damaged. It HAS been about 8 months since my last format.

If it is spyware, could you recommend another proggie that will clean this problem as the two i have obviously arent working. If it is my registry, can you recommend a good reg cleaner/fixer-up-er. I did a google search and came up with about .. well, too many. I dont know which ones are reliable.

Thank you very much in advance.

LG

[lambonut]

It's spyware. Windows will never pop up and tell you to go to any other website to download anything, other than microsoft.com.

Is it an Internet Explorer pop up, or a little window pop up? If its just a little window with an OK button on it. It's a real easy fix.

Go to Control panel and open administrator tools. Open up the services applet. Scroll down to messenger, and stop the service. double click on the service to open up the properties of the service. It probably says the service starts automatically, change it to disabled. Hit ok close the services window and you will never see the pop up again.

[isogonic]

windows dosnt display popups about registry errors or anything else. your assumption about spyware or malware is correct. dont click the link or download anything from the web site. theres no problem with your registry. its just a come on to purchase something.

i would do this;download Ewido, but dont scan with it yet. we will use it while in SAFE MODE. also check for updates to spybot and adaware while your at it.

1. Download Ewido and install
Ewido Security Suite. It is a free trial version of the program:

http://www.ewido.net/en/download/

2. Install ewido security suite
3. Launch ewido, there should be an icon on your desktop double-click it.
4. The program will now go to the main screen

You will need to update ewido to the latest definition files.

1. On the left hand side of the main screen click update
2. Then click on Start Update

The update will start and a progress bar will show the updates being installed.
------------------------------------
now boot your computer into SAFE MODE. you reach safe mode by tapping the f8 key during a reboot. chose the first option; safe mode. ok once in safe mode run ewido:

1. Click on scanner
2. Click on Complete System Scan and the scan will begin.
3. NOTE: During some scans with ewido it is finding cases of false positives.**
o You will need to step through the process of cleaning files one-by-one.
o If ewido detects a file you KNOW to be legitimate, select none as the action.
o DO NOT select "Perform action on all infections"
o If you are unsure of any entry found select none for now.
4. Once the scan has completed, there will be a button located on the bottom of the screen named Save report
5. Click Save report.
6. Save the report .txt file to your desktop.

Now close ewido security suite.
-----------------------------
run adaware and spybot also while in safe mode. also do this in safe mode;

Click Start>Run then type %temp%
Hit OK. Delete all the files you can.

Empty your Temp folders. Go to Start > Run and type:cleanmgr. Windows will scan. When done check these 3 and press *ok* to remove:

Temporary Files
Temporary Internet Files
Recycle Bin
----------------------------------
reboot computer normally, let me know how its going

[Dv8ted2]

I did a quick search and found this.

click here

[Lucifers_Ghost]

lambonut:
It worked. 10 minutes and no pop ups. Thanks a million.


isogonic
Thank you also for writing up that long explanation of what to do. I really appreciate it. I only tried the other one first because it took less time :P However, i have copied and pasted your info just in case I need it and cant get back online.



Thanks all.

[isogonic]

Lucifers ghost, you got lucky. 99% of the time it is not windows msgr service causing the popups.