MS Error Pop-UP

[Bob Hogan]

Recently I began getting a pop-up which indicates that it is from Windows Error Service indicating that spyware has been dettected on my system. It further states that there is a free spyware dector/remover and if you strike the ok key it attempts to take you to the following site:
msi2.optima-host.com/spyhunter.html. I made the mistake of saying ok once and immediately began receiving alerts from Mcafee virun scanner.

I have no idea where this came from but would sure like to remove it from the system as it is a real pain when I'm working. It will minimize an application or interrupt whatever your involved in at the time.

Any suggestions?????????????????

[caperjack]

You need to disable the messenger service ,go here and download and run Shoot the messenger .
http://www.grc.com/stm/shootthemessenger.htm

[caperjack]

After that do this and we'll check for spyware.

No guarentees, as it could be a couple things, but please do these:

Download the latest version of Ad-Aware at http://www.lavasoftusa.com/support/download/
After installing AAW, and before running the program, FIRST update the reference file following these instructions.
http://www.lavahelp.com/howto/updref/index.html
Now do the following:
- Under Ad-aware 6 > Settings (Gear at the top) > Tweaks > Scanning Engine:
check: "Unload recognized processes during scanning."
- Under Ad-aware 6 > Settings (Gear at the top) > Tweaks > Cleaning Engine:
Check: "Let Windows remove files in use after reboot."
Press "Scan Now"
- Check option "Use Custom scanning options"
- Check option "Activate In-Depth Scan"
- Press "Select drives\folders to scan"
- Select the active partition which is usually C:
Now press "Next" to let Ad-aware scan your drives...
It will find a number of "bad" files and registry keys.
Right-click in that pane and choose "select all"
Now press "Next" again.
It will ask you whether you'd like to remove all checked items. Click OK.
Finally, close Ad-Aware, and reboot.

Then:
Download 'Hijack This!'. http://www.computercops.biz/downloads-file-328.html
Unzip (extract) it to a folder of its own. Then Doubleclick HijackThis.exe (in the new folder), and hit "Scan".
When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, then Ctrl-A to Select All, and copy its contents here. for hijackthis,most of what it lists will be harmless or even essential, don't fix anything yet.

[Bob Hogan]

I neglected to include that this system operates Win98SE, and accordingly the Messenger Service cannot be shut off per Lavasoft. I appreciate your response.

Any additional suggestions????????????

Thanks, Bob Hogan

[caperjack]

sorry i should have noticed that we are in the 95/98 fourm.

try this !
Download 'Hijack This!'. http://www.computercops.biz/downloads-file-328.html
Unzip (extract) it to a folder of its own. Then Doubleclick HijackThis.exe (in the new folder), and hit "Scan".
When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, then Ctrl-A to Select All, and copy its contents here. for hijackthis,most of what it lists will be harmless or even essential, don't fix anything yet.