spam/IE messages help

[darknavi]

I been getting popup messages like those in the attachment. "click yes to download free stuff" etc. How can I disable those messages,I know that if I disable javascript,it will stop those messages but it will stop other important things too. Is there a plugin/addon I can use? I am using the maxthron browser btw,its suppose to stop most popup but for some reason it doesn't now...:eek:

[fishybawb]

Check for spyware and other nasties:

http://www.sysopt.com/forum/showthread.php?s=&threadid=161595

[Hola hoop]

for those annoying lil buggers, you only need to clear your temp internet folder and cookies and goto setting, files and delete downloaded files. Usually theres an app or ddl there that keeps prompting the software.

Once that done follow fishybawb advice and link

[darknavi]

I used adaware to remove most stuff but I can't use spybot,I get a error message,and its not in english. At the end,its english,it says the filename,dir name,or volume label syntax is incorrect.

Error is in the attachment,take a look:)

[darknavi]

Another problem,I got some weird process in my task manager list. Whats kuzsvhs.exe and wdfmgr.exe?

See attachment again,too bad I can only upload 1 pic for 1 post:t

[darknavi]

Last one,is there a way to check files that are recently deleted? Cuz I just gained 20GB for some weird reason....I didn't delete anything,how can I check which files were deleted that gave me the extra 20GB?

No attachment this time,till I get another screenshot of another error tomorrow)-|

[Strawbs]

Use the link provided by fishy* again! you need to run a more widespread set of scans, not just for spy\adware! These are specialised programs and no single one of them will find every kind of threat, but used in conjunction with each other, they will clean just about any system.

run HijackThis and post the logfile generated, a couple of anti-trojan scanners, a couple of on-line virus scanners. Let us know what they turn up.

If anything manages to shutdown a scanner before it completes - it usually means you're in for the long haul! Try starting the machine in "safe-mode" and running Spybot again! This time go into the settings options and clear every check-mark you find in the "Ignore Products-All Products" category to enable total bug-scanning (see attachment).

I'm sure I don't need to tell you to make sure all scanning\security programs have updated definitions before you start using them.

[Rob R.]

Make sure Windows Messenger service is turned off. If you are not sure what Windows Messenger is or not sure if it's on, follow this link:

Shoot the messenger (http://grc.com/stm/shootthemessenger.htm)

[darknavi]

hmmm...I prolly forgot to say this. I run almost all the spyware progs on the other topic,I did a virus scan,,etc. but whats kuzsvhs.exe and wdfmgr.exe? Is wdfmgr a windows process? I don't wanna delete the wrong thing.:eek:

[qsqueeq]

first file is a window media player file

wdfmgr.exe (http://www.freedomlist.com/forum/viewtopic.php?p=123256)

second file is probably some type of virus/spyware that keeps renaming itself when it's restarted/deleted.
that's a weird name for anything else.

[The Jon]

Whenever you see a suspicious looking process running, run a quick Google search for it, and that will always tell you what it is. :)

[cat5e]

In the middle of this page you have few tools that might help to find what is running "Amok" on your system.

Link to: Internet infestation -Or, how you are getting Internet “Junk” in and compromise your Computer/Network? (http://www.ezlan.net/infestation.html)

:rolleyes:

[darknavi]

hmmm...I read something about wdfmgr.exe being for windows driver thing and stuff,so I guess I will just disable it. I already disabled kuzshvs.exe from the startup list from msconfig and also deleted the file in sys32 and removed the registry startup key too.

I got a new error,it says NIS....something.exe Is it in any way related to Norton Internet Security,NIS? All this happen just because I was messing with the settings and set to accept all activex progs :eek: I will check about the kuzshvs thing,something is really wrong about that. thanks:D

Edit: its kuzsvhs.exe and I checked,theres no info on it in google, it just links back to this topic:confused:

[qsqueeq]

lol now you broke it!
maybe you messed up something in the registry or didn't clean it out well enough. maybe you deleted something in system32 you weren't supposed to? the file 1121.exe is in the system32 folder i think i read that somewhere. you didn't need to disable the other file, it's a windows media player file

[darknavi]

1211 is in the sys32 folder?? I did something wrong??:eek:

[qsqueeq]

didn't mean to alarm you... but now that i look again it seems there is a network card driver that is 1211.exe. it supports the SMC1211 card. check that...

[darknavi]

I think I forgot to say this,the name changes everytime I restart. Like its 1211 at that time,when I restart,its 1212,then 1213,it doesn't seem to go above 1216 or 1218 I think,it does to 121E then 121F so its like hex numbers.

Another problem is,for some reason,I always hear something in the speakers like someone talking or singing,as in music,like a radio although I have no programs on and the only site I am in is sysopt. Any idea whats going on? hearing weird sounds in the speaker? Its sort of like a ad or radio talking not just ahhhh eeeehaahhh not those type,its talking.....what can it be? It only lasted about 20 secs btw:confused:

[darknavi]

I got another screenshot,this will explain everything. I can't delete it since it comes back everytime. What should I do?