Help! Funky Pop Up Windows

For some reason i am getting these random pop-ups while connected to the internet. Even if I haven't opened my browser I get them. They all look similar to the Attachment (.gif). The common text is wxw.geocities.com/adcasterextreme ??? I am running the latest [6.0] AdAware and also running NOD32 (updated definitions last week). I also have Zone Alarm running.

btw, none of these system utilities found anything when I scanned all local & network drives. Also, I searched my registry for any references to "adcasterextreme" and it found nothing.

Zone Alarm tells me this window is using the services.exe file. Task manager identifies the file in use as CSRSS.exe. If I don't allow this file access to the internet (via my firewall) I can't use any browser except for the AOL browser to browse the internet. I'm using an AOL Dial-Up and hate the AOL browser (of course).

Any help would be appreciated. What is this? Could this be part of a trojan horse? How to stop it?

Please help!

Attached is a screen cap of an actual window that popped up. There seems to be several versions of this pop-up window with other "advertisements".

thomseye
you can also find me at thomseye420@aol.com
 

Attachments

Last edited:
Don't worry, man, just download & install PopUpCop, the best one;)


Oops, maybe I'm wrong, if you have this popups without startin' your browser...:confused: :confused: :confused: :confused: :confused:
 
Last edited:
indeed... no browser running, only internet connection. Granted the AOL browser is running, but this isn't an AOL thing. My homepage within the AOL browser is the normal AOL start up, so there isn't a web page calling for these pop-ups...
 
this "popup" is not the common kind of popups, it's the windows messaging service,
you can send that message to any computer which got it enabled with the command: "net send <ip/comp-name> <message>"
some companies started to send such messages to several ip ranges for advertisement.
to disable the messaging service go to computer management" and there services or directly to the services and stop and disable the messenger. (i think you need admin to do that)
other way to stop that is to install a firewall and to block ports 137-139 from and to the internet.
forti
 
Last edited:
Start Up

I check my Windows start up files so many times much less when add/delete.

SOMETHING loaded 'Kazaa'. I D/Led and a trojan was hooked ONTO IT today. D/L manager froze as a few seconds (9 left) after real D/L finished.

I think I will have to EXPECT this and watch everywhere.

I now think a military VET site is foreign owend and my CRAZY e-mail I get. Today one for affordable dental. Via INTERNET?

I had the nerve to check one and phony foreign ambassador and money scheme.

Hotmail has some WEIRD mail coming in but just DELETE.

NetZero sneaked in a 'telephone' Java popup.

I log on and MANY times my system blows as both the anti virus and firewall CRASH with something coming in right away. I do not mind that!

This is just the tip of the iceberg as anything you have saboatged TO BE FIXED for money.
 
You have to disable Windows messaging service if you run windows2000 Click Start-> Settings-> Control Panel-> Administrative Tools->Services
Scroll down and highlight "Messenger"
Right-click the highlighted line and choose Properties.
Click the STOP button.
Select Disable l in the Startup Type scroll bar
Click OK for windows XP home editin
Click Start->Settings ->Control Panel
Click Performance and Maintenance
Click Administrative Tools
Double click Services Scroll
down and highlight "Messenger"
Right-click the highlighted line and choose Properties.
Click the STOP button.
Select Disable in the Startup Type scroll bar
Click OK
it's the only way
 
Last edited:
Top