[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now


Xuppa pop up removal

Posted on 2004-11-08
Medium Priority
Last Modified: 2013-11-28
I have a machine running win 200o that has a very difficult to locate and remove pop program. between a multi tude of pop ads it ask if I would like to make www.Xuppa.com my home page. Any help would be appreciated. I need to locate and eliminate the source of the pop ads.
Question by:raymondsegrest
  • 3
  • 2
LVL 65

Accepted Solution

SheharyaarSaahil earned 2000 total points
ID: 12524732
Hello raymondsegrest =)

Well this website doesn't look like those malwares and junk websites :-?
but anywyzzzz have u already tried running the Basic removal tools to make sure that the come as clean ??
and plzz have a carefull look in the Control panel Add Remove Programs to check that there is not any suspisious program ins installed !!

For further troubleshooting, use hijackhtis, it can tell u about the running and starting programs, as wel as the BHOs attached to IE... so Download HijackThis v1.98.2 from here, run it and Save the LOG file:

Then Post that log at this site >> http://www.hijackthis.de/index.php?langselect=english
and it will automatically analyse it for u,,, Fix the entries which it labels as Nasty :)
To Fix, check the lines in Hijackthis scan and click on Fix Checked !!

HJT Log Tutoriol >> http://aumha.org/a/hjttutor.php

CAUTION: Before fixing the entries in hijackthis, make sure that they are really Nasty and can be deleted, better u first research for it on Google and then when u will confirm that they shud be deleted, Fix them. And whenever u run Hijackthis, run it from a New folder on ur desktop, so that in case of any problem, u can take advantages of its created backups of fixed items. And in case if u still face problems in dealing with it, just analyse ur log at the above site, and then scroll down where u will see a Save Analyse button, hit it and it will save ur Log Analysation, then copy the link of that page and paste it here, and we will check it for u :)

Author Comment

ID: 12526370
Problem was two executables named svrrun. exe and svrrunu. exe there was also a notepad file associated with them that really pointed the finger as these two being the main culprit. Deleted both in safe mode and pop ups ceased. There is a file that hijackthis pointed out that Iam not sure about. Name is lic98rmt.exe if you know what this is please give me a heads up on it.

Thanks Ray
LVL 65

Expert Comment

ID: 12526399
hmmmmmmm good :)
now can u plzz tell me the path of this file.... i mean if its running then from where its running.... and if hijackthis is not showing this information then search for this file on ur hard drive and let me know that where its residing :)

Author Comment

ID: 12526462
This file is located at C:\ProgramFiles/CA/SharedComponents/CA_LIC
Appears to be some type of License registration problem related to this Compaq machine.
POP UP Problem is fixed. Thanks
LVL 65

Expert Comment

ID: 12526523
yeah then this is a valid one, as its running from its original location and Its some kind of Database Installer from Computer Associates I think :)

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

With the evolution of technology, we have finally reached a point where it is possible to have home automation features like having your thermostat turn up and door lock itself when you leave, as well as a complete home security system. This is a st…
Your business may be under attack from a silent enemy that is hard to detect. It works stealthily in the shadows to access and exploit your critical business information, sensitive confidential data and intellectual property, for commercial gain. T…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question