asked on

Messenger service message

Hi all,

I recently installed win2k on my laptop and just installed basic items such as ms office, f-secure antivirus and ie6.

I am using a netgear wireless card with 128 bit encryption set up. However, I keep getting a message from messenger service telling me that I need to stop and scan critical errors. I have searched on the web for this and it seems it is some sort of trojan.

Anybody know how to get rid of it. I have re-installed a second time and get this message again. I think it starts with svchost.exe error.

Thanks,

Doohsam

doohsam

ASKER

another error I have just discovered is when i log off and then try to log on as a different user, i get the error:

system can not log you on due to the following error: the network request is not supported.

I have to restart to logon.

I have run a full virus scan but f-secure does not find anything.

doohsam

ASKER

I have just discovered a possible solution myself to the pop up problem on

www.lurhq.com/popup_spam.html

However, I still cannot understand the network request error.

ASKER CERTIFIED SOLUTION

rpggamergirl

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

doohsam

ASKER

Hi,

I have uploaded the log file. The url for it is:

https://filedb.experts-exchange.com/incoming/ee-stuff/1654-hijackthislog.txt or

https://filedb.experts-exchange.com/incoming/ee-stuff/1654-hijackthislog.txthttps://filedb.experts-exchange.com/incoming/ee-stuff/1662-hijackthislog1.txt

Thanks,

Doohsam

doohsam

ASKER

Since I have downloaded firefox 2 and blocked i.e. 6 with the firewall these problems seem to have disappeared. Not sure how this is related?

Thanks,

Doohsam

rpggamergirl

I can't see any suspicious entries in your hijackthis log,
but also some entries are missing which could also mean that something is monitoring hijackthis.exe process and is able to hide from the scan.

Can you please rename hijackthis.exe to something else?(as long as it doesn't have the word "hijackthis")
Navigate to the directory where you saved Hijackthis.exe and rename it, and then scan your system again with the renamed Hijackthis:
d:\Program Files\HijackThis 1.99.1\HijackThis.exe

doohsam

ASKER

Hi,

There is a new hijackthis log. I have changed the filename like you said.

https://filedb.experts-exchange.com/incoming/ee-stuff/1662-hijackthislog1.txt

Thanks,

Doohsam

rpggamergirl

Thanks for the log, still the same entries showing, you might like to try running the renamed hijackthis in safe mode and let us know if there is any new entry being added.
But it looks like it's probably just IE playing up.

It could just be an IE problem, maybe files got corrupted and need repair. The popups was clearly just messenger service since you got if fixed by disabling the service.

You might also try this scanner:
1, Download and install Superantispyware
http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE
Load Superantispyware and click the "check for updates" button.
Once the update is finished, close SuperAntispyware again, we'll perform the scan later in safe mode

* Start Superantispyware.
Click the "scan your computer" button.
Check "Perform Complete Scan" and then next.
Superantispyware will now scan your computer and when its finished it will list all the infections it has found.
Make sure that they all have a check next to them and press next.
Click finish and you will be taken back to the main interface.
Click "Preferences" and then click the "statistics/logs" tab. Click the dated log and press view log and a text file will appear.

doohsam

ASKER

rpggamergirl,

Thanks for all your help. I think it was IE playing up, since I have started using firefox the problems have disappeared.

Thanks again,

Doohsam