Re: Pop-up I don't want.....

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: One frustrated guy (guy_at_discussions.microsoft.com)
Date: 02/12/05 

Date: Fri, 11 Feb 2005 16:57:02 -0800

>From one post I got the idea to run regedit to see if I could find something
related to the address. Found the to63.php in registry and said it came
from(??) windows/mmups.exe, so cleared the reg. off anything related to site
(6 instances) then renamed the mmups.exe ( wouldn't let me delete) then
re-booted. Vuala! No more pop-up! Thanks for your help!!!!

"Vanguard" wrote:

> "One frustrated guy!!!" <One frustrated
> guy!!!@discussions.microsoft.com> wrote in message
> news:C9602466-CA67-4E1A-A3A1-E5E8429962AB@microsoft.com...
> > An internet site occasionally pops up on my computer and I can't
> > figure out
> > how to stop it. The site address is mmm2.media-motor.net/to63.php. If
> > I
> > re-boot my computer it pops up after a couple of minutes. I close it
> > down and
> > later (not sure how much later) there it is again!!! Deleted all
> > history,
> > cookies, temp files, everything i could think of, nothing helps!!!
>
>
> Close all instances of IE. Check the Processes tab in Task Manager to
> make sure ALL instances of iexplore.exe have been killed (i.e., kill any
> that still exist). Do you still have the problem? Some sites will load
> a "hidden" instance of IE (without a window) to use it to run scripts to
> run a timer that will periodically open another visible instance of IE.
>
> If you kill all instances of iexplore.exe and do not open IE yourself
> but a new instance of iexplore.exe shows up in Task Manager, you are
> infected. Run a full scan using a recently updated anti-virus program,
> scan for malware using Ad-Aware, Spybot S&D, CWshredder, MS AntiSpyware,
> and online PestScan. If they turn up nothing, then try the trial
> versions of Trojan Hunter, TDS-3, or BOClean.
>
> Your firewall might also provide for fireholing (where an authorized
> application uses an authorized application to make an Internet
> connection). Norton's firewall and the free Sygate Personal Firewall
> include options for fireholing detect. ZoneAlarm (free) does not but
> their Pro version (paid) does. You could then delete the application
> rule for IE or clear the file signature list that called IE to then get
> prompted when a process was trying to call IE to make a connection.
> Alternatively, you could see if SysInternals' FileMon utility might tell
> you who is loading iexplore.exe (create a filter so you only see
> iexplore.exe instead of all files being accessed).
>
> --
> ____________________________________________________________
> Post your replies to the newsgroup. Share with others.
> E-mail reply: Remove "NIXTHIS" and add "#VS811" to Subject.
> ____________________________________________________________
>
>

Relevant Pages

  • Re: Pop-up I dont want.....
    ... > An internet site occasionally pops up on my computer and I can't ... Your firewall might also provide for fireholing (where an authorized ... Norton's firewall and the free Sygate Personal Firewall ... prompted when a process was trying to call IE to make a connection. ...
    (microsoft.public.windowsxp.general)
  • Re: I am having connectivity problems
    ... firewall and turned ON Windows firewall. ... When I tried to install SP2 I was unable to get it thru Windows Update. ... does the connection problem persist? ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Serious Security Issue in Windows XP SP2s Firewall
    ... Subject: AW: Serious Security Issue in Windows XP SP2's Firewall ... If you update a WinXP SP-1 with enabled Internet ... Connection Firewall ...
    (Focus-Microsoft)
  • RE: Serious Security Issue in Windows XP SP2s Firewall
    ... file and printer sharing is available for network login from any network (I ... Internet Connection Sharing of the PC has to be disabled." ... Serious Security Issue in Windows XP SP2's Firewall ...
    (Focus-Microsoft)
  • Re: Still cant connect to RWW or OWA remotely
    ... No, I don't have a 3rd party firewall, and it's a pretty plain vanilla WinXP ... Connected to the network like the other workstations, ... I could go to any workstation and connect to them just fine. ... match the broadband connection, the two NIC firewall, the remote ...
    (microsoft.public.windows.server.sbs)