annoying bug / spyaxe

Having a problem with this annoying bug. I've tried Norton, WindowWasher, Ad-Aware, SpyBot, HijackThis, Ewido, and i-Trust and I keep getting a pop-up that leads me to SpyAxe, and interference when I try to log on-line, like re-direction to other sites. In my WindowTask Manager I've got some new items I can't get rid of called "msmsgs.exe" and mssearchnet.exe ".

Any help would be much appreciated. Thanks in advance.

Logfile of HijackThis v1.99.1
Scan saved at 6:17:43 PM, on 1/3/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\mssearchnet.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\PROGRA~1\RANDOM~1\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\virusprotection\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://webmail.wright.edu/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [Reminder] C:\Windows\Creator\Remind_XP.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe "
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe "
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\PROGRA~1\RANDOM~1\iTunes\iTunesHelper.exe "
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\RunOnce: [SpybotSnD] "C:\Program Files\virusprotection\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
O4 - HKLM\..\RunOnce: [Index Washer] C:\Program Files\Webroot\Washer\WashIdx.exe "Owner "
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Window Washer] C:\Program Files\Webroot\Washer\wwDisp.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\RunOnce: [Index Washer] C:\Program Files\Webroot\Washer\WashIdx.exe "Owner "
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker.exe
O15 - Trusted Zone: *.apple.com
O15 - Trusted Zone: http://*.hell.com
O15 - Trusted Zone: blob.myspace.com
O15 - Trusted Zone: http://blog.myspace.com
O15 - Trusted Zone: browseusers.myspace.com
O15 - Trusted Zone: bulletin.myspace.com
O15 - Trusted Zone: c.myspace.com
O15 - Trusted Zone: cabo.myspace.com
O15 - Trusted Zone: chat.myspace.com
O15 - Trusted Zone: comments.myspace.com
O15 - Trusted Zone: editprofile.myspace.com
O15 - Trusted Zone: events.myspace.com
O15 - Trusted Zone: forum.myspace.com
O15 - Trusted Zone: g.myspace.com
O15 - Trusted Zone: groups.myspace.com
O15 - Trusted Zone: home.myspace.com
O15 - Trusted Zone: home1.myspace.com
O15 - Trusted Zone: home10.myspace.com
O15 - Trusted Zone: home11.myspace.com
O15 - Trusted Zone: home14.myspace.com
O15 - Trusted Zone: home15.myspace.com
O15 - Trusted Zone: home16.myspace.com
O15 - Trusted Zone: home19.myspace.com
O15 - Trusted Zone: home2.myspace.com
O15 - Trusted Zone: home7.myspace.com
O15 - Trusted Zone: home8.myspace.com
O15 - Trusted Zone: home9.myspace.com
O15 - Trusted Zone: i.myspace.com
O15 - Trusted Zone: images.myspace.com
O15 - Trusted Zone: invite.myspace.com
O15 - Trusted Zone: iprofile.myspace.com
O15 - Trusted Zone: js.myspace.com
O15 - Trusted Zone: login.myspace.com
O15 - Trusted Zone: mail.myspace.com
O15 - Trusted Zone: mail.4.myspace.com
O15 - Trusted Zone: mail1.myspace.com
O15 - Trusted Zone: mail2.myspace.com
O15 - Trusted Zone: mail3.myspace.com
O15 - Trusted Zone: mail4.myspace.com
O15 - Trusted Zone: mail5.myspace.com
O15 - Trusted Zone: mail6.myspace.com
O15 - Trusted Zone: mail7.myspace.com
O15 - Trusted Zone: mail8.myspace.com
O15 - Trusted Zone: mail9.myspace.com
O15 - Trusted Zone: music01.myspace.com
O15 - Trusted Zone: onlinenow.myspace.com
O15 - Trusted Zone: photo.myspace.com
O15 - Trusted Zone: profile.myspace.com
O15 - Trusted Zone: schools.myspace.com
O15 - Trusted Zone: search.myspace.com
O15 - Trusted Zone: searchlog.myspace.com
O15 - Trusted Zone: security.myspace.com
O15 - Trusted Zone: settings.myspace.com
O15 - Trusted Zone: http://signup.myspace.com
O15 - Trusted Zone: upload.myspace.com
O15 - Trusted Zone: viewmorepics.myspace.com
O15 - Trusted Zone: www.myspace.com
O15 - Trusted Zone: http://www.myspace.com
O15 - Trusted Zone: x.myspace.com
O15 - Trusted Zone: http://www.partypoker.com
O15 - Trusted Zone: luninis1.wright.edu
O15 - Trusted Zone: wings.wright.edu
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1125887081078
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: McAfee AntiSpyware Real-Time Scanner (McAfeeAntiSpyware) - Unknown owner - c:\progra~1\mcafee\MCAFEE~1\MssSrv.exe (file missing)
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Unknown owner - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe (file missing)
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe

 

I followed the advice here http://www.bleepingcomputer.com/forums/topic36868.html for the smitFraud removal. And eliminated some items (like 'mssearchnet.exe' and others) in safe mode that were recommended from a post that I can't find again. It seems to have worked for now. I hope this might help others.

Still have a few questions though. 'svchost.exe' is good, and 'svchost.dll' is bad, right?

Also, in my SystemTask Manager, I get 'msmsgs.exe'. This is relatively new, and seems to have appeared at the same time as 'mssearchnet.exe'.

I don't use MSNchat though it's installed on my computer. I followed some steps to delete it, but it just came right back. When I google 'msmsgs.exe' I get conflicting info: "This is a non-essential process. Disabling or enabling this is down to user preference" and "msmsgs.exe is a process which is registered as the W32.Alcarys.B@mm worm. This virus is distributed via the Internet through e-mail ".

Could anyone clear this up for me please? I can't tell if it's affecting my computer in any negative way or not. I appreciate any help.

Thanks for everything.

Here's my HjT log if it'll help:

Logfile of HijackThis v1.99.1
Scan saved at 12:12:13 PM, on 1/4/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\PROGRA~1\RANDOM~1\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Webroot\Washer\wwDisp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\virusprotection\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://webmail.wright.edu/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://webmail.wright.edu/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [Reminder] C:\Windows\Creator\Remind_XP.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe "
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe "
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\PROGRA~1\RANDOM~1\iTunes\iTunesHelper.exe "
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Window Washer] C:\Program Files\Webroot\Washer\wwDisp.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker.exe
O15 - Trusted Zone: *.apple.com
O15 - Trusted Zone: http://*.hell.com
O15 - Trusted Zone: blob.myspace.com
O15 - Trusted Zone: http://blog.myspace.com
O15 - Trusted Zone: browseusers.myspace.com
O15 - Trusted Zone: bulletin.myspace.com
O15 - Trusted Zone: c.myspace.com
O15 - Trusted Zone: cabo.myspace.com
O15 - Trusted Zone: chat.myspace.com
O15 - Trusted Zone: comments.myspace.com
O15 - Trusted Zone: editprofile.myspace.com
O15 - Trusted Zone: events.myspace.com
O15 - Trusted Zone: forum.myspace.com
O15 - Trusted Zone: g.myspace.com
O15 - Trusted Zone: groups.myspace.com
O15 - Trusted Zone: home.myspace.com
O15 - Trusted Zone: home1.myspace.com
O15 - Trusted Zone: home10.myspace.com
O15 - Trusted Zone: home11.myspace.com
O15 - Trusted Zone: home14.myspace.com
O15 - Trusted Zone: home15.myspace.com
O15 - Trusted Zone: home16.myspace.com
O15 - Trusted Zone: home19.myspace.com
O15 - Trusted Zone: home2.myspace.com
O15 - Trusted Zone: home7.myspace.com
O15 - Trusted Zone: home8.myspace.com
O15 - Trusted Zone: home9.myspace.com
O15 - Trusted Zone: i.myspace.com
O15 - Trusted Zone: images.myspace.com
O15 - Trusted Zone: invite.myspace.com
O15 - Trusted Zone: iprofile.myspace.com
O15 - Trusted Zone: js.myspace.com
O15 - Trusted Zone: login.myspace.com
O15 - Trusted Zone: mail.myspace.com
O15 - Trusted Zone: mail.4.myspace.com
O15 - Trusted Zone: mail1.myspace.com
O15 - Trusted Zone: mail2.myspace.com
O15 - Trusted Zone: mail3.myspace.com
O15 - Trusted Zone: mail4.myspace.com
O15 - Trusted Zone: mail5.myspace.com
O15 - Trusted Zone: mail6.myspace.com
O15 - Trusted Zone: mail7.myspace.com
O15 - Trusted Zone: mail8.myspace.com
O15 - Trusted Zone: mail9.myspace.com
O15 - Trusted Zone: music01.myspace.com
O15 - Trusted Zone: onlinenow.myspace.com
O15 - Trusted Zone: photo.myspace.com
O15 - Trusted Zone: profile.myspace.com
O15 - Trusted Zone: schools.myspace.com
O15 - Trusted Zone: search.myspace.com
O15 - Trusted Zone: searchlog.myspace.com
O15 - Trusted Zone: security.myspace.com
O15 - Trusted Zone: settings.myspace.com
O15 - Trusted Zone: http://signup.myspace.com
O15 - Trusted Zone: upload.myspace.com
O15 - Trusted Zone: viewmorepics.myspace.com
O15 - Trusted Zone: www.myspace.com
O15 - Trusted Zone: http://www.myspace.com
O15 - Trusted Zone: x.myspace.com
O15 - Trusted Zone: http://www.partypoker.com
O15 - Trusted Zone: luninis1.wright.edu
O15 - Trusted Zone: wings.wright.edu
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1125887081078
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: McAfee AntiSpyware Real-Time Scanner (McAfeeAntiSpyware) - Unknown owner - c:\progra~1\mcafee\MCAFEE~1\MssSrv.exe (file missing)
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - Unknown owner - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe (file missing)
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe

 

http://forums.mcafeehelp.com/viewtopic.php?t=65072

 

Hi addictive76,

msmsgs.exe is the executable for Windows Messenger. The fact that you're seeing it running now when you weren't before, is likely due to Norton. There is a feature to monitor the instant messenger program(s). Having the feature enabled will cause Norton to start the program so that it can monitor it. Turning the feature off will allow you to disable automatic startup of Windows Messenger, but it will also disable Norton's ability to monitor any other instant messenger apps you may use. Windows Messenger was designed primarily for use in network environments, and can be exploited to cause unwanted messages to be delivered and popup on your computer. One alternative is to completely uninstall Windows Messenger.

http://www.helpwithwindows.com/WindowsXP/tune-05.html

You have a lot of entries in your Internet Explorer trusted zone that likely should not be there. I recommend you download DelDomains.inf created by MVP Mike Burgess.

http://www.mvps.org/winhelp2002/DelDomains.inf

Save the file to your desktop. Right-click on the deldomains.inf file and select Install.
Reboot your computer.
This will remove all entries from the restricted zone, as well as the trusted zone. If you have added any entries to Internet Explorer's trusted zone and/or restricted zone, you will need to put them back. Then use Spybot's immunize feature, as well as SpywareBlaster by Javacool, and IESpyad by Eric Howes to add thousands of known bad sites to the restricted zone.

http://www.javacoolsoftware.com/spywareblaster.html

https://netfiles.uiuc.edu/ehowes/www/resource.htm

Remember to check for updates!

 

thank you for the advice. I followed all the steps so hopefully things'll be good now.

I had a ton of problems with symantec last night. I ended up deleting my Norton. Do you think it's safe to get it again? I run Ad-Aware, Ewido, Spybot, ie-iTrustAntivirus, and (before I deleted it) Norton but I still have a bug somewhere that's bringing me pop-ups. Plus now I don't have Norton.... Do you have any advice or recommendations for me? I'm kinda panicking.

 

Things to do:

On the Symantec site, look for an uninstaller for the NAV version you're using to get rid of any remnents, then I would re install it - I assume you have time left on the license. But up to you, you can get AVG (free) to replace it.

Lookup the background processes running on your system - this post links to data bases for that purpose http://www.windowsbbs.com/links.php Disable any processes that are not needed running in the background. Stuff like that only adds to the shambles.

To narrow down problems like this, shut down any non-essential programs. See if you're problems diminish or go away. In IE Tools > Internet Options > Manage, you'll see the BHO's that are hooked into IE. Either disable them all, run, enable them one by one, run between each re enable, or disable one by one.

Regards - Charles