please help with adware

please help me to get rid of the agressive adware. every minute or so when i'm online pop-up window show up declaring itself as ''messenger service''. there are several different messages like
''from system to alert''...date and hour...
''critical system error'' or ''corrupted registry''
''go to http://www.saferegfix.com'' or ''www.e-registryclean.com''
''install program 'regfix' blah blah''

this adware slip in my pc through nod antivirus, kerio firewall and spybot. can i point this messages somehow to spybot or delete them with hijackthis. i'm user only and afraid not to delete something with hijackthis, and anyway i can't recognise this bugs in task manager or hijack logs.

any sugestions?

 

hijackthis analysis should help you with what highjackthis finds..good luck

 

thank you very much smoove, it works!

 

nope, they are back same as before

i did scan with hijackthis and submit to analyse to that page. i fixed (deletd) with hjck 10 out of 30 items, all marked as nasty of unnecessary, then deleted temporary internet files and cookies, then rebooted. for couple of hours everything was ok, then they were back. in that time i was online only here in hipforums, no questionable sites, so i couldn't pick it up again - it's same bug as before, not a new one.

 

ad aware seems to work for me....cnet.com then downloads..its free

 

i tried, doesn't work
thank you for suggestion

 

In this case maybe stopping your messenger service in your system control pannel helps works for win2000/winxp

 

As above,
Stopping Messenger based ''POP-UP'' windows using XP.

This is how I did it.! It's failsafe.
Goto START - CONTROL PANEL then
Make sure you click CLASSIC VIEW if not already clicked.
click ADMINISTRATIVE TOOLS then SERVICES
scroll down the list and find and click MESSENGER
in the options box select DISABLED then click STOP
underneath it, click OK and hey presto no more pop-ups.

 

Two programs:
1. Spybot Search & Destroy
2. SpywareBlaster

One problem is that some Pop-ups are .swf format.
Then you have Pop-Unders that you have to close manually.

 

With Windows Messenger Service?

That's easy.

Go to Control Panel.
Go to Administrative Tools
Open up "Services"
Find "Messenger" and right click it, and disable the option.

That will do it for you. It's not spyware or adware. It's the Windows Messenger Service being taken advantage of.

Since I doubt you actively use it, you can safely turn it off with no ill effects.

 

easier....download and install a freebie.....

xpantispy......http://www.softpedia.com/get/Internet/Popup-Ad-Spyware-Blockers/XPAntispy.shtml

 

i did what nemisis and hikaru zero suggested and so far it's working. this malware of whatever is not recognised with all that tools recomended, it's unusual format as matt suggested or it's camouflaged somehow not to be recognised. btw it's not windows messanger service, but messanger service only for communication between user and servers, as i understand windows' description. it's so rarely used - almost never - that it can be safely disabled. so, if anybody get similar problems, voila.
thank you everybody for help and suggestions
zeljko

 

No problem. Your situation is very common, that happens to many many people. Windows Messenger Service is a part of Windows that runs in the background, it's virtually useless, but people figured out that if they could grab your IP address, they could send you ad "messages" by abusing it.

 

how is this option disabled on windows XP?
in control panels I cannot find the administrator settings

 

ok nm I got it
its under performance in winxp

 

any and all services can be found in xp by going to

control panel
administrative tools
services

it they're running, stop them & set the status to disabled or manual....be careful what you disable

 

oops I meant win2k in my posts