OT - Porno Ad Pop Up... :(

[Guest Joshieca]

Heres something...maybeI have two task managers running....One is spelled... taskmgr.exe lowercase, using 3,516KThe other is TASKMGR.EXE upper case, using 8,146KTaking a look at my windows folder where these program are at...I have program called TASKMAN.EXE 15kb created 8/23/2001The other is called taskmgr.exe 176K created 6/17/2002Could maybe this thing changed the name of my windows task magnager to TASKMAN.EXE and up in place their own taskmgr.exe?Can some who is running WIN XP PRO please check their c:windows folder to see if you have these programs??Thanks...

[Guest]

That is strange. The real taskman.exe is 15k. Try moving that 176k one out to a temp folder and reboot... http://members.rogers.com/eelvish/elrondlogo.gifhttp://members.rogers.com/eelvish/flyurl.gif

[Guest Joshieca]

If you check your c:windows folder...you see a taskman.exe but no taskmgr.exe?>That is strange. The real taskman.exe is 15k. Try moving >that 176k one out to a temp folder and reboot... >

[Guest Joshieca]

I think thats it....I will know in a few days if it reappears..There was a program called taskmgr.exe that installs itself in the c:windows directory. It masquerades itself as the Windows Task Manager program. When you start windows it fires up also and sends out random daily commands for those porn pop ups to appear. Its based on date. By changing the date forward I was able to make the pop up appear more often.So I removed the file from my C:WINDOWS directory and renamed it taskmgr.zip. Rebooted...seems fine. Changed the date to the 27th...rebooted....seems fine no pop ups.....changed back to current date.....seems fine....keep my fingers crossed. :)There is a program in C:WINDOWSSystem32 also called taskmgr.exe...its 126k and created on 8/21/2001... I think that this is the REAL one that comes from MS...can someone confirm if they have this in their folder???One more thing here....can someone who is comfortable with using regedit do search for taskmgr.exe and see if anything appears...I have two locations....one is for the one which I think is the bogus taskmgr.exe in my C:WINDOWS directory....the other one is for the real taskmgr.exe which is the C:WINDOWSSystem32 If someone could confirm this, it would be greatly appreciated....Thanks for everyone's help.......Josh

[gosta 0]

"There is a program in C:WINDOWSSystem32 also called taskmgr.exe...its 126k and created on 8/21/2001... I think that this is the REAL one that comes from MS...can someone confirm if they have this in their folder???"Yes, it's there - see attached screenshot. There's also taskman.exe at 15KB, both created on 23 August 2001.I didn't find any registry entry, though. The only taskmgr.exe entry was for a completely different program.Cheers,Gosta.

[Guest]

Hi Josh,After all this: I'd suggest you simply reinstall Windows. You can do so without formatting your drive or loosing your documents and such quite easily by simply removing Windows itself and nothing else. The method depends on weather you've used NTFS or FAT32 however, so let me know here and I'll give you the procedure. I do think it'd be your best bet now as its a relatively painless procedure and will restore confidence in your system - which I'm sure you're lacking a bit now.Take care, http://members.rogers.com/eelvish/elrondlogo.gifhttp://members.rogers.com/eelvish/flyurl.gif

[Guest]

Visit this web site www.pcworld.com/ and on left middle page under news there is an article about "Has your browser been hijacked"? read it carefully and then somewhere down the end of the page there is an uninstall link to www.lop.com.This could very well be your problem as they seem to target or use mp3 names to hoodwink unsuspecting surfers.good luck.Bill

[Guest]

Well... with 1,152 views at this time (Sunday 1:30 MT) a topic with the word "porno" in the subject line beats all the rest by a factor of at least 3.

[gosta 0]

Hi Elrond,I'd be interested in that procedure, and I'm sure lots of others would too. Why don't you post it anyway? That would be most appreciated.Cheers,Gosta.

[Guest Joshieca]

:(http://members.cox.net/joshieca/fstimeslink.gif

[Guest Joshieca]

Well I think (HOPE) that the problem has been solved...I think that it was this little program called taskmgr.exe that I found in my C:WINDOWS directory.I know that there is one in the C:WINDOWSsystem32 directory and thats the one from Microsoft....but this one was in the directory above was the little virus like program possing as a MS program.Since I have removed that file it hasn't happened...I should know in few days if its gone for good.Thanks to all for all of your help and suggestions...- Josh >:-)

[Guest Joshieca]

I think that I have it fixed....but I still would like to hear your procedure....I am runing the WIN XP drive under FAT.Thanks.....Josh>Hi Josh, >>After all this: I'd suggest you simply reinstall Windows. >You can do so without formatting your drive or loosing your >documents and such quite easily by simply removing Windows >itself and nothing else. The method depends on weather >you've used NTFS or FAT32 however, so let me know here and >I'll give you the procedure. I do think it'd be your best >bet now as its a relatively painless procedure and will >restore confidence in your system - which I'm sure you're >lacking a bit now. >>Take care, >

[Guest]

Hi Gosta,Of course. I've placed it in the hardware forum since that is probably the correct forum for such information:How to clean reinstall Windows without a reformathttp://ftp.avsim.com/cgi-bin/dcforum/dcboa...rum=DCForumID56Take care, http://members.rogers.com/eelvish/elrondlogo.gifhttp://members.rogers.com/eelvish/flyurl.gif