Crazy Pop-up Window

Question

I'm having quite a few issues with my computer.  It started with an error message that continuously pops up no matter what I'm doing.  It says:  'msmsgs.exe Application Error:  The instruction at 0x00f89bb3 referenced memory at 0x10005260.  The memory could not be read.'  This pops up all the time, whether I'm on the internet or working in a Word document.    When I e-mailed Dell tech support they said it was adware.  So I ran my virus scan to make sure that wasn't the problem.  No viruses.  I downloaded spybot and spysweeper and Microsoft Antispyware, like I was told to.  It found spyware, but it didn't stop the error message from popping up.  In fact, it created all sorts of other problems, so many that I went ahead and uninstalled all the software that I'd downloaded.  I'm thinking that I should just get the spyware protection fom Norton, which is where I got my virus protection.    From reading this, you can tell that I'm no computer expert.  I'm at a loss on what to do now.  I'm leaning towards taking it to someone who can repair it, but I know that will cost an arm and a leg.  Does anyone have any thoughts on what's going on and how I can fix it?  Thanks so much for your help!     Dell Dimension 4500 Windows XP Home edition

msil217 · Answer

If you don't use msn messenger, remove it in Start-- Control Panel,---add/remove programs, add/remove Windows components and remove by unchecking "Windows messenger", then next.

Complete the process.

(You may have to right-click and shut down msn messenger in the system tray)

But if you use msn messenger, nevermind.

sumc3344 · Answer

Oh, how I wish this were the problem.  I did this awhile ago because I don't use MSN messenger.  I also went into the my administrative tools and under the services, I disabled messenger, which I was told would immediately take care of this problem.   Does anyone have any other ideas??   Thanks!

msil217 · Answer

The messenger in 'Services' is not the same thing as MSN messenger. MSN messenger has the little 'man' icon in the system tray. Did you try uninstalling MSN messenger (Which is called 'Windows Messenger' in add/remove, Add/Remove Windows components)

sumc3344 · Answer

Ok, I'll try that.  Thanks so much for all your help!  :smileywink: ~Beth

msil217 · Answer

Yes, download and run Hijack This.(create a log) Then post your results in the Hijack This forum.

sumc3344 · Answer

Yes, I removed Windows Messenger from the Add/Remove Programs window. It's definitely gone as far as I can see.

I just downloaded and ran several scans (as directed by MajorGeeks.com) - Adaware, CCleaner, Spybot, SpywareBlaster, AVERT Stinger, CWShredder, Kill2me, about:Buster, HSRemove. A lot of viruses and malware were found and deleted/quarantined. I just rebooted into normal mode and have already been getting this stupid popup window again. I just don't understand it.

I've read about Hijack This - Should I try downloading that now??? I'm just wondering if this is some kind of virus or what in the heck it is. So confused....

ky331 · Answer

just wanted to point out another possibility: this discussion has been assuming that msmsgs.exe is the legitimate microsoft network/windows messenger service. and it may well be.

but be advised that there are indeed a great many worms/trojans that "disguise" themselves by using [or should we say, ABUSING] the name msmsgs.exe

sumc3344 · Answer

Thanks for your advice.  I ran Hijack This and posted the log in the appropriate forum, so hopefully someone will see it and be able to pinpoint what exactly is going on.  Thanks again! ~Beth

ky331 · Answer

some of the scans you indicated (ad-aware, spybot) are excellent, "generic" (i.e., highly-inclusive) scanners, that will catch a "significant" percentage of the adware/spyware out there.

other tools (About:buster, HSRemove, kill2me, CWShredder) are very "specific" tools, that only look for a very particular/specialized issue... about:buster only looks for a particular form of something called about:blank ; kill2me works on Look2Me; and CWShredder fights CoolWebSearch. unless you have these particular infections, these specialized tools wont help you.

HiJackThis is among the most general, and most powerful tools available. you'll have to seek help in interpreting what it tells you... if you want to try, here's what to do:

Download the latest version of HJT(hijackthis) (version 1.99.1) from

http://majorgeeks.com/download3155.html

you must create a separate folder and place it there.... people commonly use C:\HJT. Note: Please do *NOT* use a TEMP (temporary) folder, *NOR* your DESKTOP, as HJT will be generating log files and backup files in the folder from which it is run... you risk accidentally losing these if you use a TEMP folder, and you will generate extreme clutter if you use your DESKTOP.

The file above comes as a compressed .ZIP file... you have to UNzip it (hopefully, you have an UNzip utility built into your Windows Explorer. If for any reason, you're unable to UNzip it, you can download the already-unzipped .EXE file from http://downloads.malwareremoval.com/HijackThis.exe )

After Unzipping, double click on HiJackThis.EXE

Click on Do a System Scan and Save a LogFile

This will automatically open NotePad

Copy the entire file from NotePad: EDIT/SelectAll, EDIT/Copy

Then go to the new forum dedicated for HiJack This logs (**NOT** back here), and PASTE the results there:

http://forums.us.dell.com/supportforums/board?board.id=si_hijack

Be sure to include a detailed description of any problems/errors/warnings you are encountering.

Hopefully, one of the HJT experts will get to it as quickly as possible.

WARNING: HiJack This is a VERY POWERFUL tool. Do *NOT* do anything else (in particular, do NOT use it to delete any entries) until you are advised to do so!! Improper use of this tool can severely damage your system.

Supplemental note: The procedure as worded above has been carefully edited over time, so as to expedite the process of helping people. Nevertheless, it seems that many individuals try to be "creative", and make some variations. It really would be to your benefit if you follow these directions EXACTLY as stated... because certain changes on your part can result in slowing-down the help process.

Specifically, the following are 3 very common BAD deviations which will cause delays:

a) BAD: using an older/outdated version of HiJackThis...

The experts only work with the current version. So if you make a post with an older version, you'll simply be advised to get the latest version, re-run it, and re-post your log.

b) BAD: using a TEMP directory or your DESKTOP for HJT....

Some experts may insist you move HJT before they'll begin working with you. Others will start the repair process, advising you to move HJT as one of the very first steps. Failure to do so can result in losing potentially critical information. So please, just use the suggested C:\HJT directory, rather than try to be creative.

c) BAD: posting your log in the wrong forum...

if you post your log back here, in the Virus/SpyWare forum, it will "sit idly", either until the forum moderator gets around to move it for you... or until you decide to repost your log... in the HiJackThis forum.

Virus & Spyware

Was this post helpful?