Chaps, my old man has had a couple of screens pop up on his desktop (see attached).

I'm 99% sure they're hoax kind of messages - I don't see MS Windows file protection system would ever identify viruses, trojans or the like.

A complete system scan with AVG produces nothing, and neither does a spy software scan (using Adaware).

So, being 99% sure it's a hoax, how the hell is it appearing?

He's running XP Pro with SP1, all the latest security patches. Connected to the net via a D-link wireless router and also runs Tiny Personal Firewall ( in my books).

He has clicked "No" or the cross to close the window. Wonder if any harm would be inflicted in the immediate if he were to click "Yes" - it could show what software / website is causing this in the first place.

Could it be a MSN Messenger "bug" allowing scare hoaxes or other?

Any suggestions?

Cheers

Defintely a hoax job -he's probably got some kind of ad server on there. Get hold of a copy of Spybot, which is a freebie, and will find any of that junk and remove it.

Phil

don't click yes an install some firewall software

As above, plus ensure all the updates are installed for windows using windowsuopdate.

As Phil says, the software is already installed. As well as SpyBot, go to www.lavasoft.de and download the free version of AdAware and update and run this also.

When all that's done, go here

http://www.trendmicro.com/en/home/us/personal.htm

and run "housecall" which is a one-off virus scan of the complete system.

Uhm thanks for the info, but already tried most of that.

Simon, he has a fully regged, up to date antivirus (AVG). He also has installed and updated AdAware and still nothing :(

I'll give SpyBot a go too. Maybe you just can't have too many anti-**** software :thumbdwn:

What is the name of the process that is producing the dialog boxes?

And there's no harm in getting a second opinion, from Spybot / Trend-AV.

You really need to use Spybot and Adaware together as neither covers the whole spectrum

Chris

I don't know the name of the process Simon :(

But did ask him to download spybot and did a run following an update. Over 20 things found, so hopefully, that will have cured it

I think these are just GIFs displayed in a borderless IE window and when you click on them anywhere then it downloads spyware or dialers. We had something similar at work a few weeks ago.

Don't know if this will help or not but...

Some Internet Explorer ads are designed to look like Windows pop-ups. If these messages keep appearing when using Internet Explorer (or exiting IE) then they could be IE windows dressed up as Windows pop-ups. As everyone else says just don't click yes as you don't know where this will take you or what it will run.

If you want to check if its an IE window then when it appears run task manager and goto the application tab. See if it appears in there with an IE icon next to it.

Download and instal Avast home , its a free anti virus that is excellent, ok then miles better than AVG.

But what you mustnt do is to click Yes or No, only close the pop-up via the X box in the top right corner.

There are lots of diallers/spyware/irritations that use both yes and no to download to you and the only way to avoid them is to close the pop-up via the X.

EDIT: XP doesnt have the ability to notify on virus, trojan, worm or pop-up/spyware. The new service pack will have, apparently, but the current editions dont.

I know that you seem to have cleared this one up, but for future reference here's the official MS response:

http://support.microsoft.com/?id=827315

try spy sweeper i dont rate ad aware at all infact spysweeper is currently the best anti spy software avalible. pm sent regarding this

I have heard its best to close pop-ups by the alt & f4 button, have heard there is a virus which is activated by closing the box with the x. I downloaded spysweeper (http://www.webroot.com/wb/products/spysweeper/index.php ) the other day, was shocked to se how many items ( & traces) of spyware that were on my pc. I reg, run spybot & ad aware.

Excellent advice A-B girl, do you have a relative in IT?