virus asking for reg fix. restarting windows

[alidabiri]

hi,
i have learned a lot by reading the above problems and solutions. i'm gonna keep my admin account safe and sound and use a guest account from now on. now i see how hackers get to our pc's - by recognizing your admin account and using it to do harm.
i have installed win-xp-prof recently. after installation (a couple weeks later) and after having used admin account for 2 weeks, i keep getting these pop ups and the final pop-up informs me that my system will shut down in 30 seconds, and it forces a shut down. here are the pop ups with an "ok" and "x" button for close. the pop ups ask me to go to the following sites and fix my registry. it says windows has found severe problems with my computer. here are the sites they want me to visit. how do i get rid of these? i guess they want me to press "ok" button, and that way they get to do their dirty work. here are the sites:
xww.pccleaner32.com
xww.regfixer.com
xww.clearthispc.com
xww.fixnow.com
xww.registryalert.com
xww.fixreg32.com
xww.fixthereg.com
xww.helpfixpc.com
i googled all of these sites. google didn't find anything on these. i also found out that the pop ups come from an application called "messenger". i deleted all references to "messenger" in regedit. there were a total of 285. i had to delete all. it seemed to have reduced the popups. and hasn't forced any shut downs. but i still keep getting these bogus popups. i don't how to get rid of these awful things. anyone knows anhthing about this? please let me know.

Disabled Urls.

[tashi]

Hello alidabiri and welcome to the forum.

Could you provide a Spybot-S&D log please.
Also please list any other security programs you have on this computer.

Spybot-S&D
Open SpyBot, check for and get any updates available, close all browsers, check for problems and fix everything found. Then on the toolbar menu select mode and switch to advanced mode, on the left lower down select tools, and view report, ensure all the options are selected near the bottom except Uncheck[ ] do not report disabled or known legitimate Items.
uncheck[ ] Include a list of services in report.
Uncheck[ ] Include uninstall list in report.

Now select (near the top) view report.
Press export in the save in box choose a place such as your my documents folder, then in your next post near the bottom select the "browse" button; navigate to and attach or post that report please.

If you are running an older version of Spybot-S&D.

Spybot-S&D 1.4 Final has been released.
Uninstalling Previous Spybot-S&D
Spybot-S&D Version 1.4 Download

Tutorial

Cheers.

[Lanka]

Yes, I am also experiencing the same problem. In a new PC, so It must have come with the software I had installed, BitDifender8, nor the NortonAV can not catch it. So are ADAware. I downloded the Newest virsion of Spybot and as suggested will upload the Report. Hope you can fix this nasty bug. The Picture of an annoying Alert Message is also attached as a gif file

[Lanka]

Thanks to "PC World" and the "Response to "Messenger service"
Posted Wed Nov 09 09:53:00 EST 2005 by Gordon Drennan"

Here is the link for that page

http://www.helpscreen.com.au/index.p...88006693&cid=7

Its actually really easy to fix. All you have to do to stop this is turn off messenger service. This is how you do that: http://www.microsoft.com/windowsxp/u.../stopspam.mspx

[Sentey]

thanks for this post i've been trying to do something with that for weeks edited the registry and i had to reformat my computer now i think than thanks to this post i will be better or my computer


~thanks Bill Gates for make such good operative system~



ÞSenteyÞ

[Terminator]

As well as turning of the Messenger service there are some good programs out there that block any and all messenger service pop ups from appearing. The 2 I know off are "Message Defender - £9.99" and "Don't Shoot The Messenger! - Freeware". I've been using "Message Defender for the last 4-5 years and I've never had a problem with it.

The Messenger system does have it's uses e.g. like letting you know your ups system needs attention but it's so open to abuse I reckon Microsoft would be better off leaving it out of Vista.