Can't submit, so here is something interesting...

[Ben]

Due to the 'internet parameters' issue, I can't submit
so...

When I log into my machine, and before I open IE, I get
popups... for:
Registry Cleaner:
http://z1.adserver.com/w/cp.x;rid=51;tid=2;ev=2;ac=29;mid=
377

and

'* * * *** System Warning' 'PC Update' - 'your pc may be
infected with dangerous Spy Ware and AD Ware'

(no kidding - reminds me of the Gary Larson cartoon of a
paper advertisement reading 'Bricks Through Your Window?'
wrapped around a brick which has just crashed through a
window.)

and

'Click Here' 'Do you Want to Block Junk Emails?'

I don't see any funny services or processes running other
than PrismXL (what IS that?). And I can't see an easy
way to extract the system report to post it here.

Mostly MSAS has done a great job for me, but there is
this one insidious bug, that must be hidden in startup
somewhere. Oh, I tried Buster. No dice.

 

[FeMaster]

I don't see any funny services or processes running other
than PrismXL (what IS that?).

http://www.spywareaid.com/index.php?file=o23&action=view&id=285
http://www.processlibrary.com/directory/files/prismxl/

QUOTE:

prismxl.exe is a process belonging to Lanovation PrismXL, a remote computer
management solution. This program is important for the stable and secure
running of your computer and should not be terminated.

 

[Bill Sanderson]

Hmm - one man's "remote computer management solution" is another man's
trojan.

This doesn't sound like the source of those popups, but it is definitely
something to find out more about fast. Such software found in place should
be something that you know about, or understand that management has put in
place in a corporate setting. It may be something that a vendor has put in
for support purposes--but you should verify this--and if you aren't in fact
using it, consider removing it.

 

[Ron Chamberlin]

Hi Ben,

Are you on an enterprise system perhaps?
Check this for some listings that 'may' indicate the program 'may' be legit
and needed by your Network Admins.
http://www.google.com/search?hl=en&q=PrismXL+

Ron Chamberlin
MS-MVP

 

[Hightyde10]

I have that same problem...and the same PRISMXL.exe file. If you find out what this is or if anyone else knows that would be great!