popnav.com

  • Thread starter Thread starter Susan
  • Start date Start date
Not likely to be a native Outlook issue...try AdAware from www.lavasoft.de
to see if you have any spyware lurking on your computer, and do a full scan
with your antivirus software (make sure it's current generation and is kept
updated regularly).
 
Susan said:
When I open my outlook 2002, the view window goes to
http://www.popnav.com/ within about 5 seconds after
opening. This is a new one on me. I hate it. How can I
get rid of it?
Click to expand...

That's an online casino site and you've been invaded by malware. Get
AdAware from http://www.lavasoftusa.com/
--
Brian Tillman
Smiths Aerospace
3290 Patterson Ave. SE, MS 1B3
Grand Rapids, MI 49512-1991
Brian.Tillman is the name, smiths-aerospace.com is the domain.

I don't speak for Smiths, and Smiths doesn't speak for me.
 
Susan said:
When I open my outlook 2002, the view window goes to
http://www.popnav.com/ within about 5 seconds after
opening. This is a new one on me. I hate it. How can I
get rid of it?
Click to expand...

I got rid of it by locating the following file and renaming it. Use
Windows Explorer, go to the "Windows" folder, then the "System32"
folder, and look for a file called MSrdk.xml. Rename it to MSrdk.bak.
This seems to have eliminated the problem for us.
 
I got rid of it by locating the following file and renaming it. Use
Windows Explorer, go to the "Windows" folder, then the "System32"
folder, and look for a file called MSrdk.xml. Rename it to MSrdk.bak.
This seems to have eliminated the problem for us.
Click to expand...

there is a fix for this listed at
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_POPMON.A

On Windows 2000
Restart your computer.

Press the F8 key, when you see the Starting Windows bar at the bottom
of the screen.

Choose the Safe Mode option from the Windows 2000 Advanced Options
Menu then press Enter.
Removing Autostart Entries from the Registry

Removing autostart entries from the registry prevents the malware from
executing during startup.

To remove the malware autostart entries:

Open Registry Editor. To do this, click Start>Run, type Regedit, then
press Enter.
In the left panel, double-click the following:
HKEY_LOCAL_MACHINE>Software>Microsoft>
Windows>CurrentVersion>Run
In the right panel, locate and delete the entries:
Iefeatures = "%System%\IEFEATURES.exe"
MSVersion = %System%\IEFEATURESVERSION.exe"
%System%\ MSrdk.xml
stcloader = "%System%\stcloader.exe"
ClrSchLoader = "C:\Program Files\ClearSearch\Loader.exe"
Slmss = "C:\Program Files\Common Files\slmss\slmss.exe"
"mwsvm.exe"
Note: %System% is the Windows system folder, which is usually
C:\Windows\System on Windows 95, 98 and ME, C:\WINNT\System32 on
Windows NT and 2000, and C:\Windows\System32 on Windows XP.

Close Registry Editor.
NOTE: If you were not able to terminate the malware process from
memory as described in the previous procedure, restart your system.
Uninstalling Downloaded Components

This procedure removes the components installed by the malware.


Open Control Panel.
Double-click Add/Remove Programs.
In the list of installed programs select "Lycos SideSearch" and click
remove.
Open a command prompt windows. Click Start >Run, type CMD and then
press the Enter key..
At the command prompt, type the following:
regsvr32 /u mwsvm.ocx.
Still in the command prompt, type the following:
regsvr32 /u ieasst.dll
Close the command prompt window.
 
Back
Top