Popups, popups, and more popups.

[MikeKingston]

Hey all.

Since I had some guests over last week I've noticed my new 3.2GHz computer slowing down to 90MHz speed. I started getting an average 5-10 popups a minute. I had google toolbar popup blocker but it still happened.. The problem was spyware so someone referred me to winguard popup remover (http://www.winguard.org) and it worked really well and took care of all my popups. But, now I also want to remove the spyware on my system.

Any suggestions? Thanks in advance.

 

[macdude425]

Try Spybot Search and Destroy.

Get it at:
http://www.safer-networking.org/en/mirrors/index.html

 

[Osiris]

Post an hijack this log for me

 

[MikeKingston]

Try Spybot Search and Destroy.

Get it at:
http://www.safer-networking.org/en/mirrors/index.html

Ok I just spybot and it took a lot of things off. I also had to run Adaware and Microsofts... it looks like I'm good to go.. Why cant there just be a good one that takes care of everything?

By the way, i would reocmmend winguard popup remover to anyone with popup troubles. I look forward to their new antispy program.

Thanks for everyones help. Mike.

 

[Osiris]

There are actually more items on your system so just to make sure, I would post a log

 

[MikeKingston]

Logfile of HijackThis v1.99.1
Scan saved at 3:40:07 PM, on 5/22/2005
Platform: Windows XP SP2, v.2149 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2149)

Running processes:
C:\WINXP\System32\smss.exe
C:\WINXP\system32\winlogon.exe
C:\WINXP\system32\services.exe
C:\WINXP\system32\lsass.exe
C:\WINXP\system32\svchost.exe
C:\WINXP\System32\svchost.exe
C:\WINXP\system32\spoolsv.exe
C:\WINXP\Explorer.EXE
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\ICQ\Icq.exe
C:\Program Files\Matrix Y2K\Matrix.exe
C:\Program Files\Winguard Popup Remover\Winguard.exe
C:\Program Files\Winguard Popup Remover\WinguardShield.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\XoftSpy\XoftSpy.exe
C:\Unzipped\hijackthis\HijackThis.exe

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [Winguard] C:\Program Files\Winguard Popup Remover\Winguard.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINXP\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll/search.htm
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

 

[Osiris]

Remove entries at your own risk:

Are you not using an Antivirus or Firewall?


O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.00.0001.1203\en-us\msntb.dll/search.htm The entry &MSN Search has been identified as nasty.

C:\Program Files\Matrix Y2K\Matrix.exe This is a unknown process.

 

[Static_11]

http://www.techist.com/showthread.php?threadid=53623


go there to get a firewall and/or antivirus and stop using IE if you are.... firefox is better with security and spyware and stuff link to opera and firefox is in there somewhere... thank Blitze105 as he took the time to make that list

 

[MikeKingston]

I'll remove the MSN search... Matrix is my HTML editor though. Thanks for your help. And if you want to help anyone with popups I was recommended winguard popup remover and I would recommend it back.

Thanks for all those who helped. Thx WarezMonster.

 

[Osiris]

Notta problem