Cannot remove pop-ups, please help!

I have spent almost 2 days straight going through all the processes I can think of and doing research and I have not been able to remove these annoying pop-ups. I had a bad spyware problem at first, got rid of most of it, but now none of the programs (ad-aware, spybot, symantec, spyware doctor...etc) are detecting anything and I still have pop-ups. I am not incredibly knowledgable about any of this, so any suggestions will help. The pop-ups are for "zesty find", "win anti-virus", and others, mainly targeted at my searches or bogus adware software. Thank you in advance for your time... this is one giant headache. I did a Hijack this scan and here are the results:

• Edit by bjgarrick: Unrequested, Inline HJT log removed!

(sorry if I posted that wrong)

 

Welcome to MajorGeeks.com!

Please follow forum guidelines and perform cleaning steps in the sticky thread before posting HijackThis logs.

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

http://www.majorgeeks.com/images/grenade.gif Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

• Make sure you check version numbers and get all updates.

http://www.majorgeeks.com/images/grenade.gif Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

http://www.majorgeeks.com/images/grenade.gifAfter doing ALL of the above and you still have a problem, make sure you have booted to normal mode and run the steps in the below thread to properly use HijackThis and attach the log:

http://www.majorgeeks.com/images/grenade.gif Downloading, Installing, and Running HijackThis

 

Sorry about the previous incorrect posting, here is the Hijack this log. and I have gone through all of the steps in the listed threads... multiple times. At this point I just need advice.

 

I have done countless spybot scans, I have the bitdefender log saved, but the panda activescan won't work. The bitdefender log is attached... any other suggestions before we get into the complicated stuff?

 

Please see the below thread on how to install and run Ewido Security Suite.

Running Ewido Security Suite ...

 

Ok, I have completed the process for ewido exactly and then rescanned with Hijack this. here are the two logs. Thanks for walking me through this.

 

Please see the below thread on running the L2MeFix Tool.

• Look2Me VX2 Removal

 

Thanks for all the help! That last one finally did it!

 

Please attach a fresh HJT log to confirm your clean.

 

sure thing.

 

Look in Task Manager (Ctrl-Alt-Del) for the following running processes and, if you see any of them, try to END them:

VCClient.exe

Now scan with HijackThis and Check the Boxes for the following:

Make sure All Browser Windows are Closed when you Click FIX.

R3 - Default URLSearchHook is missing

O4 - HKLM\..\Run: [System service66] C:\WINDOWS\etb\pokapoka66.exe
O4 - HKLM\..\Run: [drsmartloadb] c:\\drsmartloadb.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [Shell] "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe"
O4 - HKCU\..\Run: [CU1] C:\Program Files\Common Files\VCClient\VCClient.exe O4 - HKCU\..\Run: [CU2] C:\Program Files\Common Files\VCClient\VCMain.exe

O20 - Winlogon Notify: Extensions - C:\WINDOWS\system32\dn4001hme.dll (file missing)
O20 - Winlogon Notify: msupdate - msupdate32.dll (file missing)

Again, make sure All Browser Windows are Closed when you Click FIX.

NOW:
Please boot into Safe Mode with the Viewing of Hidden Files & Folders Enabled and navigate to and DELETE the following if they should remain:

C:\WINDOWS\etb ←–– Delete this whole folder if it exist!

C:\Program Files\Common Files\VCClient ←–– Delete this whole folder if it exist!

C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe

NEXT:
Run CCleaner to clean up cookies and temp files.

Run full scans with Ad-Aware SE & Spybot S&D and have both programs fix what they find.
Note: Remember to get all updates before doing the scans.

Then, as an added precaution, Go to Start > Run and type: cleanmgr and then click OK. Make sure the boxes for these are checked:
Temporary Files
Temporary Internet Files
Recycle Bin

And Click OK.

After you complete the above, reboot and procede with the below...

Reset Web Settings & Default Security Settings:

To Reset Web Settings:
Right click on your desktop Internet Explorer icon and select Properties. Then click the Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK.

If you do not have an Internet Explorer icon on your Desktop, click Start, Control Panel (for some systems it may be Start, Settings, Control Panel), Internet Options, Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK


To Default Security Settings:
Right click on your desktop Internet Explorer icon and select Properties. Then click the Security Tab and click Default Level for Internet, Local Intranet, Trusted Sites, and Restricted Sites.


Finally, I would like you to Flush your System Restore Points. Please follow the instructions in this link --->Disable and Re-enable System Restore

• First, turn OFF System Restore to flush any bad Restore Points.
• Then, follow the instructions at the bottom of the linked page to Re-enable the Restore Utility which will create a fresh restore point.

After you complete the above, reboot and let me know how things are running.