Can't stop getting popups

Discussion in 'Malware Help (A Specialist Will Reply)' started by ScarletWings, Jun 20, 2005.

  1. ScarletWings

    ScarletWings Private E-2

    Well I've run Adaware, Spybot, and Norton Antivirus with minor success. It detected spyware and removed it, but I'm still getting the popups. I noticed that whenever a popup occured, a filed called 'load.html' appeared in my 'C:/Documents and Settings/gary/Temp' folder. It doesnt' appear in the All Users & Default one.

    Here is the most recent Norton Antivirus log.

    I also decided to run that 'Find-Qoologic' file that I read in other threads. Click here to look at the log. What I find strange is that I deleted all of those files a couple days ago from what I can remember. They can't be found when I do a search, so they haven't reappeared.

    Any help would be appreciated. I really don't want to reformat my computer. One other note that may help, is that it seems to be timer based. As in it starts exactly at 3 pm. When I open my IE that time a popup happens. It stops around 10-12 pm.
     
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Be careful what tools you run because some of them can do more harm than good. Without one of us asking I wouldnt suggest running those tools without knowing how to remove files found and so on.

    First, please follow ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    After doing ALL of the above if you still have a problem:


    http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

    http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

    http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

    http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

    http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds