constant pop-up windows

Alekz · Jun 9, 2005

My PC shows constatly pop-up windows with ads, and I can't get rid of it. Already scanned with Ad-Aware & Spybot, but they didn't help. I post my HijackThis log as an attachment.
Please, help.

AbbySue · Jun 9, 2005

We require our full clean procedure be run (ALL steps) in the order written before we will look at HijackThis logs. Please follow the steps below.

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above if you still have a problem:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

Alekz · Jun 10, 2005

Ok, i've done all requested steps and post my hijackthis log file. Is it Ok now?

chaslang · Jun 10, 2005

You really need to update your OS to at least the SP4 level of Windows 2000. But wait until we fix any other issues before we do that.

Make sure viewing of hidden files is enabled (per the tutorial).

Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [HELPER] D:\WINNT\system32\temp532.exe -N
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - file://D:\TempEI4\EI40_\msxml4.cab

After clicking Fix, exit HJT.

Boot into safe mode and use Windows Explorer to delete:
D:\WINNT\system32\temp532.exe

If you get an error when deleting a file. Right click on the file and check to see if the read only attribute is checked. If it is, uncheck it and try again. Other wise open Task Manager and kill the process if running then delete the file.

Now run Ccleaner (installed while running the READ ME FIRST).

Now reboot in normal mode and post a new HJT log. And tell us how things are working.

Alekz · Jun 14, 2005

Seems like now my system is OK. Thank u very much!!!
I post my new hijackthis log.

chaslang · Jun 14, 2005

Your log is now clean and I see you updated to SP4. Did you get all of the other security patches and updates too? You should now follow all the steps in the below thread to help keep you clean. You really need to get the firewall and antivirus applications installed very soon.

How to Protect yourself from malware!

Log in or Sign up

constant pop-up windows

Alekz Private E-2

Attached Files:

hijackthis.log

AbbySue MajorGeeks Administrator

Alekz Private E-2

Attached Files:

hijackthis.log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Alekz Private E-2

Attached Files:

hijackthis.log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member