Multiple Pop-Ups Help!

Please read the announcement and sticky threads. HJT logs should only be posted when requested and then they must be attachments to your message. Also you must install and run HJT properly (you are not).

Please run the steps below.

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

Also while in safe mode you could try deleting:
C:\Program Files\winsupdater <--- the whole folder
C:\WINDOWS\system32\winlog.exe <--- the file


After doing ALL of the above you still have a problem, boot into normal mode and make sure you follow these directions:


- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

 

Also note the below service is bad:

O23 - Service: Windows Overlay Components - Unknown owner - C:\WINDOWS\ukbjenl.exe

If you understand step 2 in the READ ME FIRST, you can do a similar procedure to stop and disable this service.

 

After running all the required steps of the READ ME FIRST. Here is some info on getting HijackThis installed properly.

Download from us to make sure you have the correct version: Hijack This!

Creating the C:\Program Files\HJT folder:

· Click START and select Explore.
· Select the drive where Windows is installed (normally drive C)
· Navigate to the C:\Program Files folder and select it.
· Now click the on the top menu where it says File and then select New.
· Then select Folder
· A new folder is created and highlighted.
· Just type HJT to overwrite the default name (New Folder)


To extract hijackthis.exe on WinXP systems without WinZip:

· locate the HijackThis.zip file you downloaded and right click on it
· Select Extract All and click Next
· Browse your way to the C:\Program Files\HJT folder created above
· Select the folder and click Next

Using WinZip(assuming it is installed):

· locate the HijackThis.zip file you downloaded and right click on it and select Extract to. This will open Winzip.
· Use the Folders/drives navigation pane to locate and select the C:\Program Files\HJT folder you previously created. After selecting it, make sure it shows in the Extract to: box.
· Click the Extract button