My computer is pretty much gonerz

Please do not post any logs inline with messages. HijackThis is the last step to use.

SpywareNuker is not a recommended program to use. At one time it was even listed as a rogue tool on the below list. It is delisted now, but we do not recommend using it it.

http://www.spywarewarrior.com/rogue_anti-spyware.htm#swn_note


Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

• Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
• Make sure you check version numbers and get all updates.
• Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

• After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis







​

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)

• Bitdefender
• Panda Scan
• HijackThis

Question: Did you set your Main and seach pages to about:blank (like below) on purpose?
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank

Serious Note: If you have files like ibm0001.exe on your PC, you could have a serious problem to deal with related to a password stealing trojan. Your financial accounts (passwords etc) may have been compromised. See this link:

http://www.liutilities.com/products/wintaskspro/processlibrary/ibm00001/

 

You need to run CounterSpy and attach the log as requested in the READ ME. You do not appear to have run Spybot either. At least it is not installed as requested with the SDhelper function. You also did not follow the instructions in step 7 and as a result have HJT installed exactly where we do not want it installed. Please install it properly.

Also please do not attach links to logs at remote sites. Attach your log here as the links given in the READ ME instruct.

You have no protection software installed on this PC:
- no antivirus
- no antispyware
- no firewall

This is extremely dangerous and can result in huge amounts of malware infecting your PC. This may also be the reason you are getting so many popups. You have nothing installed to block anything bad.

Like I said before the ibmxxxx.exe files are password stealing trojans and your financial security can be a severe risk.

Let's get an installed programs list from HijackThis!

• Run HijackThis, click Open the Misc Tools section
• Click Open Uninstall Manager
• Click Save List (generates uninstall_list.txt)
• Click Save, to save it to a file where you can find it.
• Attach the uninstall_list.txt file to your next message.