Oxymoronic Firefox

Actually the user has not completed the READ ME FIRST yet!!!!

 

Please stop quoting whole messages unnecessarily. You are only cluttering up your own thread and making it harder to work on.

I'm going to clean them up in a minute or two.

 

See message number two in this thread. Part of the requirements before posting a request for help and especially before posting a HijackThis log are to run all steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

As I pointed out in message # 5, you never ran the thru the sticky thread. If you had, you would not be saying you do not have CCleaner. Go back and run ALL the steps in the sticky thread as is required.

 

Tip: You must remove one of the AV applications. Only one should be used.

 

Did you guys ever consider that the popups could be related to the site being accessed and are normal? Perhaps you just need to use a popup blocker (even use FireFox instead of IE because it has one built in) or change your IE settings (but this will also restrict certain pages from loading correctly too).

Do you ever get any of these "popups" while only accessing MG's?

What site appears in the popup (what URL if any, what are they advertising)?

 

Download this: Find It 9x/ME

Unzip this file to a folder of its own (like c:\findit ) and run "FindIt9xME.bat" - Allow it as much time as it needs to run. You may get an error message of "File Not Found," but just let it run.

The tool should generate a log file. Attach this log as an attachment to your next post.


Also do the below:

Generate a StartupList log using HijackThis.
Run HJT and on the first screen, click the button that says "Open the Misc Tools section". In the next window first select "List also minor sections (full)" and then click the button that says "Generate StartupList log". CLick Yes to the Do you want to continue prompt. Now a notepad window will come up with the Startuplist.txt file. It is already saved in the the directory HJT is running from. So just come back here and upload the file as an attachment to your next message.

 

You have a very bad Look2Me VX2 infection. Let's try the below:

- Since you still never completed all the steps from the READ ME, please do that now. Go back and run the RAVantivirus and BitDefender online scanners and then do the below.

Download VX2FInder9x

Exit ALL browsers and physically unplug your cable to the internet before continuing (so print or save these instructions locally first).

Run the VX2Finder9x.exe prorgam.
Click the "Click to find VX2 BetterInternet Button".
(If any files are there) select all those files then click Delete files.

Then click "User Agent$" which will restore the proper one.

Then "Restore Desktop" (Dont be alarmed. The desktop will disapear then reappear again.)

Next click "Import Reg"

Then close VX2 finder.

Now reboot your PC and run the "FindIt9xME.bat" program again and reconnect your cable to the internet and come back here and post the new findit log. Let me know if popups are still occurring.

 

What deleted it?

Just unzip from the Find It 9x/ME file you downloaded again.

 

I'm not sure what you are thinking about here???

Earthlink is not the cause of your problems. Where you have been surfing and what you have been downloading and installing on your PC are. While somethings can get installed without you knowing it, it is normally related to where you have gone or what other items you downloaded and installed. Also if you are on the internet without adequate protection on a PC, you are beggin for trouble.

You PC is infected now! Either complete the instructions or fdisk, format and reinstall your OS (and then get properly updated and protect ASAP). It's your choice.

 

So unzip it again and run it per previous instructions again.

 

I'm not sure what you mean. Did you run the findit tool again? It does not fix anything. It just helps us to look for potential problem files?

 

It's been over two months since we started to fix your PC and then you just disappeared. Not a good idea since alot can change in even a week. But since you waited more than two months, who knows what shape you are in now. The log shows 400 or possible infected DLLs.

You need to start over again with the below:

Please follow the steps below:

- Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

Also since you may have a Look 2 Me infection you should use SpySweeper as follows:

- Download, install and update Spy Sweeper
- Run it once while you are in normal boot mode (save the log).
- Then boot in safe mode from and run SpySweeper one more time (and save a second log).


- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

.

I will not be around until about 11/15 but one of our other capable Malware Fighters can continue to help you.