Pop-ups

XP Home, SP1

Getting pretty frequent pop-ups. Followed the Sticky.

Spybot, MS and Adaware found a few things, but removed them. AVG finds nothing.

BitDefender found a hanfull of things. Log is attached, along with HJT log.

Panda scan wouldn't work.


Thanks in advance,

-Steve

 

Download LSP-Fix

After download is complete, Run LSP-Fix

Check the Box labeled "I know what I'm doing" and then click on the bmnet.dll file (in the “Keep” section) to select it.

Then, Select the >> button to move bmnet.dll into the Remove section.

Now, click the Finish Button. When the Repair Summary box appears, click OK.

(Note: If the file bmnet.dll is already in the remove section, then just click FINISH.)

Next, follow the steps in the below thread on how to install and run Ewido Anti-Malware.

• Running Ewido Anti-Malware...

 

Did the LSP fix, and ran Ewido.

Attached the Ewido log and a new HJT log.

After the Ewido scan, I rebooted and IE stopped working again!



Thanks,

-Steve

 

Please look in Add/Remove Programs for the following and uninstall them if found:

Ewido

Viewpoint

Now scan with HijackThis and check the boxes for the following entries:
( Make sure ALL browser windows are closed when you click FIX )

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;*windowsupdate.microsoft.com;*windowsupdate.com;download.microsoft.com;codecs.m icrosoft.com;activex.microsoft.com;liveupdate.symantecliveupdate.com;liveupdate. symantec.com

O2 - BHO: (no name) - {3D75B7D0-0DDC-4F1A-A6B2-CABF699CDCE2} - (no file)

O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O23 - Service: Local Security Authority Subsystem Service (lsass) - Unknown owner - C:\WINDOWS\scvhost.exe (file missing)

Again, make sure ALL browser windows are closed when you click FIX.

NOW:
Click Start > Run > type services.msc and Click OK

Locate Local Security Authority Subsystem Service (lsass) and RightClick on it to bring up the Service Properties Window.
First: Stop the service by clicking the Stop Button.
Next: Disable it by changing the Startup Type to Disabled and click Apply

Next, run CCleaner to clean up cookies and temp files.

After you complete the above, reboot and let me know how things are running.