Spyware popups ad remove wont delete

Nath831 · Jun 8, 2005

Hi, thanks in advance for any help you can provide =).

Ok I use internet explorer and recently while visiting a webpage i clicked on an external link and the browser closed, fearing the worst i loaded a new window and found to my dismay that pop-ups had started appearing frequently as i surfed.

I first visited Ad-Remove programs and tryed to uninstall "shopping Wizard" and "search assitant" both of which are defiantly spyware but when i clciked ad-remove i was directed to a buckstoolbar.com site which did not exist and the program was not unistalled.

I next ran Spybot S&D with latest updates and this did not remove it. I then searched online and found your sticky post an ran throgh the procedure using all the tools (ad aware etc) and ran the two online tests in safe mood as requested all these have since failed to remove it. I have past experiance with hikack this but not of understanding them and basically im stuck now.

Any help is much appreciated
Thanks
Nathan

chaslang · Jun 8, 2005

Please follow the steps below:

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

Nath831 · Jun 9, 2005

I did the tutorial on that website for basic removal techniques and they all came up blank, SB found 2 files but successfully removed them and i re-ran the program and they were no longer there.
I successfully downlaoded and used all tools stated, i installed all updates and latest version.
i did the online scans in samfe mode and followed up using one of the three following scans as requested. All came up blank/successfully removed anything present.
I still get the pop-ups though.
I have attached my log file as requested.
Many thanks.
Nathan

chaslang · Jun 9, 2005

You have left over problems from an HSA hijacker. You did not stop and disable the Network Security Service per step 2 in the READ ME FIRST. You must do that. The below service is shown in your log:

O23 - Service: Network Security Service (NSS) ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\winsq32.exe

Before stopping and disabling this service, bring Task Manager (press CTRL+ALT+DEL at the same time) and select Processes. Then look for C:\WINDOWS\winqo32.exe and kill it. Then stop and disable the service.

There is a good chance that these processes and services may have renamed themselves since you posted. If so, post a new log and do not reboot. Make sure you try looking each of the 3 service names mentioned in step 2 of the READ ME FIRST and follow the steps to stop and disable. Post your log after doing that and do not reboot afterwards.

Log in or Sign up

Spyware popups ad remove wont delete

Nath831 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Nath831 Private E-2

Attached Files:

hijackthis.log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member