still getting pop up messages

vega · May 31, 2006

I ran all the recomended tools from safe mode and deleted all the unneeded keys from the HKLM/run, HKLU/run parts of the registry but still getting pop ups
I don't think I have smitfraud I ran the cleaner in safe mode

It looks helpless

Edit: HJT log removed so steps in guide can be followed

any help appreciated

DavidGP · May 31, 2006

If you have not followed our guide then please do so as its pretty specific as to the order that the software needs to be run.

Please follow our standard cleaning procedures which are necessary for us to provide you support, they cover specific order of running the cleaning applications as HJT is a last resort and mop up program, Also there are steps included for installing, running, and posting HijackThis logs as attachments.

- Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

Click to expand...

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)

Bitdefender

Panda Scan

HijackThis

.

Please follow the directions in step 7 for installing HijackThis correctly. You have it here:
C:\Documents and Settings\Owner\My Documents\henry\hijackthis\HijackThis.exe

That is exactly where step 7 specifies not to install it, so please re-run and attach as described

vega · May 31, 2006

I reinstalled hijackthis to C:\Program Files\HJT and reran it

Shadow_Puter_Dude · May 31, 2006

There is a lot missing from your log. Things I would expect to see from running our procedure. There is no signs of an infectrion in your log, and you shouldn't be fixing things with HijackThis without guidance, you can can break your OS by fixing the wrong lines.

vega · Jun 3, 2006

well I ran the following tools:

Microsof malicious romoval tool: no spyware found
Microsoft defender: no spyware found
_______________________________________________
Spybot search and destroy: found following cokies:

Avenue A,inc
Advertising.com
DoubleClick
FastClick
HitBox
_______________________________________________
Sunbelt CounterSpy
found and removed some spyware but I was still getting pop ups after that
see the report in the attachement
_______________________________________________
Bitdefender: no viruses found
see the report in the attachement
_______________________________________________
Panda Scan Platuinum
found some spyware and cokies
see the report in the attachement
_______________________________________________
Finally I'm including the HijacjThis log again

Just want to mention that the zango was comming back after every scan
also I'm browsing the web with Firefox and the pop ups come up in IE
I know that there must be spyware running in the background it allways pops up things related to my browsing

Shadow_Puter_Dude · Jun 3, 2006

BitDefender and Panda are Online Scans. The logs you provided are for BitDefender 8 and Panda Platinum 2006.

Follow the Directions for Virtumonde aka Trojan Vundo Removal and Running WinPfind by OldTimer.

Post vunofix.txt and WinPFind.txt when finished.

vega · Jun 3, 2006

before I ran these two tools I ran the Adaware SE and it found the "Adinteligence.Apropost" addware with the "maptfmon.dll" in the "C:\windows\system32 directory"

that was removed and I reran the program in safe mode

Shadow_Puter_Dude · Jun 3, 2006

Follow the directions for Running Hoster.

Boot to Safe Mode and delete this file: C:\WINDOWS\invnexus.exe

Reboot to Normal Mode.

How is your computer running?

Log in or Sign up

still getting pop up messages

vega Private E-2

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

vega Private E-2

Attached Files:

hijackthis.log

Shadow_Puter_Dude MG Authorized Malware Fighter

vega Private E-2

Attached Files:

vscan.log

pandascan.txt

hijackthis.log

Shadow_Puter_Dude MG Authorized Malware Fighter

vega Private E-2

Attached Files:

VundoFix.txt

WinPFind.txt

Shadow_Puter_Dude MG Authorized Malware Fighter