Stopping Pop ups from em.pc-on-internet.com.

Discussion in 'Malware Help (A Specialist Will Reply)' started by verra78, Aug 8, 2008.

  1. verra78

    verra78 Private E-2

    Hi There.

    I hope you can help. I have followed all of the instructions on the 'before you do a hijack this log' and i am still getting the pop ups from em.pc-on-internet.com. Once this pop up comes up I get lots of other pop ups from dodgy sites offering crappy spyware software and antivirus software.

    I have ran the malwarebytes remover and ran my antivirus (avgfree8), which initially found some issues which have now been cleared out. I also ran spywaredoctor which cleared out a lot of rubbish as well. I have also updated windows and am now running SP3.

    Please see the my hijack this and malwarebytes logs below.

    Please help as these are really annoying!

    Best regards.

    Matt.

    Logfile of Trend Micro HijackThis v2.0.2
     

    Attached Files:

    • MWB.txt
      File size:
      1.9 KB
      Views:
      0
    Last edited by a moderator: Aug 8, 2008
    verra78, Aug 8, 2008
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Welcome to Major Geeks!

    Please uninstall HJT as it will be properly installed when you do the following:

    Please follow the instructions in the below link and attach the requested logs when you finish these instructions.

    READ & RUN ME FIRST. Malware Removal Guide
     
    TimW, Aug 8, 2008
    #2
  3. verra78

    verra78 Private E-2

    Hi Timw.

    Thanks for the reply. Appreciated.

    I have done everything you said and I have attached the logs below. It seems the pop ups may have stopped but every time I open internet explorer it crashes and no hom page comes up. It eventually says not responding. If I close this and open a second time it works, but takes ages to get to the google home page.

    I will send another replay with the malwarebytes log.

    Is this still a malware problem?

    Thanks again

    Matt.
     

    Attached Files:

    verra78, Aug 9, 2008
    #3
  4. verra78

    verra78 Private E-2

    Here is the malwarebytes log.

    Look forward to hearing from you.

    Best regards.

    Matt.
     

    Attached Files:

    verra78, Aug 9, 2008
    #4
  5. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Do you know what this is:
    C:\fc0a9272c1cd6fd778217d49a4 --> if not delete it.

    Also use windows explorer to find and delete:
    C:\WINDOWS\004540_.tmp

    Run C:\MGtools\analyse.exe by double clicking on it(Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    After clicking Fix, exit HJT.

    Tell me how that went and what problems you still have.
     
    TimW, Aug 9, 2008
    #5
  6. verra78

    verra78 Private E-2

    Hi TimW,

    Things seem good at the moment after carrying out what you said. Do I need to delete and remeove all of the aoftware we have used so far.

    Should I keep malware bytes and SA spyware as usable software. If I keep SA spyware should I remove spyware doctor. Is it better to purchase a lisence for spyware doctor?

    You have been very proffessional and a great help.... Many thanks!!

    look forward to hearing from you.

    Matt.;)
     
    verra78, Aug 9, 2008
    #6
  7. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Let me know if anything else occurs......If you are not having any other malware problems, it is time to do our final steps:
     
    TimW, Aug 9, 2008
    #7
  8. verra78

    verra78 Private E-2

    Hi TimW,

    I still had some issues when initially starting internet explorer. I have now installed firefox and all issues gone... THANK GOODNESS!!

    Thank you very much for your help!!

    Best regards.

    Matt.;)
     
    verra78, Aug 10, 2008
    #8
  9. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You are very welcome.......and you may wish to download ATF Cleaner by Atribune. This program does not require an installation. The executable actually runs the program.

    NOTE: This program is for Windows XP and Windows 2000 only. ATF Cleaner will remove all files from the items that are checked so if you have some cookies you'd like to save. Please move them to a different directory first.

    * Double-click ATF-Cleaner.exe to run the program.
    * Under Main choose: Select All
    * Click the Empty Selected button.

    If you use Firefox browser

    * Click Firefox at the top and choose: Select All
    * Click the Empty Selected button.
    o NOTE: If you would like to keep your saved passwords, please click No at the prompt.

    If you use Opera browser

    * Click Opera at the top and choose: Select All
    * Click the Empty Selected button.
    o NOTE: If you would like to keep your saved passwords, please click No at the prompt.

    Click Exit on the Main ATF Cleaner menu to close the program.

    Safe surfing.....:)
     
    TimW, Aug 10, 2008
    #9

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds