"Web Offer", cannot uninstall

i have been getting pop-ups, ran spybot, adaware, ccleaner...tried going to ADD/REMOVE progs.....sat there and laughed at me. new to the site, new to Hi-jack this....hope this is right.

 

I know I'm new here.. but they're gonna tell you to do everything in the Read me thing in order... there's a lot but its worth it.

http://forums.majorgeeks.com/showthread.php?t=35407

And someone will get to you once you do all of that... they're the best.

 

Hi Nytroman,


You should follow the link Mands92 gave you before posting a log.

But, since you already posted it, I will ask you if you recognize the following as something you use or need - Looks like malware (Trojan) to me:

O4 - HKCU\..\Run: [Ihla] C:\Documents and Settings\Nytroman\Application Data\ored.exe

O4 - HKLM\..\Run: [AFQ2FCq.exe] C:\documents and settings\nytroman\local settings\temp\AFQ2FCq.exe



The baddies that jump out at me from your log are these (there is other minor cleanup to be done as well):

O2 - BHO: (no name) - {5FCA9A04-039C-2B11-9C6A-2BA76D4A91C2} - C:\WINDOWS\system32\zzzto.dll
O4 - HKLM\..\Run: [AFQ2FCq.exe] C:\documents and settings\nytroman\local settings\temp\AFQ2FCq.exe
O4 - HKCU\..\Run: [Ihla] C:\Documents and Settings\Nytroman\Application Data\ored.exe
O4 - HKCU\..\Run: [Dch] C:\WINDOWS\system32\??rvices.exe
O4 - HKCU\..\RunOnce: [Web Offer] C:\WINDOWS\system32\ezPopStub.exe /UninstPOP2 C:\Program Files\Web Offer


Please run through the cleanup tutorial and post a fresh log and we'll fix you up!

PP