Home > Please Help > Please Help. :( Pop Ups Galore

Please Help. :( Pop Ups Galore

Register a free account to unlock additional features at BleepingComputer.com Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. button, then go to the Misc Tools section.Click on Open Uninstall Manager. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged However, to prevent it from being run again in the future, it would be best to delete the C:\QooBox folder created by Combofix, so I have included it in our folder

This is normal.A log with automatically be created and saved to C:\ComboFix.txt. If you accept cookies from this site, you will only be shown this dialog once!You can press escape or click on the X to close this box. My personal choice is NOD32 Anti-Virus .Also let me know how your computer is running and if there are any more reports/signs of infection. 0 ..Microsoft MVP Consumer Security 2007-2015 Microsoft Search Subfolders2. https://www.bleepingcomputer.com/forums/t/95856/please-help-pop-ups-galore/

i can't figure out how to find the previous. Our expert industry analysis and practical solutions help you make better buying decisions and get more from technology....https://books.google.ie/books/about/PC_Mag.html?id=b4EFTpmTnFgC&utm_source=gb-gplus-sharePC MagMy libraryHelpAdvanced Book SearchSubscribeShop for Books on Google PlayBrowse the world's largest eBookstore And what can we realistically do about it? I also get a window "FDEGHDF" that says: Runtime error: "401"; Can't show non-modal form when modal form is displayed.

  • Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On
  • Please re-enable javascript to access full functionality.
  • To learn more and to read the lawsuit, click here.
  • I see nothing malicious in your Combofix log, but I think we will run just one more scan to see if there is anything left on your computer that could cause
  • or read our Welcome Guide to learn how to use this site.
  • BLEEPINGCOMPUTER NEEDS YOUR HELP!
  • When done, click the Logs tab and copy/paste the contents of the new report in your next reply.Reports/logs to post in your next reply:* ComboFix.txt* MBAM report log* A fresh HijackThis

Temporarily disable your anti-virus and any anti-malware real-time protection before continuing. the mouse and keyboard still work when i'm on the bootup screens, sort of, i don't know if that is what they're called. If this occurs, please reboot to restore it.Do NOT use Combofix unless you have been instructed to do so by a Malware Removal Expert. Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dllO4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logonO4 - HKLM\..\Run: [NeroCheck] C:\WINNT\System32\\NeroCheck.exeO4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /autoO4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exeO4 - HKLM\..\Run:

anyway, before i ran combofix, the popups had slowed but not stop, and they were different, they were just blank. It's so frustrating!!! Not sure if you wanted me to do things in a specific order...Here is my new HJT log...Logfile of HijackThis v1.99.1Scan saved at 8:57:48 PM, on 6/13/2007Platform: Windows 2000 SP4 (WinNT http://www.lavasoftsupport.com/index.php?/topic/4887-please-help-pop-ups-galore-vtstudll/ They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".

Using this tool incorrectly could lead to serious problems with your operating system such as preventing it from ever starting again. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Please be assured that measures are being put into place so that this does not happen again. Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dllO4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logonO4 - HKLM\..\Run: [NeroCheck] C:\WINNT\System32\\NeroCheck.exeO4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /autoO4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exeO4 - HKLM\..\Run:

Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dllO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {3CF9FEC7-BE36-435A-8484-38CC07659C3A} - \O2 - BHO: (no name) - {fc5b1081-9dba-40e9-8710-5a1e44698b4e} Search all issuesPreview this magazine » Browse all issues198019902000 Feb-Mar 1982Aug-Oct 1982Nov 1982Feb-Apr 1983Jun 1983Jul 1983Aug 1983Sep 1983Oct 1983Nov 1983Dec 198324 Jan 19847 Feb 198421 Feb 19846 Mar 198420 Mar 19843 This message was for the ErrorProtector but there are many other ones I cannot remember at the moment. so here's a (hopefully final!) hijackthis log, and if you'd like to see any other logs just let me know.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 4:59:30 PM, on 5/2/2009Platform:

The computer then begins to start in Safe Mode.Login on your usual account.If you need further assistance with Safe Mode, see SymantecOnce in Safe Mode do a file Search for these i call this an estimation because i didn't sit through the whole thing, i sat for about seven minutes waiting and watching, and then canceled the avast scan because i wanted Back to top #14 mamaon0911 mamaon0911 Topic Starter Members 20 posts OFFLINE Local time:07:52 PM Posted 16 June 2007 - 02:10 AM Here's my lates Hijack This Log:Logfile of HijackThis is there something i can do about this blue screen?

not a bad one, a weird one. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal process.Back at the main Scanner screen:Click on the Show Results button to I didn't see BITTORRENT or WEB BUYING on my ADD/REMOVE list. Register now!

Back to top #27 rookie147 rookie147 Members 5,321 posts OFFLINE Local time:01:52 AM Posted 22 June 2007 - 10:05 AM Hi there, sorry about the slight delay in replying.But I i think the latter.edit: okay, ps2 mouse and keyboard work. Click OK to either and let MBAM proceed with the disinfection process.

Start -> Programs.

so i'm not sure if there's any advice you can offer me at this point. By posting your problem there, you will get help from people who are much more knowledgable in this field than I am, so ultimately your problem will be solved sooner.Remember to The "C:\WINNT\system32\svchost.exe" file is the legitimate file I warned you not to delete, so you can leave that one alone.You asked for the combofix.txt log, which I did post but you If these devices are not working when boot up has completed you may need to reinstall/update the drivers.

If not, we can deal with it later, so we'll concentrate on one problem at a time. I don't have to be on the internet to play it. So no Tools Folder and Folder Options.I was still able to find:C:\Program Files\BitTorrent and delete it.However, I did not see:C:\Program Files\Web BuyingorC:\WINNT\system32\PSP NetworkingWhen I used the Search function, under "MORE ADVANCED It's like the cursor keeps toggling off to another site or to something else.

i'll let you know. Post that in your next reply.Please include the Combofix report in your next reply.Thanks,Charles Edited by rookie147, 22 June 2007 - 10:05 AM. Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dllF1 - win.ini: run= C:\C&C\INSTICON.EXEO2 - BHO: &Yahoo! Register now!

Search Slow FilesI checked #1 and #3. so for the sake of trying to be helpful i have included both.no, i haven't. Doing so before your computer is clean from malware can cause Windows to become unstable. i installed the service pack 1 and when it was through, it restarted the computer.

Please Help. :( Pop Ups Galore Started by mamaon0911 , Jun 12 2007 10:13 PM Page 1 of 3 1 2 3 Next This topic is locked 30 replies to this I did a search on it and found "svchost.exe" in C:\WINNT\system32, but I didn't delete it in case it was the incorrect one. The amount of different poker software which arises on the internet means it is impossible to keep track of which ones are infected and which ones are not. Choosing an anti-virus is a matter of personal preference, your technical ability and experience, features offered, the amount of resources utilized, how it may affect system performance and what will work

Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dllO4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logonO4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /autoO4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exeO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dllO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {3CF9FEC7-BE36-435A-8484-38CC07659C3A} - \O2 - BHO: (no name) - {fc5b1081-9dba-40e9-8710-5a1e44698b4e} Since I use it rarely, I didn't download a new one. I only had Search subfolders and Case Sensitive and Search Slower Files.