Hi- jack scan

Status
Not open for further replies.
I have a problem with xp. windows are opening like popups at random did spybot and ad-ware scan still have problems any advice?
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:19:01 PM, on 4/8/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Moderator Edit:
Pasted logs removed, all logs must be attached see here for help: https://www.techspot.com/vb/post733954-4.html
 
You will find the help you need here...

First you need to read, understand and strictly follow the directions
which you find at the top of this board.

Start with... https://www.techspot.com/vb/topic120350.html
Then ... https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/
Followed by ... https://www.techspot.com/vb/topic65943.html

Once you have posted the three logs mentioned in the 8 steps,
one of the experienced helpers will be more able to assist you.

Good Luck. Repost if you have difficulties along the way.

Update...
By the way... I did spot some probable issues in the HJT report.
See how the 8 steps do for you and then repost.
 
Good job B00kWyrm! Lets add one more:

How to post your Hijackthis log-file as an ATTACHMENT:https://www.techspot.com/vb/topic19133.html


Step 3 in the malware cleaning: Please disable this Real Time Monitoring BEFORE doing the scans:
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
AD-AWARE AD-WATCH

* Right click on the Ad-Watch icon in the system tray.
* At the bottom of the screen there will be two checkable items called "Active" and "Automatic".
o Active: This will turn Ad-Watch On\Off without closing it.
o Automatic: Suspicious activity will be blocked automatically.
* Uncheck both of those boxes.
* (When done, you can re-enable it using the same steps but this time check both boxes.)

And your Java is out of date: Step 6 in the malware thread.


You DO have malware- so far I can spot Vundo entries, so you need to run ALL the programs.
 
Status
Not open for further replies.
Back