also @ TechSpot: Iran targeted by Flame malware in 'most complex' cyber-attack yet

TechSpot

pop ups that cant be stopped

Discussion in 'Virus and Malware Removal' started by heideroos, Nov 6, 2005.

Thread Status:
Not open for further replies.
  1. heideroos Newcomer, in training

    hello

    My internet explorer and firefox starts opening pop-ups. Most of the time they come when an explorer is opened, but sometimes they appear at random.

    I have installed many antivirus and spyware programs (like adaware, spybot, spyware doctor, macafee,...). Nothing could find the problem and dont know what to do anymore, can somone please help me?

    thanks in advance

    Attached Files:

  2. RealBlackStuff Newcomer, in training

    * Download FindIt9Xme.zip.
    * Unzip the contents of FindIt9Xme.zip to a convenient location.
    * Navigate to the Find It NT-2K-XP folder and double-click on find.bat.
    * A command prompt will open and it will search your computer for malicious files.
    * Once it has finished a Notepad window will pop up with output.txt.
    * Copy/paste the entire contents of output.txt into your next post.

    PLEASE DO NOT REBOOT or power down the computer, until I reply back or the infected file names will change!!!
  3. heideroos Newcomer, in training

    hello,

    Here is the file you asked for.

    thanks again and greetings
  4. RealBlackStuff Newcomer, in training

    I'd expected a whole lot more than what you posted. Anyway, much better so.

    D:\Documents and Settings\Birgen\Bureaublad\hijackthis\HijackThis.exe
    Put HijackThis in e.g. C:\Program Files\HJT and NOT in Temp or on the Desktop/Bureaublad before you continue!

    First Read: Only use these HJT-instructions when asked!
    /P/ Process needs to be stopped
    /R/ unRegister the xxx.DLL in that line
    The text between the dotted lines underneath goes between the dotted lines of that post.
    Make sure to follow ALL instructions in SEQUENCE, and in HiJackThis tick/fix ALL lines!
    ...................................................................................................
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
    R3 - Default URLSearchHook is missing
    /P/ O4 - HKLM\..\Run: [WinampAgent] "D:\Program Files\Winamp\Winampa.exe"
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "D:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    /R/ O20 - Winlogon Notify: Nls - D:\WINDOWS\system32\dcstyle.dll
    O20 - Winlogon Notify: SideBySide - D:\WINDOWS\system32\m8ls0i37e8.dll (file missing)
    O23 - Service: avast! Mail Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    ...................................................................................................
  5. heideroos Newcomer, in training

    everything seems to be working fine again

    thank you very much
Thread Status:
Not open for further replies.