TechSpot

Popups and Slow System

By Richelle
Nov 6, 2005
  1. Hi-I'm getting tons of popups and my system's running very slowly. There are several programs like Freepod that I have removed many times but that continue to redownload after every computer restart. I'm getting 888.com, targetnet.com, and lots of free advertising and anti-virus popups. I have Ewido, Ad-Aware, Cleanup, HJT, Spybot, & Sophos that I've had to run almost continually just to have a functional computer. Any help would be much appreciated! I have attached my last HJT log.
    THANK YOU!!!!!
     
  2. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    HAVING Ewido is no use, UNLESS you run it!
    Go here first Read: How to remove Trojans and its ilk!

    After you run Ewido, some of the programs underneath will/should have disappeared. but I leave them in, just to be sure.
    First Read: Only use these HJT-instructions when asked!
    /P/ Process needs to be stopped
    /S/ Service needs to be stopped
    /U/ UNinstall anything to do with this
    /R/ unRegister the xxx.DLL in that line
    The text between the dotted lines underneath goes between the dotted lines of that post.
    Make sure to follow ALL instructions in SEQUENCE, and in HiJackThis tick/fix ALL lines!
    ...................................................................................................
    /P/ C:\WINDOWS\system32\winlog.exe
    /P/ C:\Program Files\Common Files\Windows\services32.exe

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
    /R/ O2 - BHO: CExtension Object - {0019C3E2-DD48-4A6D-ABCD-8D32436323D9} - C:\WINDOWS\bxxs5.dll
    O2 - BHO: XBTP07618 - {2296428D-C133-4928-B76A-A200FF409572} - C:\PROGRA~1\FREEPR~1\freeprod.dll
    /R/ O2 - BHO: wb - {55BE9F0D-6CAF-4c3e-B125-5A13A8C9D0EC} - C:\WINDOWS\system32\nsr8.dll
    /R/U/ O3 - Toolbar: Freeprod Toolbar - {77FBF9B8-1D37-4FF2-9CED-192D8E3ABA6F} - C:\Program Files\Freeprod Toolbar\freeprod.dll
    O4 - HKLM\..\Run: [] winlog.exe
    /P/ O4 - HKLM\..\Run: [ZQHelper] C:\WINDOWS\system32\zqactx1.exe
    /P/ O4 - HKLM\..\Run: [Contextual Tool] C:\WINDOWS\system32\ZQInContextactx1.exe
    /P/ O4 - HKLM\..\Run: [ACTX1] C:\WINDOWS\system32\actx1.exe
    /P/ O4 - HKLM\..\Run: [LinkMaker.exe] C:\WINDOWS\system32\LinkMaker.exe
    O4 - HKLM\..\Run: [Linker] C:\WINDOWS\system32\LinkMaker.exe
    O4 - HKLM\..\Run: [bxxs5] RunDLL32.EXE C:\WINDOWS\bxxs5.dll,DllRun
    /S/ O4 - HKLM\..\RunServices: [] winlog.exe <<== Service!
    /P/ O4 - HKCU\..\Run: [services32] C:\Program Files\Common Files\Windows\mc-110-12-0000122.exe
    O4 - HKCU\..\Run: [actx1.exe] C:\WINDOWS\system32\actx1.exe
    O4 - HKCU\..\Run: [zqactx1.exe] C:\WINDOWS\system32\zqactx1.exe
    O4 - HKCU\..\Run: [mc-110-12-0000122.exe] C:\WINDOWS\system32\mc-110-12-0000122.exe
    /P/ O4 - HKCU\..\Run: [fran-super.exe] C:\WINDOWS\system32\fran-super.exe
    /P/ O4 - HKCU\..\Run: [ventbb.exe] C:\WINDOWS\system32\ventbb.exe
    /P/ O4 - HKCU\..\Run: [RMG.exe] C:\WINDOWS\system32\RMG.exe
    /P/ O4 - HKCU\..\Run: [eltgdps4.exe] C:\WINDOWS\system32\eltgdps4.exe
    O4 - HKCU\..\Run: [ZQInContextactx1.exe] C:\WINDOWS\system32\ZQInContextactx1.exe
    /R/U/ O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZUxdm082YYUS
    O9 - Extra button: Freeprod Toolbar - {77FBF9B8-1D37-4FF2-9CED-192D8E3ABA6F} - C:\Program Files\Freeprod Toolbar\freeprod.dll
    O9 - Extra 'Tools' menuitem: Freeprod Toolbar - {77FBF9B8-1D37-4FF2-9CED-192D8E3ABA6F} - C:\Program Files\Freeprod Toolbar\freeprod.dll
    O9 - Extra button: (no name) - {9E248641-0E24-4DDB-9A1F-705087832AD6} - (no file)
    O9 - Extra 'Tools' menuitem: Java - {9E248641-0E24-4DDB-9A1F-705087832AD6} - (no file)
    O14 - IERESET.INF: START_PAGE_URL=http://www.gateway.com
    Fix ALL your O16 - DPF: entries
    ...................................................................................................


    STOP using that crappy IE (other than for Windows-updates) and install Firefox from www.getfirefox.com
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...