Hi BillB OK that's Great. Before we do the last clean up, lets get a on-line scan. It may speed things up if you disable your AV when running...
Hi InternetOutlaw Please follow these instructions exactly as given. Please download AVG Anti-Spyware from HERE and save that file to your...
Hi robwhite Please post a HJT log, Here's how * Click here to download HJTsetup.exe Save HJTsetup.exe to your desktop. Doubleclick on the...
Hi BillB Please use Killbox again and kill this. C:\WINDOWS\System32\shmgrate.exe Please scan this file and post the results, there is...
Hi Bill These come up as an open DNS O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220 208.67.222.222 O17 -...
Hi OK Please try and run ATF cleaner now. Is there any kind of advertisements with the pop-up? does it have anything that might say what it is?...
Hi BillB Your log looks good except for this... O4 - HKLM\..\Run: [Salestart] "C:\Program Files\Common Files\WinAntiSpyware 2007\WAS7Mon.exe...
Hi BillB We need to run another tool Download SDFix and save it to your Desktop. Double click SDFix.exe and it will extract the files to...
Hi BillB Just to let you know that there will be more files to kill more then likely, but I would like to see what AVG got rid of. Geri
Hi gOber No problem, glad to help. surf safely Geri
Hi BillB OK Cool, I'm glad we got the HJT log, really helps. Download FindAWF from the link below, saving to the desktop....
Hi It's not on the list here... http://www.spywarewarrior.com/rogue_anti-spyware.htm But the people on that board don't seem to like it....
Hi BillB I see a few things but not many. So something is hiding. Lets run AVG anti-spyware and post it's log Now download AVG...
Hi BillB Run option 2 of smitfraud. Then lets download and run combofix. Download ComboFix from Here or Here to your Desktop. Double...
Hi You would need to uninstall the software you downloaded, you could end up with error messages if you just delete the servise or file. Geri
Hi gOber O23 - Service: winser - Unknown owner - C:\WINDOWS\system32\winsersec.exe If you did not have this software I install demo...
Hi gOber Welcome to windowsbbs I see you're running the new Trend Micro HijackThis! beta version. We in the forums prefer at this time not to...
Hi H8losen Please post a HJT log in the removing spyware and virus section of the forms http://www.windowsbbs.com/forumdisplay.php?f=41...
Hi Dom OK that log looks clean. Lets get a on-line scan just to check. Please go HERE to run Panda's ActiveScan Once you are on the Panda...
Hi WOW:eek: Please go to add/remove programs and remove these if present: MessengerPlus3 WinAntiVirus pro Please run AVG anti-spyware...
Separate names with a comma.