Home > Hi Jack > Hi Jack Log File - POPNAV! Please Help!

Hi Jack Log File - POPNAV! Please Help!

You have several items you want to remove so do the following. Sorry, there was a problem flagging this post. KG) C:\Program Files\Avira\Antivirus\avguard.exe () C:\Program Files\Spotmau\PowerSuite Golden Edition\PowerSuite 2012\PcCheck\CareMon.exe (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (Avira Operations GmbH & Co. Please look it over and make sure that everything is removed one last time. this contact form

KG) S2 AntiVirWebService; C:\Program Files\Avira\Antivirus\avwebg7.exe [1490296 2016-12-14] (Avira Operations GmbH & Co. Literati - http://download.games.yahoo.com/games/clients/y/tt1_x.cab O16 - DPF: Yahoo! Stay logged in Sign up now! sparky222, Jan 19, 2004 #7 Flrman1 Joined: Jul 26, 2002 Messages: 46,329 Continue with the rest and then post another Hijack This log as we'll have more to remove. imp source

Make sure the following settings are made and on -------ON=GREEN From main window :Click Start then Activate in-depth scan (recommended) Click Use custom scanning options then click Customize and have these Help us fight Enigma Software's lawsuit! (Click on the above link to learn more) Back to top #33 olgun52 olgun52 Malware Response Team 3,408 posts OFFLINE Gender:Male Local time:11:57 PM If there is some abnormality detected on your computer HijackThis will save them into a logfile. dedhed56 replied Feb 10, 2017 at 3:52 PM audio issue plodr replied Feb 10, 2017 at 3:49 PM Word List Game #14 dotty999 replied Feb 10, 2017 at 3:48 PM NET

This site is completely free -- paid for by advertisers and donations. The file will not be moved unless listed separately.) S2 AntiVirMailService; C:\Program Files\Avira\Antivirus\avmailc7.exe [1089592 2016-12-14] (Avira Operations GmbH & Co. Literati - http://download.games.yahoo.com/games/clients/y/tt1_x.cab O16 - DPF: Yahoo! Show Ignored Content As Seen On Welcome to Tech Support Guy!

Flrman1, Jan 19, 2004 #8 sparky222 Thread Starter Joined: Jan 18, 2004 Messages: 129 Thanks so much AGAIN! Then go here and download Spybot Search & Destroy. Click here to Register a free account now! https://forums.techguy.org/threads/need-help-with-popnav-someone-examine-my-hijack-log-please.195758/ Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37986.7175462963 O16 - DPF: {C8BAC37C-A8D2-425E-B7FC-80B9537FB14A} (SBFullS Control) - http://www.spyblast.com/download/SBFullSInst.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Thanks again

Click the "More Options" tab, then click the "Clean up" button under System Restore. cybertech, Mar 18, 2004 #2 crazeewild Thread Starter Joined: Mar 18, 2004 Messages: 6 Sorry about all the junk but I'm not very familiar with everything on my computer which is Tech Support Guy is completely free -- paid for by advertisers and donations. Javascript You have disabled Javascript in your browser.

Flrman1, Mar 18, 2004 #9 crazeewild Thread Starter Joined: Mar 18, 2004 Messages: 6 Ok everything seems to be working correctly...You certainly are a lifesaver. There also are knowledgeable folks in this forum that may be helpful too.I hope this helps and let me know what you want.Grif Flag Permalink This was helpful (0) Collapse - Scan and reboot. Advertisement Recent Posts Help AMD processor managed replied Feb 10, 2017 at 3:52 PM Where to go...

Advertisement crazeewild Thread Starter Joined: Mar 18, 2004 Messages: 6 I recently somehow got popnav onto my computer and it has caused a number of problems such as ads popping up, weblink Best regards If you wish to show appreciation and support me personally fighting against malware, then you can consider a donation. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended. Help us fight Enigma Software's lawsuit! (Click on the above link to learn more) Back to top #34 olgun52 olgun52 Malware Response Team 3,408 posts OFFLINE Gender:Male Local time:11:57 PM

and updating and running SpyWare S & D my new hijackthis log is posted below: Logfile of HijackThis v1.97.7 Scan saved at 11:33:07 PM, on 1/18/2004 Platform: Windows XP SP1 (WinNT Logfile of HijackThis v1.97.7 Scan saved at 6:39:33 PM, on 3/18/2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe Advertisement sparky222 Thread Starter Joined: Jan 18, 2004 Messages: 129 Please HELP. navigate here Stay logged in Sign up now!

Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site. KG) Hidden BookletCreator (HKLM\...\BookletCreator) (Version: 1.6.0.0 - BookletCreator.com) Casper 8.0 (HKLM\...\{6A58EB2E-5883-4515-910D-699C4396797B}) (Version: 8.0.4422 - Future Systems Solutions, Inc.) Classic Shell (HKLM\...\{417502AF-ABF9-457B-AE32-940BEA8F4627}) (Version: 4.3.0 - IvoSoft) Commander (HKLM\...\Commander) (Version: - ) Dropbox Its invaluable.Answers to common security questions - Best PracticesHow Malware Spreads - How your system gets infectedBest Practices for Safe Computing - Prevention of Malware Infection Some safety suggestions !

Thread Status: Not open for further replies.

Finally go here for info on how to tighten your security settings and how to help prevent future attacks. Style Default Style Contact Us Help Home Top RSS Terms and Rules Copyright © TechGuy, Inc. They don't remove anything unless you pay and Spybot and Adaware do a better job and they're free. KG) U2 CareMon; C:\Program Files\Spotmau\PowerSuite Golden Edition\PowerSuite 2012\PcCheck\CareMon.exe [146792 2011-11-15] () R2 caspereui; C:\Program Files\Common Files\Future Systems Solutions\Services\CASPERSVCS.EXE [607976 2013-11-18] (Future Systems Solutions, Inc.) S4 casperhpb; C:\Program Files\Common Files\Future Systems Solutions\Services\CASPERSVCS.EXE

Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37986.7175462963 O16 - DPF: {C8BAC37C-A8D2-425E-B7FC-80B9537FB14A} (SBFullS Control) - http://www.spyblast.com/download/SBFullSInst.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Thanks for KG) R2 AntiVirSchedulerService; C:\Program Files\Avira\Antivirus\sched.exe [476736 2016-12-14] (Avira Operations GmbH & Co. If that happens, look in the right panel. his comment is here Close all browser windows,UnZip the file, click on the cwshredder.exe then click "Fix" (Not "Scan only") and let it do it's thing.

Tech Support Guy is completely free -- paid for by advertisers and donations. Next: Download Spybot http://www.sherrylynn.us/privacypolicy.htm Make sure to follow the instructions for updates prior to running the scan. Don't let BleepingComputer be silenced. I run a series ofutilities" weekly and am suprised to find the popav that you mention.

To help prevent this from happening again, I strongly recommend you install the folowing patches for the vulnerabilities that this hijacker exploits: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms03-011.asp http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS00-075.asp *Note: The simplest way to make sure Spyware Removal ToolCWShredder Hijack Removal ToolHope this helps.Grif Flag Permalink This was helpful (0) Collapse - Tony, There's Nothing Wrong With Posting In This Forum by Grif Thomas Forum moderator / Next: Download AdAware http://www.lavasoftusa.com/software/adaware/ Before you scan with AdAware, check for updates of the reference file by clicking on "Check for updates now", connect. I just completed scandisk and recovered 81k bytes of disk space, and defragged to a whopping 90% resources.

One of those should be able to retrieve the files you have selected. My message above was to inform you that there are specific HijackThis forums which specialize in the HijackThis logs and as such, you might receive a better response. sparky222 [email protected] sparky222, Jan 19, 2004 #1 Sponsor Flrman1 Joined: Jul 26, 2002 Messages: 46,329 Hi sparky222 Welcome to TSG! Thread Status: Not open for further replies.