Member Panel

Anjistar

Despite having Adaware, adwatch, spybot, BHO Demon, spywareblaster and spyguard as well as NAV, I have been struck down by pop-ups and randomly appearing browserwindows, although my home page is still appearing on demand.
I can't find what is causing this! I have run Adaware several times with reboot, all the others, and I have Ewido-ed. Here is the log:
Many thanks,
Anji

joe5

Hya Anjistar , you have a Look2me infection.

I think it is the "old" variant so this fix should do the trick:

Please download L2mfix here.

Close any programs you have open since this step requires a reboot.

From the l2mfix folder on your desktop, double click l2mfix.bat and select option #2 for Run Fix by typing 2 and then pressing enter, then press any key to reboot your computer. After a reboot, your desktop and icons will appear, then disappear (this is normal). L2mfix will continue to scan your computer and when it's finished, notepad will open with a log.

Copy the contents of that log and paste it back into this thread, along with a new Hijackthis log.

IMPORTANT: Do NOT run any other files in the l2mfix folder unless you are asked to do so!

Note : Once the PC has restarted if a log does not appear or the icons didn't disappear, run the "second.bat" located inside the L2mfix folder.

joe5

PS, I forgot to add that you have severall anti spyware apps running right now , just like with AV , its better to use only one for realtime protection , or risk (mayor) conflict and performance problems.

You can manually use and scan with as many as you want without any problems though.

Anjistar

Many thanks, Joe, I will deal with that and hope we're sorted.
Re the spyware, out of the programs I have, what would you recommend I keep running, apart from NAV which is always on?
Anji

joe5

I think SpywareGuard is the best to leave running in the background , and just use the others every now and then manuall.

Have you already run the L2m fix? If yes , could you post the log and also a new hjt log?

(please upload them as a attachment , see below the reply window)

Anjistar

Ran the l2m fix, I think, but notepad didn't open up on reboot. There are 2 Notepad files in the l2m folder on my desktop, so I have attached these as well as a new HJT log, but I think the problem is still with me.
I did read something about administrators in one of the l2m files. I am an administrator, but can't access Windows updates as the update page says I am not, and despite going through all the recommendations Microsoft offer on the relevant error page (code something like 0x8DDD00003). But that's another problem!
Many thanks for your attention
Anji

joe5

That are not the L2m log files i was looking for , but i can see in the hjt log that the infection has changed its name , and im pretty sure now it is the new variant instead of the old.

So you will need to run Spysweeper to get rid of it:

Download and scan with Spysweeper from:
http://www.webroot.com/consumer/products/spysweeper (the trial link is on the right)

Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it. If you receive alerts from your firewall, allow all activities for Spy Sweeper)

You will be prompted to check for updated definitions, please do so.
Click on "Options" > "Sweep Options" and check "Sweep all Folders on Selected drives".
Check "Local Disc C" and under "What to Sweep", check every box.
Click on "Sweep" and allow it to fully scan your system.
When the sweep has finished, click "Remove" to remove any items found.
Exit SpySweeper and reboot your computer.

NOTE: After Spysweeper has finishined and removed any items found, it is important that you exit and reboot your computer right away to ensure the infection is fully removed.

And after that please post another hjt log to check if its gone.

Member Panel

Sponsors and Ads

Noticeboard