Member Panel

Hi, I hope one of you kind an helpful people can help me out here.
Way back in November, I foolishly downloaded some mobile phone "software" off limewire.
To cut a long story short, when I ran it, I became infected with viruses, it opened up web pages etc.
Now I removed the viruses, and through various malaware removal tools recomended on here, i have removed lots of other nasties. But I am STILL plagued with popups. The main ones being, Cassava 888.com, mymobiclub, smiley ads, and every so often I get an explorer message saying that I need to download errorsafe (which I have always cancelled)
I have run
ccleaner,
registry mechanic,
ad-aware,
xoftspy,
spywareblaster,
microsoft antispyware,
scanspyware,
and ewido.
So, now I need help!

I attach my latest Hijackthis log.

Also, I dont know if it has anything to do with any of the above programs that I have tried, but my network connection has started taking a very long time to load up. it used to be the first icon to appear in the system taskbar, now its the last. Any ideas on how to correct this?

Many thanks in advance for any advice you can offer.
Carl.

Hi Carl,

Welcome to the PC Help Forum.

This sounds like your PC's pretty nackered, worry not, though, we have a great team os security experts who will help you get to the bottom of this.

Although you've run a lot of the programs contained within it, I'll ask you to follow the instructions in the Prework link in my signature.

I've heard things about Xsoftspy, you probably want to remove that.

Yup , i wouldn't use softspy , and neither scanspyware. There both listed here:

http://www.spywarewarrior.com/rogue_anti-spyware.htm


But looking at all the apps you have run then in this case the Prework instructions arent gona make any difference.

And the hjt log is also clean , but these can be fixed with hjt though:


It could very well be a Apropos rootkit infection that's causing you those pop ups , and that is invisible in an hjt log.

Please download AproposFix.exe - but do NOT run it yet.
http://swandog46.geekstogo.com/aproposfix.exe

Boot in safemode (hit f8 when booting up)

Once in Safe Mode, double-click aproposfix.exe and unzip it to the desktop.
Open the aproposfix folder on your desktop and run RunThis.bat. Follow the prompts.

When the tool is finished, please reboot back into normal mode.



Please post the log.txt file in the aproposfix folder.



And i see you have no firewall, you could have a look in our download section for some free ones.

Thanks for the quick responses guys.
Joe, you were right about the prework instructions, I did check through it all again, and nothing new showed up.
I have already uninstalled spysoft, and Im about to remove scanspyware!

I shall go and run apropos now and let you know what happens.

With regards to the firewall, it WAS enabled in my router, but for some reason, after around 4 months of everything being ok I had to disable it, as it was preventing any graphics or pictures from being displayed on web pages. Only on THIS pc though... This was a while before I started with the popup problems though, so I can't see it being related, but, if you can shed any light on this, it would also be geatly appreciated.
Regards,
Carl.

It gets worse..

Joe, I ran the Aproposfix as you said, and got this:

"Error! Unsupported OS or version mismatch."

Yes it deffo is Win2000, and yes I was deffo in safemode! lol

Hmm.. try to run it not in safemode. Or if it doesn't work try a Panda active scan here:

http://www.pandasoftware.com/products/ActiveScan.htm

And post the log from it please.

I tried running apropofix in non(!) safemode, it came up with the same error. My OS used to be Win ME, before I upgraded, wonder if thats why it doesn't like it...

Panda active scan didn't come up with anything, it did'nt even give me the option of saving a log file to prove it!

Sorry if this is getting boring, but, what next please! lol

I don't really want to take the defeatists attitude and reformat...