I asked for help a few months back and I need help again.The problem is I use Firefox and since about a week ago I keep getting an IE pop up that is for I think sysprotect and it is annoying.Since getting this pop up I have been getting more random pop ups for different things and my computer seems slower. Also when I put cds in my drive it doesn't auto load them anymore and it doesn't appear under My Computer.I have included a Hijack This log.

Hya XPS_M140.


Download and run SysProtect Remover.exe. Once it is running click the "Remove Now" button and follow the on screen instructions.

http://www.atribune.org/ccount/click.php?id=10


Then download VundoFix.exe from here , and save it to your desktop.

• Double-click VundoFix.exe to run it.
• Put a check next to Run VundoFix as a task.
• You will receive a message saying vundofix will close and re-open in a minute or less. Click OK
• When VundoFix re-opens, click the Scan for Vundo button.
• Once it's done scanning, click the Remove Vundo button.
• You will receive a prompt asking if you want to remove the files, click YES
• Once you click yes, your desktop will go blank as it starts removing Vundo.
• When completed, it will prompt that it will shutdown your computer, click OK.
• Turn your computer back on.

Please post the contents of C:\vundofix.txt and a new HiJackThis log.

Ok done.Here are the new logs.

First have a look in add/remove programs for MyWebSearchWB , and uninstall it if present.


Then download KillBox by Option^Explicit from HERE.

After that boot up in safemode again , and then fix these with hjt:

And after that , delete the folder in bold.

Double click on Killbox.exe and then check the delete on reboot button.

Enter the following filepath and filename into the Full path of file to delete box:

C:\WINDOWS\system32\khffg.dll

Click the red circle with the white x and allow your computer to reboot.
(if killbox doesn't reboot on its own then please reboot manually)

After your computer has rebooted please run Hijackthis again and post a new Hijackthis log.

Done.Here is my new log.

Run HJT and remove these entries and delete/uninstall the (red) folder

O4 - HKCU\..\Run: [Weather] C:\PROGRA~1\AWS\WEATHE~1\Weather.exe 1
O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} (YazzleActiveX Control) - http://yax-download.yazzle.net/Yazzl...cab?refid=1123

C:\PROGRAM FILES\AWS

If you wish to keep Weather you may do so but see this link first.
http://www.google.com.au/url?sa=U&st...xe.html&e=9797

Well I did what you said Pancake.Here is a new HJT Log.