I seem to have a similar problem. I attempted to follow the steps that were already listed in this forum, but I must have done something wrong or had some problem. I have run Ad-aware, Hijack This, CCleaner, and Ewido. I still can't seem to get rid of this problem on my Windows XP PC. I can post a log or do whatever I need to to get some feedback. Someone please help! Thanks. I just don't want to keep getting these stuipid WinAntispyware popups

Welcome to PCFH .

Yes pease post a HJT log as a text file and we will look it over and get ya running.

:-) Hi Umbuds,

Welcome to PCHF.

Great job trying to use the info to fix your problem, as you can see I split you off from the original thread. It is really important to realize that sometimes similar looking problems can have different causes. Always post your problems in a new topic, and you can reference the one you think fits your problem.

Can you post an HJT log here, it may be able to better help us solve your problem.

Look forward to your reply,

TTFN

T

Thank you for helping me out? You are the best.?

ok were going to do all this stuf first lol..




Show hidden files and folders:


For XP:

1.On the Tools menu in Windows Explorer, click Folder Options.
2.Click the View tab.
3.Under Hidden files and folders, click Show hidden files and folders.
4.If you see a warning message, click Yes.
5.Click Apply.
6.Click OK.




Then disable system restore to prevent re-infection.
(if you have/use it.)
(you can turn it back on when youre pc is clean).


How to disable system restore:

WinXP.

Click the Start button.
Right-click My Computer, and then click Properties.



And then do some pre-work clean up

Downlaod Cleanup In my signature And run it... Then

go into safe mode and run ewido again... and post the log it gives you back here..

Hi again, I did as you said. It found a spyware that I had deleted previously. That must be because I had the system restore on? I will include the Ewido log. Thanks in advance.

ewido security suite - Scan report
---------------------------------------------------------

+ Created on: 3:48:06 PM, 8/27/2005
+ Report-Checksum: 2CBDC15A

+ Scan result:

C:\WINDOWS\repair\keyip.dll -> Spyware.Virtumonde : Cleaned with backup


::Report End

Can you also post a new HJT log? Please upload it as a txt file.