HELP Spyware, Adware infested my comp!

Question

Please help. I get non-stop pop-ups, and things trying to get downloaded on my computer by itself when on the internet. Sometimes i have up to 40 Internet explorer windows open at one time from all the pop-ups causing my laptop to freeze. I have norton antivirus and was working well for a while. Now norton wont even open up at all when i try to open the program. I reinstalled norton many times with no success. Also, when logging in to my comp from startup, it takes forever to load whatever its loading. What can i remove from start up or help to improve the perfomance on my laptop. i have a P4 3.2ghz and with 1gig of ram, and i think my comp should be runnin this slow. Please if anyone can help i really appreciate it.. here is my hijack log file.... Logfile of HijackThis v1.98.0Scan saved at 8:27:13 PM, on 7/3/2004Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Apoint2K\Apoint.exeC:\WINDOWS\AGRSMMSG.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Java\j2re1.4.2_03\bin\jusched.exeC:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exeC:\Program Files\HPQ\Quick Launch Buttons\EabServr.exeC:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exeC:\WINDOWS\System32\hphmon05.exeC:\Program Files\Real\RealPlayer\RealPlay.exeC:\Program Files\SlySoft\CloneCD\CloneCDTray.exeC:\documents and settings\owner\local settings	empe.exeC:\WINDOWS\System32\IEHost.exeC:\Program Files\Common files\WinTools\WToolsA.exeC:\WINDOWS\system32\pcs\pcsvc.exeC:\Program Files\Apoint2K\Apntex.exeC:\WINDOWS\dhbrwsr.exeC:\Program Files\SysAI\SysAI.exeC:\Program Files\webHancer\Programs\whAgent.exeC:\Program Files\Common Files\AOL\ACS\AOLDial.exeC:\Program Files\QuickTime\qttask.exeC:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exeC:\WINDOWS\System32undll32.exeC:\WINDOWS\uptodate.exeC:\Program Files\SlySoft\AnyDVD\AnyDVD.exeC:\PROGRA~1\INTERN~3\inetmgr.exeC:\WINDOWS\System32\mcacm32.exeC:\Program Files\ClearSearch\Loader.exeC:\WINDOWS\System32undll32.exeC:\WINDOWS\System32\dp-him.exeC:\Program Files\Messenger\msmsgs.exeC:\PROGRA~1\ezula\mmod.exeC:\WINDOWS\System32\mcingine.exeC:\PROGRA~1\INTERN~3\inetsvc.exeC:\WINDOWS\System32\windll32.exeC:\PROGRA~1\CLOCKS~1\Sync.exeC:\Program Files\America Online 9.0b\aoltray.exeC:\Program Files\AOL Companion\companion.exeC:\WINDOWS\System32\lecli32o.exeC:\Program Files\Common Files\AOL\ACS\AOLacsd.exeC:\Program Files\Norton AntiVirus
avapsvc.exeC:\Program Files\Norton AntiVirus\SAVScan.exeC:\Program Files\Analog Devices\SoundMAX\SMAgent.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\wanmpsvc.exeC:\Program Files\Common files\WinTools\WToolsS.exeC:\WINDOWS\System32\MsPMSPSv.exeC:\Program Files\Common files\WinTools\WSup.exeC:\WINDOWS\System32\Yix4cp5B.exeC:\WINDOWS\System32\UzwcWo.exeC:\Program Files\Internet Explorer\iexplore.exeC:\WINDOWS\dhsvr.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\WINDOWS\System32/left.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOCUME~1\Owner\LOCALS~1\Temp\sp.htmlR1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50093R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOCUME~1\Owner\LOCALS~1\Temp\sp.htmlR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOCUME~1\Owner\LOCALS~1\Temp\sp.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\Owner\LOCALS~1\Temp\sp.htmlR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\Owner\LOCALS~1\Temp\sp.htmlR0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blankR1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blankR1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=488R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 168.94.74.68:8080R3 - URLSearchHook: (no name) - {707E6F76-9FFB-4920-A976-EA101271BC25} - C:\Program Files\TV Media\TvmBho.dllO2 - BHO: IE Agent - {00000000-0000-0000-0000-000000000221} - C:\Program Files\ClearSearch\CSIE.DLLO2 - BHO: CExtension Object - {0019C3E2-DD48-4A6D-ABCD-8D32436323D9} - C:\WINDOWS\bxxs5.dllO2 - BHO: (no name) - {01C5BF6C-E699-4CD7-BEA1-786FA05C83AB} - C:\Program Files\SysAI\AproposPlugin.dllO2 - BHO: Browser - {046D6EA4-15E3-4b27-8010-45BD78A9219E} - C:\PROGRA~1\INTERN~3\inetkw.dllO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: CBho404 Object - {087173EF-9829-4F49-8340-A524177D3F60} - C:\WINDOWS\System32\inetp60.dllO2 - BHO: Search Toolbar BHO Object - {2CF0B992-5EEB-4143-99C0-5297EF71F443} - C:\WINDOWS\System32\stlbdist.DLLO2 - BHO: (no name) - {42A41B60-F7A8-44D7-9A20-E53DB744B608} - C:\WINDOWS\System32\akj.dllO2 - BHO: NavErrRedir Class - {4FC95EDD-4796-4966-9049-29649C80111D} - C:\PROGRA~1\INCRED~1\BHO\INCFIN~1.DLLO2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)O2 - BHO: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} - C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dllO2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem218.dll (file missing)O2 - BHO: brdg Class - {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} - C:\WINDOWS\System32\bridge.dllO2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dllO2 - BHO: Band Class - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - C:\Program Files\SEP\sep.dllO2 - BHO: WhIeHelperObj Class - {c900b400-cdfe-11d3-976a-00e02913a9e0} - C:\Program Files\webHancer\programs\whiehlpr.dllO2 - BHO: Band Class - {D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13} - C:\WINDOWS\dealhlpr.dllO2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.1629.0\en-us\msntb.dllO3 - Toolbar: Band Class - {D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13} - C:\WINDOWS\dealhlpr.dllO3 - Toolbar: Band Class - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - C:\Program Files\SEP\sep.dllO3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dllO3 - Toolbar: Search - {2CF0B992-5EEB-4143-99C0-5297EF71F444} - C:\WINDOWS\System32\stlbdist.DLLO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dllO4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exeO4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exeO4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exeO4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exeO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exeO4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exeO4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /StartO4 - HKLM\..\Run: [RoxioEngineUtility] 'C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe'O4 - HKLM\..\Run: [RoxioDragToDisc] 'C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe'O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exeO4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exeO4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYERO4 - HKLM\..\Run: [RunDLL] rundll32.exe 'C:\WINDOWS\System32\bridge.dll',LoadO4 - HKLM\..\Run: [CloneCDTray] 'C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe' /sO4 - HKLM\..\Run: [stcinstaller] c:\installer\id53.exeO4 - HKLM\..\Run: [re] C:\documents and settings\owner\local settings	empe.exeO4 - HKLM\..\Run: [4S2NSLA3QS#366] C:\WINDOWS\System32\Xoxfxe5.exeO4 - HKLM\..\Run: [Bakra] C:\WINDOWS\System32\IEHost.exeO4 - HKLM\..\Run: [WinTools] C:\Program Files\Common files\WinTools\WToolsA.exeO4 - HKLM\..\Run: [AutoUpdater] 'C:\Program Files\AutoUpdate\AutoUpdate.exe'O4 - HKLM\..\Run: [Pcsv] C:\WINDOWS\system32\pcs\pcsvc.exeO4 - HKLM\..\Run: [bxxs5] RunDLL32.EXE C:\WINDOWS\bxxs5.dll,DllRunO4 - HKLM\..\Run: [TV Media] C:\Program Files\TV Media\Tvm.exeO4 - HKLM\..\Run: [DealHelperUpdate] C:\WINDOWS\DHUpdt.exeO4 - HKLM\..\Run: [DealHelperBrwsr] C:\WINDOWS\dhbrwsr.exeO4 - HKLM\..\Run: [znykwkytf] C:\WINDOWS\mbtincjk.exeO4 - HKLM\..\Run: [webHancer Agent] 'C:\Program Files\webHancer\Programs\whAgent.exe'O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exeO4 - HKLM\..\Run: [QuickTime Task] 'C:\Program Files\QuickTime\qttask.exe' -atboottimeO4 - HKLM\..\Run: [AOL Spyware Protection] 'C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe'O4 - HKLM\..\Run: [Pure Networks Port Magic] 'C:\PROGRA~1\PURENE~1\PORTMA~1\PortAOL.exe' -RunO4 - HKLM\..\Run: [{2CF0B992-5EEB-4143-99C0-5297EF71F444}] rundll32.exe C:\WINDOWS\System32\stlbdist.DLL,DllRunMainO4 - HKLM\..\Run: [RunWindowsUpdate] C:\WINDOWS\uptodate.exeO4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exeO4 - HKLM\..\Run: [inetmgr] C:\PROGRA~1\INTERN~3\inetmgr.exeO4 - HKLM\..\Run: [t8mW35V] mcacm32.exeO4 - HKLM\..\Run: [ccApp] 'C:\Program Files\Common Files\Symantec Shared\ccApp.exe'O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /autoO4 - HKLM\..\Run: [ClrSchLoader] C:\Program Files\ClearSearch\Loader.exeO4 - HKLM\..\Run: [Dsi] C:\WINDOWS\System32\dp-him.exeO4 - HKLM\..\Run: [Rundll32_8] rundll32.exe C:\WINDOWS\System32\inetp60.dll,DllRunServerO4 - HKLM\..\Run: [lecli32o] C:\WINDOWS\System32\lecli32o.exeO4 - HKLM\..\RunOnce: [TV Media] C:\Program Files\TV Media\Tvm.exeO4 - HKCU\..\Run: [MSMSGS] 'C:\Program Files\Messenger\msmsgs.exe' /backgroundO4 - HKCU\..\Run: [MoneyAgent] 'c:\Program Files\Microsoft Money\System\mnyexpr.exe'O4 - HKCU\..\Run: [eZmmod] C:\PROGRA~1\ezula\mmod.exeO4 - HKCU\..\Run: [TV Media] C:\Program Files\TV Media\Tvm.exeO4 - HKCU\..\Run: [wsem218] C:\WINDOWS\wsem218.exeO4 - HKCU\..\Run: [cz56RRZFj] mcingine.exeO4 - HKCU\..\Run: [windll32.exe] C:\WINDOWS\System32\windll32.exeO4 - HKCU\..\Run: [ClockSync] C:\PROGRA~1\CLOCKS~1\Sync.exe /qO4 - HKCU\..\RunOnce: [TV Media] C:\Program Files\TV Media\Tvm.exeO4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0b\aoltray.exeO4 - Global Startup: AOL Companion.lnk = C:\Program Files\AOL Companion\companion.exeO4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exeO8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTMLO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)O9 - Extra button: (no name) - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\ms.exeO9 - Extra 'Tools' menuitem: MaxSpeed - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\ms.exeO9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dllO9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLLO9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exeO9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htmO9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htmO9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dllO10 - Hijacked Internet access by WebHancerO10 - Hijacked Internet access by WebHancerO10 - Hijacked Internet access by WebHancerO12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS
pqtplugin3.dllO16 - DPF: {10000000-1000-0000-1000-000000000000} - file://C:\Program Files\Internet Explorer\setup.exeO16 - DPF: {10003000-1000-0000-1000-000000000000} - ms-its:mhtml:file://C:\foo.mht!http://81.211.105.37/573/online.chm::/on-line.exeO18 - Filter: text/html - {24CDF2D1-A20F-4799-8314-06B98C906C8B} - C:\WINDOWS\System32\akj.dllO18 - Filter: text/plain - {24CDF2D1-A20F-4799-8314-06B98C906C8B} - C:\WINDOWS\System32\akj.dll

chino22 · Answer

Correction.. i meant to say my computer SHOULDNT be running this slow lol

Devire · Answer

O10 - Hijacked Internet access by WebHancerO10 - Hijacked Internet access by WebHancerO10 - Hijacked Internet access by WebHancer   maybe thats it??

msgale · Answer

Try the google toolbar to eliminate popups. It seems to work well with no noticable performance impact. You appear to be infected with at least one piece of malware WinTools, See if this link helps http://www.pchell.com/support/wintools.shtml This entry looks suspicious to me C:\documents and settings\owner\local settings\temp\re.exe, generally I wouldn't expect something to be running from a temp directory. P.S. I have no re.exe on Win XP Pro

Message Edited by msgale on 07-03-2004 11:47 PM

Message Edited by msgale on 07-03-2004 11:56 PM

Message Edited by msgale on 07-03-2004 11:57 PM

Texruss · Answer

You have lots of critters...some easy to fix, others not so easy.

First... a little minor trash to dispose of...hostile ActiveX scripts:

Run Hijackthis, scan and check the box left of these numbered line items:

O16 - DPF: {10000000-1000-0000-1000-000000000000} - file://C:\Program Files\Internet Explorer\setup.exe
Comments: TrojanDropper.Win32.Small.cw
O16 - DPF: {10003000-1000-0000-1000-000000000000} - ms-its:mhtml:file://C:\foo.mht!http://81.211.105.37/573/online.chm::/on-line.exe
Comments: Adult Content Dialer

With no other windows open click on fix checked button in Hijackthis.

Exit Hijackthis. Reboot.

Next...you have a peper infection...follow directions here:

http://russelltexas.com/malware/peper/pepercomments.htm

Your peper line is this one:

O4 - HKLM\..\Run: [4S2NSLA3QS#366] C:\WINDOWS\System32\Xoxfxe5.exe
Don't fix it yet in Hijackthis...run the removal tools.

Reboot after fixing with the peper tools.

Next...Your winsock client needs repair also as another poster indicated it is hijacked by Webhancer. Follow the directions here to get the LSPfix tool:

http://russelltexas.com/malware/lspfixinstructions.htm

The bad .dll file you are looking for when that tool runs should be webhdll.dll.
We do not fix check those entries for Winsock in the Hijackthis log...never. The LSPfix tool is required or an alternative that works sometimes: running Spybot S&D may kill the Winsock hijacker, but not always. The LSPfix tool is my preferred method.

Reboot after fixing.

Now the situation is a little better, but one of your biggest problems remaining is the new CWS (CoolWebSearch) home page hijacker variant you have.

Try these two fixes in order and see if you get some relief:

http://russelltexas.com/malware/cwstempfolderinfectionfix1.htm

http://russelltexas.com/malware/cwstempfolderinfectionfix2.htm

The second fix requires much greater user expertise...many victims are unable to beat this exploit. I will notify users when an automatic fix is developed. For now there is none.

Next...More bad news...You also have quite a few other adware files, crudware and assorted Trojans. Before posting back please prune them down a little bit by doing this:

Download and run these two programs (Spybot S&D and Adaware) at the link below. Use Spybot first.

Most of the Internet baddies can be killed by a one-two punch with Spybot and Adaware assuming these three factors are achieved:

1. Latest version
2. Configured correctly for running options
3. New definitions from update feature

Chris has posted an excellent tutorial by dgosling on how to run Spybot S&D and also how to enable customized deep scanning functions for Adaware. Once you set these options they will be retained for future scans by Adaware.

Follow the directions in this detailed guide for Spybot and Adaware...print out the directions in the custom scan tutorial as a reference while you set these options for the custom setup of Adaware. These custom settings will be retained for future custom scans so don't go nuts thinking you have to do this every time you run it! It may take you five minutes to set them up, but it's worth it.

http://www.cjwd.demon.co.uk/spybot-adaware.html

Please note the free Spybot 1.3 does have a slight bug...it detects some DSO exploits falsely. Hopefully an upgrade will fix this.The problem is not serious and should not deter people from using Spybot.

I also like to run Windows Disk Cleanup after cleaning with those two tools. Make sure you reboot if any reboot cleanup functions of Spybot and Adaware are advised by these tools (this may happen at the end of their cleanup).

Run Disk Cleanup: type cleanmgr at Start/Run. Scan all hard drives and check all categories at the end and click OK.

If you have any problems with Disk Cleanup completing...XP users can fix it here:

http://support.microsoft.com/default.aspx?scid=kb;en-us;812248

Or try this fix: http://www2.whidbey.net/djdenham/DeleteOldFiles.htm

I know your problems seem grim, but I have seen worse. I have seen average users clean up their system without reformatting even when they had worms, viruses, exploits, peper, winsock hijacking, and crudware out the kazoo. It's all in how you approach it...have a good attitude and work toward the goal of eliminating the pests and be flexible and creative. Things will not always fall as they should, but you can adapt.The brain is mightier than the computer.

HTH,

Texruss

chino22 · Answer

Thanks Texruss!!

I thought reformatting my harddrive was going to be my only option But what I have done so far helped alot. I got up to the CWS shredder step. I will try to finish everything tomorrow and post my HJT log file if I missed anything. But thanks again and I really appreciate all of your help.

Virus & Spyware

HELP Spyware, Adware infested my comp!

Was this post helpful?