UIPOPUPHIDDEN MESSAGE ,SLUGGISH COMPUTER,PLEASE HELP.

Hi

I'm Bod and here to help you with your Hijack This log.

Please only use this topic for your replies on this problem. Do not start another thread.
The fixes we will use are specific to your problems and should only be used for this problem on this computer.
These things need to be properly researched and a complete fix for many malware problems can take some time and be spread over a number of posts, so please be patient and try to see it through to the end.

Before you start, please read through these instructions and make sure that you understand them.
If you are not sure about anything, post a reply in this thread with your questions.

Please follow and carry out all the steps in the instructions in the order I've listed them.

Please do not try any other "fixes" you may have found on the internet while we are sorting this problem out, it's important that we work through the fix in a systematic manner.

I've looked through your log, and everything looks OK.

Step 1
You've probably got a lot of Windows Temporary files and Temporary Internet files.
Download ATF Cleaner from http://www.atribune.org/ccount/click.php?id=1, run ATF Cleaner, and click on the check box to select the following options:
Windows Temp
All Users Temp
Temporary Internet Files
Click "Empty Selected". Exit when finished.

Step 2
Download Ewido from www.ewido.net/en/download, and install. At the end of the installation process, leave the tick in the "Run Ewido Anti-Spyware 4.0" checkbox. Click "Finish"

When opening screen appears, click "change state" for "Resident Shield" to change state to "inactive" This is done to prevent the resident shield interferring with our attempts to fix the problems present on the pc.

Ewido will automatically update, and a toolbar message balloon will confirm that update is complete. If this doesn't happen, click Update > Start Update.

Close Ewido.

Re-boot in Safe Mode by pressing F8 during Boot-up and choosing Safe Mode from the boot options list.

Run Ewido again, click Scanner > Complete System Scan.

At the end of the scan, a list of found objects will be generated. Check through the list for false positives, and change the "Action" entry if necessary.

Click "Apply all actions"

When the actions have been completed, click Save Report > Save report as, and save report as a text file on your desktop. I will need a copy of the report contents as part of your next post.

Reboot as normal.

Please post the contents of the Ewido log. I'll check it through, and get back to you.

Thanks,

Bod

HI bod,

Thanks very much for your help with this, it's very much appreciated.

Since I posted the hjt log my ntl netguard antivirus has been upgraded to include anti-spyware, prior to this I was (and still do ) regularly using spybot and ad-aware. (does this help you?).I have posted the ewido log below but I didnt understand what you meant by 'false positives' so I just ran the scan and saved the log without taking any further action.The ATF cleaner did seem to clear a lot of files!! I usually just use the disk cleanup. 

Many thanks,

mike

---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------

 + Created at: 12:00:22 30/07/2006

 + Scan result: 

C:\WINDOWS\system32\cagt041.dll -> Adware.Agent : No action taken.

::Report end

Hi Mike,

Thanks for the Ewido log. False positives are when an anti-virus or anti-spyware program identifies a legitimate file as infected. Something you have to be a bit careful of with any software of this type.

I've noticed that the Netguard Total now includes anti-spyware (yes I'm in the UK and on NTL), I've downloaded it on to one of my pc's and running it for a while to assess how good it is.

The one file detected by Ewido can go! Run Ewido again and this time choose to remove that item.

I'd also like you to carry out an on-line anti-virus scan with Kaspersky WebScanner at http://www.kaspersky.com/virusscanner

Click on Kaspersky Online Scanner

You will be promted to install an ActiveX component from Kaspersky, Click "Yes".
The program will launch and then begin downloading the latest definition files.

Once the files have been downloaded click on "NEXT"
Now click on "Scan Settings"
In the scan settings, make sure that the following are selected:
"Scan using the following Anti-Virus database:"
Extended (if available otherwise Standard)

"Scan Options:"
Scan Archives
Scan Mail Bases

Click "OK"

Now under "select a target to scan:" Select "My Computer"

This will program will start and scan your system. The scan will take a while so be patient and let it run.

Once the scan is complete it will display if your system has been infected. Click on "Save as Text" and save the file to your desktop.

Post the KAV scan log in your next reply.

Thanks,

Bod

Hi Mike,

Thanks for the KAV log. There's nothing there to really worry about. The only line with any sort of issue is in the system restore file, and we can deal with that easily.

Create a clean system restore point
Click Start > Control Panel > System > System Restore Tab and click to put a tick in the "Turn off System Restore" checkbox, then click "Apply".

Reboot.

Click Start > Control Panel > System > System Restore Tab and click to remove the tick in the "Turn off System Restore" check box, and then click Apply > OK to create a new restore point and then close Control Panel.

How's the pc running now?

There are scans we can carry out that dig much deeper into the registry and inner workings of Windows, but like I always say, "If it ain't broke, don't try to fix it!"

Please let me know if you're still having problems.

Thanks,

Bod

Hi Bod,

Computer seems fine now, thanks very much for your help.Don't know where we'd all be without people like you willing to give up your time to help out.

Best wishes,

Mike

Hi Mike,

It's good that the pc's working OK now.

These are my suggestions to help keep the pc clean.

Step 1 - Microsoft Windows Update
Click Start > All Programs > Windows Update. This will take you to the Windows Update site. Follow the instructions to download and install all of the latest critical updates. Repeat this as many times as necessary, until there are no more updates available. Reboot whenever instructed.
Click Start > Control Panel > Security Centre and make sure that Automatic Updates are On.

Step 2 - Hide System Files
Click Start > My Computer > Tools > Folder Options > View Tab. Un-check "Show hidden files and folders" in the Hidden files and folders section, and Select "Hide protected operating system files (recommended)" option. Click Yes > OK.

Step 3 - Make your Internet Explorer more secure
Open Internet Explorer click Tools > Options > Security tab >Internet icon to highlight >Custom Level, then select the following options:-
Change "Download signed ActiveX controls" to "Prompt"
Change "Download unsigned ActiveX controls" to "Disable"
Change "Initialise and script ActiveX controls not marked as safe" to "Disable"
Change "Installation of desktop items" to "Prompt"
Change "Launching programs and files in an IFRAME" to "Prompt"
Change "Navigate sub-frames across different domains" to "Prompt"
Click "OK", then Apply
Click on the "Privacy" tab and move the slider up to "Medium High", then Apply > OK to exit the Internet Properties page.

Step 4 - Anti Virus Software
It is very important that your computer has an anti-virus software running on your machine and that it is kept up to date.

You have NTL Net Guard, so make sure it is updated at least weekly, preferably daily.

For more information on anti-virus programs see http://forum.malwareremoval.com/viewtopic.php?p=53#53

Step 5 - Firewall
You have NTL Net Guard, so make sure it is kept up to date.

For more information on firewalls see http://forum.malwareremoval.com/viewtopic.php?p=56#56

Step 6 - Windows Defender
Download and install Windows Defender from http://www.microsoft.com/athome/security/spyware/software/default.mspx

Step 7 - Ewido
You now have Ewido. Even when the free trial period expires you can still manually update it and use it for a manual scan. Do this weekly.

Step 8 - SpywareBlaster
Download and install Javacools SpywareBlaster from http://www.javacoolsoftware.com/spywareblaster.html. When installed, run SpywareBlaster, click "Enable All Protection", then "Download Latest Protection Updates" and follow the instructions to download and enable the latest update.
SpywareBlaster adds a list of ActiveX controls, tracking cookies and sites which will be blocked in either Internet Explorer or Firefox browsers. You need to manually check for updates regularly.

Hopefully these will help keep your computer clean, glad I could be of assistance,

Bod