Tech Support Forum - View Single Post - Constant Pop-ups, three different programs on Desktop, comes back after cleaning

sUBs · 08-10-2007, 12:11 AM

Running Smitfraudfix had been an exercise in futility. :(

Do a HijackThis scan & place a check next to these items and select "Fix checked":

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php...MjI6Ojg5&lid=2
O2 - BHO: MSVPS System - {7AF59C20-A1D8-4C1C-927A-99DD9F2A9E0B} - C:\WINDOWS\duocore.dll
O21 - SSODL: wmpenv - {4A3F1243-AA19-4F12-9821-04C00C516918} - C:\WINDOWS\wmpenv.dll
O21 - SSODL: wmpconf - {84BE7C29-695E-4587-ADA1-B798424380D0} - C:\WINDOWS\wmpconf.dll

---------------

1. Download this file - http://download.bleepingcomputer.com...a/ComboFix.exe

* IMPORTANT !!! Place combofix.exe on your Desktop

2. Go to

→ Run → paste in the single line command & click OK

"%userprofile%\desktop\combofix.exe" /killall

3. When finished, it shall produce a log for you. Post that log & a fresh HJT log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

08-10-2007, 12:11 AM	#3 (permalink)
sUBs Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy Join Date: May 2005 Posts: 24,326 OS: N/A	Re: Constant Pop-ups, three different programs on Desktop, comes back after cleaning Running Smitfraudfix had been an exercise in futility. :( Do a HijackThis scan & place a check next to these items and select "Fix checked": R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php...MjI6Ojg5&lid=2 O2 - BHO: MSVPS System - {7AF59C20-A1D8-4C1C-927A-99DD9F2A9E0B} - C:\WINDOWS\duocore.dll O21 - SSODL: wmpenv - {4A3F1243-AA19-4F12-9821-04C00C516918} - C:\WINDOWS\wmpenv.dll O21 - SSODL: wmpconf - {84BE7C29-695E-4587-ADA1-B798424380D0} - C:\WINDOWS\wmpconf.dll --------------- 1. Download this file - http://download.bleepingcomputer.com...a/ComboFix.exe * IMPORTANT !!! Place combofix.exe on your Desktop 2. Go to → Run → paste in the single line command & click OK "%userprofile%\desktop\combofix.exe" /killall 3. When finished, it shall produce a log for you. Post that log & a fresh HJT log in your next reply Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall __________________ Question - what have you done for the community today?