Tech Support Forum - View Single Post - Constant pop ups- vundo, winfixer, generic AdClicker.d

sUBs · 08-12-2007, 05:10 PM

Do a HijackThis scan & place a check next to these items and select "Fix checked":

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://winantispyware.com/download/2...ax=0&ex=0&ed=0
O2 - BHO: (no name) - 0=~ - (no file)
O2 - BHO: (no name) - ø<~ - (no file)
O2 - BHO: (no name) - …<~ - (no file)
O4 - HKCU\..\Run: [Yahoo! Pager] 1

---------------

Open notepad and copy/paste the text in the quotebox below into it:

Code:

http://www.techsupportforum.com/security-center/hijackthis-log-help/173270-constant-pop-ups-vundo-winfixer-generic-adclicker-d.html
Collect::
C:\WINDOWS\system32\qwuusbxm.exe
C:\WINDOWS\system32\ueypaxpg.exe
C:\WINDOWS\system32\ihhbthsj.exe

Save this as "CFScript"

Refering to the picture above, drag CFScript.txt into ComboFix.exe

When finished, it shall produce a log for you, C:\ComboFix.txt. Post that log in your next reply.

Additonally, ComboFix will generate a zipped file on your Desktop, called Submit [Date Time].zip
Please submit this file before proceeding to the next step.

---------------

Click here perform an online scan >> Online Scanner

---------------

In your next post, please include fresh logs from:

Fresh Hijackthis log taken just before replying

Online scan

ComboFix's log

Please provide details of any problems you encountered whilst performing the above steps & update us on how the computer behaves now

08-12-2007, 05:10 PM	#5 (permalink)
sUBs Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy Join Date: May 2005 Posts: 24,325 OS: N/A	Re: Constant pop ups- vundo, winfixer, generic AdClicker.d Do a HijackThis scan & place a check next to these items and select "Fix checked": R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://winantispyware.com/download/2...ax=0&ex=0&ed=0 O2 - BHO: (no name) - 0=~ - (no file) O2 - BHO: (no name) - ø<~ - (no file) O2 - BHO: (no name) - …<~ - (no file) O4 - HKCU\..\Run: [Yahoo! Pager] 1 --------------- Open notepad and copy/paste the text in the quotebox below into it: Code: http://www.techsupportforum.com/security-center/hijackthis-log-help/173270-constant-pop-ups-vundo-winfixer-generic-adclicker-d.html Collect:: C:\WINDOWS\system32\qwuusbxm.exe C:\WINDOWS\system32\ueypaxpg.exe C:\WINDOWS\system32\ihhbthsj.exe Save this as "CFScript" Refering to the picture above, drag CFScript.txt into ComboFix.exe When finished, it shall produce a log for you, C:\ComboFix.txt. Post that log in your next reply. Additonally, ComboFix will generate a zipped file on your Desktop, called Submit [Date Time].zip Please submit this file before proceeding to the next step. --------------- Click here perform an online scan >> Online Scanner --------------- In your next post, please include fresh logs from: Fresh Hijackthis log taken just before replying Online scan ComboFix's log Please provide details of any problems you encountered whilst performing the above steps & update us on how the computer behaves now __________________ Question - what have you done for the community today?