View Single Post
Old 02-17-2007, 08:22 PM   #3 (permalink)
Sempurna
Analyst, Security Team
 
Sempurna's Avatar
 
Join Date: Sep 2006
Posts: 1,302
OS: Windows XP SP2


Hi xsaintseiyax,

Welcome to Tech Support Forum!

I apologize for the delay getting to your log. The helpers here are all volunteers and we have been very busy here lately. If you are still having malware problems, I will be glad to help.

You have a Lop infection (also known as Swizzor) which is a cause of pop-ups. It can also affcect your internet connection. For this reason, we must address this infection first, before we clean the rest of your system.

Please download NoLop.exe and save it to your desktop from one of the links below:
Mirror 1
Mirror 2
Mirror 3
  • First close any other programs you have running as this fix will require a reboot.
  • Double-click NoLop.exe to run it.
  • Now click the button labeled Search and Destroy.
  • Your computer will now be scanned for infected files.
  • When scanning is finished you will be prompted to reboot only if infected, click OK.
  • Now click the REBOOT button.
  • A message should popup from NoLop. If not, double-click the program again and it will finish.
  • Please Post the contents of C:\NoLop.log along with a fresh HijackThis log.


If you receive an error, "mscomctl.ocx or one of its dependencies are not correctly registered", please download mscomctl.ocx to your system32 folder then rerun the program.


NEXT:

Please download fl.zip and save it to your desktop:
  • Extract the contents to a new folder on your desktop (right-click the zipped folder and select Extract All).
  • Within the folder, locate and double-click fl.bat.
  • It should produce a report at c:\findlop.txt. Post the contents of the report in your next reply


NEXT:

Please REBOOT your computer normally into Windows and post these logs in your next reply:
  1. The log from the NoLop.exe scan.
  2. The log from the fl.bat scan.
  3. A new HijackThis log.

Also, please let me know how things are running now and if you encountered any problems while you were following the directions I posted.
__________________

Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support.

Donation link for Tech Support Forum

Last edited by Sempurna; 02-17-2007 at 08:25 PM.
Sempurna is offline