CamwynF

For the last 4-5 days, a large number (20-30 in a ten minute period) of ads keep popping up. In new windows, even when I do not have an open Explorer window.

Brandarama.com and others.

My Virus and Spyware scanners (both up to date) have swept and found nothing.

Help?

Hijackthis! log follows:

sjpritch25

Welcome to TSF

Please download ATF Cleaner by Atribune.

This program is for XP and Windows 2000 only

• Save it to your desktop
  
  Double-click ATF-Cleaner.exe to run the program.
  
  Under Main choose: Select All
  
  Click the Empty Selected button.
  

If you use Firefox browser

• Click Firefox at the top and choose: Select All
  
  Click the Empty Selected button.
  
  NOTE: If you would like to keep your saved passwords, please click No at the prompt.
  

If you use Opera browser

• Click Opera at the top and choose: Select All
  
  Click the Empty Selected button.
  
  NOTE: If you would like to keep your saved passwords, please click No at the prompt.
  

Click Exit on the Main menu to close the program.

For Technical Support, double-click the e-mail address located at the bottom of each menu.

Notes for Windows Vista users:

On Windows Vista that "Windows Temp" is disabled, to empty "Windows Temp" ATF-Cleaner must be "Run as an Administrator"
Prefetch has been disabled on Windows Vista. As I'm not sure the effects that emptying prefetch on Windows Vista will have for the time being it I won't enable that function.


===================================

Download Combofix and save it to your desktop.
http://download.bleepingcomputer.com/sUBs/ComboFix.exe


Note: It is important that it is saved directly to your desktop

Close any open browsers.

Double click on combofix.exe & follow the prompts.
When finished, it shall produce a log for you.

Post the ComboFix.txt and a fresh Hijackthis log in your next reply.

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

CamwynF

Thanks. Here's the logs:

sjpritch25

Open notepad and copy/paste the text in the quotebox below into it:
Save this as CFScript.txt


Referring to the picture above, drag CFScript.txt into ComboFix.exe

In your next reply, please include a fresh Hijackthis log and Combofix log.

============================

Panda Activescan
http://www.pandasoftware.com/products/activescan.htm

1. Once you are on the Panda site click the Scan your PC button
2. A new window will open...click the Check Now button
3. Enter your Country
4. Enter your State/Province
5. Enter your e-mail address and click send
6. Select either Home User or Company
7. Click the big Scan Now button
8. If it wants to install an ActiveX component allow it
9. It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
10. When download is complete, click on Local Disks to start the scan
11. When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.

In your next reply, please include the Panda Activescan log too. Thanks