[Crackz0r]

My friend has a laptop and she keeps getting a lot of popups.
Used Norton Anti Virus, adaware, and spybot, still getting popups

heres the hijackthis and DSS log

any help would be greatly appreciated
Thanks!

 

[LonnyRJ]

Hello Crackz0r
Attach or Post extra.txt
It will be in a sub folder here >
C:\Deckard\System Scanner

Start Hijackthis Scan and place a check next to these items If there.

O4 - HKLM\..\Run: [{40A680BB-0725-1033-0309-060203060001}] "C:\Program Files\Common Files\{40A680BB-0725-1033-0309-060203060001}\Update.exe" te-110-12-0000213
O4 - HKLM\..\Run: [winshow] "C:\WINDOWS\winshow.exe"
O4 - HKLM\..\Run: [runner1] C:\WINDOWS\mrofinu572.exe 61A847B5BBF728173599284503996897C881250221C8670836AC4FA7C8833201749139
O4 - HKLM\..\RunOnce: [1] C:\WINDOWS\system32\cmd.exe /c erase "C:\DOCUME~1\MEGAN~1.MEG\LOCALS~1\Temp\acsuninstall.exe"
O4 - HKLM\..\RunOnce: [2] C:\WINDOWS\system32\cmd.exe /c erase "C:\DOCUME~1\MEGAN~1.MEG\LOCALS~1\Temp\AcsUninstallRes.dll"
O4 - HKLM\..\RunOnce: [3] C:\WINDOWS\system32\cmd.exe /c erase "C:\DOCUME~1\MEGAN~1.MEG\LOCALS~1\Temp\shfolder.dll"
O21 - SSODL: WfDvmO - {40A680BC-EA0C-2A16-5FBF-123869E94330} - C:\WINDOWS\system32\st.dll (file missing)

Optional fix's >
O4 - Startup: PowerReg Scheduler V3.exe
O4 - HKLM\..\Run: [ShowLOMControl]

====================================
Hit fix checked and close Hijackthis.
Restart the PC
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Please do the following to download and install the latest version of HijackThis v2.0.2:

Download the HijackThis Installer: http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe
Save HJTInstall.exe to your desktop.
Double-click on HJTInstall.exe to run the program.
By default it will install to C:\Program Files\Trend Micro\HijackThis.
Accept the license agreement by clicking the "I Accept" button.
Click on the "Do a system scan and save a log file" button. It will scan and then ask you to save the log.
Click "Save log" to save the log file and then the log will open in Notepad.
Click on "Edit -> Select All" then click on "Edit -> Copy" to copy the entire contents of the log.
Come back here to this thread and paste the log in your next reply.
Do NOT have HijackThis fix anything yet! Most of what it finds will be harmless or even required.

Delete the older version once you have successfully downloaded and installed the latest version.
Please post that fresh HijackThis log for review.