why am i getting popups? heres my hjt.

[agenthank]

and heres the other.



---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 14:31:00 09/12/2006

+ Scan result:



HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj.1 -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\IEHlprObj.IEHlprObj\CurVer -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
D:\tools\hijackthis\backups\backup-20060606-075212-990.dll -> Adware.SearchTool : Cleaned with backup (quarantined).
C:\Documents and Settings\hank\Desktop\new torrents\Windows.Genuine.Advantage.Validation.v1.5.716.0.Crack\WgaTray.exe/WgaTray_run.exe -> Downloader.Adload.hw : Cleaned with backup (quarantined).
C:\Documents and Settings\hank\Desktop\new torrents\146 security and hacking (unsorted) ebooks\bit torrent ratio hack 2006.rar/bit torrent ratio hack\Torrent ratio hack.exe -> Downloader.Adload.o : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{900DE3D2-F1D3-4D5F-B030-98E1CFBEBDB5}\RP557\A0056127.exe -> Not-A-Virus.HackTool.Win32.VB.ao : Cleaned with backup (quarantined).
C:\Documents and Settings\hank\My Documents\PROTECTION SCANNERS\UnCDCheck.zip/uncdcheck.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Cleaned with backup (quarantined).
C:\Documents and Settings\hank\My Documents\PROTECTION SCANNERS\uncdcheck.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{900DE3D2-F1D3-4D5F-B030-98E1CFBEBDB5}\RP569\A0058358.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Cleaned with backup (quarantined).
C:\Documents and Settings\hank\Desktop\new torrents\146 security and hacking (unsorted) ebooks\Game Hacking Tutorials.rar/MemHack 2.0.7.7.zip/dbk32.sys -> Rootkit.Small : Cleaned with backup (quarantined).


::Report end

[Mr_JAk3]

Hi again, it is looking clean now
How is the computer running?

C:\Documents and Settings\hank\Desktop\new torrents\Windows.Genuine.Advantage.Validation.v1.5.716.0.Crack\WgaTray.exe/WgaTray_run.exe -> Downloader.Adload.hw : Cleaned with backup (quarantined).
C:\Documents and Settings\hank\Desktop\new torrents\146 security and hacking (unsorted) ebooks\bit torrent ratio hack 2006.rar/bit torrent ratio hack\Torrent ratio hack.exe -> Downloader.Adload.o : Cleaned with backup (quarantined).
C:\Documents and Settings\hank\Desktop\new torrents\146 security and hacking (unsorted) ebooks\Game Hacking Tutorials.rar/MemHack 2.0.7.7.zip/dbk32.sys -> Rootkit.Small : Cleaned with backup (quarantined).

The use of cracks, keygens etc is illegal and gets you infected!

Now you can clean AVG's Quarantine:

• Open AVG Anti-Spyware
• Click Infections
• Click Quarantine tab
• Click Select all
• Click Remove finally
• Close the program

You can remove the tools we used.

You can enable Windows Defender's realtime protection.

• Open Windows Defender
• Click on "Tools"
• Click on "General Settings"
• Scroll down to "Real-time protection options"
• Uncheck "Turn on Real-time protection (recommended)"
• Click "Save"
• Exit the program.

Then you should update your Java to the latest version (5.0 update 10)

• Start
• Control Panel
• Add/Remove Programs
• Delete the old Java, J2SE Runtime Environment 5.0 Update 6
• Download the latest version of Java Runtime Environment (JRE) 5.0 Update 10.
• Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications."
• Click the "Download" button to the right.
• Check the box that says: "Accept License Agreement."
• The page will refresh.
• Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
• Install it

Now you can make your hidden files hidden again.

• Go to My Computer
• Select the Tools menu and click Folder Options
• Click the View tab.
• Checkmark the "Display the contents of system folders"
• Under the Hidden files and folders select "Show hidden files and folders"
• Check "Hide protected operating system files"
• Click Apply and then the OK and close My Computer.

=============

Now that you seem to be clean, please follow these simple steps in order to keep your computer clean and secure:

• Clear your system restore
  This will clear the system restore folders from possible malware that was left behind during the cleaning process.
  
• Use ATF Cleaner
  Download and install ATF Cleaner. Clean your temporary files & folders with it regularly.
  
• Use Ad-Aware
  Download and install Ad-Aware. Update it and scan your computer regularly with it.
  
• Use AVG Anti-Spyware
  Update it and scan your computer regularly with it.
  
• Use Spybot S&D
  Download and install Spybot S&D. Update it and scan your computer regularly with it.
  
• Install SpywareBlaster
  SpywareBlaster will prevent spyware from being installed.
  
• Install MVPS Hosts file
  This prevents your computer from connecting to harmful sites.
  
• Use Firefox browser
  Firefox is faster, safer and better browser than Internet Explorer.
  
• Keep your systen up-to-date
  Visit Windows Update regularly.
  
• Keep your antivirus and firewall up-to-date
  Scan your computer regularly with your antivirus.
  
• Read this article by TonyKlein
  So how did I get infected in the first place?
  
• Stand Up and Be Counted !
  The site offers people who have been (or are) victims of malware the opportunity to document their story and, in that way, launch a complaint against the malware and the makers of the malware.

Stay clean and be safe

[agenthank]

hi, and thankyou very much!
my computer is running fine!
thanks to you.
all you people do a great job! and i will learn from this,
so thanks very much.
agenthank!

[Mr_JAk3]

You're very welcome and it is nice that we were able to help

[NonSuch]

Glad we could be of assistance.

This topic is now closed. If you wish it reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Please do not contact us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.