random pop-ups from dating sites , porn sites , etc.

[ame08]

My laptop is getting all kinds of pop-ups from pron sites , dating sites , advertisements , fake "spyware" sites , etc. This all just started about five to six days ago. Sometimes the pop-ups just keep coming and coming ; one after the other , building up and making it hard for me to click out of one just to get to the main screen. I was referred here by a friend with the username ComputerTired. She says this site is very trustworthy. The system I use is Windows Vista. I followed all directions that were given and my logs are at the bottom ; hope I did it right .   


[recovering disk space -- attachment deleted by admin]

[paudashlake]

Do you have pop-up blocker on?

on firefox:  tools - options - content - check the pop-up blocker box.  Also, click on exceptions and look at the pop-up's that are allowed and block all of them,

on IE7:  tools - internet options - privacy - check the pop-up blocker box.  Also click on settings and be sure that no pop-ups are allowed.  Then on the bottom o that window, it has the blocker in tencity.  I recommend to set it to high.  (blocking all pop-ups.

[Broni]

paudashlake
http://www.computerhope.com/forum/index.php/topic,46313.0.html

If you receive advice from someone other than the approved Malware Removal Specialists, you do so at your own risk. We are not responsible if you take potentially inaccurate/harmful advice from someone who is not a designated helper. Anyone interested in joining the crew must have a good amount of experience and submit references to CBMatt (Chris) in a PM. References will be checked. Others posting advice without approval are subject to have their posts removed immediately as the wrong advice is too risky. We welcome new helpers so if you are interested see this post: Would you like to learn to fight malware?

[Broni]

*** Disable Windows Defender, as it'll interfere with cleaning process:
   * Open Windows Defender
    * Click Tools
    * Click General Settings
    * Scroll down to Real Time Protection Options
    * Uncheck Turn on Real Time Protection
    * After you uncheck this, click on the Save button
    * Close Windows Defender

*** Download, and run QuickTime Killer: http://www.softpedia.com/get/System/Launchers-Shutdown-Tools/QuickTime-Killer.shtml
QuickTime Killer will remove QuickTime from start up and kill any running QuickTime processes. This application runs silently at start up and closes itself as soon as it takes care of QuickTime

1. Print this post out, since you won't have an access to it, at some point.

2. Close all windows, except for HijackThis.

3. Put a checkmark next to the following HijackThis entries (some entries will be checkmarked to disable unnecessary startups; in those cases [marked with *], no actual program will be removed):

-  *O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
- *O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1198172220\ee\AOLSoftware.exe
- *O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
- *O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
- *O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
- *O4 - HKLM\..\Run: [Malwarebytes Anti-Malware Reboot] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
- *O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
- *O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
- O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\larae\AppData\Local\Temp\urqNHYSJ.dll,c
- *O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
- *O4 - HKUS\S-1-5-18\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'SYSTEM')
- *O4 - HKUS\.DEFAULT\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'Default user')
- *O4 - Startup: Registration .LNK = C:\Program Files\Ubisoft\Telltale Games\CSI-Hard Evidence\Register\RegistrationReminder.exe
- *O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
- *O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe
- *O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
- *O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe

4. Click on Fix checked button.

5. Restart computer in Safe Mode (keep tapping F8 key, when your computer starts, until menu appears)

6. Open Windows Explorer. Go Tools>Folder Options>View tab, put a checkmark next to Show hidden files, and folders.

7. Delete following files/folders (if present):

- urqNHYSJ.dll file from C:\Users\larae\AppData\Local\Temp

8. Restart in Normal Mode.

9. Post new HijackThis log.