Member Avatar for midud3

i am now having issues with popups coming up..
its ridiculous how many come up...

first it was when i was using ie
so i downloaded friefox, but it still comes up

is there a way to fix this and is there further info u need?

  • 2 Contributors
  • 4 Replies
  • 102 Views
  • 3 Days Discussion Span
  • Latest Post Latest Post by midud3

Dani AI

Generated

— the combination of persistent popups in multiple browsers and Explorer crashing points to system‑level adware or a third‑party shell/component, not just a browser setting. was right to get a HijackThis log; that lets helpers see what's autorunning and what browser helpers are installed. After you apply the quick fixes suggested, take the following practical, safe steps.

Boot into Safe Mode with Networking and run a full scan with an up‑to‑date anti‑malware scanner (Malwarebytes Anti‑Malware is a good second‑opinion tool) and your regular antivirus. Run an adware cleaner (AdwCleaner or similar) and repeat scans until they come up clean. While still in Safe Mode, run sfc /scannow to check protected system files and chkdsk /f to rule out disk corruption. Export browser bookmarks first, then reset or create a new browser profile to rule out a corrupted profile or persistent extension.

To troubleshoot the Explorer crashes: open Event Viewer (Application log) and note the faulting module and exception code for the Explorer crash — that information is very useful when posting followups. Create a new Windows user and see if the crashes and popups persist under that account; if not, the problem is profile‑specific. Use Autoruns (Sysinternals) or ShellExView to disable non‑Microsoft startup items and shell extensions one at a time to find the culprit.

Do not remove Registry/HijackThis entries unless you are certain what they do. Repost a fresh HijackThis log plus the Event Viewer crash details if problems continue; include the exact faulting module names and the results of the malware scans. If cleanup fails, consider System Restore to a clean point or a repair/reinstall of Windows as a last resort.

Recommended Answers

All 4 Replies

Member Avatar for midud3

Logfile of HijackThis v1.99.1
Scan saved at 11:01:05 AM, on 2/20/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe
C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Verizon Online\VisualIPInsight\IPClient.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmon.exe
C:\Program Files\Verizon Online\VisualIPInsight\IPMon32.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Verizon Online\SupportCenter\bin\mpbtn.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\System32\taskmgr.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Joe\Desktop\HijackThis.exe

O4 - HKLM\..\Run: [Lexmark X6100 Series] "C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe"
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [IPInSightLAN 01] "C:\Program Files\Verizon Online\VisualIPInsight\IPClient.exe" -l
O4 - HKLM\..\Run: [IPInSightMonitor 01] "C:\Program Files\Verizon Online\VisualIPInsight\IPMon32.exe"
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1139446375\ee\AOLHostManager.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Verizon Online Account Setup.lnk = C:\Program Files\Verizon Online\VOLSW\Accstp4.0.exe
O4 - Global Startup: Verizon Online Support Center.lnk = C:\Program Files\Verizon Online\SupportCenter\bin\matcli.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 3.0\resources\en-US\local\search.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 3.0\aoltb.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
O20 - Winlogon Notify: ThemeManager - C:\WINDOWS\system32\enpql1751.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

Member Avatar for 'Stein

Hmmmm

Rerun the scan, and place checks by these:

O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 3.0\resources\en-US\local\search.html
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -

Now looking at the scan, I didn't see much wrong with it, so after fixing those several checks, tell me how it's doing. Then, post a new HJT log. Oh, and it wouldn't hurt to run a Windows Update.

Thanks.

Member Avatar for midud3

its occurring a little less frequently i think, however, popups occasionally come up

also...i am getting a windows explorer error often...i click dont send, and my desktop disapeears and reappears...its quite annoying...

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.