win32.PornPopup problem

[peku006]

Hi georgeant

Security Check
Please download Security Check ... by screen317. Save it to your desktop.
Alternate download site: Link 2

1. Double click the SecurityCheck.exe icon to begin.
2. Press the Space Bar when you see the "press any key to continue..." message.
   A Notepad results file will open automatically called checkup.txt
3. Save "checkup.txt" to your desktop. (This output file is NOT automatically saved!)
4. Please copy/paste the entire contents of the checkup.txt file into your next reply.

How's the computer running now? Any problems?

Thanks peku006

[georgeant]

hi peku006

the computer works fine, its not slow or something..my internet connection goes little slow sometimes..my anti virus updated successfully after i changed the time (from 16:30 to 16:31). here is the new log:

Results of screen317's Security Check version 0.99.5
Windows 7 (UAC is enabled)
Internet Explorer 8
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Enabled!
Kaspersky Anti-Virus 2010
WMI entry may not exist for antivirus; attempting automatic update.
```````````````````````````````
Anti-malware/Other Utilities Check:
Malwarebytes' Anti-Malware
CCleaner
Java(TM) 6 Update 21
Adobe Flash Player 9 (Out of date Flash Player installed!)
Adobe Flash Player 10.1.85.3
Adobe Reader 9.3.4
````````````````````````````````
Process Check:
objlist.exe by Laurent
Kaspersky Lab Kaspersky Anti-Virus 2010 avp.exe
Kaspersky Lab Kaspersky Anti-Virus 2010 klwtblfs.exe
````````````````````````````````
DNS Vulnerability Check:
GREAT! (Not vulnerable to DNS cache poisoning)

``````````End of Log````````````

[georgeant]

by the way before i ran a spybot scan, the win32.pornpopup appeared again but i didnt choose to fix the problem as i am waiting instructions

[peku006]

Hi georgeant

Please post spybot report

Thanks peku006

[georgeant]

hi peku006

i am attaching spybot report

[peku006]

Hi georgeant

they are cookies in your Chrome.
Please delete your cookies manually.

here are instructions

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

• Double-click SystemLook.exe to run it.
• Copy the content of the following codebox into the main textfield:
  

  :filefind
  Win32.pornpopup
  :folderfind
  Win32.pornpopup
  :regfind
  Win32.pornpopup

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

Thanks peku006

[georgeant]

hello peku006

here is the log
SystemLook 04.09.10 by jpshortstuff
Log created at 16:00 on 03/10/2010 by George
Administrator - Elevation successful

========== filefind ==========

Searching for "Win32.pornpopup"
No files found.

========== folderfind ==========

Searching for "Win32.pornpopup"
No folders found.

========== regfind ==========

Searching for "Win32.pornpopup"
No data found.

-= EOF =-

[peku006]

Hi georgeant

Please update your Adobe Flash Player........

After that.............

Your log now appears to be clean. Congratulations!

To remove all of the tools we used and the files and folders they created do the following:

Delete SecurityCheck and SystemLook from your desktop.

Download OTC by Old Timer and save it to your Desktop.

• Double-click OTC.exe
• Click the CleanUp! button
• Select Yes when the Begin cleanup Process? Prompt appears
• If you are prompted to Reboot during the cleanup, select Yes
• The tool will delete itself once it finishes, if not delete it by yourself

Note: If you receive a warning from your firewall or other security programs regarding OTC attempting to contact the internet, please allow it to do so.

Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:

This is a good time to clear your existing system restore points and establish a new clean restore point:

Turn off System Restore-Vista

• Click the Vista/Start icon.
• Right Click >> Computer
• Click Properties.
• Click the System Protection tab.
• Uncheck All drives
• Click Turn Off System Restore at the prompt then click Apply.
• Restart your computer.

Turn ON System Restore-Vista

• Click the Vista/Start icon
• Right Click >> Computer
• Click Properties.
• Click the System Protection tab.
• Checkmark All drives that were selected previously then click Apply.

Update your Antivirus programs and other security products regularly to avoid new threats that could infect your system.
You can use one of these sites to check if any updates are needed for your pc.
Secunia Software Inspector
F-secure Health Check

Visit Microsoft often to get the latest updates for your computer.
http://www.update.microsoft.com

Here are some things that I think are worth having a look at if you don't already know a bout them:.

Spybot Search and Destroy
Download it from here. Just choose a mirror and off you go.
Find here the tutorial on how to use Spybot properly here

SpyWare Blaster
Download it from here
Find here the tutorial on how to use Spyware Blaster here

WinPatrol
Download it from here
Here you can find information about how WinPatrol works here

FireTrust SiteHound
You can find information and download it from here

MVPS Hosts File from here
The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer.
Find Tutorial here : http://www.mvps.org/winhelp2002/hosts.htm

Please check out Tony Klein's article "How did I get infected in the first place?"

Read some information here how to prevent Malware.

I'd be grateful if you could reply to this post so that I know you have read it and, if you've no other questions, the thread can be closed.

Happy safe surfing!

peku006

[georgeant]

hello peku006

thank you so much for your help, now spybot scan is clean

You were very helpful

[peku006]

As this issue appears to be resolved, this topic is now closed

We are pleased to have been some help in getting you clean.

If you have been helped and wish to donate to help with the costs of this volunteer site, please read :
Your donation helps improving Spybot-S&D!