[Adam111291]

Yeah still got "Loader.exe" coming up don't seem to be getting as many pop ups now. But they are still coming up

[cybertech]

Download OTScanIt.exe to your Desktop and double-click on it to extract the files. It will create a folder named OTScanIt on your desktop.

1. Close any open browsers.
2. If your Real protection or Antivirus intervenes with OTScanIt, allow it to run.
3. Open the OTScanit folder and double-click on OTScanit.exe to start the program.
4. Now click the Run Scan button on the toolbar.
5. The program will be scanning huge amounts of data so depending on your system it could take a long time to complete. Let it run unhindered until it finishes.
6. When the scan is complete Notepad will open with the report file loaded in it.
7. Save that notepad file

If the log is too large to post, use the Reply button, scroll down to the attachments section and attach the notepad file here.

[Adam111291]

This is the log you requested;

[cybertech]

Start OTScanIt. Copy/Paste the information in the Code box below into the pane where it says "Paste fix here" and then click the Run Fix button.

[Kill Explorer]
[Unregister Dlls]
[Registry - Non-Microsoft Only]
< Run [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
YY -> Love four -> %AppData%\itch noun\SURFBOREWARN.exe
YN -> lsass -> 
[Empty Temp Folders]
[Start Explorer]
[Reboot]

The fix should only take a very short time. When the fix is completed a message box will popup telling you that it is finished. CLick the Ok button and Notepad will open with a log of actions taken during the fix. Post that information back here along with a new OTScanIt scan.

I will review the information when it comes back in.

Also let me know of any problems you encountered performing the steps above or any continuing problems you are still having with the computer.

[Adam111291]

This is the log your requested;

[cybertech]

Thanks, Are you having any problems now?

[Adam111291]

Originally Posted by cybertech

Thanks, Are you having any problems now?

No im afraid im gettin more pop ups
the usual ones have gone
but im gettin more pop ups with CiD at the front of them
and there popping up more frequently.

[cybertech]

Run HijackThis and click Open the Misc Tools section

• Click Open Uninstall Manager
• Save list
• click on the Desktop icon or select to save the list on the desktop
• then click save.

Open the file and copy/paste the contents back here in your next reply.

[Adam111291]

This Is What You Requested

[cybertech]

Yes.

Go to Add/Remove programs and remove these:

Java(TM) 6 Update 4

Messenger Plus! Live & Sponsor (CiD)

[Adam111291]

I have removed the 2 items you have requested.

I have removed messenger plus and its sponsor program. This has been installed for sometime. What effect does this have on the popups as these only started appearing within the last few days.

Can this be re-installed or would you suggest that I do not install this program again.

At this moment in time it would appear that the pop ups have ceased. If they start to reappear i will let you know. However Im Still Getting The Msn Loader.exe Error Coming Up Any Help With That Would Be Grateful

Thank you for your help in this matter.

[cybertech]

Please do not install anything right now, let's finish this first.


Start OTScanIt. Copy/Paste the information in the Code box below into the pane where it says "Paste fix here" and then click the Run Fix button.

[Registry - Non-Microsoft Only]
< Run [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
YN -> QuickTime Task -> %ProgramFiles%\QuickTime\QTTask.exe
YN -> Registry Cleaner Scheduler -> %ProgramFiles%\CleanMyPC\Registry Cleaner\RCHelper.exe
< ICQ Agent [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\
YN -> HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\ -> 
< Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\
YN -> {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A}: [HKEY_LOCAL_MACHINE] -> Reg Error: Key does not exist or could not be opened. [BitComet]
< Internet Explorer Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\
YN -> CmdMapping\\{D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} [HKEY_LOCAL_MACHINE] -> [BitComet]
[Files/Folders - Created Within 30 days]
NY -> B78FA1AE9064450A.job -> %SystemRoot%\tasks\B78FA1AE9064450A.job

The fix should only take a very short time. When the fix is completed a message box will popup telling you that it is finished. CLick the Ok button and Notepad will open with a log of actions taken during the fix. Post that information back here along with a new OTScanIt scan.

I will review the information when it comes back in.

Also let me know of any problems you encountered performing the steps above or any continuing problems you are still having with the computer.

[Adam111291]

Thats the log your requested

[Registry - Non-Microsoft Only]
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Registry Cleaner Scheduler not found.
Registry key HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps\HKEY_CURRENT_USER\Softw are\Mirabilis\ICQ\Agent\Apps\\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A}\ not found.
[Files/Folders - Created Within 30 days]
File C:\WINDOWS\tasks\B78FA1AE9064450A.job not found!
< End of fix log >
OTScanIt by OldTimer - Version 1.0.8.0 fix logfile created on 04022008_174049

[cybertech]

Post a new hijackthis log and let me know if you are still having problems.

[Adam111291]

This is the log you requested;

Msn "loader.exe" is still appearing.