There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
 
Tag Cloud
access audio avg avg 8 bios blue screen boot bsod computer connection cpu crash css dell desktop dma driver drivers dvd email error excel explorer firefox firefox 3 freeze gimp graphics hard drive hardware hijackthis hjt install internet internet explorer itunes keyboard laptop macro malware monitor motherboard network networking outlook outlook 2003 outlook 2007 outlook express pio problem problems router seo server slow sound sp3 spyware trojan usb video virtumonde virus vista vundo windows windows vista windows xp winxp wireless
Malware Removal & HijackThis Logs
Search
Search in:
 
Advanced Search
Tech Support Guy Forums > Security & Malware Removal > Malware Removal & HijackThis Logs >
Keep getting popup windows- can't remove!!


HELLO AND WELCOME! Before you can post your question, you'll have to register -- it's completely free! Click here to join today! We highly recommend that you print a copy of our Guide for New Members. Enjoy!

 
Thread Tools
sjpritch25's Avatar
Computer Specs
Distinguished Member with 6,794 posts.
 
Join Date: Sep 2005
Location: Florida
Experience: Advanced
03-Jul-2008, 07:18 PM #16
Please download the OTMoveIt2 by OldTimer.
  • Save it to your desktop.
  • Please double-click OTMoveIt2.exe to run it.
  • Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):

    c:\users\aaron\appdata\local\oscmaie.exe

  • Return to OTMoveIt2, right click on the "Paste List of Files/Folders to be moved" window and choose Paste.
  • Click the red Moveit! button.
  • OTMoveit2 will create a log of moved files in the C:\_OTMoveIt\MovedFiles folder. The log's name will appear as the date and time it was created, with the format mmddyyyy_hhmmss.log. Open this log in Notepad and post its contents in your next reply.
  • Close OTMoveIt2
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.[/list]

=====================================

Run HijackThis, and press "Do a System Scan Only".
1. When the scan is complete place a check mark next to the following entries:

O4 - HKCU\..\Run: [oscmaie] c:\users\aaron\appdata\local\oscmaie.exe oscmaie

2. After checking these items CLOSE ALL open windows EXCEPT HijackThis and click "Fix Checked." Then, reboot your computer...


Let me know if you are still getting the popups.
__________________
My Blog
Microsoft Valuable Professional Consumer--Security 2007-2009
If i have helped you, please make a donation to keep the site running. All proceeds go directly to the site!!! Donate Here
Concerned about Browser Security!!! Consider Mozilla Firefox 3.0 and NoScript
Operating System Ubuntu Hardy Heron 8.04
mmm_beer's Avatar
Computer Specs
Junior Member with 17 posts.
 
Join Date: Jun 2008
Experience: Intermediate
07-Jul-2008, 03:37 PM #17
Hey sorry I was out of town for the weekend. I ran the OTMoveIt2 software and it successfuly moved the file on the reboot- the contents are posted below. However, when I ran HijackThis, it did not list "04 - HKCU\..\Run: [oscmaie] c:\users\aaron\appdata\local\oscmaie.exe oscmaie." I would imagine this is because the file was moved by OTMoveIt2. Should I do something differently to find it? I am still getting the popups at this point. Thanks

Contents of 07072008_114949.log:

File move failed. c:\users\aaron\appdata\local\oscmaie.exe scheduled to be moved on reboot.

OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 07072008_114949
Files moved on Reboot...
c:\users\aaron\appdata\local\oscmaie.exe moved successfully.
sjpritch25's Avatar
Computer Specs
Distinguished Member with 6,794 posts.
 
Join Date: Sep 2005
Location: Florida
Experience: Advanced
07-Jul-2008, 04:20 PM #18
Open Hijackthis, Click Open the Misc tools section Then click the Open Uninstall Manager... button.
The Add/Remove Programs Manager panel should appear.
In this panel click the Save list button.
Save the uninstall_list.txt file to your desktop and copy and paste the contents back in your next reply.
__________________
My Blog
Microsoft Valuable Professional Consumer--Security 2007-2009
If i have helped you, please make a donation to keep the site running. All proceeds go directly to the site!!! Donate Here
Concerned about Browser Security!!! Consider Mozilla Firefox 3.0 and NoScript
Operating System Ubuntu Hardy Heron 8.04
mmm_beer's Avatar
Computer Specs
Junior Member with 17 posts.
 
Join Date: Jun 2008
Experience: Intermediate
07-Jul-2008, 04:39 PM #19
Here's the contents of the uninstall_list.txt file. Please let me know whatever next step to take. Thanks

2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
Ad-Aware
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)
Adobe Flash Player ActiveX
Adobe Reader 8.1.2
Apple Mobile Device Support
Apple Software Update
ATI Catalyst Control Center
ATI PCI Express (3GIO) Filter Driver
Bonjour
Broadcom Management Programs
Browser Address Error Redirector
Business Contact Manager for Outlook 2007 SP1
Business Contact Manager for Outlook 2007 SP1
Catalyst Control Center - Branding
Citrix Presentation Server Client
Conexant HDA D330 MDC V.92 Modem
Data Access Objects (DAO) 3.5
Dell DataSafe Online
Dell Support Center
Dell System Customization Wizard
Dell Touchpad
Dell Wireless WLAN Card
DellSupport
Digital Line Detect
DivX Codec
DivX Content Uploader
DivX Converter
DivX Player
DivX Web Player
eKEY
eKEY Loans
Favorit
Games, Music, & Photos Launcher
Google Desktop
Google Toolbar for Internet Explorer
Google Toolbar for Internet Explorer
HijackThis 2.0.2
iTunes
Java(TM) SE Runtime Environment 6
Malwarebytes' Anti-Malware
Mapopolis
MediaDirect
Microsoft Office 2003 Web Components
Microsoft Office 2007 Primary Interop Assemblies
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Accounting 2007
Microsoft Office Accounting 2007
Microsoft Office Accounting ADP Payroll Addin
Microsoft Office Accounting Equifax Addin
Microsoft Office Accounting Fixed Asset Manager
Microsoft Office Accounting PayPal Addin
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Small Business Connectivity Components
Microsoft Office Ultimate 2007
Microsoft Office Ultimate 2007
Microsoft Office Word MUI (English) 2007
Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
Microsoft SQL Server Native Client
Microsoft SQL Server Setup Support Files (English)
Microsoft SQL Server VSS Writer
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 5.0
Modem Diagnostic Tool
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB941833)
NetWaiting
OutlookAddinSetup
Palm Desktop by ACCESS
Product Documentation Launcher
Quicken 2007
QuickSet
QuickTime
Roxio Creator Audio
Roxio Creator BDAV Plugin
Roxio Creator Copy
Roxio Creator Data
Roxio Creator DE
Roxio Creator Tools
Roxio Express Labeler
Roxio MyDVD DE
Roxio Update Manager
Safari
Security Update for Excel 2007 (KB946974)
Security Update for Microsoft Office Publisher 2007 (KB950114)
Security Update for Microsoft Office system 2007 (KB951808)
Security Update for Microsoft Office Word 2007 (KB950113)
Security Update for Office 2007 (KB947801)
Security Update for Outlook 2007 (KB946983)
Security Update for Visio 2007 (KB947590)
Sierra Wireless 3G Watcher
SlingPlayer
Sonic Activation Module
The Weather Channel Desktop 6
The Weather Channel Toolbar
Update for Office 2007 (KB946691)
Update for Outlook 2007 Junk Email Filter (kb950378)
User's Guides
VZAccess Manager for Palm
WD Diagnostics
WIDCOMM Bluetooth Software 6.0.1.3100
Windows Live installer
Windows Live Mail
Windows Live Messenger
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Mobile Device Center
Windows Mobile Device Center Driver Update
Wireless Sync PC Software
WModem_Installer
sjpritch25's Avatar
Computer Specs
Distinguished Member with 6,794 posts.
 
Join Date: Sep 2005
Location: Florida
Experience: Advanced
07-Jul-2008, 05:31 PM #20
Download HostsXpert
  • Extract the zip file to your desktop or a permanent folder on your hard drive.
  • Open the folder and double-click on the HostsXpert.exe
  • Press "Restore MS Hosts"
  • Press "OK" and exit the program.
  • Note: If you were using a custom Hosts file you will need to replace any of those entries yourself.


Reboot and let me know about the popups.
__________________
My Blog
Microsoft Valuable Professional Consumer--Security 2007-2009
If i have helped you, please make a donation to keep the site running. All proceeds go directly to the site!!! Donate Here
Concerned about Browser Security!!! Consider Mozilla Firefox 3.0 and NoScript
Operating System Ubuntu Hardy Heron 8.04
mmm_beer's Avatar
Computer Specs
Junior Member with 17 posts.
 
Join Date: Jun 2008
Experience: Intermediate
07-Jul-2008, 05:54 PM #21
ugh... I tried the restore, but after pressing Ok I get an error that says : "ERROR: Cannot create file C:\Windows\system32\DRIVERS\ETC\hosts." I tried it several times and get the same thing.
sjpritch25's Avatar
Computer Specs
Distinguished Member with 6,794 posts.
 
Join Date: Sep 2005
Location: Florida
Experience: Advanced
07-Jul-2008, 06:57 PM #22
Try this

Right-Click on HostsXpert.exe and choose Run as Administrator. Let me know if you still get that error.
mmm_beer's Avatar
Computer Specs
Junior Member with 17 posts.
 
Join Date: Jun 2008
Experience: Intermediate
07-Jul-2008, 08:22 PM #23
Still get it. May just be my wonderful computer.
mmm_beer's Avatar
Computer Specs
Junior Member with 17 posts.
 
Join Date: Jun 2008
Experience: Intermediate
09-Jul-2008, 02:16 AM #24
So is there any hope for me? I'm sorry my computer has been such a pain in the a$$ but I really do appreciate all the help you've given me.
mmm_beer's Avatar
Computer Specs
Junior Member with 17 posts.
 
Join Date: Jun 2008
Experience: Intermediate
09-Jul-2008, 02:37 AM #25
Actually, craziest thing happened. I just tried the HijackThis program again and the oscmaie thing finally showed up. I went ahead and fixed it and rebooted my computer. So far no popups, and in fact my computer seems to be running much faster (plus no mis-keys whatsoever). I'm really excited and hopeful right now but I'll monitor it for another day or so and let you know. Thanks again!
sjpritch25's Avatar
Computer Specs
Distinguished Member with 6,794 posts.
 
Join Date: Sep 2005
Location: Florida
Experience: Advanced
10-Jul-2008, 09:45 AM #26
great. Let me know.
mmm_beer's Avatar
Computer Specs
Junior Member with 17 posts.
 
Join Date: Jun 2008
Experience: Intermediate
11-Jul-2008, 10:41 AM #27
You are a genius! I have had no popup windows since removing that file, my computer is much, much faster, and all my keyboard keys are working perfectly again. Thank you so much! I have no idea how you figured it out, but you're brilliant. I really appreciate your help!
sjpritch25's Avatar
Computer Specs
Distinguished Member with 6,794 posts.
 
Join Date: Sep 2005
Location: Florida
Experience: Advanced
11-Jul-2008, 11:24 AM #28
Your Welcome!!!

Open OTMovit.exe and press the Cleanup button.
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are Off
Refbacks are Off

You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 03:14 AM.
Copyright © 1996 - 2008 TechGuy, Inc. All rights reserved.
Powered by vBulletin, Copyright © 2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.1.0
Powered by Cermak Technologies, Inc.