[Marlowe61]

On 11/17 or 18 I was infected with some malware that appears to load at least a couple files called jokwmp.dll and popnet.dll (or popnetq.dll). My Avast a/v found a folder and removed it, but I deleted the dlls myself. It added an option to my IE toolbar. Even now the choice is still their ("The jokwmp", it says) but it is now grayed out. I ran a boot scan with Avast but it didn't find anything. I would like to get that grayed out choice and any other remnants of the malware off my computer, if anybody has any ideas.

John

[Jacee]

That's a variant of ZLOB....

Download HijackThis™ here:
http://www.trendsecure.com/portal/en...hijackthis.php

Right click on it and choose "Run as Administrator". Click 'Do a System Scan and Save log'.
The HJT log will open in notepad.

Copy and paste the contents of the HJT log into a NEW TOPIC in the Malware/HijackThis forum:
http://forums.techguy.org/54-malware...jackthis-logs/
Don't try to 'fix' anything yourself. Wait until an advisor can tell you what to do.

Please don't post your HJT log in this forum

[Marlowe61]

Jacee:

Should I download the Hijack This installer, or the executable? Should I run it from the site, or save it to my hard drive? How do I know this isn't more spyware, instead of a fix for my problem?

John

[wk2000]

HijackThis is a diagnostic tool. It shows you all the places that malware can hide and whats there. Download the installer if you want to have a install wizard type of install or just download the executable and run it from anywhere on your hard drive. You can trust those members here that has a gold shield, they are expert malware removers.

[Marlowe61]

I started a new thread in the Malware/HijackThis forum entitled "marlowe61's Hijack log" or something like that. Thanks for your help.

[Marlowe61]

If you have trouble finding my log, let me know. I think I see two entries that are suspect. I anxiously await your analysis. Thanks.

[Marlowe61]

I thought I posted my hijack this log under Malware removal - hijack this logs but I sure can't find it. This forum/thread stuff may be too complex for me. I will repost my log and see what happens. Either of you have any idea how I could screw this up?