1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Pop Up Frustrated!!!!!

Discussion in 'Windows XP' started by Nvisible, Apr 14, 2004.

Thread Status:
Not open for further replies.
Advertisement
  1. Nvisible

    Nvisible Thread Starter

    Joined:
    Aug 23, 2003
    Messages:
    153
    Ok I use dial up because I live in the middle of nowhere and that is the only thing I can get... My problem is some were I seem to have downloaded a program that when ever i try to open a page and it take a lil time it is auto directed to Incredafind.com which is a search engine. This is becoming a bit of a problem considering that if even this site has a lil traffic and it is a bit slow it redirects me. It sometimes takes me three or four times to get to a web page.. I have checked the control panel for a program and do not see one. If any one knows what this is from and how to get rid of it i would be a much more sane person...

    Thank You
     
  2. Bman

    Bman

    Joined:
    Apr 3, 2002
    Messages:
    373
    Sounds like you've picked up some spyware/adware. If you don't have Spybot you can download it HERE . Install Spybot, check for and install updates before you run the scan, remove what it finds. Then you can also run AdAware. It can be downloaded HERE . Install AdAware, check for and install updates before scanning, remove what it finds. If this doesn't take care of your problem, post back and we can find someone to check a 'HiJack This' log for you.
     
  3. Nvisible

    Nvisible Thread Starter

    Joined:
    Aug 23, 2003
    Messages:
    153
    I will try it And let you know thank you
     
  4. Nvisible

    Nvisible Thread Starter

    Joined:
    Aug 23, 2003
    Messages:
    153
    Nope I am still having the same problem After doing both spybot and Ad-aware

    Here is the link to were it keep directing me too infact since doing these two things I think it has gotten worse it took my 9 times just to get this page open to post again. The back button is my new best friend
     
  5. Nvisible

    Nvisible Thread Starter

    Joined:
    Aug 23, 2003
    Messages:
    153
    Ok I got it .... For any one who has this problem when the site opens up if you go all the way to the bottum of the site there is three links
    about us / Privacy Policy / Remove

    If you click on remove you download a small lil unistall program about 4 kb and it unistalls what ever it was that was on there...

    Not doing it now.... Thanks for everything guys
     
  6. Bman

    Bman

    Joined:
    Apr 3, 2002
    Messages:
    373
    nvisible,
    You may still want to download HiJack This to make sure you have removed the one 'pest' and don't have any others hanging around. Download HiJack This, put it in its own folder, then run the scan. Do not try to repair anything. Save a copy of the log then post it here in the forum. There are some very knowledgeable people that can help sort the good from the bad.
     
  7. Nvisible

    Nvisible Thread Starter

    Joined:
    Aug 23, 2003
    Messages:
    153
    Here is My Hijack as requested

    Logfile of HijackThis v1.97.7
    Scan saved at 3:20:13 PM, on 4/15/2004
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe
    C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\stardock\TrayServer.exe
    C:\Program Files\CursorXP\CursorXP.exe
    C:\WINDOWS\System32\rundll32.exe
    C:\Documents and Settings\Ty\Start Menu\Programs\Startup\Outlock.exe
    C:\Program Files\Microsoft Office\Office\OUTLOOK.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Downloads\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
    O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [1A:Stardock TrayMonitor] "C:\Program Files\Common Files\stardock\TrayServer.exe"
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
    O4 - HKCU\..\Run: [CursorXP] "C:\Program Files\CursorXP\CursorXP.exe" -s
    O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGCOMLIB_1035.dll,InstantAccess
    O4 - Startup: Outlock.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {1EB17D1C-141D-4D9D-91CB-24D99215851D} - http://akamai.downloadv3.com/binaries/IA/netia32_EN_XP.cab
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38090.5306712963
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{4F6B3550-E96E-4FC4-93F0-BA344A7D1B34}: NameServer = 207.69.188.187 207.69.188.186
    O17 - HKLM\System\CS1\Services\Tcpip\..\{4F6B3550-E96E-4FC4-93F0-BA344A7D1B34}: NameServer = 207.69.188.187 207.69.188.186
     
  8. Nvisible

    Nvisible Thread Starter

    Joined:
    Aug 23, 2003
    Messages:
    153
    As soon as I downloaded and ran this Hijack thing I now get a window that pops up and says WMI has shutdown .... I am not sure what that is and it asks if I want to send a report... HELP !!!!!!
     
  9. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/220544

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice