1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Solved: Pop-ups and slow response (post Win32.Spybot)

Discussion in 'Virus & Other Malware Removal' started by sctd07, Oct 8, 2008.

Thread Status:
Not open for further replies.
  1. sctd07

    sctd07 Thread Starter

    Oct 8, 2008
    Hi guys, I run XP (was SP2, now SP3) with Norton 360 v2.0. End of Aug Norton flagged Win32.Spybot.Worm, Downloader kmd.exe and a Trojan dropper. I ran some additional diags and manually deleted 'Pack.epk' (I have a vague memory now of this being a legit Windows file... too late). Do I need this file ?, if yes where can I restore it from ? (System Restore has been turned off due to virus).

    Since then performance has been very slow and internet access almost unuseable due to frequent unsolicited pop-ups (em.pc-on-internet.com, beatthatquote.com, DarkOrbit etc.).

    I have searched your forums and tried downloading some tools, I have run Exterminate It, XoftSpyXE, SUPERAntiSpyware, Spyware Doctor plus adding the 'restricted lists' via IESpyAD and Spyware Blaster, I occasionally pull up a 'Trojan Dropper' and have hacked the registry to remove all errant entries, but I still get the pop-ups (and the 'fcn' trojan reg entry seemsto re-appear).

    I have attached an HJT log.


    Attached Files:

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/757323

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice