It means go to your Start Menu, choose Run, and when it pops up the box, type in regsvr32 /u popup_bl.dll, and then click on Ok Button.

On someone suggestion, I had cleared ALL my temp files -- not only in the internet temp files, but everything under each Temp folder. Just leave the Temp folder and delete everything in it.

Actually, no -- no registry entry were made. One was deleted according to the instruction. You are right to some extent. Anyone who would do such shit is unethical, and I have been monitoring my...

Is it a possibility that it did not come back, but you got infected by it again while browsing or probably you went to the same site that you got it from?

Mine has been okay for a few days now....

I scanned it twice..


Service load: 0% 100%

File: scheduler.exe
Status: INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not...

I deleted everything as you asked me, but now when I run SpyBot, it shows me two entries:WhenU.Search and WhenU.Save..

Windows ADTool and ViewPoint keeps popping up no mater how many times I...

And silentruners log:


"Silent Runners.vbs", revision 32, http://www.silentrunners.org/
Operating System: Windows 2000
Output limited to non-default values, except where indicated by "{++}"

...

Download of HJT has given me more toruble that any other thing I have ever downloaded, so I am posting the log from 199.0 version..

When I tried to uninstall Save, it asked me to uninstall...

Here is the log for silentrunner..

"Silent Runners.vbs", revision 32, http://www.silentrunners.org/
Operating System: Windows 2000
Output limited to non-default values, except where indicated by...

Here is the latest log from HJT. By the way, earleir when I tried to rename the systr.dll, it would not let me do so either. I went and looked for it again when I read your post, the dll is gone, but...

Hello Crunchie,

Thanks for being so persistent! I actually tried this http://www.daniweb.com/techtalkforums/thread19959.html

and it seems to work..I will post the new log for HJT -- Maybe that...

And yes, it seemed that it worked. God only knows what other shit they may installed on my computer through this uninstall.

Thank you for the info though.

And by the way, when I ran regsvr32 /u...

Yes, I believe that it is the law to give a way to uninstall or unregister yourself from a site. The only problem is that most of the these things are being done by some of the most unethical people,...

Hello Crunchie,

Thanks for all the help...

Deleted everything that you asked. Systr.dll does not let me delete it, not even in the safe mode. I tried to delete it through HJT giving it an...

Okay, so I did everything that was asked, and here are the new logs of HJT and Silentvbrunner.

1) Deleted all the subfolders and files under temp folders..
2)Scanned the computer
3)Ran...

I tried this too earlier when I was having trouble unzipping the file, but it gives me this message..

"C:\WINNT\SYSTEM32\AUTOEXEC.NT. The system file is not suitable for running MS-DOS and...

First of all, thanks to both of you for such prompt replies. I am in the process of doing what you two suggested, and will post the results.

There is something that I ran into earlier, and it is...

Okay, I downloaded the new version of hijackthis, and here is the new log file..


Logfile of HijackThis v1.99.1
Scan saved at 4:53:00 PM, on 3/12/2005
Platform: Windows 2000 SP4 (WinNT...

My start up page is being hijacked to hotoffer.com, and of course, everytime I want to go to yahoo or google or any other major search enjine, I get redirected to hotoffers.com.

There is this I...