Hello, my PC has recently been a victim of reader_s.exe...I've reformatted my PC several times and it still popped up. However with the last reformat, things seem to be going fine, but I have a...

After I used ATFCleaner everything on my browser is messed up, like I can't see images, etc.

Actually I think that the .dll seems to regenerate only when someone uses another account to sign on the computer. (after combofix)

Uh oh, pmkjh.dll regenerated itself and a number of new .dlls appeared..

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:31:35 AM, on 5/3/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:07:33 PM, on 5/2/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
...

ComboFix 08-04-26.3 - Owner 2008-05-01 15:57:33.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.166 [GMT -8:00]
Running from: C:\Documents and...

ComboFix 08-04-26.3 - Owner 2008-04-30 17:01:54.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.120 [GMT -8:00]
Running from: C:\Documents and...

I have tried VundoFix numerous times in all versions but pmkjh.dll still regenerates itself.

I will use ComboFix when I get home tonight.

Avenger did delete it but pmkjh.dll regenerated itself a minute later.

I think it's something in the registry that's causing to to regenerate itself because whenever I used Avenger to delete...

Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Do I HAVE to use ComboFix? I heard that it can mess up your computer pretty bad and I have a lot of stuff on here so I'm not sure if I should risk using CF.

This is my new HJT log but pmkjh.dll...

Malwarebytes' Anti-Malware 1.11
Database version: 672

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 219393
Time elapsed: 1 hour(s), 28 minute(s), 53 second(s)

Memory Processes Infected: 0...

I've tried AVG, Ad-Aware, VUNDOFIX, HijackThis, RegRun, and Spy Sweeper but I just can't get rid of pmkjh.dll and it's driving me NUTS! How do I get rid of this stubborn .dll?

This is my HJT log...

Okay so I've been getting A LOT of pos.tmp etc. files in my C: Drive and My Docs. I also have a Red X for the icon of my C Drive. I also have these "system messages":

System Warning:
Windows...

Yeah but the files I deleted were created at the exact same time my computer was infected. My computer seems to be working fine now after I deleted certain services.exe files that I'm positive were...

Long story short I was surfing the web and this thing told me to vote three times before I could enter the site, and by the third "vote" my computer froze and the spyware troubles began.

Okay so...

Nevermind, I got rid of Look2Me. Thanks for the help anyways jhay116. :cool:

According to the HJT online analyzer stuff, the first one is unkown, the second one is safe, and the third one is not necessary. Whenever I delete the third one it comes back on...so yeah.

Well, I found out that I have the Look2Me/VX2 variant which is pretty hard to remove. I downloaded lm2fix, but the log NEVER shows up. Help?...

Specifically:
http://www.buyer-shabit.com/normal/yyy65.html
http://www.smashitsusa.com/vendare.html
http://www.ecommerc-e.com/normal/XBDYUS.html
http://www.hug-ediscounts.com/normal/yyy65.html...

Actually, (can't edit post) it's just A LOT of redirecting andpopups...I deleted bw2.com and wxsdmoe.dll, it's something called "uneg.dll" that was in Ad-Aware taht is calssified as VX2 which I can't...

Hello all, recently my computer has been acting very weird and it keeps on redirecting my browser to other pages and popups keep appearing. I've used Ad-Aware SE, Spybot, cwshredder, and even Ewido...

Nope, the scanners didn't state where the viruses were located. I wish they did though..these viruses are getting extremely frustrating.

Nope. I never get the BSOD, just random restarts.

http://oca.microsoft.com/en/response.aspx?SGD=ac609c30-ac4c-4172-954d-5ab6f8a46deb&SID=1776
I followed the instructions and at the end of the scan, the scanner said "Four viruses could not be...

Logfile of HijackThis v1.99.1
Scan saved at 3:04:26 PM, on 11/21/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:...

Thanks for the help. My computer has been running faster than it was before, and no popups and redirecting has been present yet. It seems like my computer is clean. Here is my HJT log:
Logfile of...

I did what you told me to do but my computer is still experiencing popups and LOADS of redirecting whenever I open Firefox.

Here is my HJT log:
Logfile of HijackThis v1.99.1
Scan saved at...

It redirects to these pages:
http://www.searc-h.com/normal/yyy65.html
http://www.mega-savings.com/normal/yyy65.html
http://www.deal-pro.com/normal/XBDYUS.html...

Here is my HJT log:
Logfile of HijackThis v1.99.1
Scan saved at 12:54:28 PM, on 11/20/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running...

I believe so. Computer's running just as fast as it was before, no popups, etc. I even got my laptop fixed! Laptop still has some stuff here and there but I think I can fix it :)
Thanks again! I'll...

Cool, thanks! The error message seems to be gone now. =)

I didn't see any reference to Nail.exe at all, unless the name for that is totally different.
Here is what currently is enabled with msconfig in the startup section:
qttask
realsched
AOLDial...

What browser are you using?

Logfile of HijackThis v1.99.1
Scan saved at 1:36:35 PM, on 7/8/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:...

Thanks for the help! The popups seem to be gone now! Thank you so much :)
New HJT log and ewido:

Logfile of HijackThis v1.99.1
Scan saved at 9:32:50 PM, on 7/6/2005
Platform: Windows XP SP1...

The Aurora popups are popping up every time I touch the computer! I know that a lot of people have this problem and I've looked for the solution, but my HJT log is somewhat different from theirs. I...

I have some problems with Aurora and Drpmon.dll, and I can't seem to remove it with ad-aware. Here is my Hijack This log:

Logfile of HijackThis v1.99.1
Scan saved at 12:26:37 PM, on 7/5/2005...