What was the name of the program you where trying to download? Please describe the popups so I have an idea of what you are seeing.
It’s a big log so it will take some time. Sorry
Thanks
this is the new one.
I hate to admit it, but i was downloading a ripped version of avg. Which i will never do that stuff again very stupid. Anyways it downloaded a program which key generated account keys. Popups that are coming up are everything. From random buy virus protection software sites to porn, to anything and everything. I do a spybot/spysweeper scans and it picks them up and deletes/quartines them, but they just re appear.
For recurring infections, I suggest:
- Disable System Restore and reenable it after step 3.
- Clean your temporary files.
- Schedule a boot time scanning with avast with archive scanning turned on.
- Use SUPERantispyware and/or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
- Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
- Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
- Immunize your system with SpywareBlaster or Windows Advanced Care.
- Check if you have insecure applications with Secunia Software Inspector.
It acts like vundo.
So start by uninstalling AVG, it may very well have the infected files within it.
Then do this scan and I’ll plu away at this. Yuo can post the SAS scan log, but please omit the cookies. 
Download superantispyware
First update SAS Then boot into safe mode and set SAS up like this.
Under Configuration and Preferences, click the Preferences button.
Then click the Scanning Control tab.
Under Scanner Options make sure the following are checked
- CHECK ALL BOXES
Return to the main page by clicking close on that screen. On the main screen, under Scan for Harmful Software click Scan your computer. On the left check C:\Fixed Drive.(and other fixed drives)
Under Complete Scan, choose Perform Complete Scan.
· Click Next to start the scan.
When the scan is done, quarentine everything found
I do not see avg under the add/remove programs in my control panel. When i searched for it in my search command i tried just deleting all instead of uninstalling and it wouldn’t let me. Now, i tried to find the uninstaller and can’t seem to do so.
I don’t see it in this list I have here, only AVG 7.5 antspyware.
Sorry that took so long, I had to leave for awhile.
this is the alternate method for uninstalling avg see #288 pt has both methods
http://www.grisoft.com/us.faq.num-288
Did you do the SAS scan?
Start WinPFind35U. Copy/Paste the information in the quotebox below into the panel where it says “Paste fix here” and then click the Run Fix button. Note we are stopping and restarting explorer, if your desktop is not back, reboot after you get the results.
[Kill Explorer] [Unregister Dlls] [Files/Folders - Created Within 90 days] NY -> smclibb.sys.vir -> %SystemRoot%\System32\drivers\smclibb.sys.vir NY -> 1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp YY -> wrlzma.dll -> %SystemRoot%\System32\wrlzma.dll NY -> ZPORT4AS.dll -> %SystemRoot%\System32\ZPORT4AS.dll [Files/Folders - Modified Within 90 days] NY -> smclibb.sys.vir -> %SystemRoot%\System32\drivers\smclibb.sys.vir NY -> 1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp NY -> imsins.BAK -> %SystemRoot%\imsins.BAK YY -> qmgr0.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat YY -> qmgr1.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat[Empty Temp Folders]
[Start Explorer]
The fix should only take a very short time. When the fix is completed a message box will popup telling you that it is finished. Click the Ok button and Notepad will open with a log of actions taken during the fix. Post that information back here