pop up virus..arrg!!

its gone a month sins im formatet en reinstalled windows.. and have now got a pop up virus i cant get away…
here is my hijackthis :
http://hijackthis.de/logfiles/8739791b14d41d7d63c6b6013914f77c.html
i havent got any AV also it`s expired… are there any free AV ??

Hi mEhE,

You are infected with malware webhancer, read here:
http://www.cexx.org/webhancer.htm Download X Clean Micro from here:
http://www.xblock.com/download/xclean_micro.exe Run the tool, and if found up, make a registry back up first, before deleting it.

If you are using Avast on a personal computer you can download the free Home version, see the home page of Avast.
Install one resident AV program, and one free firewall, for instance ZoneAlarm. If your computer is clean again, only then you can install Ad-Aware free, Spybot S&D free, SpywareBlaster to keep it that way.

If you are looking for free alternatives to run a Windows computer with absolutely free programs look here: http://www.fravia.com/bangla.htm
Here you will read this: How do you set up -legally- a full-fledged windows computer without any money at all".

Well after you cleansed your OS from webhancer, post a new hjt log, we will see then what malware is left. And then we proceed.

polonus

Of course you should be using a antivirus…
Why don’t you donwload and install avast?
You can try running the boot time scanning of avast too.

Try either trojan removers: ewido and a-squared.

i have installed avast and runned the bootscan…i i think i have deleted somthing i shouldent delete…
firefox an IE don not work…but msn messenger works…dont now what i can do…

Hello mEhE,

You probably tried to remove webhancer without a registry backup, if you do that deleting webhancer can ruin your Winsocks settings, so you cannot connect to internet.

You should have removed webhancer first with the add/remove procedure of Windows, or with X Clean Micro. You could read the instructions and precautions via the links I gave you.

But you are not totally lost here, you can repair your Winsock settings, downloading this from here: http://www.cexx.org/lspfix.htm
Read carefully what text is on the pagelink as above given, then download lspfix to correct the things webhancer delete ruined.

Do things step by step as instructed, else you make a mess of things.

polonus

Mi mEhE,

From your HijackThis! log, I can see you have a shed-load of malware on your computer, including the W32.Mimail worm, various Trojans and adware/spyware.

Frankly you have so recently done a reinstall, It would probably be best just to do the same again.

When you reinstall, make sure you have Windows firewall activated at least, then go to Microsoft Update and download all the critical updates you can find. If you need to reboot, go back and check there are not more to download.

After that, install avast!

Hi mEhE,

Sadly enough, I have to agree with FwF. Make a backup of all the important data on your computer, and do a fresh reinstall.

Use the anti-malware programs suggested to stay secure. Intstall latest updates and patches, and get the latest version of Sun Java there.

polonus

hm… i was afraid of that… i had kaspersky ewido and zona alarm untill they all was expired .
and now the computer is full of malware…
but i didn`t like zona alarm… becauce its alway came in conflitct with Internet and i must restart my pc to get it working again …i couldt run bitcomet and internet the same time when zone alarm was active…
but the malware came when i clicked on a file i shouldt click on… but i did :frowning: