Getting Rid of Popups Home

Unknown

I'm trying to get rid of popups. By reading other threads, I've done the following:

* Set the computer to show hidden files and folders
* Disabled System Restore
* Reboot in Safe mode with Networking
* Ran HijackThis and have attached the log file


I did not have it fix anything. What do I do next?

Thank you.

Dave

Buckeye_Sam

Place a checkmark next to these entries, close all browsers and windows, and have HijackThis fix them by clicking Fix Checked:
O4 - HKLM\..\Run: [satmat] C:\WINDOWS\satmat.exe
O4 - HKLM\..\Run: [vefhdrwcgn] C:\WINDOWS\system32\bejusm.exe
O16 - DPF: {FE1A240F-B247-4E06-A600-30E28F5AF3A0} - file://C:\install.cab


Please delete these files using Windows Explorer(if present):
C:\WINDOWS\satmat.exe
C:\WINDOWS\system32\bejusm.exe


Reboot and post a new hijackthis log from normal mode(not safe mode).

dwurtz

Ok. I removed these entries, rebooted, and here's the next log. I haven't had any popups yet - Thank you. Do I need to do anything else other than reset my explorer folder options and turn system restore on?

Thanks again!

Dave

Buckeye_Sam

Place a checkmark next to these entries, close all browsers and windows, and have HijackThis fix them by clicking Fix Checked:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = websearch.drsnsrch.com/q.cgi?q=

These are optional, not bad but they use up a lot of resources and are unnecessary to start at boot up.
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE


Install Spyware Blaster to keep from getting infected again.
http://www.wilderssecurity.net/spywareblaster.html