Home > Please Help > Please Help! S.clkoptimizer Popups!

Please Help! S.clkoptimizer Popups!

If you do opt for AVG be sure and uninstall Norton as running both can create a conflict. Now find and delete these files: C:\WINDOWS\vivzkn.exe C:\WINDOWS\jmjnz.dll C:\WINDOWS\SYSTEM\WINUP2DATE.DLL C:\WINDOWS\Start Menu\Programs\StartUp\nrna.exe Delete these folders: C:\Program Files\CashBack C:\WINDOWS\SYSTEM\wsxsvc C:\WINDOWS\SYSTEM\VMSS Also in safe mode navigate to the C:\Windows\Temp folder. desktop.ini Service Manager.lnk Wireless Sync Client.lnk User Startup: C:\Documents and Settings\lfairc01.MMS\Start Menu\Programs\Startup . .. You wouldn't need to add click to the list of events for which popups are disallowed...

lets put this to bed.Even if you get a blank log from VX2Finder, it should still generate one --- just click "Click to Find VX2..." and then click "Make log"; that's Comment 194 Brad Fults 2004-12-01 20:06:08 PST > http://www.nextwish.org The normal popup is blocked. Thank you for the help. But you did not remove anything crucial to the functioning of your system --- you removed the correct entries on your own.

This is important, if you reboot before you are finished entering all the files, you will have to start over again. If I have helped you in any way, please consider a donation: Member of UNITE and ASAP. weird. So i still didnt get the pending operations dialog.

Following discussion on IRC, here is a popup generated by JavaScript. This page is so long that I missed the bit about -safe-mode the first run through. This utility will find legitimate files in addition to malware. ballardp, Mar 24, 2005 #7 Flrman1 Joined: Jul 26, 2002 Messages: 46,329 Go through all this again.

About the dummy files, it's just been my experience that VX2 doesn't like to be deleted, and "Replace on Reboot" has been the only method that has been consistently successful. Click Yes to confirm. The so-called "popup" is opened in response to a legitimate user action. Right click on this link and choose Save As...Save it to your Desktop.

Opening the page in a window by its self then closing the window won’t reproduce the result. http://www.visualtour.com/downloads/xp_fix.exeThen run findqoologic again and post the results. Click here to Register a free account now! http://www.jrc313.com/popup-test/ can create a pop-up.

Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRAM FILES\MICROSOFT ACTIVESYNC\WCESCOMM.EXE" O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program http://en.community.dell.com/support-forums/virus-spyware/f/3522/t/16943027 This infection requires us to detect and remove it without rebooting or restarting your computer (unless the instructions say so). Firefox will never ship with either of these settings by default. Save as file type: All files (*.*) and save it on your Desktop.REGEDIT4[-HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\stqgmg][-HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\stqgyg][-HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\stqgygns][-HKLM\Software\Microsoft\Active Setup\Installed Components\{cd9d6adf-5554-434e-b9e4-662bd04ecfa9}Then, locate fixme.reg on your Desktop and double-click on it.

Comment 157 Worcester12345 2004-10-18 11:11:56 PDT (In reply to comment #154) > This site will open a new window when closing the tab, however if it's the only > site in Sign In Use Facebook Use Twitter Use Windows Live Register now! TBE is a useful extension, but it interferes with (replaces?) the built-in popup blocker, but is considerably worse. cleaned?

Comment 166 maik.himstedt 2004-10-26 13:05:24 PDT www.eselfilme.com Comment 167 david 2004-10-28 17:50:22 PDT http://www.globalsecurity.org creates a pop-under window with all JScript disabled in preferences Comment 168 Mike 2004-10-29 04:30:41 PDT http://abcnews.go.com/US/wireStory?id=206591 Comment 52 Anish Goenka 2004-08-13 09:41:05 PDT (In reply to comment #51) > firefox 0.9.3. Logfile of HijackThis v1.99.1 Scan saved at 1:34:46 PM, on 3/26/2005 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\WINDOWS\SYSTEM\ZONELABS\MINILOG.EXE C:\PROGRAM anyway, its emptyFiles Found---User Agent String---i followed your instructions and made the dummy files, i was just curious as to why.Just pure experience --- no other reason.

Comment 134 Blake 2004-09-27 16:48:37 PDT This is FireFox 1 preview release on Windows XP Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Firefox/0.10 First make sure you clear your cookies I have fixed any issues that have been found and have taken care of others with HiJack that I know are bad. Go here: (works only for IE) http://www.pandasoftware.com/activescan/com/activescan_principal.htm When scanner is loaded...click "scan whole computer" When scan starts....Leave scanner window open....

http://www.nytimes.com/2004/10/17/magazine/17EATING.html Comment 162 Kevin Hjelden 2004-10-24 13:41:47 PDT I searched for "vfapi" on google, and clicked on the first link: http://www.divx-digest.com/software/vfapi.html I somehow got a dialog with no status bar and

IE6 with WinXP SP2 RC2 correctly blocks all unrequested windows. Comment 152 hlascs 2004-10-15 11:22:06 PDT Pop-up when closing the website: http://www.windowsxpatoz.com/cgi-bin/miscellaneous/index.cgi Comment 153 tom.williams 2004-10-15 14:10:09 PDT I'm running into some adult sites with popups that appear when I close Mozilla/5.0 (Windows; U; Windows NT 5.0; rv:1.7.3) Gecko/20040913 Firefox/0.10.1 build. With that said (when ready): Open up HijackThis and go to Config->Misc Tools and check the first two boxes there.

Logfile of HijackThis v1.99.0Scan saved at 8:29:57 PM, on 01/12/2005Platform: Windows 98 Gold (Win9x 4.10.1998)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\SYSTEM\KERNEL32.DLLC:\WINDOWS\SYSTEM\MSGSRV32.EXEC:\WINDOWS\SYSTEM\MPREXE.EXEC:\WINDOWS\SYSTEM\mmtask.tskC:\WINDOWS\SYSTEM\MSTASK.EXEC:\WINDOWS\EXPLORER.EXEC:\WINDOWS\WIORUV.EXEC:\WINDOWS\TASKMON.EXEC:\WINDOWS\SYSTEM\SYSTRAY.EXEC:\WINDOWS\GWHOTKEY.EXEC:\LAUNCHBOARD\LNCHBRD.EXEC:\WINDOWS\SYSTEM\STIMON.EXEC:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXEC:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\EVNTSVC.EXEC:\WINDOWS\SYSTEM\SECURE.EXEC:\WINDOWS\STARTER.EXEC:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXEC:\WINDOWS\SYSTEM\RNAAPP.EXEC:\WINDOWS\SYSTEM\TAPISRV.EXEC:\WINDOWS\DESKTOP\HIJACK\HIJACKTHIS.EXEC:\WINDOWS\NOTEPAD.EXEC:\WINDOWS\SYSTEM\PSTORES.EXER0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page I was using 0.9.3 (Winxp) when I tried this. Click any link in the news section (sección noticias), then it opens a pop-up window Comment 119 jordijfgec 2004-09-17 23:35:31 PDT (The preview post was wrong the adress, sorry) The pop-up desktop.ini Service Manager.lnk uptd.exe Wireless Sync Client.lnk User Startup: C:\Documents and Settings\lfairc01.MMS\Start Menu\Programs\Startup . ..

This applies only to the original topic starter. Click here to download LspFix Launch the application, and click the "I know what I'm doing" checkbox. When it is finished,you will see in blue Completed the scan, Click Compare to Continue at which time you will click the Compare button. Adjust your security settings for ActiveX:Go to Internet Options>Security tab.

It has since been updated again and the old find_it will not find all files yet. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE. Files found startup files Checking Global Startup (fstarts by IMM - test ver. 0.001) NOT