Popup Ads & Mouse gone berserk!

[SurferSarah]

Hi Guys! LTNS!

My computer crashed & burned awhile back and I'm just now getting it back & online. I'm running XP Pro SP2 but I think it is bootleg. My buddy who "fixed" my computer did so with that "Bare Bones" kit.

My problem now is no matter WHAT popup blocker I try... NONE of them work! I'm absolutely FLOODED with them. Also, something is causing my mouse/pointer to go berserk. The pages run from anything I try to click on! Up & down & side to side. Not just webpages but anywhere on any pc file. I'm having to copy & paste this from notepad to here and even notepad is jumping all over. Hopefully I can get it to paste here! This is maddening!

Any suggestions??

Thanks in Advance!

[rspassey]

How does it act in safe mode without networking and without internet?

[SurferSarah]

It seems to be working bett... oops I spoke too soon..here it goes again dangit. In safe mode I did the mouse troubleshooter... everything seems to be ok... what the heck? What do you think about none of the popup blockers working? I installed Kazaa like an idiot.. then uninstalled & ran antivirus & adaware se personal. Neither one of those picked up anything, but I ran NoAdAware v.4 it picked up this:

Backdoor.NetTroj C:\WINDOWS\Unwise.exe

uh-oh

I'm running AVG 7 Pro...why didn't it pick that up? How do I get rid of it? I also ran registry mechanic and am getting several different error msgs such as:
An exeception occurred while trying to run ""C:\WINDOWS\system32\kndic.dll",DllGetVersion" Only diff being where in this example you see kndic
there is also kadsp and cdyptdll.

Thanks for your response!

[Ob1]

download and install antispyware tools:
spybot
adaware

do a google search for stinger.exe, and run it on your pc.
also delete your temp files, and temporary internet files.

run all of your spyware and antivirus scans in safe mode, if it still is acting up, then i would try doing a repair install on your windows installation if you have the windows xp cd. if that doesnt fix the problem then backup your data that you want to keep and wipe your hard drive clean and put a fresh copy of windows on it.

[regans cortina]

Sometimes a new install is the only answer, the amount of time spent trying to cure it , then you have wrecked the registry. Makes more sense to just spend an hour , doing a format , then reinstall.

[rspassey]

I would also run a Hijack this in safe mode and post up the log.... I can spend some time working on it and help you clean up malware start up apps and other things.

[SurferSarah]

Thanks for the response. Did a google on Hijack this and found several. I ran Stinger, xoftspy and antivirus in safe mode. I cannot remove the scan results from xoft because it is an unregistered version. I did run my AdawareSE personal and 'removed' it, but the exact same list is back everytime. I'm thinking it has to do with the "Backdoor.NetTroj" located in "C:\WINDOWS\unwise.exe".

I'm not sure what you mean by "post up the log"... lol, I am, after all, just a girl!

Do you mean post them here? Email them to you? It's a big log file.
Also, while in safe mode I found that since the return of my computer, I am the administrator, but in safe mode there is an "Administrator", then "Me" (also as admin.) Like there are two...?

I really appreciate the help sweetie!

[SurferSarah]

Thanks OB. I'm going to install a clean copy of Windows ASAP. But for the time being...as far as backing up: any suggestions on using partition magic for one who has never used it?

[rspassey]

Originally Posted by SurferSarah I'm not sure what you mean by "post up the log"... lol, I am, after all, just a girl!

Yes, you can post the log here, but before posting it could you please follow the slight list of instructions Here. That will make our chances of analysing and determining if there is anything within your Hijack Log. Backing up and a reinstall is always the last option... and any problem can be resloved in some manner, most without having to do a fresh install.

[Ob1]

i would back up your data onto some other media form (external hard drive, burn to cd's/dvd's) and then put a fresh copy of windows your pc

what i do is make a system partition and then make a second partition where i create/put a ghost image of my system partition after i install all the programs i want on my pc. that way if you ever run into a problem like this again u just back up your data and restore that image and your back up and running in about 30 minutes instead of reinstallng windows and all of your programs and reconfiguring everything again which can take several hours.