mrgman

That would be great. Here is the log Malwarebytes Anti-Malware 1.62.0.1300 http://www.malwarebytes.org Database version: v2012.07.03.05 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 8.0.7601.17514 Shaun :: MRG-PC [administrator] 30/07/2012 15:52:11 mbam-log-2012-07-30 (15-52-11).txt Scan type: Full scan (C:\|) Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 446936 Time elapsed: 2 hour(s), 9 minute(s), 52 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 1 HKCU\SOFTWARE\CLASSES\CLSID\{42AEDC87-2188-41FD-B9A3-0C966FEABEC1}\INPROCSERVER32 (Trojan.Zaccess) -> Quarantined and deleted successfully. Registry Values Detected: 1 HKCU\SOFTWARE\CLASSES\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InprocServer32| (Trojan.Zaccess) -> Data: C:\Users\Shaun\AppData\Local\{fc45e245-6609-a38a-a93e-9120e0a3d399}\n. -> Quarantined and deleted successfully. Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end)

This is solved now as I used the info from another thread. This is what the probs was Infected copy of c:\windows\system32\services.exe was found and disinfected Restored copy from - c:\windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services.exe . Infected copy of c:\windows\system32\userinit.exe was found and disinfected Restored copy from - c:\windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe

Hi all, I keep getting these pop-ups when I am connected to the internet and its p'ing me off. I have done a scan with malwarebytes and it found 2 trj's in my reg. I ave also done a boot time scan with avast and that came back with nothing. Also a scan with trendmicro and that showed nothing. Any help or ideas as to what might be causing this plz [ATTACH=CONFIG]807.vB5-legacyid=1605[/ATTACH] [ATTACH=CONFIG]808.vB5-legacyid=1606[/ATTACH]