Spyware help

[rellell]

I went through the "read this before posting" process and I still get an icon in my taskbar popping up repeatedly telling me that I have spyware. Right clicking it only takes me to a "spylock" spyware website to buy a program. I didn't have any problem with popups before this started happening. In my tasks there was a process called pccnmt.exe (or something very similar) that I could only delete in safe mode. Attached is my hjt log. I've cleaned everything but my ctfmon still shows up (though I believe that was there before my problems started occuring). Any help is appreciated.

[TurcoLoco]

Hi Rellell,

I would like you to re-run HijackThis when that icon / pop-up appeares again. Simply, before you close or click on anything, just run a new HijackThis scan and then submit its log here so we can hopefully capture that process cause the log you submitted didn't really reveal much anything. Make sure your system is running in Normal mode but close all other programs / browser windows - except the pop-up- before running the HJT scan.

Btw, the only thing that I could see was the RUNDLL32.EXE entry which is used to list generic 32-bit applications, if the baddie is initiating itself using that then you would have to download and run ProcessExplorer to see the actual file/executable hiding behind this entry.

~TL

[jholland1964]

Was your HJT log run in normal mode? You also do not appear to be running either an anti-virus program or a firewall. Your Java program is also out of date.
Judy