Help with some spyware

[Hock3y]

Lately I seem to be getting pop-ups when I load internet explorer, and when my computer is starting up it says that it is missing a DLL file. I was wondering if anyone can help me. I followed all of the steps in the stickied post, and I have attached my HJT log to my post. Thanks in advance for any help that I can get.

[jholland1964]

Please download SmitfraudFix (by S!Ri)

Double-click SmitfraudFix.exe.
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

**If the tool fails to launch from the Desktop, please move SmitfraudFix.exe directly to the root of the system drive (usually C:), and launch from there.

[Hock3y]

Here's the file it generated after doing that.

[jholland1964]

Please download VundoFix.exe to your desktop.

• Double-click VundoFix.exe to run it.
• Click the Scan for Vundo button.
• Once it's done scanning, click the Remove Vundo button.
• You will receive a prompt asking if you want to remove the files, click YES
• Once you click yes, your desktop will go blank as it starts removing Vundo.
• When completed, it will prompt that it will shutdown your computer, click OK.
• Turn your computer back on.
• Please post the contents of C:\vundofix.txt and a new HiJackThis log.

[Hock3y]

Ok, I've done that and I attached the log and the HiJackThis log also.

[jholland1964]

Did you add these addresses to your Hosts File?
irc.westwood.com
servserv.westwood.com

[Hock3y]

Nope, not to my knowledge.

[jholland1964]

Run HJT again and place checkmarks next to the following entries;
F3 - REG:win.ini: load=????
F3 - REG:win.ini: run=????

O1 - Hosts: 195.13.63.187 irc.westwood.com
O1 - Hosts: 195.13.63.187 servserv.westwood.com
O2 - BHO: (no name) - {3CDF4BD8-6B9E-40E6-8264-6CFD9A87447C} - C:\WINDOWS\system32\vtuts.dll (file missing)
O2 - BHO: (no name) - {A782E194-EA97-4F2A-99C1-8EB42A0B519E} - C:\WINDOWS\system32\jkkjjhg.dll (file missing)
O20 - Winlogon Notify: jkkjjhg - jkkjjhg.dll (file missing)
O20 - Winlogon Notify: vtuts - C:\WINDOWS\system32\vtuts.dll (file missing)
Once you have placed the checkmarks then click the FIX button.
Exit HJT.
Reboot and run a new HJT scan and post the log here.
Judy

[Hock3y]

Ok I've attached the newest log after checking and fixing all the ones that you said to.

[jholland1964]

This log looks pretty good. Are you still getting pop-ups? Are you still getting the missing .dll file message? If so, what is the name of the file?
Judy