HELP!Dont know what it is!!

[jesusplays]

every time i login to my computer this ACProtect hing pops up!

this is what it looks like: http://img292.imageshack.us/img292/7816/helpyl0.jpg

it pops back up about 4 times.

(i also have been experiencing freezing issues around the same time ACProtect started poping up)

any wAY I FOLLOWED guide lines and i scanned my pc with the suggested scanners and they all detect nothing.




---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 1220 PM 9/23/2007

+ Scan result:



Nothing found.



::Report end
---------------

[jesusplays]

scan 2 days prior. i removedthese things i think

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 8:51:51 PM 9/21/2007

+ Scan result:



C:\WINDOWS\system32\gtdownls_95.ocx -> Adware.Gdown : No action taken.
C:\WINDOWS\Downloaded Program Files\gsda.dll -> Not-A-Virus.Downloader.Win32.SpyGame : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@2o7[1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@bet.122.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@brightcove.112. 2o7[1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@buycom.122.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@nielsen.112.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@2o7[2].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@bet.122.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@brightcove.112. 2o7[1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@kelleybluebook. 112.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@waterfrontmedia .112.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@aavalue[1].txt -> TrackingCookie.Aavalue : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@getmusicfree.aa value[2].txt -> TrackingCookie.Aavalue : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@4.adbrite[2].txt -> TrackingCookie.Adbrite : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@adbrite[1].txt -> TrackingCookie.Adbrite : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@ads.adbrite[2].txt -> TrackingCookie.Adbrite : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@3.adbrite[1].txt -> TrackingCookie.Adbrite : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@ads.adbrite[2].txt -> TrackingCookie.Adbrite : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@ads.addynamix[2].txt -> TrackingCookie.Addynamix : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@rotator.adjuggl er[1].txt -> TrackingCookie.Adjuggler : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@advertising[1].txt -> TrackingCookie.Advertising : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@bluestreak[1].txt -> TrackingCookie.Bluestreak : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@cc.bridgetrack[2].txt -> TrackingCookie.Bridgetrack : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@citi.bridgetrac k[2].txt -> TrackingCookie.Bridgetrack : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@www.burstbeacon[1].txt -> TrackingCookie.Burstbeacon : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@burstnet[1].txt -> TrackingCookie.Burstnet : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@www.burstnet[2].txt -> TrackingCookie.Burstnet : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@com[1].txt -> TrackingCookie.Com : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@adopt.euroclick[1].txt -> TrackingCookie.Euroclick : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@fastclick[2].txt -> TrackingCookie.Fastclick : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@searchportal.in formation[1].txt -> TrackingCookie.Information : No action taken.
C:\Documents and Settings\Debra\Cookies\debra@sec1.liveperson[1].txt -> TrackingCookie.Liveperson : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@sales.liveperso n[1].txt -> TrackingCookie.Liveperson : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@mediaplex[1].txt -> TrackingCookie.Mediaplex : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@perf.overture[1].txt -> TrackingCookie.Overture : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@ads.pointroll[2].txt -> TrackingCookie.Pointroll : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@ads.pointroll[2].txt -> TrackingCookie.Pointroll : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@questionmarket[1].txt -> TrackingCookie.Questionmarket : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@questionmarket[1].txt -> TrackingCookie.Questionmarket : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@realmedia[2].txt -> TrackingCookie.Realmedia : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@realmedia[1].txt -> TrackingCookie.Realmedia : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@revenue[2].txt -> TrackingCookie.Revenue : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@revsci[2].txt -> TrackingCookie.Revsci : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@ads.revsci[2].txt -> TrackingCookie.Revsci : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@revsci[2].txt -> TrackingCookie.Revsci : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@edge.ru4[2].txt -> TrackingCookie.Ru4 : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@edge.ru4[2].txt -> TrackingCookie.Ru4 : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@serving-sys[2].txt -> TrackingCookie.Serving-sys : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@serving-sys[2].txt -> TrackingCookie.Serving-sys : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@statcounter[1].txt -> TrackingCookie.Statcounter : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@anad.tacoda[2].txt -> TrackingCookie.Tacoda : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@anat.tacoda[2].txt -> TrackingCookie.Tacoda : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@tacoda[2].txt -> TrackingCookie.Tacoda : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@login.tracking1 01[2].txt -> TrackingCookie.Tracking101 : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@trafficmp[1].txt -> TrackingCookie.Trafficmp : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@trafficmp[1].txt -> TrackingCookie.Trafficmp : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@reduxads.valuea d[1].txt -> TrackingCookie.Valuead : No action taken.
C:\Documents and Settings\Debra\Cookies\debra@m.webtrends[1].txt -> TrackingCookie.Webtrends : No action taken.
C:\Documents and Settings\Guest\Cookies\guest@m.webtrends[1].txt -> TrackingCookie.Webtrends : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@m.webtrends[2].txt -> TrackingCookie.Webtrends : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@m.webtrends[1].txt -> TrackingCookie.Webtrends : No action taken.
C:\Documents and Settings\SHARONDA\Cookies\sharonda@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : No action taken.
C:\Documents and Settings\Johnavon\Cookies\johnavon@zedo[1].txt -> TrackingCookie.Zedo : No action taken.


::Report end

[jholland1964]

Sorry we seem to have missed this.
Have you looked in Add/Remove for this program ACProtect? If you find it, uninstall it.
Give me a bit and I will go through your log.

[jesusplays]

Sorry we seem to have missed this.
Have you looked in Add/Remove for this program ACProtect? If you find it, uninstall it.
Give me a bit and I will go through your log.

its doesnt come up in add/remove preograms.

my mom thinks i put a virus on the computer and shes mad at me........im trying to solve the problem because she's going to make me buy her a new computer......

I appreciate the help,take all the time u need.

[jholland1964]

Nothing in the scan by AVG was removed. Note this at the end of each and every line;

No action taken.

You are not going to have to buy a new computer, but you are going to have to do a scan with HiJackThis and save the log and post it here so I can better see what is going on. You can find the link for HiJackThis here
Follow the instructions for install EXACTLY. Run the scan and post back here with the log.
Do this ASAP so that we can get rid of whatever infections are on the computer and before they cause anymore infections.

[TurcoLoco]

There is quite possibly a Explorer Shell Hook residing in the following folder:

C:\Windows\System32\win32GI\svchost.exe

If that is indeed the case, that will have to be killed and removed first.

See, if the win32GI folder can be deleted at all. Try CleanupXP+ in Safe Mode with Command Prompt, it should do the trick.

Edit by Judy;
~TL forgot his link to CleanupXP+
Scroll down to post #4 on the link above to download and read instructions on how to use this program.

[jesusplays]

There is quite possibly a Explorer Shell Hook residing in the following folder:

If that is indeed the case, that will have to be killed and removed first.

See, if the win32GI folder can be deleted at all. Try CleanupXP+ in Safe Mode with Command Prompt, it should do the trick.

Edit by Judy;
~TL forgot his link to CleanupXP+
Scroll down to post #4 on the link above to download and read instructions on how to use this program.

i booted in safe mode with command promt.

entered "Desktop\CleanupXP.exe"

it ran.

was that all i suppose to do?

ACProtect is still on my pc...HELP!!!!mom is getting at me.


sorry for late responses. please and thank u!

[jholland1964]

Empty your Norton Quarantine files.

Turn OFF SpybotSD TeaTimer and Ad-Aware 2007 Service.

Run HJT again and place a checkmark next to the following entries;
O2 - BHO: (no name) - >û - (no file)
O2 - BHO: (no name) - rsion - (no file)
O2 - BHO: (no name) - `>û - (no file)
O2 - BHO: (no name) - à=û - (no file)

Once you have placed those checkmarks then click the Fix Checked button.
Exit HJT.
Reboot the computer and run a new HJT scan and post that here.