# I've tried everything--computer problem **URL:** \ **Category:** Factual Questions\ **Created:** [November 8, 2004, 3:44pm UTC](https://boards.straightdope.com/t/ive-tried-everything-computer-problem/273653 "2004-11-08T15:44:00Z")\ **Posts on this page:** 6\ **Page:** 2
**Author:** ![HMS\_Irruncible](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/hms_irruncible/32/7394_2.png) [@HMS\_Irruncible](https://boards.straightdope.com/u/HMS_Irruncible)\ **Post date:** [November 9, 2004, 4:17am UTC](https://boards.straightdope.com/t/ive-tried-everything-computer-problem/273653/21 "2004-11-09T04:17:18Z")
> [@dauerbach](#): > > I am running 384 MB ram. I did indeed find exp.exe using msconfig, deselected it, restarted, it is no longer loaded, but the pseudo popups continue. Why do you keep saying “pseudo popups”? Either they pop up, or they don’t. If you can tell us some more detail about what your computer is doing, maybe we can get a better idea. What is in these popups? ---
**Author:** ![dauerbach](https://avatars.discourse-cdn.com/v4/letter/d/c2a13f/32.png) [@dauerbach](https://boards.straightdope.com/u/dauerbach)\ **Post date:** [November 9, 2004, 4:19am UTC](https://boards.straightdope.com/t/ive-tried-everything-computer-problem/273653/22 "2004-11-09T04:19:21Z")
Didn’t realize I had an old version. Here is the new log: Logfile of HijackThis v1.97.7 Scan saved at 11:28:35 PM, on 11/8/04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\RUNDLL32.EXE C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE C:\WINDOWS\SYSTEM\DDHELP.EXE C:\WINDOWS\SYSTEM\PSTORES.EXE C:\PROGRAM FILES\WINZIP\WINZIP32.EXE C:\UNZIPPED\HJT\HIJACKTHIS.EXE O1 - Hosts: 69.20.16.183 ieautosearch O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM…\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun O4 - HKLM…\Run: [Zone Labs Client] “C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe” O4 - HKLM…\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service O4 - HKCU…\Run: [msnmsgr] “C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE” /background O4 - HKCU…\Run: [AIM] C:\PROGRAM FILES\AIM95\aim.exe -cnetwait.odl O4 - Startup: SpySubtract.lnk = C:\Program Files\interMute\SpySubtract\SpySub.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: &Google Search - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR2.DLL/cmsearch.html O8 - Extra context menu item: Cached Snapshot of Page - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR2.DLL/cmcache.html O8 - Extra context menu item: Similar Pages - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR2.DLL/cmsimilar.html O8 - Extra context menu item: Backward Links - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR2.DLL/cmbacklinks.html O8 - Extra context menu item: Translate into English - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR2.DLL/cmtrans.html O9 - Extra button: AIM (HKLM) O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS ppdf32.dll O12 - Plugin for .mp3: C:\PROGRA~1\INTERN~1\PLUGINS pqtplugin3.dll O12 - Plugin for .mpeg: C:\PROGRA~1\INTERN~1\PLUGINS pqtplugin3.dll ---
**Author:** ![Fear\_Itself](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/fear_itself/32/19637_2.png) [@Fear\_Itself](https://boards.straightdope.com/u/Fear_Itself)\ **Post date:** [November 9, 2004, 4:28am UTC](https://boards.straightdope.com/t/ive-tried-everything-computer-problem/273653/23 "2004-11-09T04:28:26Z")
That’s still version 1.97.7 ---
**Author:** ![dauerbach](https://avatars.discourse-cdn.com/v4/letter/d/c2a13f/32.png) [@dauerbach](https://boards.straightdope.com/u/dauerbach)\ **Post date:** [November 9, 2004, 4:34am UTC](https://boards.straightdope.com/t/ive-tried-everything-computer-problem/273653/24 "2004-11-09T04:34:04Z")
Oooops. How 'bout this? Logfile of HijackThis v1.98.2 Scan saved at 11:43:33 PM, on 11/8/04 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\RUNDLL32.EXE C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE C:\WINDOWS\SYSTEM\DDHELP.EXE C:\WINDOWS\SYSTEM\PSTORES.EXE C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\WINWORD.EXE C:\WINDOWS\SYSTEM\SPOOL32.EXE C:\PROGRAM FILES\WINZIP\WINZIP32.EXE C:\UNZIPPED\HIJACKTHIS\HIJACKTHIS.EXE O1 - Hosts: 69.20.16.183 ieautosearch O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM…\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun O4 - HKLM…\Run: [Zone Labs Client] “C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe” O4 - HKLM…\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service O4 - HKCU…\Run: [msnmsgr] “C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE” /background O4 - HKCU…\Run: [AIM] C:\PROGRAM FILES\AIM95\aim.exe -cnetwait.odl O4 - Startup: SpySubtract.lnk = C:\Program Files\interMute\SpySubtract\SpySub.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: &Google Search - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR2.DLL/cmsearch.html O8 - Extra context menu item: Cached Snapshot of Page - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR2.DLL/cmcache.html O8 - Extra context menu item: Similar Pages - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR2.DLL/cmsimilar.html O8 - Extra context menu item: Backward Links - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR2.DLL/cmbacklinks.html O8 - Extra context menu item: Translate into English - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR2.DLL/cmtrans.html O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM95\AIM.EXE O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS ppdf32.dll O12 - Plugin for .mp3: C:\PROGRA~1\INTERN~1\PLUGINS pqtplugin3.dll O12 - Plugin for .mpeg: C:\PROGRA~1\INTERN~1\PLUGINS pqtplugin3.dll ---
**Author:** ![Nightsong](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/nightsong/32/3083_2.png) [@Nightsong](https://boards.straightdope.com/u/Nightsong)\ **Post date:** [November 9, 2004, 5:15am UTC](https://boards.straightdope.com/t/ive-tried-everything-computer-problem/273653/25 "2004-11-09T05:15:44Z")
I did a search on the “O1 - Hosts: 69.20.16.183 ieautosearch” line, and found this: [http://www.ozzu.com/ftopic33963.html](http://www.ozzu.com/ftopic33963.html) If the spyware they talk about in there is the same thing you have, there are some links to removal tools that hopefully will help. * * * \<\< It seemed liked a good idea at the time… \>\> ---
**Author:** ![Fear\_Itself](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/fear_itself/32/19637_2.png) [@Fear\_Itself](https://boards.straightdope.com/u/Fear_Itself)\ **Post date:** [November 9, 2004, 11:10am UTC](https://boards.straightdope.com/t/ive-tried-everything-computer-problem/273653/26 "2004-11-09T11:10:08Z")
Do a Windows search for a file called **Hosts** (no extension) in the Windows directory; open it with Notepad, and copy and paste the contents here. [Previous page](https://boards.straightdope.com/t/ive-tried-everything-computer-problem/273653.md?page=1)