I 've been getting porn popups at completely random times, or sometimes not at all. A new IE window opens and it's one of three different porn sites.

I've tried

AdAware
SpyBot
Norton
HiJackThis
SpyBlocs
*updated each also

Usually I'll be on some random site like google and all of a sudden something pops up. I've looked at my startup, deleted cookies, and at this point I'm out of ideas.

Well you are missing something. Feel free to post your hijackthis log file and we will take a look at it.

KTTD

Though I walk through the valley of Microsoft, I shall fear no OS for skills are with me

I'll post it, but it says not to post the log unless an expert requests..I guess that's you, but another person said that it's risky doing that cause it gives info about my pc..is there something I should delete before I post, or just don't worry about it since I hope we're all here to help each other.

Look at the log before you post it. Do you see a social security number or a bank account number? If you do, delete them. I bet you there is no confidential or personal info in that log.

I am the moderator so if I tell you to post it feel free.

I've looked at a lot of hijackthis logs and never, ever, have I seen any personal information in one that could cause you harm.

KTTD

Though I walk through the valley of Microsoft, I shall fear no OS for skills are with me

Here's the log, thanks for helping, I'm not real sure what's good and bad, hopefully you can find what's causing my problem. Thanks

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\WINDOWS\System32\P2P Networking\P2P Networking.exe
C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe
C:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exe
C:\WINDOWS\System32\mcc.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\PROGRA~1\VISION~1\ONETOU~2.EXE
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\Program Files\EarthLink TotalAccess\TaskPanl.exe
C:\Program Files\EarthLink TotalAccess\FastLane\IPClient.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\HiJack\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: EarthLink Popup Blocker - {4B5F2E08-6F39-479a-B547-B2026E4C7EDF} - C:\Program Files\EarthLink TotalAccess\PnEL.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: EarthLink Toolbar - {D7F30B62-8269-41AF-9539-B2697FA7D77E} - C:\Program Files\EarthLink TotalAccess\PnEL.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [diagent] "C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe" startup
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Multimedia Codecs] C:\WINDOWS\System32\mcc.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [OneTouch Monitor] C:\PROGRA~1\VISION~1\ONETOU~2.EXE
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKCU\..\Run: [SPYKILLER] C:\Program Files\Anonymizer\sk\SpyWareKiller.exe /BOOT
O4 - HKCU\..\Run: [E6TaskPanel] "C:\Program Files\EarthLink TotalAccess\TaskPanl.exe" -winstart
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{ED229F93-8615-408F-B497-55D627759C6F}:

hi ffj,
first off Open the Task Manager (Ctl-Alt-Del) and kill the mcc.exe
next go to the diamond website at this location:http://www.diamondcs.com.au/index.php?page=products, and download this: APM,
next reboot into safe mode and do the following:
run hijackthis and place a check next to these entries, make sure you have no open windows, and no programs running:
hit the fix check button
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [Multimedia Codecs] C:\WINDOWS\System32\mcc.exe
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
now go into your registry and do the following:
delete the entire hkey_current_user\software\media codecs registry key
remove the registry value that is causing the app to automatically restart when rebooting.
the registry value is in "hkey_local_machine\software\microsoft\windows\currentversion\run" and it launches the mcc.exe application, referring to it as "multimedia codecs".
next i want you to run the APM program and unload mcc.exe from running processes if found.
next reboot your computer into normal mode and do the following:
delete these files and or folders from your windows and or system32 directory:
C:\WINDOWS\System32\P2P Networking\P2P Networking.exe
C:\WINDOWS\System32\mcc.exe
next to be sure that you don't have any nasty codecs still around, go to tools, internet options, in the temp internet box hit the settings button, then view objects, check out all your active x downloaded programs, if you see one that is suspicious, google it, if found to be related to mcc.exe, kill it!
next re enable your system restore.
all the best,
murve

I'll try it in the morning, thanks for taking time to help, hope it works! Thanks!

Everything went well up to the registry part...I couldn't locate any "hkey...media codecs key" I even done a search for it, no luck, wasn't sure what to do next. I completed the rest of the instructions, but only time will tell if we solved the problem

hi ffj,
if you put a check next to the entry:
O4 - HKLM\..\Run: [Multimedia Codecs] C:\WINDOWS\System32\mcc.exe
hijackthis probably deleted the key and value.
also on a second look i noticed i missed one entry:
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
put a check next to that one and hit the fix checked button
all the best,
murve

Hey Murve...I followed through with all the instructions except for finding the codecs key, but as you posted above, it must have been fixed. So far so good, it's been about a week and everything is back to normal. Thanks for your time and help, I would have never known what to do, thanks!

hello, whenever i open my ie explorer, a porn website will pop up and it leads to other porn websites. i believe the porn website address is somthing as pudd.com. i tried adware, spyware doctors and everything else, it just doesn't work. please help me. thanks!!!
leo