I had an issue with popups, please see the link. Well they are back and can't be fixed the same way.
http://www.experts-exchange.com/Operating_Systems/WinXP/Q_20898144.htmlhere is the log from hijackthis:
Logfile of HijackThis v1.97.5
Scan saved at 9:06:01 AM, on 2/27/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon
.exe
C:\WINNT\system32\services
.exe
C:\WINNT\system32\lsass.ex
e
C:\WINNT\System32\ibmpmsvc
.exe
C:\WINNT\system32\svchost.
exe
C:\WINNT\System32\svchost.
exe
C:\WINNT\system32\spoolsv.
exe
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINNT\system32\regsvc.e
xe
C:\WINNT\system32\MSTask.e
xe
C:\WINNT\System32\WBEM\Win
Mgmt.exe
C:\WINNT\System32\mspmspsv
.exe
C:\Program Files\Citrix\ICA Client\ssonsvr.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\tp4mon.e
xe
C:\WINNT\system32\Promon.e
xe
C:\PROGRA~1\ThinkPad\UTILI
T~1\tphkmg
r.exe
C:\WINNT\system32\PRPCUI.e
xe
C:\PROGRA~1\NavNT\vptray.e
xe
C:\Program files\ThinkPad\Utilities\t
ponscr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINNT\system32\wnstssv.
exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Microsoft Office\Office10\OUTLOOK.EX
E
C:\Program Files\Microsoft Office\Office10\WINWORD.EX
E
C:\Program Files\Microsoft Office\OfficeRT\Office\MSA
CCESS.EXE
\Mis-01\cdroms\Adware\Hija
ckThis.exe
C:\Program Files\RealVNC\WinVNC\winvn
c.exe
R1 - HKCU\Software\Microsoft\In
ternet Explorer\Main,Search Bar = about:blank
R0 - HKCU\Software\Microsoft\In
ternet Explorer\Main,Start Page =
http://intranet.handling.com/R1 - HKCU\Software\Microsoft\In
ternet Explorer\Main,Default_Page
_URL = about:blank
R1 - HKCU\Software\Microsoft\In
ternet Explorer\Main,Default_Sear
ch_URL = about:blank
R1 - HKCU\Software\Microsoft\In
ternet Explorer\SearchURL,(Defaul
t) = about:blank
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-7
84B7D6BE0B
3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEH
elper.ocx
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-C
F10577473F
7} - c:\program files\google\googletoolbar
1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-0
0A0C908246
7} - C:\WINNT\System32\msdxm.oc
x
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-0
09027A5CD4
F} - c:\program files\google\googletoolbar
1.dll
O4 - HKLM\..\Run: [TrackPointSrv] tp4mon.exe
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [XircWinModem4] ltcm000c.exe 9
O4 - HKLM\..\Run: [Promon.exe] Promon.exe
O4 - HKLM\..\Run: [SoundFusion] RunDll32 cwcprops.cpl,CrystalContro
lWnd
O4 - HKLM\..\Run: [TpHotkey] C:\PROGRA~1\ThinkPad\UTILI
T~1\tphkmg
r.exe
O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\NavNT\vptray.e
xe
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe
" -atboottime
O4 - HKLM\..\Run: [Tapicfg.exe] C:\WINNT\System32\tapicfg.
exe
O4 - HKLM\..\Run: [MsgCenterExe] "C:\Program Files\Common Files\Real\Update_OB\RealO
neMessageC
enter.exe"
-osboot
O4 - HKLM\..\Run: [WinVNC] "C:\Program Files\RealVNC\WinVNC\WinVN
C.exe" -servicehelper
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe
" /background
O4 - HKCU\..\Run: [WNSA] C:\WINNT\system32\wnstssv.
exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar
1.dll/cmse
arch.html
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar
1.dll/cmba
cklinks.ht
ml
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar
1.dll/cmca
che.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2
\Office10\
EXCEL.EXE/
3000
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar
1.dll/cmsi
milar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar
1.dll/cmtr
ans.html
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.d
ll,-61144 (HKLM)
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.d
ll,-61144 (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.
dll
O16 - DPF: {421D8233-A58D-4FA4-A426-D
6F3799D62C
8} (ProjectPoint Document) -
https://projectpoint.buzzsaw.com/!/download/ProjectPoint-BZ-EN.exeO16 - DPF: {56336BCB-3D8A-11D6-A00B-0
050DA18DE7
1} (RdxIE Class) -
http://software-dl.real.com/076b05d600f459b8ee16/netzip/RdxIE601.cabO16 - DPF: {9F1C11AA-197B-4942-BA54-4
7A8489BB47
F} (Update Class) -
http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37891.2017824074O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-4
4455354000
0} (Shockwave Flash Object) -
http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cabO16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0
060082AA75
C} (GpcContainer Class) -
https://questica.webex.com/client/v_eureka-mc50/webex/ieatgpc.cabO17 - HKLM\System\CCS\Services\T
cpip\Param
eters: Domain = handling.com
O17 - HKLM\System\CS1\Services\T
cpip\Param
eters: Domain = handling.com
O17 - HKLM\System\CS2\Services\T
cpip\Param
eters: Domain = handling.com
thanks guys