Search:

Hello, and hello to my great friend angel fire !

I have run netstate -a -o, and here is the log, in the line port 3811 and 3813, its says "s51.del........" and now it's port 4438 and 4437 and the...

Thanks you very much.

I sigend there. i'm waiting for pm.

I inform you, how is the study.

Thanks.

:bigthumb:

Thank u angelfire for your help and support.

U keep suprising me every time with a great answer.

YOU ARE THE BEST !

P.S - what did you learn ? c++ ? delphi ? i want to study too, to know to...

Hello angelfire, my computer seems to run fine, programs get up faster, and in general it's OK.

But i wanted to know what to do about teatimer, should i leave it Disable ? and spyware terminator...

Hello angelfire, and thanks for your help, you the best.

Here is the log for hijackthis :

Logfile of HijackThis v1.99.1
Scan saved at 21:18:23, on 11/03/2007
Platform: Windows XP SP1 (WinNT...

Hello again. i don't understand :



Double click on fix.reg that we created before ? or double click on fix2.reg that we created now ?

Thanks for your help.

Hello again angelfire. thanks for your help. here is the logs :

Log of hijackthis :

Logfile of HijackThis v1.99.1
Scan saved at 09:33:19, on 11/03/2007
Platform: Windows XP SP1 (WinNT...

EDIT :

- I didn't find this files, they only appear by foldr name, not by file here is the files : Example : ZTS2.EXE (folder)
ZTS2.EXE VCMGCD32.DLL IIFGFGF.DLL RUNDLL16.EXE RUNDLL132.DLL...

Hello angelfire, thanks for your help.

Here is logs of HIJACKTHIS and SDFIX, and notes about my computer.

HIJACKTHIS LOG :

Logfile of HijackThis v1.99.1
Scan saved at 15:10:10, on...

Hello angelfire, here it's the logs.
Antispyware log :

---------------------------------------------------------
AVG Anti-Spyware - Scan Report...

Hello angelfire, and thank again for your help.

it's was a delay.

I have to ask u, it's ok to add the reg file because parts of the reg file are full of "jibrish".

It's ok to add ?

Thanks again.

My redirections is fixed, and i don't have any hijack...
I install again IE6, and now i can connect to secure sites.

Continue doing the fix process ?

I open the REG files that...

Thak again for your help.

Log of hijack this :

Logfile of HijackThis v1.99.1
Scan saved at 15:00:27, on 28/02/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00...

-- Files created between 2007-01-27 and 2007-02-27 ------------------------------

2007-02-27 11:00:25 218112 --a------ D:\s.exe
2007-02-26 23:52:14 3968 --a------...

-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

4 Adobe LM Service - "D:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"
4 Alerter -...

Part 3 :
-- File Associations ------------------------------------------------------------

.bat - batfile - "%1" %*
.chm - chm.file - "D:\WINDOWS\hh.exe" %1
.cmd - cmdfile - "%1" %*
.com -...

Part 2 :

-- HijackThis Fixed Entries (D:\\backups\) --------------------------------------

backup-20050426-055602-307 R3 - Default URLSearchHook is missing
backup-20050426-055602-843 O2 - BHO:...

Part 1 :

ComboScan v20070221.16 run by s on 2007-02-27 at 10:56:51
Computer is in Normal Mode.
--------------------------------------------------------------------------

Unable to create...

Here is the log for avg antispyware and Supplementary :

---------------------------------------------------------
AVG Anti-Spyware - Scan Report...

Hello, and thank you again for your support.

The logs are too long so i posted in 3 thread.

Some notes :

i can't change state to inactive resident shield - "demo version", guess i used ewido...

Here is the new log, in normal mode.

I've also problem when i'm in some secure sites and insert username and password, i get "page can't displayed" error. is this related to this malware problem ?...

Thanks for your help.


Fixwareout Last edited 2/11/2007
Post this report in the forums please
...
»»»»»Prerun check
Service: "Windows Management Service" = D:\WINDOWS\System32\dmcpy.exe
...

Thank so much for your help !

I don't install software called "winpcad".
I disable "spybot, teat timer", and "spyterminatro", but process still remain in memory called : "sp_rsser.exe".
I...

Hello to all, i'm new here, keep up the good work.

When i'm in google or other search engine, click on link redirect me to another sites, like :
Robogold.biz, aicse.com etc...

I run a scan...