Search:

Ya, it's a Dell laptop.
I think there is some dead window attached to my MS Outlook.:laugh:
I does not seem to do any harm at this point.

Thanks alot for your help!

Hi,
I like that you don't give up :)

(I am the same way - but in a different field)

I only got a very short log - not sure that's what we need.
I run gmer as you instructed: rootkit - scan,...

Hi, ILUCCA

The popup window always appears quickly after I open and close MS Outlook, even if all browsers are closed (and haven't been opened since reboot).
It seems attached to MS Outlook.

I...

That's OK - summertime... :laugh:

The problem might not seem very big - but since there are some connection problems happening in my system at the same time, I would like to get rid of all the...

Files\ewido anti-malware\ewidoctrl.exe" ["ewido networks"]
Fast User Switching Compatibility, FastUserSwitchingCompatibility, "C:\WINDOWS\System32\svchost.exe -k netsvcs"...

C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\DESKTOP.INI
[.ShellClassInfo]
UICLSID={7BD29E00-76C1-11CF-9DD0-00A0C9034933}
->...

"run" = (value not found)

HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\
"Shell" = (value not found)

HKLM\SOFTWARE\Microsoft\Command Processor\
"AutoRun" = (empty string)
...

\InProcServer32\(Default) = "C:\WINDOWS\System32\shdocvw.dll" [MS]
"{EFA24E64-B078-11d0-89E4-00C04FC9E26E}" = "Explorer Band"
-> {HKLM...CLSID} = "Explorer Band"
...

Hi, ILUCCA:

Thank you again - that's the silent runners log. Part 1.

"Silent Runners.vbs", revision 45, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output of all locations...

I got the same old Fastclick window lurking in the background (I would not be concerned too much but there are some connection problems - loosing connection - and I would like to get rid of all the...

Thanks very much for your help!

It seems that all malware is gone for now! (until they invent more - it was really "creative" to have attached some bad stuff to the Spybot Resident):bigthumb:

Oh, never mind - I searched the forum and found description of a hack to fix the Resident window
:)

After claening I reinstalled Spybot.

There is one small but annoying problem: the text in the resident window does not fit in - those boxes asking "allow" or "deny" are lost somewhere at the...

Hi,
Thanks for helping me again :)

I uninstalled Spybot and fixed the problem items.

That's the fresh Hijack log:

Logfile of HijackThis v1.99.1
Scan saved at 7:46:54 AM, on 5/31/2006...

Hi, ILUCCA:
Thanks for trying to help me:

However, at thia point I feel confused and frustrated.

Let me explain what is going on:

I did steps you suggested, (however, I don't understand...

Hi,
Thanks for helping me:

The HighjackThis log:
Logfile of HijackThis v1.99.1
Scan saved at 11:19:44 PM, on 5/23/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00...

Hi,
The BHO and DPF items I can't get rid of using HijackThis seem to be related to something called Netster.
When I look at the Active controls in Spybot it shows Netster, but when I click on it...

Hi,

I got some BHO and DPF entries which would not go away after cleaning even in the safe mode:

That's my latest Hijackthis log

Logfile of HijackThis v1.99.1
Scan saved at 9:05:31 PM, on...

Thanks a lot for your help. It worked!
Here is my scan reports (there were lots of cookies with my name - so I did not post these...)

---------------------------------------------------------
...

I tried all recommended steps:
Spybot keep saying "congratulations!)
McAfee detected and cleaned 1 vundo trojan.
Then VundoFix found and cleaned 2 more vundo trojans.
Microtrend Housecall online...

Hi,
I am a new member looking for help (I posted in the Spybot section, but realized it was wrong place).
I got a vundo virus recently, and it seems to be gone,
but when I run Highjackthis it...

Thank you, Sandra

However, the problem is that these entries reappear after reboot - I tried to remove them both in Spybot and Highjackthis, but they keep returning...

(Run Spybot - it said "no...

Hi,
I am a new member looking for help.
I got a vundo virus recently, and it seems to be gone,
but when I run Highjackthis it showed several entries in the 02 section
with "no name, no file"...