Search:

It occurred to me later that I don't know for sure that these popups aren't different every day, mainly because they disappear so quickly that I can't really read more than one of them. Is it...

The popups are entitled something like "Registry change allowed," and the same ones have been appearing for over a week.

OK, the Resident popups are still there. When I start my computer, four of them appear on the right side of my screen. Maybe I misunderstood, but I thought you were saying that those would disappear...

I'm running Spybot 1.5.0.9. Following your instructions, I wind up at a list labelled "Resident 'Teatimer' (Protection of over-all system settings active." Here's the list:

17/09/2007 10:03:14 AM...

MD USA, I tried what you suggested for removing the startup popups from Teatimer - i.e., I quit the S&D Resident icon. Then I went to the spybot folder and double-clicked teatimer.exe. A minute or so...

Gracious! The mind boggles. For those of us who are not very techno-savvy, can you please give us a VERY brief, in-a-nutshell, description of what we need to do to be protected.

(I was notified of...

Thanks, that's good to hear. After I wrote last, I realized that in fact there were a lot fewer Symantec things in that last HJT log. Anyhow, fingers crossed and I'll not get anymore memory alerts!
...

Thanks, Jake. I ran that uninstaller tool. I'm not sure if it did anything though. My HJT log looks the same to me. What do you think?
Logfile of HijackThis v1.99.1
Scan saved at 7:03:25 PM, on...

OK, I'll uninstall both and see what happens over the next week or two. (Re more RAM: I think I'd rather save for a new computer actually, but that may take me a long time.:sad:)

Thanks, Jake....

I do run Spybot weekly, so maybe I don't need AVG's anti-spyware, huh? But do you think I can safely do without Ad-Aware? I guess it's just another variation of anti-spyware though, isn't it. If you...

Hi Jake. I have 256Mb RAM. It did occur to me that I wasn't getting these alerts before I'd installed ATF Cleaner, AVG Anti-spyware, SpywareBlaster, and MVPS Hosts. I wondered if I pushed my RAM to...

:red:I'm sorry. It did occur to me to phone my ISP provider and ask them about the mysterious icon. I found out it just means there was a temporary disruption in network traffic and they're actively...

Yikes! I have an icon on my status bar right now that's telling me something's "acquiring network address" and is labelled as Local Area Connection. I've looked in my processes and can't see what may...

I'm getting the following again:

Windows – Virtual Memory Minimum Too Low
Your system is low on virtual memory. Windows is increasing the size of your virtual memory paging file. During this...

Ok, for now, I think. But the virtual memory alert has occurred sporadically so we won't know if all is well for maybe a week or so. I'll be in touch if I need more help - you KNOW I will! :D:
...

OK, I used "Fix" in HijackThis on most of the programs that were loading at startup that you said I could dispense with. There are about four or five I left because I either know I want them to...

Wow! All those?? I can see at least a few right away that I can turn off. I'll double-check what the others do just to educate myself.

Thanks for the diagnosis, Jake. I'll report back. (It would...

Here's my log, Jake:
Logfile of HijackThis v1.99.1
Scan saved at 8:05:20 PM, on 27/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running...

I just got that Virtual Memory Minimum Too Low alert again. Sorry to be a pest, but it seems like there's one befuddling thing after another. I double-checked my DNS Client and it does indeed have...

Hah! Got it. Thanks so much for explaining all that to me, Jake.:crowned:

OK, I've set the Startup type to disabled - thanks. But I'm wondering what that's got to do with Virtual Memory being too low. I understand that my machine would be slowed down if I didn't change the...

Hi Jake. Can I still post here? I want to ask about the various software packages you advised me to install (ATF Cleaner, SpywareBlaster, MVPS Hosts). I did so, and other than auto updates for...

Thanks, Yodama. I'm reassured.:bigthumb:

Hi there. I gather Tashi's reopened this forum for me because I'm getting alerts about that trojan again. I sent the following to her:


I had a discussion going that's now closed -...

That's reassuring. I'll check that link to see what I can do to help speed my computer up. Thanks again for all your help, Jake.:bigthumb:

My computer's been slow today, even when I've been off-line. I did my weekly backup and found heaps of mini-image files as well. They could be, I suppose, from MS and HP emails I've reviewed in the...

OK, Jake, I'll wait patiently to hear what the team decides regarding my possible infection. Thanks again for all your time.:angel:

Thanks very much Mr_JAk3 (may I call you Jak? :) A couple more questions if I may: What exactly did Fix.reg do? I looked to me like we were copying the same line back into the registry, so how does...

--------------------------------------------------

Enumerating Windows NT/2000/XP services

Ad-Aware 2007 Service: "C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe" (autostart)
Microsoft...

--------------------------------------------------

Enumerating Download Program Files:

[Microsoft XML Parser for Java]
CODEBASE = file://C:\WINDOWS\Java\classes\xmldso.cab
OSD =...

Here's what Hijackthis generated in notepad (after following your instructions):
StartupList report, 03/07/2007, 10:59:51 AM
StartupList version: 1.52.2
Started from : C:\Program...

Sorry to be pesky, but I'm wondering about the character preceding "\greetingcard.exe" in the registry entry. It looks on the screen very much like an "x," but when I was saving my backup I noticed...

Want to clarify please (always anxious when I poke at my registry): When I go to save RegBackUp, the file types available are "Registration files (*.reg)" or "Registry Hive Files (*.*)." I'm assuming...

Just finished a Spybot scan, and Win.Zhelatin.k is back again, same settings as previous weeks. I've seen your posting regarding fixing my registry and I'll read that carefully, but I wanted you to...

I've made a screenshot of the window containing the info re Win32.Zhelatin.k, but I'll copy what it says below. There are 3 checked lines below the Win32.Zhelatin.k line:...

Will do, boss!

:oops:Oh, I'm sorry - thanks for pointing that out. I wasn't looking carefully enough obviously. Zenobia my apologies. I've very grateful for Team Spybot and everyone on it who takes the time to...

Hi Mr_Jak3. I've just completed my Kaspersky scan as instructed (took 4 hours), and it says I'm infected. I selected Save report as and chose text, and here's what I got:
...

Thanks so much, Tashi. You're always a big help!:crowned:

Hi Tashi. I've posted in Malware Removal and there's a fellow named Jak3 telling me to run another online scan from a site I haven't heard of before. He's listed as a Security Expert, but I thought I...

MrJak3, the last run I did was after I'd "fixed" the problems listed, and at that time everything came up clean which it did last week as well. But then within a week the same trojan comes back. I...

Hi. I run Spybot once a week, and I keep getting alerts that I have Win32.Zhelatin.k on my system. I choose Fix and then re-run Spybot and the trojan is gone. I posted a question about this in Spybot...

I did an online scan for viruses with eTrust and got the following results:

Scan Results: Scan Completed. 130672 files scanned. No viruses found.
File Infection Status Path
- No...

Thanks, Tashi. I have a slow connection so I'll wait till tomorrow morning before I do the online scan - takes hours, and my computer's right next to my bed! :sad:

Hi Zenobia. I just did a Spybot scan, and the trojan Win32.Zhelatin.k came up again, along with something about a windows firewall bypass. Here's the short log you asked me to copy:
...

Thanks for that link describing false positives. Obviously, it doesn't apply to something like Zhelatin.k being identified. Today I had some slow-downs on my system and I made a point of checking my...

Hi Zenobia. My computer's been behaving fine lately, thanks. (The last time it was acting up I was using a spyware/antivirus package that was constantly running around my computer and slowing things...

I've since found a couple of holes in my browser privacy which I've now patched up. I ran Spybot again, and this time the trojan didn't come up - I had done the "fix" when it first appeared. So if...

Spybot has just found Win32.Zhelatin.k on my computer. I have my browsers set to protect me from unwanted cookies and downloads, so why would I get this? Can you help?

For the past two days my AV software has been announcing an infection by Trojan-Proxy.Win32.Horst.sj. It gives me the option to delete the virus, and my AV software then tells me that it "cannot...