fredvries

Using HijackThis delete this entry: O22 - SharedTaskScheduler: equiparant - {25b7d2fd-4f71-46d1-801a-7de323e4ec82} - C:\WINDOWS\system32\indwvm.dll

Please follow these instructions first.

Thanks for your suggestions. We will look at them very carefully. But we feel that RogueRemover is almost perfect now. New features aren't envisioned at the moment.

Yes, because becoming inactive doesn't mean that SpyLocked has truly disappeared. Please publish a fresh HijackThis log here.

The best back-up you can get is probably AVG Anti-Spyware Free. Downloadable here.

imekrig (imekrig.exe) Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean) IMEKRMIG6.1 (IMEKRMIG.EXE) Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean) imjpmig or Imjpmig8.1 (IMJPMIG.EXE) Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Korean and this one is Japanese) internat.exe (internat.exe) Microsoft language selection icon in system tray, located in the System (W98,98SE,ME) or System32 (NT,2000,Xp) directorys Microsoft Greetings Workshop Reminder (Gwremind.exe) Do you really want to be reminded about somebody's birthday at the expense of resources? Microsoft Greetings Reminder (MHPRMINF.EXE) Do you really want to be reminded about somebody's birthday at the expense of resources? Microsoft Office Shortcut Bar (Msoffice.exe) Alternative shortcuts to the Start -> Programs way of running applications installed as part of MS Office. Some people prefer it, but a better way is to create Desktop Shortcuts if you want access these programs quickly. Microsoft Office or Microsoft Office Startup (Osa.exe and Osa9.exe) Application which launches common MS Office components to help speed up the launch of Office programs. It's somewhat of a resource hog, and some users claim there's no difference with or without it but it usually isn't required - Note: if you make use of the Microsoft Office Shortcut Bar outside an office program this application will need to be enabled for it to show. Microsoft Sidewinder Game Controller Software (SWTRAY.EXE) MS SideWinder game controller system tray icon. Available via Start -> Programs Microsoft Sound Volume Tool (mssvol.exe) This is a Blue version of the yellow speaker icon on the system tray and is used to edit advanced Sound Features that the MS DSS80 Speakers add. Should be accessible via Start -> Settings -> Control Panel Microsoft Works Calendar Reminders (wkcalrem.exe) Produces a pop-up reminder of events scheduled using the MS Works Calendar Microsoft Works Portfolio (WksSb.exe) The Works Portfolio tool lets you collect and organize text and pictures from the Web or your favorite program. Can be prevented from starting from a setting within Portfolio Microsoft Works Update Detection (wkdetect.exe and WkUFind.exe) Checks for updates to MS Works Windows Messenger/MSMSGS (msmsgs.exe) Windows Messenger utility. If you don\'t use Windows Messenger, this can be annoying. Available via Start -> Programs. Go to Windows Messenger > Tools > Options > Preferences and uncheck "Run this program when Windows starts"

We're glad we could help. If you want to show your appreciation after being helped with a successful removal of SpyLocked/SpywareLocked (even without a credit card), you can support us by ordering your own copy of Malwarebytes

You seem to have Starware (associated with Adware-Cometsys) on your system. We are already considering to add the Starware toolbar to Malwarebytes' RogueRemover's database. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://as.starware.com/dp/search?x=wKX1ILE.../C2DqO8/aEVi59CPlease download and run AVG Anti-spyware Free. Downloadable here. That will clean most of the remnants of your infections. If it doesn't remove the Starware remnant, please remove it yourself using HijackThis. Also, Malwarebytes' RogueRemover's database has been updated overnight with the latest version of SpywareLocked. Please update your version of Malwarebytes' RogueRemover and scan again. Then post another HijackThis log.

You have a few spyware-infections left (NewDotNew, 180Solutions). Please download and run AVG Anti-spyware Free. Downloadable here. That will clean most of the remnants of your infections. Using HijackThis please remove these: O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) O23 - Service: Pml Driver HPZ12 - Unknown owner - C:\WINDOWS\System32\HPZipm12.exe (file missing) Then post another HijackThis log.

DVDUpgrade (DVDUpgrd.exe) Microsoft program to upgrade your DVD decoder program - see Q306331. Available via Start -> Programs Fpx (mnmsrvc.exe) Remote Desktop Sharing service part of Microsoft's Netmeeting allowing users to share items on their screens across remote locations. GrpConv (grpconv.exe) Microsoft Windows Program Group Converter - used by installers (ONLY in the RunOnce keys) - provides the translation of groups and group items to folders and links. Also see this MS Knowledge Base article. Activation (Activation.exe) Part of Microsoft Money. Microsoft Announcement Listener (Annclist.exe) MS WebTV for Windows. Used to display TV on your PC via a compatible video card with in-built tuner (such as ATI All-In-Wonder). TaskBar (CTLTask.exe) Creative SoundBlaster Audigy Taskbar - used to choose between different types of EAX Effects, not required in startup. Digital River eBot (downlo~1.exe) download from a software manufacturer, you will be sent to this online company's site for the download after the purchase is complete. Microsoft Office Fast Cache (Fastboot.exe) Part of MS Office 95 (v7.0). According to this it improves the performance. Most likely a predecessor of MS Find Fast and can be disabled

Do you use SpyBot by any chance? Sometimes that program has locked the Host file. To change the setting in SpyBot > Settings > IE tweaks > uncheck: 'Lock Host file read-only as protection against hijackers'

The buttons we need should look a bit like the RogueRemover certification card as is shown on the startpage of this site. The colors would be purple and yellow. And, if possible, the pics should be scalable. When also need is a set of banners and a button.

StartUpLite has one Google hit. StartUpLiter none.

We are always creating new and interesting programs. Our latest project is a lightweight program that can disable or remove all unnecessary startup entries form your computer and thus quicken the startup procedure of your computer. The program, like every program, needs a cool name. Malwarebytes is very serious about listening to the users of its programs and now we take that a little step further: we invite you to suggest a cool name that describes perfectly what the program does. A name that fits the program like a silk glove. The winner of this competition gets a free copy of RogueRemover PRO.

Hi comicfan2000, Brilliant idea. I could use need a banner or a button on my own sites (pdd-nos.nl, pdd-nos.be and pdd-nos.com) that will link to the RogueRemover Pro page. And that would become a banner everyone should be able to download and use on their own site. Fred

That would be moderatrix. Et tu es naturellement bienvenu ici. (I remembered a bit of my French from my schooldays)

Wow!

The reasons simply are that some of these rogue programs are obsolete (they just don't exist anymore), they have broken links (they can't be downloaded) or their sites have been taken down.

Yes, we're hitting some raw nerves. Which means that we are on the right track. Someone bravely hiding behind an alias has gathered enough of his meagre courage to write a slanderous and totally untrue comment about our site and our products on SiteAdvisor. He then commented himself several times on his own post which made him look even more pathetic. We're not afraid of possible looming lawsuits and are vigorously defending our right to help computer users worldwide in their struggle against rogue applications that may inflict damage on their privacy, on their wallet, and on their computer safety. We know, as you know, that someone who tries to discredit us on SiteAdvisor is someone who feels the financial pain when his rogue application is finally targeted by RogueRemover. There isn

But I like the kind reaction of eusing. I feel he is trying to remedy any problems that could qualify his program as rogue. If all those problems are resolved then we, as RogueRemover, have reached our aim and Eusing Free Registry Cleaner could be removed from detection and removal from RogueRemover. The best way is to wait for SiteAdvisor to change its view.

Winstall.exe is related to the SpySheriff infection. Lucky for you Malwarebytes has recently published a program, called RogueRemover, that is specifically designed to remove rogue anti-spyware programs like SpySheriff. Download it here, run it and tell us if it worked.

You just could remove your Symantec. See here for some of the problems it can cause with any system. You can replace it with a free version of AVG. Finally you should post a HijackThis log here so that someone (read RubbeR DuckY) can check what may be causing your sleepless nights.

Yes, you're most welcome here

Yep, I was right: Google announced that it is buying the online video site YouTube for $1.65 billion in stock.

Google wants to buy YouTube, the world's leading site for video entertainment, for about $1.6 billion, according to the Wall Street Journal. Neither Google nor YouTube have commented on this report. YouTube was founded only in February 2005 as one of dozens of Internet video start-ups. It has exploded in popularity since last November by letting users share short video clips -- both home videos and programming copied off television.