cmlion

ok, I'll do that but before that respond me to: Detection by Anti-Virus products of these tools we are using are Fale Positives because they could be used to cause damage if used improperly in this case is me the potential cause. SO please tell me how to unistall them(they have tracks in registry, etc?). Use them is really introducing a virus in my computer as You told me or by Malware writers. I don't think malware writers could use them to cauzs damage on my computer. When take control of my computer? In this case why not to use their own tools(for ex. tu run a exe who can stolen my passwords)instead of these you use in forum. Why you pointed me to use those exceptionns you want me to do in AVG (regarding MBAM) and in MBAM(regarding AVG)???

Detection by Anti-Virus products of these tools we are using are Fale Positives because they could be used to cause damage if used improperly in this case is me the potential cause. SO please tell me how to unistall them(they have tracks in registry, etc?). Use them is really introducing a virus in my computer as You told me or by Malware writers. I don't think malware writers could use them to cauzs damage on my computer. When take control of my computer? In this case why not to use their own tools(for ex. tu run a exe who can stolen my passwords)instead of these you use in forum. You said right here that you removed Office so how or why would you expect it to work if you uninstalled it? No, I not expect to work. I expect not to be there (ij dir's) thhose files, MSWORD ,EXCELL, etc, anf a a lot o files. The unistall process is not doing that erase I expected. But I'll do it instead of uninstall You said here that you observed something odd with MBAM - which from your description it would seem to be something wrong with the install thus the recommendation to do a clean removal and reinstall. ok and mbab_clean.exe is wellcome. But why you pointed me to use those exceptionns you want me to do in AVG (regarding MBAM) and in MBAM(regarding AVG)??? The let me know what issues if any that you continue to have. Ok I will tell you now. FOr ex AVG 2 minutes ago: Error signature szAppName : avgnsx.exe szAppVer : 12.0.0.1859 szModName : avgxpl.dll szModVer : 12.0.0.1873 offset : 00027276 You see the attachments For upload reasons please rename avgnsx.exe.hdmp.txt to avgnsx.exe.hdmp IN event viewer Faulting application avgnsx.exe, version 12.0.0.1859, faulting module avgxpl.dll, version 12.0.0.1873, fault address 0x00027276. ALso in event viewer I see a very frequently warning: Windows saved user LAPTOP\m registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account. appcompat.txt avgnsx.exe.hdmp.txt

During this topic or other topics you and your coleagues instruct us to run programs as ddr, combofix.exe,securitycheck.exe, systemlook.exe,otl.exe, etc and you gave us the correpsonding links. I run AVG lately(both on mine C and D drives) and he reponded with a trojan in otl.exe, I mean Trojan Horse Agent3.AXVV. Is it a false alarm? Or the links from where we downloaded are not so sure!

Smth more: on my Microsoft Windows Firewall Exceptions I have checked "Rogue checker" and smth called "Online shield". Is good that?

Set Exclusions for AVG Free 2011 in Malwarebytes' Anti-Malware: Open Malwarebytes' Anti-Malware and click on the Ignore List tab Click on the Add button In the small browse window that opens, navigate to C:\Program Files and click once on AVG and click OK Close Malwarebytes' Anti-Malware I did it. I thoght I told you I do not have MBAM pro version but the free one!! Then let me know if MBAM is working again or not or if there are any errors still. Here in my big question. I did not say somewhere MBAM is not working, or doing that with errors!!! How did you conclude I have such issues? I send you MBAB logs my earlier replies(The same action I do it now -see the attach) and as I understood from you problems were not with threads but with blocking some IP's. I'm not sure I understand what you mean about MS Word. If you uninstalled it already then it shouldn't run or do you just mean you ran some other update for Office? I mean that I uninstall all the Microsoft Office but that action did not remove C:\Program Files\Microsoft Office\Office12 directory and others There are all EXCELL, WORD, etc but double clicking them not obtain any result. Maybe I have to mannualy remover the directory C:\Program Files\Microsoft Office\ mbam-log-2011-11-21 (21-13-07).txt

Hello Please make sure that AVG allows MBAM to run by doing the following. In the last 2 years I run MBAM without problems from the AVG part. ALl times MBAM shows an report with results. What do I have to understand that MBAM not showed me the true?? I will follow your indications but at the first view it seems you didn't use the new interface, in fact the new AVG 2012 Open AVG and close the pop-up ad that shows up on the bottom of the screen I have AVG user interface no popup!!!!At the botton it is a notification with AVG security 2012 then double-click on Resident Shield The new AVG has no resident shield at the Overview menu (as it was one month ago) but the Resident Shield is a checkmark on Anti-virus menu I underline that is a checkmark for Resident Shield and I cannot doublick-it as you pointed me Click on Tools at the top and select Advanced settings... Click on Excluded Items under Resident Shield Here there is a menu Exceptions Click on the Add Path button on the right Click on the + next to My Computer in the Browse For Folder window Click on the + next to your system drive (usually C:) Click on the + next to Program Files Click once on the Malwarebytes' Anti-Malware folder so that it is highlighted and click on OK Click on the Add Path button on the right Click on the + next to My Computer in the Browse For Folder window Click on the + next to your system drive (usually C:) Click on the + next to Documents and Settings Click on the + next to Application Data Click once on the Malwarebytes folder so that it is highlighted and click on OK Click on the Add File button on the right and click on My Computer on the left Double-click on your system drive (usually C:) Double-click on Windows Scroll to the right until you find the System32 folder and double-click on it Double-click on the drivers folder Scroll to the right until you find mbam.sys and double-click on it Click on the Add File button on the right and scroll to the right until you find mbamswissarmy.sys and double-click on it I do not have mbamswissarmy.sys there!! Click on the Apply button at the bottom of the program window and then click on OK Close the AVG window Then if needed How's that "if needed"??? When ? In the future? Or only this tine???? run this removal tool (while AVG is disabled) Ok , I will Run it, with AVG disabled(even as I did it before I made the exceptions you pointed me to set But it seems I have problems with download mbam-clan.exe. It takes 1 minute for so such short file!!! As I told you some programs not run very well in the last days. I did not have such problems before. MS Word is Microsoft Word I will do the rest remaining in the next reply

Hello and welcome back Regarding points 4 and 5 the problem is not with my english (I undestand it very well) but with what do uou mean by IP blocking. When you said about blocking IP's I did not understand you mean skype IP's (78.141.177.7) or my router IP's address (gave it to me by ISP) A week ago I unistalled Office (using a fix for uninstall operation from Microsoft) or at least I thought I unsinstalled it, because the directory C:\Program Files\Microsoft Office\Office12 still exist, with POWERPNT.EXE,POWERPNT.EXE,EXCELL.EXE,WINWORD.EXE but noth in C:\Program Files\Microsoft Office\ I observed I have one dir C:\Program Files\Malwarebytes' Anti-Malware and one dir(empty) with caps locks C:\Program Files\MALWAREBYTES' ANTI-MALWARE You have the attachments The problems with my computer is not only with Excell(now is unistalled as I told you and) but also with Mozilla wich it is blocked from time to time and I need to use Chrome instead. Perms.txt dds.txt Perms.txt

Hello again I cannot run Word on my computer. "There is not enogh memory or disk space to run word" is the mesage. Adobe reader is possible, Nero either Looking in EV/Application log no more red allerts but one: "Faulting application mbam.exe, version 1.51.0.1118, faulting module unknown, version 0.0.0.0, fault address 0x00030137." and one warning: and one warning Windows saved user LAPTOP\m registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.

My last questions: 1) is my hardisk ill? I don't know the error you observed is good enough for computer seller to accept replace it during it's guarantee period 2) do I need to format c: after these threats? 3) you made DHCP be independent of netbt.sys but microsoft thought in it's architecture to be dependent. Your resolution (we can say resolve the effect not the cause) don't interfer with smth.(I do know what) and so imply future breaches in security, stability or reability system? 4) Regarding IP blocks you said MBAM did it(in many logs)give me an ex. 5)We are talking about Skype and how they use random IP on peer 2 peer sites to facilitate using their product Yes but is their's IP's(skype's IP's) not romania ones(as I understood MBAM blocked them).I Don't understand 6) You said no one is targeting me specfically. And there are thousands of these types of infections and they are generic to allow them to run on every computer Why smbdy made a virus, and allow it to run from time to time for ex. in my computer? Answer:for controll on that computer. Running and stoling data from that computer. So, why you said to me (in other words) not to be afraid of? 7) Can I PM you?

5) I have so many questions to ask you for ex: The virus altered this: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp] "Start"=dword:00000002 "DependOnService"=hex(7):54,63,70,69,70,00,41,66,64,00,00 How is possible even reistallation of wireless driver not to repair the distruction?

4) Can you tell screen317 to allow me to use the private messaging system.

3) Can I install AVG? Or what is the order(uninstals, etc) you preffer?

the next time I downloaded works! But the great thing is dhcp working! Waoooooooooooooooooooo 1) HoW did you do that? 2) Do I have to format my C: partition now?

STEP 02 Download the attached file and open it and double-click the Working_NetBT_Service.reg registry file and allow it to merge into the registry. Then set DHCP back to Automatic and restart the computer again. When I tryed to download remove_netbt.zip look what result: An Error Occurred Sorry, an error occurred. If you are unsure on how to use a feature, or don't know why you got this error message, try looking through the help files for more information. [#10170] We could not find the attachment you were attempting to view.

Now, my status is with IP static(to comunicate with you) and "Disabled NETBIOS over TCPIP" You have the attach NetworkDetails2.txt