Syke360

Ah Ha , found my problem When i checked those 3 files previously and Selected Fix in Hijack this. My TeaTimer(Spybot) automatically denied Reg Changes. So the Entries still existed. I disabled Teatimer and scanned and fixed the problem, Heres the Hijack Log Logfile of HijackThis v1.99.1 Scan saved at 01:30:24, on 21/06/2008 Platform: Unknown Windows (WinNT 6.00.1905 SP1) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Windows\SMINST\scheduler.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\P

I Did as you asked but shortly after my Spybot pops up asking for MSserver to edit registry. I deny and i scanned again and the three files are back again. heres the log, the 3 culprits have been added again but are a little further down the list Logfile of HijackThis v1.99.1 Scan saved at 04:18:23, on 20/06/2008 Platform: Unknown Windows (WinNT 6.00.1905 SP1) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\PDF Co

Logfile of HijackThis v1.99.1 Scan saved at 05:45:36, on 19/06/2008 Platform: Unknown Windows (WinNT 6.00.1905 SP1) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\PDF Complete\pdfsty.exe C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\pthosttr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe C:\Program Files\Hewlett-Packard\HP

Its running ok Still getting some wierd errors upon start up RUNDLL error Cannot start module. jdsebeyfd.dll missing Not exactly like that but i get 3 of them, all with different DLL files missing. None of the files make sense they all have strange and random filenames Apart from that its running much better The MSServer Reg Request has stopped Thanks much for your Help. Easy to fix with your step by step instructions.

Here you go Malwarebytes' Anti-Malware 1.17 Database version: 865 03:20:25 18/06/2008 mbam-log-6-18-2008 (03-20-25).txt Scan type: Full Scan (C:\|) Objects scanned: 186351 Time elapsed: 45 minute(s), 0 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 3 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 2 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: HKEY_CURRENT_US

Heres the New ComboFix Log ComboFix 08-06-15.4 - Syke360 2008-06-17 16:11:38.2 - NTFSx86 Microsoft® Windows Vista™ Home Basic 6.0.6000.0.1252.1.1033.18.222 [GMT 1:00] Running from: C:\Users\Syke360\Desktop\ComboFix.exe Command switches used :: C:\Users\Syke360\Desktop\CFScript.txt * Created a new restore point FILE :: C:\Users\Syke360\AppData\Local\Temp\fgnfqeeh.dll C:\Users\Syke360\AppData\Local\Temp\lbrmwlci.dll C:\Users\Syke360\AppData\Local\Temp\xxyyaBqo.dll . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Users\Syke

Thanks for the help Ryan. I did as instructed. heres the ComboFix Log ComboFix 08-06-15.4 - Syke360 2008-06-16 19:13:48.1 - NTFSx86 Microsoft® Windows Vista™ Home Basic 6.0.6000.0.1252.1.1033.18.186 [GMT 1:00] Running from: C:\Users\Syke360\Desktop\ComboFix.exe * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Windows\system32\x64 F:\Autorun.inf . ((((((((((((((((((((((((( Files Created from 2008-05-16 to 2008-06-16 ))))))))))))))))))))))))))))))) . 2008-06-16 18:58 . 2008-06-16 18:59 <

I have a brand new HP 6720s laptop with Windows Vista Home Basic installed and within a matter of hours I start to get popups and registry entiries being made from something called MSserver I have Norton Internet Security (which came with the lappy) also install Spybot search and destroy (Which is picking up the reg edits) Windows Defender also picks up the problem but it being MS own program it cant fix it. I have a feeling this is not all i have problem-wise Here is my Hijack Log Logfile of HijackThis v1.99.1 Scan saved at 01:20:27, on 15/06/2008 Platform: Unknown Windows (WinNT 6.00.1904) M