Member Panel

asa_sniper

Rerun hijackthis and have it fix these for now

O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://*.billingnow.com
O15 - Trusted Zone: http://*.reliablestats.com
O15 - Trusted Zone: www.winantispyware.com
O15 - Trusted Zone: *.winantispyware.com
O15 - Trusted Zone: http://*.winantispyware.com
O15 - Trusted Zone: www.winantivirus.com
O15 - Trusted Zone: *.winantivirus.com
O15 - Trusted Zone: http://*.winantivirus.com
O15 - Trusted Zone: http://*.winantiviruspro.com
O15 - Trusted Zone: utils.winfixer.com
O15 - Trusted Zone: www.utils.winfixer.com
O15 - Trusted Zone: *.winfixer.com
O15 - Trusted Zone: http://*.winfixer.com
O15 - Trusted Zone: www.winnanny.com
O15 - Trusted Zone: *.winnanny.com
O15 - Trusted Zone: http://*.winnanny.com
O15 - Trusted Zone: www.winsoftware.com
O15 - Trusted Zone: *.winsoftware.com
O15 - Trusted Zone: http://*.winsoftware.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbar...rch.jhtml?p=ZS (it may not fix this one let me know if it does not)

PlasticLipgloss · 02:24 AM

This is what I have now.

asa_sniper

Ok looks like it fixed them but it looks like there is still a couple but I think we should wait for Joe5 or another HJT expert as I only know the basics..

Lets try to install ZA now since you do not have a firewall running right now..

Follow the below way to take ZA out of your system and then reinstall.

http://iggyz.com/unzap.html

Also (my fault should have told you) when posting a hjt log please save the log as a.txt in notepad and upload it as an attachment. Thanks

PlasticLipgloss

Ok so, it didn't install. Still getting the same message.

joe5

There are a couple of other problems in youre log , lets get rid of them.

Boot youre pc in safemode (hit f8 when booting up)

Click Start>Run and type in: services.msc
Click OK
In the Services window find:
(one by one)

Boonty Games
cs_service

Select/highlight and right click the entry, and choose: Properties
On the General tab, under Service Status click the Stop button
Beside: Startup Type, in the drop menu, select: Disabled
Click Apply, then OK

Open HJT and click config > misc tools > ?delete an NT service?
Copy and past:
(again one by one)

Boonty Games
cs_service

Click OK.

Then fix these entrys with hjt if still present:

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?Link...cid={SUB_CLCID}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) O3 - Toolbar: Snipestation2 - {D79559E8-9991-41C5-AA2B-A96EC766F43F} - blank (file missing)
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: cs_service - Unknown owner - F:\Program Files\WinFirewall 2006\cs_srv.exe (file missing)