Hjt log

[jornsen]

Hi PP

OK - I'll "stay tuned".

BTW, LinkOptimizer has disappeared from Ad/Remove programs - no idea when. ConnectionServices is still there...!!??

/John

[PhilliePhan]

ConnectionServices is still there...!!??

Run this tool and post the log. It should remove "ConnectionServices."
The log should show it.
http://sarc.com/avcenter/venc/data/t...oval.tool.html

--Be sure to run it in Safe Mode and Run it TWICE, as per the instructions - Save logs for both runs and post them for me.

Otherwise, we'll rip it out manually....

PP

[jornsen]

OUPS!!!!

I thought that the program - now that instructions say "run twice" - preserved logfiles... I was wrong...

First execution found something - in C:\quarantine\...well, I don't remember..
Second execution was clean.

However, ConnectionServices is still in Ad/Remove...

sorry.. :-(

/John

[PhilliePhan]

However, ConnectionServices is still in Ad/Remove...

No worries - We'll remove it manually.

Download Bill James’ RegSrch

Extract it to your Desktop and DoubleClick regsrch.vbs
-- if your AV has script blocking, you’ll need to allow this to run
When the dialog box opens, type ConnectionServices and Click OK.

Do the same for LinkOptimizer so we can remove any leftovers....

-- You’ll need to save the logs that pop up in Wordpad and then submit them for me.


PP

[jornsen]

-- You’ll need to save the logs that pop up in Wordpad and then submit them for me.
PP

This time, I got it right...
...here you go...

/John

[PhilliePhan]

...here you go...

Great!

Please Download the attached FixIt.zip and extract FixIt.reg to your Desktop.
DoubleClick on FixIt.reg and Allow it to merge into the registry.
You can then delete FixIt.reg and FixIt.zip.
Reboot.

That should remove the last traces of LinkOptimizer & ConnectionServices.

Let me know if it remains.

I still want to run 1 more ADS scan and 1 more Rootkit scanner. I'm thinking of using GMER and HijackThis' ADS Spy utility (if you want to get a head start - time difference and all... )
I have all your scanlogs and all my Fix info on a different computer, so I'll have to check back later.

Best
PP

[jornsen]

Hi PP

-->Ran fixit.reg - OK
No trace of ConnectionServices and LinkOptimizer in Add/Remove...

--------
Found gmer at http://www.majorgeeks.com/GMER_d5198.html - also fond some discussions about what gmer could do at spywarefri.dk, so I scanned ONLY and wait for your instructions... :-)
--> Rootkit tab, left all checked - ran scan - Log attached.

-------
-->Ran HJT "Ads Spy" - unchecked "Quick scan" and ran scan. Log attached.

--------
-->Generated Fresh HJT log - attached

--------
(Denmark just - 1 min ago - went to the 2nd 2*5 mins rematch against Poland in the fight for qualfication to the finals for mens handball WC - a BIG issue in Denmark - my wife and son are doing their best to tilt our house...

/John