Windows System Alert problem

[Henri STOLL]

Good morning

I had many troubles with Windows System Alert that was installed on my PC as trojan ( i suppose from Spylocked) and i could it not remove. Thanks this forum i could remove this program with Hijack This. But the system alerts would continue!...

Next time I come back to the forum and found the RogueRemover solution witch was efficient so it seems.

I will thank you for your help.

Excuse my bad english but I am just a Frenchy

Henri STOLL

Logfile of Trend Micro HijackThis v2.0.0 (BETA)

Scan saved at 10:45:22, on 19/04/2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\acs.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\netdde.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

C:\WINDOWS\eHome\ehRecvr.exe

C:\WINDOWS\eHome\ehSched.exe

C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\ehome\ehtray.exe

C:\WINDOWS\eHome\ehmsas.exe

C:\Program Files\Acer\eRecovery\Monitor.exe

C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

C:\WINDOWS\AGRSMMSG.exe

C:\WINDOWS\RTHDCPL.EXE

C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe

C:\Program Files\QuickTime\qttask.exe

C:\Program Files\Java\jre1.6.0\bin\jusched.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Windows Defender\MSASCui.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\WINDOWS\system32\dllhost.exe

C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

C:\Program Files\Microsoft ActiveSync\Wcescomm.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\PROGRA~1\MICROS~3\rapimgr.exe

C:\Program Files\Moniteur 802.11g 108Mb OLITEC\WLANPRO.exe

C:\Documents and Settings\Henri STOLL\Menu D

[fredvries]

You seem to have Starware (associated with Adware-Cometsys) on your system. We are already considering to add the Starware toolbar to Malwarebytes' RogueRemover's database.

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://as.starware.com/dp/search?x=wKX1ILE.../C2DqO8/aEVi59C

Please download and run AVG Anti-spyware Free. Downloadable here. That will clean most of the remnants of your infections. If it doesn't remove the Starware remnant, please remove it yourself using HijackThis.

Also, Malwarebytes' RogueRemover's database has been updated overnight with the latest version of SpywareLocked. Please update your version of Malwarebytes' RogueRemover and scan again.

Then post another HijackThis log.

[nickW]

Bonjour,

Le m