Thanks a lot! At the same time ZoneAlarm has to block every few minutes the attempts of WindowsExplorer to connect to a specific and constant IP in the range of "Everyones Internet Inc.", Huston I did - as mentioned above - an online virus check at Symantec's, but nothing relevant was detected, neither on HD nor in memory. Short URL to this thread: https://techguy.org/209341 Log in with Facebook Log in with Twitter Log in with Google Your name or email address: Do you already have an account?
Generated Tue, 07 Feb 2017 20:29:26 GMT by s_wx1221 (squid/3.5.23) If you're not already familiar with forums, watch our Welcome Guide to get started. I had already loaded down HijackThis some time ago, but never used it before. then reboot & Run ADAWARE Before you scan with AdAware, check for updates of the reference file by using the "webupdate". anchor
Your cache administrator is webmaster. This one can be opened, but is not movable or renamable because of being in use. But there IS a NEW effect that I don't think to be normal, though I cannot say whether there is a connection: Since a few days my C:\WINDOWS\explorer.exe (version 6.0.2800.1106; 1,007,104
The system returned: (22) Invalid argument The remote host or network may be down. But I'd never have figured that out alone! Thanks so far... ...would be grateful for every hint. Your cache administrator is webmaster.
Stay logged in Sign up now! So, it really was worth it! neward, Mar 6, 2004 #5 dvk01 Derek Moderator Malware Specialist Joined: Dec 14, 2002 Messages: 50,447 thses should clean up the rest nicely Download and unzip or install these programs/applications if http://threadposts.org/question/1300749/dxahmff-dll.html Click the "Scan" button, when the scan is finished the scan button will become "Save Log" click that and save the log.
neward, Mar 6, 2004 #3 dvk01 Derek Moderator Malware Specialist Joined: Dec 14, 2002 Messages: 50,447 frewquently aflooder comes with other baddies so it's worthwhile posting a log just to check, So - my questions: --- Has anyone a tip concerning the - for me unknown - mechanism of the immediate registry restoration, which seems NOT to be identical with XP system Advertisements do not imply our endorsement of that product or service. If so, could any mod do that?
So, thanks again for your kind support ! Your cache administrator is webmaster. I don't know how. Please try the request again.
Then doubleclick the Hijackthis.exe. Your cache administrator is webmaster. ZoneAlarm itself uses about 57+53 dll-modules for its function (zlclient.exe + vsmon.exe), while in system32 there are about 1250 DLLs. But now things are getting a little bit more strange than before.
This site is completely free -- paid for by advertisers and donations. Your cache administrator is webmaster. Show Ignored Content As Seen On Welcome to Tech Support Guy! I tried to destroy the file ...\Temp\dxahmff, but my request was rejected. --- I restarted the machine in protected mode without reenabling the system restore before.
Copying and pasting the uninstall command didn't work at once: Though the registry entry said "...\System32:..." , I had to use "...\system32:..." , which accords to the spelling of the WindowsExplorer. Not ONE result. --- I had a WindowsCommander full text search on C:\, D:\, and E:\ including all subdirs, hidden and system files, and archives. And as all the symptoms described above have vanished, I don't want to bother you any more.
Please start a New Thread if you're having a similar issue.View our Welcome Guide to learn how to use this site.
- Your cache administrator is webmaster.
- And even C:\WINDOWS\system32\userinit.exe (version 5.1.2600.1106; 22,528 bytes) had - only a few times - tried to peek through the wall.
- So, I tried now -- the log looks ok for me.
- Tech Support Guy is completely free -- paid for by advertisers and donations.
- No, create an account now.
- No Explorer.exe cries out for contact, no MSWord is naggingly scatching at the door, no ports are beleaguered by hundred-eared (or -nosed) snoopies, no colon-dll any more hanging around behind nearly
- The HijackThis report is exactly the same as posted above except from the 5 last "O2" lines missing now.
Join our site today to ask your question. If you have them, then make sure they are updated and configured as described Spybot - Search & Destroy from http://security.kolla.de AdAware 6 from http://www.lavasoft.de/support/download Run Sybot S&D After installing, first Advertisement Tech Support Guy Home Forums > Security & Malware Removal > Virus & Other Malware Removal > Home Forums Forums Quick Links Search Forums Recent Posts Members Members Quick Links Please try the request again.
go to settings(the gear on top of AdAware)>Tweak>Scanning engine and tick "Unload recognized processes during scanning" ...........then........"Cleaning engine" and "Let windows remove files in use at next reboot" then...... If I find a suspicious file, I often (not always) search the registry for its name and delete the entry or - if I'm not sure - change it. The system returned: (22) Invalid argument The remote host or network may be down. Please try the request again.
Join over 733,556 other people just like you! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members. If it doesn't work or you get an error message then try a different server Next, close all Internet Explorer and OE windows, press 'Check for Problems', and have SpyBot remove Generated Tue, 07 Feb 2017 20:29:26 GMT by s_wx1221 (squid/3.5.23) ERROR The requested URL could not be retrieved The following error was encountered while trying to retrieve the URL: http://0.0.0.7/ Connection
The system returned: (22) Invalid argument The remote host or network may be down. Yes, my password is: Forgot your password? Meanwhile MSWord XP tries to connect to a specific IP in the range of "Level 3 Communications Inc.", Broomfield CO, and to one of TECHGUY.ORG, Waynesboro PA. I cannot exactly relate any malfunction to the presence of dxahmff.dll, if not only its uninvited appearance in HKLM/.../Run+RunOnce and its strange behaviour are reasons enough to suspect.
Newer Than: Search this thread only Search this forum only Display results as threads Useful Searches Recent Posts More... So maybe these 400 in IAMDB.RDB are the ones used by the programms which ZoneAlarm controls.