HiJackThis logfile and problem definition seeking xpert help

(insert smiley thing with large amount of egg on face) - I'm soooo sorry to have wasted your time on this one.

Time wasn’t wasted,I learnt something too

Search settings was an unwanted program and hopefully not on other computers.

Sounds like the Firewall might be set to manual start up.

Let’s check:-

Click Start then Run
In the run box type services.msc then hit ok
Scroll down the page until you come to Windows Firewall
Double click and in startup type use the drop down box and select automatic if not selected.
Click apply, ok….

Let me know if that fixes it.

Seems like Windows Firewall was already set to automatic.

So no joy this time......

From what I have seen in response to other posts, Windows Firewall might not be a prefered defence, as it allows outgoing connections and there are more robust firewall products. Should I fast-track to another Firewall solution? Or does this technical challenge warrant continued attention?

Seems like Windows Firewall was already set to automatic.

So no joy this time......

From what I have seen in response to other posts, Windows Firewall might not be a prefered defence, as it allows outgoing connections and there are more robust firewall products. Should I fast-track to another Firewall solution? Or does this technical challenge warrant continued attention?

You are correct a third party firewall would be the ideal solution.

Despite my best efforts, I can't find anything else...........

Great


Since you are not having any further problems, I would suggest you proceed as follows.

MBAM and TFC are great tools for you to keep and use on a regular basis.

You can delete RSIT from your Desktop and it associated folder C:\RSIT also remove GMER.

Uninstall ComboFix:

• Click on Start >> Run...
• Now type in ComboFix /Uninstall into the and click OK.
• Note the space between the X and the /Uninstall, it needs to be there.
• 

The above procedure will implement some cleanup procedures as well as reset System Restore points


Remember to update your Antivirus programs and other security products regularly to avoid new threats that could infect your system. If you do not update your anti virus software then it will not be able to catch any of the new variants that may come out.

You can use one of these sites to check if any updates are needed for your pc.
Secunia Software Inspector
F-secure Health Check


Please reply if you have any problems or questions

Security Systems

Should I fast-track to another Firewall solution?

I went to Online Armor for firewall protection -as expected the previous issue is resolved. The previously impressive short start-up time has increased - but its a small price to pay!

I've kept MBAM, and have TFC to complement & spare resources and disk space.

Is this as much as you would recommend?

Thanks for the recommendations re pc update monitoring. Much appreciated.

Any other clean-up / tidy-up needed to complete?

All systems seem to be working cleanly and smoothly; no other issues found - it must be time to celebrate now!

Is this as much as you would recommend?

You could look into WinPatrol
It can be download it from here
Here you can find information about how WinPatrol works here

All systems seem to be working cleanly and smoothly; no other issues found - it must be time to celebrate now!

Yes I think it is

it must be time to celebrate now! Yes I think it is

Before I do celebrate - I can't sign off without acknowledging the selfless and expert assistance that you (and your colleagues) provide for the many victims who get into trouble. Many, many thanks.

I honestly thought this case was a lost cause.

Your instructions/routines were clear, easy to understand - and effective. And obviously the technical understanding and expertise is peerless. I've even enjoyed trying to understand the tools and interpret the outcomes (not that I can really! = but the challenge seems a bit like trying to solve a cryptic crossword for the first time).

All the best

"club59" wrote:

it must be time to celebrate now! Yes I think it is

Before I do celebrate - I can't sign off without acknowledging the selfless and expert assistance that you (and your colleagues) provide for the many victims who get into trouble. Many, many thanks.

I honestly thought this case was a lost cause.

Your instructions/routines were clear, easy to understand - and effective. And obviously the technical understanding and expertise is peerless. I've even enjoyed trying to understand the tools and interpret the outcomes (not that I can really! = but the challenge seems a bit like trying to solve a cryptic crossword for the first time).

All the best

Thank you for your words,very much appreciated. Well if you like to solve hard puzzles you could always apply to the university to learn.

Glad we were able to help.

TangoVirtud

searching my laptop locates RKTBTMNT.EXE - not in a temp file but in a C:\\WINDOWS\Prefetch folder, alongside a lot PF file soulmates configured during the analysis and clean-up routines.
Is this what you are referring to? And is it a risk that should be disabled?

From a quick search of the web:

rtkbtmnt.exe is a Realtek HD Audio Data Rerouter\r from Realtek Semiconductor Corp.\r belonging to Realtek HD Audio Data Rerouter\r

A routine to remove it (this one identified in a temp folder)

http://www.techspot.com/vb/topic53190.html

Hi, Please note that TangoVirtud was not and is not authorised to post in this thread or forum. I have removed the post.

The file he refers to is legitimate.

As this issue appears to be resolved,