SpyFalcon removed, I hope

Welcome to Majorgeeks!

Yes we do use many SysInternal tools. We have other tools we prefer to use for startups though.

You have a problem revealed at the end of your Smitfiles.txt log.

You need to search your PC for wininet without the extension (an extension is the characters after the period, like .dll) We need to get a copy back into the correct folder.

Do you have a Windows CD that matches your OS and SP revision level?

 

Yes! You should not quote like you did. Only my text should be quoted! Yours should be outside the quotes otherwise your comments are easily missed.

Check SmitRem again right now and see if it still gives the same result.

We use the StartupList capability of HijackThis and we also use WinPfind and also our own tool which is covered in the below link:

Using GetRunKey

Are you having any more malware problems?

 

Yes! If you want to be sure there is no problem, it is necessary! Your last log said:

This is troublesome and we must be sure there is no problem.

Is your system showing any signs of malware at this time? I do see some registry key entries that are not typical found and may be left over from SpyFalcon.

 

Notice that the smitfiles.txt log is still showing other files related to the infection being found too! I would guess this is because your wininet.dll file that is in the system32 folder is infected and it is allowing the problem to respawn.

You are going to have to get a different copy (for your SP revision level) installed into the system32 folder. Do you have a Windows XP SP2 boot CD?


MsPMSPSv.exe is valid process. See the below.
http://www.liutilities.com/products/wintaskspro/processlibrary/mspmspsv/

With the problems you are still showing and the fact that they seem to reoccur, you should run our standard cleaning steps below.

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

- Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

Downloading, Installing, and Running HijackThis


When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)

• Bitdefender
• Panda Scan
• HijackThis

.