A few weeks ago i’ve reinstalled my Windows XP Pro SP2.
I made all update & installed back my software.
Since a few hours the Avast icon has dissapeared and so the icon of Ultramon & Creative Labs…
I tried to put it back those thru the registry and it worked fine one time and then dissapereared again.
It’s like some malicious software is removing all entries in the registry “microsoft->windows->currentversion->run”.
Also i run tcpview from sysinternal and it seems that my computer try to establish a link to IP 209.190.29.130:80 thru a system process.
I ran Avast manually with all update but didn’t find any virus …
Does someone knows what happen ?
Well … i run nothing @ startup right now… No Spyware Removal tools …
Fact is that when i add a line in the registry telling to get the icon of avast in my toolbar after reboting are my registry entries empty!.
I was just wondering why my computer try to establish a link to 209.190.29.130:80 & 66.249.85.99.
I look to me like something like a rootkit or something like that…
If you suspect a rootkit, the best place to get help is :
http://www.castlecops.com/f233-Rootkit_Revelations.html
66.249.85.... may be a CWS site; I checked 209.190.29....
at "Webhelper" s site but it was not listed ( yr 2004 ) .
Hi Yves :