Don't see any baddies, but the Chronology stuff is out of whack.
Boot in Safe Mode.
In Windows Explorer, turn on "show all files and folders, including hidden and system". See how here.
Next, try to UNinstall anything to do with (not delete yet!):
C:\Program Files\Chronology\TimingDesigner\FlexLM\win32\bin\lmgrd.exe
Next, run a HJT scan and (if still there) place a tick-mark in the little square before:
...................................................................................................
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = chronology.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{6EE0AA4F-79EC-4BD1-A094-EDE31147A61C}: NameServer = 172.16.2.5,172.16.2.14
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = chronology.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = chronology.com
O23 - Service: TD FLEXid 8 - Unknown owner - C:\Program Files\Chronology\TimingDesigner\FlexLM\win32\bin\lmgrd.exe (file missing)
O23 - Service: TD FLEXid 9 - Unknown owner - C:\Program Files\Chronology\TimingDesigner\FlexLM\win32\bin\lmgrd.exe (file missing)
O23 - Service: Test FLEXID NodeLocking - Unknown owner - C:\Program Files\Chronology\TimingDesigner\FlexLM\win32\bin\lmgrd.exe (file missing)
...................................................................................................
Now click on the
Fix Checked button in HJT.
When done, delete the
Chronology directory with everything in it, including that directory itself.
Delete all files and directories from: C:\Documents and Settings\[username]\Local Settings\Temp
Repeat this for ALL [usernames].
Delete all files and directories from: C:\WINDOWS\Temp (except files dated from TODAY).
Boot normal.
===========================================================
Download
Ewido Security Suite (trial) from
http://www.ewido.net/en/download/
When installing, under "Additional Options"
uncheck "Install background guard" and "Install scan via context menu".
Start Ewido. When you run it the first time, you get a warning "Database could not be found!". Click OK.
On the main screen, click on
Update in the left menu, then click the
Start Update button.
After the Update finishes, the status bar at the bottom will display "Update successful".
-- If you have problems updating see here:
http://www.ewido.net/en/download/updates/
Once the updates are installed do the following:
Click on
Scanner
Make sure the following boxes are checked before scanning:
- Binder
- Crypter
- Archives
Click on
Start Scan and let Ewido scan the PC.
While the scan is in progress, you will be prompted to 'Clean files', click
OK
When the scan is done, you'll find a
Save report button at the bottom of the screen.
Click 'Save report' and save it to your desktop.
Reboot your PC and post back the Ewido Scanlog as a .txt
attachment
