Those IPs are still coming but I blocked them with the firewall :)

jholland1964 and PhilliePhan I appreciate for taking your time and helping me ! You guys made me more aware of all the nasties floating around and got my computer secured.
...

did you read how I used my windows firewall to block those IPs?

Alright I'll give it a try for Outpost and SpywareBlaster. I will have running 5 security programs lol, Nod32, MBAM, SAS, SB, Outpost that should keep me safe... :D

OK I just disabled 3rd party cookies in my browsers. I also blocked those IPs with windows firewall, not sure if I did it correctly. Here's how I did it:
ran wf.msc to open Windows Firewall with...

Sorry, when you asked me if I'm using a firewall I didn't think of windows firewall.... yes my windows firewall was and is always on.
So I still don't understand why those IPs keep trying to connect...

It doesn't matter if my browsers are open or not, it still keeps notifying me even when I just turn my computer on and leave it without running anything.

here are few more IPs 89.248.168.63 | 95.211.96.37 | 212.117.164.26

haha wow what the hell... I went through the list and don't recall going to non of those websites... Just great. So why is that IP trying to access my computer constantly? Does that mean that there...

No... I've been always careful without a firewall and haven't gotten infected for a while already. It's just when I got MBA-M I started getting suspicious why the infected IPs are constantly trying...

I'm not using a firewall.

Malwarebytes' Anti-Malware has successfully blocked access to malicious IP: 212.117.169.16

Everything seems normal with my computer, except for Malwarebytes keeps prompting the infected blocked IPs. Also, I just emptied quarantined items from SAS.

REGEDIT4
; RegSrch.vbs © Bill James

; Registry search results for string "{6DEEE498-08CC-43F0-BCA0-DBB5A25C9501}" 9/14/2009 18:05:37

; NOTE: This file will be deleted when you close WordPad....

Still same thing. I gave full control to myself and Administrator but still nothing.

Hmz... when I try to delete {6DEEE498-08CC-43F0-BCA0-DBB5A25C9501} it gives me an error access denied.

Ya it removes them, tells me then to restart to have it completely removed. After restart I do a scan and it's there again...

Damn ! It's still there !:@

Thanks PhilliePhan. I'll restart right now and do SAS scan. Lets hope it works.

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 09/12/2009 at 07:41 PM

Application Version : 4.28.1010

Core Rules Database Version : 4096
Trace Rules Database Version:...

OK, I enabled it in IE and it appeared in Task Scheduler so I disabled there and disabled in IE again.

Alright, I disabled it. Thanks for the easy instructions. So do I still have to remove User_Feed_Synchronization-{AEFD2DFF-6E9E-4138-BF94-F4A09C6BA9FE}.job from the task scheduler ?

I don't know, can't find it.
Oh there it is User_Feed_Synchronization-{AEFD2DFF-6E9E-4138-BF94-F4A09C6BA9FE} (Description: Updates out-of-date system feeds.) C:\Windows\system32\msfeedssync.exe...

No, what does this do?

No, that's not the websites I'm trying to visit. I have a router but my firewall is not set up. I'm not using SpywareBlaster because I think that I already have enough anti-virus/spyware programs...

Also, someone recommended to run RSIT (random's system information tool)
Here are the logs:
log.txt

Logfile of random's system information tool 1.06 (written by random/random)
Run by ¤0wner at...

I see. I will try uninstalling SAS and getting a fresh copy from them. What about MBMA, it keeps popping up that its blocking infected IPs like every minute ?
By the way, I heard that smitfraud fix...

I am using Windows Vista Ultimate 64bit and been using SAS for around 6 months. Got it from their website. In begining of this week I updated to the latest version. The previous version also detected...

ya I tried scaning with SAS and all the other programs in safe mode multiple times... SAS finds that infection and removes it, but after restart I do SAS scan again and the infection is there again!...

Ok here is the log, im not sure if it's the full log because once i pressed 1 and enter the program disappeared and made a log in C:\rapport.txt

SmitFraudFix v2.423

Scan done at 22:34:01.99,...

Hi, SUPERAntiSpyware Professional keeps finding this trojan "Trojan.Smitfraud Variant-Gen/PP" virus and every time I remove it and restart the pc it keeps coming back. I also tried runing SAS as...

I'm being helped on this forum http://www.geekstogo.com/forum/www-007guard-com-slow-internet-t217403.html

I'd like to inform the forum moderators that I'm now receiving help elsewhere and this thread can now be closed. Thanks for helping, Jholland1964!

It's ok Judy, I appreciate your effort trying to help me!
No, I didn't block the incoming connection on the router, not sure how to block connections on the router. I just have the DMZ mode enabled...

here is a log after reboot:

still netstat packed with 007guard connections

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:26:32 PM, on 11/17/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20733)
Boot mode: Normal
...

Ok, so I called them again. They ran a packet test, checked some other stuff, everything seems fine for them. I told them that I have a bunch of 007guard.com connection in netstat, even showed them...

Yes, I check the event viewer, nothing with ""TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts". Here's a shot: ...

TDK is my bluetooth dongle, I had to reinstall it. My winsock2 seems fine, did those steps on microsoft page and didn't have any symptons of Winsock2 corruption. My ISP is Optimum Online, I never...

Ok, I removed those 3 links from trusted zone and restarted the computer. Also unplugged the router and ran straight wire to pc from modem. Nothing changed, still getting bunch of those 007guard.com...