[NO FEAR]

Ok, i got my ip changed. (actually they said i just ned to turn my router off and turn it on again and it will change, dynamic ip, etc.)

Previous IP - 89.241.239.1..

2nd try - 84.13.249.2..

3rd try - 89.241.230.2..

NO, still cant open an account.

I am making small changes like sandwell, instead of birmingham in address, (same thing) and using a new screenname everytime and a different email address, etc. etc. everytime.

i actually got fed up and gave my neighbours adress, as she is a friend but i obviously asked for her permission, but once i am registered and deposited some money, or not, i could just go to options and change address.

But, anyways, this time it gave me a new error. The error was something like "1 user on this pc already and only one allowed to open an account per pc"


Bear in mind, that i uninstalled the software entirely froimthe system everytime, cleared temporary files, cookies, etc everytime.

Please advice.

[evilfantasy]

There has to be something left in the computer they are identifying you with.
Registry keys maybe. Uninstalling the software with the uninstaller and CCleaner doesn't mean that all traces are gone.
Uninstall the program and do this. If there are traces of it then we may be able to find them.
Download HijackThis Here
Once you have it downloaded install/save it to it's own folder!!! This is important for it to work properly.
For example save in C:\program files\hijackthis
Once installed open the program and select Do a system scan and save logfile.
**Important DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
Save the log as a .txt file.
In the next post click Go Advanced.
Scroll down and click Manage Attachments and add the log as an attachment. It will be too long for a single post so please don't copy/paste it directly in the post

[NO FEAR]

hi,i couldnt save it in its own folder as the zip file had the installer but it didnt install anything.just opened hijackthis program.

anyways,log is attached

[NO FEAR]

ok mate, its late night here and i need some sleep. i m here for another 10min and then i will c u tomorroe

[evilfantasy]

HijackThis should be run from a permanent place on your hard drive. Please do this first: Go to C: and create a new permanent folder (call it hijackthis). Then put (or download - choose "save" not "run") the hijackthis.exe file in it (You must unzip it if it's zipped). You should now have C:\hijackthis\hijackthis.exe. Then run hijackthis by clicking this .exe file. By doing this, you will have backups if you accidentally remove the wrong item (running from a temporary folder these backups can easily get lost).
I have mine in C:\program files\hijackthis. You can then right click the icon and create a shortcut to the desktop.

As I suspected there are remnants of PokerStars left over.

Now open HijackThis and select Do A System Scan Only.
Check/tick these entries.
O2 - BHO: (no name) - {3F4F125D-F31E-4D37-AC35-E50128670469} - C:\WINDOWS\system32\awtqqqq.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {D2188D53-1B21-4DA3-848A-B171FAA0A6BF} - C:\WINDOWS\system32\awvtt.dll (file missing)
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Programme\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Gnuf Casino - {8FE9B27A-BDCD-4d27-A430-4DC0B58D01B0} - C:\Programme\Gnuf\Casino\casinogame.exe **Is this different from pokerstars? If not then don't remove.
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programme\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programme\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: Bodog Poker - {F47C1DB5-ED21-4dc1-853E-D1495792D4C5} - C:\Programme\sheet\MTT\Bodog Poker\BPGame.exe (file missing)
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://mppv2flash3.valueactive.com/Bet365/FlashAX.cab **Is this different from pokerstars? If not then don't remove.
O20 - Winlogon Notify: awtqqqq - awtqqqq.dll (file missing)
O20 - Winlogon Notify: awvtt - C:\WINDOWS\system32\awvtt.dll (file missing)

Before clicking Fix Checked exit all windows including this one!
Then immediately reboot.
Then run CCleaner. Use the issues button to look for empty registry keys as well.
Then post a new log please.
You should run some adware scans like spy-bot because there were some suspicious entries in the HJT log I was unable to identify.

[evilfantasy]

Originally Posted by NO FEAR

ok mate, its late night here and i need some sleep. i m here for another 10min and then i will c u tomorroe

No problem, you might be saving some money in the long run by not being able to register a bank roll :D

[NO FEAR]

i have attached two logs. h1 - before fix and h2 after


O2 - BHO: (no name) - {D2188D53-1B21-4DA3-848A-B171FAA0A6BF} - C:\WINDOWS\system32\awvtt.dll (file missing) not there after scan

O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Programme\PokerStars\PokerStarsUpdate.exe(CANT FIND THIS COS I DELETED IT ALREADY)
O9 - Extra button: Gnuf Casino - {8FE9B27A-BDCD-4d27-A430-4DC0B58D01B0} - C:\Programme\Gnuf\Casino\casinogame.exe **Is this different from pokerstars? If not then don't remove.(NOT POKERSTARS)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programme\PartyGaming\PartyPoker\RunApp.exe (file missing).(NOT POKERSTARS; ITS PARTYPOKER AND I PLAY THERE: WILL IT AFFECT MY PARTY APPLICATION?)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programme\PartyGaming\PartyPoker\RunApp.exe (file missing).(NOT POKERSTARS)
O9 - Extra button: Bodog Poker - {F47C1DB5-ED21-4dc1-853E-D1495792D4C5} - C:\Programme\sheet\MTT\Bodog Poker\BPGame.exe (file missing).(NOT POKERSTARS)
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://mppv2flash3.valueactive.com/Bet365/FlashAX.cab **Is this different from pokerstars? If not then don't remove..(NOT POKERSTARS)


"Then run CCleaner. Use the issues button to look for empty registry keys as well. "
I COULDNT DO THIS: I UNDER ISSUEBUTTON; I HAVE SCANNED BUT DO I FIX?

REGARDS;

[NO FEAR]

Originally Posted by evilfantasy

No problem, you might be saving some money in the long run by not being able to register a bank roll :D

LOL; no, not really. i dont play in casinos, or other gambling games. poker, for me atleast, is an investment. i earn a living through it. thats why i am streesing this issue.

thnks 4 ur help btw.

[evilfantasy]

I am not seeing Pokerstars in the logs anymore.
When using CCleaner and the issues scan. When you click Fix Selected Issues it will prompt you to make a backup. Use that just in case something is fixed that is actually needed. CCleaner is the safest cleaner there is and issues are rare when using it.
Maybe that will remove any empty registry keys left over from Pokerstars.

From looking at the HJT log you are infected with the VirtuMonde Virus.
This takes a special tool for removal as Anti-virus and Anti-spyware can not remove it.

Please download VundoFix.exe to your desktop.

• Double-click VundoFix.exe to run it.
• Click the Scan for Vundo button.
• Once it's done scanning, click the Remove Vundo button.
• You will receive a prompt asking if you want to remove the files, click YES
• Once you click yes, your desktop will go blank as it starts removing Vundo.
• When completed, it will prompt that it will reboot your computer, click OK.
• Please post the contents of C:\vundofix.txt and a new HiJackThis log.

Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the
Scan for Vundo button." when VundoFix appears at reboot.

[NO FEAR]

files attached mate