AnyDVD 6.3.1.7

[ANBO]

Hello,

maybe am an absolute lama, but have downloaded AnyDVD HD and can't insert copied files from the fix to AnyDVD folder. I see 5 files in a fix - among them AnyDVD.exe, AnyDialog.dll and resurection.info. If I simply place them to the AnyDVD folder, nothing happens, if try to activate .exe, get the notification my trial expires after 15 days. System informs me AnyDialog.dll file can't be opened at all. Use XP SP2.

Am I doing something wrong?

[shought]

I don't know for sure if i understood you correctly but anyway try this: Uninstall the app, reboot, install it again, don't reboot if it asks you to. Press Ctrl+Alt+Del and close any process related to AnyDVD (if there aren't any it's probably ok). Now try to copy the files from your fix to the directory and pres replace when the computer asks you whether to cancel or replace the file.

[ANBO]

No success in clean unistalling. One file remains in Slysoft folder - ADvdDischlp.dll (access denied).

I can't see this file in registry. Used RegCleaner, but also without success.

When installed the AnyDVD and fix, got the same - your trial period expires in 14 days.

[KotaXor]

No success in clean unistalling. One file remains in Slysoft folder - ADvdDischlp.dll (access denied).

I can't see this file in registry. Used RegCleaner, but also without success.

When installed the AnyDVD and fix, got the same - your trial period expires in 14 days.

Like what Shought said, you need to uninstall it completely, download "Unlocker" (google for it), use it to unlock .dll file and delete the whole Slysoft Folder. After that, reboot.

Install AnyDVD as per normal (disable internet connection to be on the safe side), DO NOT REBOOT if asked to.

Copy the files in the Fix folder to the Program files where AnyDVD is install, and overwrite the existing files.

That should do the trick!

[ANBO]

Thanks, Shought and Kotaxor, it works!

I cleaned the computer with Unlocker and everything worked fine later. My previous mistakes were:

1) I rebooted my PC after AnyDVD install

2) I didn't use "Unlocker"

[shought]

Thanks, Shought and Kotaxor, it works!

I cleaned the computer with Unlocker and everything worked fine later. My previous mistakes were:

1) I rebooted my PC after AnyDVD install

2) I didn't use "Unlocker"

No problem ;)

I'm glad to hear it worked out.

Edit: and thanks to kotaxor too of course :) for picking up where i left things.

[ANBO]

Hello,

one strange thing happens: everytime I turn on the computer in the morning and start IE 7, it goes to

http://www.slysoft.com/en/download.html

I've checked my options- they are set to blank page. Any thoughts what and where to remove? For me the file AnyDVD.chk is suspicious, but I can't delete it- it recovers itself and is shown how recovered file fragment.

[shought]

Hello,

one strange thing happens: everytime I turn on the computer in the morning and start IE 7, it goes to

http://www.slysoft.com/en/download.html

I've checked my options- they are set to blank page. Any thoughts what and where to remove? For me the file AnyDVD.chk is suspicious, but I can't delete it- it recovers itself and is shown how recovered file fragment.

That is weird indeed... Install Spybot S&D, give me a minute for further instructions :fear:

Edit1: Be sure to check the options of AnyDVD because there might be an option that makes their homepage your default every time it runs.

Edit2: If the first thing i mentioned doesn't work try this: Install Spybot S&D, set it to 'Advanced mode', press tools in the lower left menu, select 'Browser pages', press 'Browser pages' at the left menu, post whatever it shows here.

Edit3: Please also post the BHO's here. (If BHO's doesn't show right away in the left menu, press the 'Tools' tab again and select it)

[ANBO]

Hello, Shought,

here is the browser pages report:

--- Spybot - Search & Destroy version: 1.5.2 (build: 20080128) ---

2008-01-28 blindman.exe (1.0.0.7)

2008-01-28 SDDelFile.exe (1.0.2.4)

2008-01-28 SDMain.exe (1.0.0.5)

2007-10-07 SDShred.exe (1.0.1.2)

2008-01-28 SDUpdate.exe (1.0.8.:fear:

2008-01-28 SDWinSec.exe (1.0.0.11)

2008-01-28 SpybotSD.exe (1.5.2.20)

2008-01-28 TeaTimer.exe (1.5.2.16)

2008-03-14 unins000.exe (51.49.0.0)

2008-01-28 Update.exe (1.4.0.6)

2008-01-28 advcheck.dll (1.5.4.5)

2007-04-02 aports.dll (2.1.0.0)

2007-11-17 DelZip179.dll (1.79.7.4)

2008-01-28 SDFiles.dll (1.5.1.19)

2008-01-28 SDHelper.dll (1.5.0.11)

2008-01-28 Tools.dll (2.1.3.3)

2008-03-12 Includes\Cookies.sbi

2007-12-26 Includes\Dialer.sbi

2008-03-12 Includes\DialerC.sbi

2008-03-12 Includes\HeavyDuty.sbi

2008-03-05 Includes\Hijackers.sbi

2008-03-12 Includes\HijackersC.sbi

2008-02-27 Includes\Keyloggers.sbi

2008-03-12 Includes\KeyloggersC.sbi

2004-11-29 Includes\LSP.sbi

2008-03-12 Includes\Malware.sbi

2008-03-12 Includes\MalwareC.sbi

2008-02-20 Includes\PUPS.sbi

2008-03-12 Includes\PUPSC.sbi

2008-03-12 Includes\Revision.sbi

2008-01-09 Includes\Security.sbi

2008-03-12 Includes\SecurityC.sbi

2008-02-20 Includes\Spybots.sbi

2008-03-12 Includes\SpybotsC.sbi

2007-11-06 Includes\Tracks.uti

2008-02-27 Includes\Trojans.sbi

2008-03-12 Includes\TrojansC.sbi

2007-12-24 Plugins\TCPIPAddress.dll

Spybot - Search & Destroy browser pages report, 2008.03.14 22:32:32

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page

C:\WINDOWS\system32\blank.htm

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page

http://://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearch

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page

about:blank

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page

%SystemRoot%\system32\blank.htm

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page

http://go.microsoft.com/fwlink/?LinkId=54896

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page

http://go.microsoft.com/fwlink/?LinkId=69157

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL

http://go.microsoft.com/fwlink/?LinkId=69157

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL

http://go.microsoft.com/fwlink/?LinkId=54896

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant

http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch

http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm

here is the BHO's report:

--- Spybot - Search & Destroy version: 1.5.2 (build: 20080128) ---

2008-01-28 blindman.exe (1.0.0.7)

2008-01-28 SDDelFile.exe (1.0.2.4)

2008-01-28 SDMain.exe (1.0.0.5)

2007-10-07 SDShred.exe (1.0.1.2)

2008-01-28 SDUpdate.exe (1.0.8.:P

2008-01-28 SDWinSec.exe (1.0.0.11)

2008-01-28 SpybotSD.exe (1.5.2.20)

2008-01-28 TeaTimer.exe (1.5.2.16)

2008-03-14 unins000.exe (51.49.0.0)

2008-01-28 Update.exe (1.4.0.6)

2008-01-28 advcheck.dll (1.5.4.5)

2007-04-02 aports.dll (2.1.0.0)

2007-11-17 DelZip179.dll (1.79.7.4)

2008-01-28 SDFiles.dll (1.5.1.19)

2008-01-28 SDHelper.dll (1.5.0.11)

2008-01-28 Tools.dll (2.1.3.3)

2008-03-12 Includes\Cookies.sbi

2007-12-26 Includes\Dialer.sbi

2008-03-12 Includes\DialerC.sbi

2008-03-12 Includes\HeavyDuty.sbi

2008-03-05 Includes\Hijackers.sbi

2008-03-12 Includes\HijackersC.sbi

2008-02-27 Includes\Keyloggers.sbi

2008-03-12 Includes\KeyloggersC.sbi

2004-11-29 Includes\LSP.sbi

2008-03-12 Includes\Malware.sbi

2008-03-12 Includes\MalwareC.sbi

2008-02-20 Includes\PUPS.sbi

2008-03-12 Includes\PUPSC.sbi

2008-03-12 Includes\Revision.sbi

2008-01-09 Includes\Security.sbi

2008-03-12 Includes\SecurityC.sbi

2008-02-20 Includes\Spybots.sbi

2008-03-12 Includes\SpybotsC.sbi

2007-11-06 Includes\Tracks.uti

2008-02-27 Includes\Trojans.sbi

2008-03-12 Includes\TrojansC.sbi

2007-12-24 Plugins\TCPIPAddress.dll

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Adobe PDF Reader Link Helper)

location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\

BHO name:

CLSID name: Adobe PDF Reader Link Helper

description: Adobe Acrobat reader

classification: Legitimate

known filename: AcroIEhelper.ocx<br>AcroIEhelper.dll

info link: http://www.adobe.com/products/acrobat/readstep2.html

info source: TonyKlein

Path: C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\

Long name: AcroIEHelper.dll

Short name: ACROIE~1.DLL

Date (created): 2006.10.22 22:08:42

Date (last access): 2008.03.14 21:28:46

Date (last write): 2006.10.22 23:08:42

Filesize: 62080

Attributes: archive

MD5: C11F6A1F61481E24BE3FDC06EA6F7D2A

CRC32: E388508F

Version: 8.0.0.456

{3049C3E9-B461-4BC5-8870-4C09146192CA} (RealPlayer Download and Record Plugin for Internet Explorer)

location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\

BHO name:

CLSID name: RealPlayer Download and Record Plugin for Internet Explorer

Path: C:\Program Files\Real\RealPlayer\

Long name: rpbrowserrecordplugin.dll

Short name: RPBROW~1.DLL

Date (created): 2008.02.03 16:14:08

Date (last access): 2008.03.14 21:28:46

Date (last write): 2008.02.03 16:14:08

Filesize: 370296

Attributes: archive

MD5: 4D630E9EF94CF8814DFD0E5938230822

CRC32: 02C3DBBF

Version: 1.0.0.522

{53707962-6F74-2D53-2644-206D7942484F} (Spybot-S&D IE Protection)

location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\

BHO name:

CLSID name: Spybot-S&D IE Protection

description: Spybot-S&D IE Browser plugin

classification: Legitimate

known filename: SDhelper.dll

info link: http://spybot.eon.net.au/

info source: Patrick M. Kolla

Path: C:\PROGRA~1\SPYBOT~1\

Long name: SDHelper.dll

Short name:

Date (created): 2008.03.14 21:58:02

Date (last access): 2008.03.14 21:58:02

Date (last write): 2008.01.28 11:43:28

Filesize: 1554256

Attributes: archive

MD5: 5248E02EFBCB64D328647CD00E384B85

CRC32: C1B426A9

Version: 1.5.0.11

{5CA3D70E-1895-11CF-8E15-001234567890} (DriveLetterAccess)

location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\

BHO name:

CLSID name: DriveLetterAccess

description: Hewlett-Packard's DLA software

classification: Unknown

known filename: tfswshx.dll

info link:

info source: TonyKlein

Path: C:\WINDOWS\system32\dla\

Long name: tfswshx.dll

Short name:

Date (created): 2006.02.20 19:17:48

Date (last access): 2008.03.14 21:28:46

Date (last write): 2005.04.27 05:33:00

Filesize: 118844

Attributes: archive

MD5: 93D073E2A6722D42353ECFCD52CD5A7C

CRC32: 56BC88FB

Version: 1.4.8.0

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)

location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\

BHO name:

CLSID name: SSVHelper Class

Path: C:\Program Files\Java\jre1.6.0_03\bin\

Long name: ssv.dll

Short name:

Date (created): 2007.10.23 12:41:46

Date (last access): 2008.03.14 21:28:46

Date (last write): 2007.09.25 00:11:34

Filesize: 501136

Attributes: archive

MD5: D787E3123FAD2BD58AB45B9A5C360ACD

CRC32: DDC625C2

Version: 6.0.30.5

[shought]

None of that shows anything you should worry about, have you tried checking the 'Options' of AnyDVD?

Just in case try to scan with Spybot S&D, because a homepage change is normally due to some kind of spyware... However i doubt that is the case in this matter you should just do it anyway :fear:

[shought]

If none of the above helped, try this: Open AnyDVD options, go to Program options and turn off Check for updates automatically.

Also try to disable Run AnyDVD at startup(or something similar to that) in Program options.

[ANBO]

Shought, I really appreciate your help!

I turned off an automatic updates and seems the problem disappeared.

Spybot found nothing, except some tracking cookies and these registry changes:

Microsoft.Windows.Security.InternetExplorer: [sBI $A3433CBF] Settings (Registry change, nothing done)

HKEY_USERS\S-1-5-21-1232043496-3403379951-3283578717-500\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe

Microsoft.Windows.AppFirewallBypass: [sBI $9FD0556E] Settings (Registry value, nothing done)

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\WINDOWS\system32\usmt\migwiz.exe

Microsoft.Windows.AppFirewallBypass: [sBI $9DD943AA] Settings (Registry value, nothing done)

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\WINDOWS\system32\usmt\migwiz.exe

[KotaXor]

If none of the above helped, try this: Open AnyDVD options, go to Program options and turn off Check for updates automatically.

Also try to disable Run AnyDVD at startup(or something similar to that) in Program options.

Yeah, do not allow AnyDVD to run at startup. Try the following: Click "Start">Run and type in "msconfig", check whether any of AnyDVD or some weird name is running, un-check it and Reboot.

There are other ways to prevent it from running, but always try to disable using the program (AnyDVD) options (as suggested by Shought).

[shought]

Shought, I really appreciate your help!

I turned off an automatic updates and seems the problem disappeared.

Spybot found nothing, except some tracking cookies and some registry changes.

Well i'm glad the problem is solved now, i installed AnyDVD myself and saw there was an option for Automatic update checking. You said you were being taken to the 'Download page' so i thought that might had something to do with it, as it turns out it had :P

Kotaxor is right :dance2: First try to disable a program from starting with windows by unchecking it in the 'Options' of the program.

You should only load the necessary things at startup, like antivirus, antispyware(if you use that, i don't, at least not at startup) and some potentially needed utilities for your touchpad/network/sound or something like that. You can try disabling almost anything, reboot and see what happens. Just be sure to don't touch any system files if you don't know what they're all about!

Spybot S&D and TuneUp Utilities both have a nice utility for changing the startup entries if the program options don't allow you or if you don't know what programs might start after logon.