tetonbob

Hi, I see. Well, it really depends on what the previous setting was. Typically while doing malware removal, Spywareguard should be disabled, but it will still ask question of you once re-enabled. Since we're doing removals of some registry entries, it would make sense for a new setting to be <none>. If it happens while you're installing a new application, for example, you want to carefully review the information box, and act accordingly.


When files found by other scanners are in the Recovery directory inside the Spybot-S&D directory, it is only a backup. It is no longer of any harm there, as the file won't be loaded from there. But once you are sure you don't need the backup, go to the Recovery section inside Spybot-S&D and purge the files.

1. Open Spybot.
If you have a shortcut on your desktop, double click it.
or
Click Start, then All Programs, then Spybot - Search & Destroy and then Spybot - Search & Destroy.
2. On the left side, click "Recovery".
3. Select (place a check) beside ALL the backup files that contain quarantined items.
4. Click on the Purge Selected Items button.
5. A dialog will appear, stating that the backup will be removed. Click Yes.
6. When the Recovery window is empty, Exit Spybot.

---------------------------------------------------------------------------------------------

I do see I missed one that SmitfraudFix doesn't have in it's database yet.

Spywareguard

Please disable Spywareguard, as it may hinder the removal of some entries. You can re-enable it after you're clean.

• Right click the running icon of Spywareguard located in the system tray
• Go to Menu > File > Exit and confirm the programs close.

---------------------------------------------------------------------------------------------

Uninstall the following via the Add/Remove Panel (Start->(Settings)->Control Panel->Add/Remove Programs) if they exist:

MyWay Search Assistant

---------------------------------------------------------------------------------------------

Open HijackThis and click on 'Do a System Scan Only'. Check the following entries if they exist (make sure you do not miss any) and click Fix Checked

O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
O2 - BHO: (no name) - {BA0BACB5-FC95-451E-94D2-4959AB0949D2} - C:\Program Files\Video Add-on\isfmdl.dll (file missing)

Close HijackThis now.

---------------------------------------------------------------------------------------------

Locate and delete this folder:

C:\Program Files\MyWaySA

---------------------------------------------------------------------------------------------

Reboot the machine.

---------------------------------------------------------------------------------------------

Accept changes if SpyWareGuard asks.

Post a new HijackThis log, and let me know about the system behavior. We'll then try to work on the application issues, if I can help with those.