dragonballfan

I ran the issues part of ccleaner, and it found over 500 issues, which i backed up first, than deleted. Ran it again to be safe, and it found 54 more issues which i backed up and than deleted. I also ran those files in kill box like you said, but findit still finds it....i also did the hosts thing, but when i opened it up on notepad, nothing was there. Is that a bad thing?

here's the findit log:

Microsoft Windows 2000 [Version 5.00.2195]
The current date is: Tue 05/24/2005
PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
»»»»»»»»»»»»»»»»»»»»»»»» Todo Files found »»»»»»»»»»»»»»»»»»»»»»»»»»»»»


»»»»»»»»»»»»»»»»»»»»»»»» aurora Files found »»»»»»»»»»»»»»»»»»»»»»»»»»»


»»»»»»»»»»»»»»»»»»»»»»»» Suspect's »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Dont delete file's in the section without guidance
If any doubt back them up first


»»»»» lagitamate file's can/will show in this section.

»»»»»»»»»»»»»»»»»»»»»»»» Buddy file's »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

»»»»»»»»»»»»»»»»»»»»»»»» SAHAgent Files found »»»»»»»»»»»»»»»»»»»»»»»»»

»»»»»»»»»»»»»»»»»»»»»»»» Misc checks »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»


»»»»» Check for Windows\SYSTEM32\cache32_rtneg* folder.

Volume in drive C has no label.
Volume Serial Number is CCFB-26C6

Directory of C:\WINNT\SYSTEM32

»»»»» Checking for SAHAgent ico files.
Volume in drive C has no label.
Volume Serial Number is CCFB-26C6

Directory of C:\WINNT\system32

05/22/2005 05:23p 3,262 porn1234.ico
05/22/2005 05:23p 3,262 girl12.ico
05/22/2005 05:23p 4,286 kill evidence 21.ico
05/22/2005 05:23p 4,286 kill internet popups1.ico
05/22/2005 05:23p 4,286 moviesgreen.ico
5 File(s) 19,382 bytes
0 Dir(s) 13,225,541,632 bytes free

»»»»»»»»»»»»»»»»»»»»»»»».

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ext\CLSID\




here's the mwav log:

Object "AltNet Spyware/Adware" found in File System! Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\Downloaded Program Files\d_loader.exe". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\Downloaded Program Files\ttinst.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\system32\gpstool.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{AAA8135F-D41A-4e85-A40F-58E6BE393E6F}" refers to invalid object "417F2800-62F5-4385-82E1-7FE61500CB3D". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B0693766-5278-4ec6-B9E1-3CE40560EF5A}" refers to invalid object "CaPlgin.ax". Action Taken: No Action Taken.


my computer is running fine as far as i can tell...it's just sometimes when i'm viewing pages in this forum, i get a popup saying that my active x security settings do not allow certain items to be displayed correctly...i've never had that happen before.

can i uninstall ewido? it seems to slow my puter down on startup.

thanks again