What did CleanUp delete that you wanted to keep? Go into the options and look through the tabs (especially the last one). Edit out what you
don't want CleanUp to delete before you run it again.
OK, for the other problem, these two:
O4 - HKLM\..\RunOnce: [wextract_cleanup0] rundll32.exe C:\WINDOWS\System32\advpack.dll,DelNodeRunDLL32 "C:\DOCUME~1\IaM\LOCALS~1\Temp\IXP000.TMP\"
O4 - HKLM\..\RunOnce: [wextract_cleanup1] rundll32.exe C:\WINDOWS\System32\advpack.dll,DelNodeRunDLL32 "C:\DOCUME~1\IaM\LOCALS~1\Temp\IXP001.TMP\"
I think they may be related to TrendMicro.
For the GhostSurf one, do you still see it listed in the Add/Remove panel or see if the folder exists -> C:\Program Files\GhostSurf 2005\
Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should not have any open browsers when you are following the procedures below.
Go to Start->Run and type in regedit and hit OK. Go to File->Export and save the registry somewhere as a backup. While in the Registry Editor, navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ and delete GhostSurfDelSatellite
If any of the above registry keys are giving you problems deleting, right click on them and click on Permissions. Then click on the Advanced button. Make sure the first box (Inherit from parent...) is checked. Click OK and OK. Then try deleting the entry again. Once you're done, close the Registry Editor.
Your log is clean.
Turn off system restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore. Click Apply and then OK. Restart your computer and uncheck the same box to enable System Restore.
Make sure to get the latest updates for Windows and Internet Explorer at
http://v5.windowsupdate.microsoft.co....aspx?ln=en-us.
To help prevent future spyware installations/infections, please read the
Anti-Spyware Tutorial and use the tools provided.
Are there any problems now? If not, you should be set to go.