Ried

Hi Lou,

My decisions on which tools or scanner to run is based on training and experience. You may be interested in joining our Academy. See the 'sticky' threads at the top of the HijackThis forum.

Regarding class action lawsuits, you may want to check our General Security section.

To clean out those orphaned registry entries showing in Mwav, please download Ccleaner www.ccleaner.com

Launch Ccleaner. Click on the 'Issues' tab to clean registry. Be sure that box is checked to 'prompt to backup registry' in the Options>Advanced section.

Click 'Analyze', look over the list carefully, then 'Fix Issues'

All of your scans and logs have been coming up clean. Let's check the settings of your various Anti-Malware programs and 'beef up' your protection:

I see Spybot 1.3 installed. Download Spybot 1.4 from this site Spybot 1.4. Run Spybot and click on the 'Search for Updates' button. Install any updates that are available. Now click Mode menu and choose 'Advanced Mode'. Next click on Immunize to your left. Click the Immunize button (green cross) on top to Immunize your computer - you should do this each time there is an update. Click ’Check for Problems’ and fix all the entries, which are indicated in RED.

Configure AdAware SE 1.06 according to these instructions.

Please take a look at these well written articles:

HOW DID I GET INFECTED IN THE FIRST PLACE? by Tony Klein
THE ANTI-SPYWARE TUTORIAL
MAKING INTERNET EXPLORER SAFER

More information and downloads are available at the following links:

Spyware Blaster to help prevent spyware from installing in the first place.
Spyware Guard to catch and block spyware before it can execute.
IESpy-Ad to block access to malicious websites so you cannot be redirected to them from an infected site or email.


We'll take one more look just to be certain:

Download WinPFInd http://www.bleepingcomputer.com/files/oldtimer/WinPFind.zip and extract it to your C:\ folder. This will create a folder called WinPFind in the C:\ folder. Do Not run it yet.

Reboot into Safe Mode.

Inside C:\WinPFind is a file called WinPFind.exe. Double-click on this file to launch the program. Once it is launched, click on the Start Scan button and wait for it to finish. This program will scan large amounts of files on your computer for known patterns so please be patient while it works as it can take a while, upwards to 30 minutes or more.! Once the Scan is Complete it will make a txt file (log) of what was found. Save that log and post it here.