tetonbob

I really don't understand that error message from Housecall....when you get to the page, is there something telling you to load a plug-in? There may be, and you should.

I gotta tell you, I'm not looking forward to looking at 7 logs from this system. But I will, one at a time.

Make sure you keep track of which one's been cleaned, and which one hasn't. Run all these same tools on the user account first, before posting a HJT log.

Adware, Spybot, Ewido, CWShredder. I also have another idea to help us get some control. Uninstall that version of SpySweeper you have, as it scans only and won't help us.

I was able to find a link to a free trial version which does clean. I've just tested it on one of my test boxes. Try it out, and let me know how it goes....if possible, clean whatever it finds, save the session log, and post that and any Ewido log for each user account as we go through them.

Please download WebRoot SpySweeper from HERE (It's a 90 day trial):

• Click the Download now link on the right to download the program.
• Double-click the file to install it as follows:
  • Click "Next", read the agreement, Click "Next"
  • Choose "Custom" click "Next".
  • Leave the default installation directory as it is, then click "Next".
  • UNcheck "Run SpySweeper at Windows Startup" and "Add Sweep for Spyware to Windows Explorer Context Menu". Click "Next".
  • On the following screen you can leave the e-mail address field blank, if you wish. Click "Next".
  • Finally, click "Install"
• Once the program is installed, it will open.
• It will prompt you to update to the latest definitions, click Yes.
• Once the definitions are installed, click Options on the left side.
• Click the Sweep Options tab.
• Under What to Sweep please put a check next to the following:
  • Sweep Memory
  • Sweep Registry
  • Sweep Cookies
  • Sweep All User Accounts
  • Enable Direct Disk Sweeping
  • Sweep Contents of Compressed Files
  • Sweep for Rootkits
  • Please UNCHECK Do not Sweep System Restore Folder.
• Click Sweep Now on the left side.
• Click the Start button.
• When it's done scanning, click the Next button.
• Make sure everything has a check next to it, then click the Next button.
• It will remove all of the items found.
• Click Session Log in the upper right corner, copy everything in that window.
• Click the Summary tab and click Finish.
• Paste the contents of the session log you copied into your next reply.

After doing all that, post a HJT log, and name the account.