www.oldgames.se popup problems - Page 2

loch-heart · 07-22-2005, 09:33 PM

Hi there - sorry about the delay coming back to you - been tied up with work. Ok, I have worked through all the changes you suggested, confirmed all settings are correct.

However, I still have no access to secured sites. I can't even use my ebay login now.

Should I restore and start over?

Thank
Catherine

Ried · 07-22-2005, 09:44 PM

I'm going to check with the other Analysts, hang on and we'll get back to you as soon as possible.

MicroBell · 07-22-2005, 10:12 PM

Please download Alberts Rule Viewer (Atguard) ...http://www.capimonitor.nl/Atguard%20...ulesviewer.php

Unzip the files to a empty directory/folder and run the program. Once the rules are loaded..copy/paste them into your next post.

If your using MS's firewall..shut it done..and then connect and see if thats blocking access. Do the same with Symantec.

Also look under Tools...Internet Options...click the security tab..then custom level...scroll down to "User Authentiction"..and see if "Automatically Logon in Intranet Zone" is checked. If it is...try the current user and password setting.

loch-heart · 07-22-2005, 11:37 PM

I downloaded this program but it gave no rules to copy.

Attached is a copy of the dialogue box that appeared.

I downloaded, opened, unzipped, then ran the program. But the Rules box came up empty. There's only text in the History tab.

Did I miss a step?

Also - where do I find the Customise Provacy Settings?

Thanks
Catherine

MicroBell · 07-23-2005, 12:01 AM

Try my other suggestions. Ditch that program as it won't work unless NIS is installed.

EDIT:

After some research...you may have a corrupt profile. Have a look here...

http://support.microsoft.com/default...;EN-US;Q303807

C:\WINDOWS\system32\WININET.dll<-- we also need to check this file for an infection as it will cause the same error message.

Please run an online scan at http://www.pandasoftware.com/actives..._principal.htm
Select the “Autofix/Clean” option and save the activescan log. Then post that log in your next post.

loch-heart · 07-23-2005, 09:50 PM

Hi there - I have completed the scan and the log is below.

Thanks
Catherine

Incident Status Location

Adware:adware/p2pnetworking No disinfected C:\WINDOWS\SYSTEM32\P2P Networking v126.cpl
Adware:adware/funweb No disinfected C:\WINDOWS\DOWNLOADED PROGRAM FILES\f3initialsetup1.0.0.8-2.inf
Adware:adware/twain-tech No disinfected C:\WINDOWS\smdat32a.sys
Adware:adware/mywebsearch No disinfected C:\PROGRAM FILES\MyWebSearch
Spyware:spyware/searchcentrix No disinfected HKEY_CURRENT_USER\SOFTWARE\DYNAMIC TOOLBAR
Spyware:spyware/altnet No disinfected HKEY_CLASSES_ROOT\CLSID\{3646C2BD-3554-49CA-8125-44DEEFB881DE}
Adware:adware/myway No disinfected HKEY_LOCAL_MACHINE\software\classes\CLSID\{9AFB8248-617F-460d-9366-D71CDEDA3179}
Adware:Adware/P2PNetworking No disinfected C:\Program Files\Yahoo!\YPSR\Quarantine\ppq82.tmp
Adware:Adware/P2PNetworking No disinfected C:\Program Files\Yahoo!\YPSR\Quarantine\ppq83.tmp
Adware:Adware/P2PNetworking No disinfected C:\Program Files\Yahoo!\YPSR\Quarantine\ppq84.tmp
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL10.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL11.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL12.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL13.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL14.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL15.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL16.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL17.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL18.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL19.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL2.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL20.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL21.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL22.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL23.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL24.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL25.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL26.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL27.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL28.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL29.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL3.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL30.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL31.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL32.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL33.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL34.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL35.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL36.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL37.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL38.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL39.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL4.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL40.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL41.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL42.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL5.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL6.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL7.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL8.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL9.DLL
Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\P2P Networking.exe
Adware:Adware/FunWeb No disinfected C:\WINDOWS\Downloaded Program Files\f3initialsetup1.0.0.8-2.inf
Adware:Adware/P2PNetworking No disinfected C:\WINDOWS\system32\P2P Networking v126.cpl

MicroBell · 07-23-2005, 11:43 PM

First...empty your recycle bin.

Reboot into safe mode....

Open add/remove programs and remove MyWebSearch if listed.

C:\WINDOWS\SYSTEM32\P2P Networking <--delete that folder

C:\WINDOWS\DOWNLOADED PROGRAM FILES\f3initialsetup1.0.0.8-2.inf<--delete that file

C:\WINDOWS\smdat32a.sys <--delete that file

C:\PROGRAM FILES\MyWebSearch<--delete that folder

C:\Program Files\Yahoo!\YPSR\Quarantine <--delete ALL files IN that folder...but KEEP the folder!!

Click START…RUN…Type in regedit. Make sure just “My Computer” is showing in the left pane and click..FILE….EXPORT…and save a copy some were in case you make a mistake. Now navigate to each of the following keys and delete the file/folder/entry I highlighted in RED.

HKEY_CURRENT_USER\SOFTWARE\DYNAMIC TOOLBAR

HKEY_CLASSES_ROOT\CLSID\{3646C2BD-3554-49CA-8125-44DEEFB881DE}

HKEY_LOCAL_MACHINE\software\classes\CLSID\{9AFB824 8-617F-460d-9366-D71CDEDA3179}

Close regedit and reboot to normal mode.

Run another Panda scan and post its log.

Did that MS artical help any? Did you try to create another profile? BTW..have you tryed resetting IE to it's default settings?

loch-heart · 07-25-2005, 01:36 AM

Hi there - am just going to work through these changes now. Regarding the MS article; unfortunately I log on as the administrator so I can't delete that profile. I did try to give my husband administrator rights so that I could then delete the profile I use but that wouldn't work.

I'll see how I go with this next set of instructions.

Cheers
Catherine

07-22-2005, 09:33 PM	#21 (permalink)
loch-heart Registered User Join Date: Jul 2005 Location: Wellington, New Zealand Posts: 14 OS: XP	Still no access to secured sites .... Hi there - sorry about the delay coming back to you - been tied up with work. Ok, I have worked through all the changes you suggested, confirmed all settings are correct. However, I still have no access to secured sites. I can't even use my ebay login now. Should I restore and start over? Thank Catherine

07-22-2005, 09:44 PM	#22 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 26,840 OS: WinXP and Vista	I'm going to check with the other Analysts, hang on and we'll get back to you as soon as possible. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

07-22-2005, 10:12 PM	#23 (permalink)
MicroBell Manager Emeritus - Security Center, Expert Analyst, Moderator - Security Team; Rangemaster, TSF Academy & Supporter Join Date: Sep 2004 Location: Carmichaels, PA-USA Posts: 6,963 OS: Windows 7	Please download Alberts Rule Viewer (Atguard) ...http://www.capimonitor.nl/Atguard%20...ulesviewer.php Unzip the files to a empty directory/folder and run the program. Once the rules are loaded..copy/paste them into your next post. If your using MS's firewall..shut it done..and then connect and see if thats blocking access. Do the same with Symantec. Also look under Tools...Internet Options...click the security tab..then custom level...scroll down to "User Authentiction"..and see if "Automatically Logon in Intranet Zone" is checked. If it is...try the current user and password setting. __________________ We Are The BORG Spyware KILLER and Adware Destroyer! Spyware/Adware Removal Tools Hijackthis Ad-aware SE Spybot Search&Destroy SpywareBlaster CWShredder Last edited by MicroBell; 07-22-2005 at 11:34 PM.

07-23-2005, 12:01 AM	#25 (permalink)
MicroBell Manager Emeritus - Security Center, Expert Analyst, Moderator - Security Team; Rangemaster, TSF Academy & Supporter Join Date: Sep 2004 Location: Carmichaels, PA-USA Posts: 6,963 OS: Windows 7	Try my other suggestions. Ditch that program as it won't work unless NIS is installed. EDIT: After some research...you may have a corrupt profile. Have a look here... http://support.microsoft.com/default...;EN-US;Q303807 C:\WINDOWS\system32\WININET.dll<-- we also need to check this file for an infection as it will cause the same error message. Please run an online scan at http://www.pandasoftware.com/actives..._principal.htm Select the “Autofix/Clean” option and save the activescan log. Then post that log in your next post. __________________ We Are The BORG Spyware KILLER and Adware Destroyer! Spyware/Adware Removal Tools Hijackthis Ad-aware SE Spybot Search&Destroy SpywareBlaster CWShredder Last edited by MicroBell; 07-23-2005 at 12:29 AM.

07-23-2005, 09:50 PM	#26 (permalink)
loch-heart Registered User Join Date: Jul 2005 Location: Wellington, New Zealand Posts: 14 OS: XP	ActiveScan Log Hi there - I have completed the scan and the log is below. Thanks Catherine Incident Status Location Adware:adware/p2pnetworking No disinfected C:\WINDOWS\SYSTEM32\P2P Networking v126.cpl Adware:adware/funweb No disinfected C:\WINDOWS\DOWNLOADED PROGRAM FILES\f3initialsetup1.0.0.8-2.inf Adware:adware/twain-tech No disinfected C:\WINDOWS\smdat32a.sys Adware:adware/mywebsearch No disinfected C:\PROGRAM FILES\MyWebSearch Spyware:spyware/searchcentrix No disinfected HKEY_CURRENT_USER\SOFTWARE\DYNAMIC TOOLBAR Spyware:spyware/altnet No disinfected HKEY_CLASSES_ROOT\CLSID\{3646C2BD-3554-49CA-8125-44DEEFB881DE} Adware:adware/myway No disinfected HKEY_LOCAL_MACHINE\software\classes\CLSID\{9AFB8248-617F-460d-9366-D71CDEDA3179} Adware:Adware/P2PNetworking No disinfected C:\Program Files\Yahoo!\YPSR\Quarantine\ppq82.tmp Adware:Adware/P2PNetworking No disinfected C:\Program Files\Yahoo!\YPSR\Quarantine\ppq83.tmp Adware:Adware/P2PNetworking No disinfected C:\Program Files\Yahoo!\YPSR\Quarantine\ppq84.tmp Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL10.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL11.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL12.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL13.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL14.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL15.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL16.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL17.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL18.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL19.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL2.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL20.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL21.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL22.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL23.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL24.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL25.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL26.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL27.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL28.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL29.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL3.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL30.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL31.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL32.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL33.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL34.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL35.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL36.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL37.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL38.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL39.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL4.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL40.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL41.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL42.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL5.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL6.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL7.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL8.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\MARSHAL9.DLL Adware:Adware/P2PNetworking No disinfected C:\RECYCLER\S-1-5-21-4275160224-3089482726-1724309591-500\Dc2\P2P Networking.exe Adware:Adware/FunWeb No disinfected C:\WINDOWS\Downloaded Program Files\f3initialsetup1.0.0.8-2.inf Adware:Adware/P2PNetworking No disinfected C:\WINDOWS\system32\P2P Networking v126.cpl

07-23-2005, 11:43 PM	#27 (permalink)
MicroBell Manager Emeritus - Security Center, Expert Analyst, Moderator - Security Team; Rangemaster, TSF Academy & Supporter Join Date: Sep 2004 Location: Carmichaels, PA-USA Posts: 6,963 OS: Windows 7	First...empty your recycle bin. Reboot into safe mode.... Open add/remove programs and remove MyWebSearch if listed. C:\WINDOWS\SYSTEM32\P2P Networking <--delete that folder C:\WINDOWS\DOWNLOADED PROGRAM FILES\f3initialsetup1.0.0.8-2.inf<--delete that file C:\WINDOWS\smdat32a.sys <--delete that file C:\PROGRAM FILES\MyWebSearch<--delete that folder C:\Program Files\Yahoo!\YPSR\Quarantine <--delete ALL files IN that folder...but KEEP the folder!! Click START…RUN…Type in regedit. Make sure just “My Computer” is showing in the left pane and click..FILE….EXPORT…and save a copy some were in case you make a mistake. Now navigate to each of the following keys and delete the file/folder/entry I highlighted in RED. HKEY_CURRENT_USER\SOFTWARE\DYNAMIC TOOLBAR HKEY_CLASSES_ROOT\CLSID\{3646C2BD-3554-49CA-8125-44DEEFB881DE} HKEY_LOCAL_MACHINE\software\classes\CLSID\{9AFB824 8-617F-460d-9366-D71CDEDA3179} Close regedit and reboot to normal mode. Run another Panda scan and post its log. Did that MS artical help any? Did you try to create another profile? BTW..have you tryed resetting IE to it's default settings? __________________ We Are The BORG Spyware KILLER and Adware Destroyer! Spyware/Adware Removal Tools Hijackthis Ad-aware SE Spybot Search&Destroy SpywareBlaster CWShredder

07-25-2005, 01:36 AM	#28 (permalink)
loch-heart Registered User Join Date: Jul 2005 Location: Wellington, New Zealand Posts: 14 OS: XP	MS Article, etc .... Hi there - am just going to work through these changes now. Regarding the MS article; unfortunately I log on as the administrator so I can't delete that profile. I did try to give my husband administrator rights so that I could then delete the profile I use but that wouldn't work. I'll see how I go with this next set of instructions. Cheers Catherine