2 small ?'s on my hijackthis log

[jdzworld]

i got system 1 showing nothing in activescan now w/ the help of WebRoot SpySweeper from here!!
http://www.webroot.com/downloads/?WR...d6f87b866d2848
(It's a 2 week trial)

i updated to the latest definitions, then clicked "Sweep Now"
Then clicked the "Start" button, clicked the "Next" button.
Removed everything it finds(also quaranteen).

although mwav still shows
Object "AltNet Spyware/Adware" found in File System! Action Taken: No Action Taken.
i dont think im worried about it.

as far as system 2...i did the same(spysweeper) and ended up deleting like 9 things but activescan still says
Adware:Adware/SaveNow No disinfected Windows Registry

if u want to go on and help other people. that would be fine w/ me. i think ive wasted enough of your time. otherwise, id be happy to continue.

[Ried]

Hello,

Altnet and SaveNow are both inactive on your system. As tetonbob mentioned earlier, they are just 'orphaned' entries left over from prior removal.

If it's really bothering you and you feel comfortable working with the registry, you can do the following: But first, let's clear out the System Restore, this way if you make an error in the registry, you can try a System Restore without reinfecting your computer.

Turn off System Restore Click Start > Right Click My Computer > Properties. Click the System Restore tab and Check "Turn off System Restore" or "Turn off System Restore on all drives". Click Apply. When turning off System Restore, the existing restore points will be deleted. Click Yes to do this then Click OK. Now reenable system restore. This will prevent any reinfection from any previous restore points.

Reboot into Safe Mode.

Click Start>Run and type in regedit. Click File>Export..and save a copy of the registry somewere in case you make a mistake.

Navigate to

[HKEY_LOCAL_MACHINE\SOFTWARE\ and delete Altnet and SaveNow (if found)

If any of the above registry keys are giving you problems deleting, right click on them and click on Permissions. Then click on the Advanced button. Make sure the first box (Inherit from parent...) is checked. Click OK and OK. Then try deleting the entry again. Once you're done, close the Registry Editor.

Close regedit.

Your logs are clean. If there are no other problems, you should be all set.

**Note**

It is very important that you get all of the critical updates for your Operating System and Internet Explorer. I notice your browser and XP are not up to date and this makes you susceptible to attacks by Trojans and viruses. Please go to Microsoft and download all the critical updates to help prevent possible re-infection. Please update to XP SP2 and I.E. SP2

To help prevent future spyware installations/infections, please read the Anti-Spyware Tutorial http://www.greyknight17.com/spyware.htm#prevent and use the tools/programs provided.

[jdzworld]

i just tried that but got the same result on both cpus:

system 1 mwav results(but doesnt appear in activescan now!)
Adware:Adware/EliteBar No disinfected Windows Registry;

system 2 mwav results are:
(i also searched for all these in registry and deleted the 2 i found but still this)
Mwav results
Object "CoolWebSearch Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "AltNet Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "GrokSter Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "CWS.therealsearch Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "iSearch Spyware/Adware" found in File System! Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Mod uleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\webdlg32.dll". Action Taken: No Action Taken.

system 2 activescan result:
Adware:Adware/SaveNow No disinfected Windows Registry

i just wanted to make sure all was clean b4 i updated to SP2.(like i think it said in the tutorial) but i guess that is good enough. i will now get SP2. thx 2 you both for your help.

[MicroBell]

jdzworld:

I would not worry about what was found. Run a registry cleaner and see if it will pick out those entrys. If not...you will have to delete them manually throughout the registry if you decide too.

You would need to search using each of these terms and delete every key that it shows under. Make a mistake though..and your system can become unbootable.

CoolWebSearch
AltNet
GrokSter
iSearch
SaveNow
herealsearch

[jdzworld]

i appreciate the help. i used a couple registry cleaners/searchers/editreg and got rid of those that came up under those 5 names. the big thing was the upgrade to sp2...activescan gave me specific location for the SaveNow finally and even a adware MS tried to sneak in. so now both systems are clean in activescan and my several other scanners i have!!
Mwav still has that AltNet virus on system 1 and system 2 has 3 "Object" viruses now. i dont want to mess my system up so ill probably stop now. thx.