MidAddle not removed after three AS scans

I just installed and ran MS-AS on my son's laptop -- XP Home, SP2 with all
updates applied.

When I first ran AS -- full scan of C:\ -- it found:

Spyware threats: 43
Memory processes infected: 2
Spyware files infected: 232
Registry keys infected: 160

I followed the suggested fixes -- either remove or quarantine.

I rebooted and ran AS again. This time, it found:

Spyware threats: 13
Memory processes infected: 0
Spyware files infected: 61
Registry keys infected: 59

Followed suggested fixes.

Rebooted and ran AS yet again. This time it only found one problem:
MidAddle. I told it to remove this. When I look in Program Files\common
files, I see a folder called midaddle with no files in it. I am unable to
delete the folder. I get this message: "It is being used by another person
or program. Try again."

Spybot S&D could not delete MidAddle and I was hoping MS AS would.

What to do?

John

I'm not familiar with MidAddle specifically - however
with other viruses and spyware that behave similarly.
chances are that you need to turn off the autorestore
feature (My Computer|Properties|System Restore)so that
the spyware won't be restored once it's removed. You may
also have to manually detect and stop any services that
MidAddle starts. Try starting in safe mode, with auto
restore off - then scanning.



>-----Original Message-----
>I just installed and ran MS-AS on my son's laptop -- XP
Home, SP2 with all
>updates applied.
>
>When I first ran AS -- full scan of C:\ -- it found:
>
>Spyware threats: 43
>Memory processes infected: 2
>Spyware files infected: 232
>Registry keys infected: 160
>
>I followed the suggested fixes -- either remove or
quarantine.
>
>I rebooted and ran AS again. This time, it found:
>
>Spyware threats: 13
>Memory processes infected: 0
>Spyware files infected: 61
>Registry keys infected: 59
>
>Followed suggested fixes.
>
>Rebooted and ran AS yet again. This time it only found
one problem:
>MidAddle. I told it to remove this. When I look in
Program Files\common
>files, I see a folder called midaddle with no files in
it. I am unable to
>delete the folder. I get this message: "It is being
used by another person
>or program. Try again."
>
>Spybot S&D could not delete MidAddle and I was hoping MS
AS would.
>
>What to do?
>
>John
>
>
>.
>

This helped me fix it -- http://www.angelfire.com/un/midaddle/

I had to open Task Mgr and end task on one app, then I could delete all
midaddle files.

John


<anonymous@discussions.microsoft.com> wrote in message
news:1b1201c4f72d$74c96080$a401280a@phx.gbl...
> I'm not familiar with MidAddle specifically - however
> with other viruses and spyware that behave similarly.
> chances are that you need to turn off the autorestore
> feature (My Computer|Properties|System Restore)so that
> the spyware won't be restored once it's removed. You may
> also have to manually detect and stop any services that
> MidAddle starts. Try starting in safe mode, with auto
> restore off - then scanning.
>
>
>
>>-----Original Message-----
>>I just installed and ran MS-AS on my son's laptop -- XP
> Home, SP2 with all
>>updates applied.
>>
>>When I first ran AS -- full scan of C:\ -- it found:
>>
>>Spyware threats: 43
>>Memory processes infected: 2
>>Spyware files infected: 232
>>Registry keys infected: 160
>>
>>I followed the suggested fixes -- either remove or
> quarantine.
>>
>>I rebooted and ran AS again. This time, it found:
>>
>>Spyware threats: 13
>>Memory processes infected: 0
>>Spyware files infected: 61
>>Registry keys infected: 59
>>
>>Followed suggested fixes.
>>
>>Rebooted and ran AS yet again. This time it only found
> one problem:
>>MidAddle. I told it to remove this. When I look in
> Program Files\common
>>files, I see a folder called midaddle with no files in
> it. I am unable to
>>delete the folder. I get this message: "It is being
> used by another person
>>or program. Try again."
>>
>>Spybot S&D could not delete MidAddle and I was hoping MS
> AS would.
>>
>>What to do?
>>
>>John
>>
>>
>>.
>>