MidAddle not removed after three AS scans

[John Blaustein]

I just installed and ran MS-AS on my son's laptop -- XP Home, SP2 with all
updates applied.

When I first ran AS -- full scan of C:\ -- it found:

Spyware threats: 43
Memory processes infected: 2
Spyware files infected: 232
Registry keys infected: 160

I followed the suggested fixes -- either remove or quarantine.

I rebooted and ran AS again. This time, it found:

Spyware threats: 13
Memory processes infected: 0
Spyware files infected: 61
Registry keys infected: 59

Followed suggested fixes.

Rebooted and ran AS yet again. This time it only found one problem:
MidAddle. I told it to remove this. When I look in Program Files\common
files, I see a folder called midaddle with no files in it. I am unable to
delete the folder. I get this message: "It is being used by another person
or program. Try again."

Spybot S&D could not delete MidAddle and I was hoping MS AS would.

What to do?

John

 

[Guest]

I'm not familiar with MidAddle specifically - however
with other viruses and spyware that behave similarly.
chances are that you need to turn off the autorestore
feature (My Computer|Properties|System Restore)so that
the spyware won't be restored once it's removed. You may
also have to manually detect and stop any services that
MidAddle starts. Try starting in safe mode, with auto
restore off - then scanning.

 

[John Blaustein]

This helped me fix it -- http://www.angelfire.com/un/midaddle/

I had to open Task Mgr and end task on one app, then I could delete all
midaddle files.

John