Hello,
You have an infection of Mywebsearch. Post details if you had been in process of cleaning this up. Or if this is new to you.
Keep in mind you'll have to do initial cleanup in Safe mode of Windows.
When the pc is booting up (after the BIOS has done its POST test and
before Windows starts loading),
Tap F8 Function key to get bootup options. Tap & keep repeat tapping F8 !
You will actually see "Disable automatic restart on system failure" as an option .
Select that and give it a try. This option is available if you have XP service pack 2.
Then select Safe mode, login with an administrator-rights account.
You need to see any fatal error that Windows may have. So do the following.
Right Click the My Computer icon on desktop. Select Properties.
Next, select Advanced. Look for a block that says Startup and recovery. Press the settings button.
In System failure section, turn off (un-check) Automatically restart.
Write an event to system log should be Checked (selected).
You really need to run antivirus & anti-spyware tools in Safe mode first. And if you need to do any downloads, use another machine that is known to be clean.
Make very sure your system does not have malware.
See <
http://www.elephantboycomputers.com/page2.html#Removing_Malware>
Sysclean would be a good first run for virus check. Just be sure to also run other spyware / malware checks.
The cleanup sequence I tend to follow is: Coolweb Shredder first, followed by Adaware, SYSCLEAN, and Antivirus check with current updates.
See The Parasite Fight Quick Fix Protocol at
http://www.aumha.org/a/quickfix.htm
See Dealing with Unwanted spyware and parasites at
http://mvps.org/winhelp2002/unwanted.htm
Specific to Mywebsearch do the following in Safe Mode:
<quoting Tech Guy at thetechguys.co.uk>
MWSOEMON.EXE - MyWebSearch Spyware
Mwsoemon.exe installs with a newer variant of the MyWebSearch spyware
program. Generally, a browser helper object called mwsbar.dll will install
at the same time.The toolbar does add search features but the search results
you see will be hijacked to mywebsearch.com.
MWSOEMON shown on the task manager ( Press Ctrl-Alt-Del ), then try to end
the task of the process mwsoemon.
Uninstall Myway MySpeedbar from Control Panel> Add/Remove programs. It
might be called 'My Search Bar', 'MyWay Speed Bar' or 'My Web Search Bar',
Click 'Remove' for what you find. Also remove 'Fun Web Products Easy
Installer' if it is present.
If not you can remove them manually by running Regedit and find MWSOEMON and
delete the key.
Restart computer and Find/Delete MWSOEMON.EXE.
</end quote>
While still in Safe Mode Windows, run MSCONFIG. Review the Startup tab. Look closely at all programs listed there.
Do a global "SEARCH" for MWSBAR*.* If any found that start with MWSBAR then delete them.
