Possible AdWare not caught

[Ken W]

I Just installed MSAS this morning. It seems to work
well.

Before installing it I found some questional startup
commands using msconfig.

Startup Item: WFXScanR[1]
Command: C:\Documents and Settings\user\Local
Settings\Temporary Internet Files\Content.IE5.QHROPKZ2
\WFXScanR[1].exe

Location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Also a similar one with the name WAS5Scan[1]
Apparently, they are programs that get downloaded and run
on startup.

I got them to stop running by deleting my temporary
internet files, but I do not know how to get them out of
startup.

I reenabled them in msconfig, then ran MSAS.
It did spot another spyware from 180Solutions, but it did
not find these. Maybe it is because I already deleted
the Temporary Internet Files.

Was MSAS supposed to flag/delete this out of my startup?
msconfig can disable them, but does anyone know how to
remove them?

Ken W.

 

[Mikolaj]

Was MSAS supposed to flag/delete this out of my startup?

msconfig can disable them, but does anyone know how to
remove them?

Ken W.

The msconfig shows whether such file is started by a shortcut in the Startup
folder or a path in the registry.
Take a look again in msconfig and check how it is started and delete proper
entry from Startup folder in Start menu or the apriopriate key in the
registry (run regedit.exe, find the proper key and remove - but be very,
very, VERY carefull what are you removing or ask someone more experienced
for assistance, because a mistake in deleting registry entries may cause the
system to not function at all).

 

[Guest]

I somehow got 180Solutions-? If you get it, remove it NOW !! Don't listen to
the false removal windows. GET rebooted in SAFE MODE and get it out , don't
wait. Whoever labaled this "adware" should include complete takeover of
registry !! It will also destroy your "live update" if you have SYmantec !