Program causes "myway" to load into registry

[Guest]

Whenever I run this microsoft program, It puts in three
instances of "myway" a nasty spyware program in my
registry which I have to remove with hijackthis.

When I run hijackthis it puts a piece of spyware into IE
explorer found by running microsoft antispyware.

Any ideas to resolve this??

(e-mail address removed)

 

[Steve Wechsler [MVP]]

Whenever I run this microsoft program, It puts in three
instances of "myway" a nasty spyware program in my
registry which I have to remove with hijackthis.

Do you mean that it finds 3 instances ? It doesn't put these entries
into the registry, it detects them.

When I run hijackthis it puts a piece of spyware into IE
explorer found by running microsoft antispyware.

Again, it detects the spyware, it does not put them there.
Suggest you do a scan of the system with Hijack This with hidden files
and folders enabled. Close ALL programs and browsers prior to scanning :

How to Show System Files
http://www.xtra.co.nz/help/0,,4155-1916458,00.html


Check to remove the known spyware, click Fixed checked, close HT.
Then boot to Safe Mode and do a Full Scan of the system two times.

Reboot to Normal mode, do another scan with Hijack This to see if the
spyware reappears.


Steve Wechsler (akaMowGreen)
MVP Windows Server

 

[Bill Sanderson]

That's a pretty interesting set of findings. Please submit a Tools,
suspected spyware report from the infected machine.

One possible cause might be something which has hooked the Shell Execute
hooks.
You can examine these by going to tools, advanced tools, system explorers,
and then Shell Execute hooks in the left column.

I have two items there, both with gold stars indicating safety. URL Exec
Hook and Microsoft AntiSpyware.ShellExecuteHook.1

If you have anything else, either unknown or hazardous, I'd recommend
blocking it, and then running a couple of full scans in safe mode.