Hi, Jan: I guess AdAware must be UnAware that they don't detect anything
but adware ;-)
From the Lavasoft site:
"Ad-Aware is designed to provide advanced protection from known Data-mining,
aggressive advertising, Parasites, Scumware, selected traditional Trojans,
Dialers, Malware, Browser hijackers, and tracking components. With the
release of Ad-Aware SE Personal edition, Lavasoft takes the fight against
Spyware to the next level"
Tom
| HIi Garrett
|
| You most likely have some spy or malware on your system. AdAware is only
for
| adware, and does not detect or remove spyware, or other types of malware.
In
| addition to updating and running your AV, download, install and run the
| programs below in Safe Mode with Hidden Files enabled. Some forms of
| malware can replicate itself repeatedly if not removed properly, so even
if
| you have already run some programs, run them again according to the
| information below. Follow all instructions carefully:
|
| First, Clear the TIF's and empty the recycle bin:
|
http://www.mvps.org/winhelp2002/delcache.htm
| (The TIF size should be set to 50-60 MB. Larger caches tend to be more
prone
| to trouble)
|
| If so, then do the following:
|
| WARNING>>>> Backup all documents and files before removing any spyware!!
|
| How to properly scan for scumware (read first, if possible)
|
http://aumha.org/forum/viewtopic.php?t=5878
|
| Download and install BHODemon from
|
http://www.definitivesolutions.com/bhodemon.htm
| Your problem may be caused by a bad BHO.
|
| Most importantly, download install and run CWShredder here
|
http://www.majorgeeks.com/download3019.html
| and this program, which searches for hidden .dlls that recreate the
malware.
| About Buster:
|
http://www.majorgeeks.com/download4289.html
| Then visit these two sites to test for parasites and help basic cleaning:
| On-Line Check
|
http://aumha.org/a/noads.htm
| and
| Quick-Fix Protocol.
|
http://aumha.org/a/quickfix.php
| Basically, throw everything here at your "infection".
|
| Then download, install and immediately update these two programs before
| running:
|
| AdAware SE - Update immediately after installing
|
http://www.download.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button
| SpyBot S &D - Update immediately after installing
|
http://www.majorgeeks.com/download2471.html
|
| Download pocket killbox from Download pocket killbox from
|
http://www.thespykiller.co.uk/files/killbox.exe
| and put it on the desktop where you can find it easily
|
| Also download, install, and run HiJackThis - it is one of the very import
| tools to clean your system of all scumware. Follow the instructions
| carefully:
|
| How to download and install HiJackThis: (it does not need to be updated)
|
http://www.bleepingcomputer.com/forums/topict309.html
|
| Please DO NOT post your log to this newsgroup. It is important that you
go
| to one of the HiJackThis Support Forums below and allow the experts there
| to analyze it for youPlease DO NOT post your log to this newsgroup. It is
| important that you go to one of the HiJackThis Support Forums below and
| allow the experts there to analyze it for you.::
| AumHa HiJackThis Forum
|
http://forum.aumha.org/viewforum.php?f=30
| or Bleeping Computer Forum
|
http://www.bleepingcomputer.com/forums/forum22.html
| to allow the experts there to evaluate your log and advise you of any
| necessary steps to clean your system.
| (Note: You will have to Register before posting on these Forums. Please
| follow all posting instructions carefully to avoid having your log deleted
| or ignored.)
|
| Also, please post a link to the forum where you post your HJT log back to
| this thread so that we can follow your progress there.
|
| CAUTION!!!!! Before you try to remove spyware using any of the programs
| below, download a copy of LSPFIX from any of the following sites:
|
http://www.cexx.org/lspfix.htm
|
http://www.spychecker.com/program/winsockxpfix.html
| (if your OS is Win2k or XP) The process of removing certain malware may
kill
| your internet connection. If this should occur, this program, LSPFIX, will
| enable you to regain your connection.
|
| You should also get a copy of WINSOCKXPFIX available at:
|
http://www.spychecker.com/program/winsockxpfix.html
| and
| WinsockXP Fix- WinXP
|
http://www.spychecker.com/program/winsockxpfix.html
| with instructions, at
|
http://www.iup.edu/house/resnet/winfix.shtm
| also... From LavaSoft- all versions of Windows-
|
http://digital-solutions.co.uk/lavasoft/whndnfix.zip
| (NOTE: It is reported that in XP SP2, the command netsh winsock reset
| will fix this problem without the need for these programs.)
| or Winsock Fix Utility
|
http://www.dfwonline.net/files/WinsockFix.zip
|
| How to Restart in Safe Mode
|
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406
|
| How to Show Hidden Files
|
http://snipurl.com/6rl8
|
| Hope this helps
|
| Jan
| MS MVP - Windows (IE/OE)
| Smiles are meant to be shared,
| that's why they're so contagious.
|
| All information provided "As Is"
| Replies are posted only to the newsgroup for the benefit or other readers.
| How to make a good newsgroup post:
|
http://www.dts-l.org/goodpost.htm
|
|
|
|
| > Recently there were a number of favorites that attached themselves to my
| > favorites list. These links do not show up when I select to Organize
| > Favorites. I looked in the registry file and uninstalled and reinstalled
| > IE6.
| >
| > I ran Ad-aware SE and it did not see any spyware to delete.
| >
| > Anyway to delete these links? Ever heard of this?
|
|
