Hello George
First of all - send a Suspected Spyware Report through the
Tools menu of MSAS to the SpyNet.
Generally, in a case where the item is identified, but not
properly removed, the next steps are:
1) update both Microsoft Antispyware and your antivirus
application.
2) restart in safe mode by pressing the F8 function key
before the first Windows screen appears at startup.
3) do full deep scans with Microsoft Antispyware. Repeat
scanning until a complete scan comes through clean. Ditto
with the antivirus.
This isn't guaranteed, but it works for a great many items
that at first appear not to be cleaned in normal mode.
Get HijackThis from
http://tomcoyote.org/hjt/hjt199//HijackThis.exe
and let it Scan your system and Save Log. (Save it where
you can find it again.) then send the log to:
(
http://aumha.net/viewforum.php?f=30)
(
http://www.bleepingcomputer.com/forums/forum22.html)
(
http://castlecops.com/forum67.html)
(
http://forums.maddoktor2.com/index.php?showforum=17)
(
http://www.spywarewarrior.com/viewforum.php?f=2)
(
http://forums.spywareinfo.com/index.php?showforum=18)
(
http://www.wilderssecurity.com/forumdisplay.php?f=24)
(
http://boards.cexx.org/viewforum.php?f=1)
(
http://www.malwarebytes.biz/forums/index.php?
showforum=5)
(
http://forum.gladiator-antivirus.com/index.php)
(
http://www.dslreports.com/forum/security)
Since HijackThis does not (yet) come with a install
routine, create a folder via Windows Explorer for
HijackThis, then move the file to this folder.
This way any backups created are saved in a legit folder.
In too many instances where the user runs HijackThis from
a temp folder and any backups are lost if that temp folder
is cleaned out.
You should also make sure you are using the latest
version each and every time you run HijackThis, as there
are new detections added all the time.
Unzip, double-click "HijackThis.exe" and Press "Scan".
When the scan is finished, the "Scan" button will change
into a "Save Log" button.
Click: "Save Log" (generates: "hijackthis.log") HijackThis
Tutorial (recommended read)
http://www.spywareinfo.com/~merijn/htlogtutorial.html#o8
For Hijack this
Lavasoft also has a HijackThis section at their Forum.
And most importantly, when your problem is resolved, let
everyone know!!! Many people put a lot of time and effort
into helping. Let them know what suggestions worked.
Good luck
Engel
20050802 11:02
