Results 1 to 10 of 14

Thread: Misshapen Desktop

Hybrid View

  1. #1
    Join Date
    Aug 2008
    Posts
    6
    Thanks for the quick replies. ^^

    I've done as asked and here are both new logs.
    Attached Files Attached Files

  2. #2
    Join Date
    Aug 2006
    Location
    The Middle
    Age
    80
    Posts
    4,079
    Please do the following;
    First, uninstall the My Web Search option from Add/Remove Programs

    1) Click on Start, Settings, Control Panel

    2) Double click on Add/Remove Programs

    3) uninstall any of the following items that you find in the list by clicking the Change/Remove button next to it. ALL of these programs are considered to be malware.
    FunWebProducts.
    My Web Search (Smiley Central or FWP product as applicable)
    My Way Speedbar (Smiley Central or other FWP as applicable)
    My Way Speedbar (AOL and Yahoo Messengers) (beta users only)
    My Way Speedbar (Outlook, Outlook Express, and IncrediMail)
    Search Assistant - My Way
    Reboot your Computer and run HijackThis

    5) Run HJT again and place a checkmark next to any of the entries shown below if they remain;
    O3 - Toolbar: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - (no file)
    O4 - HKUS\S-1-5-21-1501462054-3012986779-3605650290-1009\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe (User 'Amanda')
    O4 - HKUS\S-1-5-21-1501462054-3012986779-3605650290-1009\..\Run: [My Web Search Community Tools] "C:\Program Files\MyWebSearch\bar\1.bin\m3IMPipe.exe" (User 'Amanda')
    O4 - S-1-5-21-1501462054-3012986779-3605650290-1013 Startup: RollerCoaster Tycoon 3 Registration.lnk = C:\Documents and Settings\brandon\Local Settings\Temp\{74592257-A63A-4A32-860E-28FB98002937}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe (User 'brandon')
    O4 - S-1-5-21-1501462054-3012986779-3605650290-1013 User Startup: RollerCoaster Tycoon 3 Registration.lnk = C:\Documents and Settings\brandon\Local Settings\Temp\{74592257-A63A-4A32-860E-28FB98002937}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe (User 'brandon')
    O4 - S-1-5-18 Startup: RollerCoaster Tycoon 3 Registration.lnk = C:\Documents and Settings\brandon\Local Settings\Temp\{74592257-A63A-4A32-860E-28FB98002937}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe (User 'SYSTEM')
    O4 - .DEFAULT Startup: RollerCoaster Tycoon 3 Registration.lnk = C:\Documents and Settings\brandon\Local Settings\Temp\{74592257-A63A-4A32-860E-28FB98002937}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe (User 'Default user')
    O21 - SSODL: IHVYhdJfMnm - {BCE982A9-1643-2803-8A98-80A2A80AC426} - C:\WINDOWS\system32\gkts.dll (file missing)
    Click the Fix Checked button.
    Exit HJT. Reboot the computer.

    6) Next, open My Computer, Drive C, and double-click on the Program Files folder

    7) Right-click and delete the folders for:

    *FunWebProducts
    * MyWebSearch

    8) MyWebSearch should now be completely uninstalled from your computer.
    Reboot the computer. Run HJT again and save the log and post it back here.
    Judy

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •