Thanks for the quick replies. ^^
I've done as asked and here are both new logs.
Thanks for the quick replies. ^^
I've done as asked and here are both new logs.
Please do the following;
First, uninstall the My Web Search option from Add/Remove Programs
1) Click on Start, Settings, Control Panel
2) Double click on Add/Remove Programs
3) uninstall any of the following items that you find in the list by clicking the Change/Remove button next to it. ALL of these programs are considered to be malware.
FunWebProducts.
My Web Search (Smiley Central or FWP product as applicable)
My Way Speedbar (Smiley Central or other FWP as applicable)
My Way Speedbar (AOL and Yahoo Messengers) (beta users only)
My Way Speedbar (Outlook, Outlook Express, and IncrediMail)
Search Assistant - My Way
Reboot your Computer and run HijackThis
5) Run HJT again and place a checkmark next to any of the entries shown below if they remain;
O3 - Toolbar: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - (no file)
O4 - HKUS\S-1-5-21-1501462054-3012986779-3605650290-1009\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe (User 'Amanda')
O4 - HKUS\S-1-5-21-1501462054-3012986779-3605650290-1009\..\Run: [My Web Search Community Tools] "C:\Program Files\MyWebSearch\bar\1.bin\m3IMPipe.exe" (User 'Amanda')
O4 - S-1-5-21-1501462054-3012986779-3605650290-1013 Startup: RollerCoaster Tycoon 3 Registration.lnk = C:\Documents and Settings\brandon\Local Settings\Temp\{74592257-A63A-4A32-860E-28FB98002937}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe (User 'brandon')
O4 - S-1-5-21-1501462054-3012986779-3605650290-1013 User Startup: RollerCoaster Tycoon 3 Registration.lnk = C:\Documents and Settings\brandon\Local Settings\Temp\{74592257-A63A-4A32-860E-28FB98002937}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe (User 'brandon')
O4 - S-1-5-18 Startup: RollerCoaster Tycoon 3 Registration.lnk = C:\Documents and Settings\brandon\Local Settings\Temp\{74592257-A63A-4A32-860E-28FB98002937}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: RollerCoaster Tycoon 3 Registration.lnk = C:\Documents and Settings\brandon\Local Settings\Temp\{74592257-A63A-4A32-860E-28FB98002937}\{907B4640-266B-4A21-92FB-CD1A86CD0F63}\ATR1.exe (User 'Default user')
O21 - SSODL: IHVYhdJfMnm - {BCE982A9-1643-2803-8A98-80A2A80AC426} - C:\WINDOWS\system32\gkts.dll (file missing)
Click the Fix Checked button.
Exit HJT. Reboot the computer.
6) Next, open My Computer, Drive C, and double-click on the Program Files folder
7) Right-click and delete the folders for:
*FunWebProducts
* MyWebSearch
8) MyWebSearch should now be completely uninstalled from your computer.
Reboot the computer. Run HJT again and save the log and post it back here.
Judy
There are currently 1 users browsing this thread. (0 members and 1 guests)