Hope you noticed that I combined your two threads into this one
Go to Add/Remove and look for and uninstall
MessengerPlus3
WeatherBug
MyWebSearch
You may also want to uninstall any of the following items associated with FunWebProducts that also may be in Add/Remove.
* My Web Search (Smiley Central or FWP product as applicable)
* My Way Speedbar (Smiley Central or other FWP as applicable)
* My Way Speedbar (AOL and Yahoo Messengers) (beta users only)
* My Way Speedbar (Outlook, Outlook Express, and IncrediMail)
* Search Assistant - My Way
Next Reboot the computer.
Run a new scan with HiJackThis and place a checkmark next to any of these entries that remain.
O2 - BHO: My Web Search Bar BHO - {8EAB99C1-F9EC-4b64-A4BA-D9BCAE8779C2} - C:\Program Files\MyWebSearchWB\bar\1.bin\W6BAR.DLL
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\RunOnce: [ws_uninst] C:\DOCUME~1\Joseph\LOCALS~1\Temp\ws_uninst.exe -s
O4 - HKLM\..\RunOnce: [ea_cleanup] C:\DOCUME~1\Joseph\LOCALS~1\Temp\ea_cleanup.exe /cleanup
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O23 - Service: Panda Process Protection Service (PavPrSrv) - Unknown owner - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: X10 Device Network Service (x10nets) - Unknown owner - C:\PROGRA~1\ATIMUL~1\RemCtrl\x10nets.exe (file missing)
Once you have placed all the checkmarks then click the FIX button.
Exit HJT and reboot the computer.
Open My Computer, Drive C, and double-click on the Program Files folder
7) Right-click and delete the folders (if found) for:
FunWebProducts
MyWebSearch
AWS\WeatherBug
MessengerPlus! 3
Reboot the computer.
Run AdAwareSE and Spybot S & D (which you should have downloaded and run earlier if following instructions on PP's link) and fix everything found to be sure you have removed some minor registry entries left behind by the uninstall.
Reboot again and run a new scan with HJT and post the new log here.
Reply With Quote