HIJACK THIS! Please :)

Reluctant_spender

Have you tried the Dr Web Cure It?

aliEnRIK

Actually

My main advice is to RESET INTERNET EXPLORER

Follow these steps to use the Reset Internet Explorer Settings feature from Internet Explorer 7:
1.In Internet Explorer 7, click the Tools menu, and then click Internet Options.
2.On the Advanced tab, click Reset.
3.In the Reset Internet Explorer Settings dialog box, click Reset.
4.When Internet Explorer 7 finishes restoring the default settings, click Close, and then click OK two times.
5.Close Internet Explorer 7.
The changes take effect the next time that you open Internet Explorer 7.

It will mean having to redo NETFLIX etc perhaps. But at least it (should) be clean.

minirolo2004

Reluctant - shes just doing that scan now...I think its a little overwhelming for her to be trying so many things..when all she wants is for spybot to allow her to delete it! Shes offline atm, obv cos shes in safe mode, but, ill post the log up when she returns.

Alienrik, ok, ill get her to reset IE7.

aliEnRIK

For some reason im getting a weird page when i goto page 3

Anyways (If you can read this)

It looks like your computers clean aside from the Internet explorer addons. Which is why I recommend taking it back to basics

best of luck

aliEnRIK

(I can see it fine now, this sites servers seems to throw random wobblers!)

minirolo2004

Reluctant, heres the log from the scan you put up.

slgclientservicesredists.exe\data002;C:\My Games\Cake Mania\slgclientservicesredists.exe;Adware.SpywareStorm;;
slgclientservicesredists.exe;C:\My Games\Cake Mania;Archive contains infected objects;Moved.;
A0126415.dll;C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1013;Adware.Zango.83;Incurable.Moved.;
A0129343.exe\data002;C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1032\A0129343.exe;Adware.SpywareStorm;;
A0129343.exe;C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1032;Archive contains infected objects;Moved.;
A0123214.dll;C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP989;Adware.Zango.82;Incurable.Moved.;
A0123219.dll;C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP989;Adware.Zango.83;Incurable.Moved.;
A0123221.dll;C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP989;Adware.Zango.82;Incurable.Moved.;

Reluctant_spender

Looks like the vast majority of that is in system restore.

How's things going now?

minirolo2004

Um, not sure, ill get her to run Spybot and see if its still showing up there.

minirolo2004

Spybot has picked it up again, and still wont let her delete it. Sigh....annoying when all other scans are taking like...5 hours! Any other suggestions?

minirolo2004

aliEnRIK wrote: »

Actually

My main advice is to RESET INTERNET EXPLORER

Follow these steps to use the Reset Internet Explorer Settings feature from Internet Explorer 7:
1.In Internet Explorer 7, click the Tools menu, and then click Internet Options.
2.On the Advanced tab, click Reset.
3.In the Reset Internet Explorer Settings dialog box, click Reset.
4.When Internet Explorer 7 finishes restoring the default settings, click Close, and then click OK two times.
5.Close Internet Explorer 7.
The changes take effect the next time that you open Internet Explorer 7.

It will mean having to redo NETFLIX etc perhaps. But at least it (should) be clean.

Did this, CIRIX ICA CLIENT was still there afterwards, disabled now.