Is this a nasty???

shown73

System re-booted after moving.

waddler_8

Go to the folder C:\_otm\movedfiles

The log should be there.

shown73

========== COMMANDS ==========
Restore point Set: OTM Restore Point
========== PROCESSES ==========
All processes killed
========== SERVICES/DRIVERS ==========
Error: No service named Web Assistant Updater was found to stop!
Service\Driver key Web Assistant Updater not found.
Service WajamUpdater stopped successfully!
Service WajamUpdater deleted successfully!
========== FILES ==========
< dir c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1 /s /c >
Volume in drive C has no label.
Volume Serial Number is 16BA-2455
Directory of c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
25/12/2012 19:42 <DIR> .
25/12/2012 19:42 <DIR> ..
21/08/2012 13:01 1,977,816 GEARDIFx.exe
25/12/2012 19:42 <DIR> x86
1 File(s) 1,977,816 bytes
Directory of c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1\x86
25/12/2012 19:42 <DIR> .
25/12/2012 19:42 <DIR> ..
21/08/2012 13:01 323,464 DIFxAPI.dll
21/08/2012 13:01 115,672 DifXInst32.exe
25/12/2012 19:42 3,982 DIFxInstallLog.txt
21/08/2012 13:01 106,928 GEARAspi.dll
21/08/2012 13:01 2,704 GEARAspiWDM.inf
21/08/2012 13:01 7,587 gearaspiwdmx86.cat
25/12/2012 19:42 <DIR> x86
6 File(s) 560,337 bytes
Directory of c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1\x86\x86
25/12/2012 19:42 <DIR> .
25/12/2012 19:42 <DIR> ..
21/08/2012 13:01 26,840 GEARAspiWDM.sys
1 File(s) 26,840 bytes
Total Files Listed:
8 File(s) 2,564,993 bytes
8 Dir(s) 362,687,451,136 bytes free
C:\Users\000000\Desktop\cmd.bat deleted successfully.
C:\Users\000000\Desktop\cmd.txt deleted successfully.
c:\program files\Wajam\Updater folder moved successfully.
c:\program files\Wajam folder moved successfully.
File/Folder c:\program files\web assistant not found.
========== COMMANDS ==========
Restore point Set: OTM Restore Point

OTM by OldTimer - Version 3.1.21.0 log created on 01232013_212340

shown73

Thanks, easy isn't it!!! If I'm reading that correctly, its worked.

waddler_8

Yes, it worked.

Where exactly was spybot detecting that wajam29.zip file?

OTM moved the wajam folders I can see.

c:\program files\Wajam\Updater folder moved successfully.
c:\program files\Wajam folder moved successfully

shown73

Don't really know, just came up as one of 4 items when I ran Spybot. When I clicked fix selected issues, other 3 went ok, but this one appeared with a cross against it, and couldn't be dealt with, then Avira chimed in with an alert, and couldn't seem to deal with it either.

waddler_8

Lets see if we can find it.

Download SystemLook from the link below and save it to your Desktop.

LINK

• Right-click SystemLook.exe and choose Run as Administrator to run it.
• Copy the content of the following codebox into the main textfield.
  Do not include the word Code:

  :filefind
  wajam29.*
  

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. Post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

shown73

SystemLook 30.07.11 by jpshortstuff
Log created at 22:25 on 23/01/2013 by 000000
Administrator - Elevation successful
========== filefind ==========
Searching for "wajam29.*"
No files found.
-= EOF =-

shown73

Not very helpful??

waddler_8

Try this instead.

• Right-click SystemLook.exe and choose Run as Administrator to run it.
• Copy the content of the following codebox into the main textfield.
  Do not include the word Code:

  :filefind
  *wajam*
  

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. Post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt