Prometheus

finally, got rid of that file heres the new log Logfile of HijackThis v1.99.1 Scan saved at 6:33:02 PM, on 02/03/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000) Running processes: C:\WINXP\System32\smss.exe C:\WINXP\system32\winlogon.exe C:\WINXP\system32\services.exe C:\WINXP\system32\lsass.exe C:\WINXP\system32\svchost.exe C:\WINXP\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program

i think i found why i was having problems of getting rid of those registry values in my windows. as i followed the instructions and went into safe mode, there i was able to find the elitefad32 file, yet the antivirus.exe was still missing, i ran hijackthis fixed it, and deleted it. nothing would reapear in the registry and everything was fine. one question arose though, why would a file be in existance in safe mode and not in normal windows? when i rebooted the registry values were once again where they were and nothing changed, i then realized that my ad-watch has been set to automatic , as w

i guess the question is ..... can anything be done about those files? ________________________________________________________________ O4 - HKLM\..\Run: [userFaultCheck] %systemroot%\system32\dumprep 0 -u O4 - HKLM\..\Run: [antivirus32] ANTIVIRUS.EXE O4 - HKLM\..\Run: [antiware] C:\winxp\system32\elitefad32.exe O4 - HKCU\..\RunOnce: [antivirus32] ANTIVIRUS.EXE

oky here it is Logfile of HijackThis v1.99.1 Scan saved at 9:03:55 PM, on 24/02/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000) Running processes: C:\WINXP\System32\smss.exe C:\WINXP\system32\winlogon.exe C:\WINXP\system32\services.exe C:\WINXP\system32\lsass.exe C:\WINXP\system32\svchost.exe C:\WINXP\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINXP\system32\spoolsv.exe C:\Program File

i did as instructed, yet still no file present, or to be found...

there is only one system32 folder , the WINXP i changed from generic WINDOWS during the last format due to spyware problems, and the path is correct, yet the file is missing.....

umm what do i do if i am unable to locate the two files elitefad32.exe does not exist in the system32 folder and when i did the find, neither of the two files were discovered or found, yet some how, magically, they reappear in the registry also when i use spybot search and destroy system internals scan it tells me this:

thanx alot, ill await patiently

Hi. i have tried so far to remove all the spyware/adware/malware on my own uding, Ad-Aware SE, Search & Destroy, and Microsoft's Antiware, and thusfar all attempts have been unsuccessfull, every 2 to 4 hours i run the damn services new stuff keeps popping up, gets deleted, and there it is again the next scan. its getting very annoying especially with pop-ups that if not for ad-watch keep popping up every freaking minute. help?!? greatly appreciate it in advance. here is my log : Logfile of HijackThis v1.99.1 Scan saved at 6:19:08 PM, on 21/02/2005 Platform: Windows XP (WinNT 5.01.2600)