[gamiseta]

This thread is a continuation of this one (one of the guys told me to ask this question in this section of the forum) http://www.computer-juice.com/forums...nfusing-21769/

Just to add details
- I've got CA security (the whole thing, anti-virus, firewall, anti-spyware, etc., when I do a virus scan, no viruses show up
- My subscription expired a week or so ago and I just renewed it the other day, so I was using my computer for about 5 days while it was expired...but I've had this problem long before my CA subscription expired
- Also want to add (forgot to mention this in the other topic), when I open pretty much any program, for some reason Microsoft Office Professional Edition 2003 tries to install but it ends up showing me this error message- Installation Error: File not Found...This problem recently started, I think during the period when my CA subscription was expired
- Finally, should I do what is said in this link (seems like a lot of work for a guy who is clueless with computers) http://www.computer-juice.com/forums...-posting-7476/ or does this problem require something else?

Thanks for all help

P.S. My computer seems to be running fairly fine, except for my Internet Explorer freezing sometimes (rarely) in the past week or so

[evilfantasy]

Go ahead and run the scans here http://www.computer-juice.com/forums...-posting-7476/

Post the 3 logs when complete.

[gamiseta]

Step One

I've attached a screen shot of my Uninstall or Change a Program window, named UninstallChange

Unknown or Suspicious looking programs are-
MSXML 4.0 SP2 (KB954430) : No idea what it is and does, cant find any info on my computer about it
NVIDIA Drivers : I've attached a screen shot of what files this folder contains, named "NVIDIA" (If the Screen Shot isnt big enough to read, let me know and I will post another one)
ANWIDA Soft DX Reverb Light 2.0 : No idea what this does, cant find any info on my computer about it.

Also I'm not 100% sure what those Adobe programs do (3 of them), is it safe to delete some of them or all of them? I think I needed them in the past (cant remember what for) but I dont think I need them anymore?

Be right back for Step Two,

Have to close window

[gamiseta]

I just completed Step Two & Step Three

Here is my SUPERAntiSpyware Scan Log

SUPERAntiSpyware Scan Log
http://www.superantispyware.com
Generated 02/01/2009 at 04:40 AM
Application Version : 4.25.1012
Core Rules Database Version : 3738
Trace Rules Database Version: 1707
Scan type : Complete Scan
Total Scan Time : 00:36:31
Memory items scanned : 689
Memory threats detected : 0
Registry items scanned : 6867
Registry threats detected : 22
File items scanned : 21074
File threats detected : 0
Adware.Zango/ShoppingReport
HKLM\Software\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B2}
HKLM\Software\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B3}
HKCR\ShoppingReport.HbAx
HKCR\ShoppingReport.HbAx.1
HKCR\ShoppingReport.HbAx.1\CLSID
HKCR\WeatherDPA.WeatherController
HKCR\WeatherDPA.WeatherController\CLSID
HKCR\WeatherDPA.WeatherController\CurVer
HKCR\WeatherDPA.WeatherController.1
HKCR\WeatherDPA.WeatherController.1\CLSID
HKLM\Software\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B2}#Default Visible
HKLM\Software\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B2}#ButtonText
HKLM\Software\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B2}#HotIcon
HKLM\Software\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B2}#Icon
HKLM\Software\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B2}#CLSID
HKLM\Software\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B2}#ClsidExtension
HKLM\Software\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B3}#Default Visible
HKLM\Software\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B3}#ButtonText
HKLM\Software\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B3}#HotIcon
HKLM\Software\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B3}#Icon
HKLM\Software\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B3}#CLSID
HKLM\Software\Microsoft\Internet Explorer\Extensions\{C5428486-50A0-4a02-9D20-520B59A9F9B3}#ClsidExtension

[evilfantasy]

MSXML 4.0 SP2 (KB954430) - This is a Windows Update

NVIDIA Drivers - Related to your Video card

ANWIDA Soft DX Reverb Light 2.0 - I'm not sure about this, it's not dangerous. See here: http://www.anwida.com/product.asp?pid=7

[gamiseta]

Step Four Completed

Here is the MBAM-Log

Malwarebytes' Anti-Malware 1.33
Database version: 1712
Windows 6.0.6001 Service Pack 1
1/02/2009 5:06:11 AM
mbam-log-2009-02-01 (05-06-11).txt
Scan type: Quick Scan
Objects scanned: 47500
Time elapsed: 4 minute(s), 18 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{1a26f07f-0d60-4835-91cf-1e1766a0ec56} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MediaHoldings (Adware.PlayMP3Z) -> Quarantined and deleted successfully.
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)

[gamiseta]

Originally Posted by evilfantasy

MSXML 4.0 SP2 (KB954430) - This is a Windows Update

NVIDIA Drivers - Related to your Video card

ANWIDA Soft DX Reverb Light 2.0 - I'm not sure about this, it's not dangerous. See here: http://www.anwida.com/product.asp?pid=7

ah OK thanks for that

I just tried deleting that ANWIDA program through 'Uninstall or Change a Program' and recieved the following message "The log file 'C:\Program Files\ANWIDA Soft\DX Reverb Light\Uninst.isu' is not valid or the data has been corrupted. Uninstallation will not continue."

Whats going on there?

[gamiseta]

Just another question before I move onto step 5...Since I have Adobe Flash Player 10 ActiveX, is it necessary to also have Adobe Flash Player Plugin installed on my computer?

And also, is Adobe Reader necessary or handy to have installed on my computer?

Sorry about the hassle but I dont want to delete anything if I will need it

Thanks

[evilfantasy]

The Adobe Flash Player Pluginis likely for Firefox so yes you need it.

Adobe Reader is necessary for many web pages to display properly.

The log file 'C:\Program Files\ANWIDA Soft\DX Reverb Light\Uninst.isu' is not valid or the data has been corrupted. Uninstallation will not continue.

Be sure to remind me before we finish and we will deal with that.

[gamiseta]

^^^No probs

I have now completed Step Five and now I'm up to Step Six, The problem I was having with installing certain programs is now fine but I'm still having the same problem with Microsoft Office Professional Edition 2003 trying to install all the time, I will continue to Step Eight and see how that goes

----------------------------------

From Step Six-
<LI itxtvisited="1">Posting the logs is still suggested even if you think the PC is clean.
^^^Does that mean I should re-scan and re-post my SUPERAntiSpyware Scan Log and MBAM-Log before I go on?

---------------------------------

Anyway, its getting late where I am so I will do the rest tomorrow, thanks for all your help, EF

see ya soon