Thanks for running the tools:
At least we know that besides the restore folders the rest of the computer appears free of the worm
ran custom cleanup and checked all boxes except DELETE PREFETCH FILES. this option was shaded out.
Not to worry about Prefetch, that was twice yesterday I forgot to remove that from my copy and paste
That's for an XP system
Can you do the following please
Follow the instructions to disable system restore
1. Click Start, Settings, and then click Control Panel.
2. Double-click the System icon. The System Properties dialog box appears.
NOTE: If the System icon is not visible, click "View all Control Panel options" to display it.
3. Click the Performance tab, and then click File System.
4. Click the Troubleshooting tab, and then check Disable System Restore.
5. Click OK.and then click Close.
Reboot the computer
Back in Windows
Go back and reenable system restore
1. Click Start, point to Settings, and then click Control Panel.
2. Double-click System, and then click the Performance tab.
3. Click File System, and then click the Troubleshooting tab.
4. Uncheck Disable System Restore.
5. Click OK.# and then click Close.
# Click Yes to restart.
That should start you with fresh restore points and you won't find those 2 entries with ad-aware
This worm is usually contacted with your filesharing programs, ensure you scan a file your download with your Anti-virus before opening it
Do you have SpywareBlaster 3.5.1 installed on this machine?
If not
*Install
SpywareBlaster 3.5.1 by JavaCool *Will block bad ActiveX Controls
*Block Malevolent cookies in Internet Explorer and Firefox
*Restrict actions of potentially dangerous sites in Internet Explorer
After installation, Check for updates and then click the "Enable all protection"
"Check for updates every couple of weeks"after every update just simply click the
"enable protection on all unprotected items"How are you connected to the Internet>>>Cable, DSL?
I don't see a software firewall installed,
A firewall provides a line of defense against someone who might try to access your computer without your permission
I would link you too Kerio's but your operating system is not supported
Here is a direct link to an older version of Sygate's firewall
Save the installer to your desktop and then run the installer from there
I'm still running it on one of my systems, very easy to use
I suggest you install it
If you have any problems with it, let me know and we can get you a different one
This is a version which had no conflicts with Windows 98 or ME
Sygate personal firewall 5.5 version 2710Once installed and you have rebooted the computer
If prompted to update, don't
Instead, Double click on Sygate's icon by the clock
Click on TOOLS>>OPTIONS>>UPDATES
UNCHECK>>Automatically Check for new versions
OK out of there
If you get tired of being notified about something that Sygate's has blocked
Simply go back to tools>>Options>>Under General >>check Hide Notification messages
Hold onto Ad-Aware, it's also yours for free to update and run a scan every couple of weeks
In addition: Like I recommended with your other computer, I would also use Spybot 1.4
You can download it from
Spybot 1.4 from
HERE or
HEREAfter installation--Click the
UPDATE button on the left
SEARCH FOR UPDATES on the right
Check, and then download all updates
After update is complete
Click the "Immunize" button on the left>>>OK at the prompt>>Immunzine at the top green cross
Please Immunize after every update
To run a scan
Click the "Search & Destroy" button on the left
"Check for Problems"---When the Scan is complete
FIX all selected promblems in RED
RESTART the computer to finish any cleaning process
NOTE: Now that you have Avast installed, ensure to hold onto it
If you right click on the Avast Icon and click on On Access protections>>>>Details
You will notice all the available scanners running
If you don't need one running
Highlight the scanner on the left and Terminate it on the right
You MUST leave Standard shield and Internet Email running
The others are optional
P2P scanner>>Since you use filesharing programs, you might want to leave it running
Instant Messenger scanner>>If you don't use IM, you can terminate it, but it appears you do use IM, I would leave it running
Outlook/Exchange scanner>>If not needed, terminate, not too be confused with Outlook Express which is supported by the Internet Email scanner
Here's more info
http://www.avast.com/eng/avast_4_home.htmlStay safe
http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/smile.gif\' class=\'bbc_emoticon\' alt=\'
\' />
