Forum Home
Press F1
 
Thread ID: 44372 2004-04-17 00:12:00 VX2.BetterInternet donna (1667) Press F1
Post ID Timestamp Content User
229957 2004-04-18 01:17:00 Donna, your log looks pretty clean to me. There are only two that I would see as being suspect and I am not sure that they would have anything to do with BetterInternet:

R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [FastUser] C:\WINDOWS\System32\fast.exe

Run HijackThis again and put a tick beside those two for it to fix then reboot your computer.


Before running Hijack this again do the following:

Firstly close your internet browser and all other programs.

In Control Panel select Internet Options then click Clear History, Delete Cookies and Delete Files buttons (also tick the box next to 'Delete all off-line content').

Clear the contents of the C:\Windows\Cookies, Temporary Internet Files and Temp folders.

Reboot your computer then run HijackThis as above.
Susan B (19)
229958 2004-04-18 02:24:00 Susan

Followed your instructions and when I rebooted the checkdisk ran again. Ran Hijack this again and the 2 files that I fixed were gone. Ran ad aware again and still get this:

VX2.BETTERINTERNET
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
obj[0]=RegKey : SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Guardian
obj[1]=File : c:\windows\system32\aed.cpy.dll

When I try and delete them I get this:

Some objects could not be removed,
Try closing all open browser windows prior to the removal.
If this does not help, reboot and run Ad-aware again.

obj[1]=File : c:\windows\system32\aed.cpy.dll

Do you want to let Ad-aware remove them after the next reboot?

If I say yes and reboot, it does not begin after reboot and if I start ad aware again manually I have them both back again and get the same message.

Thanks
donna (1667)
229959 2004-04-18 06:23:00 A bit of searching comes up with Winlogon\Notify\Guardian as something best removed but I am uncertain about the other entry . I would say that both should be removed, obviously, and it is a bit of a puzzle why Adaware is struggling with the job since it is the one that detected it in the first place .

For the Guardian entry have a look at this page ( . computercops . us/postp139279 . html" target="_blank">www . computercops . us) for suggestions on how to remove it . Note also that there are instructions on how to remove another . dll file that may assist you with removing the aed . cpy . dll that you have .

See if it helps at all and let us know how you get on .
Susan B (19)
229960 2004-04-18 07:15:00 Hi Susan

You are the greatest .... Used the recovery console as mentioned in the web site to delete aed.dll and aed.cpy.dll, rebooted and ran ad aware again and it was all gone. Thought I better reboot again to make sure I never get the checkdisk again, but no, it was all good, then reran adaware again and still all gone.

I cannot thank you enough, this has been driving me nuts for the last 2 days, so thanks.
Donna
donna (1667)
229961 2004-04-18 08:31:00 That's great news Donna, well done. :-) Susan B (19)
1 2