Problem to remove aBetterInternet

[wikiwiki]

i got from a riend an ADware 6 pro and i justdid a Full scan on safe mode heres is got :


Lavasoft Ad-aware Professional Build 6.181
Logfile created on :Wednesday, August 17, 2005 9:52:37 PM
Using reference-file :01R347 26.10.2004
______________________________________________________

Ad-aware Settings
=========================
Set : Activate in-depth scan (Recommended)
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep scan registry


8-17-2005 9:52:37 PM - Scan started. (Custom mode)

Listing running processes
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ThreadCreationTime : 8-18-2005 2:50:41 AM
BasePriority : Normal


#:2 [winlogon.exe]
FilePath : \??\F:\WINDOWS\SYSTEM32\
ThreadCreationTime : 8-18-2005 2:50:50 AM
BasePriority : High


#:3 [services.exe]
FilePath : F:\WINDOWS\system32\
ThreadCreationTime : 8-18-2005 2:50:52 AM
BasePriority : Normal
FileSize : 105 KB
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
CompanyName : Microsoft Corporation
FileDescription : Services and Controller app
InternalName : services.exe
OriginalFilename : services.exe
ProductName : Microsoft
Created on : 8/29/2002 12:00:00 PM
Last accessed : 8/18/2005 2:50:52 AM
Last modified : 8/4/2004 7:56:55 AM

#:4 [lsass.exe]
FilePath : F:\WINDOWS\system32\
ThreadCreationTime : 8-18-2005 2:50:52 AM
BasePriority : Normal
FileSize : 13 KB
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
OriginalFilename : lsass.exe
ProductName : Microsoft
Created on : 8/29/2002 12:00:00 PM
Last accessed : 8/18/2005 2:50:52 AM
Last modified : 8/4/2004 7:56:50 AM

#:5 [svchost.exe]
FilePath : F:\WINDOWS\system32\
ThreadCreationTime : 8-18-2005 2:50:54 AM
BasePriority : Normal
FileSize : 14 KB
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 8/29/2002 12:00:00 PM
Last accessed : 8/18/2005 2:50:54 AM
Last modified : 8/4/2004 7:56:57 AM

#:6 [svchost.exe]
FilePath : F:\WINDOWS\system32\
ThreadCreationTime : 8-18-2005 2:50:55 AM
BasePriority : Normal
FileSize : 14 KB
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 8/29/2002 12:00:00 PM
Last accessed : 8/18/2005 2:50:54 AM
Last modified : 8/4/2004 7:56:57 AM

#:7 [explorer.exe]
FilePath : F:\WINDOWS\
ThreadCreationTime : 8-18-2005 2:51:00 AM
BasePriority : Normal
FileSize : 1008 KB
FileVersion : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 6.00.2900.2180
CompanyName : Microsoft Corporation
FileDescription : Windows Explorer
InternalName : explorer
OriginalFilename : EXPLORER.EXE
ProductName : Microsoft
Created on : 8/29/2002 12:00:00 PM
Last accessed : 8/18/2005 2:51:01 AM
Last modified : 8/4/2004 7:56:49 AM

#:8 [ad-aware.exe]
FilePath : F:\Program Files\Lavasoft\Ad-aware 6\
ThreadCreationTime : 8-18-2005 2:51:46 AM
BasePriority : Normal
FileSize : 724 KB
FileVersion : 6.0.1.183
ProductVersion : 6.0.0.0
Copyright : Copyright
CompanyName : Lavasoft Sweden
FileDescription : Ad-aware 6 core application
InternalName : Ad-aware.exe
OriginalFilename : Ad-aware.exe
ProductName : Lavasoft Ad-aware Plus
Created on : 8/18/2005 1:26:58 AM
Last accessed : 8/18/2005 2:51:46 AM
Last modified : 7/13/2003 3:01:58 AM

Memory scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 0


Started registry scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Windows Object recognized!
Type : RegData
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Value : Shell
Data :


Registry scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 1
Objects found so far: 1


Started deep registry scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Deep registry scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 1


Deep scanning and examining files (C
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Other Object recognized!
Type : File
Data : kmd.exe
Object : C:\Documents and Settings\Sergio Pons\My Documents\DSS\
FileSize : 133 KB
Created on : 10/22/2003 4:40:41 AM
Last accessed : 8/18/2005 3:00:32 AM
Last modified : 4/25/2002 1:55:32 AM



Disk scan result for C:\
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 2


Deep scanning and examining files (F
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Tracking Cookie Object recognized!
Type : File
Data : sergio pons@2o7[1].txt
Object : F:\Documents and Settings\Sergio Pons\Cookies\

Created on : 8/18/2005 12:53:05 AM
Last accessed : 8/18/2005 3:07:14 AM
Last modified : 8/18/2005 12:53:05 AM



Tracking Cookie Object recognized!
Type : File
Data : sergio pons@ads.addynamix[1].txt
Object : F:\Documents and Settings\Sergio Pons\Cookies\

Created on : 8/17/2005 6:34:23 PM
Last accessed : 8/18/2005 3:07:14 AM
Last modified : 8/17/2005 6:34:23 PM



Tracking Cookie Object recognized!
Type : File
Data : sergio pons@adserver.pollstar[1].txt
Object : F:\Documents and Settings\Sergio Pons\Cookies\

Created on : 8/17/2005 3:52:02 PM
Last accessed : 8/18/2005 3:07:14 AM
Last modified : 8/17/2005 3:52:02 PM



Tracking Cookie Object recognized!
Type : File
Data : sergio pons@advertising[1].txt
Object : F:\Documents and Settings\Sergio Pons\Cookies\

Created on : 8/17/2005 3:43:05 PM
Last accessed : 8/18/2005 3:07:14 AM
Last modified : 8/17/2005 6:33:15 PM



Tracking Cookie Object recognized!
Type : File
Data : sergio pons@atdmt[2].txt
Object : F:\Documents and Settings\Sergio Pons\Cookies\

Created on : 8/17/2005 3:49:42 PM
Last accessed : 8/18/2005 2:27:21 AM
Last modified : 8/17/2005 3:49:42 PM



Tracking Cookie Object recognized!
Type : File
Data : sergio pons@casalemedia[2].txt
Object : F:\Documents and Settings\Sergio Pons\Cookies\

Created on : 8/17/2005 3:52:02 PM
Last accessed : 8/18/2005 3:07:14 AM
Last modified : 8/17/2005 3:52:05 PM



Tracking Cookie Object recognized!
Type : File
Data : sergio pons@cgi-bin[1].txt
Object : F:\Documents and Settings\Sergio Pons\Cookies\

Created on : 8/17/2005 7:49:36 PM
Last accessed : 8/18/2005 3:07:14 AM
Last modified : 8/17/2005 7:49:36 PM



Tracking Cookie Object recognized!
Type : File
Data : sergio pons@doubleclick[1].txt
Object : F:\Documents and Settings\Sergio Pons\Cookies\

Created on : 8/17/2005 7:57:45 PM
Last accessed : 8/18/2005 3:07:14 AM
Last modified : 8/17/2005 7:57:47 PM



Tracking Cookie Object recognized!
Type : File
Data : sergio pons@ehg-bestbuy.hitbox[1].txt
Object : F:\Documents and Settings\Sergio Pons\Cookies\

Created on : 8/18/2005 1:05:56 AM
Last accessed : 8/18/2005 3:07:15 AM
Last modified : 8/18/2005 1:11:24 AM
Continue on next...

[wikiwiki]

Tracking Cookie Object recognized!
Type : File
Data : sergio pons@ehg-laptops.hitbox[1].txt
Object : F:\Documents and Settings\Sergio Pons\Cookies\

Created on : 8/17/2005 7:49:40 PM
Last accessed : 8/18/2005 3:07:15 AM
Last modified : 8/17/2005 7:49:40 PM



Tracking Cookie Object recognized!
Type : File
Data : sergio pons@fastclick[2].txt
Object : F:\Documents and Settings\Sergio Pons\Cookies\

Created on : 8/17/2005 6:34:21 PM
Last accessed : 8/18/2005 3:07:15 AM
Last modified : 8/17/2005 6:34:34 PM



Tracking Cookie Object recognized!
Type : File
Data : sergio pons@hitbox[1].txt
Object : F:\Documents and Settings\Sergio Pons\Cookies\

Created on : 8/17/2005 7:49:40 PM
Last accessed : 8/18/2005 3:07:15 AM
Last modified : 8/18/2005 1:11:24 AM



Tracking Cookie Object recognized!
Type : File
Data : sergio pons@mediaplex[2].txt
Object : F:\Documents and Settings\Sergio Pons\Cookies\

Created on : 8/18/2005 2:17:51 AM
Last accessed : 8/18/2005 2:17:51 AM
Last modified : 8/18/2005 2:17:51 AM



Tracking Cookie Object recognized!
Type : File
Data : sergio pons@servedby.advertising[2].txt
Object : F:\Documents and Settings\Sergio Pons\Cookies\
FileSize : 2 KB
Created on : 8/17/2005 4:04:43 PM
Last accessed : 8/18/2005 3:07:15 AM
Last modified : 8/18/2005 2:00:39 AM



Tracking Cookie Object recognized!
Type : File
Data : sergio pons@tradedoubler[2].txt
Object : F:\Documents and Settings\Sergio Pons\Cookies\

Created on : 8/17/2005 3:49:42 PM
Last accessed : 8/18/2005 3:07:15 AM
Last modified : 8/17/2005 3:49:42 PM



Tracking Cookie Object recognized!
Type : File
Data : sergio pons@z1.adserver[1].txt
Object : F:\Documents and Settings\Sergio Pons\Cookies\

Created on : 8/18/2005 1:41:47 AM
Last accessed : 8/18/2005 3:07:15 AM
Last modified : 8/18/2005 1:41:47 AM



Disk scan result for F:\
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 18


Deep scanning and examining files (G
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Disk scan result for G:\
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 18


Performing conditional scans..
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Conditional scan result:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 18


10:24:41 PM Scan complete

Summary of this scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Total scanning time :00:32:04:406
Objects scanned :770898
Objects identified :18
Objects ignored :0
New objects :18

[wikiwiki]

Also i did after reboot a HiJackthis scan, here is :

Logfile of HijackThis v1.99.1
Scan saved at 10:32:55 PM, on 8/17/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\SYSTEM32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\Ati2evxx.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\WINDOWS\SYSTEM32\Ati2evxx.exe
F:\WINDOWS\Explorer.EXE
F:\Program Files\Logitech\iTouch\iTouch.exe
F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
F:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
F:\Program Files\NVIDIA Corporation\NvMixer\NvMixerTray.exe
F:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
F:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
F:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
F:\Program Files\Alwil Software\Avast4\ashServ.exe
F:\Program Files\QuickTime\qttask.exe
F:\Program Files\Microsoft AntiSpyware\gcasServ.exe
F:\WINDOWS\system32\LVCOMSX.EXE
F:\Program Files\Logitech\Video\LogiTray.exe
F:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
F:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
F:\Program Files\ATI Technologies\ATI.ACE\cli.exe
F:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
F:\Program Files\RamBooster\Rambooster.exe
F:\Program Files\CPUCooL\CooLSrv.exe
F:\Program Files\ewido\security suite\ewidoctrl.exe
F:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
F:\WINDOWS\system32\RioMSC.exe
F:\WINDOWS\System32\svchost.exe
F:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
F:\Program Files\Logitech\Video\FxSvr2.exe
F:\Program Files\Skype\Phone\Skype.exe
F:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
F:\Program Files\MSN Messenger\msnmsgr.exe
F:\WINDOWS\system32\ctfmon.exe
F:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
F:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
F:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
F:\Program Files\Logitech\SetPoint\KEM.exe
F:\Program Files\Microsoft Broadband Networking\MSBNTray.exe
F:\Program Files\WinZip\WZQKPICK.EXE
F:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
F:\WINDOWS\system32\wuauclt.exe
F:\Program Files\ATI Technologies\ATI.ACE\cli.exe
F:\Program Files\Logitech\Video\AlbumDB2.exe
F:\HiJackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cust...ch/search.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://weather.cnn.com/weather/forec...p?locCode=MMMY
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cust...ch/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://weather.cnn.com/weather/forec...p?locCode=MMMY
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - F:\Program Files\ICQToolbar\toolbaru.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - F:\Program Files\ICQToolbar\toolbaru.dll
O4 - HKLM\..\Run: [zBrowser Launcher] F:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [avast!] F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvMixerTray] F:\Program Files\NVIDIA Corporation\NvMixer\NvMixerTray.exe
O4 - HKLM\..\Run: [MMTray] F:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [UpdateManager] "F:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [mmtask] F:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [gcasServ] "F:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [LVCOMSX] F:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] F:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] F:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] F:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray
O4 - HKLM\..\Run: [DataLayer] F:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [ATICCC] "F:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKCU\..\Run: [H/PC Connection Agent] "F:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [RamBooster] F:\Program Files\RamBooster\Rambooster.exe
O4 - HKCU\..\Run: [Skype] "F:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "F:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [PcSync] F:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [msnmsgr] "F:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] F:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe
O4 - Global Startup: Acrobat Assistant.lnk = F:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = F:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: ATI CATALYST System Tray.lnk = F:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = F:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = F:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Microsoft Broadband Networking.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = F:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &ICQ Toolbar Search - res://F:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - F:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - F:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - F:\Program Files\Microsoft ActiveSync\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - F:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - F:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - F:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - F:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - F:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - F:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: CPUCooLServer Service (CPUCooLServer) - Unknown owner - F:\Program Files\CPUCooL\CooLSrv.exe
O23 - Service: ewido security suite control - ewido networks - F:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - F:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Rio MSC Manager (RioMSC) - Digital Networks North America, Inc. - F:\WINDOWS\system32\RioMSC.exe

[wikiwiki]

Now i'll wait for Microsoft Anti-Spy to run automatically to get latest report.

THANKS

[_John_Lennon_]

Funny thing about ABI that I found out,

If you are able to get rid of all its appendages that it tries to isntall, yet cant get ABI itself to install and stay out, then you had the same problem I did. What did I do?

The next popup I got, I noticed that it had the "brought to you by Abetterinternet" blah blah blah link on the popup, I clicked the link, and from there it took me to an uninstaller that ABI itself gives for its spyware.

Worked, and I havent seen a popup since.


EDIT: I found the link to the uninstaller.

http://www.mypctuneup.com/evaluate.php

And yes, it really works.

[Crazy Chuckster]

Looking good wikiwiki, glad we could help out

[wikiwiki]

John Lennon,

Sorry, please do not take it personal, but is a safe link?

By now Microsoft Anty Spy didn't recognized any malware on its last scan.

It will be smart to do what you are proposing? It looks fine my PC now

THANKS to everybody, it looks the problem has gone.

Sincerely

Wiki

[Senor Panadero]

When googling on your problem yesterday, many of the articles ended up saying that the aBetterInternet uninstaller did in fact work. But you don't need it, you cleaned it up already. Google Search: aBetterInternet removal

[wikiwiki]

Almost a week and my computer works without a hinch, no problem at all

THANKS

[_John_Lennon_]

John Lennon,

Sorry, please do not take it personal, but is a safe link?

By now Microsoft Anty Spy didn't recognized any malware on its last scan.

It will be smart to do what you are proposing? It looks fine my PC now

THANKS to everybody, it looks the problem has gone.

Sincerely

Wiki

I wasnt too worried when I ran the uninstaller, though I was cautious. Nothing else could have reinstalled itself anyway, because MS Antispyware was catching the stuff as it tried to reinstall. But yep, ir was a safe link and worked. Go figure.

Glad to hear you got it taken care of manually though!