Hi:
I love Ad-Aware and run it daily, however I ran a scan with e-scan and it found 8 registry files “System found infected with mybugfreepc Corrupted Adware/Spyware ({71a2702f-c7d8-11d2-bef8-525400dfb47a})!” located at C:\WINDOWS\system32\ssubtmr6.dll . I don’t understand why Ad-Aware doesn’t find this problem. I did a search on Google and couldn’t seem to find anything definite on whether I should delete this file or not. It’s a dll file and I fear that if I delete it Windows may not function properly. Is there a free software download removal tool that knows whether or not to delete it? Here are some others that e-scan found.

medload Browser Hijacker" found in File System!
web3000 Spyware/Adware" found in File System!
smitfraud Browser Hijacker" found in File System!
gain.gator Spyware/Adware" found in File System!
grokster Spyware/Adware" found in File System!
buddylinks Spyware/Adware" found in File System!
Entry "HKLM\Software\Microsoft\Shared Tools\DAO" refers to invalid object "C:\Program Files\Common Files\Microsoft Shared\DAO\DAO3032.DLL".
"HKCU\Software\Netscape\Netscape Navigator\User Trusted External Applications" refers to invalid object ""C:\Program Files\Java\jre1.5.0_06\bin\javaws.exe

Could it be that these are all false positives? I can’t believe that these are spyware or bugs or viruses and Ad-Aware is not detecting them as such? Can someone give me a clue as to what is going on and what should I do? Thanks for any assistance.

Hi jimsimon and Welcome to CastleCops,

I recommend that you work through the Malware Removal and Prevention

procedure. This procedure has been designed to enable you to partially or even fully rid your

computer of viruses, trojans, adware, and spyware. Be sure to carefully follow the directions in order to

achieve the best results. If you have any questions about any of the steps, then please post a new topic

in the appropriate forum. There are links to them along the way. If you still need help when you finish,

please read
these directions

for posting a topic in the
HijackThis forum and a trained 1st responder or security expert will assist you.

I click on the on line scan button but it says I need to set my Active x controls or something like that. I clicked on Tools, Internet options, security, Internet, custom button. I enabled a few buttons, but I don’t think it was enough since I tried to run the test and got no response window to show that the test was in progress. That’s as far as I got. Can you tell me which buttons I need to “enable” for the time being, because after I’m going to disable them again right after we’re through with this. I hate those Active x errors, viruses, or whatever they are. Another thing I’m not too sure of right now and that is it says that the scan might last for hours. I’m on a 56k modem. For me that might mean days? And worst of all is that I’m in the banana/monopolistic/corrupt, etc. republic of Costa Rica where the only telephone company (ICE) in the whole country charges by the minute for phone line usage no matter whether its local or long distance. Anyway, I’ll try the test for a few minutes til I feel my wallet getting lighter, then I hope you understand, but I may have to cut off the test. Hopefully it doesn’t last more than a few minutes.

Hi jimsimon,

I see YounGun is assisting you with your logs in this thread . Please stick to that thread until your logs are sorted out, otherwise you may receive conflicting advice and you may also be advised to do things about which YounGun has no knowledge.

If you still experience problems then by all means post back into this thread.

As an aside, running an online scan over dialup is not very practical in your case due to the cost involved - the scan will take at least as long as a full scan with AVG. Hopefully another solution will be proposed in your other thread.

Good luck!