Autoplay Autoplay HiJack This

Ok...Done all that except when I tried to uninstall  Internet Expedition a message box appeared.

The box was titled RegSvr32 and had a yellow warning triangle in it with the following text

LoadLibrary("C:\DocumentsandSettings\Cliffnook\LocalSettings\ApplicationData\microsoft\internetexplorer\V0.15dat") failed - The specified module could not be found


With regards to the Autoplay fix. I did exactly what it said in the instructions. The CD, DVD, and USB Flash Drives do not work with Autoplay now and I need to start them through my computer or windows explorer. This is no big deal but it doesnt seem to have solved the problem of Autoplay appearing.

Just to let you know that while the Combofix Autoscan was running there were no instances of Autoplay appearing instead of the dozens that appeared during my first Autoscan. So it looks as though we may be getting there.


[saving disk space - old attachment deleted by admin]

[Malware Removal Specialist]

Download Your Uninstaller! This is not a free product but has full functions during the trial period.
You may need to boot to safe mode and try to uninstall Internet Expedition that way. Guide for booting to safe mode

It seems like there has to be a drive trying to autoplay.
Download TweakUI (Freeware) Run TweakUI and expand My Computer, and then AutoPlay. Click on Drives and uncheck the drive letter that you no longer want to AutoPlay. Click on Apply. This may not do any good but it will (maybe) let us know what drive is trying to autoplay.

Download Panda Antirootkit
Unzip it and run the PAVARK.exe file.
Tick the box that says In depth scan and follow the on screen instructions.
Let me know if it turns up anything.

After that please post a fresh HijackThis log.

Already have TweakUI and disabled all drives for Autoplay.

Have used Your Uninstaller before and free 21 day trial up. Anything else I can use?

Have run the Panda Antirootkit and it shows nothing found.

Cheers Frank

[saving disk space - old attachment deleted by admin]

[Malware Removal Specialist]

Revo Uninstaller is free and works much the same way. If this doesn't work we will use a more direct approach to get rid of it.

Also with Revo look for
Pacific Poker
Wanadoo Search Toolbar

They keep coming back in the Hijackthis log.

Revo gave the same error message when trying to uninstall Internet Expedition

Pacific Poker and Wanadoo Search Toll bar are not listed as being there.

[Malware Removal Specialist]

Do you have your XP CD to try a repair install.

I have the original XP CD but there is no option for a repair install.

I click the option for install and a message tells me that an install cannot be done because the version on my PC is newer than the one on the CD

[Malware Removal Specialist]

It must be an SP1 CD and you have upgraded to SP2.

When I google Internet Expedition and only get one search result for it.

I'm going to do some more googling and see what I can find.

It sounds like you and I are finding of the same solutions, only they aren't working 

You're right, I have upgraded to SP2

Thanks for all your efforts. Very much appreciated

Cheers Frank

[Malware Removal Specialist]

How to Manually Remove Programs from the Add or Remove Programs Tool (registry)

http://support.microsoft.com/kb/314481

Older, free version of "RegCleaner" will do it for you:
http://www.321download.com/LastFreeware/files/RegCleaner.zip

[Malware Removal Specialist]

We aren't trying to clean the registry.

"RegCleaner" has an option to remove dead Add/Remove entries.

[Malware Removal Specialist]

Again, not what we are trying to do.

Ok evilfantasy....that seems to have got rid of internet expedition