Buffer Overrun

[woodworks]

Ok, I'm a bit confused.

I did what you said. When I rebooted this time, I didn't see superantispyware load up.

Second, I had only one folder WHG, but while doing a search for the others I did a search for that and it had several things, but I couldn't delete them while in safe mode.  Do I delete them?  All the others, there was nothing.

Here is the log.

[recovering space - attachment deleted by admin]

[Broni]

I didn't see superantispyware load up

It shouldn't. It's not real-time protection program, so, no need for it to start.

while doing a search for the others I did a search for that and it had several things, but I couldn't delete them while in safe mode.

I need to know EXACTLY, what items, which ones couldn't be deleted, and what happened when you tried.

You answer my questions while I'll be checking your HJT log, please.

[Broni]

You also didn't answer my question about Windows firewall...

[Broni]

Your HJT log looks much better, but I can't proceed before you answer my previous questions.

[woodworks]

You will need to tell me how to find out if firewall is on or off.  I don't know how.
The WHG are the ones that actually wouldn't open while in safe mode. I have it in add/remove programs.  I have it in start/all programs.  I clicked on them now and it comes up that it is missing shortcut.  

Always before super would load at start up.  

BTW do you still want spy sweeper shut down?

[woodworks]

I went and deleted the shortcuts that had to do with WHG

[Broni]

Always before super would load at start up.

As I said, we disabled in on purpose. It doesn't scan anything by itself. Leave it alone. You still have it on your computer, if you need to perform scan. It doesn't need to start with Windows.

The WHG are the ones that actually wouldn't open while in safe mode. I have it in add/remove programs.

You mean delete, right?
That's fine. It'll, go in next step.

You will need to tell me how to find out if firewall is on or off.

Go Start>Control Panel. Double click on the Security Center icon. Click on the Windows Firewall icon beneath the status updates. See, if it's listed as ON.

BTW do you still want spy sweeper shut down?

Yes. Do it again, and when you're back in Windows...

Open HJT, and checkmark:
- O2 - BHO: WhgHelper Class - {00000000-0000-11D1-ABED-709549C10000} - C:\Program Files\WHG\Instant Help Application Update 1.2\IEHelper.dll (file missing)
Click "Fix checked".
Restart in Safe Mode, and try to delete WHG folder from C:\Program Files again.

Restart in Normal Mode, let me know about Windows firewall, and post new HJT log.

[woodworks]

Firewall is OFF

[woodworks]

Ok, I was able to delete WHG in program files the first time.  I'm talking about the shortcuts.  I was wrong about not being able to delete them, I was unable to open them.  Sorry

[woodworks]

Log

[recovering space - attachment deleted by admin]

[Broni]

Firewall is OFF

Turn it on immediately!

I'm talking about the shortcuts.

In Add\Remove, and under Start? If so, don't worry about it, now.

I was unable to open them.

I didn't ask you to open anything.

If you restarted computer already, give me new HJT log.

[Broni]

Got it. I didn't see it.

[woodworks]

Firewall is on.

[Broni]

You've been doing very well
Now, disable Spysweeper again, and run HostsXpert again.
Let me know, if it refuses to replace the file again.

[woodworks]

Ok, first it has always been coming up with a box that says my host's file is marked as "a system file" and can NOT be manipulated.  Press ok to remove hidden and system file attributes, CANCLE to quit.
Hostexpert will not reset these attributes.

I click ok and then it comes up with it can't create file C\windows\system32\
DRIVERS\ETC\host