Malware/Virus problem

[evilfantasy]

Delete An Uninstall Entry

• Start HijackThis
  
• Click on the Open the Misc Tools section
  
• Click on the Open Uninstall Manager button.
  
• Highlight the entry you want to remove, My Way Search Assistant
  
• Click Delete this entry

.
That should be all.

[WJKIV]

Thank you for that.

I started HijackThis and opened the uninstall manager but could not find "My Way Search Assistant" on the list.  My Way Search Assistant is still on the list when I go to Add Remove Programs in Windows, however.  It is listed as being used rarely and it shows nothing for file size.  Unlike everything else on the list of currently installed programs, when you click My Way Search Assistant to highlight it, you do not see a "change" or "Remove" button.  Any further thoughts?

Regards,
WJKIV

[evilfantasy]

Download Registry Searchby Bobbi Flekman
(see the link titled RegSearch Download Link)

• Extract the files from Regsearch.zip into a folder.
• Doubleclick regsearch.exe to start the program.
• Enter My Way Search Assistant in the top area of the form and then click "OK".
  
• Notepad will be opened with text in it (the file named RegSearch.txt will be saved in the program's folder as well).
• Add the contents of the Notepad file to your next reply.

[WJKIV]

Thank you.

I downloaded and ran regsearch.exe and it produced a log in Notepad with the following information:


Windows Registry Editor Version 5.00

; Registry Search 2.0 by Bobbi Flekman © 2005
; Version: 2.0.6.0

; Results at 3/29/2009 1:16:46 PM for strings:
;  'my way search assistant'
; Strings excluded from search:
;  (None)
; Search in:
; Registry Keys  Registry Values  Registry Data 
; HKEY_LOCAL_MACHINE  HKEY_USERS 


[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\7D449D87B79A4004BAA05BDA60389904]
"ProductName"="My Way Search Assistant"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7D449D87B79A4004BAA05BDA60389904\InstallProperties]
"DisplayName"="My Way Search Assistant"

; End Of The Log...


Let me know your thoughts.....thank you!

Regards,
WJKIV

[evilfantasy]

This should remove them.

Go to Start > Run and type notepad.exe then click OK

Copy and paste the below into Notepad and save as fixme.reg to Your Desktop

Code: [Select]

REGEDIT4

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\7D449D87B79A4004BAA05BDA60389904]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7D449D87B79A4004BAA05BDA60389904\InstallProperties]
Locate fixme.reg on your Desktop and double-click it. Answer Yes when prompted to merge with the Registry.

Make sure that you tell me if you receive a success message about adding the above to the registry. If you do not get a success message, it did not work.

Delete the fixme.reg from the Desktop.

[WJKIV]

Thank you.  Okay, I copied the code you sent and saved in notepad as fixme.reg.  I answered yes and I did indeed receive a message that it was successfully added to the registry.  I deleted fixme.reg from the desktop.

Regards,
WJKIV

[evilfantasy]

That should have gotten rid of the leftovers.

Let us know if anything else comes up.

Safe surfing...

[WJKIV]

Well, that seems to have done it, the leftovers are gone!

Again, thank you very much for all your time and patience to help me.  There is no way I could have cleared this problem on my own.  Please know that you are doing a great service and people like myself, who are completely unknown to you out here in cyberspace, really do appreciate what you're doing.  It's nice to know that there are people like you who selflessly seek to do good to help protect those of us from people who seek to do wrong.  I hope to soon follow your example.  God bless you and thank you. Keep up the good work!

Regards,
WJKIV