need help removing spyware

i need some help finishing off cleaning up my system. I've followed the instructions in the read and run me first thread and now have run all the scans and have the logs.

I'm running Shaw Secure from my ISP (cable modem) as my firewall/antivirus program and have installed and run ad aware, spyware guard, spyware blaster, spy bot search and destroy, ccleaner and also ran microsoft windows malicious software removal tool and microsoft windows defender and online virus scans at Bitdefender and Panda ActiveScan

thanks for any help you can provide.

tgirl

 

I was able to able to fix one thing with the winsflt.dll that was causing a program called Azureus to crash (would run for 5 or 10 minutes and then shut down) by using LSP-Fix follwing instructions i found here. Other than that program crashing the only real problems i had was that the system seemed slow.

I also uninstalled the old version of Java i had and updated windows but it hasn't changed the spyware found by PandaActive scan. The Bitdefender scan was clean this time through.

i'm attaching a new hijackthis log and also adding the uninstall_list.txt from hijack as well. The Activescan log is the same as last time and it won't let me reattach it in this thread.

 

Download
- Pocket Killbox

Look in Add or Remove Programs and uninstall MediaGateway, if it is not present then look in C:\Program Files\MediaGateway for an uninstaller and run it. This is a program from 180Solutions and you definitely do not want it on your computer.

Scan with HijackTHis and fix this line if it is still present:

This line indicates that the program that relies on this dll may be broken:

Now run Pocket Killbox:

Choose Tools -> Delete Temp Files and click the RED X.

Run Killbox.exe. Paste the below filenames into KILL BOX one at a time. Check mark the box that says "Delete on Reboot" and checkmark the box "Unregister DLL" (If available) Click the RED X and it will ask you to confirm the file for deletion say YES and when the next box opens prompting you to reboot now...click NO...and proceed with the next file. Once you get to the last one click YES and it will reboot. Note many of the file list below may not exist but we need to check for them anyway.

If Killbox does not reboot or you get a Pending Operations type error message just reboot your PC yourself.

Now boot into SAFE MODE

Open Windows Explorer navigate to and DELETE the following: (Some of these may have already been deleted by Pocket Killbox)

Now run CCleaner. If you have Windows XP delete the contents of C:\WINDOWS\Prefetch.

Then, as an added precaution, Go to Start -> Run and type: cleanmgr and then click OK. Make sure the boxes for these are checked:
Temporary Files
Temporary Internet Files
Recycle Bin

And Click OK.

REBOOT to Normal Mode.

Post a fresh HijackThis log.

 

I looked in add revove programs and Media Gateway was not present there or in C:\Program Files\MediaGateway

I scanned with HijackThis and fixed the 04 line
the 010 line was already fixed previously I have never heard of PureSight and i don't think it was supposed to be on my system)

I deleted all those files listed in killbox successfully.

in safe mode i could not find C:\WINDOWS\system32\ii
or C:\Program Files\MediaGateway

i ran CCleaner and also deleted C:\WINDOWS\Prefetch and also ran cleanmgr

i'm attaching a fresh HijackThis log.

thanks again for your help

 

Your HijackThis log appears to be clean.

Lets flush all your restore points and create a new clean one for your system.

Disable And Enable System Restore

How to Protect yourself from malware!

Safe surfing.