Spyware+slow computer = sad audry

So which version of Ad-Aware SE are you running? And what is the Reference file version? A new update came out today.

What was the problem with running Trend Micro's Scan?
Why didn't you do the Symantec Scan?
And what was it that you were trying to post about Norton?


After you complete ALL steps of the READ ME FIRST, if you still have a problem, you should read the tutorial in this Sticky thread NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

Now post a HijackThis log file as an attachment to your message. All running programs should be closed, including your web browser, e-mail. Close before running Hijack This!

Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file. Place it in its own folder, for example C:\Program Files\HJT

Make sure you have HJT Version 1.98.2 and follow the guideline on where to install it and how to post a log as an attachment.

 

Your missing the point of my question! What is the Ad-Aware version number? Is it 1.05?
If so, you can can download the reference file update here: Ad-aware SE referencefile SE1R17 05.11.2004

And just extract it the correct directory manually. 53 days is very old so old in fact that you probably do not have vers 1.05 and that may be why you cannot update.

 

You're welcome!

 

3 possibilities:

1: Make sure its not in add\remove programs.

2: Pest Patrol claims to remove it: http://majorgeeks.com/download1187.html

3: Manual removal from DoxDesk.com http://www.doxdesk.com/parasite/AproposMedia.html

POP variant
Open the registry, by clicking 'Start', choosing 'Run' and entering 'regedit'. Open the 'CLSID' key inside 'HKEY_CLASSES_ROOT' and delete the following subkeys:

{645FD3BC-C314-4F7A-9D2E-64D62A0FDD78}
{65C8C1F5-230E-4DC9-9A0D-F3159A5E7778}
{8023A3E7-AB95-4C23-8313-0BE9842CC70E}
{976C4E11-B9C5-4B2B-97EF-F7D06BA4242F}
{B3BE5046-8197-48FB-B89F-7C767316D03C}
Next, open the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run and delete the 'AutoUpdater' and 'POP' entries.

You can also delete HKEY_CLASSES_ROOT\POP.Server[.1], HKEY_CLASSES_ROOT\POPAd.Server[.1], HKEY_LOCAL_MACHINE\Software\POP and HKEY_CURRENT_USER\Software\POP to clean up.

SysAI and CxtPls variants
Open the registry (Start->Run->regedit) and find the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run. Delete the 'AutoUpdater' entry. There is also one other entry that must be deleted. Its name will be a nonsensical string of eight random alphanumeric characters, and its value will be a single EXE filename, which is semi-random.

If you are not sure you have the right entry, open the System folder (inside the Windows folder, called "System32" under Windows NT/2000/XP/2003) and load the EXE file it refers to into a text editor. The guilty file will have the string "WinGenerics" inside it somewhere.

Now open the key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run and there should be a similar eight-character random entry pointing to another semi-random EXE in the System folder. Delete this too.

You can also delete the registry keys HKEY_LOCAL_MACHINE\SOFTWARE\Envolo, HKEY_LOCAL_MACHINE\SOFTWARE\AutoUpdate and HKEY_CURRENT_USER\Software\Apropos to clean up.

SysAI variant
Open a Command Prompt window (from Start->Programs->Accessories) and enter the following commands:

cd %WinDir%\System
regsvr32 /u "C:\Program Files\SysAI\AproposPlugin.dll"
CxtPls variant
Open a Command Prompt window (from Start->Programs->Accessories) and enter the following commands:

cd %WinDir%\System
regsvr32 /u "C:\Program Files\CxtPls\CxtPls.dll"
All variants
Restart the computer and you should be able to delete the 'AutoUpdate' folder in 'Program Files' (on the C: drive, even if your Program Files are normally elsewhere), along with the folder 'POP' (POP variant), 'SysAI' (SysAI variant) or 'CxtPls' (CxtPls variant).

In the System folder you can also delete the two semi-randomly-named EXE files referred to by the registry entries of the SysAI and CxtPls variants, and, if you have them, auto_update_uninstall.exe and auto_update_uninstall.log.