PDA

View Full Version : myway.mywebsearch not removable in vista


marco126
2008-12-08, 13:12
Hi there
a spyboot scan gives 30 entries of myway.mywebsearch PUPSC and is not removable by spyboot. I switched of the TeaTimer Resident and I tried:
1. Try to run Spybot-S&D the next time you reboot.
o Go into Spybot > Mode > Advanced mode > Settings > Settings > look for "System start" (located half way down the page).
o Check the option: "Run program once at next system startup".
o Reboot the system.
2. Run it in Safe mode.
o Reboot your system in Safe mode and run Spybot-S&D.

Result: Spyboot didn't start automatically in safe mode. Only a DOS windows appeared and I've got no knowledge about DOS.
Could you please help? See report below. Thanks a lot.

Marco

--- Search result list ---
Tipp des Tages: Klicken Sie auf den Balken rechts, um mehr Informationen zu sehen! ()


MyWay.MyWebSearch: [SBI $C952EBBA] Root class (Registrierungsdatenbank-Schlüssel, fixing failed)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskSBar.SettingsPlugin

MyWay.MyWebSearch: [SBI $C952EBBA] Root class (Registrierungsdatenbank-Schlüssel, fixing failed)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskSBar.SettingsPlugin.1

MyWay.MyWebSearch: [SBI $C952EBBA] Class ID (Registrierungsdatenbank-Schlüssel, fixing failed)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F0D4B23B-DA4B-4daf-81E4-DFEE4931A4AA}

MyWay.MyWebSearch: [SBI $5436DFC2] Root class (Registrierungsdatenbank-Schlüssel, fixing failed)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskSBar.ToolbarPlugin

MyWay.MyWebSearch: [SBI $5436DFC2] Root class (Registrierungsdatenbank-Schlüssel, fixing failed)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AskSBar.ToolbarPlugin.1

MyWay.MyWebSearch: [SBI $5436DFC2] Class ID (Registrierungsdatenbank-Schlüssel, fixing failed)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B15FD82E-85BC-430d-90CB-65DB1B030510}

MyWay.MyWebSearch: [SBI $D952D8BB] Class ID (Registrierungsdatenbank-Schlüssel, fixing failed)
HKEY_CLASSES_ROOT\CLSID\{B15FD82E-85BC-430d-90CB-65DB1B030510}

MyWay.MyWebSearch: [SBI $590CA7CC] Class ID (Registrierungsdatenbank-Schlüssel, fixing failed)
HKEY_CLASSES_ROOT\CLSID\{F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA}

MyWay.MyWebSearch: [SBI $2E33E144] Class ID (Registrierungsdatenbank-Schlüssel, fixing failed)
HKEY_CLASSES_ROOT\CLSID\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}

MyWay.MyWebSearch: [SBI $ACCE370C] Class ID (Registrierungsdatenbank-Schlüssel, fixing failed)
HKEY_CLASSES_ROOT\CLSID\{F0D4B23B-DA4B-4daf-81E4-DFEE4931A4AA}

MyWay.MyWebSearch: [SBI $16DF808B] Interface (Registrierungsdatenbank-Schlüssel, fixing failed)
HKEY_CLASSES_ROOT\Interface\{F0D4B23A-DA4B-4DAF-81E4-DFEE4931A4AA}

MyWay.MyWebSearch: [SBI $0B105129] Interface (Registrierungsdatenbank-Schlüssel, fixing failed)
HKEY_CLASSES_ROOT\Interface\{F0D4B23C-DA4B-4DAF-81E4-DFEE4931A4AA}

MyWay.MyWebSearch: [SBI $DCB82066] Type library (Registrierungsdatenbank-Schlüssel, fixing failed)
HKEY_CLASSES_ROOT\TypeLib\{F0D4B230-DA4B-4DAF-81E4-DFEE4931A4AA}

MyWay.MyWebSearch: [SBI $AF599DF9] Einstellungen (Registrierungsdatenbank-Schlüssel, fixing failed)
HKEY_LOCAL_MACHINE\SOFTWARE\AskSBar

MyWay.MyWebSearch: [SBI $CD97DE2F] Browser helper object (Registrierungsdatenbank-Schlüssel, fixing failed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA}

MyWay.MyWebSearch: [SBI $9B0AB1A3] Einstellungen (Registrierungsdatenbank-Schlüssel, fixing failed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F0D4B23B-DA4B-4daf-81E4-DFEE4931A4AA}

MyWay.MyWebSearch: [SBI $17FB80EA] Uninstall-Einstellung (Registrierungsdatenbank-Schlüssel, fixing failed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AskSBar Uninstall

MyWay.MyWebSearch: [SBI $11334F10] IE-Toolbar (Registrierungsdatenbank-Wert, fixing failed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}

MyWay.MyWebSearch: [SBI $BCCFF0B2] Programm-Verzeichnis (Verzeichnis, fixing failed)
C:\Program Files\AskSBar\

MyWay.MyWebSearch: [SBI $FBFF845A] Programm-Verzeichnis (Verzeichnis, fixing failed)
C:\Program Files\AskSBar\bar\

MyWay.MyWebSearch: [SBI $CA922051] Programm-Verzeichnis (Verzeichnis, fixing failed)
C:\Program Files\AskSBar\bar\1.bin\

MyWay.MyWebSearch: [SBI $7ED559DE] Ausführbare Datei (Datei, nothing done)
C:\Program Files\AskSBar\bar\1.bin\A2HIGHIN.EXE

MyWay.MyWebSearch: [SBI $0F6D32F7] Daten (Datei, nothing done)
C:\Program Files\AskSBar\bar\1.bin\A2FFXTBR.JAR

MyWay.MyWebSearch: [SBI $0F6D32F7] Daten (Datei, nothing done)
C:\Program Files\AskSBar\bar\1.bin\A2NTSTBR.JAR

MyWay.MyWebSearch: [SBI $499C8FBB] Daten (Datei, nothing done)
C:\Program Files\AskSBar\bar\1.bin\A2FFXTBR.MANIFEST

MyWay.MyWebSearch: [SBI $499C8FBB] Daten (Datei, nothing done)
C:\Program Files\AskSBar\bar\1.bin\A2NTSTBR.MANIFEST

MyWay.MyWebSearch: [SBI $6A07593D] Bibliothek (Datei, nothing done)
C:\Program Files\AskSBar\bar\1.bin\A2PLUGIN.DLL

MyWay.MyWebSearch: [SBI $6A07593D] Bibliothek (Datei, nothing done)
C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL

MyWay.MyWebSearch: [SBI $6A07593D] Bibliothek (Datei, nothing done)
C:\Program Files\AskSBar\bar\1.bin\NPASKSBR.DLL

MyWay.MyWebSearch: [SBI $6A07593D] Bibliothek (Datei, nothing done)
C:\Program Files\AskSBar\bar\1.bin\V2RSSMNU.DLL


--- Spybot - Search & Destroy version: 1.6.0 (build: 20080707) ---

2008-07-07 blindman.exe (1.0.0.8)
2008-07-07 SDFiles.exe (1.6.0.4)
2008-07-07 SDMain.exe (1.0.0.6)
2008-07-07 SDShred.exe (1.0.2.3)
2008-07-07 SDUpdate.exe (1.6.0.8)
2008-07-07 SDWinSec.exe (1.0.0.12)
2008-07-07 SpybotSD.exe (1.6.0.30)
2008-09-16 TeaTimer.exe (1.6.3.25)
2008-07-12 unins000.exe (51.49.0.0)
2008-07-07 Update.exe (1.6.0.7)
2008-10-22 advcheck.dll (1.6.2.13)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2008-09-15 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2008-10-22 Tools.dll (2.1.6.8)
2008-11-04 Includes\Adware.sbi (*)
2008-11-25 Includes\AdwareC.sbi (*)
2008-06-03 Includes\Cookies.sbi (*)
2008-09-02 Includes\Dialer.sbi (*)
2008-09-09 Includes\DialerC.sbi (*)
2008-07-23 Includes\HeavyDuty.sbi (*)
2008-11-18 Includes\Hijackers.sbi (*)
2008-11-18 Includes\HijackersC.sbi (*)
2008-09-09 Includes\Keyloggers.sbi (*)
2008-11-18 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2008-11-18 Includes\Malware.sbi (*)
2008-12-03 Includes\MalwareC.sbi (*)
2008-11-03 Includes\PUPS.sbi (*)
2008-12-02 Includes\PUPSC.sbi (*)
2007-11-07 Includes\Revision.sbi (*)
2008-06-18 Includes\Security.sbi (*)
2008-12-02 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2008-11-04 Includes\Spyware.sbi (*)
2008-12-02 Includes\SpywareC.sbi (*)
2008-06-03 Includes\Tracks.uti
2008-11-04 Includes\Trojans.sbi (*)
2008-12-02 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll



--- System information ---
Windows Vista (Build: 6001) Service Pack 1 (6.0.6001)


-> If you need the whole report with Startup entries list etc., just tell me (207 KB)
Blade81
2008-12-12, 19:31
Hi


BEFORE you POST
(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288) ;)

Download and install TrendMicro HijackThis (http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe)
* Once installed open HijackThis by clicking Start > Programs > HijackThis and click the button labeled
Do a system scan only

* Click the scan button in the lower left hand corner of the interface and HijackThis will quickly scan your system.
* Once the scan is complete the scan button will now read save log. Click this button to save the log file to your PC. Once you select where you would like to save the file it will open in your systems default text editor. Typically this application is Notepad. Post the log here.