[Michelle]

Did you already follow my instructions in post #55?

[Advertisements]

Yes i did

[Pantrwrstl]

Yes i did

[Michelle]

*Double-click on Killbox.exe to start the program.
*In the killbox program, select the Delete on Reboot option.
*In the field labeled Full Path of File to Delete enter the items listed below (I would just copy each file path and paste it in the field):

C:\Program Files\Yahoo!\YPSR\Quarantine\ppq20B.tmp
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq23F.tmp
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq25.tmp

Press the button that looks like a red circle with a white X in it after each one. When it asks if you would like to delete on reboot, press the YES button, when it asks if you want to reboot now, press the NO button. Do this after each one until you have entered the LAST file path I have listed above. After that LAST file path has been entered press the YES button at both prompts so that your computer restarts.

[Michelle]

Launch Notepad, and copy/paste the box below into a new notepad file. Change the "save as" type to "All Files". Save it as Unreg.bat on your Desktop.

regsvr32 /u C:\WINDOWS\wupdsnff.exe
regsvr32 /u C:\WINDOWS\system32\donmmarv.exe

Locate Unreg.bat on your Desktop and double-click on it.

Let me know if you receive any error messages.

[Pantrwrstl]

LoadLibrary(C"\WINDOWS\wupdsnff.exe") failed - The specific module could not be found.

[Pantrwrstl]

same message but donmmarv.exe after i click ok

[Michelle]

If you're still having problems, please run MWav again to see if the nasty virus still lingers (donmmarv.exe).

[Michelle]

*Double-click on Killbox.exe to start the program.
*In the killbox program, select the Delete on Reboot option.
*In the field labeled Full Path of File to Delete enter the item listed below:

C:\Documents and Settings\user\Application Data\iace.exe

Press the button that looks like a red circle with a white X in it. When it asks if you would like to delete on reboot, press the YES button, when it asks if you want to reboot now, press the YES button.

[Pantrwrstl]

During my scan with mwav, it seems to be stuck in a loop where it keeps posting this:

Fri Apr 08 15:38:00 2005 => ERROR!!! MS_ScanAndClean return ffffffff
Fri Apr 08 15:38:00 2005 => ERROR!!! MS_ScanAndClean return ffffffff
Fri Apr 08 15:38:00 2005 => ERROR!!! MS_ScanAndClean return ffffffff
Fri Apr 08 15:38:00 2005 => ERROR!!! MS_ScanAndClean return ffffffff
Fri Apr 08 15:38:00 2005 => ERROR!!! MS_ScanAndClean return ffffffff
Fri Apr 08 15:38:00 2005 => ERROR!!! MS_ScanAndClean return ffffffff


it total files scanned number continues to grow but that keeps cycling through

[Pantrwrstl]

virus log:
File System Found infected by "BetterInternet Spyware/Adware" Virus. Action Taken: No Action Taken.
File System Found infected by "BetterInternet Spyware/Adware" Virus. Action Taken: No Action Taken.
File System Found infected by "BetterInternet Spyware/Adware" Virus. Action Taken: No Action Taken.
File System Found infected by "BetterInternet Spyware/Adware" Virus. Action Taken: No Action Taken.
File System Found infected by "ameopt Spyware/Adware" Virus. Action Taken: No Action Taken.
File System Found infected by "VB and VBA Program Settings Spyware/Adware" Virus. Action Taken: No Action Taken.
File System Found infected by "dlmax Spyware/Adware" Virus. Action Taken: No Action Taken.

[Michelle]

hmm, that's odd. Let me think on it for a minute and I'll get back to you!

[Michelle]

Well, if it scanned correctly then your viruses are gone. You just have a few adware remnants. Are you still having your problem?

[Pantrwrstl]

yes my computer still freezes up when right click the desktop

[Pantrwrstl]

should i try sfc /scannow again?

[Michelle]

You actually did (do) not have the about:blank infection that everyone else has that causes the Dr. Watons error. You do have something else causing the Dr Watson error, though, obviously. So, let's see if we can try to find out exactly what is causing the error:

Go to Start > Control Panel > Administrative Tools > Component Services
Then click the "+" next to Event Viewer (local), then click on "application" find the error (it will have a red circle with a white X), double-click on it and highlight what is on it, then hold down ctrl + c to copy it, then paste it here.