1) False Alarms: When the anti virus software tells you that your PC has a virus when it actually doesn't.
2) System Performance Problems: Your system may lock up due to both products attempting to access the same file at the same time.
Therefore please go to add/remove in the control panel and remove Symantec (Norton) or Yahoo! (eTrust™ EZ_Antivirus).
I recommend you to remove Norton, as that is using much system resources.
Then reboot your computer.
Turn off your Antivirus protection.
Scan again with HijackThis and check the following items:
O2 - BHO: (no name) - {331C41B0-C2C2-463E-A0CE-3808E45BCBCA} - blank (file missing)
O3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file)
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.co...tup1.0.0.15.cab
O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real...ArcadeRdxIE.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://www.popcap.co...aploader_v6.cab
O20 - Winlogon Notify: winghy32 - winghy32.dll (file missing)
After checking these items, close all browser windows except HijackThis and click "Fix checked".
We need to make sure all hidden files are showing so please:
- Click Start.
- Open My Computer.
- Select the Tools menu and click Folder Options.
- Select the View tab.
- Under the Hidden files and folders heading select Show hidden files and folders.
- Uncheck the Hide file extensions for known types option.
- Uncheck the Hide protected operating system files (recommended) option.
- Click Yes to confirm.
- Click OK.
- Restart the computer.
- As soon as BIOS is loaded begin tapping the F8 key until the Advanced Options menu appears.
- Use the arrow keys to select the Safe Mode menu item.
- Press the Enter key.
C:\Program Files\MSN Messenger\RICHED20.dll <= this file
c:\program files\FunWebProducts <= this folder
Reboot your computer normally.
Please run Notepad and paste the following text into a new file:
Save the file to the desktop as fix.reg and make sure the "Save as Type" field says "All Files".REGEDIT4
[-hkey_local_machine\software\microsoft\office\word\addins\MyWebSearch.OutlookAddin]
This is how the reg file must look afterwards:
Then please go to the desktop and double-click on fix.reg, and click Yes to merge it with the registry.
Then reboot your computer.
Start HijackThis, perform a new scan and save the log file.
Use the Add Reply button to post your new logs back here along with details of any problems you encountered performing the above steps and I will review it when it comes in.