[neil]

I use Yahoo and spybot to check for spy and adware and both have always been clear.

However, using 'pandascan' shows an 'infected' result as it scans the windows registry.

It says the 'infection' is adware ,MediaTickets to be precise. The computer seems to be working fine. Do you think I have a problem and if so , how can I get rid?

Help for a novice wwould be much appreciated..!

[fredg]

Hi,
Are you running your scan in Safe mode?
Here are steps to get rid of advertising things in the Registry, and anywhere else:

If you think you already have Spyware/Advertising Ware in your computer, run these as follows:

http://www.security-related.com/download2.htm
Download: SpyBot Search & Destroy; 1.3

AdAware at:
http://www.lavasoftusa.com
Download: AdAware_SE

CWShredder at:
http://www.intermute.com/products/cwshredder.html
(CWShredder is intended only for removal of CoolWebSearch files; placed as spyware on the harddrive). It is not a "stand alone" scan, but needs to be run. Download the free version by clicking on "Download stand alone version of CW Shredder".

All 3 of the above programs run better and much faster when run in SafeMode.

To get into SafeMode:
Re-boot the computer, and immediately after starting up, Press and hold down, F8, at top of keypad.
When the options show on the screen, use the up and down arrow keys on the keyboard to select
"Safe Mode".
Press Enter

It's best to run the AdAware scan first; 3 times; then re-boot.
Then, run the AdAware scan again 3 times; then run the SpyBot. Then, run CWShredder.
Re- Boot.
Reason for running so many times:
Some of these trojans' files can be deleted the first time; leaving some others; but on re-boot, they re-write the files that were deleted.
Running multiple times deletes most of it the first
Time.

If you wish to have a great program, after you clean out Spyware/Advertising Ware:
SpyWare Blaster 3.2
Great, free, program that STOPS spyware, trojans, home page hijacks, etc, BEFORE they get into your computer. Check it out at CNET at link:

http://www.download.com/SpywareBlast...ml?tag=lst-0-2

Will Pandascan delete this adware from your Registry? If so, let it do it.
If it won't, then run the above in Safe Mode, and it should take care of the problem for you.
Best wishes,
fredg
PS. The other alternative is to Edit the Registry. If you wish steps to do that, please post back in this same thread. But, editing the registry can be fatal to a computer, it you delete the wrong thing!

[SESaskDFC]

Howdy:

Here are the removal instructions from Symantec.. I suggest you print them out and follow them EXACTLTY!

http://securityresponse.symantec.com...dware.cdt.html

Murray

[neil]

Thanks very much for the advice, I'l try it and hope for the best! Have a good weekend

[fredg]

Hi,
Just for information:
Media Tickets is a spyware program, which is already included with protection by Spyware Blaster;
Available at:

http://www.download.com/SpywareBlast...ml?tag=lst-0-2

This free program stops spyware like this, and many, many others, from getting into the computer to begin with.

Media Tickets comes from mt-download.com.

SESaskDFC gave a link to symantec for removal of Media Tickets; requiring many, many manual registry deletions. It's a good link with a good removal procedure. However, running AdAware_SE in SafeMode will do all this automatically, without having to edit the Registry.
Best wishes,
fredg
PS; I have sent Neil the confirming information about AdAware_SE.

[neil]

Hi fred,

I finally plucked up the courage to look in the registry and follow your instructions and guess what, it worked, mediatickets was deleted and is not now showing on any of my virus/spyware/adware checkers

Many thanks fred, I certainly couldn't have done it without your help...

neil

[SESaskDFC]

Golly gee Neil.. Fred was the one that advised you NOT to go into Registry..

Sounds like what he suggested DIDN'T work and what I sggested did.. Not to worry thoughm, seems to be the norm with fred at times!

Murray

[neil]

Lol!

Sorry murray,

But thanks anyway!