*Good afternoon:

I need some help to solve these problems on my computer. I tried to copy and paste into this forum but for I was unable to do this function. Is this possible here? And how do I do it. It might not matter because I have typed what the pop boxes indicate.


There are 4 boxes that come up on my computer after I have logged on and I do not know what they mean, what they are doing to my computer and how to get rid of them. The only way to get them off the screen is to close the boxes. Click on the "X".


1. X Windows cannot find ' Then 7 little boxes, a space and then 7 more boxes, and then 6 more boxes." Then the words Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search. Okay box dialog box.

2. Could not load or run.... then 7,7,6 little boxes with the words along side them, specified in the registry. Make sure the file exists on your computer or remove the referrence to it in the registry.

3, 4, these both messages repeat themselves again.

I sent the messages to my email at work but I do not know how to attach them to this email so I just typed out their messages for you.

Can you also answer the question, what is a registry?

Someone told me I could download for freeSpyware Doctor for free. When I ran it, it found 7 infections. When I went to fix them, it told me I had to buy the program or continue to use the free copy. Well it would not let me run the free copy, it kept popping me back to the purchase page. Can you assist with this? Is there one for free or do I need to purchase it. Then I loaded Spybot search and destroy because someone at work told me that this would get rid of the 4 boxes above. It did not. Now I have this other box that says Spybot - Search and Destory has detected an important registry entry that has been changed.

Category - System Start-up global entry

Change: Value Deleted

Entry: User fault check

Old Data: % system %| system 32? dumprep O-u


The only choice is to close out the box. When I close off the box, a pop up comes which states Resident denied by change. I do not know what all this means. Can you explain this to me? What do I have to do to get this message to go away. Or what action do I take?

And the last question is as follows:

This was also popping up on my screen. "Spooler Subsystem App--- Spooler Subsytem App encountered a problem and needed to close. Can you tell me what this means?

This is what I need help. I need help to see if something is infecting my computer and how to get rid of them. Preferably free downloads if I can.

Thanks so much for your anticipated help and guidance.

Thanks!

First, the Registry is a database that Windows maintains storing info about just about everything installed on your system. The Registry is key to how apps are run.

What it sounds like is that Windows is attrempting to load something during your startup that was either deleted or uninstalled, but not completely.

The first thing to try is going to Start>Run and typing MSCONFIG. Then open the Startup tab and see if there is anything listed there you don't recognize. If there is uncheck it. If you aren't sure, uncheck it, you can always recheck it later. Then reboot and see if the message still occurs.

You might also want to make sure you do a full Spyware scan. If you don't have any anti-spyware utilities, Fredg should be along soon and post a list for you to check out.

Scott, I will try this out. But can you address the other questions about Spybot and Spyware Doctor. The other questions about Spool Subsystem, was this addressed in your response? Is that connected with your answer as well? What about free spyware Doctor? Do I have to purchase this or can I can it for free? Why will it not let me remove the 7 infections that it said it discovered? Thanks so much for all your anticipated help? I really appreicate your time. Thanks again.

Oh one more thing. Could this be at all related to when I had a printer and I had to return it? It was one of those photo printers. It did not work. So I had to return it. Maybe when I was trying to uninstall this software, I did something then. Because now, my printer that I put back on, does not get recognized at times. Sometimes it works, sometimes it does not. When it doesn't the spool message comes up. Again thanks so much. From a very green computer user. Please when responding, please remember this above statement. Don't get upset if I do not understand your directions. I am very new to all of this and really do not know what I am doing.I had a friend install Norton on my computer and it states that it is going to run out at the end of October. It was the latest version. I read someone said not to bother with Norton and try AVG. I am so confused. I do not know what I need to stop all of these virus and spams etc etc. I am not sure what firewalls are and if I have one on my computer. But I have to get everything running again very soon. Time is of the enchance here. I will not go into detail because the reason is personal and very painful. Unless you think you can really help. But I am new to this forum and have not read too much yet to see the protocol on this forum. But I do need your help to get a clean computer again and with not a lot of costs involved so I can get to the task at hand. I know this is a tall order but any help I can get will greatly assist me more than you will know. Thanks for any advise you can provide. I do want to state that up front. And as much as I can.

Scott:

Thought of another question. How do I know when I am downloading Spyware doctor, or Spybot Search & Destroy that there are not viruses or spyware in them? How can I be sure they are safe?

Hi, I'm a lifetime member of completelyfreesoftware.com and get a lot of good stuff there. I just checked on some spyware apps and found this little app. The specs are as follows: Although there are a lot more, I thought this one best at this time.

"R-Firewall is a firewall that protects a computer connected to a local network and/or to the Internet against any intrusions, attacks, trojans, spyware, and other external & internal threats.
It features content filter, configuration setup Wizard, simple & advanced modes, optional DNS cache for faster access, attack detection log, define a range of trusted hosts & IP addresses, check files attached to e-mails, ban or limit cookies, block undesirable content (like banners, data, etc), ban or limit the use of active content in Internet pages (such as JavaScript, ActiveX, etc), and more.
This is an excellent way of protecting your computer. It effectively blocked our test computer from outside attacks (courtesy of grc.com), making it virtually invisible to the outside world.
R-Firewall has two modes – a "simple" mode and an "advanced" mode (designed for more experienced users) – but we still didn't find it as "idiot proof" as we would have liked. The auto configuration Wizard assists you to make the set up process relatively painless but we still felt that more could be done to make it user friendly.
Still, it is better than most other firewalls so it is a good choice for anyone uncertain about adding a firewall to their computer (something that all Internet users should do).
We were most impressed with R-Firewall.
Worth grabbing! http://www.r-firewall.com/
Note: we have been advised that this program is not suitable for Windows 95."

Try the link, if it won't let you download it, email me and let me know where to send the file to you as I usually download a lot of utilities and apps to try out for friends who don't want to spend too much money. I myself have spysweeper right now and am planning to use a free app, since I'm tired of their constant 'reminders to renew' and can't be paying for software all the time. CFS also has a great newsletter with latest updates and it was worth the lifetime fee for me. PC World also has a subscription to daily downloads and some of he stuff is free also, some not, but both sites are worth a try to look at. Good Luck with your other problems. Just be patient, you'll get more help.
I purchased Registry Mechanic and it was worth it too, as I like the feature on startup, it really does a good job, so you might consider one more purchase.

Hi,
I agree with your computer might be trying to find a program that was deleted, but some of the files for it are still there, or there is a reference to those files in possibly system.ini file.
My only suggestion at this time would be trying Spyware programs. If you don't have the following, get them. Here are the programs I use, and how to use them. I suggest these programs because they contain no Spyware or Spam advertising popping up, and they will not harm your computer.

If you think you already have Spyware/Advertising Ware in your computer, run these as follows:

http://www.security-related.com/download2.htm
Download: SpyBot Search & Destroy; 1.3
(If you use the Spyware Blaster free program, then don't set SpyBot to the Immunization feature)

AdAware at:
http://www.lavasoftusa.com
Download: AdAware_SE V 1.06

CWShredder at:
http://www.intermute.com/products/cwshredder.html
(CWShredder is intended only for removal of CoolWebSearch files; placed as spyware on the harddrive). It is not a "stand alone" scan, but needs to be run. Download the free version by clicking on "Download stand alone version of CW Shredder".

All 3 of the above programs run better and much faster when run in SafeMode.

To get into SafeMode:
Re-boot the computer, and immediately after starting up, Press and hold down, F8, at top of keypad.
When the options show on the screen, use the up and down arrow keys on the keyboard to select
"Safe Mode".
Press Enter

It's best to run the AdAware scan first; 3 times; then re-boot.
Then, run the AdAware scan again 3 times; then run the SpyBot. Then, run CWShredder.
Re- Boot.
Reason for running so many times:
Some of these trojans' files can be deleted the first time; leaving some others; but on re-boot, they re-write the files that were deleted.
Running multiple times deletes most of it the first
Time.

If you wish to have a great program, after you clean out Spyware/Advertising Ware:
This program stops this stuff from getting into the computer in the first place, by placing URL's in the browser, stopping them instantly. One of the Very Best free programs anyone can download!

SpyWare Blaster 3.3

http://www.javacoolsoftware.com/sbdownload.html

Now, if the above does not clean up the issue, please post back.
Best of luck,
fredg

Like I said, Fred came along with his list (thanks Fred). I don't know about Spyware Doctor, but there are many good and freeware anti-spyware apps out there so I would try those before paying for one. If you are using Win XP, Microsoft has a good one as well (I use it), you can find it here:
http://www.microsoft.com/athome/secu...e/default.mspx One of the advantages of Microsoft's is it scans real time, blocking the installation, not just cleaning up afterwards.

As to trusting the downloads, it depends on where you get it from. If you go to the vendors WEB site or one of several popular donwload sites (download.com, tucows.com among others), you can have a reasonable degree of trust.

I would first get rid of the load problems and any spyware or viruses you might have. Then see if your other problems still exist.

I am now home again. My father had a stoke while at the cancer centre. I am home again to start working on my computer. This is reference to Fredg comment to download spyware blaster 3.3. When I logged onto www.javacoolsoftware.com/sbdownload.html - it had on there spyware blaster 3.4. Should I be downloading this or looking for Spyware blaster 3.4. I would imagine that spyware blaster 3.4 is a newer version is this correct.

Just an aside. I will update you on what I found out about how I am going to make my presentation. Do not have time to go into that now. I have to get these messages off my computer. I am starting with this. Thanks again for all the help this website has offered me. I just want to let you know that I have not forgotten all your advise, I just have not been at home. I was at the hospital with my father. All I know with running some of the ideas everyone gave me, the 4 boxes are still there. Now I am going to do the suggestions regarding my registry. I just hope I have enough knowledge to get through this on my own. But I am sure with all of your help, I will. Or else, the computer is going!! Just kidding!

Dear, please accept my deepest sorrow for what you and your family are going through..

During this time, I have used the Microsoft antispy free beta application on several of my friends' computers and they are very happy with it. To top it off it is backed up by Microsoft, so you can be sure it's 'safe' and virus free. As far as the other applications, we'll be here if you need help, count on it...

Bless you and hope the rest of your family is OK. At least they have the chance to say their goodbyes, not all of us have that opportunity, no matter how painful for you all, which should be of some comfort.

Chery:

Thank you for your prompt reply. Those are very kind words you just provided. I am so messed up inside, I did not proof read my last entry. I meant to write "Stroke" and meant to write " should I be looking for Spyware Blaster 3.3. Because the site was 3.4. Sorry for any confusion that may have caused. I am sure there were more but in a time crunch right now. Chery, I should have explained, my father had a stroke but is still in the hospital. He is a strong man, has cancer, has a stroke but is still here with us. But he is still very sick the Doctor's told us. We just have to wait to see what all the tests tell us. It is weird for me to be getting all this ready for when the time comes. But the thing is, right now, I do not know if it will be tomorrow or weeks from now. But I must get everything prepared in advance for the tribute I want to do for him. But now, back to working on getting my computer safe and those darn pop up windows gone for good. They are still there but I have not tried all the suggestions yet. Still taking all your advise though. Good night for now.

Dear, I well understood that your dad is still among us. And your spelling is sometimes better than mine, so don't worry.

As far as asking about the version, usually people download the 'original' version first, which might have more files and some drivers, then after that, they get the updated/upgraded versions which might not be the full applications but corrections and enhancements, to keep up. And our offer to be here still goes. TTFN, Chery

Help:

I have downloaded Spybot - search and destroy. When the scan was done it showed in red the words "Shop at home". When the scan was done, I checked the fix problem button. (An aside - I do not know what shop at home is because I do not shop from home on my computer)

Then a question came up that stated " You are about to remove these entries. Do you want to continue? I clicked yes.

The a box stated the following:

Spybot - Search and Destroy has detected an important registry entry that has been changed.

Category: System Start-up global entry
Change: Value deleted
Entry: HddJ taskbar Utility
Old Data: c:/windows/system 32/spool/drives/w32

The only way to get rid of this box is to click the X and then another pop up comes up that I am not sure if I did the right thing. I clicked the X to get the box to go away and another pop up comes up. It states 2.42 Registry change denied and then I cannot read the rest because the box disappears so fast.

Can you tell me what I am suppose to do? I am sure that I am not doing something right because we I do another scan the shop at home comes back up. So this has not been taken care of.

What I am doing wrong? Is it bad that I have this shop at home in red after the scan is done. Thanks for all your help.

One more thing to add to this:

At the bottom of this box that I mentioned, after the category, change, etc
it has a square to be checked and then Remember this decision then a
question marked, when clicked it gives a defination ( that I cannot understand) and then a info button. When I press the info button it states no information found for this entry. Again, as I said, the only think I can think if to click the X at the top but I am not sure about this. In this case the box will not go away and it keeps saying registry change denied. It is a yellow box

Quote:

---

Originally Posted by ScottGem

Like I said, Fred came along with his list (thanks Fred). I don't know about Spyware Doctor, but there are many good and freeware anti-spyware apps out there so I would try those before paying for one. If you are using Win XP, Microsoft has a good one as well (I use it), you can find it here:
http://www.microsoft.com/athome/secu...e/default.mspx One of the advantages of Microsoft's is it scans real time, blocking the installation, not just cleaning up afterwards.

As to trusting the downloads, it depends on where you get it from. If you go to the vendors WEB site or one of several popular donwload sites (download.com, tucows.com among others), you can have a reasonable degree of trust.

I would first get rid of the load problems and any spyware or viruses you might have. Then see if your other problems still exist.

---

Spybot S&D can be frustrating for someone who is not familiar with computers,like you, so please click the link here in blue, download the one from Microsoct and run it. It is more user friendly and will benefit you more, believe me. It will also prevent further incidents as it is a 'live' protection program, so please use it... do it now! You can alsways uninstall Spybot later, but get yourself protected with the Microsoft one first.

Chery:

I could not sleep. So I want back to my computer. I ran the Microsoft one like you said. But it did not detect anything about "the shop at home" that appeared in the spybot S & D. Does that mean that this is okay? I was curious to know if it had been taken care of however I did not run Spybot S & D, just in case those same questions arose again. But I am still curious.


My next step tomorrow is to do the registry procedures to get rid of the pops I first came here for.

My husband is watching the formula 1 so it was a good opportunity for me to get up as well. It is 2:30 in the morning. So now that I have run the Microsoft one, I am going back to bed for now. Talk to you later about my other progress. The one I would like to get solved more than anything. I am procrasting a bit tonight because I hope I can follow all the instructions. Not knowing what to do is putting fear in me and that is why I am avoiding the next step till tomorrow when I am more awake. I will do it after my mountain bike ride ( How is that for procrasting? Ha!) But the Fall weather is so beautiful!! Cheers!

That's cool, it's 9:22 Am Sunday here and I have not slept since Saturday morning. Doc came and gave me shots last night, but still could not sleep, I think I'll take a nap now, cause Formula 1 will be repeated at 13:00 later, so I'll watch it then or record it, my b/f is still asleep and he likes it too, so he'll wake up soon. Just take is one step at a time, and get back with us. Stu, scott, or fred will be on then, and you'll bet a lot of support, so don't sweat it. We girls can do anything we put our minds to do. Enjoy your ride. TTFN, Chery

Hi Lori,

What version of Windows are you running?

As Scott and Fred suggested, run the "msconfig" program to try to identify your startup programs. If you are not sure what is what, try posting what it says under the "Startup" tab here, you cannot copy the details, just type the names of the entries as shown under Startup Item column.

The spooler subsystem problem is most likely the printer you removed. In order to solve this I would suggest removing all your printers (make sure you have the CD to re-install the one you want), rebooting and re-installing the one you need to use. Do this from start -> settings -> printers. Just right click each printer entry and click delete. If you are asked if you want to keep any files, say no. This will ensure the re-installation comes from the CD.

As far as the other problem with "the shop at home", I don't think the Microsoft program has removed it because it would have mentioned this. Try Adaware as Fred suggested, Safe mode is the best place to run these programs, just make sure you've updated the program from the internet first. I've found this program to be pretty good.

1. I am running Windows X-P.

2. I scanned adware 3 times in safe mode, then re-booted
I scanned adware 3 more times then ran spybot S& D
I ran CW shredder and then I re-booted.
3. Have not run spyware blaster 3.3 yet because I want to know if spyware
blaster 3.4 should be run or 3.3. I think Chery said to run 3.3. I have not
done this yet
3. I have scanned Norton antiversus because I had that on my system
4. I have scanned Microsoft Antispyware as well
5. Shop at home is gone now. This was successful
6. Item Number 2 was done successfully
7. The 4 main boxes I originally displayed are still present so the original
problem is not solved.
8. I did the following: start>run and typed MSCONFIG. I then opened the start
up tab and this is what was listed.

They all had check marks beside them. In the startup column it had the following items
gcas serv
________ this one was blank
real schred
SDN Mon
qttask
Popupinspector
Rund1132
Motive SB
CC App
HPwuSchd2
dum prep 0-u
hpztsb01
ctfmon
teatimer
mssysmgr
acrobat assistant
adobe gamma Loa
Adobe gamma Loader
HP didital imaging
Microsoft Office
Net Assistant
Vaio action set up
8 boxes like the ones with the original problem
8 boxes again

For the last two items listed, under Command it has 9 bxes for each and under location it has the following:

HKCU/software/Microsoft/Windows NT/Current...

Do you want the command and location for all the other ones I mentioned?

I do not know what all the above means.

So I think I have done everything you have stated but the 4 boxes are still there and this gives you a summary that is under run msconfig. But I do know what I am supposed to uncheck or leave as is.

That is the current situation at the moment. Going to bed now. I will try again tomorrow with any new help I receive when I wake up. Thanks to everyone for all their help. I do hope I can reach a solution soon.

Cheers! :confused:

The first option is to un-check all of the bottom 2 entries you mentioned, just take the ticks out to remove them from startup. If I get a bit more time today I will check on some of the other processes.

As far as the Spyware Blaster goes, it doesn't matter, either should work but personally I always download the latest (free) version e.g. 3.4

Good luck

Goodmorning:

I will try this right away.

When I turned on the computer this morning this pop up appeared.

Windows Antispyware notice

? A window shell browser required your approval

A shell browser is a toolbar that adds functionality to Windows Explorer or Internet Explorer. This change generally occurs when software is installed. You can allow this change if it is recognized and expected.

! Click for more information about this alert

Then in a blue box the following appears:

Allow Block

Then below this a check mark box and then the words Send to Spynet


I am not sure what this means. Should I allow or block? Help! Clicking on the information box does not make a novice like me know what to do.

Are these always going to appear now asking me questions like this?

I unchecked the last 2 boxes and then restarted the computer.

When it came on, this message appeared:

System Configuration Utilities

The system configuration Utility is currently in Diagnostic or Selective Startup mode, causing this message to be displayed and the utility to run every time.

Choose the Normal start-up mode on the General Tab to start windows normaly and undo the changes you made using the system configuration utility.

Then a box - don't show this message or launch the system configuration utility when windows start.

Help? I do not even know what System Configuration utility means - what I am supposed to do?

One thing I have learned from all of this, is that I need to get myself registered in a basic computer course so I can learn all these things. :eek:

I have really gotten myself into a mess now! I sat at my computer after this last post and had a good old cry. I cannot do this on my own. I am ready to give up. I just do not know enough. I can do what you tell me and then I am left on my own to try and figure out a pop up and what answer I am supposed to give. I think I am chosing the wrong options. This time I messed up. I just do not know what I am doing. That is the preface.

I left my computer with the hour glass on it. I had to leave for work. I live and work downtown, so I am going home on my break to see what my computer is doing. As I said, I left it with the hour glass on the screen.

This is what happened.

The computer was in the diagnostic or selective start-up and I panicked because none of my icons were on the desk top. That meant that none of my documents or pictures were showing. Then I did something that I do not think I was supposed to do because nothing is happening with my computer. I am just stupid. I should have waited for a response to the above but as I said I panicked. I chose normal start up after I could not see any of my icons. Now a message comes up "Windows explorer has encountered a problem and needs to close. Please tell Microsoft about this probem. Then it wants to send a report to Microsoft. I cannot shut the computer down because the hour glass remains up. When you move the mouse to the start button, the hour glass shows up. I did control alt delete to get it to shut off but the same message appears when the computer is turned on. That is where I left it because I had to go to work.

I messed up big time. And now nothing will happen with my computer. All because I did something with the registry. Someone said this part would be tricky. But I do not know what I am doing.

I am so keyed up inside. This is very frustrating for me. I thought I was using logic and going step by step as to what was being coached to me over the net. Now I do not know what my next step is.

Frustrated as heck in Canada. :(

Hi Lori,

Sorry I couldn't get back to you sooner but I'm at work and can only reply when I'm quiet. Try to calm down over this, even if your computer won't start, it's very unlikely that you'll lose any documents. As long as you are careful from this point on the worst that will probably happen is you'll have to re-install windows. Don't even think of doing this until you have a good backup. If you don't want to work on this compter anymore we understand. Don't feel bad about taking it to a local shop to get it fixed.

Now to some of your problems:

What did you do to the registry? Are you talking about what I suggested in the previous post, this is the system configuration Utility you mentioned, and should be fine in either selected or normal mode.

Say yes or no to send the message to Microsoft. Either way should get rid of it,and may allow the computer to complete the boot process.

When you got the Allow/Block question from mS antispyware, for ? A window shell browser required your approval what did you press?

It could be that another nasty piece of software has gotten onto your computer causing the current problems. If your computer won't logon at all, try booting into safe mode - to do this press F8 key at startup until you get a boot menu choice, then choose safe mode.

When in safe mode run your various scans and report back!

Stu:

Thanks for responding. I appreicate all your help. Especially since I note you are at work. I am a lot calmer now. Now that I am aware from my home office. The change in scenary and the walk to work helped out a lot. I have to take things one step at a time. The main thing I want to say is thank you for your support and all the support I have been getting from everyone.
_______________________________________
Now to your questions:

What did I go to the registry?

"the first option is to un-check all of the bottom 2 entries you mentioned, just take the ticks out to remove them from startup"

I did this.

Then when I went to reboot it, the 4 boxes did not appear but a different box appeared. That is the one with the System Configuration Utilities. I choose Normal. But I did not "undo the changes you made using the system configuration utility" Did they mean, rechecking the two bottom boxes because that is all I did"

When I put it in normal that is when none of the icons on my desktop appeared with my documents or my pictures.

This really scared me.

I did say yes to send the message to Microsoft.
______________________________

When you got the Allow/Block question from mS antispyware, for ? A window shell browser required your approval what did you press?


Block.

Because I did not know what I was allowing!

These are just answers to your questions because I am at work and do not have access to my home computer. But I am going home at lunch to check all this out.

I will report back then. But if you have any more answers or suggestions for when I go home that would be great!

Thanks a bunch,

Cheers till then!

:)

Opps! I forgot to mention that the 4 boxes are back again.

And...


This all happened within seconds. But while I was panicking during this phase this morning a pop up did come up on my computer that I was not sure about. I did not download anything from it or do anything with it because I did not know where it came from.

It was a Go to my PC Pc Pit Stop
www.//www.pc pitstop.com/welcome.asp

It contain information on registry cleaning etc etc

I was not sure if this was an update from all the software I was putting on yesterday or an unwanted pop up. Can you advise as well? Thanks

Cheers

This question has not been addresssed yet. I know it is still early but would like some help with this still because these are popping up a lot and I do not know what to do with them. I know Chery said that Spybot - Search and Destroy was a little difficult but it is still on my system.

Spybot - Search and Destroy has detected an important registry entry that has been changed.

Category: System Start-up global entry
Change: Value deleted
Entry: HddJ taskbar Utility
Old Data: c:/windows/system 32/spool/drives/w32

The only way to get rid of this box is to click the X and then another pop up comes up that I am not sure if I did the right thing. I clicked the X to get the box to go away and another pop up comes up. It states 2.42 Registry change denied and then I cannot read the rest because the box disappears so fast.


Here is another one for another example:

Spybot Search and Destroy

Spybot - S & d has detected an important registry entry that has been changed.

Category: Browser Helper Object
Change: Value Deleted
Entry (53707962 - 6F74 - 2D23-2644-206D7942484F

Box that states remember this decision then a ? Then info

Is the new software working and creating these boxes to come up? What I am to do with them. This was a question I posted earlier but has not been answered yet. The first time I mentioned it, it had to do with "shop at home" but that is now gone with all the scans I did.

But the Spybot Search & Destroy popup I do not know what to do with them when they appear.

I have had time to put things in perspective after my good cry.


I am calm again after my break.

Please do not give up on me. I am determine to fix these problems (hopefully with your help if you are all still with me) Just because I am a stubborn perfectionist and won't give up.

I went home turned off my computer, rebooted it, the 4 messages were still there but there were no other popups or disturbing things occurring during that reboot.

I rebooted again in safe mode and ran adaware again. And just left it till I go back for lunch. I quickly look at it before I left and it had already found 2 new objects. Yesterday I cleared them all ( there were 32 after the first scan) And then 0 after all the other scans.

I will start from the beginning again until I get more advise on how to proceed with the registry.

When I came home and closing it off it had this on there. I am not sure what this was.

Dr Watson Post Mortem Debugger has encountered a problem and then I did not see the rest. What is this?

And one observation. When it is in safe mode, my name comes up and administer. I logged onto My name is that correct?

Hi, I've not given up on you, just busy, I've been out of the office a lot today!

You've done the right thing scanning in safe mode:)

I suggest removing Spybot for now, and running Adaware a couple of times and MS antispyware a couple of times in safe mode. In MS antispyware, there is an option to reset your browser to default config. Go to tools -> Advanced Tools -> Browser hijack settings restore and tick the boxes.

If you want to try to get rid of those boxes, do the msconfig suggestion again! As you've now seen when you boot you get the option to run selective startup or normal. Run selective startup, and this should stop those pesky boxes coming up. If you run into problems, just run normal startup (or safe mode and you can put the ticks back in!)

I'm not sure what happened last time you did this, maybe it's to do with the spyware found on this scan.

By the way, do you have a good backup of all your documents? If you have a CD writer I would suggest doing this as soon as possible. It certainly takes the shivers away when working on computers! Just for good measure, if it's not a lot of data, make a couple of disk backups!

StuMegu:

Can you explain to me why I am doing this?


In MS antispyware, there is an option to reset your browser to default config. Go to tools -> Advanced Tools -> Browser hijack settings restore and tick the boxes.

I have an important announcement to make!! ;) :D

Drum roll please...

We did it.

The boxes are now removed!!

I could not believe my eyes. I did all the scans again and again when I got home from work tonight. I gave up my mountain bike ride to stay at home and fix this. It was well worth it.

I just want to tell you. I am not one to give up. I may cry but that just makes me stronger and makes me want to challenge myself all the more.

Now I am celebrating with a very cold beer!
I want to thank the following very kind and very helpful people. You made my life a lot less miserable. Now I can go to sleep and spend more time with my husband now that this problem is solved.

Thanks to:

Scott Gem
Chery
Fred G
Stu Megu

I hope I am not missing anyone. If I did, I'm so sorry.

The boxes are gone but I still have a lot of work to do. I have a few unanswered questions that I hope you guys will still answer. I also have to back up my files and pictures. Then find my music and start my presentation. Now that will be the exciting part. But I still need to get a few more things in order before the fun work begins. Like for example, download Spyware Blaster 3.4.

Till tomorrow. I am going to go finish enjoying my beer and then head to bed. But of course, after I finish watching David Letterman.

Cheers,

Lori

Great news! These beers always taste the best!


Just to answer your final question about the browser hijack settings, it was in response to spybot's message about the registry change. Its just a useful feature that can clear junk out of your internet explorer settings.

Stu:

Should I still do it?

Lori

I would do it, then just reset your home page settings in internet options from the tools menu. Its likely that now your system appears clean, you don't need to, but there's nothing lost by doing it really (except your home page settings).

Fred:

Fred You stated that when you download Spybot S & D that you must not chose the immunization feature. Well, I installed this a couple of days ago and just tonight I installed Spyware Blaster 3.4. My question is how do you take the immunization feature off spybot after it is already on? Thanks for your help with this one.

Download: SpyBot Search & Destroy; 1.3
(If you use the Spyware Blaster free program, then don't set SpyBot to the Immunization feature)