Need help with friend's computer

[ksu328]

I need help with my friend's computer, but for some reason, her HJT log is extremely, extremely long. So I can't post it on here, so I'll just put it on this message as an attachment. The computer was full of junk, and for some reason, most all of the entries on the HJT file look exactly the same, you'll see what I mean when you look at the file.

The file itself is too big to post as one file, so I will break it into two seperate files for you to look at. The attachment titled "1-20 (3)" is the first half of the log file, followed by "1-20 (2)".

Thanks for the help!

[Trogan]

Hi,

I havn't seen anything that bad for a long time :eek3:


Can you do the following:

1) Click on Start, Control Panel

2) Double click on Add/Remove Programs

3) Find "My Web Search" in the list of installed programs and click on Change/Remove to uninstall it. You may also want to uninstall any of the following items associated with FunWebProducts.

My Web Search (Smiley Central or FWP product as applicable)
My Way Speedbar (Smiley Central or other FWP as applicable)
My Way Speedbar (AOL and Yahoo Messengers) (beta users only)
My Way Speedbar (Outlook, Outlook Express, and IncrediMail)
Search Assistant - My Way
==


Please download the trial version of Ewido Security Suite here:
http://www.ewido.net/en/download/
Install it, and update the definitions to the newest files. Do NOT run a scan yet.
Next, please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.

For additional help in booting into Safe Mode, see the following site:
http://www.pchell.com/support/safemode.shtml

Once in Safe Mode, please run Ewido (Do not use the computer while Ewido is scanning as it may interrupt the scan)


Click on scanner
Click Complete System Scan and the scan will begin.
NOTE: During some scans with ewido it is finding cases of false positives.
You will need to step through the process of cleaning files one-by-one.
If ewido detects a file you KNOW to be legitimate, select none as the action.
DO NOT select "Perform action on all infections"
If you are unsure of any entry found select none for now.
When the scan is finished, click the Save report button at the bottom of the screen.
Save the report to your desktop
Close Ewido

Restart your computer in normal mode and please post a new HijackThis log, as well as the log from the Ewido scan.