[Extradesk]

I had a problem when I tried to run Ad-Aware....it couldn't find a file. I removed
the program through Add and Remove and tried to doenload the latest version. It won't
download from anywhere. It doesn't appear that it even attempts to do it. On PCWorld
when I go to download it, I get a blank screen. Anyone else with that problem? Is
there any help? By the way, it's the free version I'm after.

[Extradesk]

Thanks for your response. I had completely uninstalled Ad-Aware so there isn't anything left or to reinstall. I did try Lavasoft and get a completely blank page. I did run Superantispyware, Spybot Search and Destroy and a couple other programs and nothing bad came up. I recent'y uninstalled ZoneAlarm because of a problem with a Windows update. I put in Comodo and am still trying to ge used to ut. Could there be something there causing my problem?

[mphenterprises]

Hi ExtraDesk and welcome to the PCWorld Communities. :D





First, I have changed your Discussion title to give a clearer indication of your question. For future reference, please be as descriptive as possible in both the heading of your Discussion as well as the post itself.

Now, this is really enough information to start troubleshooting your issue. What gives you the indication that Ad-Adware is blocking anything? You do not download an application from within Ad-Adware so there may be some confusion with that. What application are you trying to download?

[Extradesk]

It's A-Aware that I'm trying to download. I had a problem with it because it couldn't find a file so I uninstalled it with the idea of downolading and installing a newer version. I don't have any Ad-Aware on my system and I can't download it from any site including Lavasoft. It isn't Ad-Aware preventing it because I don't have it. Someone answered me with my original post and I can't find his replies now. He understood the problem

[Extradesk]

Sorry, I didn't have any previous replies form here. Waiting for yours.

[mphenterprises]

Okay, let's make sure we get back on the same page. You are trying to download the free version of Ad-Aware and cannot. Each time you try to download the latest version, it fails. Is that correct? I believe you stated that you do not get any error messages, is that also correct?

When I went to Lawasoft's website and tried to download the free version of Ad-Aware, I was redirect to download.com. Click here to attempt a download and tell us what happens.

[Flashorn]

Hey MPH!!



I just tried it from PCW Downloads and was able to:

!http://forums.pcworld.com/legacyimages/
1!



FLASHORN. !http://forums.pcworld.com/legacyimages/
1!

[mphenterprises]

Hi Flashorn. Thanks for that confirmation. I was able to download the application from both the PCWorld site as well as the Download.com link.

[Extradesk]

I tried to download from that site and it takes me to a page that says 'thanks for downloading A-Aware etc. but nothing downloads

[Extradesk]

How safe would it be to turn off Comodo, turn on Windows Firewall and try to download?

[SpiritWind]

Hi :

Several yrs ago when I helped out on the Lavasoft Ad-Aware Support Forums, the Experts

there recommended downloading the program from

http://www.majorgeek...wnload506.html] because that Site was considered more


reliable .





I will mention I just "tested" this link and it took 2 Tries for it to "appear" . Ad-Aware is no


longer a top antiSPYWARE/antiTROJAN program and I know of no CERTIFIED "Malware-


Fighting" Expert who recommends it . You would be a lot better off with "SUPERAntiSpyware"


from [http://www.superantispyware.com , which is recommended by many of those

Malware-Fighting Experts .

[mphenterprises]

Spirit. I am not sure what exactly you did during your "test" but it worked fine for me on the very first attempt:







Lavasoft may have some affiliation with cnet or something similar for the download to get redirected to download.com. The fact is that it does work.

[Extradesk]

Thanks for all the responses. I do have Superantispyware that I use along with others which I run on a regular basis. I'm glad to know it is good. I have the Yahoo Anti-spyware too which I ran last night and it found Koolynoody which I removed. Today it's there again. What's that? None of my other programs picked it up.

[mphenterprises]

The next option I can suggest to you is to run the SuperAntiSpyware scan again in Safe Mode. If you are not sure how to access Safe Mode, follow the steps laid out within this {document:id=1093}.

[Extradesk]

Well, I tried that and couldn't log on in the safe mode. The windows blue screen came up but when I tried to log on with my account (I'm also administrator) the screen went black with only s'safe mode showing with a line on the top of the screen that ended with SP2. I just made a Hi-Jack log. Can this provide any useful info? I hated to have to do a System Recovery.

[mphenterprises]

Extradesk said:

...when I tried to log on with my account (I'm also administrator) the screen went black with only s'safe mode showing with a line on the top of the screen that ended with SP2...

>
>



When you saw that screen, you were actually in the Safe Mode environment. You could have just ran SuperAntiSpyware from there. Since you have the HiJackThis log created, please allow Spirit a chance to see and review the log.

[Extradesk]

How would I have run it? It was a black screen with nothing on it except the cursor. Anyway, where do I post the log? Here?

[mphenterprises]

At this point, the Safe Mode option is moot so do not worry about it. As for the log, you should be able to simply copy and paste the log into this Discussion. If there is any specific steps that Spirit needs, he will review those steps with you once he comes back online.

[Extradesk]

By the way I use Firefox if that makes any difference in anything. Hereis my Hi-Jack log
Logfile of HijackThis v1.97.7
Scan saved at 6:05:30 PM, on 7/30/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesWindows DefenderMsMpEng.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesAlwil SoftwareAvast4aswUpdSv.exe
C:Program FilesAlwil SoftwareAvast4ashServ.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesGrisoftAVG Anti-Spyware 7.5guard.exe
C:Program FilesSeagateBasicsServiceSyncServicesBasics.exe
C:WINDOWSsystem32cisvc.exe
C:WINDOWSExplorer.EXE
C:Program FilesCOMODOFirewallcmdagent.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesSpyware DoctorpctsAuxs.exe
C:Program FilesSpyware DoctorpctsSvc.exe
C:windowssystemhpsysdrv.exe
C:HPKBDKBD.EXE
C:PROGRA~1ALWILS~1Avast4ashDisp.exe
C:Program FilesSpyware TerminatorSpywareTerminatorShield.exe
C:WINDOWSsystem32VTTimer.exe
C:WINDOWSALCXMNTR.EXE
C:Program FilesCOMODOFirewallcfp.exe
C:Program FilesSpyware DoctorpctsTray.exe
C:Program FilesSUPERAntiSpywareSUPERAntiSpyware.exe
C:Program FilesSpyware Terminatorsp_rsser.exe
C:WINDOWSsystem32ctfmon.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesAlwil SoftwareAvast4ashMaiSv.exe
C:Program FilesAlwil SoftwareAvast4ashWebSv.exe
C:WINDOWSSystem32alg.exe
C:WINDOWSsystem32cidaemon.exe
C:Program FilesSeagateBasicsBasics StatusMaxMenuMgrBasics.exe
C:WINDOWSsystem32wuauclt.exe
C:DOCUME~1OwnerLOCALS~1TempTemporary Directory 2 for hjt.zipHijackThis.exe
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://red.clientapps.yahoo.com/customize/ycomp/defaults/sb/*http://www.yahoo.com/search/ie.html
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://red.clientapps.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft....k/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr7/*http://www.yahoo.com/ext/search/search.html
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft....k/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,DefaultPageURL = http://go.microsoft....k/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,DefaultSearchURL = http://go.microsoft....k/?LinkId=54896
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = localhost;*.local
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:Program FilesYahoo!CompanionInstallscpn2yt.dll
F2 - REG:system.ini: UserInit=C:WINDOWSsystem32Userinit.exe
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:Program FilesYahoo!CompanionInstallscpn2yt.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:Program FilesSpywareGuarddlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHelper.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:Program FilesSiber SystemsAI RoboFormroboform.dll
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: (no name) - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - (no file)
O2 - BHO: (no name) - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
O2 - BHO: (no name) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:Program FilesMSN AppsMSN Toolbar1.02.3000.1001en-usmsntb.dll
O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:Program FilesZoneAlarmSBbar2.binSPYBLOCK.DLL
O2 - BHO: (no name) - {F1D49A84-8656-43ce-AE3D-AABC1A12243E} - C:WINDOWSsystem32BhoUCS.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:Program FilesYahoo!CompanionInstallscpn2yt.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:Program FilesSiber SystemsAI RoboFormroboform.dll
O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:Program FilesZoneAlarmSBbar2.binSPYBLOCK.DLL
O4 - HKLM..Run: Recguard] C:WINDOWSSMINSTRECGUARD.EXE
O4 - HKLM..Run: [hpsysdrv] c:windowssystemhpsysdrv.exe
O4 - HKLM..Run: [HPDJ Taskbar Utility] C:WINDOWSsystem32spooldriversw32x863hpztsb04.exe
O4 - HKLM..Run: [KBD] C:HPKBDKBD.EXE
O4 - HKLM..Run: [avast!] C:PROGRA~1ALWILS~1Avast4ashDisp.exe
O4 - HKLM..Run: [SpywareTerminator] "C:Program FilesSpyware TerminatorSpywareTerminatorShield.exe"
O4 - HKLM..Run: [VTTimer] VTTimer.exe
O4 - HKLM..Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM..Run: [COMODO Firewall Pro] "C:Program FilesCOMODOFirewallcfp.exe" -h
O4 - HKLM..Run: [basicsmssmenu] "C:Program FilesSeagateBasicsBasics StatusMaxMenuMgrBasics.exe"
O4 - HKLM..Run: [ISTray] "C:Program FilesSpyware DoctorpctsTray.exe"
O4 - HKCU..Run: [SUPERAntiSpyware] C:Program FilesSUPERAntiSpywareSUPERAntiSpyware.exe
O4 - HKCU..Run: [http://ctfmon.exe C:WINDOWSsystem32ctfmon.exe
O8 - Extra context menu item: &eBay Search - res://C:Program FileseBayeBay Toolbar2eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Customize Menu - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MI1933~1OFFICE11EXCEL.EXE/3000
O8 - Extra context menu item: Fill Forms - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComFillForms.html
O8 - Extra context menu item: RoboForm Toolbar - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms - file://C:Program FilesSiber SystemsAI RoboFormRoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Spyware Doctor (HKLM)
O9 - Extra button: Fill Forms (HKLM)
O9 - Extra 'Tools' menuitem: Fill Forms (HKLM)
O9 - Extra button: Save (HKLM)
O9 - Extra 'Tools' menuitem: Save Forms (HKLM)
O9 - Extra button: UCS (HKLM)
O9 - Extra button: HP Clipbook (HKLM)
O9 - Extra button: HP Smart Select (HKLM)
O9 - Extra button: RoboForm (HKLM)
O9 - Extra 'Tools' menuitem: RoboForm Toolbar (HKLM)
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration (HKLM)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O10 - Unknown file in Winsock LSP: c:program filesbonjourmdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://pcpitstop.com...p/PCPitStop.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://69.44.122.156...r/axscanner.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www1.snapfish...fishActivia.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - http://fpdownload.ma...t/ultrashim.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macr...ash/swflash.cab
O16 - DPF: {E9A7F56F-C40F-4928-8C6F-7A72F2A25222} (AxRUploadControl Object) - http://www.imagestat...SUpload.cab?v=1,0,0,37
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcp.../pcpitstop2.dll

[SpiritWind]

Hi :

I will start about "Koolynoody" ; Best Info is that this is part of Spybot's "Immune" Feature,

so your Yahoo "Anti-Spy" is reporting an inaccurate "False-Positive" . I strongly encourage

NOT to use this program !

You Posted the Log using an extremely outdated version of HijackThis; unless you are

unable to install the Latest version available from

www.filehippo.com/download_hijackthis , you should uninstall this outdated version

as soon as possible; the Info it provided has little value .

It did show you have at least 3 antiSPYWARE programs providing "real-time" protection

( NOT including Spybot ), which is a security "no-no" ; I recommend you uninstall Spyware

Doctor and Windows Defender to see IF that makes a difference !? There were also some

"Remnants" of Symantec/Norton in the Log, indicating you most likely have NOT run the

Norton Removal Tool, One of which is available at

[http://www.majorgeeks.com/NortonRemovalToolSymNRTd4749.html] .

The Log also indicates you have the useless Zone Alarm's "Spy Blocker", which does no

useful action in protecting against spyware; recomend you uninstall it .

And you have an extremely outdated version of Adobe; I recommend you uninstall it and

seriously consider using the FREE "Foxit Reader", with Info available at

[http://www.foxitsoftware.com/pdf/rd_intro.php] .

Make these "Changes", then run another HijackThis Scan using the latest version and

we will go from there .