I have a winfast program with a problem and tried to remove it with control panel so I can reinstall it but I keep getting a warning from spybot that it is terminating a process listed as part of a malicious software called funwebproducts. I have searched the hard drive for it and it doesn't show up. It shows the filename as set38.tmp but it keeps reappearing with different numbers after the set**.tmp bit. Any suggestions how to nail it down?.

[Edited on 4/7/04 by Peteff]

Hi Pete

Have you tried restarting in safe mode? It sometimes stops programs running at startup

Adrian

Search for all .tmp files and delete em' all!! It wont hurt anything as they are temporary files.

try using "Spybot S'n'D " or lavasofts ad-aware you often need both as they each sometimes miss some items

http://www.spybot.info/
http://www.lavasoft.de/

hope that helps

Got both of them and hijackthis. It's something disguised as a system file and it keeps changing its name every time you start up. I took it out of registry and everything manually but it's back. Housecall recognises it as QDIAL16, it also finds BYTEVER but can't remove them.

QDial is a trojan. update your AV

Trojan Information
Discovery Date: 10/27/2003
Origin: Germany
Length: 6144 bytes or
8192 bytes
Type: Trojan
SubType: PornDialer
Minimum DAT: 4300 (10/29/2003)
Updated DAT: 4333 (03/03/2004)
Minimum Engine: 4.2.40
Description Added: 03/16/2004
Description Modified: 03/16/2004 8:11 AM (PT

Whenever i have a problem i use Tech forum You can post your script from hijack this and they'll tell you whats wrong and how to fix it.