Has anyone come across this adware

ADV TARGETSAV.B

How did you get rid?

Trend mirco's online scan picked it up, followed their instructions to remove it but still there!

Spybot and HijackThis are your friends in this case:

http://www.safer-networking.org/en/download/

http://www.merijn.org/files/hijackthis.zip

David

thanks for the reply! Already tried spybot, dont even pick it up! just run hijackthis and saved logfile, can you help me make sense of it?

cheers ashley

Yeah. Either copy and paste the contents of the files (should be notepad) here, or email it to me and I will see if I can spot anything.

David

Running processes look fine.

The O1 entry is suspicious since it usually means that the auto search has been hijacked. Though it could be nothing to worry about. No harm in deleting that one anyway.

The only other questionable entries are:

O4 - HKCU..Run: [qfwu] CROGRA~1COMMON~1qfwuqfwum.exe

I dont know what that is and google, unusually, doesnt either. If you know what it could be then leave it alone.

The other one:
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15.cab />
Thats ok if you have smiley central installed. However they are prone to chucking up lots of ads! So I would personally get rid of that if you can.

Remember to close all your browser windoes etc when you do the fix.

David

this is the trend site about it

http://www.trendmicro.com/vinfo/grayware/ve_graywareDetails.asp?GNAME=ADW%5FTARGETSAV%2EB

ash

just a side thought but, have you run your adaware/spybot/whateverelse is safe mode with system restore turned off?