xp reboots.. during spybot or ad-aware

[CanadianTek]

Hey folks..

Im looking at a system... with xp on it,

it can be up and running for hours.. days.... no problem..

surfing the net is slow.. getting email.. podgy.. but both semi functional..

able to get updates.. for nortons and spybot.. and no viruses detected..

HOWEVER.. when i get to the "fix selected problems" in spybot (it says it found Brilliant Digital).. or "quarantine" in ad-aware..

BOOMFF...

system reboots..

so it is obvious.. a spy does not like the spy detectors removing them..

i ran bazooka to help me FIND the various registries, where these things are.. AND i printed out the FIXes that needed to be implemented... as it says

dyfuca
hotbar
mediadownloads
ms media player guid
promulgate

and

searchexe

are in the system

i started going thru some of the procedures from Bazooka, MS Media Player, gone,

most of hot bar.. gone.. .. :S however..

when i got finished with the registry fixes that bazooka recommended, it said to go back in and delete.. the HotBar folder.. which didnt exist..

Soo out of curiousity.. i went digging for HbInst*.* ... in hopes to find the "folder" where HbInst.exe and HbInstIE.dll existed, (YES - i have show all files and all folders turned on.. no hiding, not extensions.. not even system files.. show me them too as i know some spies will tell the o/s they are system files to be hid.. )...

surprise !!

still no folder by the name of HotBar..

BUT 14 copies of HbInst.exe and HbInstIE.dll sitting in bin folder and bin/4.2.13.0 and also in folders called.. bin/4/3/1 bin/ 4.2.14.0 bin/4.3.6 bin/4.3.9 bin/4.4.2 and bin/4.4.6

some of the occurances of hbinstie.dll also had other extensions.. like hbinstiemfd etc

So.. i was just curious about a few things.. and any help would be greatly appreciated,

yes, i will get a chance to go over it again, AND will probably end up in HJT

But has anyone else experienced this.. "reboot" on deletion of a spy..
using EITHER Ad-Aware or Spybot? .. and if so.. which if any of these culprits is the guilty party???

Brilliant Digital?

dyfuca
hotbar
mediadownloads
promulgate

or

searchexe

thx

CT

[Cactus]

ALL!!! hahaha....sorry they are ALL nasties!!!

Download Hijackthis
---Important---Create a permanent folder
EG---- Open MyDocuments----Right click an empty spot and select NEW---Folder----Name the new folder HJT ---this is where you will want to save Hijackthis too, also, backups will be stored there.
Download from here
http://aumha.org/downloads/hijackthis.exe

Do a SCAN----Scan will change to SAVE LOG----copy and paste the WHOLE contents of the log
here... Don't try and fix anything yet----most entries are harmless and needed.


Cactus

[liljim]

You might want also try running spybot while in safe mode.