not-a-virus:AdWare.Win32.MyWay.v

[LouBee]

Hello

I seem to have this virus/spyware in my program files\mywaysa\srchasde\1.bin\ deSrcAs.dll

I've run Adware and Microsoft Spyware, Nortons and AVG, but can't get rid of it.

Can anyone help please.

Thanks.

LouBee :eek:

[egghead]

do you have a dell?

more info here

http://www.neuber.com/taskmanager/process/desrcas.dll.html

MyWebSearch/MySearch (http://www.doxdesk.com/parasite/MySearch.html) - now owned by Ask Jeeves Inc

try spysweeper

www.webroot.com

free trial for 15 days

se if it detects it. It will clean your computer during the trial

[blackhat]

Eggy
I have a question on this matter too. Her spyware program detects this file as a problem, but can't remove it. Why can't she follow the "path" and simply delete it? Without any basis, I have done this several times over the years and have not noticed any subsequent problems. Furthermore, this is a .dll, a library, not an executable program. Even though it is there and should not be there, How could it cause any trouble? I'm not "pounding my shoe on the table", I 'm just interested in your thoughts on this matter. DRB
Could a virus be put inside this library then begin to run when the library is called up? DRB

[egghead]

Eggy
I have a question on this matter too. Her spyware program detects this file as a problem, but can't remove it. Why can't she follow the "path" and simply delete it?

Could a virus be put inside this library then begin to run when the library is called up? DRB

If the file is deleted it may be called in the registry to start up and thus produce an annoying error. registry keys must also be removed as this is also areas that can be used to get back into the system.

new viruses and adware acan inject their goods into any dll file. One can never be sure.

check out process gaurd to block injections
http://www.diamondcs.com.au/processguard/index.php?page=introduction

also firewalls like sygate are alerting users to processes that have been modified.

[Stripe]

Why can't she follow the "path" and simply delete it?

Another point is that if an application has performed a call to the DLL and the DLL is actively being used, you won't be able to delete it. You would then need to hunt down the application using the DLL and terminate it. Even then, it may require a reboot which in most cases, will cause the virus to 'recreate' itself.

[LouBee]

do you have a dell?

[/FONT]

Yes, it's a Dell? Why? Is that a good or bad thing?

IT support at work have suggested that I just delete the folder and then delete it from the recycle bin...

[egghead]

Yes, it's a Dell? Why? Is that a good or bad thing?

IT support at work have suggested that I just delete the folder and then delete it from the recycle bin...

cOMMENT FROM HERE (http://www.neuber.com/taskmanager/process/desrcas.dll.html)
All comments about deSrcAs.dll: This file, i believe is a browser redirector that redirects customers that have bought dell systems. it redirects the browser to www.dellmyway.com (http://www.dellmyway.com) when browsing to www.dell4me.com (http://www.dell4me.com), Try it on a dell machine

[LouBee]

Thanks./

[egghead]

if you decide to delete it you should create a restore point

this was you can revert back to it

[LouBee]

if you decide to delete it you should create a restore point

this was you can revert back to it

Ok, thanks... is it being too thick to ask how I do this please. Thanks!

[egghead]

hi

you can get all the info you need here,
http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/systemrestore.mspx

keep me updated

[LouBee]

hi

you can get all the info you need here,
http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/systemrestore.mspx

keep me updated


Hi egghead

I ran all the anti-spyware programmes, it didn't work, so I uninstalled MyWay, and then ran them again, including Kaspersky Lab, which found it in the first place, and it's gone. THANKS!

However, the problem which led me to run a Kaspersky clean seems to still exist. I don't know if you can help me with this on this thread or whether I should start a new one.

Basically, I ran AVG anti-virus checker and it came up with reading errors for Partition table (MBR) and Boot sector of disk. After deleting that spyware I thought running AVG again would be ok, but it isn't it still comes up with these errors.

Are they serious?

Thanks

LouB

[egghead]

hi

i don't use AVG and I cannot really help. I never heard that error from anyone and you should be alarmed if you have problems with your master boot record of your hard drive. Back up your important stuff.

Someone here should have more info on AVG and be able to offer further assistance.

[blackhat]

EGGY,
Boy. This thread generated some interest! I figured the worst that would happen would be "Cannot find file ~.dll". Then it would be alot better to dwnld a clean copy and put it back than to let a virus out of the Box. I see what you mean about the Registry though. Thank You. DRB