While you are in the current IE window try pressing the F3 KEY - this should bring up a search window.

OR

Navigate to the specified files or folders using Windows Explorer (OR Start -> Search) and delete (if present):


Copy and paste the complete FULLPATH file names as given into the topmost texbox (PREFERABLE) or search for the individual file names and delete if found.

Hi. I deleted as instructed, except for the C;\Windows\Setup.exe file. I did a search, which gave me something like 10 possibilities. I was a bit hesitant, given the nature of the file and possible consequences of deleting the wrong one, so I let things stand as far as that was concerned.

I then did a full scan with ewido, which gave me a clean bill of health. After which I gave the Update function another try, unfortunately with the same result (i.e. the mention 'Cannot create/open file!'). I could be wrong, but I think it's not a major thing. More of a glitch. And the exercise gave me the opportunity to clean up my computer.

Let me know what you think.

Thanks again.

Ewido:

I cannot find any other examples of such an error message anywhere. Is that the exact error message? Such an occurance might indicate a deeper problem that should be investigated as thoroughly as possible because of such a potentially unique case:

http://www.google.ca/search?hl=en&q=...e+Search&meta=


Perhaps you might try to uninstall and/or reinstall Ewido (double-click on the downloaded file) in case the current install was compromised or corrupted in some way.

Please download, install, update and scan your system with the free (trial) version of Ewido TROJAN scanner
[Developed for Windows 2000 and XP]:

1. When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
2. When you run ewido for the first time, you will get a warning "Database could not be found!". Click OK. We will fix this in a moment.
3. From the main ewido screen, click on update in the left menu, then click the Start update button.
4. After the update finishes (the status bar at the bottom will display "Update successful"), click on the Scanner button in the left menu, then click on the Start button. This scan can take quite a while to run, so time to go get a drink and a snack....
5. If ewido finds anything, it will pop up a notification. You can select "clean" and check the boxes "Perform action with all infections" and "Create encrypted backup" before clicking on OK.
6. When the scan finishes, click on "Save Report". This will create a text file. Please then paste the contents of the text file to this thread.

Note: Ewido is a free trial product for 14 days. Since Ewido is a trial version, the realtime guard and automatic update will stop functioning after 14 days. We are not installing the guard because it might interfere with the cleanup or the malware removal process. You can use Ewido as an on-demand scanner (recommended) but you will have to manually update the definition file each time you scan. If you decide to purchase Ewido, you can enable the 'Realtime Protect' and 'Automatic Update' functions by clicking on the 'Status' bar (Top left) and clicking on both items under "Your Security Status".

REBOOT.

C;\Windows\Setup.exe file:
A very reputable tool located malware payload content inside this setup file. The items are simply deemed to be uninvited installs of adware delivery infrastructure:

C:\WINDOWS\Setup.exe/0002\F7\srchfstu.exe Infected: not-a-virus:AdWare.Win32.SearchFast.a skipped

C:\WINDOWS\Setup.exe/0002\F7\srchupdt.exe Infected: not-a-virus:AdWare.Win32.SearchFast.a skipped

Name: [SrchfstUpdate]
Status: X
File: srchupdt.exe

SearchFast adware downloader
http://castlecops.com/startuplist-6048.html
---------------------------------------------------------------



How is your PC now behaving, otherwise?

Hi VOP!

I made Google! And as a 'unique case', no less!!

Yep....That's the exact message I received, the two or three times I tried to update, down to the exclamation point.

I uninstalled and re-installed and this time, in the Status bar, it said that no update was available. Should I consider this to be an improvement? lol

As regards the Windows Setup file, am I to understand that I can delete it without adverse consequences?? I want to be sure about this because I wouldn't want to have to re-install Windows should things go bad. As you have surely concluded by now, I am FAR from computer savvy, so I figure precautions like this are in order for someone like me.

As for the general state of my computer, nothing special to report except that, when I turn it on in the morning, I discover that it sometimes lacks the oomph (here's a technical term for ya) necessary to actually get on line so it shuts down and I have to reboot. After which, things usually run fine. This has been going on for quite a while.

Bottom line: my system usually runs smoothly and I haven't had any major problems with it so far.

I uninstalled and re-installed and this time, in the Status bar, it said that no update was available. Should I consider this to be an improvement?

See if you can now run Ewido.

As regards the Windows Setup file, am I to understand that I can delete it without adverse consequences??

Yes. You must always evaluate this file occurance in context. In this case, adware was found embedded in that setup file. This could be a large part of your recent slowing system performance. Make sure to leave it in your 'Recycle Bin' for a couple of days to improve your comfort zone over any such (recoverable) file removal.




Try running this tool (preferably in SAFE MODE - tapping the F8 KEY upon REBOOT):

Please download ATF Cleaner http://www.atribune.org/ccount/click.php?id=1 by Atribune.
This program is for XP and Windows 2000 only

It does not require any installation and uses minimal system resources. It is set up to clean IE, FireFox and Opera, and detects the browsers you have and grays out the other(s).

• Double-click ATF-Cleaner.exe to run the program.
  Under Main choose: Select All
  Recommend UNCHECKING COOKIES if you rely on system remembered passwords.
  Click the Empty Selected button.

If you use Firefox browser

• Click Firefox at the top and choose: Select All EXCEPT FIREFOX SAVED PASSWORDS
  Click the Empty Selected button.
  NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser

• Click Opera at the top and choose: Select All EXCEPT COOKIES AND SAVED PASSWORDS
  Click the Empty Selected button.
  NOTE: If you would like to keep your cookies and saved passwords, please click No at the prompt.

Click Exit on the Main menu to close the program.

Please post your latest HijackThis log in case anything has changed recently.

Hi VOP. Sorry for the delay.

I must report I haven't noticed any significant improvement as far as overall speed of the computer is concerned, and that the initial problem (i.e. 'Cannot open/create file!') is still there. I've tried again this morning and this time got the 'No update available' mention in the Status bar.

Unless you can think of something else, I guess we'll just have to leave it at that.