Hi. I have been getting alerts from Norton protection for 2 days on my vista laptop of attack attempts by something called barcfg.myway.com. Can anyone tell me what this is? It started last night and around the same time Firefox kept closing on me while I was trying to use it. A box simply says "Firefox has a problem and needs to close". Are these two things connected? I ran a Norton full scan which at first had problems I needed to fix through Liveupdate so it would run but then it ran fine and only alerted me to a tracking cookie which I deleted. Should I be worried about this myway thing and how do I get rid of this attack that keep popping up?

It appears to be a search bar that is detected because of similarities to adware or is adware itself.
http://www.google.com/search?q=barcfg.mywa...amp;startPage=1

You could try the suggestions given in the V2008 topic.

Malwarebytes' Anti-Malware 1.31
Database version: 1498
Windows 6.0.6001 Service Pack 1

12/14/2008 2:51:10 AM
mbam-log-2008-12-14 (02-51-10).txt

Scan type: Full Scan (C:\|D:\|E:\|F:\|)
Objects scanned: 213131
Time elapsed: 2 hour(s), 3 minute(s), 24 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 6
Files Infected: 3

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{014da6c9-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\Program Files\MyWay (Adware.MyWay) -> Quarantined and deleted successfully.
C:\Program Files\MyWay\myBar (Adware.MyWay) -> Quarantined and deleted successfully.
C:\Program Files\MyWay\myBar\1.bin (Adware.MyWay) -> Quarantined and deleted successfully.
C:\Program Files\MyWay\myBar\History (Adware.MyWay) -> Quarantined and deleted successfully.
C:\Program Files\MyWay\SrchAstt (Adware.MyWay) -> Quarantined and deleted successfully.
C:\Program Files\MyWay\SrchAstt\1.bin (Adware.MyWay) -> Quarantined and deleted successfully.

Files Infected:
C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (Adware.MyWay) -> Quarantined and deleted successfully.
C:\Program Files\MyWay\myBar\History\search (Adware.MyWay) -> Quarantined and deleted successfully.
C:\Program Files\MyWay\SrchAstt\1.bin\MYSRCHAS.DLL (Adware.MyWay) -> Quarantined and deleted successfully.

Rogue Remover Free didn't find anything but Super antispyware did. I ran a full scan then quarintined and removed about 30 items, including about 10 MyWay adwares. Just in case I rebooted, as per instructions on the program, and ran a quick scan. Despite it saying that it removed the adware, it came up again. It's been running for 20mins now and there are 4 so far. How can I be sure it's all gone when one program gets rid of some, another doesnt detect any, and then a third keeps finding more even after it says it eliminating them? does anyone know how dangerous this myway file is to being with?

thank you!!!

Click here to download the HijackThis Installer.

Save HJTInstall.exe to your desktop.
Double-click on HJTInstall.exe to run the program.
By default it will install to C:\Program Files\Trend Micro\HijackThis.
Accept the license agreement by clicking the "I Accept" button.
Click on the "Do a system scan and save a log file button. It will scan and then ask you to save the log.
Click "Save log" to save the log file and then the log will open in Notepad.
Click on Edit>Select All, then click on "Edit>Copy" to copy the entire contents of the log.

Then go to this forum and start a new thread for a Trusted Advisor to help you.
Do NOT have HijackThis fix anything yet! Most of what it finds will be harmless or even required.

Make sure you explain the problem as well as mentioning the save logs from your spyware scans. Include a link to this thread. Then paste your HijackThis log into your post. Do not post your log in this thread.
Mark

done. thanks. http://forums.pcpitstop.com/index.php?showtopic=163358