On my add and remove programs, I have a program i have no idea what it is or why its there and its taking up alot of space. When i click on it instead of getting the usually uninstall i get this… ghost installer ,with a big red red dot on it and an X thru it saying Installation log file not found… is this a virus? should i be trying to get this off my computer?
Thank you in advance for your help
Sasysusie
kindly try this free Malwarebytes: http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button
or provide a hijackthis tool here: http://filehippo.com/download_hijackthis/download/8571e06e5eb8ab03c649f3b5d647c599/
don’t forget to post your log files.
sorry but what log files do i need to post?
Both programs generate log files when they have been run, it is those that you need to post.
ran malwarebytes and here is that log
should i be running the other program as well?
Hello sasysusie,
according to the mbam log, you haven’t cleaned the infections. after the scanning section there should be a option to fix the items detected. do that. then,
run a “scan” using hijack this!(do a system scan only.) then post log.
can i get the link for hijack this tytyty
Vista SP1 has been available since April 15, 2008 and Vista SP2 is available.
Go to Start then enter windows update then Change settings then select Install updates automatically (recommended) or at least Check for updates but do not download them nor install them
Trend Micro HijackThis 2.02
http://www.majorgeeks.com/download5554.html
http://windowshelp.microsoft.com/windows/en-us/Help/61fb9ef2-03c9-4a03-9b78-95bed6e508331033.mspx
Run Secunia Online Software Inspector to see what applications are vulnerable:
http://secunia.com/vulnerability_scanning/online
hmmmm don’t see a fix it … its just giving me a remove selected… it appears to be my only choice… should i try running the other program i was given instead? did that make any sense… hope so i know what im asking hope you do as well 
http://www.filehippo.com/download_hijackthis/download/8571e06e5eb8ab03c649f3b5d647c599/
remove selected. then do a scan of hijack this(hjt)
kenny now im confused… do i need to do all that in addtion to running the hijack this?
run hijack this - it tells us what to advise you…
HijackThis log will confirm that you need Vista SP3.
;D
Im doing one step at a time i find that works best for me here is my log from hjt… let me know where to go from here
tyty
You are infected by: “Adware.Gamevance” after a quick scan using Malwarebytes you must have to click a remove button… to remove the selected malware… then restart your PC after that the Malwarebytes will removed it… 
Run MBAM again and this time when the scan is complete, all detections should have a check mark in the box to the left of the entry, leave them selected (or select if not selected). At the bottom of the window there is a button, Remove Selected, click that and the items will be removed.
David after i ran mbam i did have all the boxes checked and i did hit the Remove Selected button. I then ran the hjt and sent that log wit one of my last posts. After that i did rum the mbam again and the second time thru it did not find anything. Was there anything in the hjt log that looked amiss?? after selected “remove all selected” on the mbam scan i went back to my add and remove programs and that same program was still listed there and still said it had a ghost installer… the name of it is “the hidden object show season 2” published by Oberon Media… i really do not know what that is and feel its very suspcious with the ghost installer that comes up when i try to uninstall it…
Ok now that ive brought you up to speed of all ive done to this point do i still need to run mbam again?
thank you for your time and help!
Susie
I’m not familiar with the spyware terminator logs I only used it for a very short time and didn’t like it. But there doesn’t appear to be anything obvious.
We were only concerned that you might not have taken action on the entries detected by MBAM, since you log didn’t show they had been quarantined and deleted but no action taken. That is why we wanted you to run it again and take the removal action, no need to do it again now that you have done that and confirmed no further detections.