user interface degraded after scan in SAFE MODE

Problem 1:
I have a Win ME system running Avast 4.8 and malware was reported. The two infections, however, couldn’t be deleted nor fixed. The indicated infected files were

c:\programfiles\bsinstall.exe%maindir%installer\saveinstwm.exe\save.exe

and

c:\programfiles\bsinstall.exe%maindir%installer\saveinstwm.exe\saveuninst.exe

Problem 2:

I was told by my usergroup to run Avast and might be able to delete or fix those files if I ran the system in SAFE MODE. When I did this, the program took 8 hours and the same infected files were reported. They still couldn’t be deleted nor fixed. Unfortunately, the user inteface degraded in SAFE MODE. Now when I run a scan in normal mode, the degraded user interface appears and the normal 18 minute scan takes 8 hours. The interface is partially ghosted and even if I download updates, remains ghosted and only partially functional. I don’t see a way to restore the user interface to its normal functionality.

Thanks.

Mark

Switch to another skin then back. This could solve it.
If not do a repair of avast. control panel > programs > avast > change/remove > repair.

I was able to get the user interface work normally again but upon running a second scan, the same infection message came back as follows:

c:\program files\bsinstall.exe%maindir.exe%installer\saveinstwm.exe\save.exe

c:\program files\bsinstall.exe%maindir.exe%installer\saveinstwm.exe\saveuninst.exe

both files indicate: infection:win32:adware-gen [adw] error occurred during file deleting: the operation is not supported for this type of archive

Apparently, Avast cannot delete nor fix this infection. I got that in an email message from their tech support, so I was pretty upset–what’s the point of identifying malware if you can’t remove it. Ironically, I did a HighJack This scan and the above files didn’t appear.

At this point, I’m not sure what to do and would buy an antivirus program but I haven’t found any that work with Windows ME.

Any suggestions.

Make sure you have the latest version of Hijackthis. You can get it HERE
Run it and post the log here please. Let me have a look. We will get your system clean.

Im not sure what this two program are which detected by avast as adware.

Download OTMoveIt2 by OldTimer

*Save it to your desktop.
*Please double-click OTMoveIt2.exe to run it.
*Copy the two files below

c:\program files\bsinstall.exe\%maindir.exe%installer\saveinstwm.exe\save.exe

c:\program files\bsinstall.exe%maindir.exe%installer\saveinstwm.exe\saveuninst.exe

*Return to OTMoveIt2, right click in the “Paste Custom List Of Files/Patterns To Move” window (under the
yellow bar) and choose Paste.
*Click the red Moveit! button.
*Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them
and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next
reply.
*Close OTMoveIt2

Sometimes, only using Unlocker (http://ccollomb.free.fr/unlocker/) or KillBox (http://killbox.net/) or MoveOnBoot (http://www.snapfiles.com/get/moveonboot.html) or Delete FXP (http://www.jrtwine.com/) you can delete files that, for any reason, have a bad ‘signature’ in the Master File Table (MFT).