I used Katarsky(sp?) and I can't get those reg. entries to change. I did everything katarsky said on their website, both entries are pointing to the origin file and the default is katarsky. Still get the same error message!

Doing a search on ScAuth.dll, I came up with this URL that may fix your problem. It is a Symantec fix for VBS redlof.a virus. It has registry checks to check if infected and removal tools. I believe there are many entrees in the hijackthis forum.