--------------------------------------------------------- ewido security suite - Scan report --------------------------------------------------------- + Created on: 10:56:59 PM, 8/14/2005 + Report-Checksum: 7DFA3784 + Scan result: HKLM\SOFTWARE\Classes\CLSID\{2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} -> Spyware.MiniBug : Cleaned with backup HKLM\SOFTWARE\Classes\CLSID\{3643ABC2-21BF-46B9-B230-F247DB0C6FD6} -> Spyware.E2Give : Cleaned with backup HKLM\SOFTWARE\Classes\Interface\{BC333116-6EA1-40A1-9D07-ECB192DB8CEA} -> Spyware.AproposMedia : Cleaned with backup HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\H323TSP -> Spyware.Look2Me : Cleaned with backup HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344} -> Spyware.BargainBuddy : Cleaned with backup HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CE188402-6EE7-4022-8868-AB25173A3E14} -> Spyware.BargainBuddy : Cleaned with backup HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F4E04583-354E-4076-BE7D-ED6A80FD66DA} -> Spyware.BargainBuddy : Cleaned with backup HKU\S-1-5-21-3982764645-1820578845-421234119-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000049-8F91-4D9C-9573-F016E7626484} -> Spyware.BetterInternet : Cleaned with backup HKU\S-1-5-21-3982764645-1820578845-421234119-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0019C3E2-DD48-4A6D-ABCD-8D32436323D9} -> Spyware.BookedSpace : Cleaned with backup HKU\S-1-5-21-3982764645-1820578845-421234119-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{016235BE-59D4-4CEB-ADD5-E2378282A1D9} -> Spyware.AproposMedia : Cleaned with backup HKU\S-1-5-21-3982764645-1820578845-421234119-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01F44A8A-8C97-4325-A378-76E68DC4AB2E} -> Spyware.IEPlugin : Cleaned with backup HKU\S-1-5-21-3982764645-1820578845-421234119-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{12EE7A5E-0674-42F9-A76A-000000004D00} -> Spyware.BrowserAid : Cleaned with backup HKU\S-1-5-21-3982764645-1820578845-421234119-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3643ABC2-21BF-46B9-B230-F247DB0C6FD6} -> Spyware.E2Give : Cleaned with backup HKU\S-1-5-21-3982764645-1820578845-421234119-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344} -> Spyware.BargainBuddy : Cleaned with backup HKU\S-1-5-21-3982764645-1820578845-421234119-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CE188402-6EE7-4022-8868-AB25173A3E14} -> Spyware.BargainBuddy : Cleaned with backup HKU\S-1-5-21-3982764645-1820578845-421234119-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F4E04583-354E-4076-BE7D-ED6A80FD66DA} -> Spyware.BargainBuddy : Cleaned with backup HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344} -> Spyware.BargainBuddy : Cleaned with backup HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CE188402-6EE7-4022-8868-AB25173A3E14} -> Spyware.BargainBuddy : Cleaned with backup HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F4E04583-354E-4076-BE7D-ED6A80FD66DA} -> Spyware.BargainBuddy : Cleaned with backup [1244] C:\WINDOWS\system32\uunpui.dll -> Spyware.Look2Me : Error during cleaning [3068] C:\WINDOWS\etb\nt_hide63.dll -> Spyware.EliteBar : Error during cleaning [6052] C:\WINDOWS\system32\guard.tmp -> Spyware.Look2Me : Error during cleaning [5388] C:\WINDOWS\etb\nt_hide63.dll -> Spyware.EliteBar : Error during cleaning [4172] C:\WINDOWS\etb\nt_hide63.dll -> Spyware.EliteBar : Error during cleaning [2140] C:\WINDOWS\etb\nt_hide63.dll -> Spyware.EliteBar : Error during cleaning [5924] C:\WINDOWS\etb\nt_hide63.dll -> Spyware.EliteBar : Error during cleaning [2828] C:\WINDOWS\etb\nt_hide63.dll -> Spyware.EliteBar : Error during cleaning [1428] C:\WINDOWS\etb\nt_hide63.dll -> Spyware.EliteBar : Error during cleaning [5968] C:\WINDOWS\etb\nt_hide62.dll -> Spyware.EliteBar : Error during cleaning [5204] C:\WINDOWS\etb\nt_hide62.dll -> Spyware.EliteBar : Error during cleaning [3488] C:\WINDOWS\etb\nt_hide62.dll -> Spyware.EliteBar : Error during cleaning C:\Documents and Settings\Laptop\Local Settings\Temp\2294260_1884_3772_3160_63.41.tmp -> Spyware.EliteBar : Cleaned with backup C:\Documents and Settings\Laptop\Local Settings\Temp\3408252_2384_3772_4432_63.41.tmp -> Spyware.EliteBar : Cleaned with backup C:\Documents and Settings\Laptop\Local Settings\Temp\3473788_2384_3772_4456_63.41.tmp -> Spyware.EliteBar : Cleaned with backup C:\Documents and Settings\Laptop\Local Settings\Temp\459216_680_3772_3108_63.41.tmp -> Spyware.EliteBar : Cleaned with backup C:\Documents and Settings\Laptop\Local Settings\Temp\5112450_2384_3772_1352_63.41.tmp -> Spyware.EliteBar : Cleaned with backup C:\Documents and Settings\Laptop\Local Settings\Temp\Cookies\laptop@edge.ru4[2].txt -> Spyware.Cookie.Ru4 : Cleaned with backup C:\Documents and Settings\Laptop\Local Settings\Temp\Cookies\laptop@revenue[2].txt -> Spyware.Cookie.Revenue : Cleaned with backup C:\Documents and Settings\Laptop\Local Settings\Temp\Cookies\laptop@server.iad.liveperson[1].txt -> Spyware.Cookie.Liveperson : Cleaned with backup C:\Documents and Settings\Laptop\Local Settings\Temp\Cookies\laptop@z1.adserver[1].txt -> Spyware.Cookie.Adserver : Cleaned with backup C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll -> Spyware.Wheaterbug : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\030B6F65-43A2-4C86-BD68-D3974D\8CC93878-C429-4222-B78F-92B410 -> Spyware.Look2Me : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\30C22E83-9875-4BE8-A2D3-7D10BD\B3FBB51F-94AC-4C72-AE8A-FDF16C -> Spyware.Look2Me : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\3FDB066A-FD97-4372-AB00-256967\E1648694-C9BA-473F-A1DF-F9ED8F -> Spyware.E2Give : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\4695E6E9-CFEE-43B6-B020-C743D3\5760CEBD-B7FE-4AAD-9939-356E6D -> TrojanDownloader.Qoologic.n : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\4695E6E9-CFEE-43B6-B020-C743D3\E6C3FF56-5494-4728-80E7-2B2D50 -> TrojanDownloader.Qoologic.n : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\4695E6E9-CFEE-43B6-B020-C743D3\E821424F-48B4-4DE5-A437-BECFD7 -> TrojanDownloader.Qoologic.n : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\4695E6E9-CFEE-43B6-B020-C743D3\FD97D584-394B-494C-AB00-A40F65 -> TrojanDownloader.Qoologic.n : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\4F6AF8A4-AE6C-49CF-83B6-851185\0E837D26-5171-4A47-97D4-9CCFD6 -> TrojanDownloader.Qoologic.p : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\4F6AF8A4-AE6C-49CF-83B6-851185\8829BC2E-AC0A-48A9-805B-91F592 -> TrojanDownloader.Qoologic.n : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\4F6AF8A4-AE6C-49CF-83B6-851185\C654FA0F-F232-44C3-B6A5-B43F1F -> TrojanDownloader.Qoologic.n : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\4F6AF8A4-AE6C-49CF-83B6-851185\C67FD3C6-C8F9-4050-8C63-9AB22F -> TrojanDownloader.Qoologic.n : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\4F6AF8A4-AE6C-49CF-83B6-851185\C9CAAF2B-14CD-48FD-A508-AA49D2 -> TrojanDownloader.Qoologic.x : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\4F6AF8A4-AE6C-49CF-83B6-851185\CF58DC92-31AA-4BCF-8B17-921084 -> TrojanDownloader.Qoologic.n : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\4F6AF8A4-AE6C-49CF-83B6-851185\E5B8A4A0-19C9-4F19-9FBC-8CDC7A -> TrojanDownloader.Qoologic.n : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\4F6AF8A4-AE6C-49CF-83B6-851185\EF4B4853-3495-4B15-B01F-6F5F33 -> TrojanDownloader.Qoologic.x : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\4F6AF8A4-AE6C-49CF-83B6-851185\FEDE7FEB-E2B5-45F7-867F-BBDDFD -> TrojanDownloader.Qoologic.n : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\7F57B795-6C58-4A6E-8284-ED6DE5\BAA9092D-C103-403D-8BD4-33FFD2 -> TrojanDownloader.Apropo.ae : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\85AB093D-12A0-4924-BB6C-CFF17E\0AA2B448-578F-4D17-9888-EFE41F -> TrojanDownloader.Apropo.ah : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\906285F3-8660-4BC3-94E5-569D08\C66E6415-DB66-47E7-8E67-80DAA3 -> Spyware.Hijacker.Generic : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\AA1385CE-84A8-49A6-A8CF-810096\77EA6FA7-2D5A-4E74-AD7E-224442 -> Spyware.Hijacker.Generic : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\D0875409-F035-4C01-B69B-0DB051\09FE61DD-C7FF-45AE-B3A4-1BDDC5 -> Spyware.Look2Me : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\D0875409-F035-4C01-B69B-0DB051\B8195C7C-E4BD-420C-BB38-63BB9F -> Spyware.Look2Me : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\DEE5E073-F614-487F-ACE3-1D999D\9ADA10A7-6E54-4622-BE40-9F13EB -> Spyware.Look2Me : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\E3E8E668-41BC-4E28-9A3F-933DCA\390D3ED4-1627-4AB5-A949-966088 -> Spyware.Look2Me : Cleaned with backup C:\Program Files\Microsoft AntiSpyware\Quarantine\F8E29C3A-5EB4-4CD1-BD09-2DB068\31718384-6073-4058-9E95-5E3C70 -> Spyware.BargainBuddy : Cleaned with backup C:\Program Files\Mozilla Firefox\plugins\npzango.dll -> Spyware.WinAD : Cleaned with backup C:\WINDOWS\icont.exe -> Spyware.AdURL : Cleaned with backup C:\WINDOWS\ru.exe -> Spyware.PurityScan : Cleaned with backup C:\WINDOWS\SYSTEM32\adtiveds.dll -> Spyware.Look2Me : Cleaned with backup C:\WINDOWS\SYSTEM32\bitsprx2.exe -> Spyware.UrlSpy : Cleaned with backup C:\WINDOWS\SYSTEM32\bpdispl.dll -> Spyware.Look2Me : Cleaned with backup C:\WINDOWS\SYSTEM32\GIDEF.DLL -> Spyware.Look2Me : Cleaned with backup C:\WINDOWS\SYSTEM32\GSTUNAME.DLL -> Spyware.Look2Me : Cleaned with backup C:\WINDOWS\SYSTEM32\gyUnCompress.dll -> Spyware.Look2Me : Cleaned with backup C:\WINDOWS\SYSTEM32\iA1xdnt5.dll -> Spyware.Look2Me : Cleaned with backup C:\WINDOWS\SYSTEM32\InstallAPS.exe -> TrojanDropper.Agent.lu : Cleaned with backup C:\WINDOWS\SYSTEM32\javgwi.exe -> TrojanSpy.VB.eh : Cleaned with backup C:\WINDOWS\SYSTEM32\mexml.dll -> Spyware.Look2Me : Cleaned with backup C:\WINDOWS\SYSTEM32\rPsapi32.dll -> Spyware.Look2Me : Cleaned with backup C:\WINDOWS\SYSTEM32\s030109.Stub.exe -> TrojanDropper.Agent.hl : Cleaned with backup C:\WINDOWS\SYSTEM32\web2_212.exe -> TrojanDownloader.Qoologic.v : Cleaned with backup C:\WINDOWS\SYSTEM32\wzi.dll -> Spyware.Look2Me : Cleaned with backup C:\WINDOWS\SYSTEM32\__delete_on_reboot__AUNPS2.DLL -> Spyware.Hijacker.Generic : Cleaned with backup C:\WINDOWS\Temp\Cookies\laptop@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup ::Report End