THank you so much for all of your help. Here is the new HJT log and ewido report log.
Logfile of HijackThis v1.99.1
Scan saved at 9:55:50 PM, on 8/3/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Documents and Settings\Scott Wallace\My Documents\hijackthis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://websearch.drs...esearch.cgi?id=O2 - BHO: (no name) - {00F1D395-4744-40f0-A611-980F61AE2C59} - (no file)
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {6B683901-402A-02B1-483C-5B0AD45A5947} - C:\DOCUME~1\SCOTTW~1\APPLIC~1\SEEKMA~1\cdrom platform.exe
O2 - BHO: MSN Search Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.01.0000.2214\en-us\msntb.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: MSN Search Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.01.0000.2214\en-us\msntb.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [eanth_system_patcher] C:\PROGRA~1\ACCELE~1\SYSTEM~1\sys_alert.exe /Startup
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.01.0000.2214\en-us\msntb.dll/search.htm
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\MSN Toolbar Suite\TAB\02.02.0000.1007\en-us\msntabres.dll/229?ba1c4b9651194f96b65ec2ed9f4ab92
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\MSN Toolbar Suite\TAB\02.02.0000.1007\en-us\msntabres.dll/230?ba1c4b9651194f96b65ec2ed9f4ab92
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Yahoo! Hearts -
http://download.game...nts/y/ht0_x.cabO16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) -
http://support.dell....iler/SysPro.CABO16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) -
http://www.ipix.com/viewers/ipixx.cabO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage) -
http://go.microsoft....738&clcid=0x409O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) -
http://us.dl1.yimg.c...nst20040510.cabO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\SYSTEM32\ati2sgag.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Intel® NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------
+ Created on: 9:25:10 PM, 8/3/2005
+ Report-Checksum: FC9B453A
+ Scan result:
HKLM\SOFTWARE\Classes\CLSID\{0007522A-2297-43C1-8EB1-C90B0FF20DA5} -> Spyware.ShopNav : Cleaned with backup
HKLM\SOFTWARE\Classes\PROTOCOLS\Name-Space Handler\res -> Spyware.WebSearch : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\ins -> Spyware.WebRebates : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\AUI -> Spyware.WebSearch : Cleaned with backup
HKU\S-1-5-21-1396687686-596899218-3719176840-1008\Software\Microsoft\Internet Explorer\Extensions\{6685509E-B47B-4f47-8E16-9A5F3A62F683} -> Spyware.MoneyMaker : Cleaned with backup
HKU\S-1-5-21-1396687686-596899218-3719176840-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0007522A-2297-43C1-8EB1-C90B0FF20DA5} -> Spyware.ShopNav : Cleaned with backup
HKU\S-1-5-21-1396687686-596899218-3719176840-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{016235BE-59D4-4CEB-ADD5-E2378282A1D9} -> Spyware.AproposMedia : Cleaned with backup
HKU\S-1-5-21-1396687686-596899218-3719176840-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6685509E-B47B-4F47-8E16-9A5F3A62F683} -> Spyware.MoneyMaker : Cleaned with backup
[892] c:\windows\system32\lhguyu.exe -> Adware.BetterInternet : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Cookies\brett wallace@2o7[1].txt -> Spyware.Cookie.2o7 : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Cookies\brett wallace@abetterinternet[1].txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Cookies\brett
[email protected][1].txt -> Spyware.Cookie.Hitbox : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Cookies\brett
[email protected][1].txt -> Spyware.Cookie.Xxxtoolbar : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Cookies\brett wallace@specificpop[2].txt -> Spyware.Cookie.Specificpop : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Cookies\brett
[email protected][1].txt -> Spyware.Cookie.Enigmasoftwaregroup : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temp\auf0.exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temp\auf1.exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temp\auf2.exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temp\auf3.exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temp\auf4.exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temp\auf5.exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temp\auf6.exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temp\auf7.exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temp\auf8.exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temp\auf9.exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temp\furYaGs.exe -> TrojanDownloader.IstBar : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temp\~apropos0\atl.dll -> Trojan.Pakes : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temp\~apropos0\atlw.dll -> Trojan.Pakes : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temporary Internet Files\Content.IE5\3Y3IJ7DW\AproposClientInstaller[1].exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temporary Internet Files\Content.IE5\3Y3IJ7DW\AproposClientInstaller[2].exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temporary Internet Files\Content.IE5\3Y3IJ7DW\AproposClientInstaller[3].exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temporary Internet Files\Content.IE5\3Y3IJ7DW\msbb[1].exe -> Spyware.Zango : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temporary Internet Files\Content.IE5\J6N1B3T2\AproposClientInstaller[1].exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temporary Internet Files\Content.IE5\J6N1B3T2\AproposClientInstaller[2].exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temporary Internet Files\Content.IE5\J6N1B3T2\istdownload[1].exe -> TrojanDownloader.IstBar : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temporary Internet Files\Content.IE5\N9ZRL8GL\AproposClientInstaller[1].exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temporary Internet Files\Content.IE5\N9ZRL8GL\AproposClientInstaller[2].exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temporary Internet Files\Content.IE5\N9ZRL8GL\AproposClientInstaller[3].exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temporary Internet Files\Content.IE5\NHUTBOSB\actalert[1] -> TrojanDownloader.Dyfuca.bw : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temporary Internet Files\Content.IE5\NHUTBOSB\AproposClientInstaller[1].exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temporary Internet Files\Content.IE5\NHUTBOSB\AproposClientInstaller[2].exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temporary Internet Files\Content.IE5\NHUTBOSB\fash[1].cab/fash.exe -> Backdoor.Agent.bg : Cleaned with backup
C:\Documents and Settings\Brett Wallace\Local Settings\Temporary Internet Files\Content.IE5\NHUTBOSB\tr[1].htm -> Spyware.BookedSpace : Cleaned with backup
C:\Documents and Settings\Ken Wallace\Cookies\ken wallace@2o7[1].txt -> Spyware.Cookie.2o7 : Cleaned with backup
C:\Documents and Settings\Ken Wallace\Cookies\ken
[email protected][4].txt -> Spyware.Cookie.66.220.17.154 : Cleaned with backup
C:\Documents and Settings\Ken Wallace\Cookies\ken wallace@abetterinternet[1].txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
C:\Documents and Settings\Ken Wallace\Cookies\ken
[email protected][2].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Ken Wallace\Cookies\ken
[email protected][2].txt -> Spyware.Cookie.Specificclick : Cleaned with backup
C:\Documents and Settings\Ken Wallace\Local Settings\Temp\A2A4.tmp/aqadcup.exe -> Backdoor.Agent.co : Cleaned with backup
C:\Documents and Settings\Ken Wallace\Local Settings\Temp\auf0.exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Ken Wallace\Local Settings\Temp\auf1.exe -> TrojanDownloader.Apropo.d : Cleaned with backup
C:\Documents and Settings\Ken Wallace\Local Settings\Temp\Cookies\ken
[email protected][2].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Ken Wallace\Local Settings\Temp\istsv_.exe -> TrojanDownloader.IstBar.ga : Cleaned with backup
C:\Documents and Settings\Ken Wallace\Local Settings\Temp\Patch281.exe -> TrojanDropper.Agent.aa : Cleaned with backup
C:\Documents and Settings\Ken Wallace\Local Settings\Temp\whenu.exe -> Adware.SaveNow : Cleaned with backup
C:\Documents and Settings\Ken Wallace\Local Settings\Temp\~854819.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Linda Wallace\Cookies\linda wallace@abetterinternet[1].txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
C:\Documents and Settings\Linda Wallace\Cookies\linda
[email protected][2].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Linda Wallace\Cookies\linda wallace@burstnet[2].txt -> Spyware.Cookie.Burstnet : Cleaned with backup
C:\Documents and Settings\Linda Wallace\Cookies\linda wallace@hypertracker[1].txt -> Spyware.Cookie.Hypertracker : Cleaned with backup
C:\Documents and Settings\Linda Wallace\Local Settings\Temp\THI7D4C.tmp\pynix.cab/Pynix.dll -> Spyware.BiSpy : Cleaned with backup
C:\Documents and Settings\Linda Wallace\Local Settings\Temp\THI7D4C.tmp\pynix.cab/polall1p.exe -> Trojan.Agent.ay : Cleaned with backup
C:\Documents and Settings\Linda Wallace\Local Settings\Temp\~584697.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Scott Wallace\Cookies\scott wallace@abetterinternet[1].txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
C:\Documents and Settings\Scott Wallace\Local Settings\Temp\bxmo.exe -> Backdoor.Agent.cg : Cleaned with backup
C:\Documents and Settings\Scott Wallace\Local Settings\Temp\mgah.dll -> Spyware.Hijacker.Generic : Cleaned with backup
C:\Documents and Settings\Scott Wallace\Local Settings\Temp\Patch281.exe -> TrojanDropper.Agent.aa : Cleaned with backup
C:\Documents and Settings\Scott Wallace\Local Settings\Temp\~602586.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Scott Wallace\Local Settings\Temp\~614088.tmp -> Spyware.Wintools : Cleaned with backup
C:\Program Files\EarthLink 5.0\Access\conmgr.exe -> Heuristic.Win32.Dialer : Cleaned with backup
C:\Program Files\EarthLink 5.0\conmgr.exe -> Heuristic.Win32.Dialer : Cleaned with backup
C:\Program Files\EarthLink 5.0\Data1.cab/conmgr.exe -> Heuristic.Win32.Dialer : Cleaned with backup
C:\Program Files\EarthLink 5.0\Data1.cab/conmgr.exe1 -> Heuristic.Win32.Dialer : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\298CC967-88BB-477B-AD6C-333895\73537623-D1D5-41D3-96EA-CAB387 -> Spyware.Hijacker.Generic : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\2C133AE0-D635-4824-92F5-352DB5\91B8D123-5BB7-4990-8B72-9934C4 -> Spyware.Hijacker.Generic : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\3C76AD33-A9C2-4CB7-9657-EA68C0\CF6C781F-F773-4F0E-974C-219952 -> Adware.BetterInternet : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\611A0388-82DF-4BFE-BF5F-934672\069D0405-8555-4DEE-9948-1362E1 -> Spyware.Hijacker.Generic : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\C9FAE526-3407-4AD0-9ECF-E31DF5\EAA2DBE8-7B54-4FAC-88E8-ACB76A -> Spyware.Hijacker.Generic : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\CA09FCD2-3A67-4B0D-9875-B0DDB5\83F8A857-B93C-4EF0-9C11-166857 -> Spyware.Hijacker.Generic : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\E921DC22-C5BE-4BE2-B43A-BAFF21\4F4C1E0F-5C44-48ED-B03A-0D8ED4 -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\$NtServicePackUninstall$\nutmain.exe -> TrojanSpy.Agent.p : Cleaned with backup
C:\WINDOWS\AppPatch\nutmain.exe -> TrojanSpy.Agent.p : Cleaned with backup
C:\WINDOWS\cccpzrdtttu.exe -> Adware.BetterInternet : Cleaned with backup
C:\WINDOWS\dhupdt.exe_ -> Spyware.DealHelper : Cleaned with backup
C:\WINDOWS\dinst.exe -> TrojanDownloader.Intexp.d : Cleaned with backup
C:\WINDOWS\dsr.dll -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\dsr.exe -> Trojan.Imiserv.c : Cleaned with backup
C:\WINDOWS\enhuninstall.exe -> Spyware.NoName : Cleaned with backup
C:\WINDOWS\Help\fontap.exe -> TrojanSpy.Agent.p : Cleaned with backup
C:\WINDOWS\SYSTEM32\atiupdate5.exe -> Spyware.Adtomi : Cleaned with backup
C:\WINDOWS\SYSTEM32\bH.dll -> Spyware.BargainBuddy : Cleaned with backup
C:\WINDOWS\SYSTEM32\BO2802040113.dll -> Spyware.BargainBuddy : Cleaned with backup
C:\WINDOWS\SYSTEM32\BO2804040128.exe -> Spyware.VirtualBouncer : Cleaned with backup
C:\WINDOWS\SYSTEM32\lhguyu.exe -> Adware.BetterInternet : Cleaned with backup
C:\WINDOWS\Temp\bw.exe -> TrojanDropper.Small.of : Cleaned with backup
C:\WINDOWS\Temp\upd125.exe -> Spyware.VX2 : Cleaned with backup
C:\WINDOWS\Temp\~417980.tmp -> Spyware.Wintools : Cleaned with backup
C:\WINDOWS\Temp\~750881.tmp -> Spyware.Wintools : Cleaned with backup
C:\WINDOWS\uabtwez.exe -> Adware.BetterInternet : Cleaned with backup
::Report End