thank you for helping me.., here is the requested summary
********
9:45 PM: | Start of Session, Thursday, October 27, 2005 |
9:45 PM: Spy Sweeper started
9:45 PM: Sweep initiated using definitions version 564
9:45 PM: Found Adware: look2me
9:45 PM: HKLM\software\microsoft\windows nt\currentversion\winlogon\notify\ms-dos emulation\ || dllname (ID = 129984)
9:45 PM: l80u0id9e80.dll (ID = 129984)
9:45 PM: Starting Memory Sweep
9:46 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:46 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:46 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:46 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:46 PM: Detected running threat: E:\WINDOWS\system32\l80u0id9e80.dll (ID = 163672)
9:47 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:47 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:47 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:47 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:47 PM: Detected running threat: E:\WINDOWS\system32\kld101a.dll (ID = 163672)
9:48 PM: Detected running threat: E:\WINDOWS\system32\guard.tmp (ID = 163672)
9:48 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:48 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:48 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:48 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:48 PM: Memory Sweep Complete, Elapsed Time: 00:03:20
9:48 PM: Starting Registry Sweep
9:49 PM: Found Adware: quicklink search toolbar
9:49 PM: HKCR\qlink.qlfilter\ (3 subtraces) (ID = 890588)
9:49 PM: HKCR\qlink.qlfilter.1\ (3 subtraces) (ID = 890592)
9:49 PM: HKCR\qlink.qlhelper\ (3 subtraces) (ID = 890596)
9:49 PM: HKCR\qlink.qlhelper.1\ (3 subtraces) (ID = 890600)
9:49 PM: HKCR\clsid\{aa3c0ffe-758e-4c41-b1b9-2d711915a938}\ (8 subtraces) (ID = 890604)
9:49 PM: HKCR\clsid\{e225ab73-4d7e-45f7-9425-47d2f7c7a8ab}\ (10 subtraces) (ID = 890613)
9:49 PM: HKCR\typelib\{090712ed-1622-4227-94d3-f573a9c2577f}\ (9 subtraces) (ID = 890624)
9:49 PM: HKLM\software\classes\qlink.qlfilter\ (3 subtraces) (ID = 890661)
9:49 PM: HKLM\software\classes\qlink.qlfilter.1\ (3 subtraces) (ID = 890665)
9:49 PM: HKLM\software\classes\qlink.qlhelper\ (3 subtraces) (ID = 890669)
9:49 PM: HKLM\software\classes\qlink.qlhelper.1\ (3 subtraces) (ID = 890673)
9:49 PM: HKLM\software\classes\clsid\{aa3c0ffe-758e-4c41-b1b9-2d711915a938}\ (8 subtraces) (ID = 890677)
9:49 PM: HKLM\software\classes\clsid\{e225ab73-4d7e-45f7-9425-47d2f7c7a8ab}\ (10 subtraces) (ID = 890686)
9:49 PM: Found Adware: instant access
9:49 PM: HKLM\software\classes\clsid\{e225ab73-4d7e-45f7-9425-47d2f7c7a8ab}\progid\ (1 subtraces) (ID = 890691)
9:49 PM: HKLM\software\classes\typelib\{090712ed-1622-4227-94d3-f573a9c2577f}\ (9 subtraces) (ID = 890697)
9:49 PM: HKLM\software\microsoft\windows\currentversion\uninstall\quicklinks\ (2 subtraces) (ID = 909558)
9:49 PM: HKLM\software\microsoft\windows\currentversion\explorer\browser qlhelper objects\{aa3c0ffe-758e-4c41-b1b9-2d711915a938}\ (ID = 909564)
9:49 PM: Found Adware: popup killer
9:49 PM: HKU\S-1-5-21-1547161642-1482476501-725345543-500\software\ultimate popup killer\ (3 subtraces) (ID = 136785)
9:49 PM: Registry Sweep Complete, Elapsed Time:00:00:17
9:49 PM: Starting Cookie Sweep
9:49 PM: Found Spy Cookie: 2o7.net cookie
9:49 PM: administrator@2o7[1].txt (ID = 1957)
9:49 PM: Found Spy Cookie: 3 cookie
9:49 PM: administrator@3[1].txt (ID = 1959)
9:49 PM: Found Spy Cookie: websponsors cookie
9:49 PM:
[email protected][2].txt (ID = 3665)
9:49 PM: Found Spy Cookie: abcsearch cookie
9:49 PM: administrator@abcsearch[1].txt (ID = 2033)
9:49 PM: Found Spy Cookie: yieldmanager cookie
9:49 PM:
[email protected][1].txt (ID = 3751)
9:49 PM: Found Spy Cookie: adknowledge cookie
9:49 PM: administrator@adknowledge[1].txt (ID = 2072)
9:49 PM: Found Spy Cookie: hbmediapro cookie
9:49 PM:
[email protected][2].txt (ID = 2768)
9:49 PM: Found Spy Cookie: specificclick.com cookie
9:49 PM:
[email protected][1].txt (ID = 3400)
9:49 PM: Found Spy Cookie: addynamix cookie
9:49 PM:
[email protected][1].txt (ID = 2062)
9:49 PM: Found Spy Cookie: cc214142 cookie
9:49 PM:
[email protected][1].txt (ID = 2367)
9:49 PM: Found Spy Cookie: advertising cookie
9:49 PM: administrator@advertising[2].txt (ID = 2175)
9:49 PM: Found Spy Cookie: falkag cookie
9:49 PM:
[email protected][2].txt (ID = 2650)
9:49 PM:
[email protected][2].txt (ID = 2650)
9:49 PM:
[email protected][2].txt (ID = 2650)
9:49 PM: Found Spy Cookie: ask cookie
9:49 PM: administrator@ask[1].txt (ID = 2245)
9:49 PM: Found Spy Cookie: atlas dmt cookie
9:49 PM: administrator@atdmt[2].txt (ID = 2253)
9:49 PM: Found Spy Cookie: atwola cookie
9:49 PM: administrator@atwola[1].txt (ID = 2255)
9:49 PM: Found Spy Cookie: azjmp cookie
9:49 PM: administrator@azjmp[2].txt (ID = 2270)
9:49 PM: Found Spy Cookie: belnk cookie
9:49 PM: administrator@belnk[1].txt (ID = 2292)
9:49 PM: Found Spy Cookie: bizrate cookie
9:49 PM: administrator@bizrate[1].txt (ID = 2308)
9:49 PM: Found Spy Cookie: bluestreak cookie
9:49 PM: administrator@bluestreak[1].txt (ID = 2314)
9:49 PM: Found Spy Cookie: burstnet cookie
9:49 PM: administrator@burstnet[2].txt (ID = 2336)
9:49 PM: Found Spy Cookie: casalemedia cookie
9:49 PM: administrator@casalemedia[2].txt (ID = 2354)
9:49 PM:
[email protected][2].txt (ID = 2293)
9:49 PM:
[email protected][1].txt (ID = 1958)
9:49 PM: Found Spy Cookie: clickandtrack cookie
9:49 PM:
[email protected][2].txt (ID = 2397)
9:49 PM: Found Spy Cookie: linksynergy cookie
9:49 PM: administrator@linksynergy[1].txt (ID = 2926)
9:49 PM: Found Spy Cookie: maxserving cookie
9:49 PM: administrator@maxserving[1].txt (ID = 2966)
9:49 PM: Found Spy Cookie: top-banners cookie
9:49 PM:
[email protected][1].txt (ID = 3548)
9:49 PM: Found Spy Cookie: nextag cookie
9:49 PM: administrator@nextag[2].txt (ID = 5014)
9:49 PM: Found Spy Cookie: shop@home cookie
9:49 PM:
[email protected][1].txt (ID = 3368)
9:49 PM: Found Spy Cookie: paypopup cookie
9:49 PM: administrator@paypopup[1].txt (ID = 3119)
9:49 PM: Found Spy Cookie: peel network cookie
9:49 PM: administrator@peel[1].txt (ID = 3127)
9:49 PM: Found Spy Cookie: questionmarket cookie
9:49 PM: administrator@questionmarket[2].txt (ID = 3217)
9:49 PM: Found Spy Cookie: realmedia cookie
9:49 PM: administrator@realmedia[2].txt (ID = 3235)
9:49 PM: Found Spy Cookie: reunion cookie
9:49 PM: administrator@reunion[2].txt (ID = 3255)
9:49 PM: Found Spy Cookie: revenue.net cookie
9:49 PM: administrator@revenue[2].txt (ID = 3257)
9:49 PM: Found Spy Cookie: rn11 cookie
9:49 PM: administrator@rn11[2].txt (ID = 3261)
9:49 PM: Found Spy Cookie: servedby advertising cookie
9:49 PM:
[email protected][1].txt (ID = 3335)
9:49 PM: Found Spy Cookie: server.iad.liveperson cookie
9:49 PM:
[email protected][1].txt (ID = 3341)
9:49 PM: Found Spy Cookie: statcounter cookie
9:49 PM: administrator@statcounter[1].txt (ID = 3447)
9:49 PM: Found Spy Cookie: tradedoubler cookie
9:49 PM: administrator@tradedoubler[2].txt (ID = 3575)
9:49 PM: Found Spy Cookie: trafficmp cookie
9:49 PM: administrator@trafficmp[1].txt (ID = 3581)
9:49 PM: Found Spy Cookie: tribalfusion cookie
9:49 PM: administrator@tribalfusion[2].txt (ID = 3589)
9:49 PM: administrator@yieldmanager[2].txt (ID = 3749)
9:49 PM: Found Spy Cookie: adserver cookie
9:49 PM:
[email protected][1].txt (ID = 2142)
9:49 PM: Found Spy Cookie: zedo cookie
9:49 PM: administrator@zedo[2].txt (ID = 3762)
9:49 PM:
[email protected][1].txt (ID = 3751)
9:49 PM:
[email protected][1].txt (ID = 3548)
9:49 PM: Found Spy Cookie: partypoker cookie
9:49 PM: system@partypoker[2].txt (ID = 3111)
9:49 PM: system@tribalfusion[1].txt (ID = 3589)
9:49 PM: Cookie Sweep Complete, Elapsed Time: 00:00:02
9:49 PM: Starting File Sweep
9:50 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:50 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:50 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:50 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:51 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:51 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:51 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:51 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:52 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:52 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:52 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:52 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:53 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:53 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:53 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:53 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:55 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:55 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:55 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:55 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:56 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:56 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:56 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:57 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:57 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:57 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:57 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:58 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:59 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:59 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:59 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:59 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:00 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:00 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:00 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:01 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:01 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:01 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:01 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:02 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:02 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:02 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:02 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:03 PM: e:\program files\quicklinks (1 subtraces) (ID = -2147468660)
10:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:03 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:03 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:03 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:05 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:05 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:05 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:06 PM: qlutility.exe (ID = 168232)
10:06 PM: kld101a.dll (ID = 163672)
10:06 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:06 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:06 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:06 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:07 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:07 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:07 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:07 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:08 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:08 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:09 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:09 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:09 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:09 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:09 PM: l80u0id9e80.dll (ID = 163672)
10:09 PM: qllib.dll (ID = 168233)
10:09 PM: guard.tmp (ID = 163672)
10:09 PM: nswddi.dll (ID = 163672)
10:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:10 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
10:10 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:10 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
10:10 PM: File Sweep Complete, Elapsed Time: 00:21:01
10:10 PM: Full Sweep has completed. Elapsed time 00:24:50
10:10 PM: Traces Found: 166
10:10 PM: Removal process initiated
10:11 PM: Quarantining All Traces: look2me
10:11 PM: look2me is in use. It will be removed on reboot.
10:11 PM: l80u0id9e80.dll is in use. It will be removed on reboot.
10:11 PM: kld101a.dll is in use. It will be removed on reboot.
10:11 PM: l80u0id9e80.dll is in use. It will be removed on reboot.
10:11 PM: guard.tmp is in use. It will be removed on reboot.
10:11 PM: E:\WINDOWS\system32\l80u0id9e80.dll is in use. It will be removed on reboot.
10:11 PM: E:\WINDOWS\system32\kld101a.dll is in use. It will be removed on reboot.
10:11 PM: E:\WINDOWS\system32\guard.tmp is in use. It will be removed on reboot.
10:11 PM: Quarantining All Traces: instant access
10:11 PM: Quarantining All Traces: popup killer
10:11 PM: Quarantining All Traces: quicklink search toolbar
10:11 PM: Quarantining All Traces: 2o7.net cookie
10:11 PM: Quarantining All Traces: 3 cookie
10:11 PM: Quarantining All Traces: abcsearch cookie
10:11 PM: Quarantining All Traces: addynamix cookie
10:11 PM: Quarantining All Traces: adknowledge cookie
10:11 PM: Quarantining All Traces: adserver cookie
10:11 PM: Quarantining All Traces: advertising cookie
10:11 PM: Quarantining All Traces: ask cookie
10:11 PM: Quarantining All Traces: atlas dmt cookie
10:11 PM: Quarantining All Traces: atwola cookie
10:11 PM: Quarantining All Traces: azjmp cookie
10:11 PM: Quarantining All Traces: belnk cookie
10:11 PM: Quarantining All Traces: bizrate cookie
10:11 PM: Quarantining All Traces: bluestreak cookie
10:11 PM: Quarantining All Traces: burstnet cookie
10:11 PM: Quarantining All Traces: casalemedia cookie
10:11 PM: Quarantining All Traces: cc214142 cookie
10:11 PM: Quarantining All Traces: clickandtrack cookie
10:11 PM: Quarantining All Traces: falkag cookie
10:11 PM: Quarantining All Traces: hbmediapro cookie
10:11 PM: Quarantining All Traces: linksynergy cookie
10:11 PM: Quarantining All Traces: maxserving cookie
10:11 PM: Quarantining All Traces: nextag cookie
10:11 PM: Quarantining All Traces: partypoker cookie
10:11 PM: Quarantining All Traces: paypopup cookie
10:11 PM: Quarantining All Traces: peel network cookie
10:11 PM: Quarantining All Traces: questionmarket cookie
10:11 PM: Quarantining All Traces: realmedia cookie
10:11 PM: Quarantining All Traces: reunion cookie
10:11 PM: Quarantining All Traces: revenue.net cookie
10:11 PM: Quarantining All Traces: rn11 cookie
10:11 PM: Quarantining All Traces: servedby advertising cookie
10:11 PM: Quarantining All Traces: server.iad.liveperson cookie
10:11 PM: Quarantining All Traces: shop@home cookie
10:11 PM: Quarantining All Traces: specificclick.com cookie
10:11 PM: Quarantining All Traces: statcounter cookie
10:11 PM: Quarantining All Traces: top-banners cookie
10:11 PM: Quarantining All Traces: tradedoubler cookie
10:11 PM: Quarantining All Traces: trafficmp cookie
10:11 PM: Quarantining All Traces: tribalfusion cookie
10:11 PM: Quarantining All Traces: websponsors cookie
10:11 PM: Quarantining All Traces: yieldmanager cookie
10:11 PM: Quarantining All Traces: zedo cookie
10:11 PM: Warning: Launched explorer.exe
10:11 PM: Warning: Quarantine process could not restart Explorer.
10:11 PM: Removal process completed. Elapsed time 00:01:10
********
9:44 PM: | Start of Session, Thursday, October 27, 2005 |
9:44 PM: Spy Sweeper started
9:45 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:45 PM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:45 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:45 PM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:45 PM: Your spyware definitions have been updated.
9:45 PM: | End of Session, Thursday, October 27, 2005 |