Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

malware prob. - donno which

Started by eladbenda , Dec 25 2006 01:59 PM

  • Please log in to reply

#1
eladbenda
Posted 25 December 2006 - 01:59 PM

eladbenda

    New Member

  • Member
  • Pip
  • 4 posts
hi,
i use 2 recieve tonz of junk mail and my computer work really slow...
i done all the instructions : evido, AVG, updates, antivirus...
still got some junk mail...
here r the logs:

Logfile of HijackThis v1.99.1
Scan saved at 21:50:53, on 25/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\Brmfrmps.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\system32\CBA\pds.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Brother\ControlCenter2\brctrcen.exe
C:\Program Files\Microsoft Office\OFFICE11\POWERPNT.EXE
C:\WINDOWS\msagent\AgentSvr.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Maxthon\Maxthon.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Benda\Desktop\geeks2go\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityrespo...er/fix_homepage
O1 - Hosts: 216.19.0.250 idenupdate.motorola.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [SetDefPrt] "C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe"
O4 - HKLM\..\Run: [ControlCenter2.0] "C:\Program Files\Brother\ControlCenter2\brctrcen.exe" /autorun
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install
O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [PinnacleDriverCheck] "C:\WINDOWS\system32\PSDrvCheck.exe" -CheckReg
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [mmtask] "c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe"
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2006\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe"
O4 - HKCU\..\Run: [SUPERAntiSpyware] "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe"
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O8 - Extra context menu item: &יצא ל- Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: מחקר - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1123783589046
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B59155CE-4ECF-464C-B978-0F366586346B}: NameServer = 80.74.96.3 80.74.96.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{F8A9F053-D7FE-47EF-B759-5656544D375D}: NameServer = 192.114.47.4,192.114.47.52
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Workstation NetLogon Service ( 11Fה#·÷ִײ`I) - Unknown owner - C:\WINDOWS\system32\javaxw.exe (file missing)
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Unknown owner - C:\WINDOWS\system32\Brmfrmps.exe" -service (file missing)
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Intel PDS - Intel® Corporation - C:\WINDOWS\system32\CBA\pds.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

Absolute Video Splitter Joiner 1.6.5
Acronis True Image
Ad-Aware SE Personal
Adobe After Effects 7.0
Adobe Bridge 1.0
Adobe Common File Installer
Adobe ExtendScript Toolkit 1.0
Adobe Flash Player 9 ActiveX
Adobe Help Center 2.0
Adobe Photoshop CS
Adobe Premiere Pro 2.0
Adobe Reader 7.0
Adobe Stock Photos 1.0
Advanced X Video Converter
AnyDVD
AVG Anti-Spyware 7.5
Brother MFL-Pro Suite
BSPlayer
DAEMON Tools
Di-eMule
DivX Codec
DivX Content Uploader
DivX Converter
DivX Player
DivX Web Player
DivXLand Media Subtitler
FliteStar
Google Earth
Hattrick Buddy
Hattrick Forever 4.3.0.82
HighMAT Extension to Microsoft Windows XP CD Writing Wizard
HijackThis 1.99.1
Hotfix for Windows XP (KB896344)
Hotfix for Windows XP (KB926239)
HTDONG (beta)
Image Resizer Powertoy for Windows XP
JeppTerrain
Lion Heart's Codec Pack
LiveReg (Symantec Corporation)
LiveUpdate 2.6 (Symantec Corporation)
Logitech Desktop Messenger
Logitech SetPoint
Macromedia FreeHand MX
Maxthon Browser (remove only)
MediaLife
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Data Access Application Block v2.0 for .NET
Microsoft Office Professional Edition 2003
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual Basic 6.0 Professional Edition
Microsoft Web Publishing Wizard 1.53
MSN Messenger 7.5
MSXML 4.0 SP2 (KB927978)
MUSICMATCH® Jukebox
Nero 7 Premium
NVIDIA Drivers
Panda ActiveScan
Pinnacle device drivers
PowerDVD
QuickTime
RealArcade
Ringtone Factory 1.1
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893066)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899589)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB926255)
Skype 2.5
Spy Sweeper
Studio 9
Subtitle Studio 2.0 R-2
SUPERAntiSpyware Free Edition
Symantec AntiVirus
Turbo 4.0
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB900930)
Update for Windows XP (KB910437)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
VIA Audio Driver Setup Program
VIA Rhine-Family Fast Ethernet Adapter
VobSub v2.23 (Remove Only)
Windows Genuine Advantage v1.3.0254.0
Windows Installer 3.1 (KB893803)
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB885884
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB887797
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893086
WinRAR archiver
הפוך על הפוך

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 23:31:10 23/12/2006

+ Scan result:



HKLM\SOFTWARE\Classes\CLSID\{393086F8-8C8A-1DEE-A3F6-675E8A4AA231} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\CLSID\{7CE5DA5D-F491-C0B6-884D-D9D4A9E4C7E4} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\CLSID\{88EFDEE3-0CB7-1C95-AB61-56AA3EB9D50A} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\CLSID\{CE425367-668C-A46D-6F50-DC8B2B4033BA} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02B481BA-C588-7AF1-0EFF-F69B008B338C} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0707DBFD-EC1E-ADBE-C44B-038A3D264C94} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{08788D4D-B7F1-E0B7-38F5-5DE055657FD8} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0BF7595C-037E-FC87-CF31-B6FA7401041A} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1022D6A6-AAF4-9850-B1C0-C2130FA14266} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11BE3648-39DF-4A8F-2B7F-AF543F3C21DF} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18F5769A-6A75-760A-F6D5-5515138BC965} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1AC3EC09-3F6B-456A-FECF-1D4C70AEB8B2} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2E350B02-5DF7-6B28-7904-897D53CA0AB7} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EE72B4F-E40E-EFB8-15AA-4EB5AE709679} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3EAAB545-5DA5-D593-1DC7-5C6B1EC765D8} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3F18D253-A986-C896-9157-85378BE2E152} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4197FF54-5C18-A7E5-9CC3-32130092E2A4} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4F69B565-0936-A3A5-C94A-8A0CAED13E41} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{516B05B7-D345-D25A-1547-83C52F819898} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5B6D32FC-7E68-F50D-861F-4041172E35C4} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5C12F704-431A-97DB-D01E-19248DFCBC19} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5FD30CE7-0DCC-51E7-8545-3F1D6198A4F5} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5FD34605-9D7C-45FB-AA12-0B1E9432128B} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{68DEE458-C434-7DFA-9793-DFC94F3C9C3B} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6BFB4F8E-42B3-1853-FED2-0CE716BE6757} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{70C0DFF9-6D20-CC69-6516-900255F1F512} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7646BE06-290C-EE4C-F003-E41039CFEDB4} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7ADE1326-D284-F0A5-10FF-77792B035B54} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7B79D3C0-5BA6-4760-51E7-D201FEA013C7} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7CE5DA5D-F491-C0B6-884D-D9D4A9E4C7E4} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{80DAA425-DA60-3DA0-927D-F4CE735B581F} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8EABB85C-4D63-D1BB-01F2-AE33BBD7CE6A} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9155F4A4-C9AF-713E-C968-01E619660034} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{924B4D7B-F300-E37F-AE93-3DD350DA5B57} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A72CF6EF-6CF2-42D8-2DB0-27CB6FCBFF6A} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A9A7088B-63E9-D824-8BED-B299CE8A4339} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B9C08788-99E3-0FDE-627D-4CBCC68F6D36} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BB37280E-3BA4-0CF4-3710-D1E7E658044E} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BD2572C3-91F3-D764-96F0-7518D05E9428} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C0C47BA7-3AAA-10E3-3AED-070DDAD18C68} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D46BCBAD-B2DB-4BFA-6795-B84A766FCDDF} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DD2786BE-3BE2-FC80-F475-561735175B9A} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DEE73BDA-597A-B499-19B2-6F569DFF8BCF} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF51367E-27AA-E116-5B49-FD93BFC70C15} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E42B61C2-66D3-07B5-A6D8-5FD00BC22603} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F58F81C3-2AC2-0FE8-BD83-A5E72B3E58A3} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02B481BA-C588-7AF1-0EFF-F69B008B338C} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0707DBFD-EC1E-ADBE-C44B-038A3D264C94} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{08788D4D-B7F1-E0B7-38F5-5DE055657FD8} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0BF7595C-037E-FC87-CF31-B6FA7401041A} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1022D6A6-AAF4-9850-B1C0-C2130FA14266} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11BE3648-39DF-4A8F-2B7F-AF543F3C21DF} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18F5769A-6A75-760A-F6D5-5515138BC965} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1AC3EC09-3F6B-456A-FECF-1D4C70AEB8B2} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2E350B02-5DF7-6B28-7904-897D53CA0AB7} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EE72B4F-E40E-EFB8-15AA-4EB5AE709679} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3EAAB545-5DA5-D593-1DC7-5C6B1EC765D8} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3F18D253-A986-C896-9157-85378BE2E152} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4197FF54-5C18-A7E5-9CC3-32130092E2A4} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4F69B565-0936-A3A5-C94A-8A0CAED13E41} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{516B05B7-D345-D25A-1547-83C52F819898} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5B6D32FC-7E68-F50D-861F-4041172E35C4} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5C12F704-431A-97DB-D01E-19248DFCBC19} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5FD30CE7-0DCC-51E7-8545-3F1D6198A4F5} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5FD34605-9D7C-45FB-AA12-0B1E9432128B} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{68DEE458-C434-7DFA-9793-DFC94F3C9C3B} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6BFB4F8E-42B3-1853-FED2-0CE716BE6757} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{70C0DFF9-6D20-CC69-6516-900255F1F512} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7646BE06-290C-EE4C-F003-E41039CFEDB4} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7ADE1326-D284-F0A5-10FF-77792B035B54} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7B79D3C0-5BA6-4760-51E7-D201FEA013C7} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7CE5DA5D-F491-C0B6-884D-D9D4A9E4C7E4} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{80DAA425-DA60-3DA0-927D-F4CE735B581F} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8EABB85C-4D63-D1BB-01F2-AE33BBD7CE6A} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9155F4A4-C9AF-713E-C968-01E619660034} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{924B4D7B-F300-E37F-AE93-3DD350DA5B57} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A72CF6EF-6CF2-42D8-2DB0-27CB6FCBFF6A} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A9A7088B-63E9-D824-8BED-B299CE8A4339} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B9C08788-99E3-0FDE-627D-4CBCC68F6D36} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BB37280E-3BA4-0CF4-3710-D1E7E658044E} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BD2572C3-91F3-D764-96F0-7518D05E9428} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C0C47BA7-3AAA-10E3-3AED-070DDAD18C68} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D46BCBAD-B2DB-4BFA-6795-B84A766FCDDF} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DD2786BE-3BE2-FC80-F475-561735175B9A} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DEE73BDA-597A-B499-19B2-6F569DFF8BCF} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF51367E-27AA-E116-5B49-FD93BFC70C15} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E42B61C2-66D3-07B5-A6D8-5FD00BC22603} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F58F81C3-2AC2-0FE8-BD83-A5E72B3E58A3} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02B481BA-C588-7AF1-0EFF-F69B008B338C} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0707DBFD-EC1E-ADBE-C44B-038A3D264C94} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{08788D4D-B7F1-E0B7-38F5-5DE055657FD8} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0BF7595C-037E-FC87-CF31-B6FA7401041A} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1022D6A6-AAF4-9850-B1C0-C2130FA14266} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11BE3648-39DF-4A8F-2B7F-AF543F3C21DF} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{18F5769A-6A75-760A-F6D5-5515138BC965} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1AC3EC09-3F6B-456A-FECF-1D4C70AEB8B2} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2E350B02-5DF7-6B28-7904-897D53CA0AB7} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EE72B4F-E40E-EFB8-15AA-4EB5AE709679} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3EAAB545-5DA5-D593-1DC7-5C6B1EC765D8} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3F18D253-A986-C896-9157-85378BE2E152} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4197FF54-5C18-A7E5-9CC3-32130092E2A4} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4F69B565-0936-A3A5-C94A-8A0CAED13E41} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{516B05B7-D345-D25A-1547-83C52F819898} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5B6D32FC-7E68-F50D-861F-4041172E35C4} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5C12F704-431A-97DB-D01E-19248DFCBC19} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5FD30CE7-0DCC-51E7-8545-3F1D6198A4F5} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5FD34605-9D7C-45FB-AA12-0B1E9432128B} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{68DEE458-C434-7DFA-9793-DFC94F3C9C3B} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6BFB4F8E-42B3-1853-FED2-0CE716BE6757} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{70C0DFF9-6D20-CC69-6516-900255F1F512} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7646BE06-290C-EE4C-F003-E41039CFEDB4} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7ADE1326-D284-F0A5-10FF-77792B035B54} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7B79D3C0-5BA6-4760-51E7-D201FEA013C7} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7CE5DA5D-F491-C0B6-884D-D9D4A9E4C7E4} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{80DAA425-DA60-3DA0-927D-F4CE735B581F} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{88EFDEE3-0CB7-1C95-AB61-56AA3EB9D50A} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8EABB85C-4D63-D1BB-01F2-AE33BBD7CE6A} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9155F4A4-C9AF-713E-C968-01E619660034} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{924B4D7B-F300-E37F-AE93-3DD350DA5B57} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A72CF6EF-6CF2-42D8-2DB0-27CB6FCBFF6A} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A9A7088B-63E9-D824-8BED-B299CE8A4339} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B9C08788-99E3-0FDE-627D-4CBCC68F6D36} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BB37280E-3BA4-0CF4-3710-D1E7E658044E} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BD2572C3-91F3-D764-96F0-7518D05E9428} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D46BCBAD-B2DB-4BFA-6795-B84A766FCDDF} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DD2786BE-3BE2-FC80-F475-561735175B9A} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DEE73BDA-597A-B499-19B2-6F569DFF8BCF} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF51367E-27AA-E116-5B49-FD93BFC70C15} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E42B61C2-66D3-07B5-A6D8-5FD00BC22603} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKU\S-1-5-21-1644491937-1390067357-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F58F81C3-2AC2-0FE8-BD83-A5E72B3E58A3} -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
E:\Documents and Settings\Benda\Desktop\Windows Xp Sp2 Keygen with auto key changer [pleasuredome101]\1) Windows XP SP2 Keygen\KeyGen.exe -> Backdoor.Tagent.e : Cleaned with backup (quarantined).
E:\System Volume Information\_restore{5302119B-73F4-4C0C-B97B-B9BE81E0A135}\RP6\A0000894.exe -> Backdoor.Tagent.e : Cleaned with backup (quarantined).
C:\WINDOWS\WindowsUpdate.log:wrkmef -> Downloader.Agent.bq : Cleaned with backup (quarantined).
D:\vb6msdn\VB6 MSDN\SAMPLES\VC98\SDK\SDKTOOLS\SPY\DLL\HOOK.DLL -> Not-A-Virus.Monitor.Win32.KeyLogger.30 : Cleaned with backup (quarantined).
E:\Documents and Settings\Benda\Cookies\[email protected][1].txt -> TrackingCookie.Bpath : Cleaned.
E:\Documents and Settings\Benda\Cookies\benda@com[2].txt -> TrackingCookie.Com : Cleaned.
E:\Documents and Settings\Benda\Cookies\benda@oewabox[1].txt -> TrackingCookie.Oewabox : Cleaned.
C:\Documents and Settings\Benda\Cookies\benda@pro-market[1].txt -> TrackingCookie.Pro-market : Cleaned.
E:\Documents and Settings\Benda\Cookies\benda@yadro[1].txt -> TrackingCookie.Yadro : Cleaned.


::Report end




SUPERAntiSpyware Scan Log
Generated 12/24/2006 at 00:15 AM

Application Version : 3.4.1000

Core Rules Database Version : 3153
Trace Rules Database Version: 1170

Scan type : Complete Scan
Total Scan Time : 00:27:54

Memory items scanned : 442
Memory threats detected : 0
Registry items scanned : 6733
Registry threats detected : 0
File items scanned : 14568
File threats detected : 6

Adware.Tracking Cookie
C:\Documents and Settings\Benda\Cookies\benda@cgi-bin[2].txt
C:\Documents and Settings\Benda\Cookies\benda@pro-market[1].txt
D:\Documents and Settings\Michal\Cookies\[email protected][1].txt
D:\Documents and Settings\Michal\Cookies\[email protected][1].txt
D:\Documents and Settings\Michal\Cookies\michal@windowsmedia[2].txt

Adware.AlfaCleaner
C:\WINDOWS\warnhp.html

10x.
elad
  • 0

Advertisements

Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP