Here are the requested logs after I did what you told me to do.
Hijack This Log:
Logfile of HijackThis v1.99.1
Scan saved at 12:24:12 PM, on 7/1/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Spyware Doctor\swdoctor.exe
C:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Norton SystemWorks\Norton GoBack\GBTray.exe
C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Spyware Doctor\swdoctor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Norton SystemWorks\Norton GoBack\GBTray.exe
C:\Documents and Settings\Mom & Dad\Desktop\Hijack This\HijackThis.exe
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [RegSvr32] C:\WINDOWS\System32\msmsgs.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [DVDUpgrade] DVDUpgrd.exe /async9x
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ted] C:\Program Files\Track Eraser Deluxe\ted.exe
O4 - Global Startup: Norton GoBack.lnk = C:\Program Files\Norton SystemWorks\Norton GoBack\GBTray.exe
O8 - Extra context menu item: &AIM Search - res://C:\PROGRAM FILES\AIM TOOLBAR\AIMBAR.DLL/aimsearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: Yahoo! Chat -
http://us.chat1.yimg...t/c381/chat.cabO16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) -
http://usml002a.mmsa.com/iNotes6W.cabO16 - DPF: {4CB9980E-AB1A-56A5-DAA7-3E202BA003DA} -
http://64.237.60.5/1/rdgUS891.exeO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.micros...b?1119678883282O16 - DPF: {6FDB0065-2787-11D6-B1D8-0001023916FC} (CLOActiveXInstaller Control) -
http://www.igl.net/c...tallerProj1.cabO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://www.pandasoft.../as5/asinst.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) -
http://zone.msn.com/...ro.cab34246.cabO16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) -
http://chat.yahoo.com/cab/yvwrctl.cabO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: GoBack Polling Service (GBPoll) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
Active Scan Log:
Incident Status Location
Adware:Adware/XPlugin No disinfected Windows Registry
Adware:Adware/CWS No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Online Gambling\Online Gambling.url
Adware:Adware/FunWeb No disinfected Windows Registry
Adware:Adware/NavHelper No disinfected C:\Program Files\Ares
Adware:Adware/MyWebSearch No disinfected Windows Registry
Adware:Adware/SuperSpider No disinfected C:\Documents and Settings\Mom & Dad\Favorites\online dating.url
Adware:Adware/Popuper No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Black Jack Online.url
Adware:Adware/Perfect-Search No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Online Pharmacy\Adipex.url
Adware:Adware/Smitfraud No disinfected Windows Registry
Adware:Adware/PsGuard No disinfected C:\Documents and Settings\Mom & Dad\Application Data\PSGuard.com
Adware:Adware/Apropos No disinfected C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Manager\Downloads\AlertSWF\contents\Exec.exe
Adware:Adware/Perfect-Search No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Online Pharmacy\Online Pharmacy.url
Adware:Adware/Perfect-Search No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Online Pharmacy\Adipex.url
Adware:Adware/Perfect-Search No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Online Pharmacy\Alprazolam.url
Adware:Adware/Perfect-Search No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Online Pharmacy\Carisoprodol.url
Adware:Adware/Perfect-Search No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Online Pharmacy\Diazepam.url
Adware:Adware/Perfect-Search No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Online Pharmacy\Hydrocodone.url
Adware:Adware/CWS No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Online Pharmacy\Lortab.url
Adware:Adware/Perfect-Search No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Online Pharmacy\Prozac.url
Adware:Adware/Perfect-Search No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Online Pharmacy\Valium.url
Adware:Adware/Perfect-Search No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Online Pharmacy\Vicodin.url
Adware:Adware/Perfect-Search No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Online Pharmacy\Xanax.url
Adware:Adware/CWS No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Online Gambling\Online Gambling.url
Adware:Adware/Popuper No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Take It Here - Free [bleep] TGP.url
Adware:Adware/Popuper No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Black Jack Online.url
Adware:Adware/Popuper No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Online Gambling.url
Adware:Adware/Popuper No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Home Loan.url
Adware:Adware/Popuper No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Online Pharmacy.url
Adware:Adware/Popuper No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Remove Spyware.url
Adware:Adware/Popuper No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Network Security.url
Adware:Adware/Popuper No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Spam Filters.url
Adware:Adware/SuperSpider No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Online Dating.url
Adware:Adware/Popuper No disinfected C:\Documents and Settings\Mom & Dad\Favorites\Web Detective.url
Adware:Adware/FunWeb No disinfected C:\Documents and Settings\Mom & Dad\Desktop\Hijack This\backups\backup-20050627-234025-615.inf
Ewido Security Scan Report Log:
---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------
+ Created on: 1:57:01 AM, 6/28/2005
+ Report-Checksum: 5CFD114C
+ Date of database: 6/28/2005
+ Version of scan engine: v3.0
+ Duration: 112 min
+ Scanned Files: 82201
+ Speed: 12.19 Files/Second
+ Infected files: 88
+ Removed files: 88
+ Files put in quarantine: 88
+ Files that could not be opened: 0
+ Files that could not be cleaned: 0
+ Binder: Yes
+ Crypter: Yes
+ Archives: Yes
+ Scanned items:
C:\
+ Scan result:
C:\WINDOWS\SYSTEM32\oleadm.dll -> Trojan.Agent.eo -> Cleaned with backup
C:\WINDOWS\Downloaded Program Files\gdnUS1865.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\gdnUS1865.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.2\gdnUS1865.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.3\gdnUS1865.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.4\gdnUS1865.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll -> Spyware.Wheaterbug.a -> Cleaned with backup
C:\Documents and Settings\Chris Interdonato\Cookies\chris
[email protected][1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Chris Interdonato\Cookies\chris interdonato@com[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Chris Interdonato\Cookies\chris
[email protected][1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Chris Interdonato\Cookies\chris interdonato@adknowledge[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Mom & Dad\Cookies\mom &
[email protected][1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP10\A0003856.DLL -> TrojanDownloader.FunWeb.a -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP12\A0005891.scr -> Spyware.MyWebSearch -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP12\A0005892.DLL -> Spyware.MyWebSearch -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP12\A0005893.DLL -> Spyware.MyWebSearch -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP12\A0005896.SCR -> Spyware.MyWebSearch -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP12\A0005897.DLL -> Spyware.MyWebSearch -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP12\A0005898.DLL -> Spyware.Wesbar -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP12\A0005899.EXE -> Spyware.MyWebSearch -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP12\A0005901.DLL -> Spyware.Wesbar -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP12\A0005902.DLL -> Spyware.MyWebSearch -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP12\A0005903.DLL -> Spyware.MyWebSearch -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP12\A0005904.DLL -> Spyware.MyWebSearch -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP12\A0005905.DLL -> Spyware.Wesbar -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP12\A0005907.DLL -> Spyware.MyWebSearch -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP12\A0005912.exe -> Spyware.AlexaBar -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP14\A0006875.DLL -> Spyware.MyWebSearch -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP14\A0006876.EXE -> Spyware.Wesbar -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP14\A0006877.DLL -> Spyware.MyWebSearch -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP29\A0023975.dll -> Spyware.Hijacker.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP29\A0024973.dll -> Spyware.Hijacker.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP29\A0024985.exe -> Trojan.Puper.l -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0025018.exe -> Trojan.Puper.l -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0025973.dll -> Spyware.Hijacker.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026047.exe -> TrojanDownloader.Zlob.q -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026048.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026049.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026050.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026068.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026069.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026071.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026072.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026073.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026074.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026075.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026076.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026077.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026078.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026108.exe -> Spyware.AlexaBar -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026109.exe -> Spyware.AlexaBar -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026169.dll -> Spyware.Hijacker.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026171.exe -> Trojan.Puper.m -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0026181.exe -> Trojan.Agent.eo -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP30\A0030108.exe -> Trojan.Puper.l -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030131.exe -> Trojan.Puper.l -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030161.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030169.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030178.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030179.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030188.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030220.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030223.hta -> Spyware.Gen -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030252.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030253.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030254.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030255.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030256.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030257.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030258.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030259.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030260.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030261.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030262.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030263.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030264.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030265.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030266.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030267.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030268.exe -> TrojanDownloader.Small.ayl -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030269.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030270.exe -> Dialer.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP31\A0030277.hta -> Spyware.Gen -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP32\A0031232.exe -> Spyware.Hijacker.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP32\A0031234.exe -> Trojan.Puper.l -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP33\A0032240.exe -> Spyware.Hijacker.Generic -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP33\A0032277.exe -> Trojan.Agent.ep -> Cleaned with backup
C:\System Volume Information\_restore{E4B6BA48-8C82-4D65-AFB2-C226E17F6C10}\RP33\A0032279.exe -> TrojanDownloader.Zlob.G -> Cleaned with backup
::Report End
I still have a DesktopHijack present. Please let me know what to do next.
Thanks,
Tony