Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Aurora pop-ups and Nail.exe


  • Please log in to reply

#1
Sedi

Sedi

    New Member

  • Member
  • Pip
  • 5 posts
for some reason I keep getting Aurora pop-ups and the Nail.exe file keeps appearing in my C:\Windows folder....I have ran many things inclusing online scans, EWido, AdAware, Nailfix several times in safe mode, SilentRunners, CleanUp!, SpyBot S&D, and a few others......but for some reason the Nail.exe fle always reappears within a matter of seconds and I am still getting Aurora pop-ups.....any suggestions at this point would help greatly.....here are my Hijackthis and EWido logs


Logfile of HijackThis v1.99.1
Scan saved at 1:08:51 PM, on 6/29/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.exe
c:\windows\system32\npqqdb.exe
C:\Program Files\Hijackthis\HijackThis.exe

R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_12_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_3_12_0.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O3 - Toolbar: (no name) - {2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [hqvdhum] c:\windows\system32\npqqdb.exe r
O8 - Extra context menu item: &AOL Toolbar Search - res://c:\program files\aol\aol toolbar 2.0\aoltbhtml.dll/search.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.c...utocomplete.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3B869A6F-B0FE-440E-96C9-D20A237B706A}: NameServer = 4.2.2.2
O17 - HKLM\System\CCS\Services\Tcpip\..\{99C2A277-40E5-4C84-9214-A21786E4CA32}: NameServer = 4.2.2.2
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)



---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------

+ Created on: 1:02:07 PM, 6/29/2005
+ Report-Checksum: BC43B0BC

+ Scan result:

HKLM\SOFTWARE\Classes\IMIToolbar.BottomFrame -> Spyware.IEPlugin
HKLM\SOFTWARE\Classes\IMIToolbar.BottomFrame\CLSID -> Spyware.IEPlugin
HKLM\SOFTWARE\Classes\IMIToolbar.BottomFrame\CurVer -> Spyware.IEPlugin
HKLM\SOFTWARE\Classes\IMIToolbar.LeftFrame -> Spyware.IEPlugin
HKLM\SOFTWARE\Classes\IMIToolbar.LeftFrame\CLSID -> Spyware.IEPlugin
HKLM\SOFTWARE\Classes\IMIToolbar.LeftFrame\CurVer -> Spyware.IEPlugin
HKLM\SOFTWARE\Classes\IMIToolbar.PopupBrowser -> Spyware.IEPlugin
HKLM\SOFTWARE\Classes\IMIToolbar.PopupBrowser\CLSID -> Spyware.IEPlugin
HKLM\SOFTWARE\Classes\IMIToolbar.PopupBrowser\CurVer -> Spyware.IEPlugin
HKLM\SOFTWARE\Classes\IMIToolbar.PopupWindow -> Spyware.IEPlugin
HKLM\SOFTWARE\Classes\IMIToolbar.PopupWindow\CLSID -> Spyware.IEPlugin
HKLM\SOFTWARE\Classes\IMIToolbar.PopupWindow\CurVer -> Spyware.IEPlugin
HKLM\SOFTWARE\Classes\Wbho.Band -> Spyware.IEPlugin
HKLM\SOFTWARE\Classes\Wbho.Band\CLSID -> Spyware.IEPlugin
HKLM\SOFTWARE\Classes\Wbho.Band\CurVer -> Spyware.IEPlugin
HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors\ZepMon -> Spyware.BetterInternet
HKU\S-1-5-21-1844237615-839522115-682003330-1004\Software\intexp -> Spyware.IEPlugin
HKU\S-1-5-21-1844237615-839522115-682003330-1004\Software\intexp\Config -> Spyware.IEPlugin
HKU\S-1-5-21-1844237615-839522115-682003330-1004\Software\intexp\MyFileSystem2 -> Spyware.IEPlugin
[1092] VM_019B0000 -> Spyware.BetterInternet
:mozilla.13:C:\Documents and Settings\Bryan\Application Data\Mozilla\Firefox\Profiles\ujdoam5u.default\cookies.txt -> Spyware.Cookie.Imrworldwide
:mozilla.14:C:\Documents and Settings\Bryan\Application Data\Mozilla\Firefox\Profiles\ujdoam5u.default\cookies.txt -> Spyware.Cookie.Imrworldwide
C:\Documents and Settings\Bryan\Cookies\bryan@abetterinternet[1].txt -> Spyware.Cookie.Abetterinternet
C:\Documents and Settings\Bryan\Cookies\bryan@btg.btgrab[1].txt -> Spyware.Cookie.Btgrab
C:\Documents and Settings\Bryan\Cookies\bryan@cliks[1].txt -> Spyware.Cookie.Cliks
C:\Documents and Settings\Bryan\Cookies\bryan@offeroptimizer[1].txt -> Spyware.Cookie.Offeroptimizer
:mozilla.6:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Webshots
:mozilla.7:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Webshots
:mozilla.8:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Webshots
:mozilla.9:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Com
:mozilla.10:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Com
:mozilla.11:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Webshots
:mozilla.12:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Realmedia
:mozilla.13:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Realmedia
:mozilla.14:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Adrevolver
:mozilla.15:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Adrevolver
:mozilla.16:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Atdmt
:mozilla.17:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Adrevolver
:mozilla.18:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Adrevolver
:mozilla.19:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Adrevolver
:mozilla.20:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Adrevolver
:mozilla.21:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Tribalfusion
:mozilla.22:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Tribalfusion
:mozilla.23:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Tribalfusion
:mozilla.24:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Tribalfusion
:mozilla.25:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Tribalfusion
:mozilla.33:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Casalemedia
:mozilla.34:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Casalemedia
:mozilla.35:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Casalemedia
:mozilla.36:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Casalemedia
:mozilla.37:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Casalemedia
:mozilla.38:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Webshots
:mozilla.39:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Webshots
:mozilla.41:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Tmcs
:mozilla.42:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Tmcs
:mozilla.43:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Advertising
:mozilla.44:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Advertising
:mozilla.45:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Advertising
:mozilla.46:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Advertising
:mozilla.47:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Advertising
:mozilla.48:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Advertising
:mozilla.49:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Advertising
:mozilla.50:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Doubleclick
:mozilla.51:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Advertising
:mozilla.52:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Advertising
:mozilla.53:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Advertising
:mozilla.54:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Advertising
:mozilla.55:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Advertising
:mozilla.64:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Webtrendslive
:mozilla.65:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Webtrendslive
:mozilla.74:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Questionmarket
:mozilla.102:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Partner2profit
:mozilla.103:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Mediaplex
:mozilla.104:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Ru4
:mozilla.105:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Ru4
:mozilla.117:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Fastclick
:mozilla.118:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Fastclick
:mozilla.119:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Fastclick
:mozilla.122:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Adserver
:mozilla.123:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Adserver
:mozilla.124:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.2o7
:mozilla.128:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Centrport
:mozilla.129:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Centrport
:mozilla.130:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Bannerspace
:mozilla.131:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Bannerspace
:mozilla.134:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Bannerspace
:mozilla.137:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Zedo
:mozilla.138:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Zedo
:mozilla.139:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Zedo
:mozilla.141:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Serving-sys
:mozilla.142:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Serving-sys
:mozilla.154:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Serving-sys
:mozilla.155:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Serving-sys
:mozilla.156:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Serving-sys
:mozilla.159:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Pointroll
:mozilla.160:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Pointroll
:mozilla.161:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Pointroll
:mozilla.162:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Pointroll
:mozilla.165:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Valueclick
:mozilla.166:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Valueclick
:mozilla.174:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Bfast
:mozilla.177:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Bkvtrack
:mozilla.178:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Bkvtrack
:mozilla.179:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Bkvtrack
:mozilla.180:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Bkvtrack
:mozilla.181:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Overture
:mozilla.184:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Hitbox
:mozilla.185:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Hitbox
:mozilla.186:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Hitbox
:mozilla.189:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Hitbox
:mozilla.192:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Realtracker
:mozilla.197:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Hitbox
:mozilla.198:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Hitbox
:mozilla.199:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Webtrendslive
:mozilla.205:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Burstnet
:mozilla.206:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Burstnet
:mozilla.207:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Burstnet
:mozilla.210:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Bluestreak
:mozilla.213:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Dogpile
:mozilla.215:C:\Documents and Settings\Shamai\Application Data\Mozilla\Firefox\Profiles\unpvm2y6.default\cookies.txt -> Spyware.Cookie.Websponsors
C:\WINDOWS\bshpejk.exe -> Spyware.BetterInternet
C:\WINDOWS\Nail.exe -> Trojan.Nail
C:\WINDOWS\svcproc.exe -> Trojan.Stervis.c
C:\WINDOWS\vmithbmnj.exe -> Spyware.BetterInternet


::Report End
  • 0

Advertisements


#2
gerryf

gerryf

    Retired Staff

  • Retired Staff
  • 11,365 posts
Please go to the malware forum and follow the instructions at the top....Especially the CLICK HERE .

That will give you several steps that will help you clean up 70 percent of all problems by yourself. If at the end of the process you are still having difficulty--and you may not be-- then post a hijackthis log in THAT forum.

If you are still having problems after getting a clean bill of health from the malware expert, please return to this thread.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP