Logfile of HijackThis v1.99.1
Scan saved at 3:30:17 AM, on 7/15/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CCM\CLICOMP\RemCtrl\Wuser32.exe
C:\WINDOWS\system32\CCM\CcmExec.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\j2re1.4.2_07\bin\jusched.exe
C:\Program Files\Java\j2re1.4.2_07\bin\jucheck.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Avant Browser\avant.exe
C:\WINDOWS\system32\arqnba.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\m?iexec.exe
C:\Program Files\Yahoo!\Messenger\YPager.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\emoxham\Desktop\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer,(Default) = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.ca
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Desire2Learn
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.mozilla.org/start/"); (C:\Documents and Settings\EMoxham\Application Data\Mozilla\Profiles\default\wgevgdkk.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\EMoxham\Application Data\Mozilla\Profiles\default\wgevgdkk.slt\prefs.js)
O3 - Toolbar: (no name) - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_07\bin\jusched.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [a2nNQATw] C:\documents and settings\emoxham\local settings\temp\a2nNQATw.exe
O4 - HKLM\..\Run: [Px] C:\windows\system32\Px.exe
O4 - HKLM\..\Run: [etbrun] C:\windows\system32\elitemxi32.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [hewxjoe] c:\windows\system32\zkjlix.exe
O4 - HKLM\..\Run: [ZStart] C:\windows\system32\qtdxregs.exe run64
O4 - HKLM\..\Run: [dbc32gto] C:\WINDOWS\system32\dbc32gto.exe
O4 - HKLM\..\Run: [avant.exe] C:\Program Files\Avant Browser\avant.exe
O4 - HKLM\..\Run: [winsync] C:\WINDOWS\system32\arqnba.exe reg_run
O4 - HKLM\..\Run: [SysStart] C:\WINDOWS\system32\ssysvud8.exe run64
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\RunOnce: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Blsd] C:\WINDOWS\system32\m?iexec.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Add to AD Black List - C:\Program Files\Avant Browser\AddToADBlackList.htm
O8 - Extra context menu item: Block All Images from the Same Server - C:\Program Files\Avant Browser\AddAllToADBlackList.htm
O8 - Extra context menu item: Customize Menu &4 - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Fill Forms &] - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Highlight - C:\Program Files\Avant Browser\Highlight.htm
O8 - Extra context menu item: Open All Links in This Page... - C:\Program Files\Avant Browser\OpenAllLinks.htm
O8 - Extra context menu item: RoboForm &2 - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms &[ - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Search - C:\Program Files\Avant Browser\Search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms &] - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms &[ - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm &2 - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....467&clcid=0x409
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1103298361484
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {886DDE35-E585-11D0-A707-000000521958} - http://69.56.176.76/webplugin.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_02) -
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2} (FlashXControl Object) - https://spinpalace.m...ace/FlashAX.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.game...aploader_v6.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = desire2learn.d2l
O17 - HKLM\Software\..\Telephony: DomainName = desire2learn.d2l
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = desire2learn.d2l
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZipm12.exe
O23 - Service: SmartFinder Uninstall (SmartFinder_Uninstall) - Unknown owner - C:\Documents and Settings\emoxham\Local Settings\Temporary Internet Files\Content.IE5\O789ATCD\SFUninstaller[1].exe" service (file missing)
O23 - Service: System Startup Service (SvcProc) - Unknown owner - c:\windows\SvcProc.exe (file missing)
---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------
+ Created on: 2:43:15 AM, 7/15/2005
+ Report-Checksum: 3426DF2A
+ Scan result:
HKLM\SOFTWARE\AutoLoader -> Spyware.AproposMedia : Cleaned with backup
HKLM\SOFTWARE\AutoLoader\00vc1LNgOWPL -> Spyware.AproposMedia : Cleaned with backup
HKLM\SOFTWARE\Classes\AppID\AtlBrowser.EXE -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\AppID\{0818D423-6247-11D1-ABEE-00D049C10000} -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\AtlBrCon.AtlBrCon -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\AtlBrCon.AtlBrCon\CurVer -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\BolgerDll.BolgerDllObj -> Spyware.BetterInternet : Cleaned with backup
HKLM\SOFTWARE\Classes\BolgerDll.BolgerDllObj\CLSID -> Spyware.BetterInternet : Cleaned with backup
HKLM\SOFTWARE\Classes\BolgerDll.BolgerDllObj\CurVer -> Spyware.BetterInternet : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{141A5E19-BDCB-4E27-A3D7-9E16503BC05B} -> Spyware.CnsMin : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{302A3240-4805-4a34-97D7-1645A0B08410} -> Spyware.VX2 : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{50B4D2B3-723F-41B3-AEC4-0BD66F0F45FF} -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{9AE283A5-DF43-4C83-B6AA-7EBDBDB0204A} -> Dialer.Generic : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{9EB2B422-C9EE-46C4-A471-1E79C7517B1D} -> Spyware.CnsMin : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{A166C1B0-5CDB-447A-894A-4B9FD7149D51} -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{B1D147E7-873E-4909-8127-695D9BB78728} -> Spyware.t2t2com : Cleaned with backup
HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{6EC11407-5B2E-4E25-8BDF-77445B52AB37} -> Spyware.VX2 : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{03B800F9-2536-4441-8CDA-2A3E6D15B4F8} -> Spyware.YourSiteBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{0985C112-2562-46F2-8DA6-92648BA4630F} -> Spyware.ISTBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{12E919BC-C70F-432B-B831-1180DE734505} -> Dialer.Generic : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{234F09FB-FE89-4C6D-9203-31832FC051C3} -> Spyware.IBIS : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{241667A3-EC83-4885-84DD-C2DAAFC1C5EA} -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{25630B50-53C6-4E66-A945-9D7B6B2171FF} -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{2B0ECEAC-F597-4858-A542-D966B49055B9} -> Spyware.180Solutions : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{2BB15D36-43BE-4743-A3A0-3308F4B1A610} -> Spyware.Delfin : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{365B9A54-E613-46E5-9DB1-4F91A9DE80BD} -> Spyware.IBIS : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{370F6327-41C4-4FA6-A2DF-1BA57EE0FBB9} -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{370F6353-41C4-4FA6-A2DF-1BA57EE0FBB9} -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{3E4BCF50-865B-4EF4-A0BC-BF57229EA525} -> Spyware.MediaMotor : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{41700749-A109-4254-AF13-BE54011E8783} -> Spyware.Delfin : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{4FE82BA0-9335-4D4E-8E98-76409A88F2C1} -> Spyware.TopConverting : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{618BE527-B7F5-417C-BC51-98FDC2D6DE61} -> Spyware.IBIS : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{64A5BD22-8D8A-4193-9CF8-7DB5212ABB17} -> Spyware.MediaMotor : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{66BD1BD0-3655-42E4-8CE9-16D3613B0B25} -> Dialer.Generic : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{66C22569-F05C-4A70-A142-763B337E1002} -> Spyware.IBIS : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{674A6BD5-317A-49CF-9647-1E085E660CE0} -> Spyware.MediaMotor : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{788C6F6E-C2EA-4A63-9C38-CE7D8F43BCE4} -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{78BCF936-45B0-40A7-9391-DCC03420DB35} -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{7B8BD940-B1EF-460C-85A2-9ACAAF7F9303} -> Spyware.IBIS : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{8EEE58D5-130E-4CBD-9C83-35A0564E1357} -> Spyware.NaviSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{8EEE58D5-130E-4CBD-9C83-35A0564E2468} -> Spyware.NaviSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{8EEE58D5-130E-4CBD-9C83-35A0564E5678} -> Spyware.BargainBuddy : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{924F5B3A-7A27-484A-B873-E855C9708667} -> Spyware.CnsMin : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{955CBF48-4313-4B1F-872B-254B7822CCF2} -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{99AA88D1-D9D3-410A-BE9E-044F94C183DA} -> Spyware.IBIS : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{9CFA26C2-81DA-4C9D-A501-F144A4A000FA} -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{9F61CFDF-5C79-4D35-B4DA-766B28367223} -> Spyware.MediaMotor : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{A36A5936-CFD9-4B41-86BD-319A1931887F} -> Spyware.SideFind : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{A42C0EF4-1C76-43CC-989F-EADC7E4B755D} -> Spyware.VX2 : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{A74CD7DE-EA6F-11D4-ABF3-000102378429} -> Spyware.EliteBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{ACE5B10B-92A3-4103-8583-3684BB09409F} -> Spyware.TopConverting : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{AD29366C-63AA-4FF3-944F-91AD7193BCA2} -> Spyware.MediaMotor : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{B548B7D8-3D03-4AED-A6A1-4251FAD00C10} -> Spyware.AproposMedia : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{B99A727F-0782-4A71-BCC2-6E1E66414904} -> Spyware.AproposMedia : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{BC333116-6EA1-40A1-9D07-ECB192DB8CEA} -> Spyware.AproposMedia : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{BE08F6BC-C3E6-4149-BEB1-CB449E1B372E} -> Spyware.CnsMin : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{C380566D-F343-42AB-987B-6B38A1A35747} -> Spyware.IBIS : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{C6906A23-4717-4E1F-B6FD-F06EBED11357} -> Spyware.NaviSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{C6906A23-4717-4E1F-B6FD-F06EBED12468} -> Spyware.NaviSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{C6906A23-4717-4E1F-B6FD-F06EBED15678} -> Spyware.BargainBuddy : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{D1951679-1D52-43FC-9585-0737143585F5} -> Spyware.IBIS : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{DDEA2E1D-8555-45E5-AF09-EC9AA4EA27AD} -> Spyware.180Solutions : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{DFBCC1EB-B149-487E-80C1-CC1562021542} -> Spyware.YourSiteBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{E832FFDE-8ED2-47B7-BE50-729A238040A0} -> Spyware.MediaMotor : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{EFA52460-8822-4191-BA38-FACDD2007910} -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{F273D4EA-2025-4410-8408-251A0CD46BE7} -> Spyware.IBIS : Cleaned with backup
HKLM\SOFTWARE\Classes\IObjSafety.DemoCtl -> Spyware.MediaMotor : Cleaned with backup
HKLM\SOFTWARE\Classes\IObjSafety.DemoCtl\Clsid -> Spyware.MediaMotor : Cleaned with backup
HKLM\SOFTWARE\Classes\MediaPass.Installer -> Spyware.WinAd : Cleaned with backup
HKLM\SOFTWARE\Classes\MediaPass.Installer\CLSID -> Spyware.WinAd : Cleaned with backup
HKLM\SOFTWARE\Classes\MediaPass.Installer\CurVer -> Spyware.WinAd : Cleaned with backup
HKLM\SOFTWARE\Classes\PROTOCOLS\Name-Space Handler\res -> Spyware.WebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{19069804-2CF0-4357-B696-BA6E9AAD99EF} -> Spyware.CnsMin : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{2A7DB8D1-43BE-4AD3-A81E-9BB8C9D00073} -> Spyware.Delfin : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{370F6327-41C4-4FA6-A2DF-1BA57EE0FBB9} -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{3FA866AC-40D7-4FE6-BABF-78EE854A4325} -> Spyware.VX2 : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{4158DB95-DE71-41FF-BEA1-2C3D1C679DF1} -> Spyware.CnsMin : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{487E7682-B976-41FB-A944-E8B83689A454} -> Spyware.TopConverting : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{4EB7BBE8-2E15-424B-9DDB-2CDB9516B2C3} -> Spyware.NaviSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{4EB7BBE8-2E15-424B-9DDB-2CDB9516C2E3} -> Spyware.NaviSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{4EB7BBE8-2E15-424B-9DDB-2CDB9516E2A3} -> Spyware.NaviSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{4EE12B71-AA5E-45EC-8666-2DB3AD3FDF44} -> Spyware.YourSiteBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{58634367-D62B-4C2C-86BE-5AAC45CDB671} -> Spyware.SideFind : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{5B6689B5-C2D4-4DC7-BFD1-24AC17E5FCDA} -> Spyware.180Solutions : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{5CF68A06-673D-4619-A805-C8FC9AC611DD} -> Spyware.WebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{67907B3C-A6EF-4A01-99AD-3FCD5F526429} -> Spyware.ISTBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{7354662F-CAA3-448B-BC01-04F55A2DCA35} -> Spyware.CnsMin : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{78A163D2-2358-464D-807B-0E2A078C7727} -> Spyware.MediaMotor : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{795EB484-BD6D-4125-93DB-D6FF015325E9} -> Dialer.Generic : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{9CFA26C0-81DA-4C9D-A501-F144A4A000FA} -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{9CFA26C1-81DA-4C9D-A501-F144A4A000FA} -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{A74CD7DD-EA6F-11D4-ABF3-000102378429} -> Spyware.EliteBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{AD68A180-096C-48CB-936A-36F044BB9CF9} -> Dialer.Generic : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{B23B3ADD-84B1-414A-92B9-0CABE5A781F4} -> Spyware.IBIS : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{BAF13496-8F72-47A1-9CEE-09238EFC75F0} -> Spyware.eZula : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{F97E75A4-0103-4F27-A752-327B600B1130} -> Spyware.CnsMin : Cleaned with backup
HKLM\SOFTWARE\Classes\VacPro.internazionale_ver4 -> Dialer.Generic : Cleaned with backup
HKLM\SOFTWARE\Classes\VacPro.internazionale_ver4\Clsid -> Dialer.Generic : Cleaned with backup
HKLM\SOFTWARE\Effective-i -> Spyware.EffectiveBrandToolbar : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{9AE283A5-DF43-4C83-B6AA-7EBDBDB0204A} -> Dialer.Generic : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\STO -> Spyware.WebSearch : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\AMeOpt -> Spyware.InternetOptimizer : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DisplayUtility -> Spyware.Delfin : Cleaned with backup
HKLM\SOFTWARE\motoin -> Spyware.Delfin : Cleaned with backup
HKLM\SOFTWARE\Mvu -> Spyware.Delfin : Cleaned with backup
HKLM\SOFTWARE\picsvr -> Spyware.Delfin : Cleaned with backup
HKLM\SOFTWARE\Policies\Avenue Media -> Spyware.InternetOptimizer : Cleaned with backup
HKLM\SOFTWARE\Toolbar -> Spyware.WebSearch : Cleaned with backup
HKLM\SOFTWARE\Toolbar\PlugIns -> Spyware.WebSearch : Cleaned with backup
HKLM\SOFTWARE\Toolbar\PlugIns\SSAVER -> Spyware.WebSearch : Cleaned with backup
HKLM\SOFTWARE\WildMedia -> Spyware.MidAddle : Cleaned with backup
HKLM\SOFTWARE\WildMedia\LicenseStores -> Spyware.MidAddle : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\dsktb -> Spyware.IEPlugin : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Effective-i -> Spyware.EffectiveBrandToolbar : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Effective-i\TheSearchAccelerator -> Spyware.EffectiveBrandToolbar : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Effective-i\TheSearchAccelerator\IE5 -> Spyware.EffectiveBrandToolbar : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Maxthon\Plugin\toolbar\{44BE0690-5429-47f0-85BB-3FFD8020233E} -> Spyware.UCmore : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-59D4-4008-9058-080011001200} -> Spyware.VX2 : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-DD60-0064-6EC2-6E0100000000} -> Spyware.MediaMotor : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000010-6F7D-442C-93E3-4A4827C2E4C8} -> Spyware.InternetOptimizer : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000049-8F91-4D9C-9573-F016E7626484} -> Spyware.BetterInternet : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000EF1-0786-4633-87C6-1AA7A44296DA} -> Spyware.FavoriteMan : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00320615-B6C2-40A6-8F99-F1C52D674FAD} -> Spyware.Transponder : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{016235BE-59D4-4CEB-ADD5-E2378282A1D9} -> Spyware.AproposMedia : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10E42047-DEB9-4535-A118-B3F6EC39B807} -> Spyware.SideFind : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{120E090D-9136-4B78-8258-F0B44B4BD2AC} -> Spyware.Maxspeed : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{28CAEFF3-0F18-4036-B504-51D73BD81ABC} -> Spyware.SearchMiracle : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{339BB23F-A864-48C0-A59F-29EA915965EC} -> Spyware.HuntBar : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{36A59337-6EEF-40AE-94B1-ED443A0C4740} -> Spyware.BetterInternet : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{44BE0690-5429-47F0-85BB-3FFD8020233E} -> Spyware.UCmore : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E7BD74F-2B8D-469E-C0FF-FA7FB592BF30} -> Spyware.MegaSearch : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{56A7DC70-E102-4408-A34A-AE06FEF01586} -> Spyware.HDTBar : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{669695BC-A811-4A9D-8CDF-BA8C795F261C} -> Spyware.PowerStrip : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{69135BDE-5FDC-4B61-98AA-82AD2091BCCC} -> Spyware.IEPlugin : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6A6E50DC-BFA8-4B40-AB1B-159E03E829FD} -> Spyware.LinkReplacer : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{825CF5BD-8862-4430-B771-0C15C5CA8DEF} -> Spyware.EliteBar : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{86227D9C-0EFE-4F8A-AA55-30386A3F5686} -> Spyware.YourSiteBar : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{87766247-311C-43B4-8499-3D5FEC94A183} -> Spyware.HuntBar : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8952A998-1E7E-4716-B23D-3DBE03910972} -> Spyware.HuntBar : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{907CA0E5-CE84-11D6-9508-02608CDD2846} -> Spyware.SearchSquire : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9AE283A5-DF43-4C83-B6AA-7EBDBDB0204A} -> Dialer.Generic : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344} -> Spyware.BargainBuddy : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B1D147E7-873E-4909-8127-695D9BB78728} -> Spyware.t2t2com : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BB936323-19FA-4521-BA29-ECA6A121BC78} -> Spyware.CnsMin : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C900B400-CDFE-11D3-976A-00E02913A9E0} -> Spyware.Webhancer : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC378B83-9577-44D0-B4F8-0DD965E176FC} -> Spyware.Esyndicate : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CE188402-6EE7-4022-8868-AB25173A3E14} -> Spyware.BargainBuddy : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D157330A-9EF3-49F8-9A67-4141AC41ADD4} -> Spyware.CnsMin : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBAE7000-01EC-4162-8FEB-8A27AC937CA0} -> Spyware.Gator : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ED103D9F-3070-4580-AB1E-E5C179C1AE41} -> Spyware.SearchMiracle : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F4E04583-354E-4076-BE7D-ED6A80FD66DA} -> Spyware.BargainBuddy : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FAA356E4-D317-42A6-AB41-A3021C6E7D52} -> Spyware.ISTBar : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Microsoft\Windows\CurrentVersion\Policies\AMeOpt -> Spyware.InternetOptimizer : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Mvu -> Spyware.Delfin : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\picsvr -> Spyware.Delfin : Cleaned with backup
HKU\S-1-5-21-514718743-193498624-3262294200-1497\Software\Policies\Avenue Media -> Spyware.InternetOptimizer : Cleaned with backup
:mozilla.11:C:\Documents and Settings\cstrong\Application Data\Mozilla\Profiles\default\06ybuf0a.slt\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.14:C:\Documents and Settings\cstrong\Application Data\Mozilla\Profiles\default\06ybuf0a.slt\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.15:C:\Documents and Settings\cstrong\Application Data\Mozilla\Profiles\default\06ybuf0a.slt\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.16:C:\Documents and Settings\cstrong\Application Data\Mozilla\Profiles\default\06ybuf0a.slt\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.26:C:\Documents and Settings\cstrong\Application Data\Mozilla\Profiles\default\06ybuf0a.slt\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.27:C:\Documents and Settings\cstrong\Application Data\Mozilla\Profiles\default\06ybuf0a.slt\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.34:C:\Documents and Settings\cstrong\Application Data\Mozilla\Profiles\default\06ybuf0a.slt\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.40:C:\Documents and Settings\cstrong\Application Data\Mozilla\Profiles\default\06ybuf0a.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.46:C:\Documents and Settings\cstrong\Application Data\Mozilla\Profiles\default\06ybuf0a.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.47:C:\Documents and Settings\cstrong\Application Data\Mozilla\Profiles\default\06ybuf0a.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.7:C:\Documents and Settings\dmoxham\Application Data\Mozilla\Profiles\default\7sfl165v.slt\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.8:C:\Documents and Settings\dmoxham\Application Data\Mozilla\Profiles\default\7sfl165v.slt\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
C:\Documents and Settings\emoxham\Cookies\emoxham@trafficmp[1].txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
C:\Documents and Settings\emoxham\Cookies\[email protected][1].txt -> Spyware.Cookie.Adserver : Cleaned with backup
C:\Program Files\Common Files\Uninstall Information\RemoveDisplayUtility.exe -> Spyware.Delfin : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\0319D597-483B-4854-9EA8-4BEF61\E067DBCF-5C4C-4A08-8B0F-5EEB35 -> TrojanDownloader.IstBar : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\049DFD5E-56AB-4907-BC5B-4AB15C\242FCDF3-F21C-4EBB-8164-6213ED -> Spyware.DlMax : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\04EC38BF-371B-4E6E-9694-1E27A4\90C11EE1-597B-42DA-B71C-8403A1 -> TrojanDownloader.IstBar : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\06D07C01-2FB5-485A-81EA-A46971\F848C2BB-BFF3-4996-A463-41825F -> Spyware.180Solutions : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\079E2319-B9A2-4EEE-A184-366501\1A9436E1-4586-4FA8-8441-F8E074 -> Spyware.WebSearch : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\079E2319-B9A2-4EEE-A184-366501\2C8EA02A-01CC-4215-948E-BD2BBF -> Spyware.Wintol : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\079E2319-B9A2-4EEE-A184-366501\DCC0B9DF-0ACE-4F3E-AECD-D4564A -> TrojanDownloader.Wintool.f : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\07BA0A08-D7F6-43B3-A24E-B71288\17171BF4-1974-4986-A5A0-B0176B -> Spyware.180Solutions : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\09B57FF7-2979-467C-88EC-06A343\7EF79004-91CC-41F9-9254-94F57D -> Adware.SAHA : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\0BB953F1-C70D-4D2A-8AA3-937669\D8F401CD-77EF-4316-9F18-79952E -> Adware.BetterInternet : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\0DC313AC-860E-46B6-91C3-90B896\23F5C73C-BC9B-4218-A4C1-D1D01B -> Spyware.180Solutions : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\0DC313AC-860E-46B6-91C3-90B896\D2D41BD0-2345-48B5-970C-F97E7F -> Spyware.180Solutions : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\0E15423E-CF1D-42B0-8AFC-B2949E\E6882B15-96F9-40E3-AD44-0C692E -> Spyware.SearchSquire : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\0ED6FCFA-674F-42DF-8435-B07553\F5565834-AD86-4794-BD0C-14CE55 -> Spyware.DlMax : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\101136D2-7E6B-42AC-8CD6-09B918\82B4EDE1-5A78-4832-9EC3-43A0BA -> TrojanDownloader.QDown.s : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\116622D2-C52B-4954-A9DC-30B21F\4D0C49CE-A66F-493C-B9EE-4474B9 -> TrojanDownloader.IstBar : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\1277C172-B86C-414A-8B58-F55AC5\557CFB86-E288-4941-B0B7-C1F450 -> Adware.SAHA : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\16B8EDA2-058B-451E-B101-C24FA0\2DB8797E-63D8-42E6-B8A7-9B405E -> Adware.SAHA : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\1DFC123F-31E5-4196-80E1-0A18C4\25F30238-6390-464D-BB31-A5029A -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\1DFC123F-31E5-4196-80E1-0A18C4\67185B20-D2AF-4876-B20E-7EDFFB -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\1DFC123F-31E5-4196-80E1-0A18C4\6D33B878-AEEB-4F11-977A-AB843E -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\1DFC123F-31E5-4196-80E1-0A18C4\93C977B7-0193-4345-9CFF-3D0E6D -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\1DFC123F-31E5-4196-80E1-0A18C4\980067B0-C841-4694-B0BA-B557DB -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\1DFC123F-31E5-4196-80E1-0A18C4\996F93A8-2FF6-4CB7-B193-54C623 -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\1DFC123F-31E5-4196-80E1-0A18C4\9A81F172-99C2-41DD-8BE5-81ECF0 -> TrojanDownloader.Apropo.g : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\1DFC123F-31E5-4196-80E1-0A18C4\E8F8A395-2D39-4123-A45A-C04CDB -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\2077692A-9780-4B82-9E05-A53F9D\F5494FC8-E53E-42C2-86A7-8F8873 -> Spyware.WeirWeb : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\23F01C9B-0807-4573-8491-01FF32\4C421F79-52FE-484E-974A-B315C0 -> Spyware.BargainBuddy : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\24F14DB2-5DEE-4A74-B712-715BA7\7657FBD8-6168-4E0F-BD96-99F82A -> Spyware.180Solutions : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\24F14DB2-5DEE-4A74-B712-715BA7\C832BA2F-0BC9-4073-91EC-063861 -> Spyware.180Solutions : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\28014F0F-321C-4413-BE86-495E43\E9CA071F-0B7D-4F0F-B83B-53B249 -> Spyware.DlMax : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\2BF0D607-EA5D-40B4-B56F-42E67D\A3B5379C-131A-44E0-9176-7F1B66 -> Spyware.Delfin : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\3414915C-EAAD-4B72-8897-DABD9D\17F7A1BF-5E40-4BE2-ABF5-1AE17D -> Spyware.AdMir : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\3671429C-F844-45DA-8DD3-72BF5A\1F536B1A-D50F-45E2-9DC3-DE6D0D -> Adware.BetterInternet : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\37438BEA-D69E-43E4-A33C-D3A669\2464DE53-5C12-47E2-8C60-F53A8B -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\37438BEA-D69E-43E4-A33C-D3A669\27D35A69-4C89-4926-A474-31B85B -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\37438BEA-D69E-43E4-A33C-D3A669\5B7C237A-9908-47B1-AD5F-52AAAA -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\37438BEA-D69E-43E4-A33C-D3A669\5DD9EE09-7D33-4A6C-B177-F5FFAD -> TrojanDownloader.Apropo.g : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\37438BEA-D69E-43E4-A33C-D3A669\A353462C-69FF-4B8F-BFB7-F49BB8 -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\37438BEA-D69E-43E4-A33C-D3A669\D309165A-5C2C-4712-98B9-195A5F -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\37438BEA-D69E-43E4-A33C-D3A669\E9D9473D-CBC4-4794-A846-76ED1B -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\37438BEA-D69E-43E4-A33C-D3A669\F3E4A31B-BFE1-45F5-8F44-4B9E1C -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\38960CFD-DF22-4345-81BC-E40603\E0D3A958-9E9F-4FA0-9DA9-207140 -> TrojanDownloader.IstBar : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\3A875D89-AFB5-4CFE-9EDC-D3E0FB\DCDC0E16-1EC2-400E-990C-AA063D -> Adware.BetterInternet : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\3ABA3EA6-7D99-422F-81B9-37F27D\F3DD4D95-E4D1-4C61-86EF-E48185 -> Adware.BetterInternet : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\434154F9-428A-4DD2-BFF8-86F6A5\37DA6392-7C0B-4AC0-85BA-06DB9F -> Spyware.180Solutions : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\456D7599-E79A-4DE1-B3FF-57080C\390ECA36-F042-46C5-97FC-13E837 -> Trojan.Agent.ay : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\464698EB-EA69-4667-9EEC-980E4F\34B2337C-83DA-4457-B662-7BEFB9 -> Spyware.SearchSquire : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\47B01691-5B2D-4B8E-B13F-0B19EC\0DE3FE88-7699-4890-AC2D-AA53F6 -> TrojanDownloader.IstBar.gi : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\47B01691-5B2D-4B8E-B13F-0B19EC\AAACA4B5-90AE-4CDC-8786-417AD4 -> Spyware.PowerScan : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\48D3173A-3533-4383-8F10-441F45\736AD571-A951-4F5B-9D03-5516DA -> TrojanDownloader.Wintool.f : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\48D3173A-3533-4383-8F10-441F45\CC326021-0FCE-4C8D-BA90-099D50 -> Spyware.Wintol : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\4BE202BE-3A8A-46FB-8980-55CF3E\1C1947B8-C328-4766-BD0E-DE02EF -> TrojanDownloader.Dyfuca : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\4CE09097-4757-424A-A997-91427B\39CF6A4E-F4DC-4CDA-A6E8-27CDF8 -> Spyware.SearchSquire : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\4CE09097-4757-424A-A997-91427B\3EA87320-257F-45C9-9C28-BE9DD9 -> Spyware.SearchSquire : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\4CE09097-4757-424A-A997-91427B\A419F090-22BD-4C2F-8D66-5F6660 -> Spyware.SearchSquire : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\509F0D75-25A0-4CF4-9FD4-7917F0\22202D16-8E07-46B3-AE9A-6106E8 -> TrojanDownloader.Dyfuca : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\517B1F63-FA08-4A80-9420-72D48F\FCDA44CC-92EA-4F9E-8B2B-73551F -> Adware.SAHA : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\51904D37-5D95-48DE-85E7-BC39BB\2518B721-BE76-411A-B4CB-10B89D -> Spyware.180Solutions : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\51904D37-5D95-48DE-85E7-BC39BB\314D61FA-67B9-40E3-96D2-158F6B -> Spyware.180Solutions : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\53A6CD2A-FF18-48CD-91E6-6DF5B3\B163DCD3-CFCA-4045-BF0C-89F8BA -> Adware.BetterInternet : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\54DF50A6-C12E-42F9-B6D3-41D160\685C107A-F459-47FF-A00C-8DFFC7 -> TrojanDownloader.Agent.ex : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\54DF50A6-C12E-42F9-B6D3-41D160\9B37363D-2137-45F6-9A35-DDC9D9 -> Spyware.WinShow : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\5533A00B-E487-42C7-8066-36BDE7\F1B2447C-1886-463F-AE86-F41E78 -> Spyware.180Solutions : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\566C8916-4640-4805-8BB6-5C1479\075122E1-CA14-4B76-96E8-8FA06D -> Spyware.WinAD : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\568C8FC8-250C-4199-99D2-3E9B62\F7D328FF-2795-4D04-8D29-96F7A4 -> Adware.BetterInternet : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\56D180B0-E301-44D9-9B02-B7E5BA\9456ACE3-059F-408F-BA59-C38B3E -> TrojanDownloader.QDown.s : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\5844B08E-3DAA-49D9-9F1C-CC1BA0\1194F22D-C242-42B4-A797-7228E4 -> Spyware.WebSearch : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\59F03E7B-5545-43F8-B72A-9D8DB7\4981C3A9-FAA1-40C4-A7CD-8AF767 -> Adware.BetterInternet : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\5C91BC79-DB72-458B-8FD4-5FABA2\F904BE06-2BCA-4666-A625-279D60 -> Adware.BetterInternet : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\5E47E9DA-E911-43A1-AAC2-02281E\8B067A7C-DC67-4123-8FA4-D99867 -> TrojanDownloader.Wintool.f : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\5E47E9DA-E911-43A1-AAC2-02281E\F4C8990C-7054-4DC7-AF79-332882 -> Spyware.Wintol : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\60C4BC5C-BBCA-4577-B7F5-B89479\60346B1D-3659-4AA1-8BC1-75A798 -> Adware.BetterInternet : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\623E2771-EC00-4B74-81F5-D5A4BE\7661FEB9-F295-4A34-8274-6F33DC -> TrojanDownloader.Wintool.f : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\623E2771-EC00-4B74-81F5-D5A4BE\B88D64D2-A333-49D8-9982-A23E92 -> Spyware.Wintol : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\63A94291-1E14-4C88-8E01-A17FD5\0E9A1166-A12A-4E20-99C3-9D4E35 -> TrojanDownloader.Qoologic.u : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\63A94291-1E14-4C88-8E01-A17FD5\37439712-87A1-4A9E-B474-02D6F6 -> TrojanDownloader.Qoologic.u : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\63A94291-1E14-4C88-8E01-A17FD5\8149549E-51B3-4553-A95F-F0BF86 -> TrojanDownloader.Qoologic.s : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\63A94291-1E14-4C88-8E01-A17FD5\9B83D913-3543-450F-AE5B-ADB1E2 -> TrojanDownloader.Qoologic.u : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\63A94291-1E14-4C88-8E01-A17FD5\DF27A8B3-E048-4183-A9BB-1A7F52 -> TrojanDownloader.Qoologic.u : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\63A94291-1E14-4C88-8E01-A17FD5\E34DE80B-56BC-4C58-A8B1-68BE62 -> TrojanDownloader.Qoologic.u : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\64223060-16B5-42D5-B8DE-00BC67\43AD3AA3-C8F0-431A-AE63-2199B4 -> TrojanDownloader.IstBar : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\65136987-59B5-4420-944C-966E47\1FD87693-D263-4E11-A315-56D8DA -> Spyware.Wintol : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\65136987-59B5-4420-944C-966E47\5C6869EB-A79D-4BD0-BEB6-4CABD2 -> TrojanDownloader.Wintool.f : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\68ED3EBE-767B-4411-870B-D2CB1B\23BB9A77-B810-4B1A-8700-7B20F4 -> Spyware.Suggestor : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\6EE6CC8E-BCAF-427E-B4FF-6F5D0F\FB674154-15CA-4A9B-B02C-8D881A -> Adware.BetterInternet : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\6F895E38-E2EF-4902-B83C-159899\792ADEAD-E8B6-4CF0-9AAF-43F72E -> Adware.BetterInternet : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\74201326-B4DC-4F50-B2AC-6F7B49\11EF4080-6965-4C54-93AF-484B19 -> Spyware.BargainBuddy : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\74201326-B4DC-4F50-B2AC-6F7B49\136D7C7A-2025-4C50-A4A3-6BAC0B -> Spyware.BargainBuddy : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\74201326-B4DC-4F50-B2AC-6F7B49\702FCA56-8EF5-4FA0-B04D-B24222 -> Spyware.BargainBuddy : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\74201326-B4DC-4F50-B2AC-6F7B49\CA63F74B-457F-4041-9B7A-23637D -> Spyware.BargainBuddy : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\74201326-B4DC-4F50-B2AC-6F7B49\E46D3AD9-7F45-4185-BA3F-8D3D4E -> Spyware.BargainBuddy : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\79BDE2FE-B329-4F7C-96E9-A8C8EE\A9AEF9CE-D6AF-4ADF-A48A-F6891B -> Adware.BetterInternet : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\7ADEC866-B350-40BA-8AFA-102EEC\0719241F-7889-4EA3-8A1B-4695BE -> Spyware.WinAD : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\7ADEC866-B350-40BA-8AFA-102EEC\8FA7109E-5343-4285-BD75-5725F8 -> Spyware.WinAD : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\7ADEC866-B350-40BA-8AFA-102EEC\E1628C7F-C0A5-4B29-B417-BC87AD -> Spyware.WinAD : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\7ADEC866-B350-40BA-8AFA-102EEC\F14491D6-1FEF-4280-A61C-78F18F -> Spyware.WinAD : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\7B950C51-80A1-496A-AB5B-FE5937\7D5DF3B1-F692-429F-904B-97AC28 -> Spyware.Hijacker.Generic : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\7C22B8EF-CF0B-4C4B-A932-02F705\44F1064F-612E-4D4E-A909-7ABA3E -> Spyware.SideFind : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\7C22B8EF-CF0B-4C4B-A932-02F705\6604153A-30EF-47FD-BD76-18A1DD -> Spyware.SideFind : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\8132E485-2749-40D4-811E-2D0AF3\084ADACD-F435-496F-9299-9D9EBC -> Spyware.DlMax : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\86005642-51A5-42FC-9C5B-3069C0\96A54CBA-FB28-43B6-9F5C-6E1B5E -> Spyware.SearchSquire : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\86005642-51A5-42FC-9C5B-3069C0\9C8A1D7E-AB40-4057-9202-7AEE96 -> Spyware.SearchSquire : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\86005642-51A5-42FC-9C5B-3069C0\CEB4848E-B6B7-4480-8C5B-A887C1 -> Spyware.SearchSquire : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\86365134-C18B-4542-A412-F00314\0071AA4F-E398-419F-8194-BAC9FE -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\86365134-C18B-4542-A412-F00314\15441DAF-33EF-4CB6-8AD2-C895F0 -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\86365134-C18B-4542-A412-F00314\38162106-835F-4F8D-B906-920177 -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\86365134-C18B-4542-A412-F00314\3B595448-A946-4F8B-B7D1-8DDA86 -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\86365134-C18B-4542-A412-F00314\3F1B1A91-02E2-4A62-A8BB-AC0839 -> TrojanDownloader.Apropo.g : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\86365134-C18B-4542-A412-F00314\7BAD465C-13D3-42F7-89B6-136021 -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\86365134-C18B-4542-A412-F00314\D27C6015-2B88-4235-8E1B-679D75 -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\86ABFDD5-BB51-46D4-B8BA-304D04\517D2C86-E70E-4129-B77A-67B7DF -> Spyware.180Solutions : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\86ABFDD5-BB51-46D4-B8BA-304D04\D1C71FCB-243E-4DCD-89B0-DAB269 -> Spyware.180Solutions : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\86ABFDD5-BB51-46D4-B8BA-304D04\EAB4C666-869B-40E9-91D5-7BBAB4 -> Spyware.180Solutions : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\86DD90B8-2334-44B9-B132-F94E3D\3A83434A-BCB2-4189-AAF0-537A25 -> Spyware.BargainBuddy : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\86DD90B8-2334-44B9-B132-F94E3D\4A68C6A7-9F39-4955-ABC0-55D82B -> Spyware.BargainBuddy : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\86DD90B8-2334-44B9-B132-F94E3D\5A75D605-84B3-4F7D-9E10-F81608 -> Spyware.BargainBuddy : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\86DD90B8-2334-44B9-B132-F94E3D\D9F3AA58-0220-423D-ACCF-946092 -> Spyware.BargainBuddy : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\87426F84-FB65-474A-AB4C-8F68EE\1DB1B00C-3E97-4FC4-B3AA-CF8ACC -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\87426F84-FB65-474A-AB4C-8F68EE\5C208971-6142-4E04-9AA6-FBE0F6 -> Trojan.Pakes : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\87426F84-FB65-474A-AB4C-8F68EE\62167362-7887-4650-B791-FCF386 -> Trojan.Pakes : Cleaned with backup