[Frank101]

Yep ive joined this site as my final resort so many problems with my comp. since this is the hijack this logfile forum ill put this one in the right forum (hopefully this might solve other problems on my comp as well).

winfixer2005 keeps appearing as an icon on my desktop and loads a automatic DL box at start up. task manager file says this UWFX5LP_0001_0715nETiNSTALLER.EXE
when it starts up.

also this may or may not be relvant but ill add this as well, i cannot play games sigle player or online such as diabl 2 LoD or RCT2 or any game online for that matter even though i have been able to when they were first installed.

i have run numerous spyware/adware scans to no avail.

heres the hijack this logfile


Logfile of HijackThis v1.99.1
Scan saved at 8:58:20 PM, on 8/4/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\svchost.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\Smtray.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\WINDOWS\system32\taskmgr.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\AIM\aim.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\WINDOWS\Downloaded Program Files\UWFX5LP_0001_0715NetInstaller.exe
C:\Documents and Settings\Frankie\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = verizon.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = verizon.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Compaq
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: VBRunDLL Class - {197B8CA4-E215-46DD-8F33-E0544A80E5C4} - C:\WINDOWS\system32\vbrundll.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\DOCUME~1\Frankie\MYDOCU~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IE Update Class - {5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} - C:\WINDOWS\isrvs\sysupd.dll
O2 - BHO: LANBridge Class - {71D1708F-973D-4600-AF01-AD86688403AE} - C:\WINDOWS\system32\qriyqpob.dll
O2 - BHO: ohb - {9ADE0443-2AB2-4B23-A3F8-AC520773DE12} - C:\WINDOWS\system32\nsm9F.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [QuickTime Task] "C
:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Lexmark X83 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
O4 - HKLM\..\Run: [Lexmark X83 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [Smapp] Smtray.exe
O4 - HKLM\..\Run: [edmhmj] C:\WINDOWS\edmhmj.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [System backup] C:\WINDOWS\system32\web.exe
O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
O4 - HKLM\..\Run: [regsync] C:\WINDOWS\system32\regsync.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [pfmxqyn] c:\windows\system32\ytesxv.exe
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [NI.UWFX5LP_0001_0715] "C:\WINDOWS\Downloaded Program Files\UWFX5LP_0001_0715NetInstaller.exe"
O4 - HKLM\..\Run: [lanbrup] C:\WINDOWS\system32\lanbrup.exe
O4 - HKLM\..\Run: [s72et7nc] C:\WINDOWS\system32\s72et7nc.exe
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [WaitGlue] C:\DOCUME~1\Frankie\APPLIC~1\ACELES~1\daleseek.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Ebates - {6685509E-B47B-4f47-8E16-9A5F3A62F683} - file://C:\Program Files\Ebates_MoeMoneyMaker\Sy350\Tp350\scri350a.htm (file missing) (HKCU)
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\PROGRA~1\AWS\WEATHE~1\Weather.exe (file missing) (HKCU)
O9 - Extra button: Support - {D9812054-38F7-4440-954D-293478D9A3C0} - C:\Program Files\Internet Explorer\SIGNUP\Presario.htm (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://store.presario.net/scripts/redirectors/presario/storeredir2.dll?s=consumerfav&c=3c01&lc=0409
O15 - Trusted Zone: *.frame.crazywinnings.com
O15 - Trusted Zone: *.frame.crazywinnings.com (HKLM)
O15 - ProtocolDefaults: 'http' protocol is in Trusted Zone, should be Internet Zone
O15 - ProtocolDefaults: 'http' protocol is in Trusted Zone, should be Internet Zone (HKLM)
O16 - DPF: {1DE9C7CD-30CE-3818-F215-50AC3883E05B} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {1F216022-276F-12D2-3393-782C574E5AD1} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {2424AFBD-56D0-5020-C0F1-5C747CB4101E} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {2F3D99BC-D808-153F-9144-228701D5A618} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {3914BAFB-0AC6-7B80-0883-123E4EBE2405} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {3948C458-C256-70AD-7C85-03A6359A89DA} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {3FE2AE90-3186-05E1-2333-1B7A5ABD0261} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {4526C85A-0489-5232-68E7-13D63BF9E2A3} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcaf...84/mcinsctl.cab
O16 - DPF: {6E69C44E-7685-1D7F-DC4F-476778607146} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcaf...,21/mcgdmgr.cab
O16 - DPF: {FC67BB52-AAB6-4282-9D51-2DAFFE73AFD0} - http://download.spys...tterInstall.cab
O18 - Filter: text/html - {950238FB-C706-4791-8674-4D429F85897E} - C:\WINDOWS\isrvs\mfiltis.dll
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: System Startup Service (SvcProc) - Unknown owner - c:\windows\SvcProc.exe (file missing)
O23 - Service: Windows VisFx Components - Unknown owner - C:\WINDOWS\vjtssvc.exe (file missing)






thanks in advance very much appreciated .

[Advertisements]

Welcome to GTG.

Oh my, you have a lot of things stirring up trouble here

Download CWShredder at http://www.greyknigh.../CWShredder.exe and run it. Click on 'I Agree' button if you agree. Click on 'Fix' (it will automatically fix anything it finds for you) and then click OK. If it asks if you want to delete a certain random file, choose No and post that filename here. Let it finish the scan and then hit Next and Exit.

Right click on this link http://www.greyknigh...lO15Domains.inf and choose Save As. Save it to your desktop. Right click on that file and choose Install. It will run immediately (you won't be able to see anything happen). You may delete it afterwards.

Please download Ewido Security Suite at http://www.ewido.net/en/download/.

1. Install Ewido Security Suite.
2. When installing, under 'Additional Options' uncheck:
* Install background guard
* Install scan via context menu
3. Launch Ewido, there should be an icon on your desktop, double-click it.
4. The program will now open to the main screen.
5. When you run Ewido for the first time, you will get a warning 'Database could not be found!'. Click OK. We will fix this in a moment.
6. You will need to update Ewido to the latest definition files.
* On the left hand side of the main screen click update.
* Then click on Start Update.
7. The update will start and a progress bar will show the updates being installed.
(the status bar at the bottom will display 'Update successful')
8. Exit Ewido. DO NOT scan yet.

If you are having problems with the updater, you can go to http://www.ewido.net...wnload/updates/ to update manually.

Download CCleaner at http://www.ccleaner.com/ccdownload.asp and install it, but do not run it yet.

Restart your computer and boot into Safe Mode by hitting the F8 key repeatedly until a menu shows up (and choose Safe Mode from the list). In some systems, this may be the F5 key, so try that if F8 doesn't work.

Now open Ewido and do a scan on your system.

* Click on scanner
* Click on Complete System Scan and the scan will begin.
* NOTE: During some scans with Ewido it is finding cases of false positives.
o You will need to step through the process of cleaning files one-by-one.
o If Ewido detects a file you KNOW to be legitimate, select none as the action.
o Do NOT select 'Perform action on all infections'
o If you are unsure of any entry found, select none for now as the action.
* Once the scan has completed, there will be a button located on the bottom of the screen named Save report
* Click Save report.
* Save the report .txt file to your desktop or a location where you can find it easily.

Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any):

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: VBRunDLL Class - {197B8CA4-E215-46DD-8F33-E0544A80E5C4} - C:\WINDOWS\system32\vbrundll.dll
O2 - BHO: IE Update Class - {5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} - C:\WINDOWS\isrvs\sysupd.dll
O2 - BHO: LANBridge Class - {71D1708F-973D-4600-AF01-AD86688403AE} - C:\WINDOWS\system32\qriyqpob.dll
O2 - BHO: ohb - {9ADE0443-2AB2-4B23-A3F8-AC520773DE12} - C:\WINDOWS\system32\nsm9F.dll
O4 - HKLM\..\Run: [edmhmj] C:\WINDOWS\edmhmj.exe
O4 - HKLM\..\Run: [System backup] C:\WINDOWS\system32\web.exe
O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
O4 - HKLM\..\Run: [regsync] C:\WINDOWS\system32\regsync.exe
O4 - HKLM\..\Run: [pfmxqyn] c:\windows\system32\ytesxv.exe
O4 - HKLM\..\Run: [NI.UWFX5LP_0001_0715] "C:\WINDOWS\Downloaded Program Files\UWFX5LP_0001_0715NetInstaller.exe"
O4 - HKLM\..\Run: [lanbrup] C:\WINDOWS\system32\lanbrup.exe
O4 - HKLM\..\Run: [s72et7nc] C:\WINDOWS\system32\s72et7nc.exe
O4 - HKCU\..\Run: [WaitGlue] C:\DOCUME~1\Frankie\APPLIC~1\ACELES~1\daleseek.exe
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O9 - Extra button: Ebates - {6685509E-B47B-4f47-8E16-9A5F3A62F683} - file://C:\Program Files\Ebates_MoeMoneyMaker\Sy350\Tp350\scri350a.htm (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://store.presario.net/scripts/redirectors/presario/storeredir2.dll?s=consumerfav&c=3c01&lc=0409
O15 - Trusted Zone: *.frame.crazywinnings.com
O15 - Trusted Zone: *.frame.crazywinnings.com (HKLM)
O15 - ProtocolDefaults: 'http' protocol is in Trusted Zone, should be Internet Zone
O15 - ProtocolDefaults: 'http' protocol is in Trusted Zone, should be Internet Zone (HKLM)
O16 - DPF: {1DE9C7CD-30CE-3818-F215-50AC3883E05B} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {1F216022-276F-12D2-3393-782C574E5AD1} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {2424AFBD-56D0-5020-C0F1-5C747CB4101E} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {2F3D99BC-D808-153F-9144-228701D5A618} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {3914BAFB-0AC6-7B80-0883-123E4EBE2405} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {3948C458-C256-70AD-7C85-03A6359A89DA} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {3FE2AE90-3186-05E1-2333-1B7A5ABD0261} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {4526C85A-0489-5232-68E7-13D63BF9E2A3} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {6E69C44E-7685-1D7F-DC4F-476778607146} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {FC67BB52-AAB6-4282-9D51-2DAFFE73AFD0} - http://download.spys...tterInstall.cab
O18 - Filter: text/html - {950238FB-C706-4791-8674-4D429F85897E} - C:\WINDOWS\isrvs\mfiltis.dll
O23 - Service: System Startup Service (SvcProc) - Unknown owner - c:\windows\SvcProc.exe (file missing)
O23 - Service: Windows VisFx Components - Unknown owner - C:\WINDOWS\vjtssvc.exe (file missing)

Uninstall these if listed in the Add/Remove panel:

Ebates
Viewpoint
Desktop Search

Locate and delete the following:

C:\WINDOWS\system32\vbrundll.dll
C:\WINDOWS\system32\qriyqpob.dll
C:\WINDOWS\system32\nsm9F.dll
C:\WINDOWS\edmhmj.exe
C:\WINDOWS\system32\web.exe
C:\WINDOWS\system32\regsync.exe
c:\windows\system32\ytesxv.exe
C:\WINDOWS\Downloaded Program Files\UWFX5LP_0001_0715NetInstaller.exe
C:\WINDOWS\system32\lanbrup.exe
C:\WINDOWS\system32\s72et7nc.exe
C:\DOCUME~1\Frankie\APPLIC~1\ACELES~1\
C:\Program Files\Viewpoint\
C:\Program Files\Ebates_MoeMoneyMaker\
C:\WINDOWS\isrvs\
c:\windows\SvcProc.exe
C:\WINDOWS\vjtssvc.exe

Now run CCleaner.

1. Uncheck 'Cookies' under 'Internet Explorer'.
2. If running Firefox: click on the 'Applications' tab and uncheck 'Cookies' under 'Firefox'.
3. Click on Run Cleaner in the lower right-hand corner. This can take quite a while to run.

Finally, restart your computer and post a new HijackThis log, as well as the report log from the Ewido scan.

[greyknight17]

Welcome to GTG.

Oh my, you have a lot of things stirring up trouble here

Download CWShredder at http://www.greyknigh.../CWShredder.exe and run it. Click on 'I Agree' button if you agree. Click on 'Fix' (it will automatically fix anything it finds for you) and then click OK. If it asks if you want to delete a certain random file, choose No and post that filename here. Let it finish the scan and then hit Next and Exit.

Right click on this link http://www.greyknigh...lO15Domains.inf and choose Save As. Save it to your desktop. Right click on that file and choose Install. It will run immediately (you won't be able to see anything happen). You may delete it afterwards.

Please download Ewido Security Suite at http://www.ewido.net/en/download/.

1. Install Ewido Security Suite.
2. When installing, under 'Additional Options' uncheck:
* Install background guard
* Install scan via context menu
3. Launch Ewido, there should be an icon on your desktop, double-click it.
4. The program will now open to the main screen.
5. When you run Ewido for the first time, you will get a warning 'Database could not be found!'. Click OK. We will fix this in a moment.
6. You will need to update Ewido to the latest definition files.
* On the left hand side of the main screen click update.
* Then click on Start Update.
7. The update will start and a progress bar will show the updates being installed.
(the status bar at the bottom will display 'Update successful')
8. Exit Ewido. DO NOT scan yet.

If you are having problems with the updater, you can go to http://www.ewido.net...wnload/updates/ to update manually.

Download CCleaner at http://www.ccleaner.com/ccdownload.asp and install it, but do not run it yet.

Restart your computer and boot into Safe Mode by hitting the F8 key repeatedly until a menu shows up (and choose Safe Mode from the list). In some systems, this may be the F5 key, so try that if F8 doesn't work.

Now open Ewido and do a scan on your system.

* Click on scanner
* Click on Complete System Scan and the scan will begin.
* NOTE: During some scans with Ewido it is finding cases of false positives.
o You will need to step through the process of cleaning files one-by-one.
o If Ewido detects a file you KNOW to be legitimate, select none as the action.
o Do NOT select 'Perform action on all infections'
o If you are unsure of any entry found, select none for now as the action.
* Once the scan has completed, there will be a button located on the bottom of the screen named Save report
* Click Save report.
* Save the report .txt file to your desktop or a location where you can find it easily.

Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any):

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: VBRunDLL Class - {197B8CA4-E215-46DD-8F33-E0544A80E5C4} - C:\WINDOWS\system32\vbrundll.dll
O2 - BHO: IE Update Class - {5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} - C:\WINDOWS\isrvs\sysupd.dll
O2 - BHO: LANBridge Class - {71D1708F-973D-4600-AF01-AD86688403AE} - C:\WINDOWS\system32\qriyqpob.dll
O2 - BHO: ohb - {9ADE0443-2AB2-4B23-A3F8-AC520773DE12} - C:\WINDOWS\system32\nsm9F.dll
O4 - HKLM\..\Run: [edmhmj] C:\WINDOWS\edmhmj.exe
O4 - HKLM\..\Run: [System backup] C:\WINDOWS\system32\web.exe
O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
O4 - HKLM\..\Run: [regsync] C:\WINDOWS\system32\regsync.exe
O4 - HKLM\..\Run: [pfmxqyn] c:\windows\system32\ytesxv.exe
O4 - HKLM\..\Run: [NI.UWFX5LP_0001_0715] "C:\WINDOWS\Downloaded Program Files\UWFX5LP_0001_0715NetInstaller.exe"
O4 - HKLM\..\Run: [lanbrup] C:\WINDOWS\system32\lanbrup.exe
O4 - HKLM\..\Run: [s72et7nc] C:\WINDOWS\system32\s72et7nc.exe
O4 - HKCU\..\Run: [WaitGlue] C:\DOCUME~1\Frankie\APPLIC~1\ACELES~1\daleseek.exe
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
O9 - Extra button: Ebates - {6685509E-B47B-4f47-8E16-9A5F3A62F683} - file://C:\Program Files\Ebates_MoeMoneyMaker\Sy350\Tp350\scri350a.htm (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://store.presario.net/scripts/redirectors/presario/storeredir2.dll?s=consumerfav&c=3c01&lc=0409
O15 - Trusted Zone: *.frame.crazywinnings.com
O15 - Trusted Zone: *.frame.crazywinnings.com (HKLM)
O15 - ProtocolDefaults: 'http' protocol is in Trusted Zone, should be Internet Zone
O15 - ProtocolDefaults: 'http' protocol is in Trusted Zone, should be Internet Zone (HKLM)
O16 - DPF: {1DE9C7CD-30CE-3818-F215-50AC3883E05B} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {1F216022-276F-12D2-3393-782C574E5AD1} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {2424AFBD-56D0-5020-C0F1-5C747CB4101E} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {2F3D99BC-D808-153F-9144-228701D5A618} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {3914BAFB-0AC6-7B80-0883-123E4EBE2405} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {3948C458-C256-70AD-7C85-03A6359A89DA} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {3FE2AE90-3186-05E1-2333-1B7A5ABD0261} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {4526C85A-0489-5232-68E7-13D63BF9E2A3} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {6E69C44E-7685-1D7F-DC4F-476778607146} - http://67.19.178.86/1/rdgUS1742.exe
O16 - DPF: {FC67BB52-AAB6-4282-9D51-2DAFFE73AFD0} - http://download.spys...tterInstall.cab
O18 - Filter: text/html - {950238FB-C706-4791-8674-4D429F85897E} - C:\WINDOWS\isrvs\mfiltis.dll
O23 - Service: System Startup Service (SvcProc) - Unknown owner - c:\windows\SvcProc.exe (file missing)
O23 - Service: Windows VisFx Components - Unknown owner - C:\WINDOWS\vjtssvc.exe (file missing)

Uninstall these if listed in the Add/Remove panel:

Ebates
Viewpoint
Desktop Search

Locate and delete the following:

C:\WINDOWS\system32\vbrundll.dll
C:\WINDOWS\system32\qriyqpob.dll
C:\WINDOWS\system32\nsm9F.dll
C:\WINDOWS\edmhmj.exe
C:\WINDOWS\system32\web.exe
C:\WINDOWS\system32\regsync.exe
c:\windows\system32\ytesxv.exe
C:\WINDOWS\Downloaded Program Files\UWFX5LP_0001_0715NetInstaller.exe
C:\WINDOWS\system32\lanbrup.exe
C:\WINDOWS\system32\s72et7nc.exe
C:\DOCUME~1\Frankie\APPLIC~1\ACELES~1\
C:\Program Files\Viewpoint\
C:\Program Files\Ebates_MoeMoneyMaker\
C:\WINDOWS\isrvs\
c:\windows\SvcProc.exe
C:\WINDOWS\vjtssvc.exe

Now run CCleaner.

1. Uncheck 'Cookies' under 'Internet Explorer'.
2. If running Firefox: click on the 'Applications' tab and uncheck 'Cookies' under 'Firefox'.
3. Click on Run Cleaner in the lower right-hand corner. This can take quite a while to run.

Finally, restart your computer and post a new HijackThis log, as well as the report log from the Ewido scan.

[Frank101]

wow that took awhile to scan and all. but thanks

heres the ewido report:
---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------

+ Created on: 1:53:56 PM, 8/5/2005
+ Report-Checksum: 566719E8

+ Scan result:

HKLM\SOFTWARE\Classes\CLSID\{5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} -> Spyware.iSearch : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} -> Spyware.iSearch : Cleaned with backup
HKU\S-1-5-21-1203367206-1484400983-2210005112-1007\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} -> Spyware.iSearch : Cleaned with backup
:mozilla.13:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.14:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.15:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.38:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.41:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.42:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.43:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.45:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.46:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.47:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.48:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.49:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.50:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.51:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.52:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.53:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.54:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.55:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.58:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.59:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.60:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.62:C:\Documents and Settings\Frankie\Application Data\Mozilla\Firefox\Profiles\paan7ibi.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.12:C:\Documents and Settings\Frankie\Application Data\Netscape\NSB\Profiles\trizy5fo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.13:C:\Documents and Settings\Frankie\Application Data\Netscape\NSB\Profiles\trizy5fo.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.14:C:\Documents and Settings\Frankie\Application Data\Netscape\NSB\Profiles\trizy5fo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.15:C:\Documents and Settings\Frankie\Application Data\Netscape\NSB\Profiles\trizy5fo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.16:C:\Documents and Settings\Frankie\Application Data\Netscape\NSB\Profiles\trizy5fo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
C:\Documents and Settings\Frankie\Cookies\[email protected][1].txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
C:\Documents and Settings\Frankie\Cookies\frankie@trafficmp[2].txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
C:\Documents and Settings\Frankie\Local Settings\Application Data\Wildtangent\Cdacache\00\00\0F.dat/files\wtvh.dll -> Spyware.WildTangent : Error during cleaning
C:\Documents and Settings\Frankie\podrnodzone.exe -> Dialer.Generic : Cleaned with backup
C:\Documents and Settings\Frankie\protect.exe -> TrojanDownloader.Agent.nr : Cleaned with backup
C:\Documents and Settings\Frankie\sefe.exe -> Not-A-Virus.Hoax.Renos.a : Cleaned with backup
C:\Documents and Settings\Frankie\sex2.exe -> Dialer.Generic : Cleaned with backup
:mozilla.15:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mrcvu43i.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.16:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mrcvu43i.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.17:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mrcvu43i.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Guest\sefe.exe -> Not-A-Virus.Hoax.Renos.a : Cleaned with backup
:mozilla.10:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.12:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.13:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.25:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.26:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.29:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Paycounter : Cleaned with backup
:mozilla.30:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.33:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.34:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Revenue : Cleaned with backup
:mozilla.36:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.37:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.38:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.39:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.40:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.49:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.50:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.72:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.73:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.74:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.77:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.78:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.79:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.80:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.81:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.82:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.83:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.84:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.85:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.86:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.87:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.88:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.94:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.97:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Onestat : Cleaned with backup
:mozilla.98:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Onestat : Cleaned with backup
:mozilla.100:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Ad-logics : Cleaned with backup
:mozilla.109:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.110:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.111:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.112:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.113:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.114:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.116:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.122:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.123:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.124:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.127:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.128:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.132:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Adengage : Cleaned with backup
:mozilla.133:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Adengage : Cleaned with backup
:mozilla.134:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Adengage : Cleaned with backup
:mozilla.138:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Cqcounter : Cleaned with backup
:mozilla.140:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.141:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.142:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.143:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.144:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.145:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.146:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.156:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.157:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.161:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.168:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.170:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.171:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.173:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.174:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.176:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.177:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.183:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.184:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.195:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.196:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.200:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.201:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.205:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.209:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.210:C:\Documents and Settings\Marc\Application Data\Mozilla\Profiles\default\e0gn3av6.slt\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.6:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.7:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.8:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.9:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.10:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.12:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.13:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.16:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.17:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.18:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.19:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.20:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.21:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.22:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.23:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.24:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.25:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.26:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.27:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.28:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.29:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.30:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.31:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.32:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.33:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.34:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.35:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.36:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.37:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.38:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.39:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.40:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.41:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.42:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.43:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.45:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.46:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.47:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.48:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.49:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.50:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.51:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.52:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.53:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.54:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.55:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.56:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.57:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.58:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.59:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.63:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.64:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.65:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.66:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.67:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.68:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.69:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.70:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.71:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.86:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.87:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.88:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.89:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.90:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.107:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.108:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Myaffiliateprogram : Cleaned with backup
:mozilla.109:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.110:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.111:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.112:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.113:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.114:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.115:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.116:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.117:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.118:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.119:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.136:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Bluestreak : Cleaned with backup
:mozilla.144:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.145:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.146:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.147:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.155:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.156:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.160:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.161:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.162:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.163:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.164:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.165:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.166:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.167:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.168:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.169:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.170:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.171:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.172:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.173:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.174:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.175:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.176:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.177:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.178:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.179:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.180:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.181:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.182:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.183:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.184:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.185:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.186:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.187:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.188:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.189:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.190:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.191:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.192:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.193:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.194:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.195:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.196:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.197:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.198:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.199:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.200:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.201:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.202:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.203:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.204:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.205:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.206:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.207:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.208:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.209:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.210:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.211:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.212:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.213:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.214:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.215:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.223:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.224:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.225:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.226:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.227:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.244:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.245:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.246:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.247:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.251:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.252:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.259:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.260:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.261:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.262:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.263:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.264:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.265:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.266:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.267:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.268:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.269:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.283:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.284:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.285:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.286:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.287:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.289:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.290:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.291:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.292:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.304:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.321:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Adtech : Cleaned with backup
:mozilla.322:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Adtech : Cleaned with backup
:mozilla.331:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Revenue : Cleaned with backup
:mozilla.333:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Adjuggler : Cleaned with backup
:mozilla.348:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Paycounter : Cleaned with backup
:mozilla.349:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Masterstats : Cleaned with backup
:mozilla.351:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.352:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.362:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.367:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.409:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.410:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.438:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.439:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.446:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.447:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.450:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Findwhat : Cleaned with backup
:mozilla.463:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.473:C:\Documents and Settings\Marc\Application Data\Netscape\NSB\Profiles\2t5k9xox.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mo

[Frank101]

i guess all that was too long of a post , heres the hijack this file report thing

Logfile of HijackThis v1.99.1
Scan saved at 2:28:17 PM, on 8/5/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\Smtray.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Documents and Settings\Frankie\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = verizon.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = verizon.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Compaq
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\DOCUME~1\Frankie\MYDOCU~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Lexmark X83 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
O4 - HKLM\..\Run: [Lexmark X83 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [Smapp] Smtray.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\PROGRA~1\AWS\WEATHE~1\Weather.exe (file missing) (HKCU)
O9 - Extra button: Support - {D9812054-38F7-4440-954D-293478D9A3C0} - C:\Program Files\Internet Explorer\SIGNUP\Presario.htm (HKCU)
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcaf...84/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcaf...,21/mcgdmgr.cab
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: System Startup Service (SvcProc) - Unknown owner - c:\windows\SvcProc.exe (file missing)

[greyknight17]

Yeah, that got rid of some real bad ones and a whole bunch of cookies

OK, I will ask you to try everything here to see if we can get rid of that single entry in HijackThis:

Go to Start->Run and type in regedit and hit OK. Go to File->Export and save the registry somewhere as a backup. Close the Registry Editor now. Go to Start->Run and type in notepad and hit OK. Then copy and paste the following into Notepad:

sc stop SvcProc
sc delete SvcProc
del delete.bat

Save the file as "delete.bat". Make sure to save it with the quotes. Double click on it.

Go to Start->Run and type in services.msc and hit OK. Then look for SvcProc and double click on it. Click on the Stop button and under Startup type, choose Disabled.

Go into HijackThis->Config->Misc Tools->Delete an NT service and type in SvcProc and hit OK.

Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any):

O23 - Service: System Startup Service (SvcProc) - Unknown owner - c:\windows\SvcProc.exe (file missing)

Restart and post a new HijackThis log.

[Frank101]

i was unable to find

"Go to Start->Run and type in services.msc and hit OK. Then look for SvcProc and double click on it. Click on the Stop button and under Startup type, choose Disabled."
that in your directions i couldnt find it.

here is the most recent HJT log which still includes that process

Logfile of HijackThis v1.99.1
Scan saved at 10:29:42 PM, on 8/5/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\svchost.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\Smtray.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Documents and Settings\Frankie\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = verizon.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = verizon.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Compaq
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\DOCUME~1\Frankie\MYDOCU~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Lexmark X83 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
O4 - HKLM\..\Run: [Lexmark X83 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [Smapp] Smtray.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\PROGRA~1\AWS\WEATHE~1\Weather.exe (file missing) (HKCU)
O9 - Extra button: Support - {D9812054-38F7-4440-954D-293478D9A3C0} - C:\Program Files\Internet Explorer\SIGNUP\Presario.htm (HKCU)
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcaf...84/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcaf...,21/mcgdmgr.cab
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: System Startup Service (SvcProc) - Unknown owner - c:\windows\SvcProc.exe (file missing)

[greyknight17]

I want you to try those steps again, but try them in Safe Mode this time to see if you can remove that SvcProc service.

Does services.msc work though? But you can't find System Startup Service (SvcProc)?

How is everything running so far?

[Frank101]

wow sorry for such a long update gap. any way i tried all the steps again and still cant find SvcProc in the services.msc menu. i am really frustarted. Would SvcProc be under a different name i searched every single thing in the services.msc and came up empty. I tryied to go ahead and disable SvcProc through hijackthis but it said it was still running even though i had hit fix it and all. is there anything else that i can do to get rid of it?

[greyknight17]

Give me a new HijackThis log. I'll take another look. Is Winfixer still found? Delete the icon from your desktop if it's there - restart and see if that icon comes back.

[Frank101]

yep winfixer is gone im just having trouble the SvcProc thing.
everything from winfixer is gone and no more popups.(thanks a lot on that one

Logfile of HijackThis v1.99.1
Scan saved at 12:06:45 PM, on 8/20/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\svchost.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\Smtray.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\PROGRA~1\AIM\aim.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Documents and Settings\Frankie\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = verizon.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = verizon.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Compaq
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\DOCUME~1\Frankie\MYDOCU~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Lexmark X83 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
O4 - HKLM\..\Run: [Lexmark X83 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [Smapp] Smtray.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\PROGRA~1\AWS\WEATHE~1\Weather.exe (file missing) (HKCU)
O9 - Extra button: Support - {D9812054-38F7-4440-954D-293478D9A3C0} - C:\Program Files\Internet Explorer\SIGNUP\Presario.htm (HKCU)
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcaf...84/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcaf...,21/mcgdmgr.cab
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: System Startup Service (SvcProc) - Unknown owner - c:\windows\SvcProc.exe (file missing)

[greyknight17]

We'll do this again.

Try all these (if any fail, just move on to the next one):

Go to Start->Run and type in notepad and hit OK. Then copy and paste the following into Notepad:

sc stop SvcProc
sc delete SvcProc
del delete.bat

Save the file as "delete.bat". Make sure to save it with the quotes. Double click on it.

Go into HijackThis->Config->Misc Tools->Delete an NT service and type in SvcProc and hit OK.

Go to Start->Run and type in services.msc and hit OK. Then look for System Startup Service (SvcProc) and double click on it. Click on the Stop button and under Startup type, choose Disabled.

Check and fix this in HijackThis.

O23 - Service: System Startup Service (SvcProc) - Unknown owner - c:\windows\SvcProc.exe (file missing)

Restart and see if that SvcProc entry still returned in HijackThis. If not:

Your log is clean.

To help prevent future spyware installations/infections, please read the Anti-Spyware Tutorial and use the tools provided.

Are there any problems now? If not, you should be set to go.

[Frank101]

thanks alot after you said SvcProc was System startup i got it iw asnt sure an then i got it.

also, im wondering if any of these illegal ads, programs and stuff and the companies/people who start them are discovered and prosecuted. i dont remember ever having spyware crap problems but i also had aol 5-6 years ago.

thanks again

[greyknight17]

There are laws being passed now in some states and companies have been fined for this. It's a on-going problem. The newest version of Windows (not out to public yet) said it improves the security and shouldn't have as much virus or spyware problems. I say it's never 100% secure so just be careful what you install or sites you visit. Install the prevention programs and they should help out.

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.