took a while but i did most of ur instructions. i kept trying to run Nailfix Utitlity but it kept saying there was a problem with the setup, even after i dl'd it three times. also, my compy would not let me delete kernel32.exe and nail.exe. finally, when i ran l2mfix Find Log, i would get a message that said:
16 bit msd dos subsystem
c:\windows\system32\cmd.exe
c:\windows\system32\autoexec.nt the system is not suitable for runing msdos and windwos apps (i tried the ignore option but it just opened msworks with a blank page)
heres my hijack this and eidow logs
Logfile of HijackThis v1.99.1
Scan saved at 12:34:48 AM, on 8/8/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\Documents and Settings\Raymond Kho\Desktop\VundoFix\HijackThis.exe
c:\windows\system32\hjaaae.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://yahoo.sbc.com/dslR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://yahoo.sbc.com/dslR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://yahoo.sbc.com/dslR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Compaq
R3 - URLSearchHook: URLSearchHook Class - {37D2CDBF-2AF4-44AA-8113-BD0D2DA3C2B8} - C:\Program Files\NZSearch\SearchEnh1.dll
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\Yahoo!\Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\Yahoo!\Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [YOP] C:\PROGRA~1\Yahoo!\YOP\yop.exe /autostart
O4 - HKLM\..\Run: [ffghcy] c:\windows\system32\hjaaae.exe r
O4 - HKLM\..\RunOnce: [Compaq_RBA] C:\Program Files\compaq\Compaq Advisor\bin\compaq-rba.exe -z
O4 - HKCU\..\Run: [spc_w] "C:\Program Files\NZSearch\nzspc.exe" -w
O4 - HKCU\..\Run: [Microsoft Works Update Detection] c:\Program Files\Microsoft Works\WkDetect.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra 'Tools' menuitem: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyviewer.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://store.presario.net/scripts/redirectors/presario/storeredir2.dll?s=consumerfav&c=2c02&lc=0409
O16 - DPF: {4EC8E993-32C1-47F5-A07A-5B0574655AD4} (WXcom Class) -
http://us.dl1.yimg.c...ntr_current.cabO16 - DPF: {D18F962A-3722-4B59-B08D-28BB9EB2281E} (PhotosCtrl Class) -
http://photos.yahoo....plorer1_9us.cabO23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\ISafe.exe
O23 - Service: Compaq Advisor (Compaq_RBA) - NeoPlanet - C:\Program Files\compaq\Compaq Advisor\bin\compaq-rba.exe
O23 - Service: CWShredder Service - InterMute, Inc. - C:\Documents and Settings\Raymond Kho\Desktop\CWShredder.exe
O23 - Service: Content Monitoring Tool (msCMTSrvc) - Unknown owner - C:\WINDOWS\system32\msCMTSrvc.exe (file missing)
O23 - Service: Pml Driver HPH11 - HP - C:\WINDOWS\System32\HPHipm11.exe
O23 - Service: Power Manager (PowerManager) - Unknown owner - C:\WINDOWS\svchost.exe (file missing)
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\VetMsg.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
ewido security suite - Scan report
---------------------------------------------------------
+ Created on: 12:24:04 AM, 8/8/2005
+ Report-Checksum: E8DDF7
+ Scan result:
C:\Documents and Settings\Raymond Kho\Desktop\Games\Unused Desktop\MADDEN.NFL.2004.V1.0.ENG.DRUNK.NOCD\patch.exe -> Worm.Hidrag : Ignored
C:\Guitar Pro 4 full +serial\Guitar Pro 4 Full +serial\Guitar Pro 4 full +serial.exe -> Worm.Hidrag : Ignored
C:\Program Files\EA GAMES\MOHAA\MOHAA_server.exe -> Worm.Hidrag : Ignored
C:\Program Files\EA SPORTS\Madden NFL 2004\easo_uninst.exe -> Worm.Hidrag : Ignored
C:\Program Files\EA SPORTS\Madden NFL 2004\eauninstall.exe -> Worm.Hidrag : Ignored
C:\Program Files\EA SPORTS\Madden NFL 2004\Support\Madden NFL 2004_code.exe -> Worm.Hidrag : Ignored
HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors\ZepMon -> Spyware.BetterInternet : Cleaned with backup
[680] VM_00C40000 -> Adware.BetterInternet : Error during cleaning
[800] c:\windows\system32\vlzyag.exe -> Adware.BetterInternet : Cleaned with backup
C:\404SearchSetup_MS54.exe -> Spyware.404Search : Cleaned with backup
C:\Compaq\CpqOfferZone\msCMT\msCMTctrl.exe -> Worm.Hidrag : Cleaned with backup
C:\Demo9\Common\50comupd.exe -> Worm.Hidrag : Cleaned with backup
C:\Demo9\Common\Editors\Cedit\CIMCOEdit.exe -> Worm.Hidrag : Cleaned with backup
C:\Demo9\Common\Editors\Pfe\PFE32.EXE -> Worm.Hidrag : Cleaned with backup
C:\Demo9\Common\hinstall.exe -> Worm.Hidrag : Cleaned with backup
:mozilla.13:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\kw8l0m90.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.14:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\kw8l0m90.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.24:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.28:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.29:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.30:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.31:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.32:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.33:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.36:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.37:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.39:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.41:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.42:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.43:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.45:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.46:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.47:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.48:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.49:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.50:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.51:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.55:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.64:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.65:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.66:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.67:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.68:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.69:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.70:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.71:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.72:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.73:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.77:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
:mozilla.80:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.81:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.82:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.83:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.89:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Spylog : Cleaned with backup
:mozilla.94:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.95:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.96:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.97:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.101:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.104:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.105:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.109:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.112:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.113:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.114:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.115:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.116:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.117:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.119:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.120:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.121:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.122:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.125:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.126:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.127:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.157:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.158:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.177:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.195:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.198:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.204:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.205:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.206:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.211:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.224:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.225:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.226:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.228:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.229:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.237:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.238:C:\Documents and Settings\Raymond Kho\Application Data\Mozilla\Firefox\Profiles\wrpsoo8z.Default User\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Cookies\raymond kho@abetterinternet[1].txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\ff\GBA Real Final Fantasy Tactics Advance (USA).exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\n64\Mario Tennis N64.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\n64\N64 - Emulator Project64 v1.5b1.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\n64\n64 rom - pokemon stadium (u) [!].exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\n64\Non GE (J) [!].exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\n64\Star Wars - Shadows of the Empire (U) (V1.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder\Risk2FullFixedCWP.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder\The Oregon Trail.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\Beyblade_vforce_-_ultimate_blader_[gba].exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\Castlevania - aria of sorrow (gba rom).exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\Fire_Emblem_USA_GBA_ROM.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\Gba - pokemon leaf green (e).exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\GBA - The Lord of The Rings - The Fellowship Of The Ring.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\GBA Real Dragon Ball Z Taiketsu .exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\Gba_rom_gauntlet - dark legacy (eng).exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\GBA_Shining Soul (E)_Real.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\Golden_sun_ENG.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\Gradius Galaxies GBA.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\inuyasha_gba (1).exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\King of fighters gba.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\Kirby - nightmare in dreamland gba.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\Legacy of Goku.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\Medabots_medabee_version_gba.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\Megaman Zero 2 (U).exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\MegaMan Zero GBA.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\Monster Rancher Advance 2.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\Onimusha_Tactics_USA_GBA_ROM.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\Star Wars Attack Of The Clones GBA.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\Street Fighter Alpha 3.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\The Simpsons Road Rage gba.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\Yu-gi-oh! - worldwide edition (e) (m6) [hi] - gba.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\New Folder (2)\Yu-Gi-Oh! The Eternal Duelist Soul.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\pok\Pokemon_Advance_Sapphire_GBA (1).exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\pok\Pokemon_crystal.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\pok\vgbc\vgbc.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\pok\VisualBoyAdvance-1.5.1\VisualBoyAdvance.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\sega\135 Sega Genisis SMS Roms + Emulator.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\sega\Sega\dega.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\SNES ROMS\20 SNES RPGS.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\Unused Desktop\Crack\SplinterCell.eXe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\Unused Desktop\nhl2k\nhl2k-2\nhl2k\Ea sports - Ea games - nhl 2003 (real thing).exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\Desktop\Games\Unused Desktop\nhl2k\nhl2k-2\nhl2k\install.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\My Documents\My Pictures\stuff\holly_valance_saver.exe -> Worm.Hidrag : Cleaned with backup
C:\Documents and Settings\Raymond Kho\svchost.exe -> TrojanDownloader.IstBar.er : Cleaned with backup
C:\hp\bin\automod32.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\bin\FullScreen.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\bin\ProcessLogger.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\bin\Progress.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\bin\Python-2.2.1.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\bin\TransientMessage.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\bin\win32all-146.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\audio\Creative\Audio\Common\NMJBDrv\Deutsch\DRV_JB.EXE -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\audio\Creative\Audio\Common\NMJBDrv\Deutsch\DRV_NM2.EXE -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\audio\Creative\Audio\Common\NMJBDrv\English\DRV_JB.EXE -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\audio\Creative\Audio\Common\NMJBDrv\English\DRV_NM2.EXE -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\audio\Creative\Audio\Common\NMJBDrv\Espanol\DRV_JB.EXE -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\audio\Creative\Audio\Common\NMJBDrv\Espanol\DRV_NM2.EXE -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\audio\Creative\Audio\Common\NMJBDrv\Francais\DRV_JB.EXE -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\audio\Creative\Audio\Common\NMJBDrv\Francais\DRV_NM2.EXE -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\audio\Creative\Audio\Common\NMJBDrv\Italiano\DRV_JB.EXE -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\audio\Creative\Audio\Common\NMJBDrv\Italiano\DRV_NM2.EXE -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\audio\Creative\Audio\Common\NMJBDrv\Nederlnd\DRV_JB.EXE -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\audio\Creative\Audio\Common\NMJBDrv\Nederlnd\DRV_NM2.EXE -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\audio\Creative\Audio\Common\NMJBDrv\TChinese\DRV_JB.EXE -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\audio\Creative\Audio\Common\NMJBDrv\TChinese\DRV_NM2.EXE -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\modem\Stinger\Setup.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\printers\deskjet\3320\enu\nt4\disk1\nt4\hpfsplsh.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\printers\deskjet\3420\enu\nt4\disk1\nt4\hpfsplsh.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\printers\deskjet\3820\enu\nt4\disk1\nt4\hpfsplsh.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\printers\deskjet\5550\enu\nt4\disk1\nt4\hpfsplsh.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\printers\deskjet\920c\enu\nt4\disk1\nt4\hpfsplsh.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\printers\deskjet\930c\enu\nt4\disk1\nt4\hpfsplsh.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\printers\deskjet\940c\enu\nt4\disk1\nt4\hpfsplsh.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\printers\deskjet\960c\enu\nt4\disk1\nt4\hpfsplsh.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\printers\deskjet\990c\enu\nt4\disk1\nt4\hpfsplsh.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\printers\deskjet\util\3320\hpfpdi05.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\printers\deskjet\util\3420\hpfpdi05.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\printers\deskjet\util\common\hpfpdi05.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\video\845\hkcmd.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\video\845\igfxcfg.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\video\i810\IGFXCFG.EXE -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\video\nvidia\DMCPL.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\drivers\video\nvidia\nwiz.exe -> Worm.Hidrag : Cleaned with backup
C:\hp\patches\24US1DVD\WINDVD\WINDVD.EXE -> Worm.Hidrag : Cleaned with backup
C:\i386\NETSETUP.EXE -> Worm.Hidrag : Cleaned with backup
C:\i386\REGEDIT.EXE -> Worm.Hidrag : Cleaned with backup
C:\i386\SYSPARSE.EXE -> Worm.Hidrag : Cleaned with backup
C:\Overpro323.exe -> TrojanDownloader.Agent.ac : Cleaned with backup
C:\Program Files\AIM95\Sysfiles\viewpoint.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\AIM95\Sysfiles\WxBug.EXE -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Common Files\csshare\cltdiag.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Common Files\csshare\csunins.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Common Files\csshare\csunins_us.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Common Files\Intuit\Internet Client\assist.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Common Files\Microsoft Shared\Equation\eqnedt32.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Common Files\Microsoft Shared\MSDraw\msdraw.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Common Files\mozilla.org\GRE\1.7.3_2004091008\Setup GRE\SETUP.EXE -> Worm.Hidrag : Cleaned with backup
C:\Program Files\compaq\Compaq Advisor\bin\nda.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\compaq\Easy Access Button Support\Cpqmus.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\CpqFeatures\Bin\CpqBrowserTool.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\CpqFeatures\Bin\CpqParser.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\DLA\install\tfswcmd.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\EA GAMES\Command and Conquer Generals\generals.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\EA GAMES\Command and Conquer Generals\support\Command and Conquer Generals_EZ.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\EA GAMES\Command and Conquer Generals\WorldBuilder.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\EA SPORTS\Madden NFL 2004\Updater.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\FinePixViewer\DPEditor.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\FinePixViewer\EXTENSIONS\HELPERS\FxMovieEffectHelper.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\FinePixViewer\EXTENSIONS\HELPERS\IMXLauncher.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\FinePixViewer\fpv4print.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\FinePixViewer\INSTALLGUIDE\InstallGuide42.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\FinePixViewer\OrderSoft\FFnetDSC2.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\FinePixViewer\Upload.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Guitar Pro 4\GPOnline.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Hewlett-Packard\Digital Imaging\HPISInst\Install.wse.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Hewlett-Packard\HP Instant Support DI\Uninstall.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Hewlett-Packard\HP Share-to-Web\S2WEx.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Hewlett-Packard\HP Share-to-Web\Shar2Web.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\HP Photosmart 11\hphinstall\UniPatch\hphuni03.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\HP Photosmart 11\hphinstall\Util\Hid\hphpdi04.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\HP Photosmart 11\Printer\hpfiui.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\ipee\othb.exe -> Spyware.MediaTickets : Cleaned with backup
C:\Program Files\MediaLoads\v1\ML.exe -> Spyware.DownloadWare : Cleaned with backup
C:\Program Files\Microsoft Money\Media\AvHelp\02mt.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Microsoft Money\Media\AvHelp\04ec.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Microsoft Money\Media\AvHelp\09li.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Microsoft Money\Media\AvHelp\10cb.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Microsoft Money\Media\AvHelp\11ri.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Microsoft Money\Media\AvHelp\12ba.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Microsoft Money\Media\AvHelp\13it.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Microsoft Money\Media\AvHelp\14rd.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Microsoft Money\Media\AvHelp\15ct.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Microsoft Money\Media\AvHelp\18bf.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Microsoft Money\Media\AvHelp\19ol.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Microsoft Money\System\Activation.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Microsoft Works\wkssb.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Netscape\Netscape 6\Plugins\npwthost.dll -> Spyware.WildTangent : Cleaned with backup
C:\Program Files\NetZero\nzmigrate.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\NetZero\qs\staging\netzero.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\NetZero\staging\su7nh3.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\NetZero\staging\su7nh4.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\newdotnet\newdotnet3_88.dll -> Spyware.NewDotNet : Cleaned with backup
C:\Program Files\newdotnet\uninstall3_88-1.exe -> Spyware.NewDotNet : Cleaned with backup
C:\Program Files\newdotnet\uninstall3_88.exe -> Spyware.NewDotNet : Cleaned with backup
C:\Program Files\NHL_2002\3DSetup\3DSetup.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\PIXELA\ImageMixer\IMxMovieEditor.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\PIXELA\ImageMixer\profile.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\QUICKENW\host.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\QUICKENW\inet\common\localweb\showme\quicktour.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\QUICKENW\PrintEnv.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\QuickTime\QTInfo.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Symantec\LiveUpdate\Lusetup.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\TurboTax\Deluxe 2002\id.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\TurboTax\Deluxe 2002\Updates\update.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\TurboTax\Deluxe 2003\id.exe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Ubi Soft\Splinter Cell\SplinterCell.eXe -> Worm.Hidrag : Cleaned with backup
C:\Program Files\Yahoo!\YPSR\Quarantine\ppqBF.tmp -> TrojanDropper.Delf.ev : Cleaned with backup
C:\SIERRA\TIMWINCD\TIMWIN\TIMWIN.EXE -> Worm.Hidrag : Cleaned with backup
C:\Unreal2\Dialog\DialogEditor.exe -> Worm.Hidrag : Cleaned with backup
C:\Unreal2\System\UnrealEd.exe -> Worm.Hidrag : Cleaned with backup
C:\WINDOWS\aigxgg.exe -> Adware.BetterInternet : Cleaned with backup
C:\WINDOWS\etb\nt_hide62.dll -> Spyware.EliteBar : Cleaned with backup
C:\WINDOWS\etb\pokapoka62.exe -> Spyware.EliteBar : Cleaned with backup
C:\WINDOWS\etb\xud_62.dll -> Spyware.EliteBar : Cleaned with backup
C:\WINDOWS\Nail.exe -> Adware.BetterInternet : Cleaned with backup
C:\WINDOWS\system32\DrPMon.dll -> Adware.BetterInternet : Cleaned with backup
C:\WINDOWS\system32\vlzyag.exe -> Adware.BetterInternet : Cleaned with backup
::Report End
(by the way, thanks for the help)