Ok I followed all the steps till the end.
Here is the ewido report:
---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------
+ Created on: 7:37:26 PM, 8/19/2005
+ Report-Checksum: F003B877
+ Scan result:
HKLM\SOFTWARE\Classes\CLSID\{2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} -> Spyware.MiniBug : Cleaned with backup
HKU\S-1-5-21-436374069-1801674531-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A78860C8-EE1A-46DF-A97F-E3E6D433E80B} -> Spyware.AdTomi : Cleaned with backup
HKU\S-1-5-21-436374069-1801674531-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344} -> Spyware.BargainBuddy : Cleaned with backup
HKU\S-1-5-21-436374069-1801674531-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F4E04583-354E-4076-BE7D-ED6A80FD66DA} -> Spyware.BargainBuddy : Cleaned with backup
:mozilla.18:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.19:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.33:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.34:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.35:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.36:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.37:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.38:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.39:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.43:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Addynamix : Cleaned with backup
:mozilla.45:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Addynamix : Cleaned with backup
:mozilla.46:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.47:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Addynamix : Cleaned with backup
:mozilla.48:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.49:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.50:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.51:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.52:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.53:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.54:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.57:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.58:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.59:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.60:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.61:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.62:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.63:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.64:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.65:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.66:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.67:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.68:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.69:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.70:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.71:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.72:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.73:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.74:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.75:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.85:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.91:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.101:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.102:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.103:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.104:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.105:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.119:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.121:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.122:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.124:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.137:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.138:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.139:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.140:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.141:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.152:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.172:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Bluestreak : Cleaned with backup
:mozilla.182:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.183:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.207:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.208:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.211:C:\Documents and Settings\Charles-Olivier\Application Data\Mozilla\Firefox\Profiles\gqjkegyw.default\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@2o7[2].txt -> Spyware.Cookie.2o7 : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@abetterinternet[1].txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][1].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][1].txt -> Spyware.Cookie.Specificclick : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][1].txt -> Spyware.Cookie.Addynamix : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@advertising[2].txt -> Spyware.Cookie.Advertising : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Falkag : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@atdmt[2].txt -> Spyware.Cookie.Atdmt : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Goldenpalace : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@bluestreak[2].txt -> Spyware.Cookie.Bluestreak : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][1].txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@burstnet[2].txt -> Spyware.Cookie.Burstnet : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@casalemedia[1].txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][1].txt -> Spyware.Cookie.Ru4 : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@fastclick[1].txt -> Spyware.Cookie.Fastclick : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@goldenpalace[2].txt -> Spyware.Cookie.Goldenpalace : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@hypertracker[1].txt -> Spyware.Cookie.Hypertracker : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@linksynergy[2].txt -> Spyware.Cookie.Linksynergy : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@mediaplex[1].txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][1].txt -> Spyware.Cookie.Overture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@revenue[2].txt -> Spyware.Cookie.Revenue : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][1].txt -> Spyware.Cookie.Adjuggler : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Liveperson : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][1].txt -> Spyware.Cookie.Advertising : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@serving-sys[2].txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@targetnet[2].txt -> Spyware.Cookie.Targetnet : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@tradedoubler[1].txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@trafficmp[2].txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@tribalfusion[1].txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][1].txt -> Spyware.Cookie.Burstnet : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][1].txt -> Spyware.Cookie.Goldenpalace : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\charles-olivier@yieldmanager[1].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Cookies\
[email protected][1].txt -> Spyware.Cookie.Adserver : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Local Settings\Temp\atiupdate.exe -> TrojanDownloader.Delf.go : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Local Settings\Temp\c90.sys -> Trojan.Kolweb.b : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Local Settings\Temporary Internet Files\Content.IE5\AR8ZO3WB\DrPMon[1].dll -> Adware.BetterInternet : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Local Settings\Temporary Internet Files\Content.IE5\EZQP8V49\Nail[1].exe -> Adware.BetterInternet : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Local Settings\Temporary Internet Files\Content.IE5\W0UOG8OF\svcproc[1].exe -> Spyware.Hijacker.Generic : Cleaned with backup
C:\Documents and Settings\Charles-Olivier\Local Settings\Temporary Internet Files\Content.IE5\YL1YRI9W\abiuninst[1].exe -> Adware.BetterInternet : Cleaned with backup
C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll -> Spyware.Wheaterbug : Cleaned with backup
C:\Program Files\Common Files\qffo\qffoa.exe -> TrojanDownloader.TSUpdate.l : Cleaned with backup
C:\Program Files\Common Files\qffo\qffol.exe -> TrojanDownloader.TSUpdate.j : Cleaned with backup
C:\Program Files\Common Files\qffo\qffop.exe -> Spyware.Xupiter : Cleaned with backup
C:\RECYCLER\S-1-5-21-436374069-1801674531-725345543-1004\Dc6.exe -> Adware.BetterInternet : Cleaned with backup
C:\WINDOWS\c90.sys -> Trojan.Kolweb.b : Cleaned with backup
C:\WINDOWS\dinst.exe -> TrojanDownloader.Intexp.d : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\EPXActiveX.ocx -> TrojanDropper.Agent.or : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.2\EPXActiveX.ocx -> TrojanDropper.Agent.or : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.3\EPXActiveX.ocx -> TrojanDownloader.Lastad.r : Cleaned with backup
C:\WINDOWS\dsr.dll -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\dsr.exe -> Trojan.Imiserv.c : Cleaned with backup
C:\WINDOWS\emxtfym.exe -> Adware.BetterInternet : Cleaned with backup
C:\WINDOWS\sacajosknwm.exe -> Adware.BetterInternet : Cleaned with backup
C:\WINDOWS\system32\7p28bt8.dl$ -> Trojan.Kolweb.b : Cleaned with backup
C:\WINDOWS\system32\7p28bt8.dll -> Trojan.Kolweb.b : Cleaned with backup
C:\WINDOWS\system32\8w0p4v.exe -> Trojan.Delf.cf : Cleaned with backup
C:\WINDOWS\system32\bbqdgme.exe -> TrojanDownloader.Lastad.h : Cleaned with backup
C:\WINDOWS\system32\c90.sys -> Trojan.Kolweb.b : Cleaned with backup
C:\WINDOWS\system32\epx30104.exe -> TrojanDownloader.Lastad.h : Cleaned with backup
C:\WINDOWS\system32\epx30105.exe -> TrojanDownloader.Lastad.p : Cleaned with backup
C:\WINDOWS\system32\epx30106.exe -> TrojanDownloader.Lastad.r : Cleaned with backup
C:\WINDOWS\system32\famnj.exe -> TrojanDownloader.Lastad.p : Cleaned with backup
C:\WINDOWS\system32\ipbg.exe -> TrojanDownloader.Lastad.h : Cleaned with backup
C:\WINDOWS\system32\lpgfg.exe -> TrojanDownloader.Lastad.h : Cleaned with backup
C:\WINDOWS\system32\ppk9ey1.exe -> Trojan.Delf.cf : Cleaned with backup
C:\WINDOWS\system32\prgaoqk.exe -> TrojanDownloader.Lastad.h : Cleaned with backup
C:\WINDOWS\system32\prq.exe -> TrojanDownloader.Lastad.r : Cleaned with backup
C:\WINDOWS\system32\prqaeg06.dll -> TrojanDownloader.Lastad.r : Cleaned with backup
C:\WINDOWS\system32\rk8fzib.exe -> Trojan.Kolweb.b : Cleaned with backup
C:\WINDOWS\system32\uka.exe -> TrojanDownloader.Lastad.h : Cleaned with backup
C:\WINDOWS\system32\WinStat11.dll -> Spyware.Winsta : Cleaned with backup
C:\WINDOWS\system32\WinStat12.dll -> Spyware.Winsta : Cleaned with backup
C:\WINDOWS\system32\yqofvap.exe -> TrojanDownloader.Lastad.h : Cleaned with backup
::Report End
And here is the new HighjackThis report:
Logfile of HijackThis v1.99.1
Scan saved at 11:41:53 PM, on 8/19/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Messenger\msmsgs.exe
C:\HijackThis.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBarBHO.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.1601.0\en-us\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
O4 - HKLM\..\Run: [CTDVDDet] C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [AsioReg] REGSVR32.EXE /S CTASIO.DLL
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [CleanUp] C:\PROGRA~1\McAfee.com\Shared\mcappins.exe /v=3 /cleanup
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [sliaobx] c:\windows\system32\vnkdam.exe r
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [SB Audigy 2 Startup Menu] /L:ENG
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) -
http://www.fileplane...DC_1_0_0_44.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://v5.windowsupd...b?1117375226578O16 - DPF: {89DA3D18-87B8-457F-A767-2A193E99739B} (NiXPlay Control) -
http://www.nexpoly.c...ols/nixplay.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) -
http://messenger.zon...nt.cab31267.cabO23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
The fixes seem great already!!! I have yet to get a single pop up
.
Thank you,
Poupouf
***edit***:
I was unable to find these following files when deleting:
O4 - HKLM\..\Run: [prq] C:\WINDOWS\system32\prq.exe
O4 - HKLM\..\Run: [Dinst] C:\WINDOWS\dinst.exe
O4 - HKLM\..\Run: [mrgufs] c:\windows\system32\woptsl.exe r
O4 - HKLM\..\RunOnce: [rk8fzib.exe] C:\WINDOWS\system32\rk8fzib.exe /k
O4 - HKCU\..\RunOnce: [rk8fzib.exe] C:\WINDOWS\system32\rk8fzib.exe /k
and
C:\WINDOWS\Nail.exe
C:\WINDOWS\dsr.dll
C:\WINDOWS\dinst.exe
C:\WINDOWS\AuroraHandler.dll
C:\WINDOWS\system32\prq.exe
C:\WINDOWS\system32\woptsl.exe
C:\WINDOWS\system32\rk8fzib.exe
C:\WINDOWS\system32\rk8fzib.exe
Edited by Poupouf, 19 August 2005 - 09:48 PM.