Thanks for the fast response. Ewido told me that I had all the updates, but I did the manual download to be sure.
Here's the Ewido report:
---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------
+ Created on: 5:15:18 PM, 8/22/2005
+ Report-Checksum: 6A17440C
+ Scan result:
HKLM\SOFTWARE\tsvcin -> Spyware.Look2Me : Cleaned with backup
HKU\S-1-5-21-1025633490-1142403879-728175113-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000010-6F7D-442C-93E3-4A4827C2E4C8} -> Spyware.InternetOptimizer : Cleaned with backup
HKU\S-1-5-21-1025633490-1142403879-728175113-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10E42047-DEB9-4535-A118-B3F6EC39B807} -> Spyware.SideFind : Cleaned with backup
HKU\S-1-5-21-1025633490-1142403879-728175113-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} -> Spyware.WinFavorites : Cleaned with backup
HKU\S-1-5-21-1025633490-1142403879-728175113-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{28CAEFF3-0F18-4036-B504-51D73BD81ABC} -> Spyware.SearchMiracle : Cleaned with backup
HKU\S-1-5-21-1025633490-1142403879-728175113-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3643ABC2-21BF-46B9-B230-F247DB0C6FD6} -> Spyware.E2Give : Cleaned with backup
HKU\S-1-5-21-1025633490-1142403879-728175113-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959} -> Spyware.ISTBar : Cleaned with backup
HKU\S-1-5-21-1025633490-1142403879-728175113-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{825CF5BD-8862-4430-B771-0C15C5CA8DEF} -> Spyware.EliteBar : Cleaned with backup
HKU\S-1-5-21-1025633490-1142403879-728175113-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{86227D9C-0EFE-4F8A-AA55-30386A3F5686} -> Spyware.YourSiteBar : Cleaned with backup
HKU\S-1-5-21-1025633490-1142403879-728175113-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{87067F04-DE4C-4688-BC3C-4FCF39D609E7} -> Spyware.WebSearch : Cleaned with backup
HKU\S-1-5-21-1025633490-1142403879-728175113-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3FDD654-A057-4971-9844-4ED8E67DBBB8} -> Spyware.ISTBar : Cleaned with backup
HKU\S-1-5-21-1025633490-1142403879-728175113-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F4E04583-354E-4076-BE7D-ED6A80FD66DA} -> Spyware.BargainBuddy : Cleaned with backup
[204] C:\WINDOWS\system32\clm.dll -> Spyware.Look2Me : Error during cleaning
[640] C:\WINDOWS\system32\sci_ci.dll -> Spyware.Look2Me : Error during cleaning
[716] C:\WINDOWS\system32\sci_ci.dll -> Spyware.Look2Me : Error during cleaning
:mozilla.7:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\nhtbg7o0.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.8:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\nhtbg7o0.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.9:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\nhtbg7o0.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.10:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\nhtbg7o0.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.18:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\nhtbg7o0.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.19:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\nhtbg7o0.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.20:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\nhtbg7o0.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.21:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\nhtbg7o0.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.22:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\nhtbg7o0.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Donna\Local Settings\Temp\Cookies\
[email protected][1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Donna\Local Settings\Temp\Cookies\
[email protected][1].txt -> Spyware.Cookie.Liveperson : Cleaned with backup
C:\Documents and Settings\Donna\Local Settings\Temporary Internet Files\Content.IE5\CLE70DU7\AppWrap[1].exe -> TrojanDropper.Agent.pb : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\721779F0-86C7-42B1-8CE7-1DB469\7EDA1672-4D2D-41BB-B8A5-6F5BCC -> Spyware.180Solutions : Cleaned with backup
C:\RECYCLER\NPROTECT\00000016 -> Spyware.Hijacker.Generic : Cleaned with backup
C:\RECYCLER\NPROTECT\00000066.dll -> Spyware.Look2Me : Cleaned with backup
C:\RECYCLER\NPROTECT\00000092.dll -> Spyware.Look2Me : Cleaned with backup
:mozilla.47:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.48:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.49:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.50:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.51:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.52:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.53:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.54:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.55:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.56:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.57:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.58:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.59:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.60:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.61:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.62:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.63:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.64:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.65:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.67:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.68:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.69:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.70:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.89:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.90:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.91:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.92:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.93:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.104:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.105:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.106:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.107:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.108:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.113:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.172:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.173:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.188:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.189:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.190:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.191:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.192:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.193:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.194:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.195:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.196:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.197:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.198:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.199:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.234:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.235:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.236:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.237:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.238:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.239:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.247:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.263:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.290:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Weborama : Cleaned with backup
:mozilla.733:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.734:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.735:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.736:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.737:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.738:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.739:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.740:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.741:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.742:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.743:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.744:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.745:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.746:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.747:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.748:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.749:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.750:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.751:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.752:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.753:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.754:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.755:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.756:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.757:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.758:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.759:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.760:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.761:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.762:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.763:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.764:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.765:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.766:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.767:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.768:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.769:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.770:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.771:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.772:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.773:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.774:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.775:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.776:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.777:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.778:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.779:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.780:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.781:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.782:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.783:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.784:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.785:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.786:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.787:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.788:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.789:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.790:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.791:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.792:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.793:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.794:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.795:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.796:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.797:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.798:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.799:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.800:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.801:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.802:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.803:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.804:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.805:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.806:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.807:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.808:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.809:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.810:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.811:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.812:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.813:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.814:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.815:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.816:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.817:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.818:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.819:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.820:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.821:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.822:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.823:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.824:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.825:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.826:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.827:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.828:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.829:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.830:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.831:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.832:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.833:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.834:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.835:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.836:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.837:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.838:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.839:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.840:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.841:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.842:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.843:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.844:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.845:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.846:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.847:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.848:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.849:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.850:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.851:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.852:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.853:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.855:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.856:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.857:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.858:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.859:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.894:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.895:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.896:C:\RECYCLER\NPROTECT\00000143.OLD -> Spyware.Cookie.Liveperson : Cleaned with backup
C:\RECYCLER\NPROTECT\00000151.TXT -> Spyware.Cookie.Abetterinternet : Cleaned with backup
C:\RECYCLER\NPROTECT\00000187.TXT -> Spyware.Cookie.Clickhype : Cleaned with backup
C:\RECYCLER\NPROTECT\00000204.EXE -> TrojanDropper.Agent.pb : Cleaned with backup
C:\RECYCLER\NPROTECT\00000205.EXE -> TrojanDropper.Agent.pb : Cleaned with backup
C:\RECYCLER\NPROTECT\00000207.EXE -> TrojanDropper.Agent.pb : Cleaned with backup
C:\RECYCLER\NPROTECT\00000208.EXE -> TrojanDropper.Agent.pb : Cleaned with backup
C:\RECYCLER\NPROTECT\00000215.TXT -> Spyware.Cookie.Abetterinternet : Cleaned with backup
C:\RECYCLER\NPROTECT\00000216.TXT -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\RECYCLER\NPROTECT\00000337.EXE -> TrojanDropper.Agent.pb : Cleaned with backup
C:\RECYCLER\NPROTECT\00000513.dll -> Spyware.Look2Me : Cleaned with backup
C:\RECYCLER\NPROTECT\00000613.dll -> Spyware.Look2Me : Cleaned with backup
C:\RECYCLER\NPROTECT\00000889.dll -> Spyware.Look2Me : Cleaned with backup
C:\RECYCLER\NPROTECT\00000930.dll -> Spyware.Look2Me : Cleaned with backup
C:\RECYCLER\NPROTECT\00000931 -> Spyware.Hijacker.Generic : Cleaned with backup
C:\RECYCLER\NPROTECT\00000947.dll -> Spyware.Look2Me : Cleaned with backup
C:\RECYCLER\NPROTECT\00000977.EXE -> Trojan.Agent.gp : Cleaned with backup
C:\RECYCLER\NPROTECT\00001366.dll -> Spyware.Look2Me : Cleaned with backup
C:\RECYCLER\S-1-5-21-1025633490-1142403879-728175113-500\Dc30.exe.tcf -> Adware.BetterInternet : Cleaned with backup
C:\RECYCLER\S-1-5-21-1025633490-1142403879-728175113-500\Dc33.exe.tcf -> Adware.BetterInternet : Cleaned with backup
C:\RECYCLER\S-1-5-21-1025633490-1142403879-728175113-500\Dc43.exe.tcf -> TrojanSpy.VB.eh : Cleaned with backup
C:\RECYCLER\S-1-5-21-1025633490-1142403879-728175113-500\Dc47.exe.tcf -> Adware.BetterInternet : Cleaned with backup
C:\WINDOWS\icont.exe -> Spyware.AdURL : Cleaned with backup
C:\WINDOWS\system32\drivers\df_kmd.sys -> Trojan.Rootkit.Agent.af : Cleaned with backup
C:\WINDOWS\system32\guard.tmp -> Spyware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\lqbar12n.dll -> Spyware.Look2Me : Cleaned with backup
::Report End
This is the HJT file:
Logfile of HijackThis v1.99.1
Scan saved at 8:55:06 PM, on 8/22/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~2\NORTON~3\NPROTECT.EXE
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
C:\PROGRA~1\NORTON~2\NORTON~3\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\TiVo Shared\Beacon\TiVoBeacon.exe
C:\WINDOWS\system32\BRMFRSMG.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\Online Backup\OnlineBackup.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
C:\WINDOWS\System32\hphmon04.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\System32\HPHipm11.exe
C:\Program Files\TrojanHunter 4.2\THGuard.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\TiVo Shared\Transfer\TivoTransfer.exe
C:\HJT\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [@BackupScheduler] C:\Program Files\Online Backup\OnlineBackup.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINDOWS\System32\hphmon04.exe
O4 - HKLM\..\Run: [HPHUPD04] "C:\Program Files\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [WheelMouse] C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [TivoTransfer] "C:\Program Files\Common Files\TiVo Shared\Transfer\TivoTransfer.exe" /auto:TivoTransfer /registry /service
O4 - HKCU\..\Run: [TivoServer] "C:\Program Files\TiVo\Desktop\TiVoServer.exe" /registry /service
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage) -
http://go.microsoft....467&clcid=0x409O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) -
http://a840.g.akamai...all/xscan53.cabO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://www.pandasoft...free/asinst.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{550AE507-4C00-48B8-B3E4-483D9D71565F}: NameServer = 192.168.2.1
O20 - Winlogon Notify: DIFx - C:\WINDOWS\system32\clm.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~3\NPROTECT.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv.exe
O23 - Service: Pml Driver HPH11 - HP - C:\WINDOWS\System32\HPHipm11.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~3\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TiVo Beacon (TivoBeacon2) - TiVo Inc. - C:\Program Files\Common Files\TiVo Shared\Beacon\TiVoBeacon.exe
Thanks.