[RescueU]

I have run Ad Aware and have been able to get rid of some of the malware and "useful" tool bars (Mirar). However during the Ad Aware scan it shows me a RegVal called "Windows".
HKEY_LOCAL_MACHINE_:software\micorsoft\windows nt\currentversion\winlogon"Shell"(explorer.exe c:\windows\nail.exe)

It states that Shell May be Compromised.

Lots of VX2 keeps showing up also. A Better Internet...BLEAH

Please

Thanks

[Advertisements]

Hi RescueU and welcome to GeeksToGo!


If you are having malware issues, please got to the following site and follow all the instructions carefully.


You Must Read This Before Posting A Hijackthis Log

this will help you clean up to 70 percent of all problems by yourself. If at the end of the process you are still having difficulty--and you may not be-- then post a hijackthis log in THIS thread.

Thanks,



Excal

[Excal]

Hi RescueU and welcome to GeeksToGo!


If you are having malware issues, please got to the following site and follow all the instructions carefully.


You Must Read This Before Posting A Hijackthis Log

this will help you clean up to 70 percent of all problems by yourself. If at the end of the process you are still having difficulty--and you may not be-- then post a hijackthis log in THIS thread.

Thanks,



Excal

[RescueU]

I have done all those things..... I was able to get rid of the Mirar Toolbar. I am still getting the annoying pop ups from Aurora. They only seem to do this when I open IE. I'm not sure what else to do. This is my latest HTJ log

Thanks



Logfile of HijackThis v1.99.1
Scan saved at 2:24:41 PM, on 8/23/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\aljjkc.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Netscape\Netscape Browser\netscape.exe
C:\Program Files\Messenger\msmsgs.exe
C:\My Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
O2 - BHO: Band Class - {00F1D395-4744-40f0-A611-980F61AE2C59} - C:\WINDOWS\dsr.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [MMTray] C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [BuildBU] c:\dell\bldbubg.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [BootWarn] C:\Program Files\Norton SystemWorks\Norton AntiVirus\BootWarn.exe /a
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
O4 - HKLM\..\Run: [Dinst] C:\WINDOWS\dinst.exe
O4 - HKLM\..\Run: [bblsuzj] C:\WINDOWS\system32\aljjkc.exe r
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmat...enWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: PCPitstop-Tracks-Checker - http://www.pcpitstop...y/PCPTracks.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop...p/PCPitStop.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://pcpitstop.com...cpConnCheck.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1123713694953
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://64.186.207.89...sCamControl.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

[RescueU]

Just FYI - all this crap started after I went to ZDnet.com.

The system is a Dell Inspiron 6000 With Windows XP SP2. All the latest updates have been installed.

[Excal]

Hi RescueU,


DOWNLOAD PROGRAMS

Please download ewido security suite it is a trial version of the program.

• Install ewido security suite
• When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
• Launch ewido, there should be an icon on your desktop double-click it.
• The program will now go to the main screen

You will need to update ewido to the latest definition files.

• On the left hand side of the main screen click update
• Then click on Start Update

The update will start and a progress bar will show the updates being installed.
If you are having problems with the updater, you can use this link to manually update ewido.
ewido manual updates Do NOT run a scan yet. (if you already have, please just update)

Please download Nailfix from Here
please do NOT run it yet.

Download and install CleanUp! Here*NOTE* Cleanup deletes EVERYTHING out of temp/temporary folders and does not make backups.
We will use this program later.


THE FIX

Please read this post completely, it may make it easier for you if you copy and paste this post to a new text document or print it for reference later.

1. Click this link to be sure you can view hidden files.

2. Ensure you are NOT connected to the internet.

3. Reboot into safe mode.

Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode.

4. Once in Safe Mode, please double-click on
Nailfix.exe on your desktop. Click next, then finished. Your desktop and icons will disappear and reappear, and a window should open and close very quickly --- this is normal.

5. Now open and run Ewido:

• Click on scanner
• Click Complete System Scan and the scan will begin.
• During the scan when it ask if you want to clean the first file, put a check in the lower left corner of the box that says "Perform action on all infections" then choose clean and click OK
• When the scan is finished, look at the bottom of the screen and click the Save report button.
• Save the report to your desktop

Close Ewido

6. Close all browsers, windows and unneeded programs.

7. Open HiJack and do a scan.

8. Put a Check next to the following items:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
O2 - BHO: Band Class - {00F1D395-4744-40f0-A611-980F61AE2C59} - C:\WINDOWS\dsr.dll (file missing)
O4 - HKLM\..\Run: [Dinst] C:\WINDOWS\dinst.exe
O4 - HKLM\..\Run: [bblsuzj] C:\WINDOWS\system32\aljjkc.exe r
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe

9. click the Fix Checked box

10. Please remove just the files from the following paths using Windows Explorer (if present):

C:\WINDOWS\dinst.exe

11. Run the program CleanUp!

12. Reboot into normal mode and please run this online virus scan: ActiveScan - Save the results from the scan!

13. Please post an Active scan log , Ewido Scan log and a fresh HiJackThis log. Let me know how your computer is running.

[RescueU]

Alright..........

Here are the scan logs.

Thanks For All The Help!!!! I have noticed a BIG improvement....

Logfile of HijackThis v1.99.1
Scan saved at 5:18:26 PM, on 8/23/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Apoint\Apntex.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HJT\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [MMTray] C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [BuildBU] c:\dell\bldbubg.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [BootWarn] C:\Program Files\Norton SystemWorks\Norton AntiVirus\BootWarn.exe /a
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmat...enWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: PCPitstop-Tracks-Checker - http://www.pcpitstop...y/PCPTracks.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop...p/PCPitStop.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://pcpitstop.com...cpConnCheck.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1123713694953
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://64.186.207.89...sCamControl.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft...free/asinst.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe


Active Scan Log

Incident Status Location

Possible Virus. No disinfected C:\Program Files\TrojanHunter 4.2\Tools\Process Viewer\ProcessViewer.exe
Adware:Adware/Mirar No disinfected C:\WINDOWS\system32\WinNB57.dll.tcf
Possible Virus. No disinfected C:\WINDOWS\Temp\ASHeuristic\ProcessViewer.exe.vir
Adware:adware/sahagent No disinfected C:\WINDOWS\unstall.exe
Spyware:spyware/adclicker No disinfected C:\WINDOWS\usta33.ini
Ewido Log

---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------

+ Created on: 4:06:24 PM, 8/23/2005
+ Report-Checksum: 1C9BFB2A

+ Scan result:

HKLM\SOFTWARE\Classes\CLSID\{9A9C9B69-F908-4AAB-8D0C-10EA8997F37E} -> Spyware.NetNucleus : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{8A0DCBDA-6E20-489C-9041-C1E8A0352E75} -> Spyware.NetNucleus : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DisplayUtility -> Spyware.Delfin : Cleaned with backup
HKLM\SOFTWARE\Mvu -> Spyware.Delfin : Cleaned with backup
HKU\S-1-5-21-213929278-1084188982-3547547601-1006\Software\Mvu -> Spyware.Delfin : Cleaned with backup
:mozilla.41:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Bfast : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.48:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.50:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.52:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.54:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.55:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.56:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.63:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.64:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.69:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.70:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.71:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.72:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.88:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.89:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.91:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.92:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.93:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.94:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.95:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.96:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.97:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.102:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.103:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.104:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.105:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.108:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.109:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.110:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.115:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.116:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.117:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.118:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.119:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.120:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.121:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.122:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.123:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.124:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.125:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.126:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.127:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.128:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.129:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.130:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.131:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.132:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.134:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.135:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.136:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.137:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.138:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.139:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.140:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.141:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.143:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.144:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.145:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.146:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.147:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.148:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.149:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.150:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.151:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.152:C:\Documents and Settings\Brian.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\y1cvdwvd.default\cookies.txt -> Spyware.Cookie.Centrport : Cleaned with backup
C:\Documents and Settings\Brian.HICKSTERGLOBAL\Cookies\brian@abetterinternet[2].txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
:mozilla.6:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.7:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.8:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.10:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.16:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.17:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.19:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.20:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.21:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.22:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.23:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.24:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.25:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.26:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.46:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.47:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.48:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.49:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.50:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.88:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.89:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.90:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.91:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.158:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
:mozilla.159:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
:mozilla.160:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
:mozilla.161:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
:mozilla.162:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
:mozilla.163:C:\Documents and Settings\Kids.HICKSTERGLOBAL\Application Data\Netscape\NSB\Profiles\eo3biz2i.default\cookies.txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
C:\RECYCLER\NPROTECT\00026300.TXT -> Spyware.Cookie.Abetterinternet : Cleaned with backup
:mozilla.37:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Bfast : Cleaned with backup
:mozilla.40:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.44:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.46:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.48:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.50:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.51:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.52:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.59:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.60:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.65:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.66:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.67:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.68:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.84:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.85:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.87:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.88:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.89:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.90:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.91:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.92:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.93:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.98:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.99:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.100:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.101:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.104:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.105:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.106:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.113:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.114:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.115:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.116:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.117:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.118:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.119:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.120:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.121:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.122:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.123:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.124:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.125:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.126:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.127:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.128:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.129:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.130:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.132:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.133:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.134:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.135:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.136:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.137:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.138:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.139:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.141:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.142:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.143:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.144:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.145:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.146:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.147:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.148:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.149:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.150:C:\RECYCLER\NPROTECT\00026573.MOZ -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.37:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Bfast : Cleaned with backup
:mozilla.40:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.44:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.46:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.48:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.50:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.51:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.52:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.59:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.60:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.65:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.66:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.67:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.68:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.84:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.85:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.87:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.88:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.89:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.90:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.91:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.92:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.93:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.98:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.99:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.100:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.101:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.104:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.105:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.106:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.113:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.114:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.115:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.116:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.117:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.118:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.119:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.120:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.121:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.122:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.123:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.124:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.125:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.126:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.127:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.128:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.129:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.130:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.132:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.133:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.134:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.135:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.136:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.137:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.138:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.139:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.141:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.142:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.143:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.144:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.145:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.146:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.147:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.148:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.149:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.150:C:\RECYCLER\NPROTECT\00026574.MOZ -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.37:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Bfast : Cleaned with backup
:mozilla.40:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.44:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.46:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.48:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.50:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.51:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.52:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.59:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.60:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.65:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.66:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.67:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.68:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.84:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.85:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.87:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.88:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.89:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.90:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.91:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.92:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.93:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.98:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.99:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.100:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.101:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.104:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.105:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.106:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.113:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.114:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.115:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.116:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.117:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.118:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.119:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.120:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.121:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.122:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.123:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.124:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.125:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.126:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.127:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.128:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.129:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.130:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.132:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.133:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.134:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.135:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.136:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.137:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.138:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.139:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.141:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.142:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.143:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.144:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.145:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.146:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.147:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.148:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.149:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.150:C:\RECYCLER\NPROTECT\00026577.MOZ -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.37:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Bfast : Cleaned with backup
:mozilla.40:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.44:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.46:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.48:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.50:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.51:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.52:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.59:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.60:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.65:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.66:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.67:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.68:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.84:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.85:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.87:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.88:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.89:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.90:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.91:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.92:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.93:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.98:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.99:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.100:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.101:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.104:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.105:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.106:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.113:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.114:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.115:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.116:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.117:C:\RECYCLER\NPROTECT\00026580.MOZ -> Spyware.Cookie.Advertising : Cleaned with backup

[Excal]

Just a few random bad files to clean up.

• Open HiJackThis
• Click on the configure button on the bottom right
• Click on the tab "Misc Tools"
• Click on "Delete File on Reboot"
• Navigate to this file - C:\WINDOWS\unstall.exe
• Double click on that file.
• HJT asks you if you want to reboot, now. Click "no".
  
  Do that for the following files also, until you get to the last one, then click "yes" when HJT asks you to reboot.

C:\WINDOWS\system32\WinNB57.dll.tcf
C:\WINDOWS\usta33.ini

Post back when you finish and tell me how your computer is running

[RescueU]

Excal,

The computer is running MUCH BETTER!!!!!

Thanks for all the help. I have a question about ewidow. Should I be running it with NAV or should it be one or the other?

Thanks again for the help.

[Excal]

Ewido and Nav are 2 diffrent things. I would just scan with ewido in safe mode, at least once a week

Great job, it appears your computer is clean

Ensure you rehide your “hidden files and folders” back to the way they were.

Now that your system is Malware Free, it is important to reset your system Restore. Click Here to learn how to.

I recommend that you Defrag your computer before setting your Restore points:

Go to start>all programs>accessories>system tools>Disk Defragmentor Make sure it set to the proper drive (default should be your main driver) and click on defragment


Might I suggest the following Free Spyware programs, if you don't already have them, for added security, you can download them at the following links. These programs work great for detection:

Ad-aware SE
Spybot S&D
Microsoft Anti-Spyware


If you are unhappy with your current antivirus and want to replace it or if you dont already have one, I suggest one of these free programs:
*Note - do not use more than one anti-virus program as it will more than likely cause conflict.

AVG
Avast
AntiVir


The following free programs are great for prevention:

SpywareBlaster 3.4
Spywareguard
IE/Spyad

A Firewall is a must! Here are 3 good free versions:
(do not have more than one firewall running on your system)

Sygate
Kerio
ZoneLabs

There are other options other than Internet Explorer for a browser, which some say have better security. Two of them are:

Firefox
Opera

If you decide to keep Internet Explorer, This site is a great source for tightening up security on It's settings.

Make sure that you keep your Operating System and IE updated with the latest Critical Security Updates from Microsoft...they usually come out once a month, on the 2nd Tuesday of each month.

Be sure and give the Temp folders a cleaning out now and then as well, Make sure after you clean your Temp files to empty out your Recycle bin as well.
For ease use the following program:

Cleanup
Run "Cleanup" and when it has finished, Reboot

To help prevent future spyware installations/infections, please read the Anti-Spyware Tutorial and use the tools provided. Also read How I got Infected

[Excal]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.