Here's my Hijack This! log-
Logfile of HijackThis v1.99.1
Scan saved at 9:48:00 AM, on 8/30/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Windows NT\Accessories\WORDPAD.EXE
C:\Documents and Settings\Jeff\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.dell.comR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://websearch.drs...esearch.cgi?id=R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://websearch.drs...esearch.cgi?id=R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.dell.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://red.clientapp...//www.yahoo.comR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://websearch.drs...esearch.cgi?id=R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://websearch.drs...esearch.cgi?id=R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://msn.espn.go.com/R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://websearch.drs...esearch.cgi?id=R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
http://websearch.drs...esearch.cgi?id=R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = websearch.drsnsrch.com/q.cgi?q=
R3 - URLSearchHook: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} - (no file)
O2 - BHO: Band Class - {00F1D395-4744-40f0-A611-980F61AE2C59} - C:\WINDOWS\dsr.dll (file missing)
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: PicShow Class - {4487598C-2EC7-43A2-870E-6D8D720FDD9F} - C:\WINDOWS\system32\pkshymmy.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: AOLToolBand Class - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL Toolbar 2.0\aoltb.dll
O4 - HKLM\..\Run: [Windows Services Hosts] svhosts.exe
O4 - HKLM\..\Run: [Windows Services] scmsg.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [Services Host] schost.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\2\printray.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1115927067\EE\AOLHostManager.exe
O4 - HKLM\..\Run: [eTunnel] C:\et3243423.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [tqclki] C:\WINDOWS\system32\bbxnhnv.exe r
O4 - HKLM\..\Run: [icmtwdb] C:\WINDOWS\icmtwdb.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\RunServices: [iPod USB Service] iPODService.exe
O4 - HKLM\..\RunOnce: [AAW] "C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe" "+b1"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Windows Services Hosts] svhosts.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [pshower] C:\WINDOWS\system32\pshwr.exe
O4 - HKCU\..\RunServices: [Services Host] schost.exe
O4 - HKCU\..\RunServices: [Windows Services Hosts] svhosts.exe
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &AOL Toolbar Search - res://c:\program files\aol toolbar 2.0\aoltbres.dll/search.html
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Search -
http://bar.mywebsear...?p=ZNxdm86744USO8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O15 - Trusted Zone: *.musicmatch.com (HKLM)
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) -
http://zone.msn.com/...ro.cab34246.cabO16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) -
http://ax.phobos.app.../ITDetector.cabO16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) -
http://fdl.msn.com/z...s/heartbeat.cabO16 - DPF: {E856B973-45FD-4559-8F82-EAB539144667} -
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Workstation Service Library (Microsoft Locator Service) - Unknown owner - C:\WINDOWS\wkssvc.exe (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
And my ewido scan log-
---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------
+ Created on: 9:45:39 AM, 8/30/2005
+ Report-Checksum: 393EC02
+ Scan result:
HKLM\SOFTWARE\Classes\CLSID\{2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} -> Spyware.MiniBug : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{2E30AC01-99D7-4E9C-B13E-94E1701B0AC9} -> Dialer.Generic : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{49DB48FF-02B5-4645-B676-94A4DF1AA026} -> Spyware.SecondThought : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{6E0ED53C-9908-49ED-B055-7CB31B162577} -> Spyware.SecondThought : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{830D3AED-2FA9-454F-B266-D931862BBF34} -> Spyware.SecondThought : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{8C53BD8E-B12D-4C8F-AD0E-C9DDC39D1273} -> Spyware.SecondThought : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{8F0A06F6-DF4D-4D54-B8CA-E8EEDBAE6DDB} -> Dialer.Generic : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{9BCDD51B-4A7B-446C-8452-D32D38004582} -> Spyware.SecondThought : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{A986F4DB-792E-4571-8974-0BB6E024766F} -> Spyware.SecondThought : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{BC333116-6EA1-40A1-9D07-ECB192DB8CEA} -> Spyware.AproposMedia : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{BCCAB53D-0895-40C3-A942-A03538CE227A} -> Spyware.SecondThought : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{C0F88E9E-DCEB-4655-968A-AE508A677C39} -> Spyware.SecondThought : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{D7EAC2D8-2D52-4010-A4AD-DFDF60C1706C} -> Spyware.SecondThought : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{5E594162-60A9-487D-84B8-DBDD716CB862} -> Spyware.VirtualBouncer : Cleaned with backup
HKLM\SOFTWARE\Classes\WinAffiliateBHO.WinAffiliateIEExtension -> Spyware.MidAddle : Error during cleaning
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\ins -> Spyware.WebRebates : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{1A00C40B-DA85-4aa3-A67F-582D9347EECD} -> Spyware.iSearch : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{BC3BBF86-E4EC-4412-9676-8355468B3B05} -> Spyware.Maxspeed : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\AUI -> Spyware.WebSearch : Cleaned with backup
HKLM\SYSTEM\CurrentControlSet\Services\WinIK -> Spyware.CommonName : Error during cleaning
HKLM\SYSTEM\CurrentControlSet\Services\WinIK\Security -> Spyware.CommonName : Error during cleaning
HKLM\SYSTEM\CurrentControlSet\Services\WinIK\Enum -> Spyware.CommonName : Error during cleaning
HKU\S-1-5-21-3615233973-2525312469-2197127506-1011\Software\IEMenuExtension -> Spyware.EffectiveBrandToolbar : Cleaned with backup
HKU\S-1-5-21-3615233973-2525312469-2197127506-1011\Software\IEMenuExtension\toolbar -> Spyware.EffectiveBrandToolbar : Cleaned with backup
HKU\S-1-5-21-3615233973-2525312469-2197127506-1011\Software\IEMenuExtension\toolbar\IE5 -> Spyware.EffectiveBrandToolbar : Cleaned with backup
C:\asdf.exe -> TrojanDownloader.Small.bhf : Cleaned with backup
C:\Documents and Settings\Erica\Cookies\erica@abetterinternet[2].txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
C:\Documents and Settings\Erica\Cookies\
[email protected][1].txt -> Spyware.Cookie.Specificclick : Cleaned with backup
C:\Documents and Settings\Erica\Cookies\
[email protected][2].txt -> Spyware.Cookie.Clickzs : Cleaned with backup
C:\Documents and Settings\Erica\Cookies\
[email protected][1].txt -> Spyware.Cookie.Clickzs : Cleaned with backup
C:\Documents and Settings\Erica\Cookies\
[email protected][2].txt -> Spyware.Cookie.Clickzs : Cleaned with backup
C:\Documents and Settings\Erica\Cookies\
[email protected][3].txt -> Spyware.Cookie.Clickzs : Cleaned with backup
C:\Documents and Settings\Erica\Cookies\
[email protected][2].txt -> Spyware.Cookie.Wegcash : Cleaned with backup
C:\Documents and Settings\Erica\Cookies\
[email protected][2].txt -> Spyware.Cookie.Wegcash : Cleaned with backup
C:\Documents and Settings\Erica\Cookies\
[email protected][2].txt -> Spyware.Cookie.Liveperson : Cleaned with backup
C:\Documents and Settings\Erica\Cookies\erica@specificpop[2].txt -> Spyware.Cookie.Specificpop : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\Cookies\
[email protected][1].txt -> Spyware.Cookie.Specificclick : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\Cookies\erica@specificpop[1].txt -> Spyware.Cookie.Specificpop : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~1317.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~440367.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~492327.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~514847.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~571829.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~576350.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~716355.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~743575.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~744428.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~758319.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~759535.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~761065.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~761886.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~763007.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~763907.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~764967.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~767731.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~768888.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~802209.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~810597.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~813764.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~835744.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~876136.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~923356.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~959186.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~960034.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temp\~963088.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temporary Internet Files\Content.IE5\QNOHLI5T\pz[1].exe/trofkz.REG -> Trojan.LowZones.a : Cleaned with backup
C:\Documents and Settings\Erica\Local Settings\Temporary Internet Files\Content.IE5\QNOHLI5T\pz[1].exe/w.html -> Spyware.Hijacker.Generic : Cleaned with backup
C:\Documents and Settings\James\Local Settings\Temp\c.dll -> Adware.MidADle : Cleaned with backup
C:\Documents and Settings\James\Local Settings\Temp\~388838.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\James\Local Settings\Temp\~390409.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\James\Local Settings\Temp\~511208.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\James\Local Settings\Temp\~836535.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\James\Local Settings\Temp\~845511.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\James\Local Settings\Temp\~856615.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\James\Local Settings\Temp\~890213.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\James\Local Settings\Temp\~894924.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\James\Local Settings\Temp\~996594.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\James\Local Settings\Temporary Internet Files\Content.IE5\5RJH3LJ4\pz[1].exe/trofkz.REG -> Trojan.LowZones.a : Cleaned with backup
C:\Documents and Settings\James\Local Settings\Temporary Internet Files\Content.IE5\5RJH3LJ4\pz[1].exe/w.html -> Spyware.Hijacker.Generic : Cleaned with backup
C:\Documents and Settings\Jeff\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\time.class-50c9903d-2b39d7f4.class -> TrojanDownloader.Small.bhf : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\jeff@2o7[1].txt -> Spyware.Cookie.2o7 : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\
[email protected][1].txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\jeff@abetterinternet[1].txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\
[email protected][1].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\
[email protected][1].txt -> Spyware.Cookie.Clickhype : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\
[email protected][1].txt -> Spyware.Cookie.Specificclick : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\
[email protected][1].txt -> Spyware.Cookie.Addcontrol : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\jeff@burstnet[2].txt -> Spyware.Cookie.Burstnet : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\jeff@casalemedia[2].txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\jeff@centrport[2].txt -> Spyware.Cookie.Centrport : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\
[email protected][1].txt -> Spyware.Cookie.Masterstats : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\jeff@paypopup[2].txt -> Spyware.Cookie.Paypopup : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\
[email protected][2].txt -> Spyware.Cookie.Wegcash : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\jeff@questionmarket[1].txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\
[email protected][1].txt -> Spyware.Cookie.Adjuggler : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\jeff@trafficmp[1].txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\jeff@tribalfusion[2].txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\
[email protected][2].txt -> Spyware.Cookie.Clickzs : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\
[email protected][1].txt -> Spyware.Cookie.Burstnet : Cleaned with backup
C:\Documents and Settings\Jeff\Cookies\
[email protected][1].txt -> Spyware.Cookie.Adserver : Cleaned with backup
C:\Documents and Settings\Jeff\Local Settings\Application Data\Wildtangent\Cdacache\00\00\1A.dat/files\wtvh.dll -> Spyware.WildTangent : Cleaned with backup
C:\Documents and Settings\Jeff\Local Settings\Temp\Cookies\
[email protected][1].txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
C:\Documents and Settings\Jeff\Local Settings\Temp\Cookies\
[email protected][2].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Jeff\Local Settings\Temp\Cookies\
[email protected][2].txt -> Spyware.Cookie.Specificclick : Cleaned with backup
C:\Documents and Settings\Jeff\Local Settings\Temp\Cookies\jeff@burstnet[1].txt -> Spyware.Cookie.Burstnet : Cleaned with backup
C:\Documents and Settings\Jeff\Local Settings\Temp\Cookies\
[email protected][2].txt -> Spyware.Cookie.Clickzs : Cleaned with backup
C:\Documents and Settings\Jeff\Local Settings\Temp\Cookies\
[email protected][2].txt -> Spyware.Cookie.Clickzs : Cleaned with backup
C:\Documents and Settings\Jeff\Local Settings\Temp\Cookies\
[email protected][2].txt -> Spyware.Cookie.Clickzs : Cleaned with backup
C:\Documents and Settings\Jeff\Local Settings\Temp\Cookies\
[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Jeff\Local Settings\Temp\Cookies\
[email protected][1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Jeff\Local Settings\Temp\Cookies\
[email protected][2].txt -> Spyware.Cookie.Ru4 : Cleaned with backup
C:\Documents and Settings\Jeff\Local Settings\Temp\Cookies\jeff@linkbuddies[2].txt -> Spyware.Cookie.Linkbuddies : Cleaned with backup
C:\Documents and Settings\Jeff\Local Settings\Temp\Cookies\
[email protected][1].txt -> Spyware.Cookie.Clickzs : Cleaned with backup
C:\Documents and Settings\Jeff\Local Settings\Temp\temp.frB26B -> Spyware.WinAD : Cleaned with backup
C:\Documents and Settings\Jim\Local Settings\Temp\UL9DdTp.dll -> Adware.MidADle : Cleaned with backup
C:\Documents and Settings\Jim\Local Settings\Temp\~43630.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Jim\Local Settings\Temp\~777227.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Jim\Local Settings\Temp\~782572.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Jim\Local Settings\Temp\~858524.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Jim\Local Settings\Temp\~867167.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Jim\Local Settings\Temp\~918518.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Jim\Local Settings\Temp\~979637.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Jim\Local Settings\Temp\~992644.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Cookies\
[email protected][1].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Michele\Cookies\
[email protected][2].txt -> Spyware.Cookie.Specificclick : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Application Data\Wildtangent\Cdacache\00\00\0F.dat/files\wtvh.dll -> Spyware.WildTangent : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\6VB4Ie.dll -> Adware.MidADle : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~352301.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~354914.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~357891.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~389823.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~415049.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~433550.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~572352.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~609527.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~615278.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~718308.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~719895.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~745278.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~746154.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~819733.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~822986.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~826152.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~828138.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~830418.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~831495.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~874177.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~894123.tmp -> Spyware.Wintools : Cleaned with backup
C:\Documents and Settings\Michele\Local Settings\Temp\~902143.tmp -> Spyware.Wintools : Cleaned with backup
C:\Downloads\LSLMCLTSetup-dm[1].exe -> Spyware.Trymedia : Cleaned with backup
C:\edow.exe -> TrojanDownloader.QDown.j : Cleaned with backup
C:\install.exe/x.bat -> Trojan.LowZones.f : Cleaned with backup
C:\install.exe/kans.reg -> Trojan.WinREG.LowZones.f : Cleaned with backup
C:\mtwin.exe/kans.reg -> Trojan.WinREG.LowZones.f : Cleaned with backup
C:\mtwin.exe/kansup.reg -> Trojan.WinREG.LowZones.f : Cleaned with backup
C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll -> Spyware.Wheaterbug : Cleaned with backup
C:\Program Files\otvovrxx\cnml.exe -> Spyware.CommonName : Error during cleaning
C:\Program Files\otvovrxx\Mx4IDgEZ.exe -> Spyware.CommonName : Error during cleaning
C:\Program Files\otvovrxx\ZEgDI4xM.dll -> Spyware.CommonName : Error during cleaning
C:\Program Files\otvovrxx\ZEgDI4xM.exe -> Spyware.CommonName : Error during cleaning
C:\Program Files\Winad Client\WinClt.exe -> Spyware.WinAD : Cleaned with backup
C:\pz.exe/trofkz.REG -> Trojan.LowZones.a : Cleaned with backup
C:\pz.exe/w.html -> Spyware.Hijacker.Generic : Cleaned with backup
C:\RECYCLER\S-1-5-21-3615233973-2525312469-2197127506-1007\Dc13.SYS -> Trojan.Rootkit.Agent.q : Cleaned with backup
C:\RECYCLER\S-1-5-21-3615233973-2525312469-2197127506-1007\Dc15\ikw.exe -> Spyware.CommonName.j : Cleaned with backup
C:\RECYCLER\S-1-5-21-3615233973-2525312469-2197127506-1007\Dc15\ospxxxw.dll -> Spyware.CommonName : Cleaned with backup
C:\RECYCLER\S-1-5-21-3615233973-2525312469-2197127506-1007\Dc15\wxxxpso.exe -> Spyware.CommonName : Cleaned with backup
C:\RECYCLER\S-1-5-21-3615233973-2525312469-2197127506-1007\Dc5.exe -> Spyware.CommonName : Cleaned with backup
C:\sjh.exe -> Worm.Kelvir.ay : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP34\A0004442.exe -> Adware.BetterInternet : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP36\A0004480.exe -> Adware.BetterInternet : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP37\A0004498.exe -> Adware.BetterInternet : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP38\A0004514.exe -> Adware.BetterInternet : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP39\A0004537.exe -> Adware.BetterInternet : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP39\A0004551.exe -> TrojanDownloader.Intexp.d : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP39\A0004552.exe -> Adware.BetterInternet : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP39\A0004556.sys -> Trojan.Rootkit.k : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP39\A0004557.exe -> Heuristic.Win32.Morphine-Crypted : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP40\A0004713.dll -> Adware.SAHA : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP40\A0004714.exe -> Adware.Saha : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP40\A0004715.exe -> Adware.SAHA : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP40\A0004716.exe -> Adware.SAHA : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0097435.vxd/C:/WINDOWS/System32/exdl.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0097435.vxd/C:/WINDOWS/System32/mqexdlm.srg -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0097435.vxd/C:/WINDOWS/System32/exul.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0097435.vxd/C:/WINDOWS/System32/javexulm.vxd -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0097435.vxd/C:/WINDOWS/System32/bbchk.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0097435.vxd/C:/WINDOWS/System32/msexreg.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0097435.vxd/C:/WINDOWS/System32/instsrv.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0098082.ax/C:/WINDOWS/System32/mscb.dll -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0098082.ax/C:/Program Files/CashBack/bin/cashback.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0098082.ax/C:/Program Files/CashBack/bin/cb.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0098082.ax/C:/Program Files/CashBack/bin/flash.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0098094.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0098099.vxd/C:/WINDOWS/System32/nvms.dll -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0098099.vxd/C:/Program Files/NaviSearch/bin/nls.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0099062.ax/C:/WINDOWS/system32/mscb.dll -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0099062.ax/C:/Program Files/CashBack/bin/cashback.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0099062.ax/C:/Program Files/CashBack/bin/cb.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0099062.ax/C:/Program Files/CashBack/bin/flash.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0099076.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0099083.vxd/C:/WINDOWS/system32/nvms.dll -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0099083.vxd/C:/Program Files/NaviSearch/bin/nls.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0099084.vxd/C:/WINDOWS/system32/exdl.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0099084.vxd/C:/WINDOWS/system32/mqexdlm.srg -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0099084.vxd/C:/WINDOWS/system32/exul.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0099084.vxd/C:/WINDOWS/system32/javexulm.vxd -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0099084.vxd/C:/WINDOWS/system32/bbchk.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0099084.vxd/C:/WINDOWS/system32/msexreg.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}(2)\RP266\A0099084.vxd/C:/WINDOWS/system32/instsrv.exe -> Spyware.BargainBuddy : Cleaned with backup
C:\temp\VegasFrontier.exe -> Spyware.AdURL : Cleaned with backup
C:\tmp.exe/g.exe -> TrojanDownloader.IstBar.is : Cleaned with backup
C:\trofkz.REG -> Trojan.LowZones.a : Cleaned with backup
C:\w.html -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\HDPlugin1019.dll -> Adware.Gator : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.2\HDPlugin1019.dll -> Adware.Gator : Cleaned with backup
C:\WINDOWS\dsr.dll -> Spyware.Hijacker.Generic : Cleaned with backup
C:\WINDOWS\dsr.exe -> Trojan.Imiserv.c : Cleaned with backup
C:\WINDOWS\fakoddi.exe -> TrojanDropper.Agent.tb : Cleaned with backup
C:\WINDOWS\ghgbgobjhiq.exe -> Adware.BetterInternet : Cleaned with backup
C:\WINDOWS\kans.reg -> Trojan.WinREG.LowZones.f : Cleaned with backup
C:\WINDOWS\l.exe -> Spyware.WinAD : Cleaned with backup
C:\WINDOWS\Nail.exe -> Adware.BetterInternet : Cleaned with backup
C:\WINDOWS\offun.exe -> TrojanDownloader.VB.hw : Cleaned with backup
C:\WINDOWS\svcproc.exe -> Trojan.Stervis.d : Cleaned with backup
C:\WINDOWS\SYSTEM32\carules.dll -> Spyware.Coupon : Cleaned with backup
C:\WINDOWS\SYSTEM32\DRIVERS\winik.sys -> Trojan.Rootkit.Agent.q : Error during cleaning
C:\WINDOWS\SYSTEM32\DrPMon.dll -> Trojan.Agent.db : Cleaned with backup
C:\WINDOWS\SYSTEM32\kans.reg -> Trojan.WinREG.LowZones.f : Cleaned with backup
C:\WINDOWS\SYSTEM32\kansup.reg -> Trojan.WinREG.LowZones.f : Cleaned with backup
C:\WINDOWS\SYSTEM32\mtwin.exe/kans.reg -> Trojan.WinREG.LowZones.f : Cleaned with backup
C:\WINDOWS\SYSTEM32\mtwin.exe/kansup.reg -> Trojan.WinREG.LowZones.f : Cleaned with backup
C:\WINDOWS\SYSTEM32\mѕiexec.exe -> Spyware.PurityScan : Cleaned with backup
C:\WINDOWS\SYSTEM32\nsi3EB.dll -> Spyware.HotSearchBar : Cleaned with backup
C:\WINDOWS\SYSTEM32\pkshymmy.dll -> Spyware.SafeSurfing : Cleaned with backup
C:\WINDOWS\x.bat -> Trojan.LowZones.f : Cleaned with backup
C:\_m00\backups\backup-20050220-163926-696.dll -> Spyware.MyWebSearch : Cleaned with backup
::Report End