[heir]

Let's move on.

Step 1.
Uninstall unwanted software:

Please go to Start > Control Panel > Add/Remove Programs and remove the following (if present):

LimeWire 5.2.13


Optional removals
Limewire and P2P programs in general are legal themselves, but much of the content downloaded with them is downloaded illegally. They are also a great way to infect yourself with malware.
It's up to you if you want to remove the above programs, however I recommend you do.

Step 2.
OTL-fix:

Run OTL.exe

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  

  :OTL
  PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
  O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
  O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
  :Commands
  [purity]
  [emptytemp]
  [start explorer]
  [Reboot]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot when it is done
• Then post the OTL fixlog

Step 3.
Lop S&D:

Disable resident protections (Antivirus...); you'll re-enable them after the scan

Download Lop S&D < here and save it to the desktop

Double-click Lop S&D.exe
Choose the language, then choose Option 1 (Search)
Wait till the end of the scan
Post the log which is created: (%SystemDrive%\lopR.txt)

Step 4.
Things I would like to see in your reply:

• Which programs were uninstalled in step 1.
• The content of the fixlog from OTL in step 2.
• The content of C:\lopR.txt from step 3.

[Advertisements]

I did not know that the content in Limewire was mostly illegal so I uninstalled it. Here is the logs from OTL & LOPSD:

All processes killed
========== OTL ==========
Process explorer.exe killed successfully!
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\ deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
File delete failed. C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 32902 bytes

User: Preferred Customer
->Temp folder emptied: 63126676 bytes
File delete failed. C:\Documents and Settings\Preferred Customer\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 24305306 bytes
->Java cache emptied: 25493248 bytes
->FireFox cache emptied: 0 bytes
->Apple Safari cache emptied: 105525 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_194.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5c0.dat scheduled to be deleted on reboot.
Windows Temp folder emptied: 845260 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 108.73 mb


OTL by OldTimer - Version 3.0.18.4 log created on 10082009_203034

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
File\Folder C:\WINDOWS\temp\Perflib_Perfdata_194.dat not found!
File\Folder C:\WINDOWS\temp\Perflib_Perfdata_5c0.dat not found!

Registry entries deleted on Reboot...




--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Home Edition ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Sempron™ 2600+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Preferred Customer ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1356 [VPS 091008-0] 4.8.1356 (Not Activated)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:31 Go)
D:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 10/08/09|20:40 )

--------------------\\ Listing folders in APPLIC~1

[12/21/04|02:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Microsoft

[11/16/08|11:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> {3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[09/12/09|06:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> {755AC846-7372-4AC8-8550-C52491DAA8BD}
[04/22/09|10:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> {8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[06/24/09|06:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Adobe
[01/06/07|08:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Ahead
[07/14/07|01:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> AOL
[06/19/07|05:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> AOL Downloads
[06/19/07|05:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> AOL OCP
[09/20/09|09:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Apple
[12/21/06|09:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Apple Computer
[03/25/09|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> BitDefender
[09/15/05|09:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> broderbund
[11/21/05|06:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> CanonBJ
[01/14/07|10:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Corel
[09/09/09|10:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> DVD Shrink
[08/20/07|08:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Google
[02/25/05|08:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> GTek
[03/31/09|07:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> InstallShield
[02/10/08|10:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Kodak
[06/23/08|07:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Lavasoft
[12/24/08|10:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Malwarebytes
[10/05/09|09:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Microsoft
[01/07/08|11:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> NCH Swift Sound
[06/25/09|11:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> NOS
[05/28/08|09:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> NVIDIA
[02/18/06|12:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> nView_Profiles
[02/28/05|10:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> OLYMPUS
[01/26/08|03:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Pinnacle
[01/26/08|03:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Pinnacle Studio
[12/29/04|09:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> QuickTime
[12/04/06|06:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Spyware Terminator
[10/04/09|09:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> SUPERAntiSpyware.com
[12/22/06|09:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Symantec
[12/05/07|11:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> TEMP
[12/04/06|06:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Trevoli
[12/05/07|07:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Trymedia
[06/19/07|05:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Viewpoint
[09/03/09|06:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> vsosdk
[09/01/05|09:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Windows Genuine Advantage
[05/19/07|11:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Windows Live Toolbar
[12/19/06|02:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> yahoo!

[12/21/04|01:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> Microsoft

[06/15/08|04:12] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Adobe
[08/14/07|10:14] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Google
[05/13/06|09:56] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Macromedia
[10/07/09|07:42] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Microsoft

[10/07/09|07:42] C:\DOCUME~1\NETWOR~1\APPLIC~1\<DIR> Microsoft
[12/21/04|03:06] C:\DOCUME~1\NETWOR~1\APPLIC~1\<DIR> Symantec

[12/25/04|09:12] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> ACD Systems
[06/24/09|06:43] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Adobe
[02/02/06|07:57] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> AdobeAUM
[05/07/08|06:10] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> AdobeUM
[02/15/07|11:18] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Ahead
[09/14/09|08:53] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Apple Computer
[11/17/05|10:57] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> ArcSoft
[10/08/09|08:30] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> AVG8
[03/31/09|07:57] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Backup MyPC Deluxe
[09/15/05|09:28] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Broderbund
[08/12/09|06:08] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Corel
[02/06/08|10:57] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> DMCache
[11/06/08|10:12] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Download Manager
[01/07/07|02:07] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> dvdcss
[09/30/09|08:31] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> DVDFab
[12/04/06|09:48] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Google
[02/25/05|08:48] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> GTek
[02/11/05|01:09] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Help
[10/02/08|10:12] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> ICAClient
[12/21/04|01:56] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Identities
[02/24/08|06:50] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> InstallShield
[12/29/04|10:01] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> InterTrust
[02/07/08|09:19] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Lavasoft
[12/25/04|08:23] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Leadertech
[10/08/09|06:23] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> LimeWire
[06/02/06|08:43] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Macromedia
[12/24/08|10:18] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Malwarebytes
[07/03/08|08:15] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Microsoft
[09/29/09|06:30] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> MoveFab
[09/03/09|08:32] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Mozilla
[01/07/08|11:06] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> NCH Swift Sound
[06/27/07|11:13] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Nero
[01/25/08|11:26] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Netscape
[01/26/08|04:41] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> proDAD
[12/25/04|07:46] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Share-to-Web Upload Folder
[01/02/07|07:48] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Simple Star
[01/10/07|09:33] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Snapfish
[03/31/09|07:54] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Sonic
[11/28/06|10:25] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Spyware Terminator
[01/27/05|10:29] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Sun
[10/04/09|09:07] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> SUPERAntiSpyware.com
[12/21/04|02:59] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Symantec
[03/24/07|03:30] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Systweak
[02/11/07|11:41] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Uniblue
[01/06/07|09:40] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> vlc
[09/28/09|05:30] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Vso
[12/04/06|07:13] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> WholeSecurity
[12/31/08|04:39] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Windows Search
[12/19/06|02:34] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Yahoo!

--------------------\\ Scheduled Tasks located in C:\WINDOWS\Tasks

[09/26/09 12:23 PM][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[10/08/09 08:33 PM][--ah-----] C:\WINDOWS\tasks\SA.DAT
[08/04/04 07:00 AM][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing Folders in C:\Program Files

[04/14/09|09:29] C:\Program Files\<DIR> 2nd Story Software
[01/05/07|11:07] C:\Program Files\<DIR> AC3Filter
[12/25/04|08:01] C:\Program Files\<DIR> ACD Systems
[06/24/09|06:58] C:\Program Files\<DIR> Adobe
[03/22/08|11:21] C:\Program Files\<DIR> AdorageI-GfxDatas
[01/26/08|04:20] C:\Program Files\<DIR> AdorageI-SAL
[06/28/09|07:41] C:\Program Files\<DIR> Advanced System Optimizer
[01/06/07|08:57] C:\Program Files\<DIR> Ahead
[09/19/08|06:09] C:\Program Files\<DIR> Apple Software Update
[01/28/07|11:42] C:\Program Files\<DIR> ArcSoft
[12/07/05|08:39] C:\Program Files\<DIR> Arial Sound Recorder
[10/05/09|02:35] C:\Program Files\<DIR> a-squared Free
[03/15/07|09:27] C:\Program Files\<DIR> Audacity
[10/08/09|09:12] C:\Program Files\<DIR> Avast4
[10/05/09|06:41] C:\Program Files\<DIR> AVG
[01/26/08|05:12] C:\Program Files\<DIR> BIAS
[04/22/09|10:19] C:\Program Files\<DIR> Bonjour
[12/01/05|11:23] C:\Program Files\<DIR> Broderbund
[11/21/05|06:19] C:\Program Files\<DIR> Canon
[10/04/09|01:26] C:\Program Files\<DIR> CCleaner
[10/02/08|10:08] C:\Program Files\<DIR> Citrix
[10/08/09|06:54] C:\Program Files\<DIR> Common Files
[12/21/04|01:49] C:\Program Files\<DIR> ComPlus Applications
[12/04/06|06:54] C:\Program Files\<DIR> Digital Camera Utility
[01/13/09|10:56] C:\Program Files\<DIR> DVD Shrink
[08/12/09|06:25] C:\Program Files\<DIR> DVD Shrink 3.1
[09/28/09|05:29] C:\Program Files\<DIR> DVDFab 6
[07/27/05|08:26] C:\Program Files\<DIR> Electronic Arts
[05/02/09|07:08] C:\Program Files\<DIR> EMSI Software A Squared
[10/06/09|10:35] C:\Program Files\<DIR> ERUNT
[01/09/08|10:27] C:\Program Files\<DIR> Fraunhofer IIS
[08/12/08|10:22] C:\Program Files\<DIR> Games
[08/20/07|08:49] C:\Program Files\<DIR> Google
[10/19/06|09:22] C:\Program Files\<DIR> Hewlett-Packard
[03/22/05|09:58] C:\Program Files\<DIR> HighMAT CD Writing Wizard
[10/05/09|10:41] C:\Program Files\<DIR> HijackThis
[10/19/06|09:28] C:\Program Files\<DIR> HP Photosmart 11
[02/11/05|11:47] C:\Program Files\<DIR> ICRAplus
[08/12/09|05:56] C:\Program Files\<DIR> InstallShield Installation Information
[03/08/09|07:05] C:\Program Files\<DIR> Intel
[07/29/09|11:19] C:\Program Files\<DIR> Internet Explorer
[09/20/09|08:22] C:\Program Files\<DIR> iPod
[09/30/09|09:23] C:\Program Files\<DIR> iTunes
[10/06/09|07:05] C:\Program Files\<DIR> Java
[12/04/06|09:34] C:\Program Files\<DIR> Kodak
[06/23/08|07:08] C:\Program Files\<DIR> Lavasoft
[10/08/09|08:28] C:\Program Files\<DIR> LimeWire
[03/05/05|09:12] C:\Program Files\<DIR> Logitech
[09/29/09|07:37] C:\Program Files\<DIR> Malwarebytes' Anti-Malware
[09/15/05|09:23] C:\Program Files\<DIR> Mediostream
[12/24/08|01:33] C:\Program Files\<DIR> Messenger
[12/21/04|03:51] C:\Program Files\<DIR> Microsoft ActiveSync
[05/08/07|09:06] C:\Program Files\<DIR> Microsoft CAPICOM 2.1.0.2
[12/21/04|01:52] C:\Program Files\<DIR> microsoft frontpage
[02/22/05|10:54] C:\Program Files\<DIR> Microsoft Office
[12/01/05|11:16] C:\Program Files\<DIR> Microsoft Picture It! 7
[09/09/09|03:41] C:\Program Files\<DIR> Microsoft Silverlight
[12/24/08|01:26] C:\Program Files\<DIR> Movie Maker
[03/29/07|05:46] C:\Program Files\<DIR> movieshop
[02/02/09|07:47] C:\Program Files\<DIR> MSBuild
[12/04/06|10:26] C:\Program Files\<DIR> MSECACHE
[12/24/08|01:26] C:\Program Files\<DIR> msn
[12/21/04|01:48] C:\Program Files\<DIR> MSN Gaming Zone
[08/14/07|09:01] C:\Program Files\<DIR> MSXML 4.0
[12/15/05|10:33] C:\Program Files\<DIR> MUSICMATCH
[01/07/08|11:12] C:\Program Files\<DIR> NCH Swift Sound
[01/02/07|07:27] C:\Program Files\<DIR> Nero
[12/24/08|01:23] C:\Program Files\<DIR> NetMeeting
[01/04/05|09:15] C:\Program Files\<DIR> Netopia
[05/30/05|01:32] C:\Program Files\<DIR> Netscape
[12/29/04|10:00] C:\Program Files\<DIR> OLYMPUS
[07/13/05|07:19] C:\Program Files\<DIR> Online Services
[08/12/09|07:54] C:\Program Files\<DIR> Outlook Express
[12/14/06|11:08] C:\Program Files\<DIR> PENTAX
[11/15/06|09:53] C:\Program Files\<DIR> Photo Finale
[01/26/08|03:44] C:\Program Files\<DIR> Pinnacle
[01/26/08|04:40] C:\Program Files\<DIR> proDAD
[09/20/09|08:20] C:\Program Files\<DIR> QuickTime
[02/02/09|07:47] C:\Program Files\<DIR> Reference Assemblies
[10/06/09|06:15] C:\Program Files\<DIR> Registrar Registry Manager
[03/31/09|07:38] C:\Program Files\<DIR> Roxio
[09/20/09|09:00] C:\Program Files\<DIR> Safari
[12/23/05|07:56] C:\Program Files\<DIR> Samsung
[12/21/04|02:44] C:\Program Files\<DIR> Sonic
[10/05/09|06:13] C:\Program Files\<DIR> SUPERAntiSpyware
[01/29/08|08:44] C:\Program Files\<DIR> SystemRequirementsLab
[12/25/04|08:03] C:\Program Files\<DIR> Trellix Corporation
[02/11/05|10:04] C:\Program Files\<DIR> triCerat
[12/21/04|01:56] C:\Program Files\<DIR> Uninstall Information
[11/30/05|07:19] C:\Program Files\<DIR> VIA Technologies, Inc
[01/06/07|09:36] C:\Program Files\<DIR> VideoLAN
[12/01/05|11:35] C:\Program Files\<DIR> Web Publish
[02/28/05|09:23] C:\Program Files\<DIR> Webroot
[07/05/08|05:34] C:\Program Files\<DIR> Western Digital
[07/05/08|05:34] C:\Program Files\<DIR> Western Digital Technologies
[12/04/06|06:53] C:\Program Files\<DIR> WinClamAVShield
[10/05/09|09:15] C:\Program Files\<DIR> Windows Desktop Search
[12/04/06|10:28] C:\Program Files\<DIR> Windows Installer Clean Up
[03/22/05|09:58] C:\Program Files\<DIR> Windows Journal Viewer
[08/20/07|08:35] C:\Program Files\<DIR> Windows Live Safety Center
[01/31/08|10:56] C:\Program Files\<DIR> Windows Live Toolbar
[12/22/06|04:45] C:\Program Files\<DIR> Windows Media Connect 2
[03/08/09|07:15] C:\Program Files\<DIR> Windows Media Player
[12/24/08|01:23] C:\Program Files\<DIR> Windows NT
[04/04/07|07:02] C:\Program Files\<DIR> Windows XP Setup Disks
[12/05/06|09:46] C:\Program Files\<DIR> Windows XP Video Decoder Checkup Utility
[12/21/04|01:50] C:\Program Files\<DIR> WindowsUpdate
[03/01/05|07:30] C:\Program Files\<DIR> WinZip
[12/21/04|01:52] C:\Program Files\<DIR> xerox
[11/07/05|09:54] C:\Program Files\<DIR> Yahoo!

--------------------\\ Listing Folders in C:\Program Files\Common Files

[06/24/09|06:58] C:\Program Files\Common Files\<DIR> Adobe
[01/06/07|08:55] C:\Program Files\Common Files\<DIR> Ahead
[09/12/09|06:43] C:\Program Files\Common Files\<DIR> Apple
[03/25/09|10:56] C:\Program Files\Common Files\<DIR> BitDefender
[12/01/05|11:23] C:\Program Files\Common Files\<DIR> Broderbund
[01/14/07|10:57] C:\Program Files\Common Files\<DIR> Corel
[12/21/04|03:51] C:\Program Files\Common Files\<DIR> Designer
[02/20/05|11:26] C:\Program Files\Common Files\<DIR> efax
[12/25/04|07:57] C:\Program Files\Common Files\<DIR> Hewlett-Packard
[10/07/09|06:17] C:\Program Files\Common Files\<DIR> InstallShield
[03/09/05|01:28] C:\Program Files\Common Files\<DIR> Java
[12/27/04|08:14] C:\Program Files\Common Files\<DIR> Logitech
[10/05/09|06:41] C:\Program Files\Common Files\<DIR> Microsoft Shared
[05/02/08|08:11] C:\Program Files\Common Files\<DIR> Motorola Shared
[12/21/04|01:50] C:\Program Files\Common Files\<DIR> MSSoap
[12/31/01|07:42] C:\Program Files\Common Files\<DIR> ODBC
[12/21/04|01:50] C:\Program Files\Common Files\<DIR> Services
[01/02/07|07:27] C:\Program Files\Common Files\<DIR> Simple Star Shared
[03/31/09|07:38] C:\Program Files\Common Files\<DIR> Sonic Shared
[12/31/01|07:42] C:\Program Files\Common Files\<DIR> SpeechEngines
[03/31/09|07:38] C:\Program Files\Common Files\<DIR> SureThing Shared
[08/21/07|08:35] C:\Program Files\Common Files\<DIR> Symantec Shared
[12/24/08|01:23] C:\Program Files\Common Files\<DIR> System
[10/04/09|09:06] C:\Program Files\Common Files\<DIR> Wise Installation Wizard

--------------------\\ Process

( 34 Processes )

IEXPLORE.EXE ~ [PID:3364]
IEXPLORE.EXE ~ [PID:3500]
IEXPLORE.EXE ~ [PID:2764]

--------------------\\ Searching with S_Lop

No Lop folder found !

--------------------\\ Searching for Lop Files - Folders

C:\DOCUME~1\PREFER~1\Cookies\preferred_customer@advertising[2].txt

--------------------\\ Searching within the Registry

..... OK !

--------------------\\ Checking the Hosts file

Hosts file CLEAN


--------------------\\ Searching for hidden files with Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-08 20:41:36
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Searching for other infections


No other infections found !

[F:3][D:2]-> C:\DOCUME~1\PREFER~1\LOCALS~1\Temp
[F:185][D:0]-> C:\DOCUME~1\PREFER~1\Cookies
[F:151][D:4]-> C:\DOCUME~1\PREFER~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 10/08/09|20:43 - Option : [1]

--------------------\\ Scan completed at 20:43:49

[Mahocker]

I did not know that the content in Limewire was mostly illegal so I uninstalled it. Here is the logs from OTL & LOPSD:

All processes killed
========== OTL ==========
Process explorer.exe killed successfully!
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\ deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
File delete failed. C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 32902 bytes

User: Preferred Customer
->Temp folder emptied: 63126676 bytes
File delete failed. C:\Documents and Settings\Preferred Customer\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 24305306 bytes
->Java cache emptied: 25493248 bytes
->FireFox cache emptied: 0 bytes
->Apple Safari cache emptied: 105525 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_194.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5c0.dat scheduled to be deleted on reboot.
Windows Temp folder emptied: 845260 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 108.73 mb


OTL by OldTimer - Version 3.0.18.4 log created on 10082009_203034

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
File\Folder C:\WINDOWS\temp\Perflib_Perfdata_194.dat not found!
File\Folder C:\WINDOWS\temp\Perflib_Perfdata_5c0.dat not found!

Registry entries deleted on Reboot...




--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft Windows XP Home Edition ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Sempron™ 2600+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : Preferred Customer ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1356 [VPS 091008-0] 4.8.1356 (Not Activated)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:31 Go)
D:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 10/08/09|20:40 )

--------------------\\ Listing folders in APPLIC~1

[12/21/04|02:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\<DIR> Microsoft

[11/16/08|11:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> {3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[09/12/09|06:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> {755AC846-7372-4AC8-8550-C52491DAA8BD}
[04/22/09|10:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> {8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[06/24/09|06:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Adobe
[01/06/07|08:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Ahead
[07/14/07|01:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> AOL
[06/19/07|05:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> AOL Downloads
[06/19/07|05:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> AOL OCP
[09/20/09|09:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Apple
[12/21/06|09:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Apple Computer
[03/25/09|11:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> BitDefender
[09/15/05|09:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> broderbund
[11/21/05|06:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> CanonBJ
[01/14/07|10:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Corel
[09/09/09|10:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> DVD Shrink
[08/20/07|08:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Google
[02/25/05|08:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> GTek
[03/31/09|07:38] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> InstallShield
[02/10/08|10:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Kodak
[06/23/08|07:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Lavasoft
[12/24/08|10:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Malwarebytes
[10/05/09|09:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Microsoft
[01/07/08|11:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> NCH Swift Sound
[06/25/09|11:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> NOS
[05/28/08|09:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> NVIDIA
[02/18/06|12:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> nView_Profiles
[02/28/05|10:14] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> OLYMPUS
[01/26/08|03:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Pinnacle
[01/26/08|03:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Pinnacle Studio
[12/29/04|09:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> QuickTime
[12/04/06|06:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Spyware Terminator
[10/04/09|09:08] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> SUPERAntiSpyware.com
[12/22/06|09:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Symantec
[12/05/07|11:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> TEMP
[12/04/06|06:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Trevoli
[12/05/07|07:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Trymedia
[06/19/07|05:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Viewpoint
[09/03/09|06:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> vsosdk
[09/01/05|09:31] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Windows Genuine Advantage
[05/19/07|11:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> Windows Live Toolbar
[12/19/06|02:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\<DIR> yahoo!

[12/21/04|01:52] C:\DOCUME~1\DEFAUL~1\APPLIC~1\<DIR> Microsoft

[06/15/08|04:12] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Adobe
[08/14/07|10:14] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Google
[05/13/06|09:56] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Macromedia
[10/07/09|07:42] C:\DOCUME~1\LOCALS~1\APPLIC~1\<DIR> Microsoft

[10/07/09|07:42] C:\DOCUME~1\NETWOR~1\APPLIC~1\<DIR> Microsoft
[12/21/04|03:06] C:\DOCUME~1\NETWOR~1\APPLIC~1\<DIR> Symantec

[12/25/04|09:12] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> ACD Systems
[06/24/09|06:43] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Adobe
[02/02/06|07:57] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> AdobeAUM
[05/07/08|06:10] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> AdobeUM
[02/15/07|11:18] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Ahead
[09/14/09|08:53] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Apple Computer
[11/17/05|10:57] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> ArcSoft
[10/08/09|08:30] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> AVG8
[03/31/09|07:57] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Backup MyPC Deluxe
[09/15/05|09:28] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Broderbund
[08/12/09|06:08] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Corel
[02/06/08|10:57] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> DMCache
[11/06/08|10:12] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Download Manager
[01/07/07|02:07] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> dvdcss
[09/30/09|08:31] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> DVDFab
[12/04/06|09:48] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Google
[02/25/05|08:48] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> GTek
[02/11/05|01:09] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Help
[10/02/08|10:12] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> ICAClient
[12/21/04|01:56] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Identities
[02/24/08|06:50] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> InstallShield
[12/29/04|10:01] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> InterTrust
[02/07/08|09:19] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Lavasoft
[12/25/04|08:23] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Leadertech
[10/08/09|06:23] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> LimeWire
[06/02/06|08:43] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Macromedia
[12/24/08|10:18] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Malwarebytes
[07/03/08|08:15] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Microsoft
[09/29/09|06:30] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> MoveFab
[09/03/09|08:32] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Mozilla
[01/07/08|11:06] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> NCH Swift Sound
[06/27/07|11:13] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Nero
[01/25/08|11:26] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Netscape
[01/26/08|04:41] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> proDAD
[12/25/04|07:46] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Share-to-Web Upload Folder
[01/02/07|07:48] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Simple Star
[01/10/07|09:33] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Snapfish
[03/31/09|07:54] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Sonic
[11/28/06|10:25] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Spyware Terminator
[01/27/05|10:29] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Sun
[10/04/09|09:07] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> SUPERAntiSpyware.com
[12/21/04|02:59] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Symantec
[03/24/07|03:30] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Systweak
[02/11/07|11:41] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Uniblue
[01/06/07|09:40] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> vlc
[09/28/09|05:30] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Vso
[12/04/06|07:13] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> WholeSecurity
[12/31/08|04:39] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Windows Search
[12/19/06|02:34] C:\DOCUME~1\PREFER~1\APPLIC~1\<DIR> Yahoo!

--------------------\\ Scheduled Tasks located in C:\WINDOWS\Tasks

[09/26/09 12:23 PM][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[10/08/09 08:33 PM][--ah-----] C:\WINDOWS\tasks\SA.DAT
[08/04/04 07:00 AM][-r-h-c---] C:\WINDOWS\tasks\desktop.ini

--------------------\\ Listing Folders in C:\Program Files

[04/14/09|09:29] C:\Program Files\<DIR> 2nd Story Software
[01/05/07|11:07] C:\Program Files\<DIR> AC3Filter
[12/25/04|08:01] C:\Program Files\<DIR> ACD Systems
[06/24/09|06:58] C:\Program Files\<DIR> Adobe
[03/22/08|11:21] C:\Program Files\<DIR> AdorageI-GfxDatas
[01/26/08|04:20] C:\Program Files\<DIR> AdorageI-SAL
[06/28/09|07:41] C:\Program Files\<DIR> Advanced System Optimizer
[01/06/07|08:57] C:\Program Files\<DIR> Ahead
[09/19/08|06:09] C:\Program Files\<DIR> Apple Software Update
[01/28/07|11:42] C:\Program Files\<DIR> ArcSoft
[12/07/05|08:39] C:\Program Files\<DIR> Arial Sound Recorder
[10/05/09|02:35] C:\Program Files\<DIR> a-squared Free
[03/15/07|09:27] C:\Program Files\<DIR> Audacity
[10/08/09|09:12] C:\Program Files\<DIR> Avast4
[10/05/09|06:41] C:\Program Files\<DIR> AVG
[01/26/08|05:12] C:\Program Files\<DIR> BIAS
[04/22/09|10:19] C:\Program Files\<DIR> Bonjour
[12/01/05|11:23] C:\Program Files\<DIR> Broderbund
[11/21/05|06:19] C:\Program Files\<DIR> Canon
[10/04/09|01:26] C:\Program Files\<DIR> CCleaner
[10/02/08|10:08] C:\Program Files\<DIR> Citrix
[10/08/09|06:54] C:\Program Files\<DIR> Common Files
[12/21/04|01:49] C:\Program Files\<DIR> ComPlus Applications
[12/04/06|06:54] C:\Program Files\<DIR> Digital Camera Utility
[01/13/09|10:56] C:\Program Files\<DIR> DVD Shrink
[08/12/09|06:25] C:\Program Files\<DIR> DVD Shrink 3.1
[09/28/09|05:29] C:\Program Files\<DIR> DVDFab 6
[07/27/05|08:26] C:\Program Files\<DIR> Electronic Arts
[05/02/09|07:08] C:\Program Files\<DIR> EMSI Software A Squared
[10/06/09|10:35] C:\Program Files\<DIR> ERUNT
[01/09/08|10:27] C:\Program Files\<DIR> Fraunhofer IIS
[08/12/08|10:22] C:\Program Files\<DIR> Games
[08/20/07|08:49] C:\Program Files\<DIR> Google
[10/19/06|09:22] C:\Program Files\<DIR> Hewlett-Packard
[03/22/05|09:58] C:\Program Files\<DIR> HighMAT CD Writing Wizard
[10/05/09|10:41] C:\Program Files\<DIR> HijackThis
[10/19/06|09:28] C:\Program Files\<DIR> HP Photosmart 11
[02/11/05|11:47] C:\Program Files\<DIR> ICRAplus
[08/12/09|05:56] C:\Program Files\<DIR> InstallShield Installation Information
[03/08/09|07:05] C:\Program Files\<DIR> Intel
[07/29/09|11:19] C:\Program Files\<DIR> Internet Explorer
[09/20/09|08:22] C:\Program Files\<DIR> iPod
[09/30/09|09:23] C:\Program Files\<DIR> iTunes
[10/06/09|07:05] C:\Program Files\<DIR> Java
[12/04/06|09:34] C:\Program Files\<DIR> Kodak
[06/23/08|07:08] C:\Program Files\<DIR> Lavasoft
[10/08/09|08:28] C:\Program Files\<DIR> LimeWire
[03/05/05|09:12] C:\Program Files\<DIR> Logitech
[09/29/09|07:37] C:\Program Files\<DIR> Malwarebytes' Anti-Malware
[09/15/05|09:23] C:\Program Files\<DIR> Mediostream
[12/24/08|01:33] C:\Program Files\<DIR> Messenger
[12/21/04|03:51] C:\Program Files\<DIR> Microsoft ActiveSync
[05/08/07|09:06] C:\Program Files\<DIR> Microsoft CAPICOM 2.1.0.2
[12/21/04|01:52] C:\Program Files\<DIR> microsoft frontpage
[02/22/05|10:54] C:\Program Files\<DIR> Microsoft Office
[12/01/05|11:16] C:\Program Files\<DIR> Microsoft Picture It! 7
[09/09/09|03:41] C:\Program Files\<DIR> Microsoft Silverlight
[12/24/08|01:26] C:\Program Files\<DIR> Movie Maker
[03/29/07|05:46] C:\Program Files\<DIR> movieshop
[02/02/09|07:47] C:\Program Files\<DIR> MSBuild
[12/04/06|10:26] C:\Program Files\<DIR> MSECACHE
[12/24/08|01:26] C:\Program Files\<DIR> msn
[12/21/04|01:48] C:\Program Files\<DIR> MSN Gaming Zone
[08/14/07|09:01] C:\Program Files\<DIR> MSXML 4.0
[12/15/05|10:33] C:\Program Files\<DIR> MUSICMATCH
[01/07/08|11:12] C:\Program Files\<DIR> NCH Swift Sound
[01/02/07|07:27] C:\Program Files\<DIR> Nero
[12/24/08|01:23] C:\Program Files\<DIR> NetMeeting
[01/04/05|09:15] C:\Program Files\<DIR> Netopia
[05/30/05|01:32] C:\Program Files\<DIR> Netscape
[12/29/04|10:00] C:\Program Files\<DIR> OLYMPUS
[07/13/05|07:19] C:\Program Files\<DIR> Online Services
[08/12/09|07:54] C:\Program Files\<DIR> Outlook Express
[12/14/06|11:08] C:\Program Files\<DIR> PENTAX
[11/15/06|09:53] C:\Program Files\<DIR> Photo Finale
[01/26/08|03:44] C:\Program Files\<DIR> Pinnacle
[01/26/08|04:40] C:\Program Files\<DIR> proDAD
[09/20/09|08:20] C:\Program Files\<DIR> QuickTime
[02/02/09|07:47] C:\Program Files\<DIR> Reference Assemblies
[10/06/09|06:15] C:\Program Files\<DIR> Registrar Registry Manager
[03/31/09|07:38] C:\Program Files\<DIR> Roxio
[09/20/09|09:00] C:\Program Files\<DIR> Safari
[12/23/05|07:56] C:\Program Files\<DIR> Samsung
[12/21/04|02:44] C:\Program Files\<DIR> Sonic
[10/05/09|06:13] C:\Program Files\<DIR> SUPERAntiSpyware
[01/29/08|08:44] C:\Program Files\<DIR> SystemRequirementsLab
[12/25/04|08:03] C:\Program Files\<DIR> Trellix Corporation
[02/11/05|10:04] C:\Program Files\<DIR> triCerat
[12/21/04|01:56] C:\Program Files\<DIR> Uninstall Information
[11/30/05|07:19] C:\Program Files\<DIR> VIA Technologies, Inc
[01/06/07|09:36] C:\Program Files\<DIR> VideoLAN
[12/01/05|11:35] C:\Program Files\<DIR> Web Publish
[02/28/05|09:23] C:\Program Files\<DIR> Webroot
[07/05/08|05:34] C:\Program Files\<DIR> Western Digital
[07/05/08|05:34] C:\Program Files\<DIR> Western Digital Technologies
[12/04/06|06:53] C:\Program Files\<DIR> WinClamAVShield
[10/05/09|09:15] C:\Program Files\<DIR> Windows Desktop Search
[12/04/06|10:28] C:\Program Files\<DIR> Windows Installer Clean Up
[03/22/05|09:58] C:\Program Files\<DIR> Windows Journal Viewer
[08/20/07|08:35] C:\Program Files\<DIR> Windows Live Safety Center
[01/31/08|10:56] C:\Program Files\<DIR> Windows Live Toolbar
[12/22/06|04:45] C:\Program Files\<DIR> Windows Media Connect 2
[03/08/09|07:15] C:\Program Files\<DIR> Windows Media Player
[12/24/08|01:23] C:\Program Files\<DIR> Windows NT
[04/04/07|07:02] C:\Program Files\<DIR> Windows XP Setup Disks
[12/05/06|09:46] C:\Program Files\<DIR> Windows XP Video Decoder Checkup Utility
[12/21/04|01:50] C:\Program Files\<DIR> WindowsUpdate
[03/01/05|07:30] C:\Program Files\<DIR> WinZip
[12/21/04|01:52] C:\Program Files\<DIR> xerox
[11/07/05|09:54] C:\Program Files\<DIR> Yahoo!

--------------------\\ Listing Folders in C:\Program Files\Common Files

[06/24/09|06:58] C:\Program Files\Common Files\<DIR> Adobe
[01/06/07|08:55] C:\Program Files\Common Files\<DIR> Ahead
[09/12/09|06:43] C:\Program Files\Common Files\<DIR> Apple
[03/25/09|10:56] C:\Program Files\Common Files\<DIR> BitDefender
[12/01/05|11:23] C:\Program Files\Common Files\<DIR> Broderbund
[01/14/07|10:57] C:\Program Files\Common Files\<DIR> Corel
[12/21/04|03:51] C:\Program Files\Common Files\<DIR> Designer
[02/20/05|11:26] C:\Program Files\Common Files\<DIR> efax
[12/25/04|07:57] C:\Program Files\Common Files\<DIR> Hewlett-Packard
[10/07/09|06:17] C:\Program Files\Common Files\<DIR> InstallShield
[03/09/05|01:28] C:\Program Files\Common Files\<DIR> Java
[12/27/04|08:14] C:\Program Files\Common Files\<DIR> Logitech
[10/05/09|06:41] C:\Program Files\Common Files\<DIR> Microsoft Shared
[05/02/08|08:11] C:\Program Files\Common Files\<DIR> Motorola Shared
[12/21/04|01:50] C:\Program Files\Common Files\<DIR> MSSoap
[12/31/01|07:42] C:\Program Files\Common Files\<DIR> ODBC
[12/21/04|01:50] C:\Program Files\Common Files\<DIR> Services
[01/02/07|07:27] C:\Program Files\Common Files\<DIR> Simple Star Shared
[03/31/09|07:38] C:\Program Files\Common Files\<DIR> Sonic Shared
[12/31/01|07:42] C:\Program Files\Common Files\<DIR> SpeechEngines
[03/31/09|07:38] C:\Program Files\Common Files\<DIR> SureThing Shared
[08/21/07|08:35] C:\Program Files\Common Files\<DIR> Symantec Shared
[12/24/08|01:23] C:\Program Files\Common Files\<DIR> System
[10/04/09|09:06] C:\Program Files\Common Files\<DIR> Wise Installation Wizard

--------------------\\ Process

( 34 Processes )

IEXPLORE.EXE ~ [PID:3364]
IEXPLORE.EXE ~ [PID:3500]
IEXPLORE.EXE ~ [PID:2764]

--------------------\\ Searching with S_Lop

No Lop folder found !

--------------------\\ Searching for Lop Files - Folders

C:\DOCUME~1\PREFER~1\Cookies\preferred_customer@advertising[2].txt

--------------------\\ Searching within the Registry

..... OK !

--------------------\\ Checking the Hosts file

Hosts file CLEAN


--------------------\\ Searching for hidden files with Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-08 20:41:36
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Searching for other infections


No other infections found !

[F:3][D:2]-> C:\DOCUME~1\PREFER~1\LOCALS~1\Temp
[F:185][D:0]-> C:\DOCUME~1\PREFER~1\Cookies
[F:151][D:4]-> C:\DOCUME~1\PREFER~1\LOCALS~1\TEMPOR~1\content.IE5

1 - "C:\Lop SD\LopR_1.txt" - 10/08/09|20:43 - Option : [1]

--------------------\\ Scan completed at 20:43:49

[heir]

Let's remove some leftovers from Limwire and do a couple of scans.

Step 1.
OTL-fix:

Run OTL.exe

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  

  :Files
  C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire
  C:\Program Files\LimeWire
  :Commands
  [purity]
  [emptytemp]
  [start explorer]
  [Reboot]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot when it is done
• Then post the OTL fixlog

Step 2.
Scan with MBAM:

Please download Malwarebytes' Anti-Malware from Here

Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.


Step 3.
Scan with Kaspersky Online Scanner:

Please do an online scan with Kaspersky Online Scanner

Kaspersky online scanner uses JAVA tecnology to perform the scan. If you do not have the latest JAVA version, follow the instrutions below under Upgrading Java, to download and install the latest vesion.

• Read through the requirements and privacy statement and click on Accept button.
• It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
• When the downloads have finished, click on Settings.
• Make sure the following is checked.
  
  • Spyware, Adware, Dialers, and other potentially dangerous programs
    Archives
    Mail databases
• Click on My Computer under Scan.
• Once the scan is complete, it will display the results. Click on View Scan Report.
• You will see a list of infected items there. Click on Save Report As....
• Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
• Please post this log in your next reply.

Upgrading Java:

Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version of Java components and upgrade the application. Beware it is NOT supported for use in 9x or ME and probably will not install in those systems

Upgrading Java:

• Download the latest version of Java SE Runtime Environment (JRE)JRE 6 Update 16.
• Click the "Download" button to the right.
• Select your Platform and check the box that says: "I agree to the Java SE Runtime Environment 6 License Agreement.".
• Click on Continue.
• Click on the link to download Windows Offline Installation (jre-6u16-windows-i586-p.exe) and save it to your desktop. Do NOT use the Sun Download Manager..
• Close any programs you may have running - especially your web browser.
• Go to Start > Control Panel, double-click on Add/Remove programs and remove all older versions of Java.
• Check any item with Java Runtime Environment (JRE or J2SE) in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each Java version.
• Reboot your computer once all Java components are removed.
• Then from your desktop double-click on the download to install the newest version.(Vista users, right click on the jre-6u16-windows-i586-p.exe and select "Run as an Administrator.")

Step 4.
Things I would like to see in your reply:

• The content of the fixlog from OTL from Step 1.
• The content of the report from MBAM from Step 2.
• The content of the report from Kaspersky Online Scanner from Step 3.

[Mahocker]

Here are the requested reports:

All processes killed
========== FILES ==========
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\xml\data moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\xml moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\themes\windows_theme moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\themes moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\promotion moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\mozilla-profile\updates\0 moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\mozilla-profile\updates moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\mozilla-profile\extensions moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\mozilla-profile\Cache(2) moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\mozilla-profile\Cache moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\mozilla-profile moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\certificate moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\res\html moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\res\fonts moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\res\entityTables moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\res\dtd moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\res moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\plugins moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\modules moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\greprefs moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\dictionaries moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\defaults\profile\US\chrome moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\defaults\profile\US moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\defaults\profile\chrome moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\defaults\profile moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\defaults\pref moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\defaults\autoconfig moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\defaults moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\components moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner\chrome moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser\xulrunner moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\browser moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire\.AppSpecialShare moved successfully.
C:\DOCUME~1\PREFER~1\APPLIC~1\LimeWire moved successfully.
C:\Program Files\LimeWire\lib moved successfully.
C:\Program Files\LimeWire moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
File delete failed. C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 33170 bytes

User: Preferred Customer
->Temp folder emptied: 726 bytes
File delete failed. C:\Documents and Settings\Preferred Customer\Local Settings\Temporary Internet Files\Content.IE5\J4MRPS1O\Google-Search-Redirect-Virus-t254823[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Preferred Customer\Local Settings\Temporary Internet Files\Content.IE5\J4MRPS1O\iframe[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Preferred Customer\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Preferred Customer\Local Settings\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat scheduled to be deleted on reboot.
->Temporary Internet Files folder emptied: 17116007 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Apple Safari cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5c0.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_7c8.dat scheduled to be deleted on reboot.
Windows Temp folder emptied: 33432 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 16.42 mb


OTL by OldTimer - Version 3.0.18.4 log created on 10092009_062433

Files\Folders moved on Reboot...
C:\Documents and Settings\Preferred Customer\Local Settings\Temporary Internet Files\Content.IE5\J4MRPS1O\Google-Search-Redirect-Virus-t254823[1].htm moved successfully.
C:\Documents and Settings\Preferred Customer\Local Settings\Temporary Internet Files\Content.IE5\J4MRPS1O\iframe[1].htm moved successfully.
C:\Documents and Settings\Preferred Customer\Local Settings\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.
File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
File\Folder C:\WINDOWS\temp\Perflib_Perfdata_5c0.dat not found!
File\Folder C:\WINDOWS\temp\Perflib_Perfdata_7c8.dat not found!

Registry entries deleted on Reboot...




Malwarebytes' Anti-Malware 1.41
Database version: 2928
Windows 5.1.2600 Service Pack 3

10/09/09 06:59:17 AM
mbam-log-2009-10-09 (06-59-17).txt

Scan type: Quick Scan
Objects scanned: 103558
Time elapsed: 5 minute(s), 23 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)




--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0: scan report
Friday, October 9, 2009
Operating system: Microsoft Windows XP Home Edition Service Pack 3 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Friday, October 09, 2009 14:21:16
Records in database: 2941074
--------------------------------------------------------------------------------

Scan settings:
scan using the following database: extended
Scan archives: yes
Scan e-mail databases: yes

Scan area - My Computer:
C:\
D:\

Scan statistics:
Objects scanned: 122287
Threats found: 0
Infected objects found: 0
Suspicious objects found: 0
Scan duration: 05:06:20

No threats found. Scanned area is clean.

Selected area has been scanned.

[heir]

Hey there, Mahocker !

OK! Well done, your log is clean again!

Time for some housekeeping.

Step 1.
Clean up:

We need to do is to remove all the tools that you have used. This is so that should you ever be re-infected, you will download updated versions. It will also remove the quarantined Malware from your computer.

First:

• Click START then RUN
• Now type UMahocker /u in the runbox and click OK. Note the space between the r and the /u, it needs to be there.
  

Second:

Double-click OTL.exe to start it.
Click the CleanUp button
Click Yes to the reboot.

Now delete any tools/logs that is left over after you ran OTL CleanUp.


Step 2.
Prevention:

OK, lets carry out a few preventative steps to make sure you reduce the risk of further infections.

First:
Older versions of Adobe Acrobat Reader are vulnerable to attack.

Please go to the link below to download an update.

http://www.adobe.com.../readstep2.html

Remove the older versions and install the latest,


Second:
One of the essentials is to keep your computer updated with the latest operating system patches and security fixes. Windows Updates are constantly being revised to combat the newest hacks and threats, Microsoft releases security updates that help your computer from becoming vunerable. It is best if you have these set to download automatically.

Automatic Updates for Windows

• Click Start.
• Select Settings and then Control Panel.
• Select Automatic Updates.
• Click Automatic (recommended)
• Choose a day and a time when you know the computer will be on and connected to the internet.
• Click Apply then OK.

Third:
Now lets download some preventative programs that will help to keep the nasties away! We will start with Anti Spyware programs. I would advise getting a couple of them at least, and running each at least once a month.

Anti Spyware

• SpywareBlaster to help prevent spyware from installing in the first place. A tutorial can be found here.
• SpywareGuard to catch and block spyware before it can execute. A tutorial can be found here.
• IESpy-Ad to block access to malicious websites so you cannot be redirected to them from an infected site or email. A tutorial can be found here

.
Note: If you find your system slows down after installing any of these, just uninstall it, or disable it from running at startup.


Fourth:
Next lets look at Firewalls. These help to prevent unauthorised access both to and from the internet or your local network. A firewall is considered a first line of defense in protecting private information. Below are two free firewalls to choose from, if you do not already have one. Note: You only need one firewall one your system.

Personal Firewalls

• Comodo is a free fully functional firewall
• Online Armor (Free edition) personal firewall

Fifth:
On to personal Anti Virus programs.

One AV is a must have! But never more than one, as this can and will cause conflicts and false readings. I have listed three free AV's below which are as good as any paid subscription AV, as long as you allow them to update themselves.

Anti Virus Programs

• avast! 4 Home Edition an excellent free AV.
• AVG Anti-Virus Free Edition 8.5 is free for personal use.
• Avira AntiVir PersonalEdition, yet another good free AV.

Sixth:
Nearly done! If you like to use chat, MSN and Yahoo have vunerabilities that can leave you open to infections. There are however a couple of very good, Malware free Instant Messenger programs which allow you to connect to multiple IM services in one program! (AOL, Yahoo, ICQ, IRC, MSN):

Instant Messengers

• Trillian or,
• Miranda-IM

Lastly:
To find out more information about how you got infected in the first place and some great guidelines to follow to prevent future infections you can read this article by Tony Klein.


I will keep this log open for the next couple of days, so if you have any further problems post another reply here.

OK, all the best, and stay safe!

Edited by heir, 09 October 2009 - 08:59 PM.
typo

[heir]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.