|
|||||||
| Malware Removal Discussion about Trojans, viruses, hoaxes, firewalls, spyware, and general Security issues. If you suspect your PC is infected with a virus, trojan or spyware app please include any supporting documentation or logs |
 |
|
|
Topic Tools |
|
#1
September 15th, 2006, 03:40 PM
|
||||
|
||||
Popups
Not exactly sure when this got through, but Firefox opens itself every few minutes, and links to a site. I can only assume something has infected me. Please help! Hijack log posted.
Logfile of HijackThis v1.99.1 Scan saved at 8:40:19 AM, on 9/15/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\ewido anti-malware\ewidoctrl.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\wdfmgr.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\WgaTray.exe C:\WINDOWS\system32\devldr32.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\WINDOWS\System32\LVComsX.exe C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\msco rsvw.exe C:\Program Files\Winamp\Winamp.exe c:\nwnmff_e4.exe C:\WINDOWS\U3RldmUgTydNYWM\command.exe c:\dfndrff_e4.exe c:\kybrdff_e4.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Diablo II\Game.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\HijackThis 1.99.1\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchbar.findthewebsiteyouneed.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gamefaqs.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.com O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [newname] c:\\nwnmff_e4.exe O4 - HKLM\..\Run: [defender] c:\\dfndrff_e4.exe O4 - HKLM\..\Run: [keyboard] c:\\kybrdff_e4.exe O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm O9 - Extra button: AOL Instant Messenger (TM) - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=48835 O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com...45/yacscom.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsof...?1126456986640 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1126456981796 O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/pro...anner37240.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: {A1426AC5-8CE5-4A00-B71E-011D35709AC6} (Progetto1.int_ver34) - http://advnt01.com/dialer/int_ver34.CAB O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab O16 - DPF: {FFFF0001-0001-101A-A3C9-08002B2F49FC} - http://download.energy-factor.com/di...ex_3793_it.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{AC50A957-B617-4470-AE47-9C20BB43931F}: NameServer = 64.59.135.133,64.59.135.135 O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: Reliability - C:\WINDOWS\system32\wunsock.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing) O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\U3RldmUgTydNYWM\command.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Print Spooler (Spooler) - Unknown owner - C:\WINDOWS\system32\spoolsv.exe (file missing) O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe 
|
|
#2
September 15th, 2006, 05:03 PM
|
|||
|
|||
|
Hi Jackal403,
* Please download Look2Me-Destroyer.exe to your desktop.
If you receive a message from your firewall about this program accessing the internet please allow it. If you receive a runtime error '339' please download MSWINSCK.OCX from the link below and place it in your C:\Windows\System32 Directory. http://www.ascentive.com/support/new...b/MSWINSCK.OCX * 1. Please download Ewido Anti-Malware
ewido manual updates 2. Please download Brute Force Uninstaller to your desktop.
Save it in the same folder you made earlier (c:\BFU). Do not do anything with these yet! Reboot your computer into Safe Mode. You can do this by restarting your computer and continually tapping F8 until a menu appears. Highlight Safe Mode and hit enter. 4. Once in Safe Mode, Open Ewido:
5. Then, please go to Start > My Computer and navigate to the C:\BFU folder.
|
or whatever your primary drive is
and select alcanshorty.bfu|
#3
September 15th, 2006, 08:32 PM
|
||||
|
||||
|
---------------------------------------------------------
ewido anti-malware - Scan report --------------------------------------------------------- + Created on: 1:14:51 PM, 9/15/2006 + Report-Checksum: 7724F778 + Scan result: [800] C:\WINDOWS\system32\wbsdmoe2.dll -> Adware.Look2Me : Error during cleaning [856] C:\WINDOWS\system32\sqmpsnap.dll -> Adware.Look2Me : Cleaned with backup C:\!KillBox\ddccy.dll -> Adware.Virtumonde : Cleaned with backup C:\client.exe -> Backdoor.VB.ann : Cleaned with backup :mozilla.6:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.7:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.8:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.9:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.10:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.11:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.13:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.14:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.15:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Cpvfeed : Cleaned with backup :mozilla.16:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.17:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.18:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.19:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Cpvfeed : Cleaned with backup :mozilla.20:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Cpvfeed : Cleaned with backup :mozilla.21:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Cpvfeed : Cleaned with backup :mozilla.31:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Doubleclick : Cleaned with backup :mozilla.32:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.66:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Mediaplex : Cleaned with backup :mozilla.68:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Mediaplex : Cleaned with backup :mozilla.90:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.91:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.92:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.93:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.94:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.95:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.102:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Goclick : Cleaned with backup :mozilla.103:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Goclick : Cleaned with backup :mozilla.113:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Qksrv : Cleaned with backup :mozilla.116:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Qksrv : Cleaned with backup :mozilla.135:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Adbrite : Cleaned with backup :mozilla.136:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Adbrite : Cleaned with backup :mozilla.137:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Adbrite : Cleaned with backup :mozilla.153:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Falkag : Cleaned with backup :mozilla.154:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Falkag : Cleaned with backup :mozilla.155:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Falkag : Cleaned with backup :mozilla.156:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Falkag : Cleaned with backup :mozilla.168:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.169:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.170:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.171:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.172:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.173:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.174:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Euroclick : Cleaned with backup :mozilla.175:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Euroclick : Cleaned with backup :mozilla.176:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Euroclick : Cleaned with backup :mozilla.177:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Euroclick : Cleaned with backup :mozilla.178:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Euroclick : Cleaned with backup :mozilla.183:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup :mozilla.184:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup :mozilla.185:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup :mozilla.186:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup :mozilla.207:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.208:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.209:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.210:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.212:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.213:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.214:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.217:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Revenue : Cleaned with backup :mozilla.218:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Revenue : Cleaned with backup :mozilla.219:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.220:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.221:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.222:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.223:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.224:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.225:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.253:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.254:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.255:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.256:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.257:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.258:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.259:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.260:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.261:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.262:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.263:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.264:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.265:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.266:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.267:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.268:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.269:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.270:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.271:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.272:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.273:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.274:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.275:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.276:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.277:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.278:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.279:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.280:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.281:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.282:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.283:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.284:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.285:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.286:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.297:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.298:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.299:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.300:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.301:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.302:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Adbrite : Cleaned with backup :mozilla.305:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Adbrite : Cleaned with backup :mozilla.309:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Valuead : Cleaned with backup :mozilla.310:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Valuead : Cleaned with backup :mozilla.311:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Valuead : Cleaned with backup :mozilla.312:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Valuead : Cleaned with backup :mozilla.313:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Valuead : Cleaned with backup :mozilla.314:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Valuead : Cleaned with backup :mozilla.315:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Valuead : Cleaned with backup :mozilla.320:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Adserver : Cleaned with backup
|
|
#4
September 15th, 2006, 08:34 PM
|
||||
|
||||
|
:mozilla.321:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.322:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.323:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.324:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.326:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Linksynergy : Cleaned with backup :mozilla.327:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Linksynergy : Cleaned with backup :mozilla.378:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup :mozilla.396:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Adbrite : Cleaned with backup :mozilla.397:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Adbrite : Cleaned with backup :mozilla.405:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Targetnet : Cleaned with backup :mozilla.420:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup :mozilla.421:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup :mozilla.439:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Coremetrics : Cleaned with backup :mozilla.440:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.443:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.444:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.445:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.446:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.447:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.453:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.466:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hotlog : Cleaned with backup :mozilla.470:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.471:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.472:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.473:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.475:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.476:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.477:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.482:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.483:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.484:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.509:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Cqcounter : Cleaned with backup :mozilla.525:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Bluestreak : Cleaned with backup :mozilla.526:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.529:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Belstat : Cleaned with backup :mozilla.530:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Belstat : Cleaned with backup :mozilla.531:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Belstat : Cleaned with backup :mozilla.539:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.540:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.541:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.542:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.543:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.544:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.546:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.548:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.549:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.554:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.555:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.556:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.557:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.558:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.559:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.560:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.562:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.563:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.564:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.565:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.566:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.567:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.568:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.569:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.570:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.571:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.572:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.573:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.574:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.576:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Masterstats : Cleaned with backup :mozilla.608:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.614:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Adtech : Cleaned with backup :mozilla.615:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Adtech : Cleaned with backup :mozilla.619:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.625:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.631:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Burstbeacon : Cleaned with backup :mozilla.632:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Burstnet : Cleaned with backup :mozilla.633:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Burstnet : Cleaned with backup :mozilla.639:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Cqcounter : Cleaned with backup :mozilla.648:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Smartadserver : Cleaned with backup :mozilla.649:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Smartadserver : Cleaned with backup :mozilla.650:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Smartadserver : Cleaned with backup :mozilla.655:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Valueclick : Cleaned with backup :mozilla.656:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Valueclick : Cleaned with backup :mozilla.681:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.682:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.683:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.684:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.685:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.688:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Overture : Cleaned with backup :mozilla.689:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Overture : Cleaned with backup :mozilla.690:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.691:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.697:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Overture : Cleaned with backup :mozilla.757:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Clickhype : Cleaned with backup :mozilla.785:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Bfast : Cleaned with backup :mozilla.793:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Trafic : Cleaned with backup :mozilla.796:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.797:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.798:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.799:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Specificclick : Cleaned with backup :mozilla.800:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.835:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.850:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.878:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.880:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.881:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.891:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.907:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.918:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.919:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.920:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.921:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.922:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.952:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Googleadservices : Cleaned with backup :mozilla.954:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.955:C:\Documents and Settings\Steve\Application Data\Mozilla\Firefox\Profiles\93g7k9c9.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@247realmedia[1].txt -> TrackingCookie.247realmedia : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@adopt.euroclick[1].txt -> TrackingCookie.Euroclick : Cleaned with backup
|
|
#5
September 15th, 2006, 08:34 PM
|
||||
|
||||
|
C:\Documents and Settings\Steve\Cookies\steve@adrevolver[2].txt -> TrackingCookie.Adrevolver : Cleaned with backup
C:\Documents and Settings\Steve\Cookies\steve@ads.addynamix[2].txt -> TrackingCookie.Addynamix : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@ads0.revenue[1].txt -> TrackingCookie.Revenue : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@ads01.revenue[2].txt -> TrackingCookie.Revenue : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@advertising[2].txt -> TrackingCookie.Advertising : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@as-us.falkag[1].txt -> TrackingCookie.Falkag : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@c5.zedo[1].txt -> TrackingCookie.Zedo : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@casalemedia[1].txt -> TrackingCookie.Casalemedia : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@com[1].txt -> TrackingCookie.Com : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@data2.perf.overture[1].txt -> TrackingCookie.Overture : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@doubleclick[2].txt -> TrackingCookie.Doubleclick : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@ehg-ubisoft.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@login.tracking101[1].txt -> TrackingCookie.Tracking101 : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@media.adrevolver[1].txt -> TrackingCookie.Adrevolver : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@microsoftwga.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@perf.overture[1].txt -> TrackingCookie.Overture : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@pmads.valuead[1].txt -> TrackingCookie.Valuead : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@reduxads.valuead[2].txt -> TrackingCookie.Valuead : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@revenue[1].txt -> TrackingCookie.Revenue : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@targetnet[1].txt -> TrackingCookie.Targetnet : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@www.popuptraffic[1].txt -> TrackingCookie.Popuptraffic : Cleaned with backup C:\Documents and Settings\Steve\Cookies\steve@zedo[2].txt -> TrackingCookie.Zedo : Cleaned with backup C:\Documents and Settings\Steve\Local Settings\Temp\Cookies\steve@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup C:\Documents and Settings\Steve\Local Settings\Temp\mstCB.tmp -> Trojan.Klone.g : Cleaned with backup C:\drsmartload.exe -> Downloader.Adload.fg : Cleaned with backup C:\drsmartload45a45w.exe -> Downloader.Adload.ds : Cleaned with backup C:\drsmartload46a46w.exe -> Downloader.Adload.ds : Cleaned with backup C:\drsmartload849a849w.exe -> Downloader.Adload.ds : Cleaned with backup C:\Installer4.exe -> Adware.Look2Me : Cleaned with backup C:\MTE3NDI6ODoxNg.exe -> Downloader.Small.buy : Cleaned with backup C:\Program Files\Common Files\Real\WeatherBug\MiniBugTransporter.dll -> Adware.Minibug : Cleaned with backup C:\Program Files\Common Files\Uninstall Information\RemoveWebDP.exe -> Adware.DelphinMediaViewer : Cleaned with backup C:\Program Files\Deskbar\deskbar.dll -> Adware.Softomate : Cleaned with backup C:\Program Files\HijackThis 1.99.1\backups\backup-20060211-201027-709.dll -> Dialer.VB.j : Cleaned with backup C:\Program Files\HijackThis 1.99.1\backups\backup-20060211-211023-582.dll -> Adware.Virtumonde : Cleaned with backup C:\Program Files\HijackThis 1.99.1\backups\backup-20060211-211023-771.dll -> Adware.MediaTickets : Cleaned with backup C:\Program Files\HijackThis 1.99.1\backups\backup-20060212-181209-150.dll -> Adware.Virtumonde : Cleaned with backup C:\Program Files\HijackThis 1.99.1\backups\backup-20060212-181307-126.dll -> Adware.Virtumonde : Cleaned with backup C:\Program Files\HijackThis 1.99.1\backups\backup-20060212-181511-770.dll -> Adware.Virtumonde : Cleaned with backup C:\Program Files\HijackThis 1.99.1\backups\backup-20060212-181520-697.dll -> Adware.Virtumonde : Cleaned with backup C:\Program Files\HijackThis 1.99.1\backups\backup-20060212-181537-411.dll -> Adware.Virtumonde : Cleaned with backup C:\Program Files\HijackThis 1.99.1\backups\backup-20060212-181825-927.dll -> Adware.Virtumonde : Cleaned with backup C:\Program Files\HijackThis 1.99.1\backups\backup-20060212-182231-299.dll -> Adware.Virtumonde : Cleaned with backup C:\Program Files\HijackThis 1.99.1\backups\backup-20060212-182240-467.dll -> Adware.Virtumonde : Cleaned with backup C:\Program Files\HijackThis 1.99.1\backups\backup-20060219-172250-928.dll -> Adware.PurityScan : Cleaned with backup C:\Program Files\HijackThis 1.99.1\backups\backup-20060219-172251-443.dll -> Adware.WinAD : Cleaned with backup C:\Program Files\HijackThis 1.99.1\backups\backup-20060219-172252-685.dll -> Dialer.VB.j : Cleaned with backup C:\Program Files\Network Monitor\netmon.exe -> Not-A-Virus.Monitor.Win32.NetMon.a : Cleaned with backup C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UWFX6_0001_N68M2301NetInstaller.e xe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Cleaned with backup C:\WINDOWS\Downloaded Program Files\CONFLICT.10\UWFX6_0001_N68M2301NetInstaller. exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Cleaned with backup C:\WINDOWS\Downloaded Program Files\CONFLICT.11\UWFX6_0001_N68M2301NetInstaller. exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Cleaned with backup C:\WINDOWS\Downloaded Program Files\CONFLICT.12\UWFX6_0001_N68M2301NetInstaller. exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Cleaned with backup C:\WINDOWS\Downloaded Program Files\CONFLICT.2\UWFX6_0001_N68M2301NetInstaller.e xe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Cleaned with backup C:\WINDOWS\Downloaded Program Files\CONFLICT.3\UWFX6_0001_N68M2301NetInstaller.e xe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Cleaned with backup C:\WINDOWS\Downloaded Program Files\CONFLICT.4\UWFX6_0001_N68M2301NetInstaller.e xe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Cleaned with backup C:\WINDOWS\Downloaded Program Files\CONFLICT.5\UWFX6_0001_N68M2301NetInstaller.e xe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Cleaned with backup C:\WINDOWS\Downloaded Program Files\CONFLICT.6\UWFX6_0001_N68M2301NetInstaller.e xe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Cleaned with backup C:\WINDOWS\Downloaded Program Files\CONFLICT.7\UWFX6_0001_N68M2301NetInstaller.e xe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Cleaned with backup C:\WINDOWS\Downloaded Program Files\CONFLICT.8\UWFX6_0001_N68M2301NetInstaller.e xe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Cleaned with backup C:\WINDOWS\Downloaded Program Files\CONFLICT.9\UWFX6_0001_N68M2301NetInstaller.e xe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Cleaned with backup C:\WINDOWS\Downloaded Program Files\int_ver34.ocx -> Dialer.VB.j : Cleaned with backup C:\WINDOWS\Downloaded Program Files\UWA6P_0001_N68M2301NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Cleaned with backup C:\WINDOWS\Downloaded Program Files\UWFX6_0001_N68M2301NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Cleaned with backup C:\WINDOWS\mtuninst.exe -> Adware.MediaTickets : Cleaned with backup C:\WINDOWS\system32\mѕdtc.exe -> Adware.PurityScan : Cleaned with backup C:\WINDOWS\system32\s488lelu1hq8.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\sqmpsnap.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\system32\woaudsdk.dll -> Adware.Look2Me : Cleaned with backup C:\WINDOWS\U3RldmUgTydNYWM\asappsrv.dll -> Adware.CommAd : Cleaned with backup C:\WINDOWS\U3RldmUgTydNYWM\command.exe -> Adware.CommAd : Cleaned with backup ::Report End
|
|
#6
September 15th, 2006, 08:35 PM
|
||||
|
||||
|
Logfile of HijackThis v1.99.1
Scan saved at 1:34:53 PM, on 9/15/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\ewido anti-malware\ewidoctrl.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\WINDOWS\system32\WgaTray.exe C:\WINDOWS\system32\devldr32.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\Program Files\HijackThis 1.99.1\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gamefaqs.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm O9 - Extra button: AOL Instant Messenger (TM) - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=48835 O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com...45/yacscom.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsof...?1126456986640 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1126456981796 O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/pro...anner37240.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: {A1426AC5-8CE5-4A00-B71E-011D35709AC6} (Progetto1.int_ver34) - http://advnt01.com/dialer/int_ver34.CAB O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab O16 - DPF: {FFFF0001-0001-101A-A3C9-08002B2F49FC} - http://download.energy-factor.com/di...ex_3793_it.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{AC50A957-B617-4470-AE47-9C20BB43931F}: NameServer = 64.59.135.133,64.59.135.135 O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: ModuleUsage - C:\WINDOWS\system32\wbsdmoe2.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing) O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Print Spooler (Spooler) - Unknown owner - C:\WINDOWS\system32\spoolsv.exe (file missing) O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
|
|
#7
September 15th, 2006, 09:21 PM
|
|||
|
|||
|
Hi Jackal403,
Looks better. * Please install an antivirus program from here: http://www.cybertechhelp.com/download/section/antivirus I suggest AVG as you have Zone Alarm. Perform a whole scan and let it quarantine or delete all it finds. * Launch again Look2me-Destroyer. * Post back its report as well as a new hijackthis log, please.
|
|
#8
September 15th, 2006, 10:15 PM
|
||||
|
||||
|
They Look2me-Destroyer has not worked for me yet. I've tried multiple times, rebooting and trying again, trying in safe mode, with my firewall disabled, and it has not rebooted itself after selecting to run it as a task.
|
|
#9
September 15th, 2006, 10:40 PM
|
|||
|
|||
|
Hi,
* Download L2mfix from one of these two locations: http://www.downloads.subratam.org/l2mfix.exe http://www.atribune.org/downloads/l2mfix.exe Save the file to your desktop and double click l2mfix.exe. Click the Install button to extract the files and follow the prompts, then open the newly added l2mfix folder on your desktop. Double click l2mfix.bat and select option #1 for Run Find Log by typing 1 and then pressing enter. This will scan your computer and it may appear nothing is happening, then, after a minute or 2, notepad will open with a log. Copy the contents of that log and paste it into this thread. IMPORTANT: Do NOT run option #2 OR any other files in the l2mfix folder until you are asked to do so! if you receive, while running option #1, an error similar like: ''C:\windows\system32\cmd.exe, C:\windows\system32\autoexec.nt the system file is not suitable for running ms-dos and microsoft windows applications. choose close to terminate the application.."...then please use option 5 or the web page link in the l2mfix folder to solve this error condition. do not run the fix portion without fixing this first.
|
|
#10
September 15th, 2006, 10:45 PM
|
||||
|
||||
|
L2MFIX find log 051206
These are the registry keys present ************************************************** ******************************** Winlogon/notify: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] "DLLName"="Ati2evxx.dll" "Asynchronous"=dword:00000000 "Impersonate"=dword:00000001 "Lock"="AtiLockEvent" "Logoff"="AtiLogoffEvent" "Logon"="AtiLogonEvent" "Disconnect"="AtiDisConnectEvent" "Reconnect"="AtiReConnectEvent" "Safe"=dword:00000000 "Shutdown"="AtiShutdownEvent" "StartScreenSaver"="AtiStartScreenSaverEvent" "StartShell"="AtiStartShellEvent" "Startup"="AtiStartupEvent" "StopScreenSaver"="AtiStopScreenSaverEvent" "Unlock"="AtiUnLockEvent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain] "Asynchronous"=dword:00000000 "Impersonate"=dword:00000000 "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33, 00,32,00,2e,00,64,00,6c,00,\ 6c,00,00,00 "Logoff"="ChainWlxLogoffEvent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet] "Asynchronous"=dword:00000000 "Impersonate"=dword:00000000 "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e, 00,65,00,74,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Logoff"="CryptnetWlxLogoffEvent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll] "DLLName"="cscdll.dll" "Logon"="WinlogonLogonEvent" "Logoff"="WinlogonLogoffEvent" "ScreenSaver"="WinlogonScreenSaverEvent" "Startup"="WinlogonStartupEvent" "Shutdown"="WinlogonShutdownEvent" "StartShell"="WinlogonStartShellEvent" "Impersonate"=dword:00000000 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Reinstall] "Asynchronous"=dword:00000000 "DllName"="C:\\WINDOWS\\system32\\s4880eluehq80.dl l" "Impersonate"=dword:00000000 "Logon"="WinLogon" "Logoff"="WinLogoff" "Shutdown"="WinShutdown" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp] "DLLName"="wlnotify.dll" "Logon"="SCardStartCertProp" "Logoff"="SCardStopCertProp" "Lock"="SCardSuspendCertProp" "Unlock"="SCardResumeCertProp" "Enabled"=dword:00000001 "Impersonate"=dword:00000001 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule] "Asynchronous"=dword:00000000 "DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69, 00,66,00,79,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Impersonate"=dword:00000000 "StartShell"="SchedStartShell" "Logoff"="SchedEventLogOff" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy] "Logoff"="WLEventLogoff" "Impersonate"=dword:00000000 "Asynchronous"=dword:00000001 "DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74, 00,66,00,79,00,2e,00,64,00,\ 6c,00,6c,00,00,00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn] "DLLName"="WlNotify.dll" "Lock"="SensLockEvent" "Logon"="SensLogonEvent" "Logoff"="SensLogoffEvent" "Safe"=dword:00000001 "MaxWait"=dword:00000258 "StartScreenSaver"="SensStartScreenSaverEvent" "StopScreenSaver"="SensStopScreenSaverEvent" "Startup"="SensStartupEvent" "Shutdown"="SensShutdownEvent" "StartShell"="SensStartShellEvent" "PostShell"="SensPostShellEvent" "Disconnect"="SensDisconnectEvent" "Reconnect"="SensReconnectEvent" "Unlock"="SensUnlockEvent" "Impersonate"=dword:00000001 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv] "Asynchronous"=dword:00000000 "DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69, 00,66,00,79,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Impersonate"=dword:00000000 "Logoff"="TSEventLogoff" "Logon"="TSEventLogon" "PostShell"="TSEventPostShell" "Shutdown"="TSEventShutdown" "StartShell"="TSEventStartShell" "Startup"="TSEventStartup" "MaxWait"=dword:00000258 "Reconnect"="TSEventReconnect" "Disconnect"="TSEventDisconnect" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] "Logon"="WLEventLogon" "Logoff"="WLEventLogoff" "Startup"="WLEventStartup" "Shutdown"="WLEventShutdown" "StartScreenSaver"="WLEventStartScreenSaver" "StopScreenSaver"="WLEventStopScreenSaver" "Lock"="WLEventLock" "Unlock"="WLEventUnlock" "StartShell"="WLEventStartShell" "PostShell"="WLEventPostShell" "Disconnect"="WLEventDisconnect" "Reconnect"="WLEventReconnect" "Impersonate"=dword:00000001 "Asynchronous"=dword:00000000 "SafeMode"=dword:00000001 "MaxWait"=dword:ffffffff "DllName"=hex(2):57,00,67,00,61,00,4c,00,6f,00,67, 00,6f,00,6e,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Event"=dword:00000000 "InstallNotifyShown"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon\Setting s] "Data"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c, 7a,00,c0,4f,c2,97,eb,01,00,\ 00,00,9d,d3,4b,fa,57,b4,a1,43,ab,f1,23,18,e7,89,01 ,24,04,00,00,00,04,00,00,\ 00,53,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00 ,09,12,4e,34,3c,18,85,04,\ 57,c6,70,cc,41,1b,6a,fb,00,00,00,00,04,80,00,00,a0 ,00,00,00,10,00,00,00,ff,\ 36,58,48,86,14,9b,15,39,41,27,1a,2b,fd,fe,9e,18,02 ,00,00,52,62,4c,8c,a3,b6,\ b2,22,b8,1e,f6,9d,d5,a1,77,b3,21,65,06,53,fc,25,01 ,79,e2,88,b9,f6,a7,4b,40,\ 03,4c,fc,c3,f1,4f,6b,f1,15,0d,05,2b,ac,c0,58,3c,85 ,7b,ca,c7,47,b2,36,b0,0a,\ 9a,bf,66,b0,1a,bf,b2,20,8f,ee,56,2c,d0,a4,ab,33,27 ,49,bf,98,3d,54,3c,65,b1,\ 36,85,e1,07,e1,dc,f3,cc,20,b6,bd,d6,a1,55,9f,9e,95 ,39,48,9d,b9,82,73,9d,80,\ b6,e5,72,9e,6b,bb,d5,69,08,a3,26,3b,57,cb,bb,c5,4e ,78,bb,ef,e5,ca,fd,3c,68,\ 66,d4,4f,3c,79,0e,6d,57,1e,c1,7b,6a,79,90,a1,9a,91 ,b0,bf,1e,7c,f8,b0,7e,12,\ c1,c4,d1,78,92,7c,31,8f,63,bb,67,d5,bb,d7,f6,aa,1c ,63,76,f5,ee,f6,28,8d,23,\ 9b,ce,11,c6,81,65,dc,c3,03,28,d6,5d,c7,87,87,86,09 ,26,f4,69,b4,84,bd,ea,7b,\ 95,20,b1,a9,01,ea,53,81,ba,bb,24,ac,9e,ae,32,72,c9 ,48,3b,25,72,7b,74,ce,45,\ 28,f4,2f,7c,13,b6,c2,8a,b3,48,d6,a5,36,bc,83,98,8c ,fb,ac,ea,be,3f,f8,48,d1,\ 81,b1,a4,a5,5f,b2,d7,4f,98,af,bb,b6,35,11,16,57,50 ,f2,3a,20,7c,8f,80,d0,1c,\ 62,3e,5d,21,0c,53,29,d9,b5,46,00,28,d4,69,f3,74,26 ,ff,10,60,3f,5c,40,70,b0,\ b3,70,d0,46,71,15,39,b0,85,d1,9e,78,c7,d5,49,47,13 ,31,75,42,92,7d,7a,8a,96,\ 13,d0,ed,5e,50,ce,81,27,5c,9a,b7,fe,08,68,14,de,d1 ,bf,a3,d9,9e,dd,ce,2c,29,\ 04,51,95,5d,77,fd,5e,b5,17,27,98,e8,79,aa,0d,49,e8 ,c7,fa,a1,47,66,94,43,f3,\ f6,d8,62,aa,79,df,88,2a,0d,93,bc,b2,8f,7d,17,55,b0 ,01,7f,cd,46,4e,e4,4b,7d,\ 3f,21,11,08,c0,1d,33,7b,9d,6d,fe,d4,c2,5e,c2,9d,bf ,30,2a,58,12,ee,6e,f9,6d,\ 0d,97,ac,05,0e,17,87,7f,b3,91,e8,45,26,e3,76,a4,57 ,cc,c6,f2,2c,46,44,67,18,\ 12,c5,f4,e6,5c,0f,d0,81,67,bd,49,af,a4,9b,57,03,be ,62,b4,89,81,39,e7,b3,e2,\ 17,59,d0,fd,74,99,bf,1f,81,c3,05,7d,85,e2,2e,08,03 ,08,9b,fb,38,b7,34,dc,c2,\ 25,92,5b,80,67,8e,4e,87,db,33,62,53,48,fb,9a,6f,55 ,29,55,b7,5d,0b,d8,9e,66,\ a9,cd,a7,7d,6b,14,00,00,00,6f,55,d6,ee,08,9e,ae,52 ,3f,33,e2,35,83,4f,a7,81,\ 1b,f3,38,43
|
|
#11
September 15th, 2006, 10:46 PM
|
||||
|
||||
|
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
"DLLName"="wlnotify.dll" "Logon"="RegisterTicketExpiredNotificationEven t" "Logoff"="UnregisterTicketExpiredNotificationEvent " "Impersonate"=dword:00000001 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WRNotifier] "Asynchronous"=dword:00000000 "DllName"="WRLogonNTF.dll" "Impersonate"=dword:00000001 "Lock"="WRLock" "StartScreenSaver"="WRStartScreenSaver" "StartShell"="WRStartShell" "Startup"="WRStartup" "StopScreenSaver"="WRStopScreenSaver" "Unlock"="WRUnlock" "Shutdown"="WRShutdown" "Logoff"="WRLogoff" "Logon"="WRLogon" ************************************************** ******************************** useragent: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Internet Settings\User Agent\Post Platform] "{5F4CAC28-CD69-258F-C53B-54F472BBAA51}"="" ************************************************** ******************************** Shell Extension key: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Shell Extensions\Approved] "{00022613-0000-0000-C000-000000000046}"="Multimedia File Property Sheet" "{176d6597-26d3-11d1-b350-080036a75b03}"="ICM Scanner Management" "{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="NTFS Security Page" "{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="OLE Docfile Property Page" "{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Shell extensions for sharing" "{41E300E0-78B6-11ce-849B-444553540000}"="PlusPack CPL Extension" "{42071712-76d4-11d1-8b24-00a0c9068ff3}"="Display Adapter CPL Extension" "{42071713-76d4-11d1-8b24-00a0c9068ff3}"="Display Monitor CPL Extension" "{42071714-76d4-11d1-8b24-00a0c9068ff3}"="Display Panning CPL Extension" "{4E40F770-369C-11d0-8922-00A024AB2DBB}"="DS Security Page" "{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"="Compatibility Page" "{56117100-C0CD-101B-81E2-00AA004AE837}"="Shell Scrap DataHandler" "{59099400-57FF-11CE-BD94-0020AF85B590}"="Disk Copy Extension" "{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Shell extensions for Microsoft Windows Network objects" "{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="ICM Monitor Management" "{675F097E-4C4D-11D0-B6C1-0800091AA605}"="ICM Printer Management" "{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Shell extensions for file compression" "{77597368-7b15-11d0-a0c2-080036af3f03}"="Web Printer Shell Extension" "{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI" "{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Encryption Context Menu" "{85BBD920-42A0-1069-A2E4-08002B30309D}"="Briefcase" "{88895560-9AA2-1069-930E-00AA0030EBC8}"="HyperTerminal Icon Ext" "{BD84B380-8CA2-1069-AB1D-08000948F534}"="Fonts" "{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="ICC Profile" "{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Printers Security Page" "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Shell extensions for sharing" "{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension" "{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Crypto PKO Extension" "{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Crypto Sign Extension" "{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="Network Connections" "{992CFFA0-F557-101A-88EC-00DD010CCC48}"="Network Connections" "{E211B736-43FD-11D1-9EFB-0000F8757FCD}"="Scanners & Cameras" "{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}"="Scanners & Cameras" "{905667aa-acd6-11d2-8080-00805f6596d2}"="Scanners & Cameras" "{3F953603-1008-4f6e-A73A-04AAC7A992F1}"="Scanners & Cameras" "{83bbcbf3-b28a-4919-a5aa-73027445d672}"="Scanners & Cameras" "{F0152790-D56E-4445-850E-4F3117DB740C}"="Remote Sessions CPL Extension" "{5F327514-6C5E-4d60-8F16-D07FA08A78ED}"="Auto Update Property Sheet Extension" "{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Shell extensions for Windows Script Host" "{2206CDB2-19C1-11D1-89E0-00C04FD7A829}"="Microsoft Data Link" "{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler" "{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension" "{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Scheduled Tasks" "{0DF44EAA-FF21-4412-828E-260A8728E7F1}"="Taskbar and Start Menu" "{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"="Search" "{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"="Help and Support" "{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}"="Help and Support" "{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"="Run..." "{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}"="Internet" "{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}"="E-mail" "{D20EA4E1-3957-11d2-A40B-0C5020524152}"="Fonts" "{D20EA4E1-3957-11d2-A40B-0C5020524153}"="Administrative Tools" "{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}"="Audio Media Properties Handler" "{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}"="Video Media Properties Handler" "{E4B29F9D-D390-480b-92FD-7DDB47101D71}"="Wav Properties Handler" "{87D62D94-71B3-4b9a-9489-5FE6850DC73E}"="Avi Properties Handler" "{A6FD9E45-6E44-43f9-8644-08598F5A74D9}"="Midi Properties Handler" "{c5a40261-cd64-4ccf-84cb-c394da41d590}"="Video Thumbnail Extractor" "{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Microsoft Internet Toolbar" "{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="Download Status" "{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Augmented Shell Folder" "{6413BA2C-B461-11d1-A18A-080036B11A03}"="Augmented Shell Folder 2" "{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy" "{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Microsoft BrowserBand" "{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Search Band" "{32683183-48a0-441b-a342-7c2a440a9478}"="Media Band" "{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="In-pane search" "{07798131-AF23-11d1-9111-00A0C98BA67D}"="Web Search" "{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Registry Tree Options Utility" "{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Address" "{A08C11D2-A228-11d0-825B-00AA005B4383}"="Address EditBox" "{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Microsoft AutoComplete" "{7376D660-C583-11d0-A3A5-00C04FD706EC}"="TridentImageExtractor" "{6756A641-DE71-11d0-831B-00AA005B4383}"="MRU AutoComplete List" "{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"="Custom MRU AutoCompleted List" "{7e653215-fa25-46bd-a339-34a2790f3cb7}"="Accessible" "{acf35015-526e-4230-9596-becbe19f0ac9}"="Track Popup Bar" "{E0E11A09-5CB8-4B6C-8332-E00720A168F2}"="Address Bar Parser" "{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Microsoft History AutoComplete List" "{03C036F1-A186-11D0-824A-00AA005B4383}"="Microsoft Shell Folder AutoComplete List" "{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Microsoft Multiple AutoComplete List Container" "{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Shell Band Site Menu" "{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp" "{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Shell DeskBar" "{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite" "{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="User Assist" "{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="Global Folder Settings" "{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band" "{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service" "{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer" "{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}"="Microsoft Browser Architecture" "{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut" "{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft Url History Service" "{FF393560-C2A7-11CF-BFF4-444553540000}"="History" "{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files" "{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files" "{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Search Hook" "{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="IE4 Suite Splash Screen" "{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook" "{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC" "{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC" "{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="The Internet" "{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space" "{EFA24E64-B078-11d0-89E4-00C04FC9E26E}"="Explorer Band" "{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service" "{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service" "{88C6C381-2E85-11D0-94DE-444553540000}"="ActiveX Cache Folder" "{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck" "{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr" "{F5175861-2688-11d0-9C5E-00AA00A45957}"="Subscription Folder" "{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler" "{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent" "{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent" "{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent" "{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent" "{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent" "{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler" "{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Shell Application Manager" "{0B124F8F-91F0-11D1-B8B5-006008059382}"="Installed Apps Enumerator" "{CFCCC7A0-A282-11D1-9082-006008059382}"="Darwin App Publisher" "{e84fda7c-1d6a-45f6-b725-cb260c236066}"="Shell Image Verbs" "{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}"="Shell Image Data Factory" "{3F30C968-480A-4C6C-862D-EFC0897BB84B}"="GDI+ file thumbnail extractor" "{9DBD2C50-62AD-11d0-B806-00C04FD706EC}"="Summary Info Thumbnail handler (DOCFILES)" "{EAB841A0-9550-11cf-8C16-00805F1408F3}"="HTML Thumbnail Extractor" "{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}"="Shell Image Property Handler" "{CC6EEFFB-43F6-46c5-9619-51D571967F7D}"="Web Publishing Wizard" "{add36aa8-751a-4579-a266-d66f5202ccbb}"="Print Ordering via the Web" "{6b33163c-76a5-4b6c-bf21-45de9cd503a1}"="Shell Publishing Wizard Object" "{58f1f272-9240-4f51-b6d4-fd63d1618591}"="Get a Passport Wizard" "{7A9D77BD-5403-11d2-8785-2E0420524153}"="User Accounts" "{BD472F60-27FA-11cf-B8B4-444553540000}"="Compressed (zipped) Folder Right Drag Handler" "{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}"="Compressed (zipped) Folder SendTo Target" "{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Channel File" "{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Channel Shortcut" "{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Channel Handler Object" "{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu" "{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties" "{63da6ec0-2e98-11cf-8d82-444553540000}"="FTP Folders Webview" "{883373C3-BF89-11D1-BE35-080036B11A03}"="Microsoft DocProp Shell Ext" "{A9CF0EAE-901A-4739-A481-E35B73E47F6D}"="Microsoft DocProp Inplace Edit Box Control" "{8EE97210-FD1F-4B19-91DA-67914005F020}"="Microsoft DocProp Inplace ML Edit Box Control" "{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}"="Microsoft DocProp Inplace Droplist Combo Control" "{6A205B57-2567-4A2C-B881-F787FAB579A3}"="Microsoft DocProp Inplace Calendar Control" "{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}"="Microsoft DocProp Inplace Time Control" "{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI" "{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object" "{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find" "{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find" "{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI" "{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs" "{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook" "{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target" "{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties" "{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Offline Files Menu" "{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Offline Files Folder Options" "{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Offline Files Folder" "{143A62C8-C33B-11D1-84FE-00C04FA34A14}"="Microsoft Agent Character Property Sheet Handler" "{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}"="DfsShell" "{60fd46de-f830-4894-a628-6fa81bc0190d}"="%DESC_PublishDropTarget%" "{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler" "{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer" "{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler" "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler" "{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler" "{32714800-2E5F-11d0-8B85-00AA0044F941}"="For &People..." "{E0D79304-84BE-11CE-9641-444553540000}"="WinZip" "{E0D79305-84BE-11CE-9641-444553540000}"="WinZip" "{E0D79306-84BE-11CE-9641-444553540000}"="WinZip" "{E0D79307-84BE-11CE-9641-444553540000}"="WinZip" "{640167b4-59b0-47a6-b335-a6b3c0695aea}"="Portable Media Devices" "{cc86590a-b60a-48e6-996b-41d25ed39a1e}"="Portable Media Devices Menu" "{BDEADF00-C265-11D0-BCED-00A0C90AB50F}"="Web Folders" "{42042206-2D85-11D3-8CFF-005004838597}"="Microsoft Office HTML Icon Handler" "{400CFEE2-39D0-46DC-96DF-E0BB5A4324B3}"="My Logitech Pictures" "{1D2680C9-0E2A-469d-B787-065558BC7D43}"="Fusion Cache" "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"="WinRAR shell extension" "{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}"="Shell Extensions for RealOne Player" "{5464D816-CF16-4784-B9F3-75C0DB52B499}"="Yahoo! Mail" "{2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}"="Set Program Access and Defaults" "{596AB062-B4D2-4215-9F74-E9109B0A8153}"="Previous Versions Property Page" "{9DB7A13C-F208-4981-8353-73CC61AE2783}"="Previous Versions" "{692F0339-CBAA-47e6-B5B5-3B84DB604E87}"="Extensions Manager Folder" "{21569614-B795-46b1-85F4-E737A8DC09AD}"="Shell Search Band" "{e82a2d71-5b2f-43a0-97b8-81be15854de8}"="ShellLink for Application References" "{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}"="Shell Icon Handler for Application References" "{E302C3CA-FDCD-486F-A324-7B558974A376}"="" "{9F97547E-4609-42C5-AE0C-81C61FFAEBC3}"="AVG7 Shell Extension" "{9F97547E-460A-42C5-AE0C-81C61FFAEBC3}"="AVG7 Find Extension" ************************************************** ******************************** HKEY ROOT CLASSIDS: Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{E302C3CA-FDCD-486F-A324-7B558974A376}] @="" [HKEY_CLASSES_ROOT\CLSID\{E302C3CA-FDCD-486F-A324-7B558974A376}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{E302C3CA-FDCD-486F-A324-7B558974A376}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{E302C3CA-FDCD-486F-A324-7B558974A376}\InprocServer32] @="C:\\WINDOWS\\system32\\ijrop.dll" "ThreadingModel"="Apartment" ************************************************** ******************************** Files Found are not all bad files:
|
|
#12
September 15th, 2006, 10:48 PM
|
||||
|
||||
|
C:\WINDOWS\SYSTEM32\
atmtd.dll Fri Sep 15 2006 8:22:02a A.... 687,592 671.48 K browseui.dll Fri Jun 23 2006 5:02:50a A.... 1,022,976 999.00 K cdfview.dll Fri Jun 23 2006 5:02:50a A.... 151,040 147.50 K ciodm.dll Wed Jun 21 2006 11:06:30p A.... 69,120 67.50 K cmdlin~1.dll Sun Sep 10 2006 9:12:18p A.... 98,304 96.00 K cmdlin~2.dll Fri Sep 15 2006 2:01:44p A.... 43,520 42.50 K danim.dll Fri Jun 23 2006 5:02:50a A.... 1,054,208 1.00 M divx.dll Mon Jul 3 2006 3:40:50p A.... 620,180 605.64 K divxwm~1.dll Wed Jun 21 2006 4:33:42a A.... 12,288 12.00 K divx_x~1.dll Mon Jul 3 2006 3:40:52p A.... 778,240 760.00 K divx_x~2.dll Mon Jul 3 2006 3:40:52p A.... 778,240 760.00 K divx_x~3.dll Mon Jul 3 2006 3:40:50p A.... 761,856 744.00 K dnsapi.dll Mon Jun 26 2006 11:37:10a A.... 148,480 145.00 K dpl100.dll Fri Aug 4 2006 9:37:38a A.... 73,728 72.00 K dpu10.dll Wed Jun 21 2006 4:34:22a A.... 294,912 288.00 K dpu11.dll Wed Jun 21 2006 4:34:22a A.... 294,912 288.00 K dpugui10.dll Wed Jun 21 2006 4:49:48a A.... 53,248 52.00 K dpugui11.dll Wed Jun 21 2006 4:34:22a A.... 593,920 580.00 K dpus11.dll Wed Jun 21 2006 4:34:22a A.... 344,064 336.00 K dpv11.dll Wed Jun 21 2006 4:34:22a A.... 57,344 56.00 K dtu100.dll Fri Aug 4 2006 9:37:38a A.... 196,608 192.00 K dxtmsft.dll Fri Jun 23 2006 5:02:50a A.... 357,888 349.50 K dxtrans.dll Fri Jun 23 2006 5:02:50a A.... 205,312 200.50 K extmgr.dll Fri Jun 23 2006 5:02:50a ..... 55,808 54.50 K fltlib.dll Mon Aug 21 2006 6:21:06a A.... 16,896 16.50 K gp0ml3~1.dll Fri Sep 15 2006 1:45:46p ..S.R 233,799 228.32 K hlink.dll Fri Jul 21 2006 2:24:44a A.... 72,704 71.00 K iepeers.dll Fri Jun 23 2006 5:02:50a A.... 251,392 245.50 K ijrop.dll Fri Sep 15 2006 1:45:48p ..S.R 236,274 230.73 K inetcomm.dll Thu Jul 27 2006 7:24:46a A.... 679,424 663.50 K inseng.dll Fri Jun 23 2006 5:02:50a A.... 96,256 94.00 K jsproxy.dll Fri Jun 23 2006 5:02:50a A.... 16,384 16.00 K kernel32.dll Wed Jul 5 2006 4:55:02a A.... 984,064 961.00 K legitc~1.dll Mon Jun 19 2006 4:19:42p A.... 571,184 557.80 K libdivx.dll Wed Jun 21 2006 4:42:58a A.... 1,044,480 1020.00 K libeay~1.dll Sun Jun 18 2006 5:54:08p A.... 796,584 777.91 K mshtml.dll Fri Jul 28 2006 5:28:54a A.... 3,054,080 2.91 M mshtmled.dll Fri Jun 23 2006 5:02:52a A.... 448,512 438.00 K msrating.dll Fri Jun 23 2006 5:02:52a A.... 146,432 143.00 K mstime.dll Fri Jun 23 2006 5:02:52a A.... 532,480 520.00 K netapi32.dll Fri Jul 14 2006 9:31:40a A.... 332,288 324.50 K pngfilt.dll Fri Jun 23 2006 5:02:52a A.... 39,424 38.50 K px.dll Wed Jul 26 2006 8:05:56p ..... 372,736 364.00 K pxdrv.dll Wed Jul 26 2006 8:05:56p ..... 421,888 412.00 K pxmas.dll Wed Jul 26 2006 8:05:56p ..... 172,032 168.00 K pxwave.dll Wed Jul 26 2006 8:05:54p ..... 339,968 332.00 K qt-dx331.dll Wed Jul 26 2006 8:06:00p A.... 3,596,288 3.43 M query.dll Wed Jun 21 2006 11:06:30p A.... 1,435,648 1.37 M rasadhlp.dll Mon Jun 26 2006 11:37:10a A.... 8,192 8.00 K s4880e~1.dll Fri Sep 15 2006 1:20:02p ..S.R 236,274 230.73 K shdocvw.dll Fri Jun 23 2006 5:02:52a A.... 1,494,016 1.42 M shell32.dll Thu Jul 13 2006 7:33:28a A.... 8,453,632 8.06 M shlwapi.dll Fri Jun 23 2006 5:02:52a A.... 474,112 463.00 K sintf16.dll Fri Sep 15 2006 8:27:16a A.... 12,067 11.78 K sintf32.dll Fri Sep 15 2006 8:27:16a A.... 17,212 16.81 K sintfnt.dll Fri Sep 15 2006 8:27:16a A.... 21,840 21.33 K ssldivx.dll Wed Jun 21 2006 4:42:58a A.... 200,704 196.00 K urlmon.dll Tue Jul 25 2006 2:33:40p A.... 613,888 599.50 K vsdata.dll Sun Jun 18 2006 5:54:18p A.... 83,960 81.99 K vsinit.dll Sun Jun 18 2006 5:54:20p A.... 157,688 153.99 K vsmonapi.dll Sun Jun 18 2006 5:54:20p A.... 104,440 101.99 K vspubapi.dll Sun Jun 18 2006 5:54:20p A.... 268,280 261.99 K vsregexp.dll Sun Jun 18 2006 5:54:22p A.... 71,672 69.99 K vsutil.dll Sun Jun 18 2006 5:54:22p A.... 440,312 429.99 K vswmi.dll Sun Jun 18 2006 5:54:24p A.... 59,384 57.99 K vsxml.dll Sun Jun 18 2006 5:54:24p A.... 100,344 97.99 K vxblock.dll Wed Jul 26 2006 8:05:54p ..... 28,672 28.00 K wgalogon.dll Mon Jun 19 2006 4:20:42p ..... 702,768 686.30 K wininet.dll Fri Jun 23 2006 5:02:52a A.... 658,944 643.50 K xpsp3res.dll Fri Jun 23 2006 2:34:36a A.... 24,576 24.00 K zlcomm.dll Sun Jun 18 2006 5:54:26p A.... 83,960 81.99 K zlcommdb.dll Sun Jun 18 2006 5:54:26p A.... 71,672 69.99 K 72 items found: 72 files (3 H/S), 0 directories. Total of file sizes: 39,033,614 bytes 37.22 M Locate .tmp files: No matches found. ************************************************** ******************************** Directory Listing of system files: Volume in drive C has no label. Volume Serial Number is 8CAB-CF7E Directory of C:\WINDOWS\System32 09/15/2006 01:45 PM 236,274 ijrop.dll 09/15/2006 01:45 PM 233,799 gp0ml3d11.dll 09/15/2006 01:20 PM 236,274 s4880eluehq80.dll 09/14/2006 07:41 PM <DIR> dllcache 02/19/2006 10:58 PM 246,469 qrqss.ini 02/19/2006 12:25 PM 245,086 qrqss.bak2 02/15/2006 06:12 PM 225,887 qrqss.bak1 09/11/2005 11:54 AM <DIR> Microsoft 6 File(s) 1,423,789 bytes 2 Dir(s) 1,321,299,968 bytes free
|
|
#13
September 15th, 2006, 10:48 PM
|
|||
|
|||
|
Hi,
* Close any programs you have open since this step requires a reboot. From the l2mfix folder on your desktop, double click l2mfix.bat and select option #2 for Run Fix by typing 2 and then pressing enter. It will process then start. Your desktop and icons will disappear (this is normal). L2mfix will continue to scan your computer and when it's finished, it will be ready for a reboot. Press any key to reboot. After the reboot notepad will open with a log. Copy the contents of that log and paste it back into this thread, along with a new hijackthis log. IMPORTANT: Do NOT run any other files in the l2mfix folder unless you are asked to do so! If after the reboot the log does not open double click on it in the l2mfix folder.
|
|
#14
September 15th, 2006, 11:23 PM
|
||||
|
||||
|
L2mfix 051206
Creating Account. The command completed successfully. Adding Administrative privleges. The command completed successfully. Checking for L2MFix account(0=no 1=yes): 1 Granting SeDebugPrivilege to L2MFIX ... successful Checking for L2MFix account(0=no 1=yes): 0 Zipping up files for submission: zip warning: name not matched: dlls\*.* zip error: Nothing to do! (backup.zip) adding: backregs/E302C3CA-FDCD-486F-A324-7B558974A376.reg (212 bytes security) (deflated 70%) adding: backregs/notibac.reg (140 bytes security) (deflated 83%) Logfile of HijackThis v1.99.1 Scan saved at 4:23:42 PM, on 9/15/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe C:\Program Files\ewido anti-malware\ewidoctrl.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\WgaTray.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\notepad.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\WINDOWS\system32\devldr32.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\HijackThis 1.99.1\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gamefaqs.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm O9 - Extra button: AOL Instant Messenger (TM) - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=48835 O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com...45/yacscom.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsof...?1126456986640 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1126456981796 O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - http://download.zonelabs.com/bin/pro...anner37240.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: {A1426AC5-8CE5-4A00-B71E-011D35709AC6} (Progetto1.int_ver34) - http://advnt01.com/dialer/int_ver34.CAB O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab O16 - DPF: {FFFF0001-0001-101A-A3C9-08002B2F49FC} - http://download.energy-factor.com/di...ex_3793_it.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{AC50A957-B617-4470-AE47-9C20BB43931F}: NameServer = 64.59.135.133,64.59.135.135 O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: Reinstall - C:\WINDOWS\system32\s4880eluehq80.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing) O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Print Spooler (Spooler) - Unknown owner - C:\WINDOWS\system32\spoolsv.exe (file missing) O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
|
|
#15
September 16th, 2006, 08:58 AM
|
|||
|
|||
|
Hi,
* Please download Combofix.exe here. Doubleclick on combofix.exe and follow the prompts. Your computer will be scanned and when the scan is finished, Disk Cleanup will run and then a log will popup. Copy the this log in your next reply together with a new hijackthis log.
|
|
| Bookmarks |
«
Previous Topic
|
Next Topic
»
|
|
Similar Topics
|
||||
| Topic | Topic Starter | Forum | Replies | Last Post |
| Need help with HJT log...Popups...Thx | garyz | Malware Removal | 2 | April 18th, 2008 10:04 AM |
| popups popups popups {Moved by PL} | Murrel | Malware Removal | 2 | December 23rd, 2007 08:14 PM |
| Can`t get popups!!!! | donovan211 | Windows XP | 5 | October 9th, 2006 10:08 AM |
| Getting popups | shelby | Malware Removal | 10 | June 17th, 2006 01:54 AM |
| Popups , Please Help | effect | Windows 98 | 2 | November 9th, 2004 04:16 PM |
All times are GMT +1. The time now is 01:37 AM.