Search-Control window pop ups

[bobhoskins]

Hello,
I am constantly getting ULWindow pop ups advertising Search-Control and have tried the various anti spyware tools to no avail.
I have run a HiJack This scan and the log file is as follows:

Logfile of HijackThis v1.99.1
Scan saved at 18:20:48, on 16/06/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
C:\Program Files\Belkin\Belkin Wireless Network Utility\WLanCfgG.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\Program Files\Sony\HotKey Utility\HKserv.exe
C:\Program Files\Sony\Jog Dial Utility\JogServ2.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\1146c3e.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\PowerPanel\Program\PcfMgr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\notepad.exe
C:\Documents and Settings\Tanya\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = prosearching.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = prosearching.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dilbert.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = prosearching.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.sony-europe.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = prosearching.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = prosearching.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = prosearching.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchURL = prosearching.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = prosearching.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = prosearching.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = prosearching.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page_bak = prosearching.com
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [HKSERV.EXE] C:\Program Files\Sony\HotKey Utility\HKserv.exe
O4 - HKLM\..\Run: [JOGSERV2.EXE] C:\Program Files\Sony\Jog Dial Utility\JogServ2.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [1146c3e.exe] C:\WINDOWS\system32\1146c3e.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [1146c3e.exe] C:\Documents and Settings\Tanya\Local Settings\Application Data\1146c3e.exe
O4 - HKCU\..\Run: [Jwrdmcg] C:\DOCUME~1\Tanya\APPLIC~1\ICROSO~1\WNLOGO~1.EXE
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: PowerPanel.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.sony-europe.com
O15 - Trusted Zone: *.Sony-europe.com
O15 - Trusted Zone: *.Sonystyle-europe.com
O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} - http://yax-download.yazzle.net/Yazzl...cab?refid=1123
O16 - DPF: {97B79133-88F0-45F0-8D57-0F2EF27D9C66} - http://85.255.114.166/1/rdgGB2404.exe
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{60EBC886-20A7-4577-BE45-0AD0EA81381E}: NameServer = 192.168.2.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: alg.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Belkin Wireless USB Network Adapter (Belkin Wireless USB Network Adapter Service) - Unknown owner - C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe

[/size]

Any help on clearing up this problem would be greatly appreciated.

[greyknight17]

Welcome to TSF.

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

Please download Ewido Security Suite at http://www.ewido.net/en/download/.

1. Install Ewido Security Suite.
2. When installing, under 'Additional Options' uncheck:
* Install background guard
* Install scan via context menu
3. Launch Ewido, there should be an icon on your desktop, double click it.
4. The program will now open to the main screen.
5. When you run Ewido for the first time, you might get a warning 'Database could not be found!'. Click OK. We will fix this in a moment.
6. You will need to update Ewido to the latest definition files.
* On the left hand side of the main screen click update.
* Then click on start update.
7. The update will start and a progress bar will show the updates being installed. The status bar at the bottom will display 'Update successful'.
8. Exit Ewido. DO NOT scan yet.

If you are having problems with the updater, you can go to http://www.ewido.net/en/download/updates/ to update manually.

Download CleanUp! http://cleanup.stevengould.org/ (Alternate Link if main link don't work - http://www.greyknight17.com/spy/CleanUp.exe ) and install it. Don't run it yet.

Restart your computer and boot into Safe Mode (if you don't know how, go to http://www.bleepingcomputer.com/foru...howtutorial=61 ).

Run a scan in HijackThis. Check each of the following if they still exist and hit 'Fix Checked' after you check the last one:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = prosearching.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = prosearching.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = prosearching.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = prosearching.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = prosearching.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = prosearching.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchURL = prosearching.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = prosearching.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = prosearching.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = prosearching.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page_bak = prosearching.com
O4 - HKLM\..\Run: [1146c3e.exe] C:\WINDOWS\system32\1146c3e.exe
O4 - HKCU\..\Run: [1146c3e.exe] C:\Documents and Settings\Tanya\Local Settings\Application Data\1146c3e.exe
O4 - HKCU\..\Run: [Jwrdmcg] C:\DOCUME~1\Tanya\APPLIC~1\ICROSO~1\WNLOGO~1.EXE
O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} - http://yax-download.yazzle.net/Yazzl...cab?refid=1123
O16 - DPF: {97B79133-88F0-45F0-8D57-0F2EF27D9C66} - http://85.255.114.166/1/rdgGB2404.exe
O20 - AppInit_DLLs: alg.dll

Locate and delete the following:

C:\WINDOWS\system32\1146c3e.exe
C:\Documents and Settings\Tanya\Local Settings\Application Data\1146c3e.exe
C:\DOCUME~1\Tanya\APPLIC~1\ICROSO~1\
alg.dll

CleanUp! deletes EVERYTHING out of your temp/temporary folders, it does not make backups. If you have any documents or programs that are saved in any Temporary Folders, please make a backup of these before running CleanUp!. Run CleanUp! and click on the Options button. Uncheck 'Scan local drives for temporary files'. Also uncheck those two Newsgroup entries if you don't want to delete them. Click OK and then click on the CleanUp! button. Let it run. After it's done, choose Yes to logoff.

Run Ewido now:
* Click on scanner and then Settings. Under 'What to scan' select 'Scan every file' and hit OK.
* Click on 'Complete System Scan' and the scan will begin.
* While the scan is in progress you will be prompted to clean the first infected file it finds. Choose 'Remove', then put a check next to 'Perform action with all infections' in the left corner of the box so you don't have to sit and watch Ewido the whole time. Click OK.
* Once the scan has completed, there will be a button located on the bottom of the screen named 'Save report'.
* Click 'Save report'. Save it to your desktop.

Restart your computer to get back to Normal Mode. Post the Ewido report and a new HijackThis log here.

[bobhoskins]

Thanks for all your help, everything seems fine now.

Logfile of HijackThis v1.99.1
Scan saved at 22:17:02, on 17/06/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
C:\Program Files\Belkin\Belkin Wireless Network Utility\WLanCfgG.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sony\HotKey Utility\HKserv.exe
C:\Program Files\Sony\Jog Dial Utility\JogServ2.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\PowerPanel\Program\PcfMgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Tanya\Desktop\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dilbert.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.sony-europe.com
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [HKSERV.EXE] C:\Program Files\Sony\HotKey Utility\HKserv.exe
O4 - HKLM\..\Run: [JOGSERV2.EXE] C:\Program Files\Sony\Jog Dial Utility\JogServ2.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: PowerPanel.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.sony-europe.com
O15 - Trusted Zone: *.Sony-europe.com
O15 - Trusted Zone: *.Sonystyle-europe.com
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{60EBC886-20A7-4577-BE45-0AD0EA81381E}: NameServer = 192.168.2.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Belkin Wireless USB Network Adapter (Belkin Wireless USB Network Adapter Service) - Unknown owner - C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe



---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 22:01:46, 17/06/2006
+ Report-Checksum: 4104D69B

+ Scan result:

HKLM\SOFTWARE\AKSoft -> Adware.AkSoft : Cleaned with backup
HKLM\SOFTWARE\AKSoft\X-Tractor -> Adware.AkSoft : Cleaned with backup
[224] C:\WINDOWS\system32\wincpj32.dll -> Trojan.Agent.vg : Cleaned with backup
:mozilla.7:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.8:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.9:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.12:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
:mozilla.13:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.14:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.15:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.16:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.17:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.20:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.21:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.22:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.23:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.24:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.25:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.26:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.27:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.29:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.34:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.36:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.38:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.40:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.41:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.42:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.43:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.111:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Epilot : Cleaned with backup
:mozilla.131:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Starware : Cleaned with backup
:mozilla.160:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned with backup
:mozilla.189:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.190:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.191:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.200:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.204:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.205:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.206:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.207:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.208:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.209:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.210:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.211:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.212:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.214:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.215:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.218:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.219:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.224:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.225:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.226:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.228:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.229:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.234:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup
:mozilla.235:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup
:mozilla.237:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.243:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.247:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned with backup
:mozilla.248:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned with backup
:mozilla.253:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned with backup
:mozilla.259:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.260:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.262:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.270:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.276:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.277:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.285:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.292:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.294:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.320:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.321:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.354:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.361:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.376:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.378:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup
:mozilla.384:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.392:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.420:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.422:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.432:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Starware : Cleaned with backup
:mozilla.440:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.441:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.443:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Starware : Cleaned with backup
:mozilla.493:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.511:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.520:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.526:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.533:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.534:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.543:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.569:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup
:mozilla.570:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup
:mozilla.571:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.579:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.581:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.582:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.583:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.584:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.586:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.587:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.588:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.589:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.590:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.592:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.598:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.599:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.600:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.601:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.604:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.605:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.609:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.610:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.611:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.612:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.615:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.636:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.642:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup
:mozilla.646:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.656:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.657:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.659:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.668:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.672:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.675:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Adviva : Cleaned with backup
:mozilla.689:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned with backup
:mozilla.690:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.691:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.692:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.693:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.694:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.695:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.698:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.701:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.705:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.706:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.707:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.708:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.709:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.710:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.732:C:\Documents and Settings\Tanya\Application Data\Netscape\NSB\Profiles\dz0q0urz.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
C:\WINDOWS\system32\wincpj32.dll -> Trojan.Agent.vg : Cleaned with backup
C:\WINDOWS\system32\wvuurol.dll -> Adware.Virtumonde : Cleaned with backup


::Report End

[greyknight17]

Your log is clean.

To help prevent future spyware infections, read the Anti-Spyware Tutorial and use the tools provided.

No problem. Glad we could help.