Welcome to Tech Support Forum home to more then 136,000 problems solved. Issues have included: Spyware, Malware, Virus Issues, Windows, Microsoft, Linux, Networking, Security, Hardware, and Gaming Getting your problem solved is as easy as:
1. Registering for a free account
2. Asking your question
3. Receiving an answer

Registered members:
* Get free support
* Communicate privately with other members (PM).
* Removal of this message
* See fewer ads.
* And much more..

 



Want to know how to post a question? click here Having problems with spyware and pop-ups? First Steps
Go Back   Tech Support Forum > Security Center > Virus/Trojan/Spyware Help > Resolved HJT Threads
User Name
Password
Site Map Register Donate Rules Blogs Mark Forums Read


Resolved HJT Threads Resolved spyware and popup issues.

 
 
LinkBack Thread Tools
Old 10-01-2006, 01:21 AM   #1 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 23
OS: win xp pro


Send a message via AIM to smiffy2006 Send a message via Yahoo to smiffy2006
My hijackthis log

Glaswegian asked me in my other thread to make this log and post it here.My CPU is running at 100% almost constantly

P4 2.5ghz
1gig ddr ram.

Logfile of HijackThis v1.99.1
Scan saved at 08:18:48, on 01/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\Explorer.EXE
F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
F:\WINDOWS\System32\svchost.exe
F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
F:\Program Files\Windows Defender\MsMpEng.exe
F:\Documents and Settings\smiffy\Desktop\HijackThis.exe
F:\WINDOWS\system32\spoolsv.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/c...o/bt_side.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/c...o/bt_side.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=2057
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - F:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - F:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - F:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - F:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - F:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [kis] "F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [TkBellExe] "F:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SoundMAXPnP] F:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [LVCOMSX] F:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] F:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [HostManager] F:\Program Files\Common Files\AOL\1159554764\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [IPHSend] F:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
O4 - HKCU\..\Run: [msnmsgr] "F:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] "F:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [Aim6] "F:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-GB ee://aol/imApp
O4 - HKCU\..\Run: [BitTorrent] "F:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O8 - Extra context menu item: &Yahoo! Search - file:///F:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Add to Kaspersky Anti-Banner - F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\\ie_banner_deny.htm
O8 - Extra context menu item: Download All Files by HiDownload - F:\Program Files\HiDownload\HDGetAll.htm
O8 - Extra context menu item: Download by HiDownload - F:\Program Files\HiDownload\HDGet.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///F:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///F:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///F:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - F:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - F:\Program Files\Yahoo!\common\yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1153574671155
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "F:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: F:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: klogon - F:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - F:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - F:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - F:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: YPCService - Yahoo! Inc. - F:\WINDOWS\system32\YPCSER~1.EXE

this is my c/drive however i don't think this is my main drive,i believe i run from f/drive so here is a log for that to


Logfile of HijackThis v1.99.1
Scan saved at 08:25:37, on 01/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\Explorer.EXE
F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
F:\WINDOWS\System32\svchost.exe
F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
F:\Program Files\Windows Defender\MsMpEng.exe
F:\WINDOWS\system32\spoolsv.exe
F:\Documents and Settings\smiffy\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/c...o/bt_side.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/c...o/bt_side.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=2057
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - F:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - F:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - F:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - F:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - F:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [kis] "F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [TkBellExe] "F:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SoundMAXPnP] F:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [LVCOMSX] F:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] F:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [HostManager] F:\Program Files\Common Files\AOL\1159554764\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [IPHSend] F:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
O4 - HKCU\..\Run: [msnmsgr] "F:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] "F:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [Aim6] "F:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-GB ee://aol/imApp
O4 - HKCU\..\Run: [BitTorrent] "F:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O8 - Extra context menu item: &Yahoo! Search - file:///F:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Add to Kaspersky Anti-Banner - F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\\ie_banner_deny.htm
O8 - Extra context menu item: Download All Files by HiDownload - F:\Program Files\HiDownload\HDGetAll.htm
O8 - Extra context menu item: Download by HiDownload - F:\Program Files\HiDownload\HDGet.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///F:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///F:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///F:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - F:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - F:\Program Files\Yahoo!\common\yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1153574671155
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "F:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: F:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: klogon - F:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - F:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - F:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - F:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: YPCService - Yahoo! Inc. - F:\WINDOWS\system32\YPCSER~1.EXE

thanx

Last edited by smiffy2006; 10-01-2006 at 01:27 AM.
smiffy2006 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Important Information
Join the #1 Tech Support Forum Today - It's Totally Free!

TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free.

Join TechSupportforum.com Today - Click Here

Old 10-03-2006, 10:43 AM   #2 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 23
OS: win xp pro


Send a message via AIM to smiffy2006 Send a message via Yahoo to smiffy2006
can i bump this one.

thanx
smiffy2006 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-03-2006, 03:19 PM   #3 (permalink)
Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic
 
Glaswegian's Avatar
 
Join Date: Sep 2005
Location: Glasgow
Posts: 25,129
OS: Win XP Pro SP3 / Win 7 Pro

My System

Blog Entries: 10
Hi smiffy – I gotcha now.

There's not a great deal showing in your log, so we'll do some cleaning and see what may turn up.

You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.

Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix. You should not have any open browsers when you are following the procedures below.

Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your system is clean.




Show Hidden Files
Go to My Computer > Tools > Folder Options > View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System files and Folders are showing / visible. Uncheck the Hide protected operating system files option.



Downloads
Please download Cleanup! or use this Alternate Link if the main link does not work and install it. You will use this later.
*NOTE* Cleanup deletes EVERYTHING out of temporary folders and does NOT make backups. If you have any files in any TEMP directory and you need to keep them, then please MOVE THEM NOW!


Download AVG Anti Spyware
This is a 30 day trial
  • Install AVG Anti Spyware
  • Double-click the icon on Desktop to launch AVG
  • On the top of the main screen click Shield
  • Click the word active to change it to inactive
  • On the top of the main screen click Update.
  • Then click on Start Update. The update will start and a progress bar will show the updates being installed.
  • Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
  • Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
  • Under "Reports"
    • Select "Automatically generate report after every scan"
    • Un-Select "Only if threats were found"
    • I also recommend changing the "Update interval" to something more reasonable like 12 hours.

When you have finished updating, EXIT AVG Anti Spyware.


Disable Windows Defender
Please disable your Windows Defender Real-time Protection, as it may hinder the removal of some entries.
  • Open Windows Defender.
  • Click on Tools, General Settings.
  • Scroll down and uncheck Turn on real-time protection (recommended).
  • After you uncheck this, click on the Save button and close Windows Defender.



Reboot
Reboot your system in Safe Mode.
  • Restart the computer. The computer begins processing a set of instructions known as BIOS.
  • After hearing your computer beep once during startup, but before the Windows icon appears, press F8 (dependent on your system this may be F5 or another key)
  • Instead of Windows loading as normal, a menu should appear
  • Use the arrow key to highlight Safe Mode and press Enter.



HijackThis Entries
Open Hijack This and click on Scan. Check the following entries (if they still exist) (make sure you do not miss any)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/c...o/bt_side.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/c...o/bt_side.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/


Please remember to close all other windows, including browsers then click Fix checked.




Run CleanUp!
*NOTE* Cleanup deletes EVERYTHING out of temporary folders and does NOT make backups. If you have any files in any TEMP directory and you need to keep them, then please MOVE THEM NOW!

Open Cleanup! by double-clicking the icon on your desktop (or from Start > All Programs). Set the program up as follows:

Click Options
Move the slider button down to Custom CleanUp!
Check the following:
  • Empty Recycle Bins
  • Delete Cookies
  • Delete Prefetch files
  • Cleanup! All Users
  • Click on the “Temporary Files” tab and uncheck the box for “Scan drives for file matching” if it’s checked.

Click OK, Press the CleanUp! button to start the program and DO NOT REBOOT when prompted.
Note: CleanUp! deletes EVERYTHING out of your temp/temporary folders, it does not make backups. If you have any documents or programs that are saved in any Temporary Folders, please make a backup of these BEFORE running CleanUp! If you have a 64 bit Operating System do NOT run Cleanup and let me know as we will use another utility.




Run AVG Anti Spyware
Run AVG with it's updated definitions:(...it's important that all windows must be closed)
  • Click Scanner
  • Click on the Scan tab
  • Click Complete System Scan to begin scanning.
  • When the scan is complete click Recommended Action and change it to Quarantine
  • Then click Apply all actions
Once finished, click the Save report button, then click Save Report As and save it to your desktop.

NOTE: AVG scan may require an hour.



Reboot
Reboot your system in Normal Mode.



Online Scan
Perform an online scan with Internet Explorer with Panda ActiveScan

Click on the "Free To Use ActiveScan" located on the top right hand corner.

1. Click Check Now and a "pop up" window will appear. *Please ensure that your pop up blocker doesn't block it *
2. Enter your e-mail address, country, and state & click Scan Now * The download of the 8 MB Panda's ActiveX control will take place *

Begin the scan by selecting My Computer
  • If it finds any malware, it will offer you a report.
  • Please ignore any entry it finds and the offer to buy the program to remove the entry, as we will address this later.
  • Click on See report then click Save report

*You needn't remain online while it's doing the scan but you have to re-connect after it has finished to see the report.
*Turn off the real time scanner of any existing antivirus program while performing the online scan




Logs required
Ewido Log
Panda Log
HijackThis Log


Please also let me know how your system is performing now and if you have any specific problems. In order to provide you with the best possible help, please ensure that HijackThis logs are produced from Normal Mode.
__________________
Iain - Defender of the Haggis and all things Scottish.
I don't help by PM - post in the Forums.



PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner
Glaswegian is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-04-2006, 12:25 AM   #4 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 23
OS: win xp pro


Send a message via AIM to smiffy2006 Send a message via Yahoo to smiffy2006
glaswegian thanx for the reply will do it when i get in from work,also i have kaspersky anti virus so do i need to get AVG and uninstall kaspersky??

cheers
smiffy2006 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-04-2006, 06:37 AM   #5 (permalink)
Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic
 
Glaswegian's Avatar
 
Join Date: Sep 2005
Location: Glasgow
Posts: 25,129
OS: Win XP Pro SP3 / Win 7 Pro

My System

Blog Entries: 10
No no - keep Kaspersky - it's very good. Did I suggest AVG somewhere?
__________________
Iain - Defender of the Haggis and all things Scottish.
I don't help by PM - post in the Forums.



PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner
Glaswegian is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-04-2006, 09:01 AM   #6 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 23
OS: win xp pro


Send a message via AIM to smiffy2006 Send a message via Yahoo to smiffy2006
Download AVG Anti Spyware

thats what is in ur post,i am just going to do all what you said i will post my results
smiffy2006 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-04-2006, 10:52 AM   #7 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 23
OS: win xp pro


Send a message via AIM to smiffy2006 Send a message via Yahoo to smiffy2006
i have never known my antivirus take so long to do a scan,i had to stop it,it nealry stopped on its own,it was so slow,so i am going to do an online one see if thats any faster,doing a scan with mine the cpu was just on 99% constant,in safe mode with nothing else open
smiffy2006 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-04-2006, 01:51 PM   #8 (permalink)
Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic
 
Glaswegian's Avatar
 
Join Date: Sep 2005
Location: Glasgow
Posts: 25,129
OS: Win XP Pro SP3 / Win 7 Pro

My System

Blog Entries: 10
Hi smiffy

That AVG used to be known as Ewido - it's a powerful malware scanner not an AV.

Try and complete the AVG scan if you can - even let it run overnight if necessary. It will find and delete lots of things and could well help return your system to something approaching normality.
__________________
Iain - Defender of the Haggis and all things Scottish.
I don't help by PM - post in the Forums.



PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner
Glaswegian is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-04-2006, 02:01 PM   #9 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 23
OS: win xp pro


Send a message via AIM to smiffy2006 Send a message via Yahoo to smiffy2006
i ran an online scan using panda,and it detected 1 hacking tool,and 57 spyware,but when i scanned using my antivirus kaspersky it found nothing at all??
smiffy2006 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-04-2006, 02:02 PM   #10 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 23
OS: win xp pro


Send a message via AIM to smiffy2006 Send a message via Yahoo to smiffy2006
explorer.exe 34.340
firefox.exe 33.136
svchost.exe system

all still high.
smiffy2006 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-04-2006, 02:37 PM   #11 (permalink)
Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic
 
Glaswegian's Avatar
 
Join Date: Sep 2005
Location: Glasgow
Posts: 25,129
OS: Win XP Pro SP3 / Win 7 Pro

My System

Blog Entries: 10
smiffy

Please complete my instructions and then post the logs. It's the only way I can help you. Without the logs we could both spend weeks playing guessing games as to what's going on in your system. If you want me to help you clean your system then you have to play your part.
__________________
Iain - Defender of the Haggis and all things Scottish.
I don't help by PM - post in the Forums.



PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner
Glaswegian is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-05-2006, 12:07 AM   #12 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 23
OS: win xp pro


Send a message via AIM to smiffy2006 Send a message via Yahoo to smiffy2006
so i have to d/l AVG and run it just for a log,won't it conflict with my kaspersky
smiffy2006 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-05-2006, 06:46 AM   #13 (permalink)
Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic
 
Glaswegian's Avatar
 
Join Date: Sep 2005
Location: Glasgow
Posts: 25,129
OS: Win XP Pro SP3 / Win 7 Pro

My System

Blog Entries: 10
No it won't - it's just a scanner - not an AV. It will not cause any conflicts with Kaspersky.
__________________
Iain - Defender of the Haggis and all things Scottish.
I don't help by PM - post in the Forums.



PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner
Glaswegian is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-05-2006, 10:08 AM   #14 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 23
OS: win xp pro


Send a message via AIM to smiffy2006 Send a message via Yahoo to smiffy2006
alright glaswegian i done the scans and here are the logs,now i didn't delete anything,from any prog that i ran,thought i would let you see it first

hijackthis from c/drive
Logfile of HijackThis v1.99.1
Scan saved at 16:49:19, on 05/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\Explorer.EXE
F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
F:\WINDOWS\System32\nvsvc32.exe
F:\WINDOWS\System32\svchost.exe
F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
F:\Program Files\Common Files\Real\Update_OB\realsched.exe
F:\Program Files\Analog Devices\Core\smax4pnp.exe
F:\WINDOWS\system32\LVCOMSX.EXE
F:\WINDOWS\System32\svchost.exe
F:\PROGRA~1\MOZILL~1\FIREFOX.EXE
F:\WINDOWS\system32\wuauclt.exe
F:\WINDOWS\system32\spoolsv.exe
F:\WINDOWS\System32\svchost.exe
F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
F:\Documents and Settings\smiffy\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=2057
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - F:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - F:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - F:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - F:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - F:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [kis] "F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [TkBellExe] "F:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SoundMAXPnP] F:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [LVCOMSX] F:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O8 - Extra context menu item: &Yahoo! Search - file:///F:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Add to Kaspersky Anti-Banner - F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\\ie_banner_deny.htm
O8 - Extra context menu item: Download All Files by HiDownload - F:\Program Files\HiDownload\HDGetAll.htm
O8 - Extra context menu item: Download by HiDownload - F:\Program Files\HiDownload\HDGet.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///F:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///F:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///F:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - F:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - F:\Program Files\Yahoo!\common\yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1153574671155
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "F:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: F:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: klogon - F:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - F:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - F:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - F:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: YPCService - Yahoo! Inc. - F:\WINDOWS\system32\YPCSER~1.EXE

hijackthis from f/drive
Logfile of HijackThis v1.99.1
Scan saved at 16:59:00, on 05/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\Explorer.EXE
F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
F:\WINDOWS\System32\nvsvc32.exe
F:\WINDOWS\System32\svchost.exe
F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
F:\Program Files\Common Files\Real\Update_OB\realsched.exe
F:\Program Files\Analog Devices\Core\smax4pnp.exe
F:\WINDOWS\system32\LVCOMSX.EXE
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\wuauclt.exe
F:\WINDOWS\system32\spoolsv.exe
F:\WINDOWS\System32\svchost.exe
F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
F:\WINDOWS\system32\NOTEPAD.EXE
F:\Documents and Settings\smiffy\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=2057
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - F:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - F:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - F:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - F:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - F:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [kis] "F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [TkBellExe] "F:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SoundMAXPnP] F:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [LVCOMSX] F:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O8 - Extra context menu item: &Yahoo! Search - file:///F:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Add to Kaspersky Anti-Banner - F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\\ie_banner_deny.htm
O8 - Extra context menu item: Download All Files by HiDownload - F:\Program Files\HiDownload\HDGetAll.htm
O8 - Extra context menu item: Download by HiDownload - F:\Program Files\HiDownload\HDGet.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///F:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///F:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///F:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - F:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - F:\Program Files\Yahoo!\common\yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1153574671155
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "F:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: F:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: klogon - F:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - F:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - F:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - F:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - F:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - F:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: YPCService - Yahoo! Inc. - F:\WINDOWS\system32\YPCSER~1.EXE

avg anti spyware
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 16:46:53 05/10/2006

+ Scan result:



F:\Documents and Settings\smiffy\Desktop\progs\HideIpNew_ByMecho\HideIpNew_ByMecho\Hide.My.IP.v1.6\DVT\PATCH.EXE -> Adware.Agent.ci : Ignored.
HKLM\SOFTWARE\WhenUSave -> Adware.SaveNow : Ignored.
C:\cracking stuff\My Pic's.zip/Server.exe -> Heuristic.Win32.AVKiller : Ignored.
C:\cracking stuff\My Pic's\naked pic -> Heuristic.Win32.AVKiller : Ignored.
C:\cracking stuff\Your undetected Server\Server.exe -> Heuristic.Win32.AVKiller : Ignored.
:mozilla.130:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.131:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.132:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.133:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.134:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.135:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.136:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.140:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.141:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.788:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.47:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Adbrite : Ignored.
:mozilla.49:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Adbrite : Ignored.
:mozilla.539:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Adbrite : Ignored.
:mozilla.54:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Adbrite : Ignored.
:mozilla.55:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Adbrite : Ignored.
:mozilla.56:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Adbrite : Ignored.
:mozilla.780:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Adtech : Ignored.
:mozilla.781:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Adtech : Ignored.
:mozilla.182:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Advertising : Ignored.
:mozilla.183:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Advertising : Ignored.
:mozilla.184:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Advertising : Ignored.
:mozilla.185:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Advertising : Ignored.
:mozilla.186:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Advertising : Ignored.
:mozilla.209:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Atdmt : Ignored.
:mozilla.208:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Burstnet : Ignored.
:mozilla.210:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Burstnet : Ignored.
:mozilla.610:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Clickbank : Ignored.
:mozilla.481:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Clickzs : Ignored.
:mozilla.482:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Clickzs : Ignored.
:mozilla.483:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Clickzs : Ignored.
:mozilla.484:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Clickzs : Ignored.
:mozilla.485:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Clickzs : Ignored.
:mozilla.490:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Clickzs : Ignored.
:mozilla.491:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Clickzs : Ignored.
:mozilla.492:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Clickzs : Ignored.
:mozilla.501:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Clickzs : Ignored.
:mozilla.502:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Clickzs : Ignored.
:mozilla.503:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Clickzs : Ignored.
:mozilla.802:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Clickzs : Ignored.
:mozilla.803:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Clickzs : Ignored.
:mozilla.712:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Com : Ignored.
F:\Documents and Settings\smiffy\Cookies\smiffy@com[1].txt -> TrackingCookie.Com : Ignored.
:mozilla.376:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Doubleclick : Ignored.
:mozilla.613:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Enhance : Ignored.
:mozilla.148:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
F:\Documents and Settings\smiffy\Cookies\smiffy@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Ignored.
:mozilla.204:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.
:mozilla.205:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.
:mozilla.206:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.
:mozilla.207:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.
:mozilla.587:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Findwhat : Ignored.
:mozilla.580:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Goclick : Ignored.
:mozilla.581:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Goclick : Ignored.
:mozilla.611:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Googleadservices : Ignored.
:mozilla.831:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Googleadservices : Ignored.
:mozilla.582:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.583:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.584:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.868:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.329:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Masterstats : Ignored.
:mozilla.590:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Mediaplex : Ignored.
:mozilla.591:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Mediaplex : Ignored.
:mozilla.732:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Overture : Ignored.
:mozilla.733:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Overture : Ignored.
:mozilla.734:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Overture : Ignored.
:mozilla.623:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Paycounter : Ignored.
:mozilla.527:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Porntrack : Ignored.
:mozilla.812:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Qksrv : Ignored.
:mozilla.813:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Qksrv : Ignored.
:mozilla.234:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.235:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.236:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.237:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.238:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.239:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.240:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.241:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.242:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.243:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.244:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.245:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.246:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.247:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.248:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.249:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.250:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.251:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.252:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.253:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.254:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.255:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.256:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.257:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.258:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.259:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.260:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.261:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.262:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.263:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.264:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.265:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.266:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.267:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.268:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.269:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.270:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.271:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.272:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.273:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.274:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.275:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.276:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.277:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.278:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.279:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.280:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.281:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.282:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.283:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.
:mozilla.330:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.331:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.332:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.333:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.334:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.335:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.336:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.337:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.338:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.339:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.340:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.341:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.342:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.343:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.344:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.345:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.346:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.347:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.348:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.349:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.350:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.351:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.352:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.353:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.354:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.355:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.356:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.357:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.358:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.290:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sextracker : Ignored.
:mozilla.291:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sextracker : Ignored.
:mozilla.292:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sextracker : Ignored.
:mozilla.293:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sextracker : Ignored.
:mozilla.294:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Sextracker : Ignored.
:mozilla.379:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.380:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.381:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.382:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.383:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.384:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.385:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.386:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.387:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.388:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.389:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.390:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.391:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.392:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.393:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.394:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.395:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.396:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.397:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.398:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.399:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.400:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.401:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.402:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.403:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.404:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.405:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.406:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.407:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.408:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.409:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.410:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.411:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.412:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.413:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.414:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.415:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.416:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.417:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.418:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.521:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignored.
:mozilla.522:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignored.
:mozilla.523:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignored.
:mozilla.202:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Tribalfusion : Ignored.
:mozilla.203:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Tribalfusion : Ignored.
:mozilla.819:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Web-stat : Ignored.
:mozilla.820:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Web-stat : Ignored.
:mozilla.821:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Web-stat : Ignored.
:mozilla.822:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Web-stat : Ignored.
:mozilla.429:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Yadro : Ignored.
:mozilla.194:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.195:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.196:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.197:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.198:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.199:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.200:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.201:F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.
F:\Program Files\Teleport Ultra\scheduler.exe -> Trojan.Agent.iu : Ignored.
::Report end

and panda online scan


Incident Status Location

Potentially unwanted tool:Application/JohnTheRipper.A Not disinfected C:\cracking stuff\john-1.6.zip[john-1.6/src/john.com]
Adware:Adware/Lop Not disinfected F:\Documents and Settings\smiffy\Application Data\ezpinst.exe
Spyware:Cookie/adultfriendfinder Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.adultfriendfinder.com/]
Spyware:Cookie/2o7 Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.2o7.net/]
Spyware:Cookie/2o7 Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.112.2o7.net/]
Spyware:Cookie/2o7 Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.2o7.net/]
Spyware:Cookie/Sextracker Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[counter8.sextracker.com/]
Spyware:Cookie/Sextracker Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.sextracker.com/]
Spyware:Cookie/Sextracker Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[counter16.sextracker.com/]
Spyware:Cookie/SexList Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.sexlist.com/]
Spyware:Cookie/cs.sexcounter Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.cs.sexcounter.com/]
Spyware:Cookie/FastClick Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/FastClick Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[media.fastclick.net/]
Spyware:Cookie/Tribalfusion Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.tribalfusion.com/]
Spyware:Cookie/Sextracker Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[counter10.sextracker.com/]
Spyware:Cookie/Doubleclick Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Tradedoubler Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.tradedoubler.com/]
Spyware:Cookie/Ccbill Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.ccbill.com/]
Spyware:Cookie/YieldManager Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/Yadro Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.yadro.ru/]
Spyware:Cookie/Xiti Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.xiti.com/]
Spyware:Cookie/Statcounter Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.statcounter.com/]
Spyware:Cookie/GoClick Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[c.goclick.com/]
Spyware:Cookie/Hitbox Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.hitbox.com/]
Spyware:Cookie/Findwhat Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.findwhat.com/]
Spyware:Cookie/Mediaplex Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.mediaplex.com/]
Spyware:Cookie/BurstNet Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.burstnet.com/]
Spyware:Cookie/Atlas DMT Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/BurstNet Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.burstnet.com/]
Spyware:Cookie/Clickbank Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.clickbank.net/]
Spyware:Cookie/Enhance Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[c.enhance.com/]
Spyware:Cookie/WebPower Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.webpower.com/]
Spyware:Cookie/PayCounter Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.paycounter.com/]
Spyware:Cookie/MediaTickets Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.kinghost.com/]
Spyware:Cookie/Com.com Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.com.com/]
Spyware:Cookie/Overture Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.overture.com/]
Spyware:Cookie/Adtech Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.adtech.de/]
Spyware:Cookie/QkSrv Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.qksrv.net/]
Spyware:Cookie/Apmebf Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.apmebf.com/]
Spyware:Cookie/Advertising Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Adrevolver Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.adrevolver.com/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[server.iad.liveperson.net/hc/83842527]
Spyware:Cookie/Server.iad.Liveperson Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[server.iad.liveperson.net/]
Spyware:Cookie/Casalemedia Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.casalemedia.com/]
Spyware:Cookie/HotLog Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.hotlog.ru/]
Spyware:Cookie/RealMedia Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.realmedia.com/]
Spyware:Cookie/onestat.com Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[stat.onestat.com/]
Spyware:Cookie/Toplist Not disinfected F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cookies.txt[.toplist.cz/]
Spyware:Cookie/Advertising Not disinfected F:\Documents and Settings\smiffy\Cookies\smiffy@advertising[2].txt
Spyware:Cookie/NewMedia Not disinfected F:\Documents and Settings\smiffy\Cookies\smiffy@anm.co[2].txt
Spyware:Cookie/Atlas DMT Not disinfected F:\Documents and Settings\smiffy\Cookies\smiffy@atdmt[2].txt
Spyware:Cookie/Atwola Not disinfected F:\Documents and Settings\smiffy\Cookies\smiffy@atwola[1].txt
Spyware:Cookie/Com.com Not disinfected F:\Documents and Settings\smiffy\Cookies\smiffy@com[1].txt
Spyware:Cookie/FastClick Not disinfected F:\Documents and Settings\smiffy\Cookies\smiffy@fastclick[2].txt
Spyware:Cookie/FastClick Not disinfected F:\Documents and Settings\smiffy\Cookies\smiffy@media.fastclick[1].txt
Adware:Adware/DLPlugin Not disinfected F:\Program Files\Download Plugin\DlPlugin-Moz\npdlplug.dll
Adware:Adware/DLPlugin Not disinfected F:\Program Files\Download Plugin\DlPlugin-Moz\setup2.exe
Adware:Adware/DLPlugin Not disinfected F:\Program Files\Mozilla Firefox\plugins\npdlplug.dll

hope these are what you were after
smiffy2006 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-05-2006, 03:21 PM   #15 (permalink)
Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic
 
Glaswegian's Avatar
 
Join Date: Sep 2005
Location: Glasgow
Posts: 25,129
OS: Win XP Pro SP3 / Win 7 Pro

My System

Blog Entries: 10
Well done smiffy.

Looks OK – how’s things running now? What’s your CPU doing?

Clear your Firefox cookies. From the open browser, go to Tools > Options > Privacy > Cookies > Clear.

You may want to uninstall this Firefox plug-in: DLPlugin – it seems to be showing as infected.

Let’s get you some cookie protection.

Download IE-Spyad - Extract the contents to a new folder. IE-SPYAD will place thousands of bad websites in the Restricted Zone of Internet Explorer.
From within the folder, double-click install.bat
Select Option #2 - Install the new IE-SPYAD list.
Then return to the main menu.
Select option #4 - Add the old porn sites domain

Download MVPS Hosts file - From within Host.zip, double click on MVPS.bat & allow it to run. This will replace your current Hosts file with one that will block known adware and spy websites.

Download SpywareBlaster. Install & update SpywareBlaster with the latest definitions.
After you have updated, click the button - enable protection for all unprotected items.
SpywareBlaster can help prevent spyware installing in the first place.


Online Scan
Establish an internet connection & perform an online scan with Internet Explorer at Kaspersky WebScanner

Next Click on Launch Kaspersky Anti-Virus Web Scanner

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then begin downloading the latest definition files:
  • Once the files have been downloaded click on NEXT
  • Now click on Scan Settings
  • In the scan settings make that the following are selected:
Scan using the following Anti-Virus database:
  • Extended
Scan Options:
  • Scan Archives
  • Scan Mail Bases
Click OK

Now under select a target to scan: Select My Computer
  • This will program will start and scan your system.
  • The scan will take a while so be patient and let it run.
  • Once the scan is complete it will display if your system has been infected.
Now click on the Save as Text button:
  • Save the file to your desktop.
  • Copy and paste that information in your next post.
Take note of the name(s) and location(s) of any file(s) it detects but fails to clean.

* Turn off the real time scanner of any existing antivirus program while performing the online scan


Please post back with the Kaspersky Log and a fresh HijackThis Log. Please also let me know how your system is performing now and if you have any specific problems. In order to provide you with the best possible help, please ensure that HijackThis logs are produced from Normal Mode.
__________________
Iain - Defender of the Haggis and all things Scottish.
I don't help by PM - post in the Forums.



PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner
Glaswegian is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-05-2006, 03:33 PM   #16 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 23
OS: win xp pro


Send a message via AIM to smiffy2006 Send a message via Yahoo to smiffy2006
system is a bit better but firefox and explorer and svchost still have high mem usage,will do the new stuff you posted tomorrow morning

what you mean run in normal mode,as in not safe mode??
smiffy2006 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-05-2006, 04:35 PM   #17 (permalink)
Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic
 
Glaswegian's Avatar
 
Join Date: Sep 2005
Location: Glasgow
Posts: 25,129
OS: Win XP Pro SP3 / Win 7 Pro

My System

Blog Entries: 10
Normal Mode is when you turn on your computer and it boots up and then Windows opens up.

Safe Mode - you have to do some work to reach safe mode - the system loads minimal drivers allowing you to check for problems or delete stubborn files etc etc

See earlier in the fix:-

Reboot your system in Safe Mode.
  • Restart the computer. The computer begins processing a set of instructions known as BIOS.
  • After hearing your computer beep once during startup, but before the Windows icon appears, press F8 (dependent on your system this may be F5 or another key)
  • Instead of Windows loading as normal, a menu should appear
  • Use the arrow key to highlight Safe Mode and press Enter.
__________________
Iain - Defender of the Haggis and all things Scottish.
I don't help by PM - post in the Forums.



PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner
Glaswegian is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-06-2006, 01:19 AM   #18 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 23
OS: win xp pro


Send a message via AIM to smiffy2006 Send a message via Yahoo to smiffy2006
Well not sure whats going on now,but after a while i can't read the text on webpages,and pictures look like they are running,and my monitor keeps flashing on and off.
smiffy2006 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-06-2006, 03:10 AM   #19 (permalink)
Registered User
 
Join Date: Sep 2006
Posts: 23
OS: win xp pro


Send a message via AIM to smiffy2006 Send a message via Yahoo to smiffy2006
Glaswegian here is the kaspersky online scan report

KASPERSKY ONLINE SCANNER REPORT
Friday, October 06, 2006 9:46:11 AM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 6/10/2006
Kaspersky Anti-Virus database records: 229310
Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true
Scan Target My Computer
A:\
C:\
D:\
E:\
F:\
Scan Statistics
Total number of scanned objects 108516
Number of viruses found 2
Number of infected objects 7 / 0
Number of suspicious objects 0
Duration of the scan process 01:24:59

Infected Object Name Virus Name Last Action
C:\ stuff\Mirc_Fish\Mirc\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.614 skipped
C:\ stuff\Mirc_Fish.rar/Mirc/mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.614 skipped
C:\\Mirc_Fish.rar RAR: infected - 1 skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
F:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP6\Report\12af_pdm_eventcritlog.rpt Object is locked skipped
F:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP6\Report\12af_pdm_eventlog.rpt Object is locked skipped
F:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP6\Report\12b3_File_Monitoring_eventlog.rpt Object is locked skipped
F:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP6\Report\12b8_Web_Monitoring_eventlog.rpt Object is locked skipped
F:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP6\Report\detected.idx Object is locked skipped
F:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP6\Report\detected.rpt Object is locked skipped
F:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP6\Report\eventlog.rpt Object is locked skipped
F:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP6\Report\report.rpt Object is locked skipped
F:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
F:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
F:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
F:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
F:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
F:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
F:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
F:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
F:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
F:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
F:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
F:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
F:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
F:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
F:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
F:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\cert8.db Object is locked skipped
F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\formhistory.dat Object is locked skipped
F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\history.dat Object is locked skipped
F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\key3.db Object is locked skipped
F:\Documents and Settings\smiffy\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\parent.lock Object is locked skipped
F:\Documents and Settings\smiffy\Cookies\index.dat Object is locked skipped
F:\Documents and Settings\smiffy\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
F:\Documents and Settings\smiffy\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
F:\Documents and Settings\smiffy\Local Settings\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\Cache\_CACHE_001_ Object is locked skipped
F:\Documents and Settings\smiffy\Local Settings\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\Cache\_CACHE_002_ Object is locked skipped
F:\Documents and Settings\smiffy\Local Settings\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\Cache\_CACHE_003_ Object is locked skipped
F:\Documents and Settings\smiffy\Local Settings\Application Data\Mozilla\Firefox\Profiles\o2oc2g86.default\Cache\_CACHE_MAP_ Object is locked skipped
F:\Documents and Settings\smiffy\Local Settings\History\History.IE5\index.dat Object is locked skipped
F:\Documents and Settings\smiffy\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
F:\Documents and Settings\smiffy\My Documents\vids\Jordan (katie Price) - UK Model .rar/TeKstYleZ.com_IRC.rar/TeKstYleZ IRC/mirc617.exe/data0001.bin Infected: not-a-virus:Client-IRC.Win32.mIRC.617 skipped
F:\Documents and Settings\smiffy\My Documents\vids\Jordan (katie Price) - UK Model /TeKstYleZ.com_IRC.rar/TeKstYleZ IRC/mirc617.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.617 skipped
F:\Documents and Settings\smiffy\My Documents\vids\Jordan (katie Price) - .rar/TeKstYleZ.com_IRC.rar Infected: not-a-virus:Client-IRC.Win32.mIRC.617 skipped
F:\Documents and Settings\smiffy\My Documents\vids\Jordan (katie Price) - .rar RAR: infected - 3 skipped
F:\Documents and Settings\smiffy\NTUSER.DAT Object is locked skipped
F:\Documents and Settings\smiffy\ntuser.dat.LOG Object is locked skipped
F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
F:\System Volume Information\_restore{8533098D-40D2-4EEB-B020-71E97E266AE8}\RP4\change.log Object is locked skipped
F:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
F:\WINDOWS\SchedLgU.Txt Object is locked skipped
F:\WINDOWS\SoftwareDistribution\EventCache\{6E16C0E3-D565-488A-B4A7-8B96B99DE5F9}.bin Object is locked skipped
F:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
F:\WINDOWS\Sti_Trace.log Object is locked skipped
F:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
F:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
F:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
F:\WINDOWS\system32\config\default Object is locked skipped
F:\WINDOWS\system32\config\default.LOG Object is locked skipped
F:\WINDOWS\system32\config\SAM Object is locked skipped
F:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
F:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
F:\WINDOWS\system32\config\SECURITY Object is locked skipped
F:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
F:\WINDOWS\system32\config\software Object is locked skipped
F:\WINDOWS\system32\config\software.LOG Object is locked skipped
F:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
F:\WINDOWS\system32\config\system Object is locked skipped
F:\WINDOWS\system32\config\system.LOG Object is locked skipped
F:\WINDOWS\system32\drivers\fidbox.dat Object is locked skipped
F:\WINDOWS\system32\drivers\fidbox.idx Object is locked skipped
F:\WINDOWS\system32\drivers\fidbox2.dat Object is locked skipped
F:\WINDOWS\system32\drivers\fidbox2.idx Object is locked skipped
F:\WINDOWS\system32\LogFiles\HTTPERR\httperr1.log Object is locked skipped
F:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
F:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
F:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
F:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
F:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
F:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
F:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
F:\WINDOWS\Temp\cch~44761e77c.htp Object is locked skipped
F:\WINDOWS\Temp\cch~44761f142.htp Object is locked skipped
F:\WINDOWS\Temp\cch~4476531cc.htp Object is locked skipped
F:\WINDOWS\Temp\cch~447653be3.htp Object is locked skipped
F:\WINDOWS\Temp\cch~45266338f.htp Object is locked skipped
F:\WINDOWS\Temp\cch~452663d4f.htp Object is locked skipped
F:\WINDOWS\Temp\cch~4526ddb8c.htp Object is locked skipped
F:\WINDOWS\Temp\cch~4526de572.htp Object is locked skipped
F:\WINDOWS\Temp\cch~45275216c.htp Object is locked skipped
F:\WINDOWS\Temp\cch~452752c31.htp Object is locked skipped
F:\WINDOWS\Temp\cch~453e955e0.htp Object is locked skipped
F:\WINDOWS\Temp\cch~453e96013.htp Object is locked skipped
F:\WINDOWS\Temp\cch~453e9938f.htp Object is locked skipped
F:\WINDOWS\Temp\cch~453e9a4e7.htp Object is locked skipped
F:\WINDOWS\Temp\cch~453ecc9fb.htp Object is locked skipped
F:\WINDOWS\Temp\cch~453ecd411.htp Object is locked skipped
F:\WINDOWS\Temp\cch~4541c77b7.htp Object is locked skipped
F:\WINDOWS\Temp\cch~4541c8234.htp Object is locked skipped
F:\WINDOWS\Temp\cch~46ef40806.htp Object is locked skipped
F:\WINDOWS\Temp\cch~46ef4121f.htp Object is locked skipped
F:\WINDOWS\Temp\cch~473f0c67b.htp Object is locked skipped
F:\WINDOWS\Temp\cch~473f0d0a5.htp Object is locked skipped
F:\WINDOWS\Temp\cch~4744498f8.htp Object is locked skipped
F:\WINDOWS\Temp\cch~474458ca3.htp Object is locked skipped
F:\WINDOWS\Temp\cch~4746cd8e2.htp Object is locked skipped
F:\WINDOWS\Temp\cch~4746ce2e9.htp Object is locked skipped
F:\WINDOWS\Temp\cch~4747f168b.htp Object is locked skipped
F:\WINDOWS\Temp\cch~4747f20a6.htp Object is locked skipped
F:\WINDOWS\Temp\~DFDEB6.tmp Object is locked skipped
F:\WINDOWS\wiadebug.log Object is locked skipped
F:\WINDOWS\wiaservc.log Object is locked skipped
F:\WINDOWS\WindowsUpdate.log Object is locked skipped
Scan process completed.
smiffy2006 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
Old 10-06-2006, 02:51 PM   #20 (permalink)
Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic
 
Glaswegian's Avatar
 
Join Date: Sep 2005
Location: Glasgow
Posts: 25,129
OS: Win XP Pro SP3 / Win 7 Pro

My System

Blog Entries: 10
Hi smiffy

Your system is looking pretty clean. However we’ll just check a bit deeper.

Download this file - combofix.exe to your desktop. Alternative download location here.

IMPORTANT - You must place combofix on your desktop!!


Double click combofix.exe & follow the prompts.

When finished, the tool will produce a log for you at c:\combofix.txt. Post that log in your next reply

Note: Do not mouseclick combofix's window while it's running. That may cause it to stall.
__________________
Iain - Defender of the Haggis and all things Scottish.
I don't help by PM - post in the Forums.



PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner
Glaswegian is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Reddit!
 


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off




All times are GMT -7. The time now is 02:25 AM.



Copyright 2001 - 2009, Tech Support Forum
Home Tips Plus | Outdoor Basecamp | Automotive Support Forum

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85