HI help removing adware.purityscan adware.zquest and adware.safesearch many thanks

[corin stone]

hi im new with this so please bare with me! this is the hijackthis log file, i hope this is the bit you need!

Logfile of HijackThis v1.99.1
Scan saved at 11:31:12, on 03/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Lexmark X74-X75\lxbbbmon.exe
C:\Program Files\Freecom Personal Media Suite\FCPMS.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Skype\Plugin Manager\SkypePM.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\MSN Messenger\usnsvc.exe
D:\Setup\Common\Autorun\AUTI386.EXE
C:\WINDOWS\explorer.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Spyware Doctor\swdoctor.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\Corin\LOCALS~1\Temp\Temporary Directory 1 for hijackthis[1].zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.co.uk/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DK
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotmail.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.wanadoo.co.uk/
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: 0 - {A227514F-5118-4F14-00BD-5A576F5E90A7} - C:\Program Files\Outlook Express\tefaqi.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.3558\swg.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Vimicro USB PC Camera LTI301P
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [cmonitor] C:\Program Files\SystemDoctor 2006 Free\startupmon.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [SpywareBot] C:\Program Files\SpywareBot\SpywareBot.exe -boot
O4 - HKLM\..\Run: [SDTray] C:\Program Files\Spyware Doctor\SDTrayApp.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Startup: Freecom Personal Media Suite.lnk = C:\Program Files\Freecom Personal Media Suite\FCPMS.exe
O4 - Startup: HcwSyncIt.lnk = C:\Program Files\WinTV\Scheduler\EPG\TvTv\HcwSyncIt.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AutoStart IR.lnk = C:\Program Files\WinTV\Ir.exe
O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesuk.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesuk.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.demon.net
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} - http://a516.g.akamai.net/f/516/25175...at-no-eula.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://corinstone.spaces.live.com//P...d/MsnPUpld.cab
O16 - DPF: {54823A9D-6BAE-11D5-B519-0050BA2413EB} (ChkDVDCtl Class) - http://www.cyberlink.com/winxp/CheckDVD.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1157964802671
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O16 - DPF: {E7DBFB6C-113A-47CF-B278-F5C6AF4DE1BD} - http://download.abacast.com/download...basetup161.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{4F3E7428-4FFA-456B-8B14-CA5E157DBD60}: NameServer = 158.152.1.58 158.152.1.43
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Client IP-IPX - Unknown owner - ".exe (file missing)
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe

[Glaswegian]

Hi and welcome to TSF.

Apologies for any delay in replying, but we have been rather busy lately, and, of course, all our helpers are volunteers.

Since it has been a few days since you first posted, please follow these instructions if you still need assistance.

Download Deckard's System Scanner (DSS) to your Desktop . Note: You must be logged onto an account with administrator privileges.

1. Close all applications and windows.
2. Double-click on dss.exe to run it, and follow the prompts.
3. When the scan is complete, two text files will open - minimised > extra.txt and maximised > main.txt.
4. Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt back in this thread (do not attach it).
5. Please attach extra.txt to your post.

To attach a file to a new post, simply

1. Click the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
2. copy and paste the following into the "Upload File from your Computer" box:

   C:\Deckard\System Scanner\extra.txt
   

3. Click Upload.

Thank you for your patience.

[corin stone]

Deckard's System Scanner v20070328.36
Run by Corin on 2007-04-09 at 04:50:10
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
34: 2007-04-09 03:50:19 UTC - RP523 - Deckard's System Scanner Restore Point
33: 2007-04-08 16:52:24 UTC - RP522 - System Checkpoint
32: 2007-04-07 16:33:35 UTC - RP521 - Installed SUPERAntiSpyware Professional
31: 2007-04-07 11:48:42 UTC - RP520 - System Checkpoint
30: 2007-04-06 10:49:26 UTC - RP519 - Installed Adobe Reader 8


-- First Restore Point --
1: 2007-04-01 02:53:10 UTC - RP490 - Removed Logitech QuickCam


Backed up registry hives.

Performed disk cleanup.


-- HijackThis (run as Corin.exe) -----------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 04:51:39, on 09/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Lexmark X74-X75\lxbbbmon.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Freecom Personal Media Suite\FCPMS.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\Program Files\Skype\Plugin Manager\SkypePM.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\Corin\Local Settings\Temporary Internet Files\Content.IE5\FEK49EZW\dss[1].exe
C:\DOCUME~1\Corin\Desktop\Corin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DK
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotmail.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SoundMAXPnP] "C:\Program Files\Analog Devices\Core\smax4pnp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [cmonitor] C:\Program Files\SystemDoctor 2006 Free\startupmon.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SUPERAntiSpyware] "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - Startup: Freecom Personal Media Suite.lnk = C:\Program Files\Freecom Personal Media Suite\FCPMS.exe
O4 - Startup: HcwSyncIt.lnk = C:\Program Files\WinTV\Scheduler\EPG\TvTv\HcwSyncIt.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: AutoStart IR.lnk = C:\Program Files\WinTV\Ir.exe
O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.demon.net
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://corinstone.spaces.live.com//P...d/MsnPUpld.cab
O16 - DPF: {54823A9D-6BAE-11D5-B519-0050BA2413EB} (ChkDVDCtl Class) - http://www.cyberlink.com/winxp/CheckDVD.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1157964802671
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{4F3E7428-4FFA-456B-8B14-CA5E157DBD60}: NameServer = 158.152.1.58 158.152.1.43
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe


-- HijackThis Fixed Entries (C:\DOCUME~1\Corin\Desktop\backups\) ---------------

backup-20070407-201733-544 R3 - Default URLSearchHook is missing
backup-20070407-201733-689 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DK
backup-20070407-201852-940 O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
backup-20070407-201853-344 O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
backup-20070407-201853-345 O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
backup-20070407-201901-119 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DK
backup-20070407-202236-628 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.co.uk/myway
backup-20070407-202236-827 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DK
backup-20070407-202236-958 O16 - DPF: {E7DBFB6C-113A-47CF-B278-F5C6AF4DE1BD} - http://download.abacast.com/download...basetup161.cab
backup-20070407-202236-965 O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Vimicro USB PC Camera LTI301P
backup-20070407-202250-361 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DK
backup-20070407-202259-334 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DK
backup-20070407-202349-267 O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
backup-20070407-202349-870 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DK
backup-20070407-202349-915 O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll
backup-20070407-202935-542 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DK
backup-20070407-205729-212 O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
backup-20070407-205956-631 O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
backup-20070407-205956-802 O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} - http://a516.g.akamai.net/f/516/25175...at-no-eula.cab
backup-20070407-210537-188 O17 - HKLM\System\CCS\Services\Tcpip\..\{4F3E7428-4FFA-456B-8B14-CA5E157DBD60}: NameServer = 158.152.1.58 158.152.1.43
backup-20070407-210855-364 O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
backup-20070408-063127-587 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.wanadoo.co.uk/
backup-20070408-063127-739 O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.3558\swg.dll
backup-20070408-063127-768 O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

-- File Associations -----------------------------------------------------------

All associations okay.


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R0 SSFS0509 (Spy Sweeper File System Filer Driver: 0509) - c:\windows\system32\drivers\ssfs0509.sys
R0 SSHRMD (Spy Sweeper Hookrack MiniDriver) - c:\windows\system32\drivers\sshrmd.sys
R0 SSIDRV (Spy Sweeper Interdiction Driver) - c:\windows\system32\drivers\ssidrv.sys
R1 core - c:\windows\system32\drivers\core.sys
R1 SASDIFSV - c:\program files\superantispyware\sasdifsv.sys
R1 SASKUTIL - c:\program files\superantispyware\saskutil.sys
R2 dsunidrv (DellSupport UniDriver) - c:\windows\system32\drivers\dsunidrv.sys
R3 alcan5wn (SpeedTouch USB ADSL PPP Networking Driver (NDISWAN)) - c:\windows\system32\drivers\alcan5wn.sys
R3 alcaudsl (SpeedTouch ADSL Modem ATM Transport) - c:\windows\system32\drivers\alcaudsl.sys
R3 Bonifay - c:\windows\system32\drivers\bonifay.sys
R3 DSproct - c:\program files\dellsupport\gtaction\triggers\dsproct.sys
R3 ialm - c:\windows\system32\drivers\ialmnt5.sys
R3 pcouffin (VSO Software pcouffin) - c:\windows\system32\drivers\pcouffin.sys
R3 SASENUM - c:\program files\superantispyware\sasenum.sys
R3 senfilt - c:\windows\system32\drivers\senfilt.sys
R3 smwdm - c:\windows\system32\drivers\smwdm.sys
R3 SSKBFD (Webroot Spy Sweeper Keylogger Shield Keyboard Filter) - c:\windows\system32\drivers\sskbfd.sys

S3 HCW77BDA (Hauppauge Nova-T Stick DVB-T Tuner) - c:\windows\system32\drivers\hcw70bda.sys
S3 hcw99rc (Hauppauge Nova-DT IR Driver) - c:\windows\system32\drivers\hcw99rc.sys
S3 IKFileFlt (File Filter Driver) - c:\windows\system32\drivers\ikfileflt.sys
S3 IKFileSec (File Security Driver) - c:\windows\system32\drivers\ikfilesec.sys
S3 IkSysFlt (System Filter Driver) - c:\windows\system32\drivers\iksysflt.sys
S3 IKSysSec (System Security Driver) - c:\windows\system32\drivers\iksyssec.sys
S3 MPE (BDA MPE Filter) - c:\windows\system32\drivers\mpe.sys
S3 PCAMPR5 (PCAMPR5 NDIS Protocol Driver) - c:\windows\system32\pcampr5.sys (file missing)
S3 PCANDIS5 (PCANDIS5 NDIS Protocol Driver) - c:\windows\system32\pcandis5.sys
S3 PRISM_A02 (802.11g USB 2.0 adapter) - c:\windows\system32\drivers\prisma02.sys
S3 UDTTLOAD - c:\windows\system32\drivers\udttload.sys
S3 UDTTUSB (USBDTT - USB DVB-T adapter Driver) - c:\windows\system32\drivers\udttcap.sys
S3 ZSMC301b (Vimicro USB PC Camera LTI301P) - c:\windows\system32\drivers\usbvm31b.sys (file missing)
S4 cbidf - c:\windows\system32\drivers\cbidf2k.sys
S4 dac2w2k - c:\windows\system32\drivers\dac2w2k.sys


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

S3 DSBrokerService - "c:\program files\dellsupport\brkrsvc.exe"
S3 sdAuxService (Spyware Doctor Auxiliary Service) - c:\program files\spyware doctor\svcntaux.exe
S3 sdCoreService (Spyware Doctor Service) - c:\program files\spyware doctor\swdsvc.exe


-- Scheduled Tasks -------------------------------------------------------------

2007-04-09 04:46:28 438 --a------ C:\WINDOWS\Tasks\RegCure Program Check.job<REGCUR~1.JOB>
2007-04-08 09:53:00 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job<APPLES~1.JOB>
2007-04-08 03:00:00 488 --a------ C:\WINDOWS\Tasks\SpywareBot Scheduled Scan.job<SPYWAR~1.JOB>
2007-04-06 15:00:00 408 --a------ C:\WINDOWS\Tasks\Norton Security Scan.job<NORTON~1.JOB>
2007-04-05 03:00:00 372 --a------ C:\WINDOWS\Tasks\RegCure.job


-- Files created between 2007-03-09 and 2007-04-09 -----------------------------

2007-04-09 00:14:12 0 d-------- C:\Program Files\DellSupport<DELLSU~1>
2007-04-08 06:21:11 0 d-------- C:\Documents and Settings\Corin\Application Data\Uniblue
2007-04-08 06:19:59 0 d-------- C:\Program Files\Uniblue
2007-04-07 19:56:00 0 d-------- C:\VundoFix Backups<VUNDOF~1>
2007-04-07 19:55:01 0 d-------- C:\!KillBox
2007-04-07 17:35:01 0 d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com<SUPERA~1.COM>
2007-04-07 17:33:42 0 d-------- C:\Program Files\SUPERAntiSpyware<SUPERA~1>
2007-04-07 17:33:41 0 d-------- C:\Documents and Settings\Corin\Application Data\SUPERAntiSpyware.com<SUPERA~1.COM>
2007-04-07 17:32:15 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard<WISEIN~1>
2007-04-06 16:23:24 167 --a------ C:\Documents and Settings\Corin\8976.bat
2007-04-06 16:23:11 0 --a------ C:\WINDOWS\system32\unsvchosts.exe<UNSVCH~1.EXE>
2007-04-06 16:23:11 0 d-------- C:\Program Files\Common Files\{388EA650-0AE8-1033-0105-06041620002c}<{388EA~1>
2007-04-05 13:05:31 538 --a------ C:\Documents and Settings\Corin\Application Data\internaldb8467.dat<INTERN~2.DAT>
2007-04-05 13:05:31 374 --a------ C:\Documents and Settings\Corin\Application Data\internaldb6334.dat<INTERN~3.DAT>
2007-04-05 13:05:26 18432 --a------ C:\Documents and Settings\Corin\Application Data\internaldb41.dat<INTERN~1.DAT>
2007-04-05 05:24:09 0 d-------- C:\Documents and Settings\Corin\Application Data\NetMedia Providers<NETMED~1>
2007-04-05 05:17:07 0 d-------- C:\Program Files\Sony Setup<SONYSE~1>
2007-04-05 02:44:27 0 d-------- C:\Documents and Settings\Corin\Application Data\Publish Providers<PUBLIS~1>
2007-04-05 02:44:06 0 d-------- C:\Documents and Settings\Corin\Application Data\Sony
2007-04-05 02:33:59 0 d-------- C:\Program Files\Vstplugins<VSTPLU~1>
2007-04-05 01:48:18 0 d-------- C:\WINDOWS\Prefetch
2007-04-05 01:35:47 3647 -----n--- C:\WINDOWS\system32\drivers\adv07nt5.dll
2007-04-05 01:35:47 3615 -----n--- C:\WINDOWS\system32\drivers\adv05nt5.dll
2007-04-05 01:35:47 3967 -----n--- C:\WINDOWS\system32\drivers\adv02nt5.dll
2007-04-05 01:35:47 4255 -----n--- C:\WINDOWS\system32\drivers\adv01nt5.dll
2007-04-05 01:35:46 701440 -----n--- C:\WINDOWS\system32\drivers\ati2mtag.sys
2007-04-05 01:35:46 327040 -----n--- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2007-04-05 01:35:46 34735 -----n--- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2007-04-05 01:35:46 29455 -----n--- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2007-04-05 01:35:46 36463 -----n--- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2007-04-05 01:35:46 21343 -----n--- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2007-04-05 01:35:46 26367 -----n--- C:\WINDOWS\system32\drivers\ati1snxx.sys
2007-04-05 01:35:46 63663 -----n--- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2007-04-05 01:35:46 30671 -----n--- C:\WINDOWS\system32\drivers\ati1raxx.sys
2007-04-05 01:35:46 12047 -----n--- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2007-04-05 01:35:46 11615 -----n--- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2007-04-05 01:35:46 56623 -----n--- C:\WINDOWS\system32\drivers\ati1btxx.sys
2007-04-05 01:35:46 3775 -----n--- C:\WINDOWS\system32\drivers\adv11nt5.dll
2007-04-05 01:35:46 3711 -----n--- C:\WINDOWS\system32\drivers\adv09nt5.dll
2007-04-05 01:35:46 3135 -----n--- C:\WINDOWS\system32\drivers\adv08nt5.dll
2007-04-05 01:35:45 38016 -----n--- C:\WINDOWS\system32\drivers\bthmodem.sys
2007-04-05 01:35:45 17024 -----n--- C:\WINDOWS\system32\drivers\bthenum.sys
2007-04-05 01:35:45 17279 -----n--- C:\WINDOWS\system32\drivers\atv10nt5.dll
2007-04-05 01:35:45 14143 -----n--- C:\WINDOWS\system32\drivers\atv06nt5.dll
2007-04-05 01:35:45 25471 -----n--- C:\WINDOWS\system32\drivers\atv04nt5.dll
2007-04-05 01:35:45 11359 -----n--- C:\WINDOWS\system32\drivers\atv02nt5.dll
2007-04-05 01:35:45 21183 -----n--- C:\WINDOWS\system32\drivers\atv01nt5.dll
2007-04-05 01:35:45 63488 -----n--- C:\WINDOWS\system32\drivers\atinxsxx.sys
2007-04-05 01:35:45 31744 -----n--- C:\WINDOWS\system32\drivers\atinxbxx.sys
2007-04-05 01:35:45 73216 -----n--- C:\WINDOWS\system32\drivers\atintuxx.sys
2007-04-05 01:35:45 13824 -----n--- C:\WINDOWS\system32\drivers\atinttxx.sys
2007-04-05 01:35:45 28672 -----n--- C:\WINDOWS\system32\drivers\atinsnxx.sys
2007-04-05 01:35:45 104960 -----n--- C:\WINDOWS\system32\drivers\atinrvxx.sys
2007-04-05 01:35:45 52224 -----n--- C:\WINDOWS\system32\drivers\atinraxx.sys
2007-04-05 01:35:45 14336 -----n--- C:\WINDOWS\system32\drivers\atinpdxx.sys
2007-04-05 01:35:45 13824 -----n--- C:\WINDOWS\system32\drivers\atinmdxx.sys
2007-04-05 01:35:45 57856 -----n--- C:\WINDOWS\system32\drivers\atinbtxx.sys
2007-04-05 01:35:44 685056 -----n--- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2007-04-05 01:35:44 220032 -----n--- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2007-04-05 01:35:44 15104 -----n--- C:\WINDOWS\system32\drivers\hidir.sys
2007-04-05 01:35:44 25600 -----n--- C:\WINDOWS\system32\drivers\hidbth.sys
2007-04-05 01:35:44 46464 -----n--- C:\WINDOWS\system32\drivers\gagp30kx.sys
2007-04-05 01:35:44 15423 -----n--- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2007-04-05 01:35:44 18944 -----n--- C:\WINDOWS\system32\drivers\bthusb.sys
2007-04-05 01:35:44 35456 -----n--- C:\WINDOWS\system32\drivers\bthprint.sys
2007-04-05 01:35:44 274304 -----n--- C:\WINDOWS\system32\drivers\bthport.sys
2007-04-05 01:35:44 100992 -----n--- C:\WINDOWS\system32\drivers\bthpan.sys
2007-04-05 01:35:43 59648 -----n--- C:\WINDOWS\system32\drivers\rfcomm.sys
2007-04-05 01:35:43 13776 -----n--- C:\WINDOWS\system32\drivers\recagent.sys
2007-04-05 01:35:43 180360 -----n--- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2007-04-05 01:35:43 12672 -----n--- C:\WINDOWS\system32\drivers\mutohpen.sys
2007-04-05 01:35:43 452736 -----n--- C:\WINDOWS\system32\drivers\mtxparhm.sys
2007-04-05 01:35:43 1309184 -----n--- C:\WINDOWS\system32\drivers\mtlstrm.sys
2007-04-05 01:35:43 126686 -----n--- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2007-04-05 01:35:43 11868 -----n--- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2007-04-05 01:35:43 1041536 -----n--- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2007-04-05 01:35:42 22271 -----n--- C:\WINDOWS\system32\drivers\watv06nt.sys
2007-04-05 01:35:42 11935 -----n--- C:\WINDOWS\system32\drivers\wadv11nt.sys
2007-04-05 01:35:42 11871 -----n--- C:\WINDOWS\system32\drivers\wadv09nt.sys
2007-04-05 01:35:42 11295 -----n--- C:\WINDOWS\system32\drivers\wadv08nt.sys
2007-04-05 01:35:42 11807 -----n--- C:\WINDOWS\system32\drivers\wadv07nt.sys
2007-04-05 01:35:42 13568 -----n--- C:\WINDOWS\system32\drivers\wacompen.sys
2007-04-05 01:35:42 11325 -----n--- C:\WINDOWS\system32\drivers\vchnt5.dll
2007-04-05 01:35:42 78464 -----n--- C:\WINDOWS\system32\drivers\usbvideo.sys
2007-04-05 01:35:42 12672 -----n--- C:\WINDOWS\system32\drivers\usb8023x.sys
2007-04-05 01:35:42 44672 -----n--- C:\WINDOWS\system32\drivers\uagp35.sys
2007-04-05 01:35:42 6016 -----n--- C:\WINDOWS\system32\drivers\smbali.sys
2007-04-05 01:35:42 13240 -----n--- C:\WINDOWS\system32\drivers\slwdmsup.sys
2007-04-05 01:35:42 95424 -----n--- C:\WINDOWS\system32\drivers\slnthal.sys
2007-04-05 01:35:42 404990 -----n--- C:\WINDOWS\system32\drivers\slntamr.sys
2007-04-05 01:35:42 129535 -----n--- C:\WINDOWS\system32\drivers\slnt7554.sys
2007-04-05 01:35:42 3901 -----n--- C:\WINDOWS\system32\drivers\siint5.dll
2007-04-05 01:35:42 166912 -----n--- C:\WINDOWS\system32\drivers\s3gnbm.sys
2007-04-05 01:35:42 30080 -----n--- C:\WINDOWS\system32\drivers\rndismpx.sys
2007-04-05 01:35:41 25471 -----n--- C:\WINDOWS\system32\drivers\watv10nt.sys
2007-04-05 01:35:41 516768 -----n--- C:\WINDOWS\system32\ativvaxx.dll
2007-04-05 01:35:41 32768 -----n--- C:\WINDOWS\system32\ativtmxx.dll
2007-04-05 01:35:41 1888992 -----n--- C:\WINDOWS\system32\ati3duag.dll
2007-04-05 01:35:41 870784 -----n--- C:\WINDOWS\system32\ati3d1ag.dll
2007-04-05 01:35:41 201728 -----n--- C:\WINDOWS\system32\ati2dvag.dll
2007-04-05 01:35:41 377984 -----n--- C:\WINDOWS\system32\ati2dvaa.dll
2007-04-05 01:35:41 229376 -----n--- C:\WINDOWS\system32\ati2cqag.dll
2007-04-05 01:35:40 73796 -----n--- C:\WINDOWS\system32\slserv.exe
2007-04-05 01:35:40 32866 -----n--- C:\WINDOWS\system32\slrundll.exe
2007-04-05 01:35:40 188508 -----n--- C:\WINDOWS\system32\slgen.dll
2007-04-05 01:35:40 286792 -----n--- C:\WINDOWS\system32\slextspk.dll
2007-04-05 01:35:40 73832 -----n--- C:\WINDOWS\system32\slcoinst.dll
2007-04-05 01:35:40 397056 -----n--- C:\WINDOWS\system32\s3gnb.dll
2007-04-05 01:35:40 1737856 -----n--- C:\WINDOWS\system32\mtxparhd.dll
2007-04-05 01:35:40 86016 -----n--- C:\WINDOWS\system32\mdmxsdk.dll
2007-04-05 01:35:40 32285 -----n--- C:\WINDOWS\system32\hsfcisp2.dll
2007-04-05 01:35:40 32866 -----n--- C:\WINDOWS\slrundll.exe
2007-04-05 01:31:53 0 d-------- C:\WINDOWS\ServicePackFiles<SERVIC~1>
2007-04-05 01:29:02 0 d-------- C:\WINDOWS\EHome
2007-04-04 14:39:21 0 d-------- C:\Program Files\Sony
2007-04-03 12:37:01 0 d-------- C:\Documents and Settings\LocalService\Application Data\Webroot
2007-04-03 12:36:57 21056 --a------ C:\WINDOWS\system32\drivers\sskbfd.sys
2007-04-03 12:36:57 144960 --a------ C:\WINDOWS\system32\drivers\ssidrv.sys
2007-04-03 12:36:57 22080 --a------ C:\WINDOWS\system32\drivers\sshrmd.sys
2007-04-03 12:36:57 20544 --a------ C:\WINDOWS\system32\drivers\SSFS0509.sys
2007-04-03 12:36:46 0 d-------- C:\Program Files\Webroot
2007-04-03 12:36:46 0 d-------- C:\Documents and Settings\All Users\Application Data\Webroot
2007-04-03 12:35:22 0 d-------- C:\Documents and Settings\Corin\Application Data\Webroot
2007-04-03 05:58:40 0 d-------- C:\Program Files\WinUndelete<WINUND~1>
2007-04-03 05:52:44 0 d-------- C:\Restoration<RESTOR~1>
2007-04-03 01:17:31 159744 --a------ C:\WINDOWS\system32\wt_menu.dll
2007-04-03 01:17:30 0 d-------- C:\Program Files\Smarty Uninstaller Pro<SMARTY~1>
2007-04-03 01:02:24 0 d-------- C:\Program Files\RegCure
2007-04-02 07:43:55 0 d-------- C:\Documents and Settings\Corin\Application Data\SpywareBot<SPYWAR~1>
2007-04-01 20:50:04 0 d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2007-04-01 20:39:54 0 d-------- C:\Documents and Settings\All Users\Application Data\Adobe
2007-04-01 20:37:50 0 d-------- C:\WINDOWS\__SkypeIEToolbar_Cache<__SKYP~1>
2007-04-01 20:37:46 0 d-------- C:\WINDOWS\Google Toolbar<GOOGLE~1>
2007-04-01 20:36:27 33 --a------ C:\Documents and Settings\Corin\Application Data\Dxccwrd.dll
2007-04-01 20:35:31 26064 --a------ C:\WINDOWS\system32\drivers\kcom.sys
2007-04-01 20:35:31 83536 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys
2007-04-01 20:35:31 59984 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys
2007-04-01 20:35:31 52304 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys<IKFILE~2.SYS>
2007-04-01 20:35:31 39248 --a------ C:\WINDOWS\system32\drivers\ikfileflt.sys<IKFILE~1.SYS>
2007-04-01 20:35:09 626688 --a------ C:\WINDOWS\system32\msvcr80.dll
2007-04-01 12:39:28 0 d-------- C:\Program Files\Common Files\Symantec Shared<SYMANT~1>
2007-04-01 12:37:53 0 d-------- C:\WINDOWS\system32\runtime
2007-04-01 12:37:28 0 d-------- C:\Program Files\Norton Security Scan<NORTON~1>
2007-04-01 12:35:52 0 d-------- C:\Documents and Settings\All Users\Application Data\Google Updater<GOOGLE~1>
2007-04-01 11:23:46 167 --a------ C:\Documents and Settings\Corin\1451.bat
2007-04-01 09:43:48 72320 --a------ C:\WINDOWS\system32\drivers\core.sys
2007-04-01 09:43:37 0 d-------- C:\WINDOWS\system32\micro1
2007-04-01 09:43:20 0 d-------- C:\WINDOWS\system32\bund1
2007-04-01 08:29:08 50688 --a------ C:\WINDOWS\twain_32.dll
2007-04-01 08:29:08 94784 --a------ C:\WINDOWS\twain.dll
2007-04-01 05:48:20 0 d--hs---- C:\Documents and Settings\Corin\Complete
2007-04-01 03:04:01 0 --a------ C:\WINDOWS\system32\taskkill.exe
2007-04-01 02:07:10 147456 --a------ C:\WINDOWS\system32\vbzip10.dll
2007-03-31 03:44:57 1402 --a------ C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache<QTSBAN~1>
2007-03-23 17:32:08 0 d-------- C:\showreel
2007-03-23 14:29:18 2784264 --a------ C:\WINDOWS\system32\GPhotos.scr
2007-03-20 21:22:56 0 d-------- C:\Documents and Settings\Corin\Application Data\ICAClient<ICACLI~1>
2007-03-10 16:36:15 0 d-------- C:\Documents and Settings\LocalService\Application Data\Google
2007-03-10 16:26:41 0 d-------- C:\Program Files\ABBYY FineReader 5.0 Sprint<ABBYYF~1.0SP>
2007-03-10 16:25:48 0 d-------- C:\Documents and Settings\All Users\Application Data\BVRP Software<BVRPSO~1>
2007-03-10 16:25:03 0 d-------- C:\Documents and Settings\LocalService\Application Data\Help
2007-03-10 13:49:33 0 d-------- C:\Program Files\Lexmark X74-X75<LEXMAR~1>
2007-03-10 13:49:28 15104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2007-03-10 13:49:24 87040 --a------ C:\WINDOWS\system32\wiafbdrv.dll


-- Find3M Report ---------------------------------------------------------------

2007-04-09 04:46:46 0 d-------- C:\Documents and Settings\Corin\Application Data\Skype
2007-04-09 00:27:12 0 d--h----- C:\Documents and Settings\Corin\Application Data\Gtek
2007-04-08 15:11:02 0 d-------- C:\Documents and Settings\Corin\Application Data\Adobe
2007-04-06 14:53:48 0 d-------- C:\Program Files\Spyware Doctor<SPYWAR~2>
2007-04-06 11:50:59 0 d-------- C:\Program Files\Common Files\Adobe
2007-04-05 05:45:37 0 d-------- C:\Program Files\Movie Maker<MOVIEM~1>
2007-04-03 11:20:38 0 d-------- C:\Program Files\SpywareBlaster<SPYWAR~1>
2007-04-03 02:59:41 0 d-------- C:\Program Files\Dell Inc<DELLIN~1>
2007-04-02 01:40:21 0 d-------- C:\Program Files\LimeWire
2007-04-01 12:37:46 0 d-------- C:\Program Files\Google
2007-04-01 08:38:23 0 d--h----- C:\Program Files\Zero G Registry<ZEROGR~1>
2007-04-01 08:36:11 0 d-------- C:\Program Files\Sonic
2007-04-01 08:28:53 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1>
2007-04-01 08:24:28 0 d-------- C:\Program Files\Yahoo!
2007-04-01 02:03:11 0 d-------- C:\Program Files\QuickTime<QUICKT~1>
2007-04-01 02:01:38 0 d-------- C:\Program Files\CyberLink<CYBERL~1>
2007-04-01 02:01:28 0 d-------- C:\Program Files\Ahead
2007-03-08 16:36:28 577536 --a------ C:\WINDOWS\system32\user32.dll
2007-03-08 16:36:28 40960 --a------ C:\WINDOWS\system32\mf3216.dll
2007-03-08 16:36:28 281600 --a------ C:\WINDOWS\system32\gdi32.dll
2007-03-08 14:47:48 1843584 --a------ C:\WINDOWS\system32\win32k.sys
2007-03-04 02:53:16 0 d-------- C:\Program Files\MSN Messenger<MSNMES~1>
2007-03-01 15:21:06 0 d-------- C:\Program Files\Java
2007-01-19 13:53:04 51056 --a------ C:\WINDOWS\system32\sirenacm.dll
2007-01-13 23:29:08 34 --a----c- C:\Documents and Settings\Corin\Application Data\pcouffin.log
2007-01-13 23:29:01 47360 --a----c- C:\Documents and Settings\Corin\Application Data\pcouffin.sys
2007-01-13 23:29:01 1144 --a----c- C:\Documents and Settings\Corin\Application Data\pcouffin.inf
2007-01-13 23:29:01 7824 --a----c- C:\Documents and Settings\Corin\Application Data\pcouffin.cat
2007-01-13 23:29:01 87608 --a----c- C:\Documents and Settings\Corin\Application Data\ezpinst.exe


-- Registry Dump ---------------------------------------------------------------


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"DellSupport"="\"C:\\Program Files\\DellSupport\\DSAgnt.exe\" /startup"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"MsnMsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"
"Skype"="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized"
"SUPERAntiSpyware"="\"C:\\Program Files\\SUPERAntiSpyware\\SUPERAntiSpyware.exe\""
"swg"="\"C:\\Program Files\\Google\\GoogleToolbarNotifier\\GoogleToolbarNotifier.exe\""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"SoundMAXPnP"="\"C:\\Program Files\\Analog Devices\\Core\\smax4pnp.exe\""
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"ISUSPM Startup"="C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\UPDATE~1\\ISUSPM.exe -startup"
"ISUSScheduler"="\"C:\\Program Files\\Common Files\\InstallShield\\UpdateService\\issch.exe\" -start"
"igfxtray"="C:\\WINDOWS\\system32\\igfxtray.exe"
"igfxhkcmd"="C:\\WINDOWS\\system32\\hkcmd.exe"
"igfxpers"="C:\\WINDOWS\\system32\\igfxpers.exe"
"cmonitor"="C:\\Program Files\\SystemDoctor 2006 Free\\startupmon.exe"
"TkBellExe"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"SpeedTouch USB Diagnostics"="\"C:\\Program Files\\Thomson\\SpeedTouch USB\\Dragdiag.exe\" /icon"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"Lexmark X74-X75"="\"C:\\Program Files\\Lexmark X74-X75\\lxbbbmgr.exe\""
"Google Desktop Search"="\"C:\\Program Files\\Google\\Google Desktop Search\\GoogleDesktop.exe\" /startup"
"SpySweeper"="C:\\Program Files\\Webroot\\Spy Sweeper\\SpySweeperUI.exe /startintray"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Corin^Start Menu^Programs^Startup^BadBlue.lnk]
"backup"="C:\\WINDOWS\\pss\\BadBlue.lnkStartup"
"location"="Startup"
"item"="BadBlue"
"path"="C:\\Documents and Settings\\Corin\\Start Menu\\Programs\\Startup\\BadBlue.lnk"
"command"="C:\\PROGRA~1\\BadBlue\\PE\\badblue.exe "

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Ares"
"hkey"="HKCU"
"inimapping"="0"
"command"="C:\\Program Files\\Ares\\Ares.exe -h"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearShare]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="BearShare"
"hkey"="HKLM"
"inimapping"="0"
"command"="C:\\Program Files\\BearShare\\BearShare.exe /pause"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"appinit_dlls"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL"


[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoCDBurning"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
Source REG_SZ http://files.gtanet.com/gtasa/desktops/vinewood.jpg

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, ntoskrnl.dll"

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\sdauxservice
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\sdcoreservice
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\WebrootSpySweeperService

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0



-- End of Deckard's System Scanner: finished at 2007-04-09 at 04:52:15 ---------

[Glaswegian]

Hi again.

My name is Iain and I will be helping you clean your system.

You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.

Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix. You should not have any open browsers or live internet connections when you are following the procedures below.

Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your log is clean. Remember that although your symptoms may vanish, this does NOT mean that your system is clean.

If there is anything you don't understand, please ask BEFORE proceeding with the fixes.

Please ensure that you follow the instructions in the order I have them listed.

I need you to have some files individually scanned – please follow these instructions.

Please go to: VirusTotal

• At the top of the page you'll find a "Browse" button. Click the "Browse" button and browse to this file in RED:
  
  C:\Documents and Settings\Corin\8976.bat
  
  
• Click "Open".
• Then click the "Send" button at the top of the VirusTotal page.
• This will scan the file. Please be patient.
• Once scanned, copy and paste the results in your next reply.

Please repeat this for the following files:

C:\WINDOWS\system32\wt_menu.dll
C:\Documents and Settings\Corin\1451.bat
C:\WINDOWS\system32\drivers\core.sys




Show Hidden Files
Go to My Computer > Tools > Folder Options > View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System files and Folders are showing / visible. Uncheck the Hide protected operating system files option.



Downloads
Please download Cleanup! or use this Alternate Link if the main link does not work and install it. You will use this later.
*NOTE* Cleanup deletes EVERYTHING out of temporary folders and does NOT make backups. If you have any files in any TEMP directory and you need to keep them, then please MOVE THEM NOW!


Download AVG Anti Spyware

Use the link at the bottom of the page under "AVG Anti-Spyware Free for Windows"

• Install AVG Anti Spyware
• Double-click the icon on Desktop to launch AVG
• On the top of the main screen click Shield
• Click the word active to change it to inactive
• On the top of the main screen click Update.
• Then click on Start Update. The update will start and a progress bar will show the updates being installed.
• Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
• Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
• Under "Reports"
  • Select "Automatically generate report after every scan"
  • Un-Select "Only if threats were found"

When you have finished updating, EXIT AVG Anti Spyware.


Please download combofix.exe to your desktop.
Alternate link.

IMPORTANT - You must place combofix on your desktop!!


Double click combofix.exe & follow the prompts.

When finished, the tool will produce a log for you at c:\combofix.txt. Post that log in your next reply.

Note: Do not mouseclick combofix's window while it's running. That may cause it to stall.




Reboot
Reboot your system in Safe Mode.

• Restart the computer. The computer begins processing a set of instructions known as BIOS.
• After hearing your computer beep once during startup, but before the Windows icon appears, press F8 (dependent on your system this may be F5 or another key)
• Instead of Windows loading as normal, a menu should appear
• Use the arrow key to highlight Safe Mode and press Enter.

HijackThis Entries
Open Hijack This and click on Scan. Check the following entries (if they still exist) (make sure you do not miss any)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DK
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\

Please remember to close all other windows, including browsers then click Fix checked.




Run CleanUp!
*NOTE* Cleanup deletes EVERYTHING out of temporary folders and does NOT make backups. If you have any files in any TEMP directory and you need to keep them, then please MOVE THEM NOW!

Open Cleanup! by double-clicking the icon on your desktop (or from Start > All Programs). Set the program up as follows:

Click Options
Move the slider button down to Custom CleanUp!
Check the following:

• Empty Recycle Bins
• Delete Cookies
• Delete Prefetch files
• Cleanup! All Users
• Click on the “Temporary Files” tab and uncheck the box for “Scan drives for file matching” if it’s checked.

Click OK, Press the CleanUp! button to start the program and DO NOT REBOOT when prompted.
Note: CleanUp! deletes EVERYTHING out of your temp/temporary folders, it does not make backups. If you have any documents or programs that are saved in any Temporary Folders, please make a backup of these BEFORE running CleanUp! If you have a 64 bit Operating System do NOT run Cleanup and let me know as we will use another utility.




Run AVG Anti Spyware
Run AVG with it's updated definitions (...it's important that all windows must be closed)

• Click Scanner
• Click on the Scan tab
• Click Complete System Scan to begin scanning.
• When the scan is complete click Recommended Action and change it to Quarantine
• Then click Apply all actions

Once finished, click the Save report button, then click Save Report As and save it to your desktop.

NOTE: AVG scan may require an hour.



Reboot
Reboot your system in Normal Mode.



Online Scan
Perform an online scan with Internet Explorer with Panda ActiveScan

1. Click on located at the bottom of the page.
2. A "pop up" window will appear. * Please ensure that your pop up blocker doesn't block it *
3. Enter your e-mail address, country, and state & click "Free Online Scan" *The download of the 8 MB Panda's ActiveX control will take place*

Begin the scan by selecting

• If it finds any malware, it will offer you a report.
• Please ignore any entry it finds and the offer to buy the program to remove the entry, as we will address this later.
• Click on then click

* You needn't remain online while it's doing the scan but you have to re-connect after it has finished to see the report.
* Turn off the real time scanner of any existing antivirus program while performing the online scan



Logs required
Virus Total scan results
c:\combofix.txt
AVG Log
Panda Log
HijackThis Log

Please also let me know how your system is performing now and if you have any specific problems. In order to provide you with the best possible help, please ensure that HijackThis logs are produced only while in Normal Mode.

[Glaswegian]

Owing to lack of response, this Topic is closed.

If you need this topic re-opened, please PM myself or another Moderator, and include the thread address. This applies only to the original topic starter.

Everyone else please begin a New Topic.