Welcome to Tech Support Forum home to more then 136,000 problems solved. Issues have included: Spyware, Malware, Virus Issues, Windows, Microsoft, Linux, Networking, Security, Hardware, and Gaming Getting your problem solved is as easy as:
1. Registering for a free account
2. Asking your question
3. Receiving an answer

Registered members:
* Get free support
* Communicate privately with other members (PM).
* Removal of this message
* See fewer ads.
* And much more..

 


Want to know how to post a question? click here Having problems with spyware and pop-ups? First Steps
Go Back   Tech Support Forum > Security Center > Virus/Trojan/Spyware Help > Resolved HJT Threads
Reload this Page avast! Catching Win32 trojano-2873 and more
User Name
Password
Site Map Register Donate Rules Blogs Mark Forums Read


Resolved HJT Threads Resolved spyware and popup issues.

 
 
LinkBack Thread Tools
Old 04-13-2006, 06:01 PM   #1 (permalink)
Registered User
 
Join Date: Apr 2006
Posts: 15
OS: XP


avast! Catching Win32 trojano-2873 and more
Hi all,
My avast anti virus is catching a trojan/malware problem and I'd appreciate some help. The items concerned are
-Win32 trojano-2873
-Win32 Tsupdate-J
-Win32 Adware-gen
-Win32 Trojan-gen.

I have followed advice and scanned with Spy-Bot and Adaware both in Safe Mode and seem to have had some success i.e. Avast is nice and quiet.
Having had look round in a few system folders I can see trouble ahead. The C drive has waiting in it 2 exe files called sk02.exe and ac2_0010.exe.
In the windows folder there is many keyboard(No).exe files and mousepad(No).exe files.
Below is my HIjackThis log.
Thanks for looking.


Logfile of HijackThis v1.99.1
Scan saved at 01:47:36, on 14/04/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\SYSTEM32\GEARSEC.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Xerox One Touch\OneTouchMon.exe
C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
C:\Program Files\Email Saver Xe\AutoBackupXe.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\PROGRA~1\SYSTEM~1\WScheduler.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\PeerGuardian2\pg2.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\FolderClone\folderclone.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\WINDOWS\system32\wuauclt.exe
C:\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\PCHEALTH\HELPCTR\System\panels\blank.htm
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\Scansoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [OneTouch Monitor] "C:\Program Files\Xerox One Touch\OneTouchMon.exe"
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [AutoBackupXe] C:\Program Files\Email Saver Xe\AutoBackupXe.exe
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [WScheduler] C:\PROGRA~1\SYSTEM~1\WScheduler.exe /LOGON
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [bcmwltry] bcmwltry.exe
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [PeerGuardian] C:\Program Files\PeerGuardian2\pg2.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: FolderClone.LNK = C:\Program Files\FolderClone\folderclone.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: VC Poker - {40B2063F-DB01-4962-BE63-59435C01283C} - C:\PROGRA~1\VCPOKE~1\client.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/acti..._v1-0-3-24.cab
O16 - DPF: {4E62C4DE-627D-4604-B157-4B7D6B09F02E} (AccountTracking Profile Manager Class) - https://moneymanager.egg.com/Pinsafe...nttracking.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/sh...0/mcinsctl.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/18b47b35...p/RdxIE601.cab
O16 - DPF: {B3E22EA2-A579-11D2-847A-00C04F7605B6} - file://D:\0000C5DD\me02p01a\common\en\online\code\odweb.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/sh...23/mcgdmgr.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/is...39/mcfscan.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{EA504D66-028A-43F4-A9FB-A3492BCE2041}: NameServer = 192.168.2.1
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\SYSTEM32\GEARSEC.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe
Simannjo is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Sponsored Links
Old 04-13-2006, 06:49 PM   #2 (permalink)
Analyst, Security Team
 
greyknight17's Avatar
 
Join Date: Jul 2004
Location: New York
Posts: 14,327
OS: Windows 98 & Windows XP Home/Pro

My System

Welcome to TSF.

Print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

Run a scan in HijackThis. Check each of the following if they still exist and hit 'Fix Checked' after you checked the last one:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\PCHEALTH\HELPCTR\System\panels\blank.ht m
O16 - DPF: {B3E22EA2-A579-11D2-847A-00C04F7605B6} - file://D:\0000C5DD\me02p01a\common\en\online\code\odweb.c ab

Download Brute Force Uninstaller http://www.merijn.org/files/bfu.zip and unzip it to it’s own folder (c:\BFU).

Run the program and click the Web button located on the top right corner.

Copy and paste the below web address into the address bar of the Download script window:

http://metallica.geekstogo.com/alcanshorty.bfu

Checkmark the following boxes:
Use settings specified in script for the above option.
Show log after script ends.
Execute the script by clicking the Execute button.

When it finishes running, click the Save button for a copy of the log. Post the log created by the script when you have completed the fix along with a new HijackThis log (see below first).

Did you disable anything in msconfig? If you did, I want you to check everything back and restart your computer. Post a new HijackThis log.
__________________
Please do NOT PM me. Post whatever questions you may have in the forum and we will take a look at it when we get to it. If you have waited for more than 3 days, you may then and ONLY then PM me for assistance. I will take a look at it.
greyknight17 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 04-14-2006, 01:45 AM   #3 (permalink)
Registered User
 
Join Date: Apr 2006
Posts: 15
OS: XP


Many thanks for the reply greyknight17...

fixed the 2 items listed in HijackThis...
Downloaded and ran BFU script execution as instructed but half way first attempt I realised 'save log' was unchecked so aborted and re-ran. Towards the end of second run avast! identified a trojan - win32trojano-1152 (file 'ss1001.exe') which I took no action against (not deleted).
BFU completed OK.
msconfig is set to 'normal startup - load all device drivers and services'.

BFU log...

BFU v1.00.9
Windows XP SP2 (WinNT 5.01.2600 SP2)
Script started at 09:20:45, on 14/04/2006

Option Unload Explorer: Yes
Failed: DllUnregister C:\WINDOWS\DH.dll|1 (file not found)
Failed: ServiceStop Network Monitor (service not found)
Failed: ServiceStop cmdService (service not found)
Failed: ServiceDisable Network Monitor (service not found)
Failed: ServiceDisable cmdService (service not found)
Failed: ServiceDelete Network Monitor (service not found)
Failed: ServiceDelete cmdService (service not found)
Failed: RegDelValue HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools (key not found)
Failed: RegDelValue HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableTaskMgr (key not found)
Failed: RegDelValue HKCU\System\CurrentControlSet\Control\Lsa|p2pnetwork (key not found)
Failed: RegDelValue HKCU\SOFTWARE\Microsoft\OLE|p2pnetwork (key not found)
Failed: RegDelValue HKCU\SOFTWARE\Microsoft\OLE|winlog (key not found)
Failed: RegDelValue HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Associations|LowRiskFileTypes (key not found)
Failed: RegDelValue HKLM\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\SharedTaskScheduler|{4F141CBA-1457-6CCA-03A7-7AA21B61EA0F} (key not found)
Failed: RegDelValue HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices|CU1 (key not found)
Failed: RegDelValue HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices|CU2 (key not found)
Failed: RegDelValue HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices|services32 (key not found)
Option pause between commands: 300 ms
Option pause between commands: 50 ms
Failed: FolderDelete C:\Program Files\MsConfigs (folder not found)
Failed: FolderDelete C:\Program Files\winupdates (folder not found)
Failed: FolderDelete C:\Program Files\winupdate (folder not found)
Failed: FolderDelete C:\Program Files\winsupdater (folder not found)
Failed: FolderDelete C:\Program Files\MsUpdate (folder not found)
Failed: FolderDelete C:\Program Files\MsMovies (folder not found)
Failed: FolderDelete C:\Program Files\wmplayer (folder not found)
Failed: FolderDelete C:\Program Files\outlook (folder not found)
Failed: FileDelete C:\Program Files\Common Files\Windows\mc-*-*.exe (operation failed)
Failed: FileDelete C:\Program Files\Common Files\Download\mc-*-*.exe (operation failed)
Failed: FileDelete C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DF84C1.tmp (operation failed)
Failed: FileDelete C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~DFFE7E.tmp (operation failed)
Failed: FileDelete C:\WINDOWS\Temp\JETACE9.tmp (operation failed)
Failed: FileDelete C:\WINDOWS\Temp\Perflib_Perfdata_104.dat (operation failed)
Failed: FolderDelete C:\WINDOWS\Temp\_avast4_ (operation failed)
Failed: FolderDelete C:\Program Files\Maxifiles (folder not found)
Failed: FolderDelete C:\Program Files\DNS (folder not found)
Failed: FolderDelete C:\Program Files\EQAdvice (folder not found)
Failed: FolderDelete C:\Program Files\FCAdvice (folder not found)
Failed: FolderDelete C:\Program Files\Common Files\FreeProd1 (folder not found)
Failed: FolderDelete C:\Program Files\Common Files\FreeProd2 (folder not found)
Failed: FolderDelete C:\Program Files\Common Files\InetGet (folder not found)
Failed: FolderDelete C:\Program Files\Common Files\InetGet2 (folder not found)
Failed: FolderDelete C:\Program Files\InetGet2 (folder not found)
Failed: FolderDelete C:\Program Files\Common Files\VCClient (folder not found)
Failed: FolderDelete C:\Program Files\Network Monitor (folder not found)
Failed: FolderDelete C:\WINDOWS\inet20001 (folder not found)
Failed: FolderDelete C:\Program Files\Update06 (folder not found)
Failed: FolderDelete C:\Program Files\Yazzle Sudoku (folder not found)
Failed: FolderDelete C:\temp (folder not found)
Failed: FileMove C:\WINDOWS\win*-*.exe|C:\bintheredunthat (source file not found)
Script completed.


New HijackThis log...

Logfile of HijackThis v1.99.1
Scan saved at 09:39:33, on 14/04/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\SYSTEM32\GEARSEC.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Xerox One Touch\OneTouchMon.exe
C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
C:\Program Files\Email Saver Xe\AutoBackupXe.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\PROGRA~1\SYSTEM~1\WScheduler.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\PeerGuardian2\pg2.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\FolderClone\folderclone.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Microsoft ActiveSync\WCESMgr.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\HJT\HijackThis.exe

F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\Scansoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [OneTouch Monitor] "C:\Program Files\Xerox One Touch\OneTouchMon.exe"
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [AutoBackupXe] C:\Program Files\Email Saver Xe\AutoBackupXe.exe
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [WScheduler] C:\PROGRA~1\SYSTEM~1\WScheduler.exe /LOGON
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [bcmwltry] bcmwltry.exe
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [PeerGuardian] C:\Program Files\PeerGuardian2\pg2.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: FolderClone.LNK = C:\Program Files\FolderClone\folderclone.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: VC Poker - {40B2063F-DB01-4962-BE63-59435C01283C} - C:\PROGRA~1\VCPOKE~1\client.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english...an_unicode.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/acti..._v1-0-3-24.cab
O16 - DPF: {4E62C4DE-627D-4604-B157-4B7D6B09F02E} (AccountTracking Profile Manager Class) - https://moneymanager.egg.com/Pinsafe...nttracking.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/sh...0/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/sh...23/mcgdmgr.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/is...39/mcfscan.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{EA504D66-028A-43F4-A9FB-A3492BCE2041}: NameServer = 192.168.2.1
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\SYSTEM32\GEARSEC.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe



sk02.exe and ac2_0010.exe. have gone from C: but a folder called 'bintheredonethat' is in C:. sk02.exe and a couple of .dll files are in it.

Many thanks again for the help,

Simannjo
Simannjo is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 04-14-2006, 06:20 PM   #4 (permalink)
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 32,560
OS: 2000 Pro; XP Pro; XP Home


bintheredunthat is the quarantine folder for BFU.

Are the keyboard and mousepad files still in Windows?

Please do this next:

Before begining the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------


Updating Java and Clearing Cache
  1. Go to Start > Control Panel double-click on the Java Icon (coffee cup) in the Control Panel.
  2. It will say "Java Plug-in" under the icon.
    Please find the update button or tab in the Java Control Panel. Update your Java then reboot.
  3. If you are unable to update you can manually update by going here:
  4. After the reboot, go back into the Control Panel and double-click the Java Icon.
  5. Under Temporary Internet Files, click the Delete Files button.
  6. There are three options in the window to clear the cache - Leave ALL 3 Checked
    • Downloaded Applets
      Downloaded Applications
      Other Files
  7. Click OK on Delete Temporary Files Window
    Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.
  8. Click OK to leave the Java Control Panel.

---------------------------------------------------------------------------------------------

Download Ewido Security Suite
  • Install Ewido Security Suite
  • When installing, under "Additional Options" uncheck..
    • Install background guard
    • Install scan via context menu
  • Double-click the icon on Desktop to launch Ewido
You will need to update Ewido to the latest definition files.
  • On the left hand side of the main screen click update.
  • Then click on Start Update.
The update will start and a progress bar will show the updates being installed.
If you are having problems with the updater, you can use this link to manually update Ewido
When you have finished updating, EXIT Ewido.

---------------------------------------------------------------------------------------------

Download and install CleanUp!
NOTE: Do NOT run this program if you have XP Professional 64 bit edition. If you're unsure please do not run it!

Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu).
Set the program up as follows:
Click "Options..."
Move the arrow down to "Custom CleanUp!"
Put a check next to the following (Make sure nothing else is checked!):
  • Empty Recycle Bins
  • Delete Cookies
  • Delete Prefetch files (if present)
  • Cleanup! All Users
Click OK
Press the CleanUp! button to start the program.

It may ask you to log-off/reboot at the end, if it does please do so.

Restart your computer and boot into Safe Mode by hitting the F8 key repeatedly until a menu shows up (and choose Safe Mode from the list). In some systems, this may be the F5 key, so try that if F8 doesn't work. Login on your usual account. Make sure to close any open browsers.

---------------------------------------------------------------------------------------------

Run Ewido with it's updated definitions:(...it's important that all windows must be closed)
  • Click Scanner
  • Click Complete System Scan to begin scanning.
  • Click OK when prompted to clean files
With the first file it prompts to clean, select the option:
  • "Perform action on all infections"
  • Choose clean and click OK.
Once finished, click the Save report button & save the report to your desktop

** Ewido scan would require at least an hour.

---------------------------------------------------------------------------------------------

Empty Your Recycle Bin.

---------------------------------------------------------------------------------------------

Restart in normal mode

---------------------------------------------------------------------------------------------

Go here and do the BitDefender online virus scan.
  • Click "I Agree" to agree to the EULA.
  • Allow the ActiveX control to install when prompted.
  • Click "Click here to scan" to begin the scan.
  • Please refrain from using the computer until the scan is finished.
  • When the scan is finished, click on "Click here to export the scan results"
  • Save the report to your desktop then come back here and attach it to your next reply along with a new Hijack This log and the log from Ewido
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006


Please do not ask for help via Private Message.
tetonbob is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 04-15-2006, 03:00 AM   #5 (permalink)
Registered User
 
Join Date: Apr 2006
Posts: 15
OS: XP


Thanks for the reply...

All carried out OK...

BitDefender scan attached.

HijackThis log...

Logfile of HijackThis v1.99.1
Scan saved at 10:47:30, on 15/04/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\PROGRA~1\XEROXO~1\ONETOU~2.EXE
C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
C:\Program Files\Email Saver Xe\AutoBackupXe.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\PROGRA~1\SYSTEM~1\WScheduler.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\PeerGuardian2\pg2.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\SYSTEM32\GEARSEC.EXE
C:\Program Files\FolderClone\folderclone.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\HJT\HijackThis.exe

F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\Scansoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [OneTouch Monitor] C:\PROGRA~1\XEROXO~1\ONETOU~2.EXE
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [AutoBackupXe] C:\Program Files\Email Saver Xe\AutoBackupXe.exe
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [WScheduler] C:\PROGRA~1\SYSTEM~1\WScheduler.exe /LOGON
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [bcmwltry] bcmwltry.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [PeerGuardian] C:\Program Files\PeerGuardian2\pg2.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: FolderClone.LNK = C:\Program Files\FolderClone\folderclone.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: VC Poker - {40B2063F-DB01-4962-BE63-59435C01283C} - C:\PROGRA~1\VCPOKE~1\client.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english...an_unicode.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/acti..._v1-0-3-24.cab
O16 - DPF: {4E62C4DE-627D-4604-B157-4B7D6B09F02E} (AccountTracking Profile Manager Class) - https://moneymanager.egg.com/Pinsafe...nttracking.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/sh...0/mcinsctl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/reso...an8/oscan8.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/sh...23/mcgdmgr.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/is...39/mcfscan.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{EA504D66-028A-43F4-A9FB-A3492BCE2041}: NameServer = 192.168.2.1
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\SYSTEM32\GEARSEC.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe


Ewido log....


---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 08:36:55, 15/04/2006
+ Report-Checksum: B8B7E33B

+ Scan result:

C:\bintheredunthat\w002e768.dll -> Downloader.Agent.ahv : Cleaned with backup
C:\bintheredunthat\w002f5fe.dll -> Downloader.Agent.ahv : Cleaned with backup
:mozilla.28:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.29:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.30:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.31:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.32:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.33:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.34:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.35:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.36:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.37:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.38:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.39:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.40:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.41:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.42:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.43:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.45:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.46:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.47:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.48:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.49:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.50:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.51:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.52:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.53:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.54:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.55:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.56:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.57:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.58:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.59:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.60:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.61:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.62:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.63:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.64:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.65:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.66:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.67:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.68:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.69:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.70:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.71:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.72:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.73:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.74:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.75:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.76:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.77:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.78:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.79:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.80:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.83:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.84:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.85:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.86:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.87:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.88:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.89:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.90:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.91:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.92:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.93:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.94:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.95:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.109:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.110:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.111:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.118:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.138:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.139:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.140:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.141:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.182:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.183:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.184:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.185:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.186:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.187:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.188:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.189:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.190:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.191:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.197:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.198:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.199:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Trafic : Cleaned with backup
:mozilla.200:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.212:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.213:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.214:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.215:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.230:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.231:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.232:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.233:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.234:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.235:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.236:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.237:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.238:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.239:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.240:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.241:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.242:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.243:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.244:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.245:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.246:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.247:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.248:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.249:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.250:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.251:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.252:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.253:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.254:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.255:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.256:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
C:\WINDOWS\SS1001.exe -> Dropper.Small.qn : Cleaned with backup
F:\bintheredunthat\w002e768.dll -> Downloader.Agent.ahv : Cleaned with backup
F:\bintheredunthat\w002f5fe.dll -> Downloader.Agent.ahv : Cleaned with backup
:mozilla.16:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.17:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.18:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.19:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.20:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.21:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.22:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.23:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.24:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.25:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.26:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.27:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.28:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.29:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.30:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.31:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.35:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Tracking101 : Cleaned with backup
:mozilla.36:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Tracking101 : Cleaned with backup
:mozilla.94:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.95:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.96:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.103:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.115:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.124:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.125:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.126:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.127:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.173:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.174:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.175:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.176:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.177:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.178:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.179:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.180:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.181:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.182:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.183:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.184:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.185:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.186:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.187:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.188:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.189:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.190:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.191:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.192:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.193:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.194:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.195:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.196:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.197:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.198:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.199:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.200:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.201:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.202:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.203:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.204:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.205:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.206:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.207:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.208:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.209:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.210:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.211:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.212:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.213:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.214:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.215:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.216:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.217:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.218:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.219:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.220:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.221:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.222:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.223:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.224:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.225:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.226:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.227:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.228:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.229:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.230:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.231:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.237:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.238:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.239:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Trafic : Cleaned with backup
:mozilla.240:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.252:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.253:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.254:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.255:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.270:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.271:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.272:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.273:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.274:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.275:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.276:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.277:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.278:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.279:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.280:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.281:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.282:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.283:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.284:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.285:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.286:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.287:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.288:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.289:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.290:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.291:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.292:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.293:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.294:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.295:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.296:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5np1r9z1.Sim\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.6:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.7:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.8:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.9:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.10:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.11:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.12:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.13:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.20:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.21:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.22:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.23:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.35:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.36:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.37:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.38:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.39:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.40:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.54:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.55:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.56:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.57:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.112:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.113:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.114:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.115:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.116:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.117:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.118:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.119:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.120:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.121:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.125:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.126:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.127:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.128:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.129:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.130:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.131:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.132:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.133:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.134:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.135:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.136:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.137:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.138:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.139:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.140:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.141:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.142:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.143:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.144:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.145:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.146:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.147:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.148:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.149:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.150:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.151:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.152:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.153:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.154:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.155:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.161:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.162:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.163:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Trafic : Cleaned with backup
:mozilla.164:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.180:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.181:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.182:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.184:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.185:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.186:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.187:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.188:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.189:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.190:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.191:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.205:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.206:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.207:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.208:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.209:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.210:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.211:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.212:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.213:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.214:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.215:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.216:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.217:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.218:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.219:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.220:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.221:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.222:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.223:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.224:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.225:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.226:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.227:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.228:F:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\jt06afg6.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
F:\Documents and Settings\Administrator\Cookies\sim@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
F:\WINDOWS\SS1001.exe -> Dropper.Small.qn : Cleaned with backup


::Report End

------------------------------

BitDefender Online Scanner
Scan report generated at: Sat, Apr 15, 2006 - 10:42:24

Scan path: A:\;C:\;D:\;E:\;F:\;I:\;J:\;K:\;L:\;M:\;

Statistics
Time 01:58:53
Files 1127989
Folders 11397
Boot Sectors 4
Archives 34179
Packed Files 105625

Results
Identified Viruses 4
Infected Files 8
Suspect Files 0
Warnings 0
Disinfected 0
Deleted Files 8

Engines Info
Virus Definitions 369942
Engine build AVCORE v1.0 (build 2292) (i386) (Mar 3 2005 11:57:29)
Scan plugins 13
Archive plugins 39
Unpack plugins 4
E-mail plugins 6
System plugins 1

Scan Settings
First Action Disinfect
Second Action Delete
Heuristics Yes
Enable Warnings Yes
Scanned Extensions *;
Exclude Extensions
Scan Emails Yes
Scan Archives Yes
Scan Packed Yes
Scan Files Yes
Scan Boot Yes


Scanned File Status
C:\bintheredunthat\sk02.exe Infected with: Trojan.Clicker.Small.K
C:\bintheredunthat\sk02.exe Disinfection failed
C:\bintheredunthat\sk02.exe Deleted
C:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000197.dll Infected with: Trojan.Downloader.Agent.NQ
C:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000197.dll Disinfection failed
C:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000197.dll Deleted
C:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000198.dll Infected with: Trojan.Downloader.Agent.NQ
C:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000198.dll Disinfection failed
C:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000198.dll Deleted
C:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000213.exe Infected with: Trojan.Clicker.Small.K
C:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000213.exe Disinfection failed
C:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000213.exe Deleted
F:\bintheredunthat\sk02.exe Infected with: Trojan.Clicker.Small.K
F:\bintheredunthat\sk02.exe Disinfection failed
F:\bintheredunthat\sk02.exe Deleted
F:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000200.dll Infected with: Trojan.Downloader.Agent.NQ
F:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000200.dll Disinfection failed
F:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000200.dll Deleted
F:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000201.dll Infected with: Trojan.Downloader.Agent.NQ
F:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000201.dll Disinfection failed
F:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000201.dll Deleted
F:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000214.exe Infected with: Trojan.Clicker.Small.K
F:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000214.exe Disinfection failed
F:\System Volume Information\_restore{70F820DE-55AD-473A-93E9-1D15785144BE}\RP3\A0000214.exe Deleted








Many thanks,

Simannjo
Attached Files
File Type: doc BitDefender Online Scanner.doc (83.5 KB, 2 views)
Last edited by tetonbob; 04-15-2006 at 07:51 AM.
Simannjo is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 04-15-2006, 07:56 AM   #6 (permalink)
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 32,560
OS: 2000 Pro; XP Pro; XP Home


Well done. Your logs are clean. Any more issues? If not you should be good to go. We still have a few items to address.


Create a new System Restore point
  • click Start >> Run - type SYSDM.CPL & press Enter
  • select the System Restore Tab
  • tick on the checkbox - "Turn off System Restore on all drives"
  • click Apply
  • then untick the same checkbox & click OK

Please ensure that you have already patched your system against the recent WMF exploit.
Go to this page to get the KB912919 patch.

Enable Windows Auto Update
  • Go to Start>Run - type wuaucpl.cpl
  • tick on the checkbox - "Keep my computer up to date"
  • Under settings, choose "Automatically download the updates, and install them on the schedule that I specify".
  • Click on "OK".

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programs:
  • SpywareBlaster to help prevent spyware from installing in the first place.
    • Install & update SpywareBlaster with the latest definitions.
      After you have updated, click the button - enable protection for all unprotected items
  • SpywareGuard to catch and block spyware before it can execute.
  • SPYBOT - SEARCH & DESTROY
    Download and install Spybot - Search & Destroy with its TeaTimer option. This will provide realtime spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with the program on a regular basis just as you would an antivirus software. A tutorial on installing & using this product can be found here
  • AD-AWARE
    Download and install Ad-Aware. You should use this program to scan your computer on a regular basis just as you would an antivirus software in conjunction with Spybot. A tutorial on installing & using this product can be found here
  • IE-SPYAD
    IE/Spyad places more than 4000 dubious websites and domains in the IE Restricted list. This severely impair attempts to infect your system. It basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites.
    • Download IE-SpyAD - Extract the contents to a new folder
      From within the folder, double-click install.bat
      Select Option #2 - Install the new IE-SPYAD list.
      Then return to the main menu.
      Select option #4 - Add the old porn sites domain


  • MVPS HOST FILE
    The MVPS Hosts file replaces your current HOSTS file with one that will restrict known ad sites form serving you unsolicited advertisements. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is the IP of your local computer.
    • Download Host.zip to your desktop.
    • From your Desktop right-click (hosts.zip) and select:
      Extract All from the menu.
    • Click Next, click Next, select the option:
      "Show Extracted files", click Finish
    • This will open the newly created hosts folder on your Desktop.
    • Double-click on the included mvps.bat file, this will rename the existing HOSTS file to HOSTS.MVP, then it will copy the included updated HOSTS file to the correct location on your machine.


  • Winpatrol - Download and install the free version of Winpatrol.
    A tutorial for this product is located here:
    Using Winpatrol to protect your computer from malicious software

If you do not have a firewall, here are 4 free ones available for personal use:


In light of your recent troubles, I'm sure you'll like to avoid any future infections. Please take a look at these well written articles
If you want to fight back the Malware Writers that have made your life a misery, please take a look here and read what you can do against it.

Please respond to this thread one more time so we can mark this thread as resolved.
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006


Please do not ask for help via Private Message.
tetonbob is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 04-19-2006, 11:05 AM   #7 (permalink)
Registered User
 
Join Date: Apr 2006
Posts: 15
OS: XP


Many...many...many thanks...

All working well and donation made (tsfdonate).

Thanks again guys.

Simannjo
Simannjo is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
 

« Previous Thread | Next Thread »

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT -7. The time now is 12:04 AM.

Contact Us - Tech Support Forum - Archive - Privacy Statement - Top


Copyright 2001 - 2009, Tech Support Forum
Home Tips Plus | Outdoor Basecamp | Automotive Support Forum

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84