Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Hello, I'm new to the forum and have problem


  • This topic is locked This topic is locked
21 replies to this topic

#1 crapi'minfected

crapi'minfected

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:07:13 AM

Posted 28 February 2009 - 07:21 PM

HI,
I'm new to this forum and am really hoping for some help with my computer. I'm running Windows XP Home on a Dell Dimension desktop computer. The SuperAntispyware scans are showing many infections on my computer, I can delete them but apparently Superantispyware doesn't completely clean my computer.
Could I get some help? Do I need to post some kind of log?
Thanks :thumbsup:

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,759 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:13 AM

Posted 28 February 2009 - 07:24 PM

Hello and welcome please run these next. If you have Spybot installed temporarily disable it. I am moving this topic from the XP forum to Am I Infectected as it is malware related.
Was SUPER run from safe mode. You could also post that log.


Next run ATF:
Please download ATF Cleaner by Atribune & save it to your desktop.
  • Double-click ATF-Cleaner.exe to run the program.
  • Under Main "Select Files to Delete" choose: Select All.
  • Click the Empty Selected button.
  • If you use Firefox browser click Firefox at the top and choose: Select All
  • Click the Empty Selected button.
    If you would like to keep your saved passwords, please click No at the prompt.
  • If you use Opera browser click Opera at the top and choose: Select All
  • Click the Empty Selected button.
    If you would like to keep your saved passwords, please click No at the prompt.
  • Click Exit on the Main menu to close the program.
Note: On Vista, "Windows Temp" is disabled. To empty "Windows Temp" ATF-Cleaner must be "Run as an Administrator".


Next run MBAM:
Please download Malwarebytes Anti-Malware (v1.32) and save it to your desktop.
alternate download link 1
alternate download link 2
If you have a previous version of MBAM, remove it via Add/Remove Programs and download a fresh copy.
  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan.
  • If an update is found, the program will automatically update itself.
  • Press the OK button to close that box and continue.
  • If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install. Alternatively, you can update through MBAM's interface from a clean computer, copy the definitions (rules.ref) located in C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware from that system to a usb stick or CD and then copy it to the infected machine.
On the Scanner tab:
  • Make sure the "Perform Quick Scan" option is selected.
  • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen:
  • Click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply and exit MBAM.
Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you after scanning with MBAM. Please temporarily disable such programs or permit them to allow the changes.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 crapi'minfected

crapi'minfected
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:07:13 AM

Posted 28 February 2009 - 08:01 PM

The Malwarebytes showed nothing. I copied a Hijack this if its of any help.

Malwarebytes' Anti-Malware 1.34
Database version: 1768
Windows 5.1.2600 Service Pack 3

2/28/2009 7:53:36 PM
mbam-log-2009-02-28 (19-53-36).txt

Scan type: Quick Scan
Objects scanned: 75845
Time elapsed: 15 minute(s), 41 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:55:50 PM, on 2/28/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

{Remove HJT log~~boopme}

Edited by boopme, 28 February 2009 - 10:26 PM.


#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,759 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:13 AM

Posted 28 February 2009 - 10:28 PM

Hi HJT logs are not allowed in this forum,not a problem.

What malware was SAS finding can you post an infected log? Or the names of the malware.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 crapi'minfected

crapi'minfected
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:07:13 AM

Posted 28 February 2009 - 10:58 PM

ok, here's the SAS log. :thumbsup:

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 02/28/2009 at 10:50 PM

Application Version : 4.24.1004

Core Rules Database Version : 3779
Trace Rules Database Version: 1738

Scan type : Complete Scan
Total Scan Time : 00:31:01

Memory items scanned : 577
Memory threats detected : 0
Registry items scanned : 5356
Registry threats detected : 0
File items scanned : 838
File threats detected : 1138

Adware.MovieLand/MediaPipe
C:\Program Files\MovieLand Terms.html
C:\Documents and Settings\Stephen Lewis\Desktop\MoviePass Terms.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\moviepass.url
C:\Program Files\moviepass Terms.html

Adware.AlfaCleaner
C:\WINDOWS\warnhp.html

Adware.Ezula
C:\WINDOWS\system32\ezstub.exe
C:\WINDOWS\Downloaded Program Files\ezstub.dll
C:\WINDOWS\Downloaded Program Files\ezstub.INF
C:\WINDOWS\eZinstall.exe
C:\WINDOWS\LastGood\Downloaded Program Files\ezstub.INF

Trojan.Painter
C:\WINDOWS\system32\MSWINUP32.DLL
C:\WINDOWS\system32\MSWINXML.DLL
C:\WINDOWS\system32\WINLFL32.DLL

Adware.ZToolbar
C:\WINDOWS\azesearch.bmp
C:\WINDOWS\system32\azebar.xml
C:\WINDOWS\Downloaded Program Files\azesearch.inf

Adware.Apropos Media
C:\WINDOWS\system32\auto_update_uninstall.log
C:\WINDOWS\system32\auto_update_uninstall.exe

Trojan.SpySheriff
C:\WINDOWS\secure32.html
C:\SpySheriff.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpySheriff.lnk
\SpySheriff.lnk

Adware.180solutions/Search Assistant
C:\WINDOWS\Downloaded Program Files\ClientAX.dll
C:\WINDOWS\Downloaded Program Files\MediaGatewayX.dll
C:\WINDOWS\MediaGateway.exe.bin

Adware.WebNexus
C:\WINDOWS\LastGood\wupdt.exe
C:\WINDOWS\mynexus.exe
C:\WINDOWS\system32\pbvwb.dat
C:\WINDOWS\system32\vgactl.cpl
C:\WINDOWS\system32\wuauclt.dll
C:\WINDOWS\vlpnlp.dat
C:\WINDOWS\wupdt.exe
C:\installerwebnex.exe

Trojan.SmartFinder
C:\WINDOWS\system32\mfcgy32.dll
C:\WINDOWS\system32\owdwi.dll
C:\WINDOWS\system32\sdkok32.exe
C:\WINDOWS\sysvb.exe
C:\WINDOWS\mfcbh.exe
C:\WINDOWS\sdkhk.exe
C:\WINDOWS\system32\sdkmd32.dll
C:\WINDOWS\zkowf.dll

Trojan.SpyFalcon
C:\Documents and Settings\Stephen Lewis\Desktop\SpyFalcon.lnk
C:\WINDOWS\system32\oleext.dll
C:\WINDOWS\system32\oleext32.dll

Trojan.MalwareWipe
C:\Documents and Settings\Stephen Lewis\Desktop\MalwareWipe.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWipe.com 4.2.lnk
\MalwareWipe.com.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\MalwareWipe.com.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\MalwareWipe.com 4.2.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWiped 5.2.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\MalwareWiped 5.2.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Malware-Wiped 5.2.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Malware-Wiped.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Malware-Wiped 5.2.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWiped 5.7.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\MalwareWiped 5.7.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\MalwareWiped 5.7.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWiped 5.8.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\MalwareWiped 5.8.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\MalwareWiped 5.8.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWiped 5.9.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\MalwareWiped 5.9.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\MalwareWiped 5.9.lnk

Trojan.WinAntiSpyware/WinAntiVirus 2006/2007
C:\WINDOWS\system32\av.cpl
C:\WINDOWS\system32\drivers\FOPN.sys
C:\WINDOWS\system32\drivers\uwasfsd.sys
C:\WINDOWS\system32\stera.exe
C:\WINDOWS\system32\stera.job
C:\Documents and Settings\Stephen Lewis\Desktop\Install WinAntiVirus Pro 2006 .lnk
C:\Documents and Settings\Stephen Lewis\Cookies\administrator@www.winsoftware[2].txt
C:\Documents and Settings\Stephen Lewis\Desktop\Summary.txt
C:\Documents and Settings\Stephen Lewis\Desktop\WinAntiSpyware 2006 Scanner.lnk
C:\Documents and Settings\All Users\Desktop\WinAntiVirus Pro 2006.lnk
C:\Documents and Settings\All Users\Desktop\Look for answers in WinAntiVirus Pro 2007 Knowledge Base.lnk
C:\Documents and Settings\All Users\Desktop\WinAntiVirus Pro 2007.lnk

Adware.SurfSideKick
C:\Documents and Settings\Stephen Lewis\Application Data\Sskcwrd.dll
C:\Documents and Settings\Stephen Lewis\Application Data\Sskdmns.dll
C:\Documents and Settings\Stephen Lewis\Application Data\Sskuknwrd.dll
C:\Documents and Settings\Stephen Lewis\Application Data\Sskknwrd.dll

Trojan.WinFixer 2006
C:\WINDOWS\Downloaded Program Files\UWFX6_0001_N68M2301NetInstaller.exe
C:\WINDOWS\system32\dfe1.exe
C:\WINDOWS\system32\drivers\d_kmd.sys

Trojan.AdwarePunisher
C:\WINDOWS\adw.htm

Registry Cleaner Trial
C:\Documents and Settings\Stephen Lewis\Desktop\Registry Cleaner.lnk

Trojan.Windows Overlay Components/SysMon
C:\WINDOWS\offun.exe

Trojan.ZenoSearch
C:\WINDOWS\system32\msnav32.ax
C:\Documents and Settings\Stephen Lewis\Start Menu\Z_Start.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\Startup\Zeno.lnk

Adware.IST/ISTBar (Slotch Bar)
C:\WINDOWS\Downloaded Program Files\ISTactivex.dll

Trojan.Avpe64/32
C:\WINDOWS\system32\klgcptini.dat
C:\WINDOWS\system32\stt82.ini

Adware.Adservs
C:\WINDOWS\system32\atmtd.dll
C:\WINDOWS\system32\atmtd.dll._

Trojan.DCOM Server
C:\WINDOWS\system32\dcom_14.dll

Trojan.Malware
C:\WINDOWS\back.gif
C:\WINDOWS\bg.gif
C:\WINDOWS\buy-btn.gif
C:\WINDOWS\download-btn.gif
C:\WINDOWS\security.html
C:\Documents and Settings\Stephen Lewis\Desktop\Adware Reviews.url
C:\Documents and Settings\Stephen Lewis\Desktop\Play Poker.url
C:\Documents and Settings\Stephen Lewis\Desktop\access
C:\Documents and Settings\Stephen Lewis\Desktop\domains
C:\Documents and Settings\Stephen Lewis\Desktop\map.txt
C:\asdf.txt

Adware.HotBar (Low Risk)
C:\WINDOWS\Downloaded Program Files\HbInstIE.dll

Adware.HotBar/SpamBlockerUtility (Low Risk)
C:\WINDOWS\Downloaded Program Files\SpamBlockerUtility.inf

Trojan.UnSpyPC Spyware Scanner
C:\Documents and Settings\Stephen Lewis\Desktop\UnSpyPC Scanner & Monitor.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SafeAndClean_report.htm

Adware.MediaMediatickets
C:\WINDOWS\Downloaded Program Files\MediaTicketsInstaller.INF
C:\WINDOWS\Downloaded Program Files\MediaTicketsInstaller.ocx

Adware.MediaMotor
C:\WINDOWS\Downloaded Program Files\mm83.ocx
C:\WINDOWS\Downloaded Program Files\amm06.inf
C:\WINDOWS\Downloaded Program Files\amm06.ocx
C:\WINDOWS\System32\safe.tlb
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\amm06.inf
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\amm06.ocx
C:\WINDOWS\mm06y.ini
C:\WINDOWS\Downloaded Program Files\motorsix.inf

Trojan.ISA32
C:\WINDOWS\system32\drivers\isa32.sys

Trojan.PestTrap
C:\Documents and Settings\Stephen Lewis\Desktop\PestTrap.lnk

Parasite.SpyAxe
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareAxe 3.0.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpywareAxe.lnk

Trojan.RazeSpyware
C:\Documents and Settings\Stephen Lewis\Desktop\RazeSpyware.lnk

Trojan.AdwareSheriff
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AdwareSheriff.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AdwareSheriff.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\asheriff.lnk

Trojan.RemedyAntiSpy
C:\Documents and Settings\Stephen Lewis\Desktop\RemedyAntispy.lnk

Trojan.HitVirus
C:\Documents and Settings\Stephen Lewis\Desktop\HitVirus.lnk

Trojan.Anti-Virus Pro
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Start Anti-Virus-Pro.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Anti-Virus-Pro.lnk

Trojan.PSGuard
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\P.S.Guard spyware remover.lnk

Trojan.ADWareBazooka
C:\Documents and Settings\Stephen Lewis\Desktop\ADWareBazooka.lnk

Trojan.RegiFast
C:\regifast.log
C:\RFManager.log
C:\RFSilentInstaller.log

Browser Hijacker.Favorites
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Cars.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Domain Names.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Finance.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Games.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Humor.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Movies.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Music and Movies
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Music and Movies\Albums.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Music and Movies\Artists.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Music and Movies\AudioBooks.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Music and Movies\Collections.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Music and Movies\Mp3 Search.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Music and Movies\New releases.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Music and Movies\Ratings.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Music and Movies\Soundtracks.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Online Pharmacy.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Sex Personals.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Sports.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Spyware Removers
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Spyware Removers\ADWare Bazooka.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Spyware Removers\Adware Punisher.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Spyware Removers\Adware Sheriff.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Spyware Removers\HIT Virus.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Spyware Removers\Raze Spyware.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Spyware Removers\Reg Freeze.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Spyware Removers\Remedy AntiSpy.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Spyware Removers\SPY iBlock.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Spyware Removers\The Spy Guard Site.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Viagra.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Weather.url
C:\Documents and Settings\Stephen Lewis\Favorites\Favorites\Web Hosting.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Carnival Casino.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Club Dice Casino.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\New York Casino.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\USA Casino.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\You Bingo.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Aces & Faces.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Baccarat.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Black Jack.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Caribbean Poker.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Casino War.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Cinerama.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Craps.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Deuces Wild.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Diamond Valley.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Fruit Mania.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Gold Rally.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Jacks or Better.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Magic Slots.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Mega Jacks.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Pai Gow Poker.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Red Dog Poker.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Roulette.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\SafeCracer.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Sic Bo.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Gambling\Wall St. Fever.url
C:\Documents and Settings\Stephen Lewis\Favorites\Games\Monaco Gold Casino.url
C:\Documents and Settings\Stephen Lewis\Favorites\Travel\Adventure Travel.url
C:\Documents and Settings\Stephen Lewis\Favorites\Travel\Air Travel.url
C:\Documents and Settings\Stephen Lewis\Favorites\Travel\Business Travel.url
C:\Documents and Settings\Stephen Lewis\Favorites\Travel\Discount Travel.url
C:\Documents and Settings\Stephen Lewis\Favorites\Travel\Food.url
C:\Documents and Settings\Stephen Lewis\Favorites\Travel\Hawaii Travel.url
C:\Documents and Settings\Stephen Lewis\Favorites\Travel\Lodging.url
C:\Documents and Settings\Stephen Lewis\Favorites\Travel\London Travel.url
C:\Documents and Settings\Stephen Lewis\Favorites\Travel\Travel Agent.url
C:\Documents and Settings\Stephen Lewis\Favorites\Travel\Travel Insurance.url
C:\Documents and Settings\Stephen Lewis\Favorites\Travel\Travel package.url
C:\Documents and Settings\Stephen Lewis\Favorites\Travel\Travel Reservation.url
C:\Documents and Settings\Stephen Lewis\Favorites\Travel\Travel Spain.url
C:\Documents and Settings\Stephen Lewis\Favorites\Travel\Travel Web site.url
C:\Documents and Settings\Stephen Lewis\Favorites\Travel\Vacation Cruises.url
C:\Documents and Settings\Stephen Lewis\Favorites\Travel\Vacations.url
C:\Documents and Settings\Stephen Lewis\Favorites\Download Free Spyware Remover.url
C:\Documents and Settings\All Users\Favorites\Download Free Spyware Remover.url
C:\Documents and Settings\Stephen Lewis\Favorites\NEW VIAGRA at Half Price!.url
C:\Documents and Settings\All Users\Favorites\NEW VIAGRA at Half Price!.url
C:\Documents and Settings\Stephen Lewis\Favorites\Online Chat With Nude Girls.url
C:\Documents and Settings\All Users\Favorites\Online Chat With Nude Girls.url
C:\Documents and Settings\Stephen Lewis\Favorites\Order CIALIS online without leaving home..url
C:\Documents and Settings\All Users\Favorites\Order CIALIS online without leaving home..url
C:\Documents and Settings\Stephen Lewis\Favorites\PC protection in under 2 minutes!.url
C:\Documents and Settings\All Users\Favorites\PC protection in under 2 minutes!.url
C:\Documents and Settings\Stephen Lewis\Favorites\SEX Dating - Real Girls For Real SEX.url
C:\Documents and Settings\All Users\Favorites\SEX Dating - Real Girls For Real SEX.url
C:\Documents and Settings\Stephen Lewis\Favorites\Stop PopUps On Your Computer.url
C:\Documents and Settings\All Users\Favorites\Stop PopUps On Your Computer.url
C:\Documents and Settings\Stephen Lewis\Favorites\VIAGRA at incredible low price. Bonus Pills!.url
C:\Documents and Settings\All Users\Favorites\VIAGRA at incredible low price. Bonus Pills!.url
C:\Documents and Settings\Stephen Lewis\Favorites\View ADULT photos of REAL GIRLS!.url
C:\Documents and Settings\All Users\Favorites\View ADULT photos of REAL GIRLS!.url
C:\Documents and Settings\Stephen Lewis\Favorites\Dating\Adult Gay Personals.url
C:\Documents and Settings\Stephen Lewis\Favorites\Dating\Adult Personals.url
C:\Documents and Settings\Stephen Lewis\Favorites\Dating\Bondage Personals.url
C:\Documents and Settings\Stephen Lewis\Favorites\Dating\Chinese Personals.url
C:\Documents and Settings\Stephen Lewis\Favorites\Dating\Christian Personals.url
C:\Documents and Settings\Stephen Lewis\Favorites\Dating\Dating & Marriage.url
C:\Documents and Settings\Stephen Lewis\Favorites\Dating\Dating Gay Personals.url
C:\Documents and Settings\Stephen Lewis\Favorites\Dating\Fillipina Personals.url
C:\Documents and Settings\Stephen Lewis\Favorites\Dating\Find Sex Partner.url
C:\Documents and Settings\Stephen Lewis\Favorites\Dating\French Personals.url
C:\Documents and Settings\Stephen Lewis\Favorites\Dating\German Personals.url
C:\Documents and Settings\Stephen Lewis\Favorites\Dating\Indian Personals.url
C:\Documents and Settings\Stephen Lewis\Favorites\Dating\Italian Personals.url
C:\Documents and Settings\Stephen Lewis\Favorites\Dating\Jewish Personals.url
C:\Documents and Settings\Stephen Lewis\Favorites\Dating\Senior Personals.url
C:\Documents and Settings\Stephen Lewis\Favorites\Dating\Sex Personals.url
C:\Documents and Settings\Stephen Lewis\Favorites\Dating\Spanish & Portuguese.url

Adware.Elite Media
C:\WINDOWS\Downloaded Program Files\elite.inf
C:\WINDOWS\Downloaded Program Files\elite.ocx
C:\WINDOWS\elitemediagroup.ini
C:\Program Files\Common Files\EliteMediaGroupOinUninstaller.exe
C:\WINDOWS\em06y.ini

Trojan.Freeprod
C:\Documents and Settings\Stephen Lewis\Desktop\freeprodtb.exe

Adware.IEPlugin
C:\Documents and Settings\Stephen Lewis\Desktop\Desktop Toolbar
C:\WINDOWS\isp.ico
C:\WINDOWS\lu.dat

Trojan.RieMon
C:\WINDOWS\system32\unirimon.exe

Adware.BookedSpace
C:\WINDOWS\bsx32.ini
C:\WINDOWS\bs2.dll
C:\WINDOWS\bs3.dll
C:\WINDOWS\bsx5.dll
C:\WINDOWS\bxxs5.dll
C:\WINDOWS\oo4.dll
C:\WINDOWS\system32\acd.dll
C:\WINDOWS\system32\anaamon.dll
C:\WINDOWS\system32\bs2.dll
C:\WINDOWS\system32\bs3.dll
C:\WINDOWS\system32\bsx5.dll
C:\WINDOWS\system32\bxsx5.dll
C:\WINDOWS\system32\bxxs5.dll
C:\WINDOWS\system32\oo4.dll
C:\WINDOWS\system32\rem00001.dll

Trojan.Security Toolbar
C:\Documents and Settings\All Users\Start Menu\Online Security Guide.url
C:\Documents and Settings\All Users\Start Menu\Security Troubleshooting.url
C:\Documents and Settings\Stephen Lewis\Favorites\Antivirus Test Online.url
C:\Documents and Settings\All Users\Desktop\Security Troubleshooting.url
C:\Documents and Settings\All Users\Desktop\Online Security Guide.url
C:\Documents and Settings\All Users\Desktop\Find And Fix Errors.lnk

Adware.IST/YourSiteBar
C:\WINDOWS\Downloaded Program Files\ysbactivex.dll
C:\WINDOWS\Downloaded Program Files\ysbactivex.inf

Adware.HotBar/WOWPapers (Low Risk)
C:\Documents and Settings\All Users\Desktop\Free PC Wallpapers.lnk

Adware.Casino Games (Golden Palace Casino)
\Best Casino. $200 signup bonus!.url
C:\Documents and Settings\Stephen Lewis\Desktop\Best Casino. $200 signup bonus!.url
C:\Documents and Settings\Stephen Lewis\Favorites\Best Casino. $200 signup bonus!.url

Trojan.BraveSentry
C:\Documents and Settings\Stephen Lewis\Desktop\BraveSentry.lnk

Trojan.Spy-Shield/BON
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Spy-Shield v4.1.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Spy-Shield v4.1.lnk

Adware.Best Offers Network
C:\WINDOWS\tboninst.cfg

Trojan.ZQuest
C:\WINDOWS\dh.ini

Adware.Mirar/NetNucleus
C:\WINDOWS\Downloaded Program Files\WinATS.inf
C:\WINDOWS\Downloaded Program Files\Winwcd.inf

Trojan.PKL/Malware
C:\WINDOWS\system32\bpkwb.dll
C:\WINDOWS\system32\johnwb.dll
C:\WINDOWS\system32\systemwb.dll

Adware.WebHancer
C:\WINDOWS\whAgent.inf
C:\WINDOWS\whInstaller.ini

Malware.SpywareQuake
C:\Documents and Settings\Stephen Lewis\Desktop\SpywareQuake.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\SpywareQuake 2.0.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareQuake 2.0.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyQuake2.com 2.3.lnk
\SpyQuake2.com.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyQuake2.com.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareQuaked 2.4.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpywareQuaked.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\SpywareQuaked 2.4.lnk

Adware.TrustInCash
C:\WINDOWS\system32\tisa.cnf

Adware.GloboLook
C:\WINDOWS\system32\Air Tickets.ico
C:\WINDOWS\system32\Big Tits.ico
C:\WINDOWS\system32\BlackJack.ico
C:\WINDOWS\system32\Britney Spears.ico
C:\WINDOWS\system32\Car Insurance.ico
C:\WINDOWS\system32\Cheap Cigarettes.ico
C:\WINDOWS\system32\Credit Card.ico
C:\WINDOWS\system32\Cruises.ico
C:\WINDOWS\system32\Currency Trading.ico
C:\WINDOWS\system32\Lesbian Sex.ico
C:\WINDOWS\system32\MP3.ico
C:\WINDOWS\system32\Online Betting.ico
C:\WINDOWS\system32\Online Gambling.ico
C:\WINDOWS\system32\Oral Sex.ico
C:\WINDOWS\system32\Party Poker.ico
C:\WINDOWS\system32\Pharmacy.ico
C:\WINDOWS\system32\Phentermine.ico
C:\WINDOWS\system32\Pornstars.ico
C:\WINDOWS\system32\Remove Spyware.ico
C:\WINDOWS\system32\Viagra.ico

Adware.ClickSpring/Yazzle
C:\WINDOWS\Downloaded Program Files\YazzleActiveX.inf
C:\WINDOWS\Downloaded Program Files\YazzleActiveX.ocx

Trojan.SysProtect
C:\Documents and Settings\Stephen Lewis\Desktop\SysProtect.lnk

Trojan.CDSC63R
C:\WINDOWS\system32\cdscsix3.dll
C:\WINDOWS\system32\cdscsix3r.sys

Adware.Tesla Plus
C:\Program Files\secure32.html

Malware.SpyCut
C:\Documents and Settings\Stephen Lewis\Desktop\SpyCut.lnk

Malware.Spyware Soft Stop
C:\Documents and Settings\Stephen Lewis\Desktop\Spyware Soft Stop.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Spyware Soft Stop.lnk

Malware.SpywareSheriff
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareSheriff.lnk
\SpywareSheriff.lnk

Trojan.Hackarmy Variant
C:\WINDOWS\system32\MsnMsr.exe

Trojan.XptpMM
C:\WINDOWS\system32\fux87.ini

Malware.Spyware Vanisher
C:\WINDOWS\Spyware Vanisher Setup Log.txt
\Spyware Vanisher Free Scan.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Spyware Vanisher Free Scan.lnk

Malware.Ultimate Defender
\Ultimate Defender.lnk
\Ultimate Defender.pkg
C:\Documents and Settings\Stephen Lewis\Desktop\Ultimate Defender.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Ultimate Defender.pkg

Adware.TV Media
C:\WINDOWS\Downloaded Program Files\APInstall_Tiny.dll

DIaler.Super-Adult
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Night Club - Foto Annunci Video - VM18.lnk
\Night Club - Foto Annunci Video - VM18.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Night Club - Foto Annunci Video - VM18.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\Night Club - Foto Annunci Video - VM18.lnk

Malware.SystemDoctor
\SystemDoctor 2006.lnk
C:\WINDOWS\Downloaded Program Files\USDR6_0001_D08M0404NetInstaller.exe

Dialer.VacPro
C:\WINDOWS\Downloaded Program Files\int_ver34.INF
C:\WINDOWS\Downloaded Program Files\int_ver34.ocx

Malware.AlertSpy
\AlertSpy.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AlertSpy.lnk

Malware.Trust Cleaner
\Trust Cleaner.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Trust Cleaner.lnk

Adware.Desktop Hijacker
C:\Program Files\Google\nicobitop.html

Malware.GreatMemo
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\GreatMemo.lnk
\GreatMemo.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\GreatMemo.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\Startup\GreatMemo.lnk

Malware.TitanShield
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\TitanShield Antispyware.lnk
\TitanShield Antispyware.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\TitanShield Antispyware.lnk

Malware.RegFreeze
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\RegFreeze.lnk
\RegFreeze.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\Startup\RegFreeze.lnk

Malware.Adware Finder
\AdwareFinder.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AdwareFinder.lnk

Malware.SpyHeal
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyHeal 2.1.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyHeal.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\SpyHeal 2.1.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Spy-Heal 2.1.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Spy-Heal.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Spy-Heal 2.1.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyHealer 2.2.lnk
\SpyHealer.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\SpyHealer 2.2.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyHeals 2.3.lnk
\SpyHeals.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyHeals.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\SpyHeals 2.3.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyHeal 2.7.lnk
\SpyHeal 2.7.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyHeal 2.7.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyHeal 3.5.lnk
\SpyHeal 3.5.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyHeal 3.5.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\SpyHeal 3.5.lnk

Trojan.DollarRevenue
C:\WINDOWS\newname.dat
C:\WINDOWS\keyboard1.dat

Spyware.IEToolbar
C:\Program Files\IEToolbar\inst.bat
C:\Program Files\IEToolbar\searchbarus.dll
C:\Program Files\IEToolbar\searchbarus.inf

Malware.AntiVirusGolden
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusGolden 3.3.lnk
\AntivirusGolden.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntivirusGolden.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\AntivirusGolden 3.3.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiviralGolden 3.5.lnk
\AntiviralGolden.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntiviralGolden.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\AntiviralGolden 3.5.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusGolden 4.0.lnk
\AntivirusGolden 4.0.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntivirusGolden 4.0.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\AntivirusGolden 4.0.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusGold 4.4.lnk
\AntivirusGold 4.4.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntivirusGold 4.4.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\AntivirusGold 4.4.lnk

Malware.VirusBlast
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusBlast v5.0.lnk
\VirusBlast v5.0.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\VirusBlast v5.0.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\VirusBlast v5.0.lnk

Trojan.Media-Codec
\PornMag Pass.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\PornMag Pass.lnk
\X Password Generator.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\X Password Generator.lnk
\PornPass Manager.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\PornPass Manager.lnk
\Key Generator.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Key Generator.lnk
C:\Documents and Settings\Stephen Lewis\Favorites\Online Security Test.url

Trojan.ErrorSafe
C:\Documents and Settings\All Users\Start Menu\Programs\ErrorSafe\ErrorSafe on the Web.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\ErrorSafe\Uninstall ErrorSafe.lnk

Malware.Antispyware Soldier
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Antispyware Soldier.lnk
\Antispyware Soldier.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\Startup\antispysoldier.lnk

Trojan.StoneDrv
C:\WINDOWS\system32\inistone.ini

Malware.VirusBurst
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusBurst 6.1.lnk
\VirusBurst.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\VirusBurst.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\VirusBurst 6.1.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Virus-Burst 6.1.lnk
\Virus-Burst.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Virus-Burst.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Virus-Burst 6.1.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusBurster 6.2.lnk
\VirusBurster.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\VirusBurster.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\VirusBurster 6.2.lnk

Malware.AdProtect
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Ad-Protect v6.3.lnk
\Ad-Protect v6.3.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Ad-Protect v6.3.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Ad-Protect v6.3.lnk

Malware.DriveCleaner
\DriveCleaner 2006 Free.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\DriveCleaner 2006 Free.lnk
C:\Program Files\Common Files\DriveCleaner Freeware
C:\Program Files\DriveCleaner Freeware
C:\Documents and Settings\Stephen Lewis\Application Data\DriveCleaner Freeware
C:\Documents and Settings\All Users\Start Menu\Programs\DriveCleaner Freeware

Malware.VirusRescue
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusRescue v3.0.1.lnk
\VirusRescue v3.0.1.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\VirusRescue v3.0.1.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\VirusRescue v3.0.1.lnk

Malware.RepairRegistryPro
\Repair Registry Pro.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Repair Registry Pro.lnk

Unclassified.SpywareBot (Not A Threat)
\SpywareBot.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpywareBot.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareBot.lnk

Malware.PestCapture
\PestCapture.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\PestCapture.lnk

Malware.AntiVermins
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiVermins 2.1.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\AntiVermins 2.1.lnk
\AntiVermins.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntiVermins.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiVermins 2.5.lnk
\AntiVermins 2.5.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntiVermins 2.5.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\AntiVermins 2.5.lnk

Worm.Spam-Strato
C:\WINDOWS\msserrv32.dat
C:\WINDOWS\msserrv32.s
C:\WINDOWS\msserrv32.wax
C:\WINDOWS\msserrv32.z
C:\WINDOWS\msserv32.dat
C:\WINDOWS\msserv32.s
C:\WINDOWS\msserv32.wax
C:\WINDOWS\msserv32.z
C:\WINDOWS\mswiizz32.dat
C:\WINDOWS\mswiizz32.s
C:\WINDOWS\mswiizz32.wax
C:\WINDOWS\mswiizz32.z
C:\WINDOWS\mswiz32.dat
C:\WINDOWS\mswiz32.s
C:\WINDOWS\mswiz32.wax

Trojan.Bagle Variant
C:\WINDOWS\system32\winupd.exeopen
C:\WINDOWS\system32\winupd.exeopenopen
C:\WINDOWS\system32\winupd.exeopenopenopen

Malware.SpyiBlock
\SpyiBlock.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyiBlock.lnk

Malware.BreakSpyware
\BreakSpyware.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Break Spyware.lnk

Malware.SpyMarshal
C:\Documents and Settings\Stephen Lewis\Desktop\SpyMarshal.lnk

Malware.MrAntiSpy
C:\Documents and Settings\Stephen Lewis\Desktop\MrAntispy.lnk
\MrAntispy.lnk

Malware.MalwareAlarm
\MalwareAlarm.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\MalwareAlarm.lnk

Malware.SpywareKnight
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareKnight.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpywareKnight.lnk

Malware.SpySoldier
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpySoldier.lnk
\SpySoldier.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpySoldier.lnk

Malware.ContraVirus
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\ContraVirus 2.0.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\ContraVirus 2.0.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\ContraVirus 2.0.lnk

Trojan.Rustock/LZX32
C:\WINDOWS\system32:lzx32.sys

Trojan.Rustock/HUY32
C:\WINDOWS\system32:huy32.sys

Malware.SpyDawn
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyDawn 3.1.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyDawn.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\SpyDawn 3.1.lnk

Malware.SpyLocked
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyLocked 3.1.lnk
\SpyLocked.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\SpyLocked 3.1.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareLocked 3.2.lnk
\SpywareLocked.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\SpywareLocked 3.2.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareLocked 3.3.lnk
\SpywareLocked 3.3.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpywareLocked 3.3.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\SpywareLocked 3.3.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareLocked 3.4.lnk
\SpywareLocked 3.4.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpywareLocked 3.4.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareLocked 3.5.lnk
\SpywareLocked 3.5.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpywareLocked 3.5.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\SpywareLocked 3.5.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyLocked 3.6.lnk
\SpyLocked 3.6.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyLocked 3.6.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\SpyLocked 3.6.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyLocked 3.7.lnk
\SpyLocked 3.7.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyLocked 3.7.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\SpyLocked 3.7.lnk

Malware.MalwareStopper
\MalwareStopper.lnk

Dialer.InfoDialer
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\e1xplorer.lnk
\e1xplorer.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\e1xplorer.lnk
C:\Documents and Settings\Stephen Lewis\Favorites\e1xplorer.lnk
C:\Documents and Settings\Stephen Lewis\My Documents\e1xplorer.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\e1xplorer.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\e1xplorer.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\exsplorer.lnk
\exsplorer.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\exsplorer.lnk
C:\Documents and Settings\Stephen Lewis\Favorites\exsplorer.lnk
C:\Documents and Settings\Stephen Lewis\My Documents\exsplorer.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\exsplorer.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\exsplorer.lnk

Malware.SpyAnalyst
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Spy Analyst.lnk
\SpyAnalyst.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyAnalyst.lnk

Malware.SpyOfficer
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Spy Officer.lnk
\SpyOfficer.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyOfficer.lnk

Malware.SpywareSoftStop
\SpywareSoftStop.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpywareSoftStop.lnk

Malware.DrAntiSpy
\DrAntispy.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\DrAntispy.lnk

Malware.Ultimate Fixer
C:\Documents and Settings\Stephen Lewis\Desktop\UltimateFixer 2007.lnk

Malware.VirusLocker
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusLocker 3.1.lnk
\VirusLocker.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\VirusLocker.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\VirusLocker 3.1.lnk

Malware.SpyCrush
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyCrush 3.2.lnk
\SpyCrush 3.2.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyCrush 3.2.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\SpyCrush 3.2.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyCrush 3.3.lnk
\SpyCrush 3.3.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyCrush 3.3.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\SpyCrush 3.3.lnk

Unclassified.System Live Protect
C:\Documents and Settings\Stephen Lewis\Desktop\System Live Protect.lnk

Malware.Spyware Sweeper
\Spyware Sweeper.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Spyware Sweeper.lnk

Malware.VirusHeal
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusHeal 3.7.lnk
\VirusHeal 3.7.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\VirusHeal 3.7.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\VirusHeal 3.7.lnk

Malware.VirusProtectPro
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.3.lnk
\VirusProtectPro 3.3.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\VirusProtectPro 3.3.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\VirusProtectPro 3.3.lnk

Desktop Hijacker.AboutYourPrivacy
\Error Cleaner.url
\Privacy Protector.url
\Spyware&Malware Protection.url
C:\Documents and Settings\Stephen Lewis\Desktop\Error Cleaner.url
C:\Documents and Settings\Stephen Lewis\Desktop\Privacy Protector.url
C:\Documents and Settings\Stephen Lewis\Desktop\Spyware&Malware Protection.url
C:\Documents and Settings\Stephen Lewis\Favorites\Error Cleaner.url
C:\Documents and Settings\Stephen Lewis\Favorites\Privacy Protector.url
C:\Documents and Settings\Stephen Lewis\Favorites\Spyware&Malware Protection.url

Keylogger.Actual Spy
C:\WINDOWS\system\actualspystart.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Actual Spy.lnk
\ActualSpy.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\ActualSpy.lnk

Malware.VirusRanger
C:\Documents and Settings\Stephen Lewis\Start Menu\VirusRanger v3.1.0.lnk

Malware.SpyShredder
\SpyShredder.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyShredder.lnk

Malware.Ultimate Cleaner
C:\Documents and Settings\All Users\Start Menu\Programs\UltimateCleaner 2007\Uninstall UltimateCleaner 2007.lnk

Malware.MalwareBurn
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareBurn 7.1.lnk
\MalwareBurn 7.1.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\MalwareBurn 7.1.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\MalwareBurn 7.1.lnk

Malware.LocusSoftware Inc/BestSellerAntivirus
C:\Documents and Settings\All Users\Start Menu\Programs\BestsellerAntivirus\BestsellerAntivirus.lnk
C:\Documents and Settings\All Users\Desktop\BestsellerAntivirus.lnk
\Install AVSystemCare .lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Install AVSystemCare .lnk

Malware.LocusSoftware Inc/ErrClean
\ErrClean.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\ErrClean.lnk

Rogue.XP AntiVirus
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\XPAntivirus.lnk
\XPAntivirus.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\XPAntivirus.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\XP Antivirus 2008.lnk
\XP Antivirus 2008.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\XP Antivirus 2008.lnk

Rogue.WinPerformance
C:\Documents and Settings\All Users\Start Menu\Programs\WinPerformance.lnk
\WinPerformance.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\WinPerformance.lnk

Rogue.VirusRay
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusRay 3.8.lnk
\VirusRay 3.8.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\VirusRay 3.8.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\VirusRay 3.8.lnk

Rogue.AdvancedCleaner
\AdvancedCleaner Free.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AdvancedCleaner Free.lnk

Rogue.AntiSpyStorm
C:\Documents and Settings\All Users\Desktop\AntispyStorm.lnk

Rogue.AntiSpyGuard
C:\Documents and Settings\All Users\Start Menu\AntiSpyGuard 2007.lnk
C:\Documents and Settings\All Users\Desktop\AntiSpyGuard 2007.lnk

Rogue.IEDefender
\IE Defender 2.2.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\IE Defender 2.2.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\IE Defender 2.2.lnk

Malware.VirusProtect
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusProtect 3.8.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\VirusProtect 3.8.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\VirusProtect 3.8.lnk

Rogue.AntiSpywareShield
\AntiSpywareShield.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntiSpywareShield.lnk

Rogue.WinXDefender
\WinXDefender.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\WinXDefender.lnk

Rogue.SunshineSpy
\Sunshine Spy.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Sunshine Spy.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\Startup\Sunshine.lnk

Malware.LocusSoftware Inc/ConfidentSurf
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\ConfidentSurf unregistered.lnk
\ConfidentSurf unregistered.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\ConfidentSurf unregistered.lnk

Rogue.DrProtection
\DrProtection.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\DrProtection.lnk

Rogue.OnlineGuard
\OnlineGuard.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\OnlineGuard.lnk

Rogue.LiveAntiSpy
\LiveAntispy.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\LiveAntispy.lnk

Rogue.GuardCenter
\GuardCenter.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\GuardCenter.lnk

Rogue.WinSpyKiller
\WinSpyKiller.lnk

Malware.MalwareCrush
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareCrush 3.7.lnk
\MalwareCrush.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\MalwareCrush.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\MalwareCrush 3.7.lnk

Adware.Unclassified/Spruce
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\Startup\Spruce - Auto Update.lnk

RootKit.TnCore/Trace
C:\WINDOWS\system32\drivers\core.cache.dsk
C:\WINDOWS\system32\drivers\core.sys
C:\WINDOWS\system32\drivers\swenumm.sys

Rogue.Installer/Trace
C:\WINDOWS\Spyware Remover.ico
C:\WINDOWS\Casino.ico
C:\WINDOWS\Free Online Dating.ico
C:\WINDOWS\system32\k86.bin
C:\WINDOWS\system32\tremir.bin

Rogue.Files-Secure
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\Files Secure 2.1.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Files Secure 2.1.lnk
\Files Secure 2.1.lnk

Trojan.Unclassified/Crypt32RT-SD
C:\Documents and Settings\Stephen Lewis\Application Data\acstrlsp.ocx
C:\Documents and Settings\Stephen Lewis\Application Data\odbcbase.ocx

Rogue.AntiSpyBoss
C:\Documents and Settings\All Users\Start Menu\Programs\AntiSpyBoss\AntiSpyBoss.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\AntiSpyBoss\Uninstall AntiSpyBoss.ln

Rogue.SpyDefender Pro
\SpyDefender Pro.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyDefender Pro.lnk

Rootkit.Unclassified/NDISUiOO
C:\WINDOWS\system32\drivers\ndisuioo.sys

Rogue.AntiSpyKit
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpyKit 5.2.lnk
\AntiSpyKit 5.2.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntiSpyKit 5.2.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\AntiSpyKit 5.2.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpyKit 5.3.lnk
\AntiSpyKit 5.3.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntiSpyKit 5.3.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\AntiSpyKit 5.3.lnk

Rootkit.Unclassified/USBStorR
C:\WINDOWS\system32\drivers\USBSTORR.SYS

Rootkit.Unclassified/ADPU160MM
C:\WINDOWS\system32\drivers\ADPU160MM.SYS

Rootkit.Unclassified/SysDamp-Traces
C:\WINDOWS\system32\svchost.tmp
C:\WINDOWS\system32\svchost.t__
C:\WINDOWS\system32\svcp.csv
C:\WINDOWS\system32\burito.ini
C:\WINDOWS\system32\diperto.ini

Malware.LocusSoftware Inc/AVSystemCare
C:\Documents and Settings\All Users\Desktop\AVSystemCare.lnk

Malware.LocusSoftware Inc/WinSpyControl
C:\Documents and Settings\All Users\Desktop\WinSpyControl.lnk

Rootkit.Unclassified/AudStubB
C:\WINDOWS\system32\drivers\audstubb.sys

Rootkit.Unclassified/KR_Done
C:\WINDOWS\system32\kr_done1
C:\WINDOWS\system32\vx.tll

Rogue.VirusHeat
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusHeat 3.9.lnk
\VirusHeat 3.9.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\VirusHeat 3.9.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\VirusHeat 3.9.lnk

Rogue.MalwareDestructor
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareDestructor 4.5.lnk
\MalwareDestructor 4.5.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\MalwareDestructor 4.5.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\MalwareDestructor 4.5.lnk

Rogue.MalwareCore
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareCore 7.3.lnk
\MalwareCore 7.3.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\MalwareCore 7.3.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\MalwareCore 7.3.lnk

Adware.MMHRen-Trace
C:\WINDOWS\mmax_hren2.ini
C:\WINDOWS\mmhren2.jpg
C:\WINDOWS\system32\winlogans.tmp

Rogue.WinReanimator
C:\Documents and Settings\All Users\Desktop\WinReanimator.lnk

Rogue.Immunizr
C:\Documents and Settings\Stephen Lewis\Desktop\Immunizr.lnk

Rootkit.Unclassified/DMBootT
C:\WINDOWS\system32\drivers\DMBOOTT.SYS

Rogue.SpywareIsolator
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\spywareisolator.lnk
\spywareisolator.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\spywareisolator.lnk
C:\WINDOWS\system32\spywarewarning.mht
c:\winxplogon.sys

Rogue.SpySnipe
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpySnipe 1.0.lnk
\SpySnipe 1.0.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpySnipe 1.0.lnk

Adware.JavaCore/NoDNS
C:\WINDOWS\system32\cmds.txt
C:\WINDOWS\system32\cs.dat
C:\WINDOWS\system32\ps1.dat
C:\WINDOWS\system32\rc.dat
C:\WINDOWS\system32\suns.dat

Rogue.AntiVirusProtection
\Antivirus Protection.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Antivirus Protection.lnk

Rogue.SearchAndDestroy
C:\Documents and Settings\All Users\Desktop\Search And Destroy.lnk

Rogue.TrustedAntiVirus
C:\Documents and Settings\All Users\Start Menu\Programs\TrustedAntivirus\Contact Customer Support.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\TrustedAntivirus\Uninstall TrustedAntivirus.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\TrustedAntivirus\TrustedAntivirus.lnk

Rogue.SpywareRemover
\Spyware Remover.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Spyware Remover.lnk

Rogue.Netcom3/SpyClean
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Netcom3 Cleaner.lnk
\Netcom3 Cleaner.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Netcom3 Cleaner.lnk

Rootkit.Unclassified/IRBUSS
C:\WINDOWS\system32\drivers\IRBUSS.SYS

Rootkit.Unclassified/SRR
C:\WINDOWS\system32\drivers\SRR.SYS

Rogue.SpyMaxx
C:\Documents and Settings\All Users\Desktop\SpyMaxx.lnk

Rogue.SpyBurner
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyBurner.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyBurner.lnk

Rogue.AntiSpyCheck
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpyCheck v2.4.lnk
\AntiSpyCheck v2.4.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntiSpyCheck v2.4.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\AntiSpyCheck v2.4.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpyCheck 2.1.lnk
\AntiSpyCheck 2.1.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntiSpyCheck 2.1.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\AntiSpyCheck 2.1.lnk

Rogue.MalwareWar
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWar 7.3.lnk
\MalwareWar 7.3.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\MalwareWar 7.3.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\MalwareWar 7.3.lnk

Rogue.PC-Antispyware
C:\WINDOWS\system32\drivers\pca-firewall.sys

Rootkit.Unclassified/IANSWXPP
C:\WINDOWS\system32\drivers\IANSWXPP.SYS

Rogue.SpyWatchE
\SpyWatchE.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyWatchE.lnk

Rogue.MalwareBell
\Malware Bell 3.2.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Malware Bell 3.2.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\Malware Bell 3.2.lnk

Rogue.VirusIsolator
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\virusisolator.lnk
\virusisolator.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\virusisolator.lnk

Rootkit.Unclassified/USBHubB
C:\WINDOWS\system32\drivers\usbhubb.sys

Rogue.WinIFixer
C:\Documents and Settings\All Users\Desktop\WinIFixer.lnk

Rogue.WinXPProtector
\WinXProtector.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\WinXProtector.lnk

Trojan.Unknown Origin
C:\WINDOWS\system32\fets.dat
C:\WINDOWS\system32\hrpdcf.bin
C:\WINDOWS\system32\adult.txt
C:\WINDOWS\system32\esoyoweh.tmp
C:\WINDOWS\system32\WinCtrl32.dl_
C:\WINDOWS\system32\finance.txt
C:\WINDOWS\system32\lt.res
C:\WINDOWS\system32\other.txt
C:\WINDOWS\system32\pharma.txt
C:\WINDOWS\system32\sn.txt
C:\WINDOWS\promogif1.gif
C:\WINDOWS\promogif2.gif
C:\WINDOWS\promogif3.gif
C:\Documents and Settings\Stephen Lewis\Local Settings\Temporary Internet Files\bestwiner.stt
C:\Documents and Settings\Stephen Lewis\Local Settings\Temporary Internet Files\CPV.stt

Rogue.DataHealer
\DataHealer.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\DataHealer.ln

Trojan.Multi-Dropper
C:\WINDOWS\..\ktgmhs.exe
C:\WINDOWS\..\rwhucv.exe
C:\WINDOWS\..\tvcfoviw.exe
C:\WINDOWS\..\wxebxbo.exe

Rogue.PrivacyWatcher
\Privacy Watcher.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Privacy Watcher.lnk

Rogue.PC-Cleaner
\PC-Cleaner.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\PC-Cleaner.lnk
\blackbird.jpg
\EditorFKWP1.5.exe
\EditorFKWP2.0.exe
\filemanagerclient.exe
\fkwp1.5.exe
\fkwp2.0.exe
\fwebd.exe
\FWebdEditor.exe
\Trojan.Win32.BlackBird.exe
C:\Documents and Settings\Stephen Lewis\Desktop\blackbird.jpg
C:\Documents and Settings\Stephen Lewis\Desktop\EditorFKWP1.5.exe
C:\Documents and Settings\Stephen Lewis\Desktop\EditorFKWP2.0.exe
C:\Documents and Settings\Stephen Lewis\Desktop\filemanagerclient.exe
C:\Documents and Settings\Stephen Lewis\Desktop\fkwp1.5.exe
C:\Documents and Settings\Stephen Lewis\Desktop\fkwp2.0.exe
C:\Documents and Settings\Stephen Lewis\Desktop\fwebd.exe
C:\Documents and Settings\Stephen Lewis\Desktop\FWebdEditor.exe
C:\Documents and Settings\Stephen Lewis\Desktop\Trojan.Win32.BlackBird.exe

Rogue.AntiSpywareMaster
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpywareMaster.lnk
\AntiSpywareMaster.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntiSpywareMaster.lnk

Rogue.AntiVirProtect
\AntiVirProtect.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntiVirProtect.lnk

Rogue.MasterAntiVirus
\master anti virus.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\master anti virus.lnk

Rogue.Deus Cleaner
C:\Documents and Settings\All Users\Desktop\Deus Cleaner.lnk

Rogue.MyNetProtector
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\MyNetProtector.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\MyNetProtector.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\MyNetProtector.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\Startup\MyNetProtector.lnk

Rogue.IEAntiVirus
\IE AntiVirus 3.2.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\IE AntiVirus 3.2.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\IE AntiVirus 3.2.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\IE AntiVirus 3.3.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\IE AntiVirus 3.3.lnk

Rogue.XP-Shield
C:\Documents and Settings\Stephen Lewis\Desktop\XP-Shield.lnk
\XP-Shield.lnk

Rogue.AdvancedXPDefender
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AXPDefender.lnk
C:\Documents and Settings\All Users\Desktop\AXPDefender.lnk

Rogue.VipAntiSpyware
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\vipantispyware.lnk
\vipantispyware.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\vipantispyware.lnk

Rogue.AdvancedXPFixer
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AXPFixer.lnk
C:\Documents and Settings\All Users\Desktop\AXPFixer.lnk

Rootkit.TNCore-Variant/A
C:\WINDOWS\system32\drivers\VCHH.SYS

Rogue.CrisysTecSentry
C:\Documents and Settings\Stephen Lewis\Desktop\CrisysTec Sentry 3.0.lnk

Rogue.ETDScanner
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\ETD Security Scanner.lnk
\ETD Security Scanner.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\ETD Security Scanner.lnk

Rogue.MalwareMonitor
\MalwareMonitor.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\MalwareMonitor.lnk

Rogue.MySpyProtector
\MySpyProtector.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\MySpyProtector.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\MySpyProtector.lnk

Rogue.PCHealthPlan
C:\Documents and Settings\Stephen Lewis\Desktop\PC Health Plan.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\PC Health Plan.lnk
C:\WINDOWS\PCHP.exe.lnk
\PC Health Plan.lnk

Rogue.PrivacyGuarantor
C:\Documents and Settings\Stephen Lewis\Start Menu\Privacy Guarantor v2.0.lnk
\Privacy Guarantor v2.0.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Privacy Guarantor v2.0.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Privacy Guarantor v2.0.lnk

Rogue.PrivacyRedeemer
\Privacy Redeemer.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Privacy Redeemer.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Privacy Redeemer.lnk

Rogue.RaptorDefence
\RaptorDefence.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\RaptorDefence.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\RaptorDefence.lnk

Rogue.MalwarePatrolPro
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\MPatrolPRO.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Malware Patrol PRO.lnk
C:\Documents and Settings\All Users\Desktop\MPatrolPRO.lnk

Rogue.PCPrivacyCleaner
C:\Documents and Settings\Stephen Lewis\Desktop\PCPrivacyCleaner.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\PCPrivacyCleaner.lnk

Rogue.AntiVirus 2008 Pro
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus-2008pro.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\TmpRecentIcons\Advanced XP Defender.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\TmpRecentIcons\Advanced XP Fixer.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\TmpRecentIcons\antivirus-2008pro.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\TmpRecentIcons\SystemDefender.lnk
\antivirus-2008pro.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\antivirus-2008pro.lnk

Rogue.AntiSpywareExpert
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpywareExpert.lnk
\AntiSpywareExpert.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntiSpywareExpert.lnk

Rogue.UltimateAntiVirus
C:\Documents and Settings\Stephen Lewis\Desktop\Ultimate Antivirus.lnk
\Ultimate Antivirus.lnk

Rogue.Malware Protector 2008
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Malware Protector 2008.lnk

Rogue.Advanced AntiVirus 2008
\Advanced Antivirus.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Advanced Antivirus.lnk
C:\WINDOWS\system32\aav.cpl
C:\WINDOWS\system32\wav.cpl

Rogue.System AntiVirus 2008
\System Antivirus 2008.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\System Antivirus 2008.lnk

Rogue.MandelEnterprise/Variants
C:\Documents and Settings\Stephen Lewis\Desktop\Adware Deluxe.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Adware Patrol.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Doctor Adware Pro.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Doctor Adware.lnk

Rogue.AntiVirus 2009
C:\Documents and Settings\Stephen Lewis\Desktop\Antivirus 2009.lnk
\Antivirus 2009.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus 2009.lnk

Rogue.WinAntiSpyware2008
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\WinAntispyware2008.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\yhohynyd.bat
\WinAntispyware2008.lnk
C:\Documents and Settings\Stephen Lewis\Cookies\emyvixe._sy
C:\Documents and Settings\Stephen Lewis\Cookies\kabim.db
C:\Documents and Settings\Stephen Lewis\Cookies\libibozo.inf
C:\Documents and Settings\Stephen Lewis\Cookies\moqe.sys
C:\Documents and Settings\Stephen Lewis\Cookies\visudu._dl
C:\Documents and Settings\Stephen Lewis\Local Settings\Application Data\nirirokewi._dl
C:\Program Files\Common Files\canaj.inf
C:\Program Files\Common Files\igifeqyre.inf
C:\Program Files\Common Files\rylovewubu.scr
C:\Program Files\Common Files\sugu._dl
C:\Program Files\Common Files\zugy.db
C:\Documents and Settings\Stephen Lewis\Application Data\fyta.bin
C:\WINDOWS\wipfw.conf
C:\WINDOWS\zugykuzyd.exe
C:\WINDOWS\system32\cuco.reg
C:\WINDOWS\simu.dat
C:\WINDOWS\ruvovo.com
C:\WINDOWS\nyfinazom.dll
C:\WINDOWS\ekukomu.exe

Rogue.PestSweeper
C:\WINDOWS\system\cmsd.exe
C:\WINDOWS\system\MsWin000.exe
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\pestsweeper.lnk
\pestsweeper.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\pestsweeper.lnk
C:\Documents and Settings\Stephen Lewis\Local Settings\Application Data\Microsoft\Windows\sav.exe

Rogue.AntiVirus XP 2008
C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008.lnk
C:\Documents and Settings\All Users\Desktop\Antivirus XP 2008.lnk

Rogue.WistaAntiVirus
\WistaAntivirus.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\WistaAntivirus.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\WistaAntivirus.lnk

Rogue.PCCleanPro
\PC Clean Pro.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\PC Clean Pro.lnk

Rogue.PCAntiSpy
C:\WINDOWS\system32\drivers\pcantispy.sys

Rogue.Doctor AntiVirus 2008
\antvr.exe
C:\Documents and Settings\Stephen Lewis\Desktop\antvr.exe

Rogue.PCTotalDefender
C:\Documents and Settings\All Users\Desktop\PCTotalDefender.lnk

Rogue.Web/Registry Sentinel
C:\WINDOWS\AttentionEX.html
C:\WINDOWS\BadUrl.txt
C:\WINDOWS\delete.jpg
C:\WINDOWS\delete1.jpg
C:\WINDOWS\locked.ico
C:\WINDOWS\opened.ico
C:\WINDOWS\paths.jpg
C:\WINDOWS\prgrsbar.gif
C:\WINDOWS\refs.jpg
C:\WINDOWS\Sentinel1.jpg
C:\WINDOWS\Sentinel2.jpg
C:\WINDOWS\Sentinel3.jpg
C:\WINDOWS\Sentinel4.jpg
C:\WINDOWS\setts.jpg
C:\WINDOWS\stores.jpg
C:\WINDOWS\uid.tmp
C:\WINDOWS\vals.jpg
C:\WINDOWS\www.jpg
\The Registry Sentinel.lnk
\The Web Sentinel.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\The Registry Sentinel.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\The Web Sentinel.lnk

Rogue.VirusRemover2008
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusRemover2008.lnk
\Viruses.bdt
\VirusRemover2008.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Viruses.bdt
C:\Documents and Settings\Stephen Lewis\Desktop\VirusRemover2008.lnk

Rogue.AntiSpyware 2008
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Antispyware-2008.lnk
\Antispyware-2008.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Antispyware-2008.lnk

Rootkit.Agent/Gen
C:\WINDOWS\system32\msliksurcredo.dll
C:\WINDOWS\system32\msliksurdns.dll
C:\WINDOWS\system32\drivers\msliksurserv.sys

Rogue.AntiMalwareGuard
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiMalwareGuard.lnk
\AntiMalwareGuard.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntiMalwareGuard.lnk

Rogue.XP Cleaner
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\XP Cleaner.lnk
\XP Cleaner.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\XP Cleaner.lnk

Rogue.RegistryDoctor2008
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\RegistryDoctor2008.lnk
\RegistryDoctor2008.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\RegistryDoctor2008.lnk

Rogue.Win AntiVir 2008
\Win Antivir 2008.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Win Antivir 2008.lnk

Rogue.Power-Antivirus-2009
\Power-Antivirus-2009.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Power-Antivirus-2009.lnk

Adware.Media-Codec/ZLob
C:\Program Files\Applications\IEBTM.EXE
C:\Program Files\Applications\IEBTMM.EXE
C:\Program Files\Applications\WCM.EXE
C:\Program Files\Applications\WCS.EXE
C:\Program Files\Applications\IEBR.DLL

Rogue.WinAntiVirus2008
\Win Antivirus 2008.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Win Antivirus 2008.lnk

Rogue.WinDefender2008
\Launch WinDefender 2008.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Launch WinDefender 2008.lnk

Rogue.TraceSweeper
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Trace Sweeper.lnk
\Trace Sweeper.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Trace Sweeper.lnk

Rogue.PyroAntiSpy
C:\Documents and Settings\Stephen Lewis\Start Menu\PyroAntiSpy 2.2.lnk
\PyroAntiSpy.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\PyroAntiSpy.lnk

Rogue.Internet Antivirus
C:\Documents and Settings\All Users\Desktop\Internet Antivirus.lnk

Rogue.XP-Guard
\XP-Guard.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\XP-Guard.lnk

Rogue.AntiVir64
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\Startup\Antivir64.lnk

Rogue.TheSpyBot
\TheSpyBot.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\TheSpyBot.lnk

Rogue.SpyGuarder
\SpyGuarder.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyGuarder.lnk

Rogue.SpyDevastator
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyDevastator 1.32.lnk
\SpyDevastator.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\SpyDevastator.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\SpyDevastator 1.32.lnk

Rogue.Windows AntiVirus 2008
\Windows Antivirus 2008.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Windows Antivirus 2008.lnk

Rogue.XP Protector 2009
C:\Documents and Settings\All Users\Desktop\XP Protector 2009.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\XP Protector 2009.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\XP Protector 2009.lnk

Rogue.VirusResponseLab2009
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusResponse Lab 2009 2.1.lnk
\VirusResponse Lab 2009 2.1.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\VirusResponse Lab 2009 2.1.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\VirusResponse Lab 2009 2.1.lnk

Rogue.SecureExpertCleaner
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SecureExpertCleaner.lnk
C:\Documents and Settings\All Users\Desktop\Secure ExpertCleaner.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\QuickInstallPack.lnk

Rogue.eAntivirusPro
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\eAntivirusPro.lnk
C:\Documents and Settings\All Users\Desktop\eAntivirusPro.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\eAntivirusPro.lnk

Rogue.VirtualPCGuard
C:\Documents and Settings\All Users\Desktop\VirtualPCGuard.lnk

Rogue.SystemOptimizer2008
C:\Documents and Settings\All Users\Desktop\SystemOptimizer2008.lnk

Rogue.TotalSecure2009
C:\WINDOWS\k.txt
C:\WINDOWS\system32\c.ico
C:\WINDOWS\system32\m.ico
C:\WINDOWS\system32\p.ico
C:\WINDOWS\system32\s.ico
\Free MP3 Search.url
\Free Porn.url
\readme.bat
\Search Online.url
\Total Secure 2009.lnk
\VIP Casino.url
C:\Documents and Settings\Stephen Lewis\Desktop\Free MP3 Search.url
C:\Documents and Settings\Stephen Lewis\Desktop\Free Porn.url
C:\Documents and Settings\Stephen Lewis\Desktop\Search Online.url
C:\Documents and Settings\Stephen Lewis\Desktop\Total Secure 2009.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\VIP Casino.url
C:\Documents and Settings\Stephen Lewis\Favorites\Free MP3 Search.url
C:\Documents and Settings\Stephen Lewis\Favorites\Free Porn.url
C:\Documents and Settings\Stephen Lewis\Favorites\Search Online.url
C:\Documents and Settings\Stephen Lewis\Favorites\VIP Casino.url
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\Total Secure 2009.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Free MP3 Search.url
C:\Documents and Settings\Stephen Lewis\Start Menu\Free Porn.url
C:\Documents and Settings\Stephen Lewis\Start Menu\Search Online.url
C:\Documents and Settings\Stephen Lewis\Start Menu\VIP Casino.url

Rogue.SpywareGuard2008
C:\WINDOWS\reged.exe
C:\WINDOWS\spoolsystem.exe
C:\WINDOWS\sys.com
C:\WINDOWS\syscert.exe
C:\WINDOWS\sysexplorer.exe
C:\WINDOWS\vmreg.dll
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\olesys.dll
\Spyware Guard 2008.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Spyware Guard 2008.lnk

Rogue.PCProtectionCenter2008
C:\Documents and Settings\All Users\Desktop\PC Protection Center 2008.lnk

Rogue.XP AntiSpyware 2009
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\XP_AntiSpyware.lnk
\XP_AntiSpyware.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\XP_AntiSpyware.lnk

Rogue.XP AntiSpyware2009-Trace
C:\WINDOWS\karna.dat
C:\WINDOWS\system32\karna.dat
C:\WINDOWS\system32\_scui.cpl
\delself.bat
C:\Documents and Settings\Stephen Lewis\Desktop\delself.bat

Rogue.PCDefender2008
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\PC Defender 2008.lnk

Rogue.AntiSpywareXP2009
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpywareXP2009.lnk
\AntiSpywareXP2009.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntiSpywareXP2009.lnk

Rogue.AntiVirusSentry
\AntiVirus Sentry.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntiVirus Sentry.lnk

Rogue.RealAntiVirus
C:\Documents and Settings\Stephen Lewis\Desktop\RealAV.lnk
\RealAV.lnk

Rogue.PersonalDefender2009
C:\Documents and Settings\Stephen Lewis\Start Menu\Personal Defender 2009.lnk

Rogue.AntiVirusPro2009
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusPro2009.lnk
\AntivirusPro2009.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntivirusPro2009.lnk

Rogue.SecureFileShredder
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\SecureFileShredder.lnk

Trojan.Fake-Alert/Trace
C:\WINDOWS\system32\cont_mxlivemedia-remove.exe
C:\WINDOWS\system32\ounxvwyoaewekvp.exe
\Rapid Antivirus.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\Startup\Rapid Antivirus.lnk
C:\Documents and Settings\Stephen Lewis\Local Settings\Temporary Internet Files\fbk.sts
C:\Documents and Settings\All Users\Desktop\Best BDSM P0rn.url
C:\Documents and Settings\All Users\Desktop\Gay Fetish Sex.url
C:\WINDOWS\aol.com-error.html
C:\WINDOWS\gmail.com-error.html
C:\WINDOWS\google.com-error.html
C:\WINDOWS\system32\TDSSfpmp.dll

Rogue.VirusTrigger
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\VirusTrigger 2.1\VirusTrigger 2.1.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\VirusTrigger 2.1.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusTrigger 2.1.lnk

Rogue.WinDefender2009
\WinDefender 2009.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\WinDefender 2009.lnk
C:\Documents and Settings\Stephen Lewis\Start Menu\Programs\WinDefender 2009.lnk

Rogue.XPProtectionCenter
C:\WINDOWS\alaheb.dat
C:\WINDOWS\ocenuxos.bin
C:\WINDOWS\sufaku.dat
C:\WINDOWS\system32\otejywy._dl
C:\WINDOWS\system32\vojebeva._dl
C:\Program Files\Common Files\ecejacopoj.vbs
C:\Program Files\Common Files\ejihy.sys
C:\Program Files\Common Files\ezadylol._dl
C:\Documents and Settings\Stephen Lewis\Application Data\kecufuvyb.dll
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\XPProtectionCenter.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\yfijoba.inf
C:\Documents and Settings\All Users\Application Data\hebyrenazi.sys
C:\Documents and Settings\All Users\Application Data\hyvicoh.inf
C:\Documents and Settings\All Users\Application Data\ibiregy.inf
C:\Documents and Settings\All Users\Application Data\oxinyj.dll
C:\Documents and Settings\All Users\Documents\jyjylej.pif
C:\Documents and Settings\All Users\Documents\ydyk._sy
\XPProtectionCenter.lnk
C:\Documents and Settings\Stephen Lewis\Cookies\bofexedy.inf
C:\Documents and Settings\Stephen Lewis\Cookies\foras.scr
C:\Documents and Settings\Stephen Lewis\Cookies\wacudut.ban
C:\Documents and Settings\Stephen Lewis\Cookies\yvymuj.com
C:\Documents and Settings\Stephen Lewis\Desktop\XPProtectionCenter.lnk
C:\Documents and Settings\Stephen Lewis\Local Settings\Application Data\yqozucifil.dl

Rogue.AntiSpywareGuard
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpywareGuard.lnk
\AntiSpywareGuard.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\AntiSpywareGuard.lnk

Rogue.PerfectDefender2009
C:\Documents and Settings\Stephen Lewis\Start Menu\Perfect Defender 2009.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Perfect Defender 2009\Uninstall Perfect Defender 2009.lnk

Rogue.AntiVirus360
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus 360.lnk
\Antivirus 360.lnk
C:\Documents and Settings\Stephen Lewis\Desktop\Antivirus 360.lnk

Rogue.SystemBooster2009
C:\Documents and Settings\All Users\Desktop\SystemBooster2009 (Free Edition).lnk

Rogue.ISafeAntiVirus
C:\Documents and Settings\Stephen Lewis\Start Menu\iSafe AntiVirus 2.1.lnk
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\iSafe AntiVirus 2.1.lnk
\iSafe AntiVirus 2.1.lnk

Trojan.DNSChanger-Codec
C:\Documents and Settings\Stephen Lewis\Local Settings\Application Data\cygfs.dat
C:\Documents and Settings\Stephen Lewis\Local Settings\Application Data\cygfs.exe
C:\Documents and Settings\Stephen Lewis\Local Settings\Application Data\cygfs_nav.dat
C:\Documents and Settings\Stephen Lewis\Local Settings\Application Data\cygfs_navps.dat

Rogue.XPPolice
C:\Documents and Settings\Stephen Lewis\Start Menu\XP Police Antivirus.LNK

Rogue.TotalVirusProtection
C:\Documents and Settings\Stephen Lewis\Application Data\Microsoft\Internet Explorer\Quick Launch\Total Virus Protection.lnk

#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,759 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:13 AM

Posted 28 February 2009 - 11:12 PM

Hi thanks for that. What antivirus , antispy, and firewall programs do you use?
Was Super run from safe Mode?

Please run SDFix next..
Please print out and follow these instructions: "How to use SDFix". <- This program is for Windows 2000/XP ONLY.
When using this tool, you must use the Administrator's account or an account with "Administrative rights"
  • Disconnect from the Internet and temporarily disable your anti-virus, script blocking and any real time protection programs before performing a scan.
  • When done, the SDFix report log will open in notepad and automatically be saved in the SDFix folder as Report.txt.
  • If SDFix is unable to run after rebooting from Safe Mode, run SDFix in either Mode, and type F, then press Enter for it to finish the final stage and produce the report.
  • Please copy and paste the contents of Report.txt in your next reply.
  • Be sure to renable you anti-virus and and other security programs before connecting to the Internet.
-- If the computer has been infected with the VirusAlert! malware warning from the clock and the Start Menu icons or drives are not visible, open the SDFix folder, right-click on either the XP_VirusAlert_Repair.inf or W2K VirusAlert_Repair.inf (depending on your version of Windows) and select Install from the Context menu. Then reboot to apply the changes.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 crapi'minfected

crapi'minfected
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:07:13 AM

Posted 28 February 2009 - 11:17 PM

I'm using Antivira, SuperAntispyware and McAfee? I'm not sure, but if there is a firewall its probably not up to date... I'll post log shortly.
thanks greatly

edit: do i need to do the sdfix in safe mode?

Edited by crapi'minfected, 28 February 2009 - 11:18 PM.


#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,759 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:13 AM

Posted 28 February 2009 - 11:49 PM

Ok is that McAffee AV or Antispy or a suite as this could hav you running 2 AV's at the same time.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#9 crapi'minfected

crapi'minfected
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:07:13 AM

Posted 28 February 2009 - 11:53 PM

I think its a suite, whatever came with the computer I"m running. I'll disable all.

#10 crapi'minfected

crapi'minfected
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:07:13 AM

Posted 01 March 2009 - 12:23 AM

I apologize... I can't follow simple instructions, I didn't disconnect from internet or disable the antiviruses, etc. But here is the log file. If needed I'll gladly repeat the steps as directed. Also, I've just recently downloaded Antivira to this computer, but I would prefer download programs you would recommend.
thanks

edit: I followed through with another SAS scan and the same amount of infections showed up again):...


SDFix: Version 1.240
Run by Stephen Lewis on Sun 03/01/2009 at 12:10 AM

Microsoft Windows XP [Version 5.1.2600]
Running From: C:\SDFix

Checking Services :


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


Checking Files :

Trojan Files Found:

C:\WINDOWS\SYSTEM32\12783_UP.EXE - Deleted
C:\WINDOWS\system32\TFTP1096 - Deleted
C:\WINDOWS\system32\TFTP1560 - Deleted
C:\WINDOWS\system32\TFTP1804 - Deleted
C:\WINDOWS\system32\TFTP2468 - Deleted
C:\WINDOWS\system32\TFTP2516 - Deleted
C:\WINDOWS\system32\TFTP2604 - Deleted
C:\WINDOWS\system32\TFTP2888 - Deleted
C:\WINDOWS\system32\TFTP3392 - Deleted
C:\WINDOWS\system32\TFTP3492 - Deleted
C:\WINDOWS\system32\TFTP3724 - Deleted
C:\WINDOWS\system32\TFTP3756 - Deleted
C:\WINDOWS\system32\o - Deleted





Removing Temp Files

ADS Check :



Final Check :

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-01 00:16:29
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services :




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\WINDOWS\\SYSTEM32\\LEXPPS.EXE"="C:\\WINDOWS\\SYSTEM32\\LEXPPS.EXE:*:Disabled:LEXPPS.EXE"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

Remaining Files :


File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes :

Wed 11 Jul 2007 19,968 ...H. --- "C:\Documents and Settings\Stephen Lewis\My Documents\~WRL0209.tmp"
Fri 6 Aug 2004 65,536 A..H. --- "C:\Documents and Settings\MELANIE\Local Settings\Temp\FDR7.tmp"
Sun 15 Apr 2007 8 A..H. --- "C:\Documents and Settings\MELANIE\Application Data\GTek\GTUpdate\AUpdate\Channels\ch_u1\lock.tmp"
Sun 15 Apr 2007 8 A..H. --- "C:\Documents and Settings\MELANIE\Application Data\GTek\GTUpdate\AUpdate\Channels\ch_u2\lock.tmp"
Wed 18 Apr 2007 8 A..H. --- "C:\Documents and Settings\MELANIE\Application Data\GTek\GTUpdate\AUpdate\Channels\ch_u3\lock.tmp"
Wed 18 Apr 2007 8 A..H. --- "C:\Documents and Settings\MELANIE\Application Data\GTek\GTUpdate\AUpdate\Channels\ch_u4\lock.tmp"
Tue 1 Apr 2008 8 A..H. --- "C:\Documents and Settings\NAYDEAN\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\lock.tmp"
Tue 1 Apr 2008 8 A..H. --- "C:\Documents and Settings\NAYDEAN\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\lock.tmp"
Sun 1 Feb 2009 8 A..H. --- "C:\Documents and Settings\NAYDEAN\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\lock.tmp"
Sun 1 Feb 2009 8 A..H. --- "C:\Documents and Settings\NAYDEAN\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\lock.tmp"
Wed 18 Apr 2007 8 A..H. --- "C:\Documents and Settings\Stephen Lewis\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\lock.tmp"
Wed 18 Apr 2007 8 A..H. --- "C:\Documents and Settings\Stephen Lewis\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\lock.tmp"
Wed 18 Apr 2007 8 A..H. --- "C:\Documents and Settings\Stephen Lewis\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\lock.tmp"
Wed 18 Apr 2007 8 A..H. --- "C:\Documents and Settings\Stephen Lewis\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\lock.tmp"

Finished!

Edited by crapi'minfected, 01 March 2009 - 12:35 AM.


#11 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,759 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:13 AM

Posted 01 March 2009 - 12:36 AM

Please Update and run both SAS and MBam again, post the logs. I 'll be back in the morning.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#12 crapi'minfected

crapi'minfected
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:07:13 AM

Posted 01 March 2009 - 02:33 PM

I'm away from the infected computer now but will post the logs ASAP. Thank you for your help:)

#13 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,759 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:13 AM

Posted 01 March 2009 - 02:44 PM

OK,good, in fact after those 2 scans rerun SDFix.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#14 crapi'minfected

crapi'minfected
  • Topic Starter

  • Members
  • 17 posts
  • OFFLINE
  •  
  • Local time:07:13 AM

Posted 03 March 2009 - 12:17 PM

Sorry, I was unavailable for a couple days, here is the SAS log and MB logs :thumbsup:

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 03/03/2009 at 10:51 AM

Application Version : 4.24.1004

Core Rules Database Version : 3782
Trace Rules Database Version: 1739

Scan type : Complete Scan
Total Scan Time : 00:33:06

Memory items scanned : 474
Memory threats detected : 0
Registry items scanned : 5336
Registry threats detected : 0
File items scanned : 19310
File threats detected : 1143

Adware.MovieLand/MediaPipe
C:\Program Files\MovieLand Terms.html
C:\Documents and Settings\MELANIE\Desktop\MoviePass Terms.lnk
C:\Documents and Settings\MELANIE\Desktop\moviepass.url
C:\Program Files\moviepass Terms.html

Adware.AlfaCleaner
C:\WINDOWS\warnhp.html

Adware.Ezula
C:\WINDOWS\system32\ezstub.exe
C:\WINDOWS\Downloaded Program Files\ezstub.dll
C:\WINDOWS\Downloaded Program Files\ezstub.INF
C:\WINDOWS\eZinstall.exe
C:\WINDOWS\LastGood\Downloaded Program Files\ezstub.INF

Trojan.Painter
C:\WINDOWS\system32\MSWINUP32.DLL
C:\WINDOWS\system32\MSWINXML.DLL
C:\WINDOWS\system32\WINLFL32.DLL

Adware.ZToolbar
C:\WINDOWS\azesearch.bmp
C:\WINDOWS\system32\azebar.xml
C:\WINDOWS\Downloaded Program Files\azesearch.inf

Adware.Apropos Media
C:\WINDOWS\system32\auto_update_uninstall.log
C:\WINDOWS\system32\auto_update_uninstall.exe

Trojan.SpySheriff
C:\WINDOWS\secure32.html
c:\secure32.html
C:\SpySheriff.lnk
C:\Documents and Settings\MELANIE\Desktop\SpySheriff.lnk
\SpySheriff.lnk

Adware.180solutions/Search Assistant
C:\WINDOWS\Downloaded Program Files\ClientAX.dll
C:\WINDOWS\Downloaded Program Files\MediaGatewayX.dll
C:\WINDOWS\MediaGateway.exe.bin

Adware.WebNexus
C:\WINDOWS\LastGood\wupdt.exe
C:\WINDOWS\mynexus.exe
C:\WINDOWS\system32\pbvwb.dat
C:\WINDOWS\system32\vgactl.cpl
C:\WINDOWS\system32\wuauclt.dll
C:\WINDOWS\vlpnlp.dat
C:\WINDOWS\wupdt.exe
C:\installerwebnex.exe

Trojan.SmartFinder
C:\WINDOWS\system32\mfcgy32.dll
C:\WINDOWS\system32\owdwi.dll
C:\WINDOWS\system32\sdkok32.exe
C:\WINDOWS\sysvb.exe
C:\WINDOWS\mfcbh.exe
C:\WINDOWS\sdkhk.exe
C:\WINDOWS\system32\sdkmd32.dll
C:\WINDOWS\zkowf.dll

Trojan.SpyFalcon
C:\Documents and Settings\MELANIE\Desktop\SpyFalcon.lnk
C:\WINDOWS\system32\oleext.dll
C:\WINDOWS\system32\oleext32.dll

Trojan.MalwareWipe
C:\Documents and Settings\MELANIE\Desktop\MalwareWipe.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWipe.com 4.2.lnk
\MalwareWipe.com.lnk
C:\Documents and Settings\MELANIE\Desktop\MalwareWipe.com.lnk
C:\Documents and Settings\MELANIE\Start Menu\MalwareWipe.com 4.2.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWiped 5.2.lnk
C:\Documents and Settings\MELANIE\Start Menu\MalwareWiped 5.2.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Malware-Wiped 5.2.lnk
C:\Documents and Settings\MELANIE\Desktop\Malware-Wiped.lnk
C:\Documents and Settings\MELANIE\Start Menu\Malware-Wiped 5.2.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWiped 5.7.lnk
C:\Documents and Settings\MELANIE\Desktop\MalwareWiped 5.7.lnk
C:\Documents and Settings\MELANIE\Start Menu\MalwareWiped 5.7.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWiped 5.8.lnk
C:\Documents and Settings\MELANIE\Desktop\MalwareWiped 5.8.lnk
C:\Documents and Settings\MELANIE\Start Menu\MalwareWiped 5.8.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWiped 5.9.lnk
C:\Documents and Settings\MELANIE\Desktop\MalwareWiped 5.9.lnk
C:\Documents and Settings\MELANIE\Start Menu\MalwareWiped 5.9.lnk

Trojan.WinAntiSpyware/WinAntiVirus 2006/2007
C:\WINDOWS\system32\av.cpl
C:\WINDOWS\system32\drivers\FOPN.sys
C:\WINDOWS\system32\drivers\uwasfsd.sys
C:\WINDOWS\system32\stera.exe
C:\WINDOWS\system32\stera.job
C:\Documents and Settings\MELANIE\Desktop\Install WinAntiVirus Pro 2006 .lnk
C:\Documents and Settings\MELANIE\Cookies\administrator@www.winsoftware[2].txt
C:\Documents and Settings\MELANIE\Desktop\Summary.txt
C:\Documents and Settings\MELANIE\Desktop\WinAntiSpyware 2006 Scanner.lnk
C:\Documents and Settings\All Users\Desktop\WinAntiVirus Pro 2006.lnk
C:\Documents and Settings\All Users\Desktop\Look for answers in WinAntiVirus Pro 2007 Knowledge Base.lnk
C:\Documents and Settings\All Users\Desktop\WinAntiVirus Pro 2007.lnk

Adware.SurfSideKick
C:\Documents and Settings\MELANIE\Application Data\Sskcwrd.dll
C:\Documents and Settings\MELANIE\Application Data\Sskdmns.dll
C:\Documents and Settings\MELANIE\Application Data\Sskuknwrd.dll
C:\Documents and Settings\MELANIE\Application Data\Sskknwrd.dll

Trojan.WinFixer 2006
C:\WINDOWS\Downloaded Program Files\UWFX6_0001_N68M2301NetInstaller.exe
C:\WINDOWS\system32\dfe1.exe
C:\WINDOWS\system32\drivers\d_kmd.sys

Trojan.AdwarePunisher
C:\WINDOWS\adw.htm

Registry Cleaner Trial
C:\Documents and Settings\MELANIE\Desktop\Registry Cleaner.lnk

Trojan.Windows Overlay Components/SysMon
C:\WINDOWS\offun.exe

Trojan.ZenoSearch
C:\WINDOWS\system32\msnav32.ax
C:\Documents and Settings\MELANIE\Start Menu\Z_Start.lnk
C:\Documents and Settings\MELANIE\Start Menu\Programs\Startup\Zeno.lnk

Adware.IST/ISTBar (Slotch Bar)
C:\WINDOWS\Downloaded Program Files\ISTactivex.dll

Trojan.Avpe64/32
C:\WINDOWS\system32\klgcptini.dat
C:\WINDOWS\system32\stt82.ini

Adware.Adservs
C:\WINDOWS\system32\atmtd.dll
C:\WINDOWS\system32\atmtd.dll._

Trojan.DCOM Server
C:\WINDOWS\system32\dcom_14.dll

Trojan.Malware
C:\WINDOWS\back.gif
C:\WINDOWS\bg.gif
C:\WINDOWS\buy-btn.gif
C:\WINDOWS\download-btn.gif
C:\WINDOWS\security.html
C:\Documents and Settings\MELANIE\Desktop\Adware Reviews.url
C:\Documents and Settings\MELANIE\Desktop\Play Poker.url
C:\Documents and Settings\MELANIE\Desktop\access
C:\Documents and Settings\MELANIE\Desktop\domains
C:\Documents and Settings\MELANIE\Desktop\map.txt
C:\asdf.txt

Adware.HotBar (Low Risk)
C:\WINDOWS\Downloaded Program Files\HbInstIE.dll

Adware.HotBar/SpamBlockerUtility (Low Risk)
C:\WINDOWS\Downloaded Program Files\SpamBlockerUtility.inf

Trojan.UnSpyPC Spyware Scanner
C:\Documents and Settings\MELANIE\Desktop\UnSpyPC Scanner & Monitor.lnk
C:\Documents and Settings\MELANIE\Desktop\SafeAndClean_report.htm

Adware.MediaMediatickets
C:\WINDOWS\Downloaded Program Files\MediaTicketsInstaller.INF
C:\WINDOWS\Downloaded Program Files\MediaTicketsInstaller.ocx

Adware.MediaMotor
C:\WINDOWS\Downloaded Program Files\mm83.ocx
C:\WINDOWS\Downloaded Program Files\amm06.inf
C:\WINDOWS\Downloaded Program Files\amm06.ocx
C:\WINDOWS\System32\safe.tlb
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\amm06.inf
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\amm06.ocx
C:\WINDOWS\mm06y.ini
C:\WINDOWS\Downloaded Program Files\motorsix.inf

Trojan.ISA32
C:\WINDOWS\system32\drivers\isa32.sys

Trojan.PestTrap
C:\Documents and Settings\MELANIE\Desktop\PestTrap.lnk

Parasite.SpyAxe
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareAxe 3.0.lnk
C:\Documents and Settings\MELANIE\Desktop\SpywareAxe.lnk

Trojan.RazeSpyware
C:\Documents and Settings\MELANIE\Desktop\RazeSpyware.lnk

Trojan.AdwareSheriff
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AdwareSheriff.lnk
C:\Documents and Settings\MELANIE\Desktop\AdwareSheriff.lnk
C:\Documents and Settings\MELANIE\Start Menu\asheriff.lnk

Trojan.RemedyAntiSpy
C:\Documents and Settings\MELANIE\Desktop\RemedyAntispy.lnk

Trojan.HitVirus
C:\Documents and Settings\MELANIE\Desktop\HitVirus.lnk

Trojan.Anti-Virus Pro
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Start Anti-Virus-Pro.lnk
C:\Documents and Settings\MELANIE\Desktop\Anti-Virus-Pro.lnk
C:\Documents and Settings\MELANIE\Desktop\Anti-Virus-Pro.pkg

Trojan.PSGuard
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\P.S.Guard spyware remover.lnk

Trojan.ADWareBazooka
C:\Documents and Settings\MELANIE\Desktop\ADWareBazooka.lnk

Trojan.RegiFast
C:\regifast.log
C:\RFManager.log
C:\RFSilentInstaller.log

Browser Hijacker.Favorites
C:\Documents and Settings\MELANIE\Favorites\Favorites\Cars.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Domain Names.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Finance.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Games.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Humor.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Movies.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Music and Movies
C:\Documents and Settings\MELANIE\Favorites\Favorites\Music and Movies\Albums.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Music and Movies\Artists.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Music and Movies\AudioBooks.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Music and Movies\Collections.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Music and Movies\Mp3 Search.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Music and Movies\New releases.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Music and Movies\Ratings.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Music and Movies\Soundtracks.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Online Pharmacy.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Sex Personals.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Sports.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Spyware Removers
C:\Documents and Settings\MELANIE\Favorites\Favorites\Spyware Removers\ADWare Bazooka.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Spyware Removers\Adware Punisher.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Spyware Removers\Adware Sheriff.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Spyware Removers\HIT Virus.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Spyware Removers\Raze Spyware.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Spyware Removers\Reg Freeze.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Spyware Removers\Remedy AntiSpy.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Spyware Removers\SPY iBlock.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Spyware Removers\The Spy Guard Site.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Viagra.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Weather.url
C:\Documents and Settings\MELANIE\Favorites\Favorites\Web Hosting.url
C:\Documents and Settings\MELANIE\Favorites\Games\Carnival Casino.url
C:\Documents and Settings\MELANIE\Favorites\Games\Club Dice Casino.url
C:\Documents and Settings\MELANIE\Favorites\Games\New York Casino.url
C:\Documents and Settings\MELANIE\Favorites\Games\USA Casino.url
C:\Documents and Settings\MELANIE\Favorites\Games\You Bingo.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Aces & Faces.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Baccarat.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Black Jack.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Caribbean Poker.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Casino War.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Cinerama.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Craps.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Deuces Wild.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Diamond Valley.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Fruit Mania.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Gold Rally.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Jacks or Better.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Magic Slots.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Mega Jacks.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Pai Gow Poker.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Red Dog Poker.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Roulette.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\SafeCracer.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Sic Bo.url
C:\Documents and Settings\MELANIE\Favorites\Games\Gambling\Wall St. Fever.url
C:\Documents and Settings\MELANIE\Favorites\Games\Monaco Gold Casino.url
C:\Documents and Settings\MELANIE\Favorites\Travel\Adventure Travel.url
C:\Documents and Settings\MELANIE\Favorites\Travel\Air Travel.url
C:\Documents and Settings\MELANIE\Favorites\Travel\Business Travel.url
C:\Documents and Settings\MELANIE\Favorites\Travel\Discount Travel.url
C:\Documents and Settings\MELANIE\Favorites\Travel\Food.url
C:\Documents and Settings\MELANIE\Favorites\Travel\Hawaii Travel.url
C:\Documents and Settings\MELANIE\Favorites\Travel\Lodging.url
C:\Documents and Settings\MELANIE\Favorites\Travel\London Travel.url
C:\Documents and Settings\MELANIE\Favorites\Travel\Travel Agent.url
C:\Documents and Settings\MELANIE\Favorites\Travel\Travel Insurance.url
C:\Documents and Settings\MELANIE\Favorites\Travel\Travel package.url
C:\Documents and Settings\MELANIE\Favorites\Travel\Travel Reservation.url
C:\Documents and Settings\MELANIE\Favorites\Travel\Travel Spain.url
C:\Documents and Settings\MELANIE\Favorites\Travel\Travel Web site.url
C:\Documents and Settings\MELANIE\Favorites\Travel\Vacation Cruises.url
C:\Documents and Settings\MELANIE\Favorites\Travel\Vacations.url
C:\Documents and Settings\MELANIE\Favorites\Download Free Spyware Remover.url
C:\Documents and Settings\All Users\Favorites\Download Free Spyware Remover.url
C:\Documents and Settings\MELANIE\Favorites\NEW VIAGRA at Half Price!.url
C:\Documents and Settings\All Users\Favorites\NEW VIAGRA at Half Price!.url
C:\Documents and Settings\MELANIE\Favorites\Online Chat With Nude Girls.url
C:\Documents and Settings\All Users\Favorites\Online Chat With Nude Girls.url
C:\Documents and Settings\MELANIE\Favorites\Order CIALIS online without leaving home..url
C:\Documents and Settings\All Users\Favorites\Order CIALIS online without leaving home..url
C:\Documents and Settings\MELANIE\Favorites\PC protection in under 2 minutes!.url
C:\Documents and Settings\All Users\Favorites\PC protection in under 2 minutes!.url
C:\Documents and Settings\MELANIE\Favorites\SEX Dating - Real Girls For Real SEX.url
C:\Documents and Settings\All Users\Favorites\SEX Dating - Real Girls For Real SEX.url
C:\Documents and Settings\MELANIE\Favorites\Stop PopUps On Your Computer.url
C:\Documents and Settings\All Users\Favorites\Stop PopUps On Your Computer.url
C:\Documents and Settings\MELANIE\Favorites\VIAGRA at incredible low price. Bonus Pills!.url
C:\Documents and Settings\All Users\Favorites\VIAGRA at incredible low price. Bonus Pills!.url
C:\Documents and Settings\MELANIE\Favorites\View ADULT photos of REAL GIRLS!.url
C:\Documents and Settings\All Users\Favorites\View ADULT photos of REAL GIRLS!.url
C:\Documents and Settings\MELANIE\Favorites\Dating\Adult Gay Personals.url
C:\Documents and Settings\MELANIE\Favorites\Dating\Adult Personals.url
C:\Documents and Settings\MELANIE\Favorites\Dating\Bondage Personals.url
C:\Documents and Settings\MELANIE\Favorites\Dating\Chinese Personals.url
C:\Documents and Settings\MELANIE\Favorites\Dating\Christian Personals.url
C:\Documents and Settings\MELANIE\Favorites\Dating\Dating & Marriage.url
C:\Documents and Settings\MELANIE\Favorites\Dating\Dating Gay Personals.url
C:\Documents and Settings\MELANIE\Favorites\Dating\Fillipina Personals.url
C:\Documents and Settings\MELANIE\Favorites\Dating\Find Sex Partner.url
C:\Documents and Settings\MELANIE\Favorites\Dating\French Personals.url
C:\Documents and Settings\MELANIE\Favorites\Dating\German Personals.url
C:\Documents and Settings\MELANIE\Favorites\Dating\Indian Personals.url
C:\Documents and Settings\MELANIE\Favorites\Dating\Italian Personals.url
C:\Documents and Settings\MELANIE\Favorites\Dating\Jewish Personals.url
C:\Documents and Settings\MELANIE\Favorites\Dating\Senior Personals.url
C:\Documents and Settings\MELANIE\Favorites\Dating\Sex Personals.url
C:\Documents and Settings\MELANIE\Favorites\Dating\Spanish & Portuguese.url

Adware.Elite Media
C:\WINDOWS\Downloaded Program Files\elite.inf
C:\WINDOWS\Downloaded Program Files\elite.ocx
C:\WINDOWS\elitemediagroup.ini
C:\Program Files\Common Files\EliteMediaGroupOinUninstaller.exe
C:\WINDOWS\em06y.ini

Trojan.Freeprod
C:\Documents and Settings\MELANIE\Desktop\freeprodtb.exe

Adware.IEPlugin
C:\Documents and Settings\MELANIE\Desktop\Desktop Toolbar
C:\WINDOWS\isp.ico
C:\WINDOWS\lu.dat

Trojan.RieMon
C:\WINDOWS\system32\unirimon.exe

Adware.BookedSpace
C:\WINDOWS\bsx32.ini
C:\WINDOWS\bs2.dll
C:\WINDOWS\bs3.dll
C:\WINDOWS\bsx5.dll
C:\WINDOWS\bxxs5.dll
C:\WINDOWS\oo4.dll
C:\WINDOWS\system32\acd.dll
C:\WINDOWS\system32\anaamon.dll
C:\WINDOWS\system32\bs2.dll
C:\WINDOWS\system32\bs3.dll
C:\WINDOWS\system32\bsx5.dll
C:\WINDOWS\system32\bxsx5.dll
C:\WINDOWS\system32\bxxs5.dll
C:\WINDOWS\system32\oo4.dll
C:\WINDOWS\system32\rem00001.dll

Trojan.Security Toolbar
C:\Documents and Settings\All Users\Start Menu\Online Security Guide.url
C:\Documents and Settings\All Users\Start Menu\Security Troubleshooting.url
C:\Documents and Settings\MELANIE\Favorites\Antivirus Test Online.url
C:\Documents and Settings\All Users\Desktop\Security Troubleshooting.url
C:\Documents and Settings\All Users\Desktop\Online Security Guide.url
C:\Documents and Settings\All Users\Desktop\Find And Fix Errors.lnk

Adware.IST/YourSiteBar
C:\WINDOWS\Downloaded Program Files\ysbactivex.dll
C:\WINDOWS\Downloaded Program Files\ysbactivex.inf

Adware.HotBar/WOWPapers (Low Risk)
C:\Documents and Settings\All Users\Desktop\Free PC Wallpapers.lnk

Adware.Casino Games (Golden Palace Casino)
\Best Casino. $200 signup bonus!.url
C:\Documents and Settings\MELANIE\Desktop\Best Casino. $200 signup bonus!.url
C:\Documents and Settings\MELANIE\Favorites\Best Casino. $200 signup bonus!.url

Trojan.BraveSentry
C:\Documents and Settings\MELANIE\Desktop\BraveSentry.lnk

Trojan.Spy-Shield/BON
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Spy-Shield v4.1.lnk
C:\Documents and Settings\MELANIE\Desktop\Spy-Shield v4.1.lnk

Adware.Best Offers Network
C:\WINDOWS\tboninst.cfg

Trojan.ZQuest
C:\WINDOWS\dh.ini

Adware.Mirar/NetNucleus
C:\WINDOWS\Downloaded Program Files\WinATS.inf
C:\WINDOWS\Downloaded Program Files\Winwcd.inf

Trojan.PKL/Malware
C:\WINDOWS\system32\bpkwb.dll
C:\WINDOWS\system32\johnwb.dll
C:\WINDOWS\system32\systemwb.dll

Adware.WebHancer
C:\WINDOWS\whAgent.inf
C:\WINDOWS\whInstaller.ini

Malware.SpywareQuake
C:\Documents and Settings\MELANIE\Desktop\SpywareQuake.lnk
C:\Documents and Settings\MELANIE\Start Menu\SpywareQuake 2.0.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareQuake 2.0.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyQuake2.com 2.3.lnk
\SpyQuake2.com.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyQuake2.com.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareQuaked 2.4.lnk
\SpywareQuaked.lnk
C:\Documents and Settings\MELANIE\Desktop\SpywareQuaked.lnk
C:\Documents and Settings\MELANIE\Start Menu\SpywareQuaked 2.4.lnk

Adware.TrustInCash
C:\WINDOWS\system32\tisa.cnf

Adware.GloboLook
C:\WINDOWS\system32\Air Tickets.ico
C:\WINDOWS\system32\Big Tits.ico
C:\WINDOWS\system32\BlackJack.ico
C:\WINDOWS\system32\Britney Spears.ico
C:\WINDOWS\system32\Car Insurance.ico
C:\WINDOWS\system32\Cheap Cigarettes.ico
C:\WINDOWS\system32\Credit Card.ico
C:\WINDOWS\system32\Cruises.ico
C:\WINDOWS\system32\Currency Trading.ico
C:\WINDOWS\system32\Lesbian Sex.ico
C:\WINDOWS\system32\MP3.ico
C:\WINDOWS\system32\Online Betting.ico
C:\WINDOWS\system32\Online Gambling.ico
C:\WINDOWS\system32\Oral Sex.ico
C:\WINDOWS\system32\Party Poker.ico
C:\WINDOWS\system32\Pharmacy.ico
C:\WINDOWS\system32\Phentermine.ico
C:\WINDOWS\system32\Pornstars.ico
C:\WINDOWS\system32\Remove Spyware.ico
C:\WINDOWS\system32\Viagra.ico

Adware.ClickSpring/Yazzle
C:\WINDOWS\Downloaded Program Files\YazzleActiveX.inf
C:\WINDOWS\Downloaded Program Files\YazzleActiveX.ocx

Trojan.SysProtect
C:\Documents and Settings\MELANIE\Desktop\SysProtect.lnk

Trojan.CDSC63R
C:\WINDOWS\system32\cdscsix3.dll
C:\WINDOWS\system32\cdscsix3r.sys

Adware.Tesla Plus
C:\Program Files\secure32.html

Malware.SpyCut
C:\Documents and Settings\MELANIE\Desktop\SpyCut.lnk

Malware.Spyware Soft Stop
C:\Documents and Settings\MELANIE\Desktop\Spyware Soft Stop.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Spyware Soft Stop.lnk

Malware.SpywareSheriff
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareSheriff.lnk
\SpywareSheriff.lnk

Trojan.Hackarmy Variant
C:\WINDOWS\system32\MsnMsr.exe

Trojan.XptpMM
C:\WINDOWS\system32\fux87.ini

Malware.Spyware Vanisher
C:\WINDOWS\Spyware Vanisher Setup Log.txt
\Spyware Vanisher Free Scan.lnk
C:\Documents and Settings\MELANIE\Desktop\Spyware Vanisher Free Scan.lnk

Malware.Ultimate Defender
\Ultimate Defender.lnk
\Ultimate Defender.pkg
C:\Documents and Settings\MELANIE\Desktop\Ultimate Defender.lnk
C:\Documents and Settings\MELANIE\Desktop\Ultimate Defender.pkg

Adware.TV Media
C:\WINDOWS\Downloaded Program Files\APInstall_Tiny.dll

DIaler.Super-Adult
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Night Club - Foto Annunci Video - VM18.lnk
\Night Club - Foto Annunci Video - VM18.lnk
C:\Documents and Settings\MELANIE\Desktop\Night Club - Foto Annunci Video - VM18.lnk
C:\Documents and Settings\MELANIE\Start Menu\Programs\Night Club - Foto Annunci Video - VM18.lnk

Malware.SystemDoctor
\SystemDoctor 2006.lnk
C:\Documents and Settings\MELANIE\Desktop\SystemDoctor 2006.lnk
C:\WINDOWS\Downloaded Program Files\USDR6_0001_D08M0404NetInstaller.exe

Dialer.VacPro
C:\WINDOWS\Downloaded Program Files\int_ver34.INF
C:\WINDOWS\Downloaded Program Files\int_ver34.ocx

Malware.AlertSpy
\AlertSpy.lnk
C:\Documents and Settings\MELANIE\Desktop\AlertSpy.lnk

Malware.Trust Cleaner
\Trust Cleaner.lnk
C:\Documents and Settings\MELANIE\Desktop\Trust Cleaner.lnk

Adware.Desktop Hijacker
C:\Program Files\Google\nicobitop.html

Malware.GreatMemo
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\GreatMemo.lnk
\GreatMemo.lnk
C:\Documents and Settings\MELANIE\Desktop\GreatMemo.lnk
C:\Documents and Settings\MELANIE\Start Menu\Programs\Startup\GreatMemo.lnk

Malware.TitanShield
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\TitanShield Antispyware.lnk
\TitanShield Antispyware.lnk
C:\Documents and Settings\MELANIE\Desktop\TitanShield Antispyware.lnk

Malware.RegFreeze
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\RegFreeze.lnk
\RegFreeze.lnk
C:\Documents and Settings\MELANIE\Start Menu\Programs\Startup\RegFreeze.lnk

Malware.Adware Finder
\AdwareFinder.lnk
C:\Documents and Settings\MELANIE\Desktop\AdwareFinder.lnk

Malware.SpyHeal
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyHeal 2.1.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyHeal.lnk
C:\Documents and Settings\MELANIE\Start Menu\SpyHeal 2.1.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Spy-Heal 2.1.lnk
C:\Documents and Settings\MELANIE\Desktop\Spy-Heal.lnk
C:\Documents and Settings\MELANIE\Start Menu\Spy-Heal 2.1.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyHealer 2.2.lnk
\SpyHealer.lnk
C:\Documents and Settings\MELANIE\Start Menu\SpyHealer 2.2.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyHeals 2.3.lnk
\SpyHeals.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyHeals.lnk
C:\Documents and Settings\MELANIE\Start Menu\SpyHeals 2.3.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyHeal 2.7.lnk
\SpyHeal 2.7.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyHeal 2.7.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyHeal 3.5.lnk
\SpyHeal 3.5.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyHeal 3.5.lnk
C:\Documents and Settings\MELANIE\Start Menu\SpyHeal 3.5.lnk

Trojan.DollarRevenue
C:\WINDOWS\newname.dat
C:\WINDOWS\keyboard1.dat

Spyware.IEToolbar
C:\Program Files\IEToolbar\inst.bat
C:\Program Files\IEToolbar\searchbarus.dll
C:\Program Files\IEToolbar\searchbarus.inf

Malware.AntiVirusGolden
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusGolden 3.3.lnk
\AntivirusGolden.lnk
C:\Documents and Settings\MELANIE\Desktop\AntivirusGolden.lnk
C:\Documents and Settings\MELANIE\Start Menu\AntivirusGolden 3.3.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiviralGolden 3.5.lnk
\AntiviralGolden.lnk
C:\Documents and Settings\MELANIE\Desktop\AntiviralGolden.lnk
C:\Documents and Settings\MELANIE\Start Menu\AntiviralGolden 3.5.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusGolden 4.0.lnk
\AntivirusGolden 4.0.lnk
C:\Documents and Settings\MELANIE\Desktop\AntivirusGolden 4.0.lnk
C:\Documents and Settings\MELANIE\Start Menu\AntivirusGolden 4.0.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusGold 4.4.lnk
\AntivirusGold 4.4.lnk
C:\Documents and Settings\MELANIE\Desktop\AntivirusGold 4.4.lnk
C:\Documents and Settings\MELANIE\Start Menu\AntivirusGold 4.4.lnk

Malware.VirusBlast
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusBlast v5.0.lnk
\VirusBlast v5.0.lnk
C:\Documents and Settings\MELANIE\Desktop\VirusBlast v5.0.lnk
C:\Documents and Settings\MELANIE\Start Menu\VirusBlast v5.0.lnk

Trojan.Media-Codec
\PornMag Pass.lnk
C:\Documents and Settings\MELANIE\Desktop\PornMag Pass.lnk
\X Password Generator.lnk
C:\Documents and Settings\MELANIE\Desktop\X Password Generator.lnk
\PornPass Manager.lnk
C:\Documents and Settings\MELANIE\Desktop\PornPass Manager.lnk
\Key Generator.lnk
C:\Documents and Settings\MELANIE\Desktop\Key Generator.lnk
C:\Documents and Settings\MELANIE\Favorites\Online Security Test.url

Trojan.ErrorSafe
C:\Documents and Settings\All Users\Start Menu\Programs\ErrorSafe\ErrorSafe on the Web.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\ErrorSafe\Uninstall ErrorSafe.lnk

Malware.Antispyware Soldier
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Antispyware Soldier.lnk
\Antispyware Soldier.lnk
C:\Documents and Settings\MELANIE\Start Menu\Programs\Startup\antispysoldier.lnk

Trojan.StoneDrv
C:\WINDOWS\system32\inistone.ini

Malware.VirusBurst
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusBurst 6.1.lnk
\VirusBurst.lnk
C:\Documents and Settings\MELANIE\Desktop\VirusBurst.lnk
C:\Documents and Settings\MELANIE\Start Menu\VirusBurst 6.1.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Virus-Burst 6.1.lnk
\Virus-Burst.lnk
C:\Documents and Settings\MELANIE\Desktop\Virus-Burst.lnk
C:\Documents and Settings\MELANIE\Start Menu\Virus-Burst 6.1.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusBurster 6.2.lnk
\VirusBurster.lnk
C:\Documents and Settings\MELANIE\Desktop\VirusBurster.lnk
C:\Documents and Settings\MELANIE\Start Menu\VirusBurster 6.2.lnk

Malware.AdProtect
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Ad-Protect v6.3.lnk
\Ad-Protect v6.3.lnk
C:\Documents and Settings\MELANIE\Desktop\Ad-Protect v6.3.lnk
C:\Documents and Settings\MELANIE\Start Menu\Ad-Protect v6.3.lnk

Malware.DriveCleaner
\DriveCleaner 2006 Free.lnk
C:\Documents and Settings\MELANIE\Desktop\DriveCleaner 2006 Free.lnk
C:\Program Files\Common Files\DriveCleaner Freeware
C:\Program Files\DriveCleaner Freeware
C:\Documents and Settings\MELANIE\Application Data\DriveCleaner Freeware
C:\Documents and Settings\All Users\Start Menu\Programs\DriveCleaner Freeware

Malware.VirusRescue
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusRescue v3.0.1.lnk
\VirusRescue v3.0.1.lnk
C:\Documents and Settings\MELANIE\Desktop\VirusRescue v3.0.1.lnk
C:\Documents and Settings\MELANIE\Start Menu\VirusRescue v3.0.1.lnk

Malware.RepairRegistryPro
\Repair Registry Pro.lnk
C:\Documents and Settings\MELANIE\Desktop\Repair Registry Pro.lnk

Unclassified.SpywareBot (Not A Threat)
\SpywareBot.lnk
C:\Documents and Settings\MELANIE\Desktop\SpywareBot.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareBot.lnk

Malware.PestCapture
\PestCapture.lnk
C:\Documents and Settings\MELANIE\Desktop\PestCapture.lnk

Malware.AntiVermins
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiVermins 2.1.lnk
C:\Documents and Settings\MELANIE\Start Menu\AntiVermins 2.1.lnk
\AntiVermins.lnk
C:\Documents and Settings\MELANIE\Desktop\AntiVermins.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiVermins 2.5.lnk
\AntiVermins 2.5.lnk
C:\Documents and Settings\MELANIE\Desktop\AntiVermins 2.5.lnk
C:\Documents and Settings\MELANIE\Start Menu\AntiVermins 2.5.lnk

Worm.Spam-Strato
C:\WINDOWS\msserrv32.dat
C:\WINDOWS\msserrv32.s
C:\WINDOWS\msserrv32.wax
C:\WINDOWS\msserrv32.z
C:\WINDOWS\msserv32.dat
C:\WINDOWS\msserv32.s
C:\WINDOWS\msserv32.wax
C:\WINDOWS\msserv32.z
C:\WINDOWS\mswiizz32.dat
C:\WINDOWS\mswiizz32.s
C:\WINDOWS\mswiizz32.wax
C:\WINDOWS\mswiizz32.z
C:\WINDOWS\mswiz32.dat
C:\WINDOWS\mswiz32.s
C:\WINDOWS\mswiz32.wax

Trojan.Bagle Variant
C:\WINDOWS\system32\winupd.exeopen
C:\WINDOWS\system32\winupd.exeopenopen
C:\WINDOWS\system32\winupd.exeopenopenopen

Malware.SpyiBlock
\SpyiBlock.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyiBlock.lnk

Malware.BreakSpyware
\BreakSpyware.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Break Spyware.lnk

Malware.SpyMarshal
C:\Documents and Settings\MELANIE\Desktop\SpyMarshal.lnk

Malware.MrAntiSpy
C:\Documents and Settings\MELANIE\Desktop\MrAntispy.lnk
\MrAntispy.lnk

Malware.MalwareAlarm
\MalwareAlarm.lnk
C:\Documents and Settings\MELANIE\Desktop\MalwareAlarm.lnk

Malware.SpywareKnight
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareKnight.lnk
C:\Documents and Settings\MELANIE\Desktop\SpywareKnight.lnk

Malware.SpySoldier
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpySoldier.lnk
\SpySoldier.lnk
C:\Documents and Settings\MELANIE\Desktop\SpySoldier.lnk

Malware.ContraVirus
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\ContraVirus 2.0.lnk
C:\Documents and Settings\MELANIE\Desktop\ContraVirus 2.0.lnk
C:\Documents and Settings\MELANIE\Start Menu\ContraVirus 2.0.lnk

Trojan.Rustock/LZX32
C:\WINDOWS\system32:lzx32.sys

Trojan.Rustock/HUY32
C:\WINDOWS\system32:huy32.sys

Malware.SpyDawn
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyDawn 3.1.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyDawn.lnk
C:\Documents and Settings\MELANIE\Start Menu\SpyDawn 3.1.lnk

Malware.SpyLocked
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyLocked 3.1.lnk
\SpyLocked.lnk
C:\Documents and Settings\MELANIE\Start Menu\SpyLocked 3.1.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareLocked 3.2.lnk
\SpywareLocked.lnk
C:\Documents and Settings\MELANIE\Start Menu\SpywareLocked 3.2.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareLocked 3.3.lnk
\SpywareLocked 3.3.lnk
C:\Documents and Settings\MELANIE\Desktop\SpywareLocked 3.3.lnk
C:\Documents and Settings\MELANIE\Start Menu\SpywareLocked 3.3.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareLocked 3.4.lnk
\SpywareLocked 3.4.lnk
C:\Documents and Settings\MELANIE\Desktop\SpywareLocked 3.4.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareLocked 3.5.lnk
\SpywareLocked 3.5.lnk
C:\Documents and Settings\MELANIE\Desktop\SpywareLocked 3.5.lnk
C:\Documents and Settings\MELANIE\Start Menu\SpywareLocked 3.5.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyLocked 3.6.lnk
\SpyLocked 3.6.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyLocked 3.6.lnk
C:\Documents and Settings\MELANIE\Start Menu\SpyLocked 3.6.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyLocked 3.7.lnk
\SpyLocked 3.7.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyLocked 3.7.lnk
C:\Documents and Settings\MELANIE\Start Menu\SpyLocked 3.7.lnk

Malware.MalwareStopper
\MalwareStopper.lnk

Dialer.InfoDialer
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\e1xplorer.lnk
\e1xplorer.lnk
C:\Documents and Settings\MELANIE\Desktop\e1xplorer.lnk
C:\Documents and Settings\MELANIE\Favorites\e1xplorer.lnk
C:\Documents and Settings\MELANIE\My Documents\e1xplorer.lnk
C:\Documents and Settings\MELANIE\Start Menu\Programs\e1xplorer.lnk
C:\Documents and Settings\MELANIE\Start Menu\e1xplorer.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\exsplorer.lnk
\exsplorer.lnk
C:\Documents and Settings\MELANIE\Desktop\exsplorer.lnk
C:\Documents and Settings\MELANIE\Favorites\exsplorer.lnk
C:\Documents and Settings\MELANIE\My Documents\exsplorer.lnk
C:\Documents and Settings\MELANIE\Start Menu\Programs\exsplorer.lnk
C:\Documents and Settings\MELANIE\Start Menu\exsplorer.lnk

Malware.SpyAnalyst
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Spy Analyst.lnk
\SpyAnalyst.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyAnalyst.lnk

Malware.SpyOfficer
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Spy Officer.lnk
\SpyOfficer.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyOfficer.lnk

Malware.SpywareSoftStop
\SpywareSoftStop.lnk
C:\Documents and Settings\MELANIE\Desktop\SpywareSoftStop.lnk

Malware.DrAntiSpy
\DrAntispy.lnk
C:\Documents and Settings\MELANIE\Desktop\DrAntispy.lnk

Malware.Ultimate Fixer
C:\Documents and Settings\MELANIE\Desktop\UltimateFixer 2007.lnk

Malware.VirusLocker
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusLocker 3.1.lnk
\VirusLocker.lnk
C:\Documents and Settings\MELANIE\Desktop\VirusLocker.lnk
C:\Documents and Settings\MELANIE\Start Menu\VirusLocker 3.1.lnk

Malware.SpyCrush
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyCrush 3.2.lnk
\SpyCrush 3.2.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyCrush 3.2.lnk
C:\Documents and Settings\MELANIE\Start Menu\SpyCrush 3.2.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyCrush 3.3.lnk
\SpyCrush 3.3.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyCrush 3.3.lnk
C:\Documents and Settings\MELANIE\Start Menu\SpyCrush 3.3.lnk

Unclassified.System Live Protect
C:\Documents and Settings\MELANIE\Desktop\System Live Protect.lnk

Malware.Spyware Sweeper
\Spyware Sweeper.lnk
C:\Documents and Settings\MELANIE\Desktop\Spyware Sweeper.lnk

Malware.VirusHeal
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusHeal 3.7.lnk
\VirusHeal 3.7.lnk
C:\Documents and Settings\MELANIE\Desktop\VirusHeal 3.7.lnk
C:\Documents and Settings\MELANIE\Start Menu\VirusHeal 3.7.lnk

Malware.VirusProtectPro
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.3.lnk
\VirusProtectPro 3.3.lnk
C:\Documents and Settings\MELANIE\Desktop\VirusProtectPro 3.3.lnk
C:\Documents and Settings\MELANIE\Start Menu\VirusProtectPro 3.3.lnk

Desktop Hijacker.AboutYourPrivacy
\Error Cleaner.url
\Privacy Protector.url
\Spyware&Malware Protection.url
C:\Documents and Settings\MELANIE\Desktop\Error Cleaner.url
C:\Documents and Settings\MELANIE\Desktop\Privacy Protector.url
C:\Documents and Settings\MELANIE\Desktop\Spyware&Malware Protection.url
C:\Documents and Settings\MELANIE\Favorites\Error Cleaner.url
C:\Documents and Settings\MELANIE\Favorites\Privacy Protector.url
C:\Documents and Settings\MELANIE\Favorites\Spyware&Malware Protection.url

Keylogger.Actual Spy
C:\WINDOWS\system\actualspystart.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Actual Spy.lnk
\ActualSpy.lnk
C:\Documents and Settings\MELANIE\Desktop\ActualSpy.lnk

Malware.VirusRanger
C:\Documents and Settings\MELANIE\Start Menu\VirusRanger v3.1.0.lnk

Malware.SpyShredder
\SpyShredder.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyShredder.lnk

Malware.Ultimate Cleaner
C:\Documents and Settings\All Users\Start Menu\Programs\UltimateCleaner 2007\Uninstall UltimateCleaner 2007.lnk

Malware.MalwareBurn
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareBurn 7.1.lnk
\MalwareBurn 7.1.lnk
C:\Documents and Settings\MELANIE\Desktop\MalwareBurn 7.1.lnk
C:\Documents and Settings\MELANIE\Start Menu\MalwareBurn 7.1.lnk

Malware.LocusSoftware Inc/BestSellerAntivirus
C:\Documents and Settings\All Users\Start Menu\Programs\BestsellerAntivirus\BestsellerAntivirus.lnk
C:\Documents and Settings\All Users\Desktop\BestsellerAntivirus.lnk
\Install AVSystemCare .lnk
C:\Documents and Settings\MELANIE\Desktop\Install AVSystemCare .lnk

Malware.LocusSoftware Inc/ErrClean
\ErrClean.lnk
C:\Documents and Settings\MELANIE\Desktop\ErrClean.lnk

Rogue.XP AntiVirus
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\XPAntivirus.lnk
\XPAntivirus.lnk
C:\Documents and Settings\MELANIE\Desktop\XPAntivirus.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\XP Antivirus 2008.lnk
\XP Antivirus 2008.lnk
C:\Documents and Settings\MELANIE\Desktop\XP Antivirus 2008.lnk

Rogue.WinPerformance
C:\Documents and Settings\All Users\Start Menu\Programs\WinPerformance.lnk
\WinPerformance.lnk
C:\Documents and Settings\MELANIE\Desktop\WinPerformance.lnk

Rogue.VirusRay
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusRay 3.8.lnk
\VirusRay 3.8.lnk
C:\Documents and Settings\MELANIE\Desktop\VirusRay 3.8.lnk
C:\Documents and Settings\MELANIE\Start Menu\VirusRay 3.8.lnk

Rogue.AdvancedCleaner
\AdvancedCleaner Free.lnk
C:\Documents and Settings\MELANIE\Desktop\AdvancedCleaner Free.lnk

Rogue.AntiSpyStorm
C:\Documents and Settings\All Users\Desktop\AntispyStorm.lnk

Rogue.AntiSpyGuard
C:\Documents and Settings\All Users\Start Menu\AntiSpyGuard 2007.lnk
C:\Documents and Settings\All Users\Desktop\AntiSpyGuard 2007.lnk

Rogue.IEDefender
\IE Defender 2.2.lnk
C:\Documents and Settings\MELANIE\Desktop\IE Defender 2.2.lnk
C:\Documents and Settings\MELANIE\Start Menu\Programs\IE Defender 2.2.lnk

Malware.VirusProtect
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusProtect 3.8.lnk
C:\Documents and Settings\MELANIE\Desktop\VirusProtect 3.8.lnk
C:\Documents and Settings\MELANIE\Start Menu\VirusProtect 3.8.lnk

Rogue.AntiSpywareShield
\AntiSpywareShield.lnk
C:\Documents and Settings\MELANIE\Desktop\AntiSpywareShield.lnk

Rogue.WinXDefender
\WinXDefender.lnk
C:\Documents and Settings\MELANIE\Desktop\WinXDefender.lnk

Rogue.SunshineSpy
\Sunshine Spy.lnk
C:\Documents and Settings\MELANIE\Desktop\Sunshine Spy.lnk
C:\Documents and Settings\MELANIE\Start Menu\Programs\Startup\Sunshine.lnk

Malware.LocusSoftware Inc/ConfidentSurf
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\ConfidentSurf unregistered.lnk
\ConfidentSurf unregistered.lnk
C:\Documents and Settings\MELANIE\Desktop\ConfidentSurf unregistered.lnk

Rogue.DrProtection
\DrProtection.lnk
C:\Documents and Settings\MELANIE\Desktop\DrProtection.lnk

Rogue.OnlineGuard
\OnlineGuard.lnk
C:\Documents and Settings\MELANIE\Desktop\OnlineGuard.lnk

Rogue.LiveAntiSpy
\LiveAntispy.lnk
C:\Documents and Settings\MELANIE\Desktop\LiveAntispy.lnk

Rogue.GuardCenter
\GuardCenter.lnk
C:\Documents and Settings\MELANIE\Desktop\GuardCenter.lnk

Rogue.WinSpyKiller
\WinSpyKiller.lnk

Malware.MalwareCrush
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareCrush 3.7.lnk
\MalwareCrush.lnk
C:\Documents and Settings\MELANIE\Desktop\MalwareCrush.lnk
C:\Documents and Settings\MELANIE\Start Menu\MalwareCrush 3.7.lnk

Adware.Unclassified/Spruce
C:\Documents and Settings\MELANIE\Start Menu\Programs\Startup\Spruce - Auto Update.lnk

RootKit.TnCore/Trace
C:\WINDOWS\system32\drivers\core.cache.dsk
C:\WINDOWS\system32\drivers\core.sys
C:\WINDOWS\system32\drivers\swenumm.sys

Rogue.Installer/Trace
C:\WINDOWS\Spyware Remover.ico
C:\WINDOWS\Casino.ico
C:\WINDOWS\Free Online Dating.ico
C:\WINDOWS\system32\k86.bin
C:\WINDOWS\system32\tremir.bin

Rogue.Files-Secure
C:\Documents and Settings\MELANIE\Start Menu\Programs\Files Secure 2.1.lnk
C:\Documents and Settings\MELANIE\Desktop\Files Secure 2.1.lnk
\Files Secure 2.1.lnk

Trojan.Unclassified/Crypt32RT-SD
C:\Documents and Settings\MELANIE\Application Data\acstrlsp.ocx
C:\Documents and Settings\MELANIE\Application Data\odbcbase.ocx

Rogue.AntiSpyBoss
C:\Documents and Settings\All Users\Start Menu\Programs\AntiSpyBoss\AntiSpyBoss.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\AntiSpyBoss\Uninstall AntiSpyBoss.ln

Rogue.SpyDefender Pro
\SpyDefender Pro.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyDefender Pro.lnk

Rootkit.Unclassified/NDISUiOO
C:\WINDOWS\system32\drivers\ndisuioo.sys

Rogue.AntiSpyKit
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpyKit 5.2.lnk
\AntiSpyKit 5.2.lnk
C:\Documents and Settings\MELANIE\Desktop\AntiSpyKit 5.2.lnk
C:\Documents and Settings\MELANIE\Start Menu\AntiSpyKit 5.2.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpyKit 5.3.lnk
\AntiSpyKit 5.3.lnk
C:\Documents and Settings\MELANIE\Desktop\AntiSpyKit 5.3.lnk
C:\Documents and Settings\MELANIE\Start Menu\AntiSpyKit 5.3.lnk

Rootkit.Unclassified/USBStorR
C:\WINDOWS\system32\drivers\USBSTORR.SYS

Rootkit.Unclassified/ADPU160MM
C:\WINDOWS\system32\drivers\ADPU160MM.SYS

Rootkit.Unclassified/SysDamp-Traces
C:\WINDOWS\system32\svchost.tmp
C:\WINDOWS\system32\svchost.t__
C:\WINDOWS\system32\svcp.csv
C:\WINDOWS\system32\burito.ini
C:\WINDOWS\system32\diperto.ini

Malware.LocusSoftware Inc/AVSystemCare
C:\Documents and Settings\All Users\Desktop\AVSystemCare.lnk

Malware.LocusSoftware Inc/WinSpyControl
C:\Documents and Settings\All Users\Desktop\WinSpyControl.lnk

Rootkit.Unclassified/AudStubB
C:\WINDOWS\system32\drivers\audstubb.sys

Rootkit.Unclassified/KR_Done
C:\WINDOWS\system32\kr_done1
C:\WINDOWS\system32\vx.tll

Rogue.VirusHeat
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusHeat 3.9.lnk
\VirusHeat 3.9.lnk
C:\Documents and Settings\MELANIE\Desktop\VirusHeat 3.9.lnk
C:\Documents and Settings\MELANIE\Start Menu\VirusHeat 3.9.lnk

Rogue.MalwareDestructor
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareDestructor 4.5.lnk
\MalwareDestructor 4.5.lnk
C:\Documents and Settings\MELANIE\Desktop\MalwareDestructor 4.5.lnk
C:\Documents and Settings\MELANIE\Start Menu\MalwareDestructor 4.5.lnk

Rogue.MalwareCore
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareCore 7.3.lnk
\MalwareCore 7.3.lnk
C:\Documents and Settings\MELANIE\Desktop\MalwareCore 7.3.lnk
C:\Documents and Settings\MELANIE\Start Menu\MalwareCore 7.3.lnk

Adware.MMHRen-Trace
C:\WINDOWS\mmax_hren2.ini
C:\WINDOWS\mmhren2.jpg
C:\WINDOWS\system32\winlogans.tmp

Rogue.WinReanimator
C:\Documents and Settings\All Users\Desktop\WinReanimator.lnk

Rogue.Immunizr
C:\Documents and Settings\MELANIE\Desktop\Immunizr.lnk

Rootkit.Unclassified/DMBootT
C:\WINDOWS\system32\drivers\DMBOOTT.SYS

Rogue.SpywareIsolator
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\spywareisolator.lnk
\spywareisolator.lnk
C:\Documents and Settings\MELANIE\Desktop\spywareisolator.lnk
C:\WINDOWS\system32\spywarewarning.mht
c:\winxplogon.sys

Rogue.SpySnipe
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpySnipe 1.0.lnk
\SpySnipe 1.0.lnk
C:\Documents and Settings\MELANIE\Desktop\SpySnipe 1.0.lnk

Adware.JavaCore/NoDNS
C:\WINDOWS\system32\cmds.txt
C:\WINDOWS\system32\cs.dat
C:\WINDOWS\system32\ps1.dat
C:\WINDOWS\system32\rc.dat
C:\WINDOWS\system32\suns.dat

Rogue.AntiVirusProtection
\Antivirus Protection.lnk
C:\Documents and Settings\MELANIE\Desktop\Antivirus Protection.lnk

Rogue.SearchAndDestroy
C:\Documents and Settings\All Users\Desktop\Search And Destroy.lnk

Rogue.TrustedAntiVirus
C:\Documents and Settings\All Users\Start Menu\Programs\TrustedAntivirus\Contact Customer Support.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\TrustedAntivirus\Uninstall TrustedAntivirus.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\TrustedAntivirus\TrustedAntivirus.lnk

Rogue.SpywareRemover
\Spyware Remover.lnk
C:\Documents and Settings\MELANIE\Desktop\Spyware Remover.lnk

Rogue.Netcom3/SpyClean
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Netcom3 Cleaner.lnk
\Netcom3 Cleaner.lnk
C:\Documents and Settings\MELANIE\Desktop\Netcom3 Cleaner.lnk

Rootkit.Unclassified/IRBUSS
C:\WINDOWS\system32\drivers\IRBUSS.SYS

Rootkit.Unclassified/SRR
C:\WINDOWS\system32\drivers\SRR.SYS

Rogue.SpyMaxx
C:\Documents and Settings\All Users\Desktop\SpyMaxx.lnk

Rogue.SpyBurner
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyBurner.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyBurner.lnk

Rogue.AntiSpyCheck
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpyCheck v2.4.lnk
\AntiSpyCheck v2.4.lnk
C:\Documents and Settings\MELANIE\Desktop\AntiSpyCheck v2.4.lnk
C:\Documents and Settings\MELANIE\Start Menu\AntiSpyCheck v2.4.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpyCheck 2.1.lnk
\AntiSpyCheck 2.1.lnk
C:\Documents and Settings\MELANIE\Desktop\AntiSpyCheck 2.1.lnk
C:\Documents and Settings\MELANIE\Start Menu\AntiSpyCheck 2.1.lnk

Rogue.MalwareWar
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWar 7.3.lnk
\MalwareWar 7.3.lnk
C:\Documents and Settings\MELANIE\Desktop\MalwareWar 7.3.lnk
C:\Documents and Settings\MELANIE\Start Menu\MalwareWar 7.3.lnk

Rogue.PC-Antispyware
C:\WINDOWS\system32\drivers\pca-firewall.sys

Rootkit.Unclassified/IANSWXPP
C:\WINDOWS\system32\drivers\IANSWXPP.SYS

Rogue.SpyWatchE
\SpyWatchE.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyWatchE.lnk

Rogue.MalwareBell
\Malware Bell 3.2.lnk
C:\Documents and Settings\MELANIE\Desktop\Malware Bell 3.2.lnk
C:\Documents and Settings\MELANIE\Start Menu\Programs\Malware Bell 3.2.lnk

Rogue.VirusIsolator
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\virusisolator.lnk
\virusisolator.lnk
C:\Documents and Settings\MELANIE\Desktop\virusisolator.lnk

Rootkit.Unclassified/USBHubB
C:\WINDOWS\system32\drivers\usbhubb.sys

Rogue.WinIFixer
C:\Documents and Settings\All Users\Desktop\WinIFixer.lnk

Rogue.WinXPProtector
\WinXProtector.lnk
C:\Documents and Settings\MELANIE\Desktop\WinXProtector.lnk

Trojan.Unknown Origin
C:\WINDOWS\system32\fets.dat
C:\WINDOWS\system32\hrpdcf.bin
C:\WINDOWS\system32\adult.txt
C:\WINDOWS\system32\esoyoweh.tmp
C:\WINDOWS\system32\WinCtrl32.dl_
C:\WINDOWS\system32\finance.txt
C:\WINDOWS\system32\lt.res
C:\WINDOWS\system32\other.txt
C:\WINDOWS\system32\pharma.txt
C:\WINDOWS\system32\sn.txt
C:\WINDOWS\promogif1.gif
C:\WINDOWS\promogif2.gif
C:\WINDOWS\promogif3.gif
C:\Documents and Settings\MELANIE\Local Settings\Temporary Internet Files\bestwiner.stt
C:\Documents and Settings\MELANIE\Local Settings\Temporary Internet Files\CPV.stt

Rogue.DataHealer
\DataHealer.lnk
C:\Documents and Settings\MELANIE\Desktop\DataHealer.ln

Trojan.Multi-Dropper
C:\WINDOWS\..\ktgmhs.exe
C:\WINDOWS\..\rwhucv.exe
C:\WINDOWS\..\tvcfoviw.exe
C:\WINDOWS\..\wxebxbo.exe

Rogue.PrivacyWatcher
\Privacy Watcher.lnk
C:\Documents and Settings\MELANIE\Desktop\Privacy Watcher.lnk

Rogue.PC-Cleaner
\PC-Cleaner.lnk
C:\Documents and Settings\MELANIE\Desktop\PC-Cleaner.lnk
\blackbird.jpg
\EditorFKWP1.5.exe
\EditorFKWP2.0.exe
\filemanagerclient.exe
\fkwp1.5.exe
\fkwp2.0.exe
\fwebd.exe
\FWebdEditor.exe
\Trojan.Win32.BlackBird.exe
C:\Documents and Settings\MELANIE\Desktop\blackbird.jpg
C:\Documents and Settings\MELANIE\Desktop\EditorFKWP1.5.exe
C:\Documents and Settings\MELANIE\Desktop\EditorFKWP2.0.exe
C:\Documents and Settings\MELANIE\Desktop\filemanagerclient.exe
C:\Documents and Settings\MELANIE\Desktop\fkwp1.5.exe
C:\Documents and Settings\MELANIE\Desktop\fkwp2.0.exe
C:\Documents and Settings\MELANIE\Desktop\fwebd.exe
C:\Documents and Settings\MELANIE\Desktop\FWebdEditor.exe
C:\Documents and Settings\MELANIE\Desktop\Trojan.Win32.BlackBird.exe

Rogue.AntiSpywareMaster
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpywareMaster.lnk
\AntiSpywareMaster.lnk
C:\Documents and Settings\MELANIE\Desktop\AntiSpywareMaster.lnk

Rogue.AntiVirProtect
\AntiVirProtect.lnk
C:\Documents and Settings\MELANIE\Desktop\AntiVirProtect.lnk

Rogue.MasterAntiVirus
\master anti virus.lnk
C:\Documents and Settings\MELANIE\Desktop\master anti virus.lnk

Rogue.Deus Cleaner
C:\Documents and Settings\All Users\Desktop\Deus Cleaner.lnk

Rogue.MyNetProtector
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\MyNetProtector.lnk
C:\Documents and Settings\MELANIE\Desktop\MyNetProtector.lnk
C:\Documents and Settings\MELANIE\Start Menu\MyNetProtector.lnk
C:\Documents and Settings\MELANIE\Start Menu\Programs\Startup\MyNetProtector.lnk

Rogue.IEAntiVirus
\IE AntiVirus 3.2.lnk
C:\Documents and Settings\MELANIE\Desktop\IE AntiVirus 3.2.lnk
C:\Documents and Settings\MELANIE\Start Menu\Programs\IE AntiVirus 3.2.lnk
C:\Documents and Settings\MELANIE\Desktop\IE AntiVirus 3.3.lnk
C:\Documents and Settings\MELANIE\Start Menu\Programs\IE AntiVirus 3.3.lnk

Rogue.XP-Shield
C:\Documents and Settings\MELANIE\Desktop\XP-Shield.lnk
\XP-Shield.lnk

Rogue.AdvancedXPDefender
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AXPDefender.lnk
C:\Documents and Settings\All Users\Desktop\AXPDefender.lnk

Rogue.VipAntiSpyware
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\vipantispyware.lnk
\vipantispyware.lnk
C:\Documents and Settings\MELANIE\Desktop\vipantispyware.lnk

Rogue.AdvancedXPFixer
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AXPFixer.lnk
C:\Documents and Settings\All Users\Desktop\AXPFixer.lnk

Rootkit.TNCore-Variant/A
C:\WINDOWS\system32\drivers\VCHH.SYS

Rogue.CrisysTecSentry
C:\Documents and Settings\MELANIE\Desktop\CrisysTec Sentry 3.0.lnk

Rogue.ETDScanner
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\ETD Security Scanner.lnk
\ETD Security Scanner.lnk
C:\Documents and Settings\MELANIE\Desktop\ETD Security Scanner.lnk

Rogue.MalwareMonitor
\MalwareMonitor.lnk
C:\Documents and Settings\MELANIE\Desktop\MalwareMonitor.lnk

Rogue.MySpyProtector
\MySpyProtector.lnk
C:\Documents and Settings\MELANIE\Desktop\MySpyProtector.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\MySpyProtector.lnk

Rogue.PCHealthPlan
C:\Documents and Settings\MELANIE\Desktop\PC Health Plan.lnk
C:\Documents and Settings\MELANIE\Start Menu\PC Health Plan.lnk
C:\WINDOWS\PCHP.exe.lnk
\PC Health Plan.lnk

Rogue.PrivacyGuarantor
C:\Documents and Settings\MELANIE\Start Menu\Privacy Guarantor v2.0.lnk
\Privacy Guarantor v2.0.lnk
C:\Documents and Settings\MELANIE\Desktop\Privacy Guarantor v2.0.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Privacy Guarantor v2.0.lnk

Rogue.PrivacyRedeemer
\Privacy Redeemer.lnk
C:\Documents and Settings\MELANIE\Desktop\Privacy Redeemer.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Privacy Redeemer.lnk

Rogue.RaptorDefence
\RaptorDefence.lnk
C:\Documents and Settings\MELANIE\Desktop\RaptorDefence.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\RaptorDefence.lnk

Rogue.MalwarePatrolPro
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\MPatrolPRO.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Malware Patrol PRO.lnk
C:\Documents and Settings\All Users\Desktop\MPatrolPRO.lnk

Rogue.PCPrivacyCleaner
\PCPrivacyCleaner.lnk
C:\Documents and Settings\MELANIE\Desktop\PCPrivacyCleaner.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\PCPrivacyCleaner.lnk

Rogue.AntiVirus 2008 Pro
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus-2008pro.lnk
C:\Documents and Settings\MELANIE\Application Data\TmpRecentIcons\Advanced XP Defender.lnk
C:\Documents and Settings\MELANIE\Application Data\TmpRecentIcons\Advanced XP Fixer.lnk
C:\Documents and Settings\MELANIE\Application Data\TmpRecentIcons\antivirus-2008pro.lnk
C:\Documents and Settings\MELANIE\Application Data\TmpRecentIcons\SystemDefender.lnk
\antivirus-2008pro.lnk
C:\Documents and Settings\MELANIE\Desktop\antivirus-2008pro.lnk

Rogue.AntiSpywareExpert
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpywareExpert.lnk
\AntiSpywareExpert.lnk
C:\Documents and Settings\MELANIE\Desktop\AntiSpywareExpert.lnk

Rogue.UltimateAntiVirus
C:\Documents and Settings\MELANIE\Desktop\Ultimate Antivirus.lnk
\Ultimate Antivirus.lnk

Rogue.Malware Protector 2008
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Malware Protector 2008.lnk

Rogue.Advanced AntiVirus 2008
\Advanced Antivirus.lnk
C:\Documents and Settings\MELANIE\Desktop\Advanced Antivirus.lnk
C:\WINDOWS\system32\aav.cpl
C:\WINDOWS\system32\wav.cpl

Rogue.System AntiVirus 2008
\System Antivirus 2008.lnk
C:\Documents and Settings\MELANIE\Desktop\System Antivirus 2008.lnk

Rogue.MandelEnterprise/Variants
C:\Documents and Settings\MELANIE\Desktop\Adware Deluxe.lnk
C:\Documents and Settings\MELANIE\Desktop\Adware Patrol.lnk
C:\Documents and Settings\MELANIE\Desktop\Doctor Adware Pro.lnk
C:\Documents and Settings\MELANIE\Desktop\Doctor Adware.lnk

Rogue.AntiVirus 2009
C:\Documents and Settings\MELANIE\Desktop\Antivirus 2009.lnk
\Antivirus 2009.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus 2009.lnk

Rogue.WinAntiSpyware2008
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\WinAntispyware2008.lnk
C:\Documents and Settings\MELANIE\Application Data\yhohynyd.bat
\WinAntispyware2008.lnk
C:\Documents and Settings\MELANIE\Cookies\emyvixe._sy
C:\Documents and Settings\MELANIE\Cookies\kabim.db
C:\Documents and Settings\MELANIE\Cookies\libibozo.inf
C:\Documents and Settings\MELANIE\Cookies\moqe.sys
C:\Documents and Settings\MELANIE\Cookies\visudu._dl
C:\Documents and Settings\MELANIE\Local Settings\Application Data\nirirokewi._dl
C:\Program Files\Common Files\canaj.inf
C:\Program Files\Common Files\igifeqyre.inf
C:\Program Files\Common Files\rylovewubu.scr
C:\Program Files\Common Files\sugu._dl
C:\Program Files\Common Files\zugy.db
C:\Documents and Settings\MELANIE\Application Data\fyta.bin
C:\WINDOWS\wipfw.conf
C:\WINDOWS\zugykuzyd.exe
C:\WINDOWS\system32\cuco.reg
C:\WINDOWS\simu.dat
C:\WINDOWS\ruvovo.com
C:\WINDOWS\nyfinazom.dll
C:\WINDOWS\ekukomu.exe

Rogue.PestSweeper
C:\WINDOWS\system\cmsd.exe
C:\WINDOWS\system\MsWin000.exe
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\pestsweeper.lnk
\pestsweeper.lnk
C:\Documents and Settings\MELANIE\Desktop\pestsweeper.lnk
C:\Documents and Settings\MELANIE\Local Settings\Application Data\Microsoft\Windows\sav.exe

Rogue.AntiVirus XP 2008
C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008.lnk
C:\Documents and Settings\All Users\Desktop\Antivirus XP 2008.lnk

Rogue.WistaAntiVirus
\WistaAntivirus.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\WistaAntivirus.lnk
C:\Documents and Settings\MELANIE\Desktop\WistaAntivirus.lnk

Rogue.PCCleanPro
\PC Clean Pro.lnk
C:\Documents and Settings\MELANIE\Desktop\PC Clean Pro.lnk

Rogue.PCAntiSpy
C:\WINDOWS\system32\drivers\pcantispy.sys

Rogue.Doctor AntiVirus 2008
\antvr.exe
C:\Documents and Settings\MELANIE\Desktop\antvr.exe

Rogue.PCTotalDefender
C:\Documents and Settings\All Users\Desktop\PCTotalDefender.lnk

Rogue.Web/Registry Sentinel
C:\WINDOWS\AttentionEX.html
C:\WINDOWS\BadUrl.txt
C:\WINDOWS\delete.jpg
C:\WINDOWS\delete1.jpg
C:\WINDOWS\locked.ico
C:\WINDOWS\opened.ico
C:\WINDOWS\paths.jpg
C:\WINDOWS\prgrsbar.gif
C:\WINDOWS\refs.jpg
C:\WINDOWS\Sentinel1.jpg
C:\WINDOWS\Sentinel2.jpg
C:\WINDOWS\Sentinel3.jpg
C:\WINDOWS\Sentinel4.jpg
C:\WINDOWS\setts.jpg
C:\WINDOWS\stores.jpg
C:\WINDOWS\uid.tmp
C:\WINDOWS\vals.jpg
C:\WINDOWS\www.jpg
\The Registry Sentinel.lnk
\The Web Sentinel.lnk
C:\Documents and Settings\MELANIE\Desktop\The Registry Sentinel.lnk
C:\Documents and Settings\MELANIE\Desktop\The Web Sentinel.lnk

Rogue.VirusRemover2008
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusRemover2008.lnk
\Viruses.bdt
\VirusRemover2008.lnk
C:\Documents and Settings\MELANIE\Desktop\Viruses.bdt
C:\Documents and Settings\MELANIE\Desktop\VirusRemover2008.lnk

Rogue.AntiSpyware 2008
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Antispyware-2008.lnk
\Antispyware-2008.lnk
C:\Documents and Settings\MELANIE\Desktop\Antispyware-2008.lnk

Rootkit.Agent/Gen
C:\WINDOWS\system32\msliksurcredo.dll
C:\WINDOWS\system32\msliksurdns.dll
C:\WINDOWS\system32\drivers\msliksurserv.sys

Rogue.AntiMalwareGuard
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiMalwareGuard.lnk
\AntiMalwareGuard.lnk
C:\Documents and Settings\MELANIE\Desktop\AntiMalwareGuard.lnk

Rogue.XP Cleaner
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\XP Cleaner.lnk
\XP Cleaner.lnk
C:\Documents and Settings\MELANIE\Desktop\XP Cleaner.lnk

Rogue.RegistryDoctor2008
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\RegistryDoctor2008.lnk
\RegistryDoctor2008.lnk
C:\Documents and Settings\MELANIE\Desktop\RegistryDoctor2008.lnk

Rogue.Win AntiVir 2008
\Win Antivir 2008.lnk
C:\Documents and Settings\MELANIE\Desktop\Win Antivir 2008.lnk

Rogue.Power-Antivirus-2009
\Power-Antivirus-2009.lnk
C:\Documents and Settings\MELANIE\Desktop\Power-Antivirus-2009.lnk

Adware.Media-Codec/ZLob
C:\Program Files\Applications\IEBTM.EXE
C:\Program Files\Applications\IEBTMM.EXE
C:\Program Files\Applications\WCM.EXE
C:\Program Files\Applications\WCS.EXE
C:\Program Files\Applications\IEBR.DLL

Rogue.WinAntiVirus2008
\Win Antivirus 2008.lnk
C:\Documents and Settings\MELANIE\Desktop\Win Antivirus 2008.lnk

Rogue.WinDefender2008
\Launch WinDefender 2008.lnk
C:\Documents and Settings\MELANIE\Desktop\Launch WinDefender 2008.lnk

Rogue.TraceSweeper
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Trace Sweeper.lnk
\Trace Sweeper.lnk
C:\Documents and Settings\MELANIE\Desktop\Trace Sweeper.lnk

Rogue.PyroAntiSpy
C:\Documents and Settings\MELANIE\Start Menu\PyroAntiSpy 2.2.lnk
\PyroAntiSpy.lnk
C:\Documents and Settings\MELANIE\Desktop\PyroAntiSpy.lnk

Rogue.Internet Antivirus
C:\Documents and Settings\All Users\Desktop\Internet Antivirus.lnk

Rogue.XP-Guard
\XP-Guard.lnk
C:\Documents and Settings\MELANIE\Desktop\XP-Guard.lnk

Rogue.AntiVir64
C:\Documents and Settings\MELANIE\Start Menu\Programs\Startup\Antivir64.lnk

Rogue.TheSpyBot
\TheSpyBot.lnk
C:\Documents and Settings\MELANIE\Desktop\TheSpyBot.lnk

Rogue.SpyGuarder
\SpyGuarder.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyGuarder.lnk

Rogue.SpyDevastator
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyDevastator 1.32.lnk
\SpyDevastator.lnk
C:\Documents and Settings\MELANIE\Desktop\SpyDevastator.lnk
C:\Documents and Settings\MELANIE\Start Menu\SpyDevastator 1.32.lnk

Rogue.Windows AntiVirus 2008
\Windows Antivirus 2008.lnk
C:\Documents and Settings\MELANIE\Desktop\Windows Antivirus 2008.lnk

Rogue.XP Protector 2009
C:\Documents and Settings\All Users\Desktop\XP Protector 2009.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\XP Protector 2009.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\XP Protector 2009.lnk

Rogue.VirusResponseLab2009
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusResponse Lab 2009 2.1.lnk
\VirusResponse Lab 2009 2.1.lnk
C:\Documents and Settings\MELANIE\Desktop\VirusResponse Lab 2009 2.1.lnk
C:\Documents and Settings\MELANIE\Start Menu\VirusResponse Lab 2009 2.1.lnk

Rogue.SecureExpertCleaner
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SecureExpertCleaner.lnk
C:\Documents and Settings\All Users\Desktop\Secure ExpertCleaner.lnk
C:\Documents and Settings\MELANIE\Desktop\QuickInstallPack.lnk

Rogue.eAntivirusPro
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\eAntivirusPro.lnk
C:\Documents and Settings\All Users\Desktop\eAntivirusPro.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\eAntivirusPro.lnk

Rogue.VirtualPCGuard
C:\Documents and Settings\All Users\Desktop\VirtualPCGuard.lnk

Rogue.SystemOptimizer2008
C:\Documents and Settings\All Users\Desktop\SystemOptimizer2008.lnk

Rogue.TotalSecure2009
C:\WINDOWS\k.txt
C:\WINDOWS\system32\c.ico
C:\WINDOWS\system32\m.ico
C:\WINDOWS\system32\p.ico
C:\WINDOWS\system32\s.ico
\Free MP3 Search.url
\Free Porn.url
\readme.bat
\Search Online.url
\Total Secure 2009.lnk
\VIP Casino.url
C:\Documents and Settings\MELANIE\Desktop\Free MP3 Search.url
C:\Documents and Settings\MELANIE\Desktop\Free Porn.url
C:\Documents and Settings\MELANIE\Desktop\Search Online.url
C:\Documents and Settings\MELANIE\Desktop\Total Secure 2009.lnk
C:\Documents and Settings\MELANIE\Desktop\VIP Casino.url
C:\Documents and Settings\MELANIE\Favorites\Free MP3 Search.url
C:\Documents and Settings\MELANIE\Favorites\Free Porn.url
C:\Documents and Settings\MELANIE\Favorites\Search Online.url
C:\Documents and Settings\MELANIE\Favorites\VIP Casino.url
C:\Documents and Settings\MELANIE\Start Menu\Programs\Total Secure 2009.lnk
C:\Documents and Settings\MELANIE\Start Menu\Free MP3 Search.url
C:\Documents and Settings\MELANIE\Start Menu\Free Porn.url
C:\Documents and Settings\MELANIE\Start Menu\Search Online.url
C:\Documents and Settings\MELANIE\Start Menu\VIP Casino.url

Rogue.SpywareGuard2008
C:\WINDOWS\reged.exe
C:\WINDOWS\spoolsystem.exe
C:\WINDOWS\sys.com
C:\WINDOWS\syscert.exe
C:\WINDOWS\sysexplorer.exe
C:\WINDOWS\vmreg.dll
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\olesys.dll
\Spyware Guard 2008.lnk
C:\Documents and Settings\MELANIE\Desktop\Spyware Guard 2008.lnk

Rogue.PCProtectionCenter2008
C:\Documents and Settings\All Users\Desktop\PC Protection Center 2008.lnk

Rogue.XP AntiSpyware 2009
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\XP_AntiSpyware.lnk
\XP_AntiSpyware.lnk
C:\Documents and Settings\MELANIE\Desktop\XP_AntiSpyware.lnk

Rogue.XP AntiSpyware2009-Trace
C:\WINDOWS\karna.dat
C:\WINDOWS\system32\karna.dat
C:\WINDOWS\system32\_scui.cpl
\delself.bat
C:\Documents and Settings\MELANIE\Desktop\delself.bat

Rogue.PCDefender2008
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\PC Defender 2008.lnk

Rogue.AntiSpywareXP2009
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpywareXP2009.lnk
\AntiSpywareXP2009.lnk
C:\Documents and Settings\MELANIE\Desktop\AntiSpywareXP2009.lnk

Rogue.AntiVirusSentry
\AntiVirus Sentry.lnk
C:\Documents and Settings\MELANIE\Desktop\AntiVirus Sentry.lnk

Rogue.RealAntiVirus
C:\Documents and Settings\MELANIE\Desktop\RealAV.lnk
\RealAV.lnk

Rogue.PersonalDefender2009
C:\Documents and Settings\MELANIE\Start Menu\Personal Defender 2009.lnk

Rogue.AntiVirusPro2009
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusPro2009.lnk
\AntivirusPro2009.lnk
C:\Documents and Settings\MELANIE\Desktop\AntivirusPro2009.lnk

Rogue.SecureFileShredder
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\SecureFileShredder.lnk

Trojan.Fake-Alert/Trace
C:\WINDOWS\system32\cont_mxlivemedia-remove.exe
C:\WINDOWS\system32\ounxvwyoaewekvp.exe
\Rapid Antivirus.lnk
C:\Documents and Settings\MELANIE\Start Menu\Programs\Startup\Rapid Antivirus.lnk
C:\Documents and Settings\MELANIE\Local Settings\Temporary Internet Files\fbk.sts
C:\Documents and Settings\All Users\Desktop\Best BDSM P0rn.url
C:\Documents and Settings\All Users\Desktop\Gay Fetish Sex.url
C:\WINDOWS\aol.com-error.html
C:\WINDOWS\gmail.com-error.html
C:\WINDOWS\google.com-error.html
C:\WINDOWS\system32\TDSSfpmp.dll

Rogue.VirusTrigger
C:\Documents and Settings\MELANIE\Start Menu\Programs\VirusTrigger 2.1\VirusTrigger 2.1.lnk
C:\Documents and Settings\MELANIE\Start Menu\VirusTrigger 2.1.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusTrigger 2.1.lnk

Rogue.WinDefender2009
\WinDefender 2009.lnk
C:\Documents and Settings\MELANIE\Desktop\WinDefender 2009.lnk
C:\Documents and Settings\MELANIE\Start Menu\Programs\WinDefender 2009.lnk

Rogue.XPProtectionCenter
C:\WINDOWS\alaheb.dat
C:\WINDOWS\ocenuxos.bin
C:\WINDOWS\sufaku.dat
C:\WINDOWS\system32\otejywy._dl
C:\WINDOWS\system32\vojebeva._dl
C:\Program Files\Common Files\ecejacopoj.vbs
C:\Program Files\Common Files\ejihy.sys
C:\Program Files\Common Files\ezadylol._dl
C:\Documents and Settings\MELANIE\Application Data\kecufuvyb.dll
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\XPProtectionCenter.lnk
C:\Documents and Settings\MELANIE\Application Data\yfijoba.inf
C:\Documents and Settings\All Users\Application Data\hebyrenazi.sys
C:\Documents and Settings\All Users\Application Data\hyvicoh.inf
C:\Documents and Settings\All Users\Application Data\ibiregy.inf
C:\Documents and Settings\All Users\Application Data\oxinyj.dll
C:\Documents and Settings\All Users\Documents\jyjylej.pif
C:\Documents and Settings\All Users\Documents\ydyk._sy
\XPProtectionCenter.lnk
C:\Documents and Settings\MELANIE\Cookies\bofexedy.inf
C:\Documents and Settings\MELANIE\Cookies\foras.scr
C:\Documents and Settings\MELANIE\Cookies\wacudut.ban
C:\Documents and Settings\MELANIE\Cookies\yvymuj.com
C:\Documents and Settings\MELANIE\Desktop\XPProtectionCenter.lnk
C:\Documents and Settings\MELANIE\Local Settings\Application Data\yqozucifil.dl

Rogue.AntiSpywareGuard
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpywareGuard.lnk
\AntiSpywareGuard.lnk
C:\Documents and Settings\MELANIE\Desktop\AntiSpywareGuard.lnk

Rogue.PerfectDefender2009
C:\Documents and Settings\MELANIE\Start Menu\Perfect Defender 2009.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Perfect Defender 2009\Uninstall Perfect Defender 2009.lnk

Rogue.AntiVirus360
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus 360.lnk
\Antivirus 360.lnk
C:\Documents and Settings\MELANIE\Desktop\Antivirus 360.lnk

Rogue.SystemBooster2009
C:\Documents and Settings\All Users\Desktop\SystemBooster2009 (Free Edition).lnk

Rogue.ISafeAntiVirus
C:\Documents and Settings\MELANIE\Start Menu\iSafe AntiVirus 2.1.lnk
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\iSafe AntiVirus 2.1.lnk
\iSafe AntiVirus 2.1.lnk

Trojan.DNSChanger-Codec
C:\Documents and Settings\MELANIE\Local Settings\Application Data\cygfs.dat
C:\Documents and Settings\MELANIE\Local Settings\Application Data\cygfs.exe
C:\Documents and Settings\MELANIE\Local Settings\Application Data\cygfs_nav.dat
C:\Documents and Settings\MELANIE\Local Settings\Application Data\cygfs_navps.dat

Rogue.XPPolice
C:\Documents and Settings\MELANIE\Start Menu\XP Police Antivirus.LNK

Rogue.TotalVirusProtection
C:\Documents and Settings\MELANIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Total Virus Protection.lnk







Malwarebytes' Anti-Malware 1.34
Database version: 1814
Windows 5.1.2600 Service Pack 3

3/3/2009 12:16:00 PM
mbam-log-2009-03-03 (12-16-00).txt

Scan type: Full Scan (C:\|)
Objects scanned: 137290
Time elapsed: 1 hour(s), 3 minute(s), 3 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Edited by crapi'minfected, 03 March 2009 - 12:18 PM.


#15 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,759 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:13 AM

Posted 03 March 2009 - 12:34 PM

Wow you had it all... How is it running now?
I want to get a couple quick things from you to be sure this machine is clean and safe.


JAVA
Also go into Control Panel>Add Remove Programs. Be sure the 'Show Updates' box is checked. Go down the list and tell me what Java applications are installed and their version. (Highlight the program to see this).


Now run part 1 of S!Ri's SmitfraudFix
Please download SmitfraudFix

Double-click SmitfraudFix.exe
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consulting/proc...processutil.htm
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users