Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

This Is My Hijack This Post


  • This topic is locked This topic is locked
4 replies to this topic

#1 JDoe

JDoe

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:06:19 AM

Posted 28 March 2006 - 08:37 PM

Logfile of HijackThis v1.99.1
Scan saved at 3:24:34 PM, on 28/03/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)


Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsgSys.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\netln.exe
C:\Program Files\NavNT\vptray.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I4V1.EXE
C:\Program Files\Common Files\AOL\1128376945\ee\AOLHostManager.exe
C:\Program Files\Common Files\AOL\1128376945\ee\AOLServiceHost.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden.exe
C:\Program Files\InterMute\SpySubtract\SpySub.exe
c:\program files\common files\aol\1128376945\ee\services\antiSpywareApp\ver2_0_7\AOLSP Scheduler.exe
C:\Program Files\Common Files\AOL\1128376945\ee\AOLServiceHost.exe
C:\Program Files\Google\Web Accelerator\googlewebaccclient.exe
C:\WINDOWS\javasx32.exe
C:\WINDOWS\system32\cleanmgr.exe
C:\WINDOWS\system32\DfrgNtfs.exe
C:\Program Files\AOL 9.0\waol.exe
C:\Program Files\AOL 9.0\shellmon.exe
C:\WINDOWS\system32\spider.exe
C:\Documents and Settings\steve\Desktop\Spyware & Antivirus\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\bihmr.dll/sp.html#28129%resultposition.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\bihmr.dll/sp.html#28129%resultposition.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\bihmr.dll/sp.html#28129%resultposition.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\bihmr.dll/sp.html#28129%resultposition.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\bihmr.dll/sp.html#28129%resultposition.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\bihmr.dll/sp.html#28129%resultposition.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\bihmr.dll/sp.html#28129%resultposition.net
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://localhost:9100/proxy.pac
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {0315F317-B483-4A2F-BA76-568F3D29FB28} - (no file)
O2 - BHO: (no name) - {035C09F9-1EEA-C8C8-EC20-CA226F453AF4} - (no file)
O2 - BHO: (no name) - {03A2D7B5-7F29-C057-69BA-28A6D6BFD1C8} - (no file)
O2 - BHO: (no name) - {05B92FED-4D76-7AC5-786D-B39C086729FC} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0B01F3E9-B4C0-2C24-AA3E-F733655C3C34} - (no file)
O2 - BHO: (no name) - {0C0E2D3F-3AE9-2ABB-7656-AA2FC932ED6E} - (no file)
O2 - BHO: (no name) - {0E07D10F-1786-8EB2-DCDF-BDA769D99D4B} - (no file)
O2 - BHO: (no name) - {1964FFB0-D3C0-EC68-A5C0-BFEB544D9B02} - (no file)
O2 - BHO: (no name) - {1995DD3F-2E2B-50AB-908D-9CDED6E2D0CB} - (no file)
O2 - BHO: (no name) - {1C968847-4882-41CB-CE85-55AAE933BC71} - (no file)
O2 - BHO: (no name) - {24A704FC-2E33-3BB4-4A77-AC5C25ED2DBE} - (no file)
O2 - BHO: (no name) - {25BCEAC9-47B6-ABCD-B004-C98A4B8683E8} - (no file)
O2 - BHO: (no name) - {2758F99E-08BC-DA77-4F98-2AD18D33C547} - (no file)
O2 - BHO: (no name) - {2852372B-F3FD-19AE-7E8D-744E430FD1BE} - (no file)
O2 - BHO: (no name) - {2ABEF0E1-F53C-A16A-4869-B11FA9CE5B87} - (no file)
O2 - BHO: (no name) - {2CC5AB6B-5C39-9AA2-A266-DD794C882565} - (no file)
O2 - BHO: (no name) - {2CEDF703-7B1D-11EA-9346-27AA2F77086D} - (no file)
O2 - BHO: (no name) - {2E737E2B-3144-18EB-6317-F8477D913E7A} - (no file)
O2 - BHO: (no name) - {316EFEAA-61D3-60D6-4001-92E3C805009C} - (no file)
O2 - BHO: (no name) - {32CAF537-09CE-E92B-6767-89B66249B5B9} - (no file)
O2 - BHO: (no name) - {346C69D8-47DA-8D25-2793-091F27AD1739} - (no file)
O2 - BHO: (no name) - {38E6264E-B9B2-30F0-ABA6-5A1961E89E35} - (no file)
O2 - BHO: (no name) - {3992E43C-90AD-C12F-64B3-9DB04D6F78C7} - (no file)
O2 - BHO: (no name) - {3D2AC2CD-D4D6-E139-5744-BE07C486BE0E} - (no file)
O2 - BHO: (no name) - {3EADA451-2E8E-BE2B-BDA9-7FF9E2AA68F8} - (no file)
O2 - BHO: (no name) - {46306F43-25AC-5BDC-CDF9-597FEDDF51F2} - (no file)
O2 - BHO: (no name) - {47B78822-7651-4BD2-0908-F787063C37FD} - (no file)
O2 - BHO: (no name) - {480F93E5-1EA1-846B-4D48-DF3B6EE949C1} - (no file)
O2 - BHO: (no name) - {4CB86D61-970D-C338-7AD0-8B13C488150E} - (no file)
O2 - BHO: (no name) - {4DF5116B-0DFE-9D51-AA17-CE70AC5E652D} - (no file)
O2 - BHO: (no name) - {514B41C1-5216-8DFB-93E3-6034F855E674} - (no file)
O2 - BHO: (no name) - {5367AF43-53A3-260E-9D79-0CDB4035A008} - (no file)
O2 - BHO: (no name) - {55EA0424-DDA9-DB28-3D99-75C0B49E15FE} - (no file)
O2 - BHO: (no name) - {570ABE20-9DA5-936D-5769-79E0AF19A826} - (no file)
O2 - BHO: (no name) - {585E345B-E5D7-B9B1-5671-2E08508183C0} - (no file)
O2 - BHO: (no name) - {5938DA0C-547C-EE86-D7A4-D8044D914A88} - (no file)
O2 - BHO: (no name) - {597DD6BD-9B68-6317-F535-F180E2D3AAB6} - (no file)
O2 - BHO: (no name) - {5A197AF4-5935-49F9-0E5B-5ABD9A8F62AD} - (no file)
O2 - BHO: (no name) - {66D4E389-181B-8B2A-A745-30CF47940533} - (no file)
O2 - BHO: (no name) - {6742C3D1-BD21-8E93-CE5B-B08960395678} - (no file)
O2 - BHO: (no name) - {683DA086-8E62-5396-D4EF-2401FF58EB59} - (no file)
O2 - BHO: (no name) - {6858C515-CA3A-CA02-9CFD-3BCF1EDE0B9F} - (no file)
O2 - BHO: (no name) - {6BD0D85F-3F49-C5B5-B4EC-53AF9CC33651} - (no file)
O2 - BHO: (no name) - {6CB55B62-92A9-30DC-1708-C97DEE5E6821} - (no file)
O2 - BHO: (no name) - {6D5064E5-DB4F-986D-4AD0-EC06E8821EA9} - (no file)
O2 - BHO: (no name) - {6EF499DA-BDA6-A518-F980-3F6C98984B4E} - (no file)
O2 - BHO: (no name) - {6F5238D0-58CA-ADF4-63DE-FD4A5FF51173} - (no file)
O2 - BHO: (no name) - {705B9C3B-1C10-27C0-5056-0628A5B7F33C} - (no file)
O2 - BHO: (no name) - {72DB4C8A-E9FB-D511-2AB8-97090844B10F} - (no file)
O2 - BHO: (no name) - {73A3D05C-18C3-5032-35E4-8174BEFE0F32} - (no file)
O2 - BHO: (no name) - {75621F46-0ABD-9E5C-7F96-39411D1D2932} - (no file)
O2 - BHO: (no name) - {759713F7-705A-2B13-02E3-9E591EAEF259} - (no file)
O2 - BHO: (no name) - {779D4817-72EC-CAD1-C47C-A430B508B1E9} - (no file)
O2 - BHO: (no name) - {794DE92B-5B3E-DFB3-BD79-2505954D24D5} - (no file)
O2 - BHO: (no name) - {827D761A-C8F4-42CF-3259-13B99DB3FF0A} - (no file)
O2 - BHO: (no name) - {8291F30C-F81A-B2CF-C934-5E5DA6E15E63} - (no file)
O2 - BHO: (no name) - {83EF55DB-6787-8204-BD91-03202E65FD32} - (no file)
O2 - BHO: (no name) - {83FF5591-CD8F-9D60-2B05-852B04CC6AA3} - (no file)
O2 - BHO: (no name) - {843E6799-12EC-F461-F600-5419559381EC} - (no file)
O2 - BHO: (no name) - {851A5FD0-7709-B373-4793-7897DC7FEB8D} - (no file)
O2 - BHO: (no name) - {89633DC6-AE86-E2FC-D1E8-DCAE85241ED1} - (no file)
O2 - BHO: (no name) - {8BC92B1D-352F-B41E-A4AC-A15463086037} - (no file)
O2 - BHO: (no name) - {8F4D9153-405E-509F-26EF-6506F2EB23E5} - (no file)
O2 - BHO: (no name) - {98A81A3C-B9E6-97E1-C591-70816CDF479E} - (no file)
O2 - BHO: (no name) - {994EDA46-B661-5A1B-A507-6884B4BF72B3} - (no file)
O2 - BHO: (no name) - {9A680459-4010-FA2E-EC15-175ADE2D5377} - (no file)
O2 - BHO: (no name) - {A00E8BE1-F4AB-F036-EC5E-9DBF9092B2A8} - (no file)
O2 - BHO: (no name) - {A21258B4-6BFB-D224-EB56-9A8C5A8BE9D6} - (no file)
O2 - BHO: (no name) - {A50DCB0A-572D-122C-FCDE-143E679EDC0F} - (no file)
O2 - BHO: (no name) - {A6EE5EA4-B010-5E88-FBC9-1960401C41ED} - (no file)
O2 - BHO: (no name) - {A77FEE92-1430-913D-80DE-70C0D45457FE} - (no file)
O2 - BHO: (no name) - {A9BC4A92-EB55-2E37-302D-44AA194D5894} - (no file)
O2 - BHO: (no name) - {AAF0CD2B-DF6D-6482-5803-75594E44D765} - (no file)
O2 - BHO: (no name) - {ABE2DA2C-85E3-CA0C-79FC-63F0410FA2E0} - (no file)
O2 - BHO: (no name) - {ADEAA3B6-9276-09CD-04E3-6EF1F7854839} - (no file)
O2 - BHO: (no name) - {B0F98469-371C-FBED-8A67-0E2072EFC711} - (no file)
O2 - BHO: (no name) - {B4061A5F-2631-C398-10F0-6FD606540059} - (no file)
O2 - BHO: Class - {BDA708A5-8020-F30C-6759-546F47B30DFD} - C:\WINDOWS\appht.dll
O2 - BHO: (no name) - {BF9F10FA-709E-CF57-683F-AE59338D3FFA} - (no file)
O2 - BHO: (no name) - {C0935E62-5993-BC17-F4B5-6F18F3B61C6B} - (no file)
O2 - BHO: (no name) - {C1788B98-5234-5C51-33A4-D4E4597F4E13} - (no file)
O2 - BHO: (no name) - {C38FB1B8-44C6-FB1F-F53C-EACAF0D9FE94} - (no file)
O2 - BHO: (no name) - {C5F31786-C937-4D9B-74F9-F764B2B32EF3} - (no file)
O2 - BHO: (no name) - {C6799345-10B7-B195-3683-E0618D2C2428} - (no file)
O2 - BHO: (no name) - {C71397C3-18BD-C88D-5E8E-E8FCC13C420E} - (no file)
O2 - BHO: (no name) - {C729E39B-8682-DB4E-86FB-42249D8DC32C} - (no file)
O2 - BHO: (no name) - {C88F3D1C-7C15-736B-9653-ABBCA19AC5C3} - (no file)
O2 - BHO: (no name) - {C92C1825-4783-4FA6-21F1-6262FA72FBD8} - (no file)
O2 - BHO: (no name) - {CD010E8E-B898-B574-309E-3493BE208A30} - (no file)
O2 - BHO: (no name) - {CEEC69B5-0380-F78A-088D-A205E618F50B} - (no file)
O2 - BHO: (no name) - {CF3EF571-43E7-5C38-FDC9-6E168AF22B5A} - (no file)
O2 - BHO: (no name) - {D27B861E-B1A3-B029-6A72-CC99EE5E9943} - (no file)
O2 - BHO: (no name) - {D6036847-0CE9-CD98-8490-CBE09650BB49} - (no file)
O2 - BHO: (no name) - {D7AC1511-463F-7B9F-50A1-66F823A5FA17} - (no file)
O2 - BHO: (no name) - {D83DB071-E150-9662-50A0-83C2FF97C462} - (no file)
O2 - BHO: (no name) - {D8484CF4-5494-E17B-9906-2092764D6C73} - (no file)
O2 - BHO: (no name) - {DABFB9A7-6761-2D54-8895-19DB34939C17} - (no file)
O2 - BHO: (no name) - {DB99FC8C-8A73-A988-8229-764512FCAD1B} - (no file)
O2 - BHO: (no name) - {E2D8233B-EB51-4A42-F2AA-063A02152A72} - (no file)
O2 - BHO: (no name) - {E3828D84-4E06-2C16-3DD3-0FB832F75880} - (no file)
O2 - BHO: (no name) - {E72D55D9-D0F9-5060-B321-D4B6575AD029} - (no file)
O2 - BHO: (no name) - {EB831990-F50B-96D1-3A6D-EDA7622633CF} - (no file)
O2 - BHO: (no name) - {EC2F8BCE-E72C-6203-F559-D2C39F735203} - (no file)
O2 - BHO: (no name) - {EF3DBF8F-82AE-7C37-9E41-FF6768F169E3} - (no file)
O2 - BHO: (no name) - {F6956773-B906-6B4E-BC0B-5426597C4595} - (no file)
O2 - BHO: (no name) - {F69A992B-1259-FA8F-7BB7-3DCC5E875A96} - (no file)
O2 - BHO: (no name) - {F6BFC595-569B-A80C-DEE4-5AE687AF21D2} - (no file)
O2 - BHO: (no name) - {F73396C4-CF26-92B0-F05D-07D7BAA16C5C} - (no file)
O2 - BHO: (no name) - {F8013DEE-3728-F550-E3A1-227F0FCDD006} - (no file)
O2 - BHO: (no name) - {FC63F231-14C0-2872-4514-264B57E8F5C1} - (no file)
O2 - BHO: (no name) - {FC8A44C7-1BDB-6F6E-B17E-626C67C424F9} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1128376945\ee\AOLHostManager.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [EPSON Stylus CX1500 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I4V1.EXE /P26 "EPSON Stylus CX1500 Series" /O6 "USB001" /M "Stylus CX1500"
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [CB.tmp] C:\DOCUME~1\steve\LOCALS~1\Temp\CB.tmp.exe
O4 - HKLM\..\Run: [CC.tmp] C:\DOCUME~1\steve\LOCALS~1\Temp\CC.tmp.exe
O4 - HKLM\..\Run: [TRPT] TorontoMail.exe
O4 - HKLM\..\Run: [ParisM] MON76234.exe
O4 - HKLM\..\Run: [netwl.exe] C:\WINDOWS\netwl.exe
O4 - HKLM\..\Run: [crko32.exe] C:\WINDOWS\system32\crko32.exe
O4 - HKLM\..\Run: [crdb32.exe] C:\WINDOWS\crdb32.exe
O4 - HKLM\..\Run: [systg.exe] C:\WINDOWS\systg.exe
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [netcn.exe] C:\WINDOWS\system32\netcn.exe
O4 - HKLM\..\Run: [mssz32.exe] C:\WINDOWS\system32\mssz32.exe
O4 - HKLM\..\Run: [sysgu32.exe] C:\WINDOWS\system32\sysgu32.exe
O4 - HKLM\..\Run: [winlt32.exe] C:\WINDOWS\winlt32.exe
O4 - HKLM\..\Run: [sysoc32.exe] C:\WINDOWS\sysoc32.exe
O4 - HKLM\..\Run: [javadr.exe] C:\WINDOWS\system32\javadr.exe
O4 - HKLM\..\Run: [winid.exe] C:\WINDOWS\winid.exe
O4 - HKLM\..\Run: [ipxg.exe] C:\WINDOWS\system32\ipxg.exe
O4 - HKLM\..\Run: [mfcyq32.exe] C:\WINDOWS\system32\mfcyq32.exe
O4 - HKLM\..\Run: [d3no32.exe] C:\WINDOWS\system32\d3no32.exe
O4 - HKLM\..\Run: [netmd.exe] C:\WINDOWS\system32\netmd.exe
O4 - HKLM\..\Run: [mfcev32.exe] C:\WINDOWS\system32\mfcev32.exe
O4 - HKLM\..\Run: [addjh32.exe] C:\WINDOWS\system32\addjh32.exe
O4 - HKLM\..\Run: [mfcih32.exe] C:\WINDOWS\system32\mfcih32.exe
O4 - HKLM\..\Run: [javaut32.exe] C:\WINDOWS\system32\javaut32.exe
O4 - HKLM\..\Run: [atlfx32.exe] C:\WINDOWS\atlfx32.exe
O4 - HKLM\..\Run: [javasx32.exe] C:\WINDOWS\javasx32.exe
O4 - HKLM\..\RunOnce: [Pest Cleaning] "C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\ppclean.exe" "clean" "silent" "cws" "2"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\K-litePro\K-litePro.exe" -tray
O4 - HKCU\..\Run: [EPSON Stylus CX1500 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I4V1.EXE /P26 "EPSON Stylus CX1500 Series" /M "Stylus CX1500" /EF "HKCU"
O4 - HKCU\..\Run: [ABCXYZ] cmon14.exe
O4 - HKCU\..\Run: [NukeSpan] SAPSTR.exe
O4 - HKCU\..\Run: [LOPTCON] trycrt.exe
O4 - HKCU\..\Run: [uikr] C:\PROGRA~1\COMMON~1\uikr\uikrm.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.0\AOL.EXE" -b
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Run Google Web Accelerator.lnk = C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden.exe
O4 - Global Startup: SpySubtract.lnk = C:\Program Files\InterMute\SpySubtract\SpySub.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Search - http://km.bar.need2find.com/KM/menusearch.html?p=KM
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file)
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/cha...v45/yacscom.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{13EE9CF7-D8BA-4CFB-895A-0911A5442EF8}: NameServer = 85.255.114.11,85.255.112.73
O17 - HKLM\System\CCS\Services\Tcpip\..\{1BCB0561-D63A-41D9-ADA4-109E50875B83}: NameServer = 85.255.114.11,85.255.112.73
O17 - HKLM\System\CCS\Services\Tcpip\..\{7AAF799A-B875-41B0-A194-44B09DDF4A41}: NameServer = 205.188.146.145
O17 - HKLM\System\CS1\Services\Tcpip\..\{13EE9CF7-D8BA-4CFB-895A-0911A5442EF8}: NameServer = 85.255.114.11,85.255.112.73
O17 - HKLM\System\CS2\Services\Tcpip\..\{13EE9CF7-D8BA-4CFB-895A-0911A5442EF8}: NameServer = 85.255.114.11,85.255.112.73
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe

BC AdBot (Login to Remove)

 


#2 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:01:19 PM

Posted 30 March 2006 - 09:24 AM

Hello,

It's better to print out the next instructions or save it in notepad, because you also have to work in safe mode without networking support, so this page wouldn't be available then.
It is also important you don't miss a step and perform everything in the right order!!

° Download AboutBuster.
Unzip AboutBuster.
Read here how to unzip/extract properly:
http://metallica.geekstogo.com/xpcompressedexplanation.html
You may not run it aboutbuster yet, that's for later.

* Please download ATF Cleaner by Atribune.
Do not use it yet.

I see you already have Ewdido installed.
  • You will need to update ewido to the latest definition files.
    • On the left hand side of the main screen click update.
    • Then click on Start Update.
  • The update will start and a progress bar will show the updates being installed.
    (the status bar at the bottom will display ("Update successful")
If you are having problems with the updater, you can use this link to manually update ewido.
ewido manual updates
Don't run it yet.

* Please reboot your system into SAFE MODE.
°To get into the Windows XP Safe mode as the computer is booting press and hold your "F8 Key" which should bring up the "Windows Advanced Options Menu". Use your arrow keys to move to "Safe Mode" and press your Enter key.

* Start hijackthis and click scan and put a checkmark next to the following items:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\bihmr.dll/sp.html#28129%resultposition.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\bihmr.dll/sp.html#28129%resultposition.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\bihmr.dll/sp.html#28129%resultposition.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\bihmr.dll/sp.html#28129%resultposition.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\bihmr.dll/sp.html#28129%resultposition.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\bihmr.dll/sp.html#28129%resultposition.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\bihmr.dll/sp.html#28129%resultposition.net
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {0315F317-B483-4A2F-BA76-568F3D29FB28} - (no file)
O2 - BHO: (no name) - {035C09F9-1EEA-C8C8-EC20-CA226F453AF4} - (no file)
O2 - BHO: (no name) - {03A2D7B5-7F29-C057-69BA-28A6D6BFD1C8} - (no file)
O2 - BHO: (no name) - {05B92FED-4D76-7AC5-786D-B39C086729FC} - (no file)
O2 - BHO: (no name) - {0B01F3E9-B4C0-2C24-AA3E-F733655C3C34} - (no file)
O2 - BHO: (no name) - {0C0E2D3F-3AE9-2ABB-7656-AA2FC932ED6E} - (no file)
O2 - BHO: (no name) - {0E07D10F-1786-8EB2-DCDF-BDA769D99D4B} - (no file)
O2 - BHO: (no name) - {1964FFB0-D3C0-EC68-A5C0-BFEB544D9B02} - (no file)
O2 - BHO: (no name) - {1995DD3F-2E2B-50AB-908D-9CDED6E2D0CB} - (no file)
O2 - BHO: (no name) - {1C968847-4882-41CB-CE85-55AAE933BC71} - (no file)
O2 - BHO: (no name) - {24A704FC-2E33-3BB4-4A77-AC5C25ED2DBE} - (no file)
O2 - BHO: (no name) - {25BCEAC9-47B6-ABCD-B004-C98A4B8683E8} - (no file)
O2 - BHO: (no name) - {2758F99E-08BC-DA77-4F98-2AD18D33C547} - (no file)
O2 - BHO: (no name) - {2852372B-F3FD-19AE-7E8D-744E430FD1BE} - (no file)
O2 - BHO: (no name) - {2ABEF0E1-F53C-A16A-4869-B11FA9CE5B87} - (no file)
O2 - BHO: (no name) - {2CC5AB6B-5C39-9AA2-A266-DD794C882565} - (no file)
O2 - BHO: (no name) - {2CEDF703-7B1D-11EA-9346-27AA2F77086D} - (no file)
O2 - BHO: (no name) - {2E737E2B-3144-18EB-6317-F8477D913E7A} - (no file)
O2 - BHO: (no name) - {316EFEAA-61D3-60D6-4001-92E3C805009C} - (no file)
O2 - BHO: (no name) - {32CAF537-09CE-E92B-6767-89B66249B5B9} - (no file)
O2 - BHO: (no name) - {346C69D8-47DA-8D25-2793-091F27AD1739} - (no file)
O2 - BHO: (no name) - {38E6264E-B9B2-30F0-ABA6-5A1961E89E35} - (no file)
O2 - BHO: (no name) - {3992E43C-90AD-C12F-64B3-9DB04D6F78C7} - (no file)
O2 - BHO: (no name) - {3D2AC2CD-D4D6-E139-5744-BE07C486BE0E} - (no file)
O2 - BHO: (no name) - {3EADA451-2E8E-BE2B-BDA9-7FF9E2AA68F8} - (no file)
O2 - BHO: (no name) - {46306F43-25AC-5BDC-CDF9-597FEDDF51F2} - (no file)
O2 - BHO: (no name) - {47B78822-7651-4BD2-0908-F787063C37FD} - (no file)
O2 - BHO: (no name) - {480F93E5-1EA1-846B-4D48-DF3B6EE949C1} - (no file)
O2 - BHO: (no name) - {4CB86D61-970D-C338-7AD0-8B13C488150E} - (no file)
O2 - BHO: (no name) - {4DF5116B-0DFE-9D51-AA17-CE70AC5E652D} - (no file)
O2 - BHO: (no name) - {514B41C1-5216-8DFB-93E3-6034F855E674} - (no file)
O2 - BHO: (no name) - {5367AF43-53A3-260E-9D79-0CDB4035A008} - (no file)
O2 - BHO: (no name) - {55EA0424-DDA9-DB28-3D99-75C0B49E15FE} - (no file)
O2 - BHO: (no name) - {570ABE20-9DA5-936D-5769-79E0AF19A826} - (no file)
O2 - BHO: (no name) - {585E345B-E5D7-B9B1-5671-2E08508183C0} - (no file)
O2 - BHO: (no name) - {5938DA0C-547C-EE86-D7A4-D8044D914A88} - (no file)
O2 - BHO: (no name) - {597DD6BD-9B68-6317-F535-F180E2D3AAB6} - (no file)
O2 - BHO: (no name) - {5A197AF4-5935-49F9-0E5B-5ABD9A8F62AD} - (no file)
O2 - BHO: (no name) - {66D4E389-181B-8B2A-A745-30CF47940533} - (no file)
O2 - BHO: (no name) - {6742C3D1-BD21-8E93-CE5B-B08960395678} - (no file)
O2 - BHO: (no name) - {683DA086-8E62-5396-D4EF-2401FF58EB59} - (no file)
O2 - BHO: (no name) - {6858C515-CA3A-CA02-9CFD-3BCF1EDE0B9F} - (no file)
O2 - BHO: (no name) - {6BD0D85F-3F49-C5B5-B4EC-53AF9CC33651} - (no file)
O2 - BHO: (no name) - {6CB55B62-92A9-30DC-1708-C97DEE5E6821} - (no file)
O2 - BHO: (no name) - {6D5064E5-DB4F-986D-4AD0-EC06E8821EA9} - (no file)
O2 - BHO: (no name) - {6EF499DA-BDA6-A518-F980-3F6C98984B4E} - (no file)
O2 - BHO: (no name) - {6F5238D0-58CA-ADF4-63DE-FD4A5FF51173} - (no file)
O2 - BHO: (no name) - {705B9C3B-1C10-27C0-5056-0628A5B7F33C} - (no file)
O2 - BHO: (no name) - {72DB4C8A-E9FB-D511-2AB8-97090844B10F} - (no file)
O2 - BHO: (no name) - {73A3D05C-18C3-5032-35E4-8174BEFE0F32} - (no file)
O2 - BHO: (no name) - {75621F46-0ABD-9E5C-7F96-39411D1D2932} - (no file)
O2 - BHO: (no name) - {759713F7-705A-2B13-02E3-9E591EAEF259} - (no file)
O2 - BHO: (no name) - {779D4817-72EC-CAD1-C47C-A430B508B1E9} - (no file)
O2 - BHO: (no name) - {794DE92B-5B3E-DFB3-BD79-2505954D24D5} - (no file)
O2 - BHO: (no name) - {827D761A-C8F4-42CF-3259-13B99DB3FF0A} - (no file)
O2 - BHO: (no name) - {8291F30C-F81A-B2CF-C934-5E5DA6E15E63} - (no file)
O2 - BHO: (no name) - {83EF55DB-6787-8204-BD91-03202E65FD32} - (no file)
O2 - BHO: (no name) - {83FF5591-CD8F-9D60-2B05-852B04CC6AA3} - (no file)
O2 - BHO: (no name) - {843E6799-12EC-F461-F600-5419559381EC} - (no file)
O2 - BHO: (no name) - {851A5FD0-7709-B373-4793-7897DC7FEB8D} - (no file)
O2 - BHO: (no name) - {89633DC6-AE86-E2FC-D1E8-DCAE85241ED1} - (no file)
O2 - BHO: (no name) - {8BC92B1D-352F-B41E-A4AC-A15463086037} - (no file)
O2 - BHO: (no name) - {8F4D9153-405E-509F-26EF-6506F2EB23E5} - (no file)
O2 - BHO: (no name) - {98A81A3C-B9E6-97E1-C591-70816CDF479E} - (no file)
O2 - BHO: (no name) - {994EDA46-B661-5A1B-A507-6884B4BF72B3} - (no file)
O2 - BHO: (no name) - {9A680459-4010-FA2E-EC15-175ADE2D5377} - (no file)
O2 - BHO: (no name) - {A00E8BE1-F4AB-F036-EC5E-9DBF9092B2A8} - (no file)
O2 - BHO: (no name) - {A21258B4-6BFB-D224-EB56-9A8C5A8BE9D6} - (no file)
O2 - BHO: (no name) - {A50DCB0A-572D-122C-FCDE-143E679EDC0F} - (no file)
O2 - BHO: (no name) - {A6EE5EA4-B010-5E88-FBC9-1960401C41ED} - (no file)
O2 - BHO: (no name) - {A77FEE92-1430-913D-80DE-70C0D45457FE} - (no file)
O2 - BHO: (no name) - {A9BC4A92-EB55-2E37-302D-44AA194D5894} - (no file)
O2 - BHO: (no name) - {AAF0CD2B-DF6D-6482-5803-75594E44D765} - (no file)
O2 - BHO: (no name) - {ABE2DA2C-85E3-CA0C-79FC-63F0410FA2E0} - (no file)
O2 - BHO: (no name) - {ADEAA3B6-9276-09CD-04E3-6EF1F7854839} - (no file)
O2 - BHO: (no name) - {B0F98469-371C-FBED-8A67-0E2072EFC711} - (no file)
O2 - BHO: (no name) - {B4061A5F-2631-C398-10F0-6FD606540059} - (no file)
O2 - BHO: Class - {BDA708A5-8020-F30C-6759-546F47B30DFD} - C:\WINDOWS\appht.dll
O2 - BHO: (no name) - {BF9F10FA-709E-CF57-683F-AE59338D3FFA} - (no file)
O2 - BHO: (no name) - {C0935E62-5993-BC17-F4B5-6F18F3B61C6B} - (no file)
O2 - BHO: (no name) - {C1788B98-5234-5C51-33A4-D4E4597F4E13} - (no file)
O2 - BHO: (no name) - {C38FB1B8-44C6-FB1F-F53C-EACAF0D9FE94} - (no file)
O2 - BHO: (no name) - {C5F31786-C937-4D9B-74F9-F764B2B32EF3} - (no file)
O2 - BHO: (no name) - {C6799345-10B7-B195-3683-E0618D2C2428} - (no file)
O2 - BHO: (no name) - {C71397C3-18BD-C88D-5E8E-E8FCC13C420E} - (no file)
O2 - BHO: (no name) - {C729E39B-8682-DB4E-86FB-42249D8DC32C} - (no file)
O2 - BHO: (no name) - {C88F3D1C-7C15-736B-9653-ABBCA19AC5C3} - (no file)
O2 - BHO: (no name) - {C92C1825-4783-4FA6-21F1-6262FA72FBD8} - (no file)
O2 - BHO: (no name) - {CD010E8E-B898-B574-309E-3493BE208A30} - (no file)
O2 - BHO: (no name) - {CEEC69B5-0380-F78A-088D-A205E618F50B} - (no file)
O2 - BHO: (no name) - {CF3EF571-43E7-5C38-FDC9-6E168AF22B5A} - (no file)
O2 - BHO: (no name) - {D27B861E-B1A3-B029-6A72-CC99EE5E9943} - (no file)
O2 - BHO: (no name) - {D6036847-0CE9-CD98-8490-CBE09650BB49} - (no file)
O2 - BHO: (no name) - {D7AC1511-463F-7B9F-50A1-66F823A5FA17} - (no file)
O2 - BHO: (no name) - {D83DB071-E150-9662-50A0-83C2FF97C462} - (no file)
O2 - BHO: (no name) - {D8484CF4-5494-E17B-9906-2092764D6C73} - (no file)
O2 - BHO: (no name) - {DABFB9A7-6761-2D54-8895-19DB34939C17} - (no file)
O2 - BHO: (no name) - {DB99FC8C-8A73-A988-8229-764512FCAD1B} - (no file)
O2 - BHO: (no name) - {E2D8233B-EB51-4A42-F2AA-063A02152A72} - (no file)
O2 - BHO: (no name) - {E3828D84-4E06-2C16-3DD3-0FB832F75880} - (no file)
O2 - BHO: (no name) - {E72D55D9-D0F9-5060-B321-D4B6575AD029} - (no file)
O2 - BHO: (no name) - {EB831990-F50B-96D1-3A6D-EDA7622633CF} - (no file)
O2 - BHO: (no name) - {EC2F8BCE-E72C-6203-F559-D2C39F735203} - (no file)
O2 - BHO: (no name) - {EF3DBF8F-82AE-7C37-9E41-FF6768F169E3} - (no file)
O2 - BHO: (no name) - {F6956773-B906-6B4E-BC0B-5426597C4595} - (no file)
O2 - BHO: (no name) - {F69A992B-1259-FA8F-7BB7-3DCC5E875A96} - (no file)
O2 - BHO: (no name) - {F6BFC595-569B-A80C-DEE4-5AE687AF21D2} - (no file)
O2 - BHO: (no name) - {F73396C4-CF26-92B0-F05D-07D7BAA16C5C} - (no file)
O2 - BHO: (no name) - {F8013DEE-3728-F550-E3A1-227F0FCDD006} - (no file)
O2 - BHO: (no name) - {FC63F231-14C0-2872-4514-264B57E8F5C1} - (no file)
O2 - BHO: (no name) - {FC8A44C7-1BDB-6F6E-B17E-626C67C424F9} - (no file)
O4 - HKLM\..\Run: [CB.tmp] C:\DOCUME~1\steve\LOCALS~1\Temp\CB.tmp.exe
O4 - HKLM\..\Run: [CC.tmp] C:\DOCUME~1\steve\LOCALS~1\Temp\CC.tmp.exe
O4 - HKLM\..\Run: [TRPT] TorontoMail.exe
O4 - HKLM\..\Run: [ParisM] MON76234.exe
O4 - HKLM\..\Run: [netwl.exe] C:\WINDOWS\netwl.exe
O4 - HKLM\..\Run: [crko32.exe] C:\WINDOWS\system32\crko32.exe
O4 - HKLM\..\Run: [crdb32.exe] C:\WINDOWS\crdb32.exe
O4 - HKLM\..\Run: [systg.exe] C:\WINDOWS\systg.exe
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [netcn.exe] C:\WINDOWS\system32\netcn.exe
O4 - HKLM\..\Run: [mssz32.exe] C:\WINDOWS\system32\mssz32.exe
O4 - HKLM\..\Run: [sysgu32.exe] C:\WINDOWS\system32\sysgu32.exe
O4 - HKLM\..\Run: [winlt32.exe] C:\WINDOWS\winlt32.exe
O4 - HKLM\..\Run: [sysoc32.exe] C:\WINDOWS\sysoc32.exe
O4 - HKLM\..\Run: [javadr.exe] C:\WINDOWS\system32\javadr.exe
O4 - HKLM\..\Run: [winid.exe] C:\WINDOWS\winid.exe
O4 - HKLM\..\Run: [ipxg.exe] C:\WINDOWS\system32\ipxg.exe
O4 - HKLM\..\Run: [mfcyq32.exe] C:\WINDOWS\system32\mfcyq32.exe
O4 - HKLM\..\Run: [d3no32.exe] C:\WINDOWS\system32\d3no32.exe
O4 - HKLM\..\Run: [netmd.exe] C:\WINDOWS\system32\netmd.exe
O4 - HKLM\..\Run: [mfcev32.exe] C:\WINDOWS\system32\mfcev32.exe
O4 - HKLM\..\Run: [addjh32.exe] C:\WINDOWS\system32\addjh32.exe
O4 - HKLM\..\Run: [mfcih32.exe] C:\WINDOWS\system32\mfcih32.exe
O4 - HKLM\..\Run: [javaut32.exe] C:\WINDOWS\system32\javaut32.exe
O4 - HKLM\..\Run: [atlfx32.exe] C:\WINDOWS\atlfx32.exe
O4 - HKLM\..\Run: [javasx32.exe] C:\WINDOWS\javasx32.exe
O4 - HKCU\..\Run: [ABCXYZ] cmon14.exe
O4 - HKCU\..\Run: [NukeSpan] SAPSTR.exe
O4 - HKCU\..\Run: [LOPTCON] trycrt.exe
O4 - HKCU\..\Run: [uikr] C:\PROGRA~1\COMMON~1\uikr\uikrm.exe
O8 - Extra context menu item: &Search - http://km.bar.need2find.com/KM/menusearch.html?p=KM
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
O17 - HKLM\System\CCS\Services\Tcpip\..\{13EE9CF7-D8BA-4CFB-895A-0911A5442EF8}: NameServer = 85.255.114.11,85.255.112.73
O17 - HKLM\System\CCS\Services\Tcpip\..\{1BCB0561-D63A-41D9-ADA4-109E50875B83}: NameServer = 85.255.114.11,85.255.112.73
O17 - HKLM\System\CS1\Services\Tcpip\..\{13EE9CF7-D8BA-4CFB-895A-0911A5442EF8}: NameServer = 85.255.114.11,85.255.112.73
O17 - HKLM\System\CS2\Services\Tcpip\..\{13EE9CF7-D8BA-4CFB-895A-0911A5442EF8}: NameServer = 85.255.114.11,85.255.112.73


* Close all open windows except hijackthis and click 'Fix Checked'.

* Navigate to and delete the following files if present:

C:\WINDOWS\system32\netln.exe
C:\WINDOWS\javasx32.exe
C:\WINDOWS\netwl.exe
C:\WINDOWS\system32\crko32.exe
C:\WINDOWS\crdb32.exe
C:\WINDOWS\systg.exe
C:\WINDOWS\System32\P2P Networking <== folder
C:\WINDOWS\system32\netcn.exe
C:\WINDOWS\system32\mssz32.exe
C:\WINDOWS\system32\sysgu32.exe
C:\WINDOWS\winlt32.exe
C:\WINDOWS\sysoc32.exe
C:\WINDOWS\system32\javadr.exe
C:\WINDOWS\winid.exe
C:\WINDOWS\system32\ipxg.exe
C:\WINDOWS\system32\mfcyq32.exe
C:\WINDOWS\system32\d3no32.exe
C:\WINDOWS\system32\netmd.exe
C:\WINDOWS\system32\mfcev32.exe
C:\WINDOWS\system32\addjh32.exe
C:\WINDOWS\system32\mfcih32.exe
C:\WINDOWS\system32\javaut32.exe
C:\WINDOWS\atlfx32.exe
C:\PROGRAM FILES\COMMON FILES\uikr <== folder

* Start Aboutbuster and let it scan.
The log will be saved in the aboutbuster-folder
If you get any error using aboutbuster, it's important you let me know afterwards in your next reply.
So skip this step in case of error and proceed with the next step of this fix.Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.

* Now open Ewido anti-malware
Click on scanner

* Click Complete System Scan and the scan will begin.
* During the scan it will prompt you to clean files, click OK
* When the scan is finished, look at the bottom of the screen and click the Save report button.
* Save the report to your desktop

* Close Ewido

* Reboot your PC back to normal.

Please download FixWareout from one of these sites:
http://downloads.subratam.org/Fixwareout.exe
http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe

Save it to your desktop and run it. Click Next, then Install, make sure "Run fixit" is checked and click Finish.
The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.

Once the desktop loads please post the text that will open (report.txt) and a new Hijackthis log + log from ewido and the aboutbuster-log which will be present in the aboutbuster-folder.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#3 JDoe

JDoe
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:06:19 AM

Posted 30 March 2006 - 05:20 PM

hi got every thing done today except aboutbuster tried 2x to download but both x's didn't work

Fixwareout ver 1.003
Last edited march/15/2006
Post this report in the forums please

Reg Entries that were deleted
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\xedocne
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\gib_ogol
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\repiwoh
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\llun
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\23plhps
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\mgcppp
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\tesvaf
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\golmedi
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\32refaselif
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls\putesprpgd
...

Microsoft ® Windows Script Host Version 5.6
Random Runs removed from HKLM
...

PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, There WILL be LEGIT FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.

»»»»» Search by size and names...

»»»»» Misc files

»»»»» Checking for older varients covered by the Rem3 tool

_________________________________________________________________________________________
Logfile of HijackThis v1.99.1
Scan saved at 4:49:54 PM, on 30/03/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\MsgSys.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\NavNT\vptray.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I4V1.EXE
C:\Program Files\AOL 9.0\waol.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden.exe
C:\Program Files\Common Files\AOL\1128376945\ee\AOLHostManager.exe
C:\Program Files\Common Files\AOL\1128376945\ee\AOLServiceHost.exe
C:\Program Files\Google\Web Accelerator\googlewebaccclient.exe
C:\Documents and Settings\steve\Desktop\Spyware & Antivirus\HijackThis.exe
c:\program files\common files\aol\1128376945\ee\services\antiSpywareApp\ver2_0_7\AOLSP Scheduler.exe
C:\Program Files\Common Files\AOL\1128376945\ee\AOLServiceHost.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://localhost:9100/proxy.pac
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {0315F317-B483-4A2F-BA76-568F3D29FB28} - (no file)
O2 - BHO: (no name) - {035C09F9-1EEA-C8C8-EC20-CA226F453AF4} - (no file)
O2 - BHO: (no name) - {03A2D7B5-7F29-C057-69BA-28A6D6BFD1C8} - (no file)
O2 - BHO: (no name) - {05B92FED-4D76-7AC5-786D-B39C086729FC} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0B01F3E9-B4C0-2C24-AA3E-F733655C3C34} - (no file)
O2 - BHO: (no name) - {0C0E2D3F-3AE9-2ABB-7656-AA2FC932ED6E} - (no file)
O2 - BHO: Class - {0CDCC695-26E8-8B05-0DE0-344FBFCD407F} - C:\WINDOWS\system32\addqd.dll
O2 - BHO: (no name) - {0E07D10F-1786-8EB2-DCDF-BDA769D99D4B} - (no file)
O2 - BHO: (no name) - {1964FFB0-D3C0-EC68-A5C0-BFEB544D9B02} - (no file)
O2 - BHO: (no name) - {1995DD3F-2E2B-50AB-908D-9CDED6E2D0CB} - (no file)
O2 - BHO: (no name) - {1C968847-4882-41CB-CE85-55AAE933BC71} - (no file)
O2 - BHO: (no name) - {24A704FC-2E33-3BB4-4A77-AC5C25ED2DBE} - (no file)
O2 - BHO: (no name) - {25BCEAC9-47B6-ABCD-B004-C98A4B8683E8} - (no file)
O2 - BHO: (no name) - {2758F99E-08BC-DA77-4F98-2AD18D33C547} - (no file)
O2 - BHO: (no name) - {2852372B-F3FD-19AE-7E8D-744E430FD1BE} - (no file)
O2 - BHO: (no name) - {2ABEF0E1-F53C-A16A-4869-B11FA9CE5B87} - (no file)
O2 - BHO: (no name) - {2CC5AB6B-5C39-9AA2-A266-DD794C882565} - (no file)
O2 - BHO: (no name) - {2CEDF703-7B1D-11EA-9346-27AA2F77086D} - (no file)
O2 - BHO: (no name) - {2E737E2B-3144-18EB-6317-F8477D913E7A} - (no file)
O2 - BHO: (no name) - {316EFEAA-61D3-60D6-4001-92E3C805009C} - (no file)
O2 - BHO: (no name) - {32CAF537-09CE-E92B-6767-89B66249B5B9} - (no file)
O2 - BHO: (no name) - {346C69D8-47DA-8D25-2793-091F27AD1739} - (no file)
O2 - BHO: (no name) - {38E6264E-B9B2-30F0-ABA6-5A1961E89E35} - (no file)
O2 - BHO: (no name) - {3992E43C-90AD-C12F-64B3-9DB04D6F78C7} - (no file)
O2 - BHO: (no name) - {3D2AC2CD-D4D6-E139-5744-BE07C486BE0E} - (no file)
O2 - BHO: (no name) - {3EADA451-2E8E-BE2B-BDA9-7FF9E2AA68F8} - (no file)
O2 - BHO: (no name) - {46306F43-25AC-5BDC-CDF9-597FEDDF51F2} - (no file)
O2 - BHO: (no name) - {47B78822-7651-4BD2-0908-F787063C37FD} - (no file)
O2 - BHO: (no name) - {480F93E5-1EA1-846B-4D48-DF3B6EE949C1} - (no file)
O2 - BHO: (no name) - {4CB86D61-970D-C338-7AD0-8B13C488150E} - (no file)
O2 - BHO: (no name) - {4DF5116B-0DFE-9D51-AA17-CE70AC5E652D} - (no file)
O2 - BHO: (no name) - {514B41C1-5216-8DFB-93E3-6034F855E674} - (no file)
O2 - BHO: (no name) - {5367AF43-53A3-260E-9D79-0CDB4035A008} - (no file)
O2 - BHO: (no name) - {55EA0424-DDA9-DB28-3D99-75C0B49E15FE} - (no file)
O2 - BHO: (no name) - {570ABE20-9DA5-936D-5769-79E0AF19A826} - (no file)
O2 - BHO: (no name) - {585E345B-E5D7-B9B1-5671-2E08508183C0} - (no file)
O2 - BHO: (no name) - {5938DA0C-547C-EE86-D7A4-D8044D914A88} - (no file)
O2 - BHO: (no name) - {597DD6BD-9B68-6317-F535-F180E2D3AAB6} - (no file)
O2 - BHO: (no name) - {5A197AF4-5935-49F9-0E5B-5ABD9A8F62AD} - (no file)
O2 - BHO: (no name) - {66D4E389-181B-8B2A-A745-30CF47940533} - (no file)
O2 - BHO: (no name) - {6742C3D1-BD21-8E93-CE5B-B08960395678} - (no file)
O2 - BHO: (no name) - {683DA086-8E62-5396-D4EF-2401FF58EB59} - (no file)
O2 - BHO: (no name) - {6858C515-CA3A-CA02-9CFD-3BCF1EDE0B9F} - (no file)
O2 - BHO: (no name) - {6BD0D85F-3F49-C5B5-B4EC-53AF9CC33651} - (no file)
O2 - BHO: (no name) - {6CB55B62-92A9-30DC-1708-C97DEE5E6821} - (no file)
O2 - BHO: (no name) - {6D5064E5-DB4F-986D-4AD0-EC06E8821EA9} - (no file)
O2 - BHO: (no name) - {6EF499DA-BDA6-A518-F980-3F6C98984B4E} - (no file)
O2 - BHO: (no name) - {6F5238D0-58CA-ADF4-63DE-FD4A5FF51173} - (no file)
O2 - BHO: (no name) - {705B9C3B-1C10-27C0-5056-0628A5B7F33C} - (no file)
O2 - BHO: (no name) - {72DB4C8A-E9FB-D511-2AB8-97090844B10F} - (no file)
O2 - BHO: (no name) - {73A3D05C-18C3-5032-35E4-8174BEFE0F32} - (no file)
O2 - BHO: (no name) - {75621F46-0ABD-9E5C-7F96-39411D1D2932} - (no file)
O2 - BHO: (no name) - {759713F7-705A-2B13-02E3-9E591EAEF259} - (no file)
O2 - BHO: (no name) - {779D4817-72EC-CAD1-C47C-A430B508B1E9} - (no file)
O2 - BHO: (no name) - {794DE92B-5B3E-DFB3-BD79-2505954D24D5} - (no file)
O2 - BHO: (no name) - {7B6FB373-55DE-FB2C-9B88-874315F261DF} - (no file)
O2 - BHO: (no name) - {827D761A-C8F4-42CF-3259-13B99DB3FF0A} - (no file)
O2 - BHO: (no name) - {8291F30C-F81A-B2CF-C934-5E5DA6E15E63} - (no file)
O2 - BHO: (no name) - {83EF55DB-6787-8204-BD91-03202E65FD32} - (no file)
O2 - BHO: (no name) - {83FF5591-CD8F-9D60-2B05-852B04CC6AA3} - (no file)
O2 - BHO: (no name) - {843E6799-12EC-F461-F600-5419559381EC} - (no file)
O2 - BHO: (no name) - {851A5FD0-7709-B373-4793-7897DC7FEB8D} - (no file)
O2 - BHO: (no name) - {89633DC6-AE86-E2FC-D1E8-DCAE85241ED1} - (no file)
O2 - BHO: (no name) - {8BC92B1D-352F-B41E-A4AC-A15463086037} - (no file)
O2 - BHO: (no name) - {8F4D9153-405E-509F-26EF-6506F2EB23E5} - (no file)
O2 - BHO: (no name) - {98A81A3C-B9E6-97E1-C591-70816CDF479E} - (no file)
O2 - BHO: (no name) - {994EDA46-B661-5A1B-A507-6884B4BF72B3} - (no file)
O2 - BHO: (no name) - {9A680459-4010-FA2E-EC15-175ADE2D5377} - (no file)
O2 - BHO: (no name) - {A00E8BE1-F4AB-F036-EC5E-9DBF9092B2A8} - (no file)
O2 - BHO: (no name) - {A1964848-A676-8EE9-B32C-A6ED9A744A5D} - (no file)
O2 - BHO: (no name) - {A21258B4-6BFB-D224-EB56-9A8C5A8BE9D6} - (no file)
O2 - BHO: (no name) - {A50DCB0A-572D-122C-FCDE-143E679EDC0F} - (no file)
O2 - BHO: (no name) - {A6EE5EA4-B010-5E88-FBC9-1960401C41ED} - (no file)
O2 - BHO: (no name) - {A77FEE92-1430-913D-80DE-70C0D45457FE} - (no file)
O2 - BHO: (no name) - {A9BC4A92-EB55-2E37-302D-44AA194D5894} - (no file)
O2 - BHO: (no name) - {AAF0CD2B-DF6D-6482-5803-75594E44D765} - (no file)
O2 - BHO: (no name) - {ABE2DA2C-85E3-CA0C-79FC-63F0410FA2E0} - (no file)
O2 - BHO: (no name) - {ADEAA3B6-9276-09CD-04E3-6EF1F7854839} - (no file)
O2 - BHO: (no name) - {B0F98469-371C-FBED-8A67-0E2072EFC711} - (no file)
O2 - BHO: (no name) - {B4061A5F-2631-C398-10F0-6FD606540059} - (no file)
O2 - BHO: (no name) - {BDA708A5-8020-F30C-6759-546F47B30DFD} - (no file)
O2 - BHO: (no name) - {BF9F10FA-709E-CF57-683F-AE59338D3FFA} - (no file)
O2 - BHO: (no name) - {C0935E62-5993-BC17-F4B5-6F18F3B61C6B} - (no file)
O2 - BHO: (no name) - {C1788B98-5234-5C51-33A4-D4E4597F4E13} - (no file)
O2 - BHO: (no name) - {C38FB1B8-44C6-FB1F-F53C-EACAF0D9FE94} - (no file)
O2 - BHO: (no name) - {C5F31786-C937-4D9B-74F9-F764B2B32EF3} - (no file)
O2 - BHO: (no name) - {C6799345-10B7-B195-3683-E0618D2C2428} - (no file)
O2 - BHO: (no name) - {C71397C3-18BD-C88D-5E8E-E8FCC13C420E} - (no file)
O2 - BHO: (no name) - {C729E39B-8682-DB4E-86FB-42249D8DC32C} - (no file)
O2 - BHO: (no name) - {C88F3D1C-7C15-736B-9653-ABBCA19AC5C3} - (no file)
O2 - BHO: (no name) - {C92C1825-4783-4FA6-21F1-6262FA72FBD8} - (no file)
O2 - BHO: (no name) - {CD010E8E-B898-B574-309E-3493BE208A30} - (no file)
O2 - BHO: (no name) - {CEEC69B5-0380-F78A-088D-A205E618F50B} - (no file)
O2 - BHO: (no name) - {CF3EF571-43E7-5C38-FDC9-6E168AF22B5A} - (no file)
O2 - BHO: (no name) - {D27B861E-B1A3-B029-6A72-CC99EE5E9943} - (no file)
O2 - BHO: (no name) - {D6036847-0CE9-CD98-8490-CBE09650BB49} - (no file)
O2 - BHO: (no name) - {D7AC1511-463F-7B9F-50A1-66F823A5FA17} - (no file)
O2 - BHO: (no name) - {D83DB071-E150-9662-50A0-83C2FF97C462} - (no file)
O2 - BHO: (no name) - {D8484CF4-5494-E17B-9906-2092764D6C73} - (no file)
O2 - BHO: (no name) - {DABFB9A7-6761-2D54-8895-19DB34939C17} - (no file)
O2 - BHO: (no name) - {DB99FC8C-8A73-A988-8229-764512FCAD1B} - (no file)
O2 - BHO: (no name) - {E2D8233B-EB51-4A42-F2AA-063A02152A72} - (no file)
O2 - BHO: (no name) - {E3828D84-4E06-2C16-3DD3-0FB832F75880} - (no file)
O2 - BHO: (no name) - {E72D55D9-D0F9-5060-B321-D4B6575AD029} - (no file)
O2 - BHO: (no name) - {EB831990-F50B-96D1-3A6D-EDA7622633CF} - (no file)
O2 - BHO: (no name) - {EBB58D88-B4D1-648E-CB8F-D10EF01B83E5} - (no file)
O2 - BHO: (no name) - {EC2F8BCE-E72C-6203-F559-D2C39F735203} - (no file)
O2 - BHO: (no name) - {EF3DBF8F-82AE-7C37-9E41-FF6768F169E3} - (no file)
O2 - BHO: (no name) - {F3148794-1DBD-A5AA-AFE9-3B9CF46A46BE} - (no file)
O2 - BHO: (no name) - {F6956773-B906-6B4E-BC0B-5426597C4595} - (no file)
O2 - BHO: (no name) - {F69A992B-1259-FA8F-7BB7-3DCC5E875A96} - (no file)
O2 - BHO: (no name) - {F6BFC595-569B-A80C-DEE4-5AE687AF21D2} - (no file)
O2 - BHO: (no name) - {F73396C4-CF26-92B0-F05D-07D7BAA16C5C} - (no file)
O2 - BHO: (no name) - {F8013DEE-3728-F550-E3A1-227F0FCDD006} - (no file)
O2 - BHO: (no name) - {FC63F231-14C0-2872-4514-264B57E8F5C1} - (no file)
O2 - BHO: (no name) - {FC8A44C7-1BDB-6F6E-B17E-626C67C424F9} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1128376945\ee\AOLHostManager.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [EPSON Stylus CX1500 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I4V1.EXE /P26 "EPSON Stylus CX1500 Series" /O6 "USB001" /M "Stylus CX1500"
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\K-litePro\K-litePro.exe" -tray
O4 - HKCU\..\Run: [EPSON Stylus CX1500 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I4V1.EXE /P26 "EPSON Stylus CX1500 Series" /M "Stylus CX1500" /EF "HKCU"
O4 - HKCU\..\Run: [NukeSpan] SAPSTR.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.0\AOL.EXE" -b
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Run Google Web Accelerator.lnk = C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file)
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/cha...v45/yacscom.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe

_________________________________________________________________________________________
---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 3:55:12 PM, 30/03/2006
+ Report-Checksum: 87ADEE3F

+ Scan result:

HKLM\SOFTWARE\Classes\CLSID\{18DF9808-F6C9-984B-EDE3-0B7624EC452A} -> Spyware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{4ABF050C-DD0D-52FF-DD7A-B315E8F9B10E} -> Spyware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{676575DD-4D46-911D-8037-9B10D6EE8BB5} -> Spyware.CoolWebSearch : Cleaned with backup
[1132] C:\WINDOWS\system32\netln.exe -> Trojan.Agent.bi : Cleaned with backup
C:\Documents and Settings\All Users\Application Data\AOL\UserProfiles\All Users\antiSpyware\dat\Quarantine\20051216213400.zip/WINDOWS/appwn32.exe -> Trojan.Agent.bi : Error during cleaning
C:\eied_s7.cab/eied_s7_c_29.exe -> Downloader.Mediket.bk : Cleaned with backup
C:\Program Files\Kazaa\TopSearch.dll -> Spyware.Altnet : Cleaned with backup
C:\WINDOWS\addax32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\addcz32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\addet32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\addgo32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\addhy32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\addiq.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\addjh.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\addnh.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\addvt.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\addwb.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\addwr.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\apiav.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\apibh32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\apidx.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\apigu.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\apiii.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\apinx.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\apiqf.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\apivw.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\apivz32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\apixc.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\apizl32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\apizp.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\apizu32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\appcc32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\appig.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\appkv.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\appli32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\appmi32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\apppa.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\appub.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\appym32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\atlex.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\atlfx32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\atljb.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\atllm.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\atllu32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\atlny32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\atlqs.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\atlrf.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\atlti32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\atltp32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\atluv.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\atlyu.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\cluir.dat:haqyu -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\crai.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\crbf32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\crgg.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\crgv.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\crnk.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\crns.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\crou32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\crxc32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\crxq32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\d3an32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\d3dl32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\d3dq.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\d3eh32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\d3sp.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\d3tz32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\d3uq32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\ieez32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\iegk.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ieij32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\iejq.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\ieke32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\iekv.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\iemf.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ieor.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\iesd.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\ietg.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\iezb.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ipaw.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\ipbv32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ipgz32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\iphp.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ipjq.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ipkg32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\ipkr.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\ipmw.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ipth.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\ipwz32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\javadd32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\javaeg32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\javaer.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\javaid.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\javais32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\javanj.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\javanw.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\javaqm.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\javaqo.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\javarh32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\javarn.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\javatm.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\javauh32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\javavs32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\javazy32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\KB835409.log:gijex -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB890859.log:jleun -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\mfcap.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\mfccq.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\mfcet32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\mfcge32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\mfcgv.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\mfchc32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\mfclk32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\mfcoo32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\mfcqn32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\mfcro.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\mfcul.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\mfcva.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\mfcvh.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\mfczg.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\msav.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\msef32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\msgd32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\mshv32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\msky.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\mslq.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\msmv.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\msqo.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\msta32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\msxm.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\msyk.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\msyq.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\neteg.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\netfd32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\nethc32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\netjw32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\netop32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\netsl32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\netua32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\netve32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\netyb.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\ntae.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\nter.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ntla.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ntli32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\ntoz32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\ntps32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ntvb32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\ntvz.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\ntyj32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ntym32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\n_cdcgnn.txt -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\n_cjdemp.log -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\n_kbuvrj.log -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\n_ksduvz.log:hvbzm -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\n_nqslcr.dat:kytgy -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\n_olwvnz.dat:gspwx -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\n_uzfmdm.dat:tqrup -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\sdkaj32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\sdkcn.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkcx.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\sdkgm.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkgo32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\sdkic.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkid.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkif32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkil32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkim.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkjd.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkje32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkjg32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkjk32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkjr32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sdkjv32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkjy32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkkg32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkki32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkkm32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sdkku.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkld.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\sdklg.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\sdklp32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkly.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkma.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkma32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdknc32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdknh.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdknl32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdknr.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkns.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdknt32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkof.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkok.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkok32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkot.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sdkpa.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkpk32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sdkpq32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkpx.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sdkpx.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkqc32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkqk.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkqo32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkqq.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkqt32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkrk32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkrq32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkrx.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkrz.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sdksp32.dll -> Downloader.WinShow.bg : Cleaned with backup
C:\WINDOWS\sdksq32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdksr32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkti.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkti32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkuc.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkud.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkuj32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkuo32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sdkux.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkvg32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkvi32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkvl.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkvl32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkvo.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkvv.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkwf32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkwr.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkwx.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkxb32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkxe.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkxh.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkxq.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkxr32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkya32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkyk32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkyl32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkyt32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkyu32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sdkyv.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkyz32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkzd32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sdkzh.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sdkzi.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysaa.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\sysac32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysar.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sysas32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysat32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysaz.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysba32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysbc.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sysbg32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysbi32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysbp.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysbu32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysbw.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysce.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syscq32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\syscx32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysdr32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysed.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysee.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysef32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syseo.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syseo32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysfi32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysfu.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syshd32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\syshg32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syshh.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syshq.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syshq32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\sysia32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysib.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysif.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sysig32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sysii32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sysij.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysio.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysip32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysiq.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysit.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysjb.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysjl32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysjm32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysjq32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysjv32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syskh32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syskj32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysks.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysky32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syskz32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sysle32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syslf32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syslj32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysll.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syslm32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysls.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\sysme32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysmh32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysmr32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sysnn.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysnx.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysnx32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysob32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysoe32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysoh32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysoi.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syson.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysop32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysos.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysow32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syspu.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syspw32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syspx.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syspz.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syspz32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysql.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysql32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysqq.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysqq32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysqs.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sysqv.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysqx32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysrh.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysrh32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysrl.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysru32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysrz32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syssa32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syssu.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syste.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system.ini:vqriz -> Downloader.WinShow.bg : Cleaned with backup
C:\WINDOWS\system32\AdCache -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_0_0_105300.htm -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_0_0_106800.htm -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_0_0_107400.htm -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_1_0_449200.gif -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_1_0_449200.htm -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_1_0_449600.gif -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_1_0_449600.htm -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_1_0_454300.gif -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_1_0_454300.htm -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_2_0_105300.htm -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_2_0_106800.htm -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_2_0_107400.htm -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_3_0_105300.htm -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_3_0_106800.htm -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_3_0_107400.htm -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_4_0_111600.htm -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_4_0_152400.htm -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_4_0_155300.htm -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\AdCache\B_329_4_0_164100.htm -> Adware.Cydoor : Cleaned with backup
C:\WINDOWS\system32\addab.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addaj.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addaz.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addbe.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addbe32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addbi.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addbj.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addbn.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addby32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addcj32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\adddb.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\adddm.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\adddw32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addem32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addev.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addfq.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addfq32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addfx32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addfy.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addgg32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addgs.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addgv32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addhg.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\addhp32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addhq.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addhz.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addii32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addjc32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addjs32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addkp32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\addkt.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addkx32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addlb.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addlf.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addlj.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addln.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addlx.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addly32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addmf32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addmj.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addmj32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addml32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\system32\addms32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addmz.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\addne32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addnj.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addnm.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addnx.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addny.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addoa32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addom.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addoo.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addos32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addow.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addow32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addoy32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addpx32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addpz.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addqv32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addrd32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\system32\addrw.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addry.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\addsd32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addss32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\addtf32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addua32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\adduf.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\adduk32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\addum32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\system32\addus.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addve.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addvm.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\system32\addvn.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addvp32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\addvs32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addvt32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\addvx.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addwh.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addwj32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addww.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addwx.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addxb32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addxf32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addxg.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addxh.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addxt32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\addyf32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\addyk32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\addys.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addyy.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addza32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addzb32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addzd32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addzf.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\addzo32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\addzu32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\akv4fn8.sys -> Trojan.Kolweb.g : Cleaned with backup
C:\WINDOWS\system32\apiaa.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apiad32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apiag32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apiap32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\system32\apibe32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apibs32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apici.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\apick32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apicr.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apicr32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apidb.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apidc.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apidd32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apidn32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apido32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\apiec.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apies.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apiez.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\apifc.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apifl32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\apifo32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\system32\apifw32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\apiga32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apigg.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apigi.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apigs32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\system32\apigt.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apigx32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\apihc.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apihf.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apihk32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apihm32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apihs32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apiia.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apiig32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apiii32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apiim32.dll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\apija.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apijh32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apijk32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apikb32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apike32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apikf32.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\system32\apikj32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apikw32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apikx32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apile.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apilh.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\system32\apiln.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apilx32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apily.exe -> Downloader.Agent.td : Cleaned with backup
C:\WINDOWS\system32\apily32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apima.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apimf32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apimj32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apiml32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apimp32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apina.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apinb.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apine.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apine32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apinh.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apini32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apinl32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apinv32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apinz32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apioc.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apiod.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apioi32.exe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apiok.exe -> Trojan.Agent.bi : Cleaned with backup

#4 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:01:19 PM

Posted 31 March 2006 - 01:12 AM

Hello,

What do you exactly mean here?

done today except aboutbuster tried 2x to download but both x's didn't work


What exactly didn't work?

Open hijackthis, and check next entries:


R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {0315F317-B483-4A2F-BA76-568F3D29FB28} - (no file)
O2 - BHO: (no name) - {035C09F9-1EEA-C8C8-EC20-CA226F453AF4} - (no file)
O2 - BHO: (no name) - {03A2D7B5-7F29-C057-69BA-28A6D6BFD1C8} - (no file)
O2 - BHO: (no name) - {05B92FED-4D76-7AC5-786D-B39C086729FC} - (no file)
O2 - BHO: (no name) - {0B01F3E9-B4C0-2C24-AA3E-F733655C3C34} - (no file)
O2 - BHO: (no name) - {0C0E2D3F-3AE9-2ABB-7656-AA2FC932ED6E} - (no file)
O2 - BHO: Class - {0CDCC695-26E8-8B05-0DE0-344FBFCD407F} - C:\WINDOWS\system32\addqd.dll
O2 - BHO: (no name) - {0E07D10F-1786-8EB2-DCDF-BDA769D99D4B} - (no file)
O2 - BHO: (no name) - {1964FFB0-D3C0-EC68-A5C0-BFEB544D9B02} - (no file)
O2 - BHO: (no name) - {1995DD3F-2E2B-50AB-908D-9CDED6E2D0CB} - (no file)
O2 - BHO: (no name) - {1C968847-4882-41CB-CE85-55AAE933BC71} - (no file)
O2 - BHO: (no name) - {24A704FC-2E33-3BB4-4A77-AC5C25ED2DBE} - (no file)
O2 - BHO: (no name) - {25BCEAC9-47B6-ABCD-B004-C98A4B8683E8} - (no file)
O2 - BHO: (no name) - {2758F99E-08BC-DA77-4F98-2AD18D33C547} - (no file)
O2 - BHO: (no name) - {2852372B-F3FD-19AE-7E8D-744E430FD1BE} - (no file)
O2 - BHO: (no name) - {2ABEF0E1-F53C-A16A-4869-B11FA9CE5B87} - (no file)
O2 - BHO: (no name) - {2CC5AB6B-5C39-9AA2-A266-DD794C882565} - (no file)
O2 - BHO: (no name) - {2CEDF703-7B1D-11EA-9346-27AA2F77086D} - (no file)
O2 - BHO: (no name) - {2E737E2B-3144-18EB-6317-F8477D913E7A} - (no file)
O2 - BHO: (no name) - {316EFEAA-61D3-60D6-4001-92E3C805009C} - (no file)
O2 - BHO: (no name) - {32CAF537-09CE-E92B-6767-89B66249B5B9} - (no file)
O2 - BHO: (no name) - {346C69D8-47DA-8D25-2793-091F27AD1739} - (no file)
O2 - BHO: (no name) - {38E6264E-B9B2-30F0-ABA6-5A1961E89E35} - (no file)
O2 - BHO: (no name) - {3992E43C-90AD-C12F-64B3-9DB04D6F78C7} - (no file)
O2 - BHO: (no name) - {3D2AC2CD-D4D6-E139-5744-BE07C486BE0E} - (no file)
O2 - BHO: (no name) - {3EADA451-2E8E-BE2B-BDA9-7FF9E2AA68F8} - (no file)
O2 - BHO: (no name) - {46306F43-25AC-5BDC-CDF9-597FEDDF51F2} - (no file)
O2 - BHO: (no name) - {47B78822-7651-4BD2-0908-F787063C37FD} - (no file)
O2 - BHO: (no name) - {480F93E5-1EA1-846B-4D48-DF3B6EE949C1} - (no file)
O2 - BHO: (no name) - {4CB86D61-970D-C338-7AD0-8B13C488150E} - (no file)
O2 - BHO: (no name) - {4DF5116B-0DFE-9D51-AA17-CE70AC5E652D} - (no file)
O2 - BHO: (no name) - {514B41C1-5216-8DFB-93E3-6034F855E674} - (no file)
O2 - BHO: (no name) - {5367AF43-53A3-260E-9D79-0CDB4035A008} - (no file)
O2 - BHO: (no name) - {55EA0424-DDA9-DB28-3D99-75C0B49E15FE} - (no file)
O2 - BHO: (no name) - {570ABE20-9DA5-936D-5769-79E0AF19A826} - (no file)
O2 - BHO: (no name) - {585E345B-E5D7-B9B1-5671-2E08508183C0} - (no file)
O2 - BHO: (no name) - {5938DA0C-547C-EE86-D7A4-D8044D914A88} - (no file)
O2 - BHO: (no name) - {597DD6BD-9B68-6317-F535-F180E2D3AAB6} - (no file)
O2 - BHO: (no name) - {5A197AF4-5935-49F9-0E5B-5ABD9A8F62AD} - (no file)
O2 - BHO: (no name) - {66D4E389-181B-8B2A-A745-30CF47940533} - (no file)
O2 - BHO: (no name) - {6742C3D1-BD21-8E93-CE5B-B08960395678} - (no file)
O2 - BHO: (no name) - {683DA086-8E62-5396-D4EF-2401FF58EB59} - (no file)
O2 - BHO: (no name) - {6858C515-CA3A-CA02-9CFD-3BCF1EDE0B9F} - (no file)
O2 - BHO: (no name) - {6BD0D85F-3F49-C5B5-B4EC-53AF9CC33651} - (no file)
O2 - BHO: (no name) - {6CB55B62-92A9-30DC-1708-C97DEE5E6821} - (no file)
O2 - BHO: (no name) - {6D5064E5-DB4F-986D-4AD0-EC06E8821EA9} - (no file)
O2 - BHO: (no name) - {6EF499DA-BDA6-A518-F980-3F6C98984B4E} - (no file)
O2 - BHO: (no name) - {6F5238D0-58CA-ADF4-63DE-FD4A5FF51173} - (no file)
O2 - BHO: (no name) - {705B9C3B-1C10-27C0-5056-0628A5B7F33C} - (no file)
O2 - BHO: (no name) - {72DB4C8A-E9FB-D511-2AB8-97090844B10F} - (no file)
O2 - BHO: (no name) - {73A3D05C-18C3-5032-35E4-8174BEFE0F32} - (no file)
O2 - BHO: (no name) - {75621F46-0ABD-9E5C-7F96-39411D1D2932} - (no file)
O2 - BHO: (no name) - {759713F7-705A-2B13-02E3-9E591EAEF259} - (no file)
O2 - BHO: (no name) - {779D4817-72EC-CAD1-C47C-A430B508B1E9} - (no file)
O2 - BHO: (no name) - {794DE92B-5B3E-DFB3-BD79-2505954D24D5} - (no file)
O2 - BHO: (no name) - {7B6FB373-55DE-FB2C-9B88-874315F261DF} - (no file)
O2 - BHO: (no name) - {827D761A-C8F4-42CF-3259-13B99DB3FF0A} - (no file)
O2 - BHO: (no name) - {8291F30C-F81A-B2CF-C934-5E5DA6E15E63} - (no file)
O2 - BHO: (no name) - {83EF55DB-6787-8204-BD91-03202E65FD32} - (no file)
O2 - BHO: (no name) - {83FF5591-CD8F-9D60-2B05-852B04CC6AA3} - (no file)
O2 - BHO: (no name) - {843E6799-12EC-F461-F600-5419559381EC} - (no file)
O2 - BHO: (no name) - {851A5FD0-7709-B373-4793-7897DC7FEB8D} - (no file)
O2 - BHO: (no name) - {89633DC6-AE86-E2FC-D1E8-DCAE85241ED1} - (no file)
O2 - BHO: (no name) - {8BC92B1D-352F-B41E-A4AC-A15463086037} - (no file)
O2 - BHO: (no name) - {8F4D9153-405E-509F-26EF-6506F2EB23E5} - (no file)
O2 - BHO: (no name) - {98A81A3C-B9E6-97E1-C591-70816CDF479E} - (no file)
O2 - BHO: (no name) - {994EDA46-B661-5A1B-A507-6884B4BF72B3} - (no file)
O2 - BHO: (no name) - {9A680459-4010-FA2E-EC15-175ADE2D5377} - (no file)
O2 - BHO: (no name) - {A00E8BE1-F4AB-F036-EC5E-9DBF9092B2A8} - (no file)
O2 - BHO: (no name) - {A1964848-A676-8EE9-B32C-A6ED9A744A5D} - (no file)
O2 - BHO: (no name) - {A21258B4-6BFB-D224-EB56-9A8C5A8BE9D6} - (no file)
O2 - BHO: (no name) - {A50DCB0A-572D-122C-FCDE-143E679EDC0F} - (no file)
O2 - BHO: (no name) - {A6EE5EA4-B010-5E88-FBC9-1960401C41ED} - (no file)
O2 - BHO: (no name) - {A77FEE92-1430-913D-80DE-70C0D45457FE} - (no file)
O2 - BHO: (no name) - {A9BC4A92-EB55-2E37-302D-44AA194D5894} - (no file)
O2 - BHO: (no name) - {AAF0CD2B-DF6D-6482-5803-75594E44D765} - (no file)
O2 - BHO: (no name) - {ABE2DA2C-85E3-CA0C-79FC-63F0410FA2E0} - (no file)
O2 - BHO: (no name) - {ADEAA3B6-9276-09CD-04E3-6EF1F7854839} - (no file)
O2 - BHO: (no name) - {B0F98469-371C-FBED-8A67-0E2072EFC711} - (no file)
O2 - BHO: (no name) - {B4061A5F-2631-C398-10F0-6FD606540059} - (no file)
O2 - BHO: (no name) - {BDA708A5-8020-F30C-6759-546F47B30DFD} - (no file)
O2 - BHO: (no name) - {BF9F10FA-709E-CF57-683F-AE59338D3FFA} - (no file)
O2 - BHO: (no name) - {C0935E62-5993-BC17-F4B5-6F18F3B61C6B} - (no file)
O2 - BHO: (no name) - {C1788B98-5234-5C51-33A4-D4E4597F4E13} - (no file)
O2 - BHO: (no name) - {C38FB1B8-44C6-FB1F-F53C-EACAF0D9FE94} - (no file)
O2 - BHO: (no name) - {C5F31786-C937-4D9B-74F9-F764B2B32EF3} - (no file)
O2 - BHO: (no name) - {C6799345-10B7-B195-3683-E0618D2C2428} - (no file)
O2 - BHO: (no name) - {C71397C3-18BD-C88D-5E8E-E8FCC13C420E} - (no file)
O2 - BHO: (no name) - {C729E39B-8682-DB4E-86FB-42249D8DC32C} - (no file)
O2 - BHO: (no name) - {C88F3D1C-7C15-736B-9653-ABBCA19AC5C3} - (no file)
O2 - BHO: (no name) - {C92C1825-4783-4FA6-21F1-6262FA72FBD8} - (no file)
O2 - BHO: (no name) - {CD010E8E-B898-B574-309E-3493BE208A30} - (no file)
O2 - BHO: (no name) - {CEEC69B5-0380-F78A-088D-A205E618F50B} - (no file)
O2 - BHO: (no name) - {CF3EF571-43E7-5C38-FDC9-6E168AF22B5A} - (no file)
O2 - BHO: (no name) - {D27B861E-B1A3-B029-6A72-CC99EE5E9943} - (no file)
O2 - BHO: (no name) - {D6036847-0CE9-CD98-8490-CBE09650BB49} - (no file)
O2 - BHO: (no name) - {D7AC1511-463F-7B9F-50A1-66F823A5FA17} - (no file)
O2 - BHO: (no name) - {D83DB071-E150-9662-50A0-83C2FF97C462} - (no file)
O2 - BHO: (no name) - {D8484CF4-5494-E17B-9906-2092764D6C73} - (no file)
O2 - BHO: (no name) - {DABFB9A7-6761-2D54-8895-19DB34939C17} - (no file)
O2 - BHO: (no name) - {DB99FC8C-8A73-A988-8229-764512FCAD1B} - (no file)
O2 - BHO: (no name) - {E2D8233B-EB51-4A42-F2AA-063A02152A72} - (no file)
O2 - BHO: (no name) - {E3828D84-4E06-2C16-3DD3-0FB832F75880} - (no file)
O2 - BHO: (no name) - {E72D55D9-D0F9-5060-B321-D4B6575AD029} - (no file)
O2 - BHO: (no name) - {EB831990-F50B-96D1-3A6D-EDA7622633CF} - (no file)
O2 - BHO: (no name) - {EBB58D88-B4D1-648E-CB8F-D10EF01B83E5} - (no file)
O2 - BHO: (no name) - {EC2F8BCE-E72C-6203-F559-D2C39F735203} - (no file)
O2 - BHO: (no name) - {EF3DBF8F-82AE-7C37-9E41-FF6768F169E3} - (no file)
O2 - BHO: (no name) - {F3148794-1DBD-A5AA-AFE9-3B9CF46A46BE} - (no file)
O2 - BHO: (no name) - {F6956773-B906-6B4E-BC0B-5426597C4595} - (no file)
O2 - BHO: (no name) - {F69A992B-1259-FA8F-7BB7-3DCC5E875A96} - (no file)
O2 - BHO: (no name) - {F6BFC595-569B-A80C-DEE4-5AE687AF21D2} - (no file)
O2 - BHO: (no name) - {F73396C4-CF26-92B0-F05D-07D7BAA16C5C} - (no file)
O2 - BHO: (no name) - {F8013DEE-3728-F550-E3A1-227F0FCDD006} - (no file)
O2 - BHO: (no name) - {FC63F231-14C0-2872-4514-264B57E8F5C1} - (no file)
O2 - BHO: (no name) - {FC8A44C7-1BDB-6F6E-B17E-626C67C424F9} - (no file)


Close all Open Windows except Hijackthis and click Fix checked.

* Perform an onlinescan with panda: (please use this scanner instead of any other scanner!)
Panda Online
- Once you are on the Panda site click the Scan your PC button
- A new window will open...click the Check Now button
- Enter your Country
- Enter your State/Province
- Enter your e-mail address and click send
- Select either Home User or Company
- Click the big Scan Now button
- If it wants to install an ActiveX component allow it
- It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
- When download is complete, click on Local Disks to start the scan
- When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.
Post the contents of the Panda scan report and a new hijackthislog.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#5 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:01:19 PM

Posted 07 April 2006 - 07:53 AM

Due to the lack of feedback, this Topic is closed.

If you need this topic reopened, please request this by sending the moderating team
a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users