Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Logfile Of Hijackthis V1.99.1


  • This topic is locked This topic is locked
2 replies to this topic

#1 Razamatow

Razamatow

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Local time:11:17 AM

Posted 24 November 2006 - 10:09 PM

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 6:12:58 AM 24/11/2006

+ Scan result:



C:\Program Files\Common Files\dpnepard\doramrcbam\lbfqamopu.exe -> Adware.Gator : Cleaned with backup (quarantined).
C:\Program Files\Common Files\dpnepard\fndaolmf\rdfbalur.exe -> Adware.Gator : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Igor V. Gunko -> Adware.HyperBar : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Igor V. Gunko\Hyperbar -> Adware.HyperBar : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Igor V. Gunko\Hyperbar\Modules -> Adware.HyperBar : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Igor V. Gunko\Hyperbar\Prod -> Adware.HyperBar : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Igor V. Gunko\Hyperbar\Prod\{4B2F5308-2CB0-40E2-8030-59936ED5D22C} -> Adware.HyperBar : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Igor V. Gunko\Hyperbar\Prod\{4B2F5308-2CB0-40E2-8030-59936ED5D22C}\Ctx -> Adware.HyperBar : Cleaned with backup (quarantined).
HKU\S-1-5-21-1935655697-1563985344-854245398-500\Software\Igor V. Gunko -> Adware.HyperBar : Cleaned with backup (quarantined).
HKU\S-1-5-21-1935655697-1563985344-854245398-500\Software\Igor V. Gunko\Hyperbar -> Adware.HyperBar : Cleaned with backup (quarantined).
HKU\S-1-5-21-1935655697-1563985344-854245398-500\Software\Igor V. Gunko\Hyperbar\Prod -> Adware.HyperBar : Cleaned with backup (quarantined).
HKU\S-1-5-21-1935655697-1563985344-854245398-500\Software\Igor V. Gunko\Hyperbar\Prod\{4B2F5308-2CB0-40E2-8030-59936ED5D22C} -> Adware.HyperBar : Cleaned with backup (quarantined).
HKU\S-1-5-21-1935655697-1563985344-854245398-500\Software\Igor V. Gunko\Hyperbar\Prod\{4B2F5308-2CB0-40E2-8030-59936ED5D22C}\Ctx -> Adware.HyperBar : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Kapabout -> Adware.InternetOptimizer : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Rotue -> Adware.InternetOptimizer : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\AMeOpt -> Adware.InternetOptimizer : Cleaned with backup (quarantined).
HKU\S-1-5-21-1935655697-1563985344-854245398-500\Software\Microsoft\Windows\CurrentVersion\Policies\AMeOpt -> Adware.InternetOptimizer : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1C78AB3F-A857-482E-80C0-3A1E5238A565} -> Adware.Isearch : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{9A682484-B9D6-4436-A7F1-2EDBFFC1C30A}\RP1123\A0136718.DLL -> Adware.IWon : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{9A682484-B9D6-4436-A7F1-2EDBFFC1C30A}\RP1123\A0136720.EXE -> Adware.NewDotNet : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{9A682484-B9D6-4436-A7F1-2EDBFFC1C30A}\RP1123\A0136721.EXE -> Adware.NewDotNet : Cleaned with backup (quarantined).
HKU\.DEFAULT\Software\New.net -> Adware.NewDotNet : Cleaned with backup (quarantined).
HKU\S-1-5-18\Software\New.net -> Adware.NewDotNet : Cleaned with backup (quarantined).
C:\Program Files\PerfectNav -> Adware.PerfectNav : Cleaned with backup (quarantined).
C:\Program Files\PerfectNav\BHO -> Adware.PerfectNav : Cleaned with backup (quarantined).
HKLM\SOFTWARE\PowerScan -> Adware.PowerScan : Cleaned with backup (quarantined).
C:\WINDOWS\system32\rlvknlg.exe -> Adware.RK : Cleaned with backup (quarantined).
C:\WINDOWS\5-a0c18a429b8010fee34ee31d9073371d.exe -> Adware.TrafficSol : Cleaned with backup (quarantined).
C:\WINDOWS\system32\brrotate.dll -> Adware.TrafficSol : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\ins -> Adware.WebRebates : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\gsda.dll -> Not-A-Virus.Downloader.Win32.SpyGame : Cleaned with backup (quarantined).
C:\Documents and Settings\Administrator\My Documents\Darren\Programs\DIV X\DivX 5 Pro Full Codec + Player (cracked).exe/Crack/LS_DivX_5.0_Pro_Bundle_Patch.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Cleaned with backup (quarantined).
:mozilla.280:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.247realmedia : Ignored.
:mozilla.119:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.120:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.327:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.140:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Adserver : Ignored.
:mozilla.141:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Adserver : Ignored.
:mozilla.142:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Adserver : Ignored.
:mozilla.143:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Adserver : Ignored.
:mozilla.85:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Adtech : Ignored.
:mozilla.86:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Adtech : Ignored.
:mozilla.23:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Advertising : Ignored.
:mozilla.24:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Advertising : Ignored.
:mozilla.25:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Advertising : Ignored.
:mozilla.26:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Advertising : Ignored.
:mozilla.27:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Advertising : Ignored.
:mozilla.21:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Atdmt : Ignored.
:mozilla.9:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Atdmt : Ignored.
:mozilla.195:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Bfast : Ignored.
:mozilla.232:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Bluestreak : Ignored.
:mozilla.273:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Burstnet : Ignored.
:mozilla.328:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Com : Ignored.
:mozilla.329:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Com : Ignored.
:mozilla.330:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Com : Ignored.
:mozilla.61:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Com : Ignored.
:mozilla.62:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Com : Ignored.
:mozilla.63:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Com : Ignored.
:mozilla.64:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Com : Ignored.
:mozilla.146:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Commission-junction : Ignored.
:mozilla.147:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Commission-junction : Ignored.
:mozilla.148:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Commission-junction : Ignored.
:mozilla.19:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Doubleclick : Ignored.
:mozilla.101:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
:mozilla.131:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
:mozilla.132:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
:mozilla.140:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
:mozilla.141:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
:mozilla.142:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
:mozilla.143:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
:mozilla.144:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
:mozilla.146:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
:mozilla.149:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
:mozilla.173:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
:mozilla.174:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
:mozilla.192:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
:mozilla.62:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
:mozilla.71:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
:mozilla.78:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
:mozilla.91:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.
:mozilla.202:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Fastclick : Ignored.
:mozilla.53:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Gator : Ignored.
:mozilla.335:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Googleadservices : Ignored.
:mozilla.151:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.152:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.162:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.166:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.171:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.172:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.224:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.225:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.226:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.227:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.264:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.265:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.266:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.268:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.92:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.93:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.94:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.239:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitslink : Ignored.
:mozilla.240:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitslink : Ignored.
:mozilla.241:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitslink : Ignored.
:mozilla.242:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Hitslink : Ignored.
:mozilla.233:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Liveperson : Ignored.
:mozilla.234:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Liveperson : Ignored.
:mozilla.145:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Marketscore : Ignored.
:mozilla.45:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Mediaplex : Ignored.
:mozilla.46:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Mediaplex : Ignored.
:mozilla.124:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Myaffiliateprogram : Ignored.
:mozilla.198:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Overture : Ignored.
:mozilla.199:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Overture : Ignored.
:mozilla.177:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Oxcash : Ignored.
:mozilla.178:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Oxcash : Ignored.
:mozilla.179:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Oxcash : Ignored.
:mozilla.180:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Oxcash : Ignored.
:mozilla.114:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Paycounter : Ignored.
:mozilla.230:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Pointroll : Ignored.
:mozilla.231:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Pointroll : Ignored.
:mozilla.232:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Pointroll : Ignored.
:mozilla.233:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Pointroll : Ignored.
:mozilla.76:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Qksrv : Ignored.
:mozilla.77:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Qksrv : Ignored.
:mozilla.78:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Qksrv : Ignored.
:mozilla.79:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Qksrv : Ignored.
:mozilla.80:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Qksrv : Ignored.
:mozilla.81:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Qksrv : Ignored.
:mozilla.82:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Qksrv : Ignored.
:mozilla.20:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Questionmarket : Ignored.
:mozilla.65:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Questionmarket : Ignored.
:mozilla.15:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Serving-sys : Ignored.
:mozilla.66:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Serving-sys : Ignored.
:mozilla.67:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Serving-sys : Ignored.
:mozilla.68:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Serving-sys : Ignored.
:mozilla.69:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\a0c7aqu2.default\cookies.txt -> TrackingCookie.Serving-sys : Ignored.
C:\Documents and Settings\Administrator\Cookies\administrator@serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignored.
:mozilla.184:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Specificpop : Ignored.
:mozilla.105:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Spylog : Ignored.
:mozilla.282:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Targetnet : Ignored.
:mozilla.31:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.32:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.33:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.34:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.35:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.36:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.37:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.38:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.39:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.174:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Trakkerd : Ignored.
:mozilla.175:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Trakkerd : Ignored.
:mozilla.176:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Trakkerd : Ignored.
:mozilla.270:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Tribalfusion : Ignored.
:mozilla.130:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Valueclick : Ignored.
:mozilla.131:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Valueclick : Ignored.
:mozilla.229:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Web-stat : Ignored.
:mozilla.132:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Webtrendslive : Ignored.
:mozilla.133:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Webtrendslive : Ignored.
:mozilla.40:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Webtrendslive : Ignored.
:mozilla.41:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Webtrendslive : Ignored.
:mozilla.42:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Webtrendslive : Ignored.
:mozilla.43:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Webtrendslive : Ignored.
:mozilla.116:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Xxxtoolbar : Ignored.
:mozilla.117:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Xxxtoolbar : Ignored.
:mozilla.118:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Xxxtoolbar : Ignored.
:mozilla.189:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Zedo : Ignored.
:mozilla.190:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Zedo : Ignored.
:mozilla.191:C:\Documents and Settings\Administrator\Application Data\Mozilla\Profiles\default\ja47myds.slt\cookies.txt -> TrackingCookie.Zedo : Ignored.


::Report end


Logfile of HijackThis v1.99.1
Scan saved at 6:32:24 AM, on 24/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\RioMSC.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\Administrator\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startnow.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://minisearch.startnow.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://minisearch.startnow.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: ohb - {5ED7D3DE-6DBE-4516-8712-01B1B64B7057} - C:\WINDOWS\system32\SearchEnhancer\nsx9A.dll
O2 - BHO: ohb - {5ED7D3DE-6DBE-4516-8712-436325722327} - C:\WINDOWS\system32\SmartShopper\SmartShopper0.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: MSN Search Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1082\en-us\msntb.dll
O2 - BHO: Banner Rotator - {E954DB82-1533-4714-92F2-59C98D5C18CC} - C:\WINDOWS\system32\brrotate.dll (file missing)
O3 - Toolbar: MSN Search Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1082\en-us\msntb.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [adstart] "iexplore.exe" "http://iesettingsupdate"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - Global Startup: HOTSYNCSHORTCUTNAME.lnk = C:\Program Files\Palm\Hotsync.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1082\en-us\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1110\en-us\msntabres.dll/229?15dbe668ec2b40879a12b5b1df4ac1
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1110\en-us\msntabres.dll/230?15dbe668ec2b40879a12b5b1df4ac1
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {01FE8D0A-51AD-459B-B62B-85E135128B32} - http://www.drivershq.com/DD_v4.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwe...etup1.0.0.6.cab
O16 - DPF: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658} (Installer Class) - http://www.ysbweb.com/ist/softwares/v4.0/ysb_regular.cab
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_02) -
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WB - C:\WINDOWS\
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton Utilities\NPROTECT.EXE
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Rio MSC Manager (RioMSC) - Digital Networks North America, Inc. - C:\WINDOWS\system32\RioMSC.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\Program Files\Speed Disk\nopdb.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

BC AdBot (Login to Remove)

 


m

#2 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:05:17 PM

Posted 25 November 2006 - 02:20 AM

Hello,

* Go to start > controlpanel > software > Add or Remove Programs and uninstall next if present:

Smart Shopper
Search Enhancer
Enhanced Browser Overlay


reboot afterwards..

* Start HijackThis, close all open windows leaving only HijackThis running. Place a check against each of the following:

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startnow.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://minisearch.startnow.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://minisearch.startnow.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - Default URLSearchHook is missing
O2 - BHO: ohb - {5ED7D3DE-6DBE-4516-8712-01B1B64B7057} - C:\WINDOWS\system32\SearchEnhancer\nsx9A.dll
O2 - BHO: ohb - {5ED7D3DE-6DBE-4516-8712-436325722327} - C:\WINDOWS\system32\SmartShopper\SmartShopper0.dll
O2 - BHO: Banner Rotator - {E954DB82-1533-4714-92F2-59C98D5C18CC} - C:\WINDOWS\system32\brrotate.dll (file missing)
O4 - HKLM\..\Run: [adstart] "iexplore.exe" "http://iesettingsupdate"
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwe...etup1.0.0.6.cab
O16 - DPF: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658} (Installer Class) - http://www.ysbweb.com/ist/softwares/v4.0/ysb_regular.cab
O20 - Winlogon Notify: WB - C:\WINDOWS\
<== check this entry if you don't have Windowblinds installed anymore.

* Click on Fix Checked when finished and exit HijackThis.
Make sure your Internet Explorer is closed when you click Fix Checked!

delete next folders:

C:\WINDOWS\system32\SearchEnhancer
C:\WINDOWS\system32\SmartShopper

Reboot and post a new Hijackthislog.

By the way; why did you ignore these cookies in your AVG Antispyware?
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#3 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:05:17 PM

Posted 04 December 2006 - 04:52 AM

Due to the lack of feedback, this Topic is closed.
If you need this topic reopened for continuations of existing problems, please request this by sending me a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users