Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help Me Please


  • This topic is locked This topic is locked
11 replies to this topic

#1 KevinR

KevinR

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:12:32 PM

Posted 10 March 2007 - 11:12 PM

Hey guys/gals, i have a new icon in taskbar. Its a question mark and says system alert. When i click it, i get this website http://spydawn.com/?aff=321 I am not gonna buy this and i cannot delete this or uninstall it. I ran Mcafee, spybot, adaware, CCcleaner to no avail.
Heres my log, please help.

Logfile of HijackThis v1.99.1
Scan saved at 11:08:25 PM, on 3/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\McAfee\MPS\mpsevh.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\McAfee\MSK\MskAgent.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\Kevin\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Cablevision Optimum Online
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
O2 - BHO: (no name) - {A6ACAE64-F798-4930-AD86-BD3FB32038DB} - C:\Program Files\Video Access ActiveX Object\isadd.dll (file missing)
O2 - BHO: CPub Object - {C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} - c:\program files\mcafee\mps\mcpopup.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\Program Files\GoogleAFE\GoogleAE.dll
O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.optonline.net
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: McAfee Application Installer Cleanup (0079141171714717) (0079141171714717mcinstcleanup) - Unknown owner - C:\WINDOWS\TEMP\007914~1.EXE (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe

BC AdBot (Login to Remove)

 


#2 kairis

kairis

  • Members
  • 327 posts
  • OFFLINE
  •  
  • Location:Finland
  • Local time:07:32 PM

Posted 11 March 2007 - 04:25 AM

Hi and welcome. My name is Kairis and I will be helping you.
You have some crap there! But don't worry; we'll get you cleaned up!
Please follow my steps in the right order...
We'll start with this:
Please download SmitfraudFix (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.

Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consulting/proc...processutil.htm

#3 KevinR

KevinR
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:12:32 PM

Posted 11 March 2007 - 03:23 PM

Hi Kairis. Thank you for help. Sorry for the delay in getting back to you.

Here is log you requested.

SmitFraudFix v2.148

Scan done at 16:20:03.00, Sun 03/11/2007
Run from C:\Documents and Settings\Kevin\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

hosts


C:\


C:\WINDOWS


C:\WINDOWS\system


C:\WINDOWS\Web


C:\WINDOWS\system32

C:\WINDOWS\system32\tvomnc.dll FOUND !

C:\WINDOWS\system32\LogFiles


C:\Documents and Settings\Kevin


C:\Documents and Settings\Kevin\Application Data


Start Menu


C:\DOCUME~1\Kevin\FAVORI~1

C:\DOCUME~1\Kevin\FAVORI~1\Online Security Test.url FOUND !

Desktop


C:\Program Files

C:\Program Files\PestCapture\ FOUND !

Corrupted keys


Desktop Components

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"


Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{634be415-da12-496b-b89e-329b73c4807f}"="cam"

[HKEY_CLASSES_ROOT\CLSID\{634be415-da12-496b-b89e-329b73c4807f}\InProcServer32]
@="C:\WINDOWS\system32\tvomnc.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{634be415-da12-496b-b89e-329b73c4807f}\InProcServer32]
@="C:\WINDOWS\system32\tvomnc.dll"



AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


pe386-msguard-lzx32-huy32


Scanning wininet.dll infection


End

#4 KevinR

KevinR
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:12:32 PM

Posted 11 March 2007 - 08:06 PM

and updated hijackthis log

Logfile of HijackThis v1.99.1
Scan saved at 9:03:18 PM, on 3/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
C:\WINDOWS\stsystra.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
C:\Program Files\McAfee\MSK\MskAgent.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\Program Files\McAfee\MPS\mpsevh.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\RogueRemover PRO\RogueRemoverPRO.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Kevin\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Cablevision Optimum Online
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
O2 - BHO: (no name) - {A6ACAE64-F798-4930-AD86-BD3FB32038DB} - C:\Program Files\Video Access ActiveX Object\isadd.dll (file missing)
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\Program Files\GoogleAFE\GoogleAE.dll
O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RogueMonitor] C:\Program Files\RogueRemover PRO\RogueRemoverPRO.exe /monitor
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.optonline.net
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe

#5 kairis

kairis

  • Members
  • 327 posts
  • OFFLINE
  •  
  • Location:Finland
  • Local time:07:32 PM

Posted 12 March 2007 - 03:37 AM

Hi there, thanks for the logs.
You have smitfraud-infection :thumbsup:

[] Run HijackThis
[] Click on the "Do a System Scan Only" button
[] Put a check beside all of the items listed below (if present):

O2 - BHO: (no name) - {A6ACAE64-F798-4930-AD86-BD3FB32038DB} - C:\Program Files\Video Access ActiveX Object\isadd.dll (file missing)
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)


[] Close all open windows and browsers/email, etc...
[] Click on the "Fix Checked" button
[] When completed, close the application.
**''**''**''**''**''**''**''**''**''**''**''**''**''**''**''**''**''**''**''**
You should print out these instructions, or copy them to a NotePad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.
Next, please reboot your computer in Safe Mode by doing the following :
  • Restart your computer
  • After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
  • Instead of Windows loading as normal, a menu with options should appear
  • Select the first option, to run Windows in Safe Mode, then press "Enter".
  • Choose your usual account.
Once in Safe Mode, open the SmitfraudFix folder again and double-click smitfraudfix.cmd
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".

The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.

A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply along with a fresh HijackThis log.

The report can also be found at the root of the system drive, usually at C:\rapport.txt.

#6 KevinR

KevinR
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:12:32 PM

Posted 13 March 2007 - 04:31 AM

ok, i did all you asked. The icon is gone. TYVM for your help.

Heres log you requeted

SmitFraudFix v2.148

Scan done at 5:13:36.82, Tue 03/13/2007
Run from C:\Documents and Settings\Kevin\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{634be415-da12-496b-b89e-329b73c4807f}"="cam"

[HKEY_CLASSES_ROOT\CLSID\{634be415-da12-496b-b89e-329b73c4807f}\InProcServer32]
@="C:\WINDOWS\system32\tvomnc.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{634be415-da12-496b-b89e-329b73c4807f}\InProcServer32]
@="C:\WINDOWS\system32\tvomnc.dll"


Killing process


hosts

127.0.0.1 localhost

0.0.0.0 123spywar.com
0.0.0.0 www.123spywar.com
0.0.0.0 1clickspyclean.com
0.0.0.0 www.1clickspyclean.com
0.0.0.0 1clicksuite.net
0.0.0.0 www.1clicksuite.net
0.0.0.0 1spyware-removal.com
0.0.0.0 www.1spyware-removal.com
0.0.0.0 1spywarekiller.com
0.0.0.0 www.1spywarekiller.com
0.0.0.0 1stantivirus.com
0.0.0.0 www.1stantivirus.com
0.0.0.0 1stspywar.com
0.0.0.0 www.1stspywar.com
0.0.0.0 2-antispyware.com
0.0.0.0 www.2-antispyware.com
0.0.0.0 3bsoftware.com
0.0.0.0 www.3bsoftware.com
0.0.0.0 actualresearch.com
0.0.0.0 www.actualresearch.com
0.0.0.0 abletostop.com
0.0.0.0 www.abletostop.com
0.0.0.0 aboutblankremover.com
0.0.0.0 www.aboutblankremover.com
0.0.0.0 achtungachtung.com
0.0.0.0 www.achtungachtung.com
0.0.0.0 activexmediaobject.com
0.0.0.0 www.activexmediaobject.com
0.0.0.0 activexsource.com
0.0.0.0 www.activexsource.com
0.0.0.0 ad-eliminator.com
0.0.0.0 www.ad-eliminator.com
0.0.0.0 ad-soft.net
0.0.0.0 www.ad-soft.net
0.0.0.0 ad-where.com
0.0.0.0 www.ad-where.com
0.0.0.0 ada-ware.com
0.0.0.0 www.ada-ware.com
0.0.0.0 adarmor6.com
0.0.0.0 www.adarmor6.com
0.0.0.0 adaware.com
0.0.0.0 www.adaware.com
0.0.0.0 addriller.com
0.0.0.0 www.addriller.com
0.0.0.0 addwareremover.com
0.0.0.0 www.addwareremover.com
0.0.0.0 addwere.com
0.0.0.0 www.addwere.com
0.0.0.0 adekit.com
0.0.0.0 www.adekit.com
0.0.0.0 adeliminator.net
0.0.0.0 www.adeliminator.net
0.0.0.0 aderadicator.com
0.0.0.0 www.aderadicator.com
0.0.0.0 adflusher.com
0.0.0.0 www.adflusher.com
0.0.0.0 adnuker.com
0.0.0.0 www.adnuker.com
0.0.0.0 adprotector.com
0.0.0.0 www.adprotector.com
0.0.0.0 adremovergold.com
0.0.0.0 www.adremovergold.com
0.0.0.0 adscrub.com
0.0.0.0 www.adscrub.com
0.0.0.0 adstriker.com
0.0.0.0 www.adstriker.com
0.0.0.0 adszapper.com
0.0.0.0 www.adszapper.com
0.0.0.0 advancedsearchbar.com
0.0.0.0 www.advancedsearchbar.com
0.0.0.0 advertising.com
0.0.0.0 www.advertising.com
0.0.0.0 adware-bazooka.com
0.0.0.0 www.adware-bazooka.com
0.0.0.0 adware-business.com
0.0.0.0 www.adware-business.com
0.0.0.0 adware-gator.com
0.0.0.0 www.adware-gator.com
0.0.0.0 adware-punisher.com
0.0.0.0 www.adware-punisher.com
0.0.0.0 adware-remover.net
0.0.0.0 www.adware-remover.net
0.0.0.0 adware.com
0.0.0.0 www.adware.com
0.0.0.0 adware.privacy-solution.com
0.0.0.0 www.adware.privacy-solution.com
0.0.0.0 adware.storesbiz.com
0.0.0.0 www.adware.storesbiz.com
0.0.0.0 adwarealert.com
0.0.0.0 www.adwarealert.com
0.0.0.0 adwarebazooka.com
0.0.0.0 www.adwarebazooka.com
0.0.0.0 adwarebgone.info
0.0.0.0 www.adwarebgone.info
0.0.0.0 adwareblaster.com
0.0.0.0 www.adwareblaster.com
0.0.0.0 adwareblocker.com
0.0.0.0 www.adwareblocker.com
0.0.0.0 adwarecatch.com
0.0.0.0 www.adwarecatch.com
0.0.0.0 adwarecatcher.com
0.0.0.0 www.adwarecatcher.com
0.0.0.0 adwarecops.com
0.0.0.0 www.adwarecops.com
0.0.0.0 adwarecrusher.com
0.0.0.0 www.adwarecrusher.com
0.0.0.0 adwaredelete.com
0.0.0.0 www.adwaredelete.com
0.0.0.0 adwaredeluxe.com
0.0.0.0 www.adwaredeluxe.com
0.0.0.0 adwaredetect.com
0.0.0.0 www.adwaredetect.com
0.0.0.0 adwaredetector.com
0.0.0.0 www.adwaredetector.com
0.0.0.0 adwareeradicator.com
0.0.0.0 www.adwareeradicator.com
0.0.0.0 adwareeraser.com
0.0.0.0 www.adwareeraser.com
0.0.0.0 adwarefilter.com
0.0.0.0 www.adwarefilter.com
0.0.0.0 adwarefinder.com
0.0.0.0 www.adwarefinder.com
0.0.0.0 adwareflush.com
0.0.0.0 www.adwareflush.com
0.0.0.0 adwareflusher.com
0.0.0.0 www.adwareflusher.com
0.0.0.0 adwareguard.com
0.0.0.0 www.adwareguard.com
0.0.0.0 adwarehitman.com
0.0.0.0 www.adwarehitman.com
0.0.0.0 adwarehunter.com
0.0.0.0 www.adwarehunter.com
0.0.0.0 adwareindanger.com
0.0.0.0 www.adwareindanger.com
0.0.0.0 adwareinspector.com
0.0.0.0 www.adwareinspector.com
0.0.0.0 adwareisgone.com
0.0.0.0 www.adwareisgone.com
0.0.0.0 adwarepatrol.com
0.0.0.0 www.adwarepatrol.com
0.0.0.0 adwarepolice.com
0.0.0.0 www.adwarepolice.com
0.0.0.0 adwarepro.com
0.0.0.0 www.adwarepro.com
0.0.0.0 adwarepunisher.com
0.0.0.0 www.adwarepunisher.com
0.0.0.0 adwareremover.ws
0.0.0.0 www.adwareremover.ws
0.0.0.0 adwareremovergold.com
0.0.0.0 www.adwareremovergold.com
0.0.0.0 adwaresafe.com
0.0.0.0 www.adwaresafe.com
0.0.0.0 adwaresafety.com
0.0.0.0 www.adwaresafety.com
0.0.0.0 adwaresanitizer.com
0.0.0.0 www.adwaresanitizer.com
0.0.0.0 adwarescanner.com
0.0.0.0 www.adwarescanner.com
0.0.0.0 adwarescrub.com
0.0.0.0 www.adwarescrub.com
0.0.0.0 adwarescrubber.com
0.0.0.0 www.adwarescrubber.com
0.0.0.0 adwaresheriff.com
0.0.0.0 www.adwaresheriff.com
0.0.0.0 adwaresheriff.net
0.0.0.0 www.adwaresheriff.net
0.0.0.0 adwareshield.com
0.0.0.0 www.adwareshield.com
0.0.0.0 adwareshredder.com
0.0.0.0 www.adwareshredder.com
0.0.0.0 adwaresoft.com
0.0.0.0 www.adwaresoft.com
0.0.0.0 adwarespy.com
0.0.0.0 www.adwarespy.com
0.0.0.0 adwarespyware.net
0.0.0.0 www.adwarespyware.net
0.0.0.0 adwarespywareremoval.com
0.0.0.0 www.adwarespywareremoval.com
0.0.0.0 adwaresquash.com
0.0.0.0 www.adwaresquash.com
0.0.0.0 adwaresquasher.com
0.0.0.0 www.adwaresquasher.com
0.0.0.0 adwarestriker.com
0.0.0.0 www.adwarestriker.com
0.0.0.0 adwareterminator.com
0.0.0.0 www.adwareterminator.com
0.0.0.0 adwaretools.com
0.0.0.0 www.adwaretools.com
0.0.0.0 adwarewasher.com
0.0.0.0 www.adwarewasher.com
0.0.0.0 adwarewatch.com
0.0.0.0 www.adwarewatch.com
0.0.0.0 adwarewipe.com
0.0.0.0 www.adwarewipe.com
0.0.0.0 adwarewiper.com
0.0.0.0 www.adwarewiper.com
0.0.0.0 adwarexeliminator.com
0.0.0.0 www.adwarexeliminator.com
0.0.0.0 adwarexterminator.com
0.0.0.0 www.adwarexterminator.com
0.0.0.0 adwarezapper.com
0.0.0.0 www.adwarezapper.com
0.0.0.0 adwash.com
0.0.0.0 www.adwash.com
0.0.0.0 affiliatesuccess.net
0.0.0.0 www.affiliatesuccess.net
0.0.0.0 agentspyware.com
0.0.0.0 www.agentspyware.com
0.0.0.0 aguarddog.com
0.0.0.0 www.aguarddog.com
0.0.0.0 aladdinsys.com
0.0.0.0 www.aladdinsys.com
0.0.0.0 alertspy.com
0.0.0.0 www.alertspy.com
0.0.0.0 alfacleaner.com
0.0.0.0 www.alfacleaner.com
0.0.0.0 allsecuritylinks.com
0.0.0.0 www.allsecuritylinks.com
0.0.0.0 alltruesoftware.com
0.0.0.0 www.alltruesoftware.com
0.0.0.0 aluriasoftware.com
0.0.0.0 www.aluriasoftware.com
0.0.0.0 alwaysfreealways.com
0.0.0.0 www.alwaysfreealways.com
0.0.0.0 anosurfer.com
0.0.0.0 www.anosurfer.com
0.0.0.0 anti-spyware-review.com
0.0.0.0 www.anti-spyware-review.com
0.0.0.0 anti-virus-pro.com
0.0.0.0 www.anti-virus-pro.com
0.0.0.0 anti-viruses.net
0.0.0.0 www.anti-viruses.net
0.0.0.0 antiadwareco.com
0.0.0.0 www.antiadwareco.com
0.0.0.0 antiadwarefoundation.com
0.0.0.0 www.antiadwarefoundation.com
0.0.0.0 antispawarechat.com
0.0.0.0 www.antispawarechat.com
0.0.0.0 antispawarefree.com
0.0.0.0 www.antispawarefree.com
0.0.0.0 antispyadvanced.com
0.0.0.0 www.antispyadvanced.com
0.0.0.0 antispylab.com
0.0.0.0 www.antispylab.com
0.0.0.0 antispynow.com
0.0.0.0 www.antispynow.com
0.0.0.0 antispywarebox.com
0.0.0.0 www.antispywarebox.com
0.0.0.0 antispywareco.com
0.0.0.0 www.antispywareco.com
0.0.0.0 antispywarecoer.com
0.0.0.0 www.antispywarecoer.com
0.0.0.0 antispywaredirectx.com
0.0.0.0 www.antispywaredirectx.com
0.0.0.0 antispywarefreex.com
0.0.0.0 www.antispywarefreex.com
0.0.0.0 antispywarenetwork.com
0.0.0.0 www.antispywarenetwork.com
0.0.0.0 antispywaresoldier.com
0.0.0.0 www.antispywaresoldier.com
0.0.0.0 antithiefware.com
0.0.0.0 www.antithiefware.com
0.0.0.0 antivermins.com
0.0.0.0 www.antivermins.com
0.0.0.0 antivirus-email.com
0.0.0.0 www.antivirus-email.com
0.0.0.0 antivirus-gold.com
0.0.0.0 www.antivirus-gold.com
0.0.0.0 armor2net.com
0.0.0.0 www.armor2net.com
0.0.0.0 ascentive.com
0.0.0.0 www.ascentive.com
0.0.0.0 athivision.com
0.0.0.0 www.athivision.com
0.0.0.0 atruesecurity.com
0.0.0.0 www.atruesecurity.com
0.0.0.0 bestguardplatinum.com
0.0.0.0 www.bestguardplatinum.com
0.0.0.0 bestnotospy.net
0.0.0.0 www.bestnotospy.net
0.0.0.0 blackhawksoftware.com
0.0.0.0 www.blackhawksoftware.com
0.0.0.0 botsquash.com
0.0.0.0 www.botsquash.com
0.0.0.0 bravesentry.com
0.0.0.0 www.bravesentry.com
0.0.0.0 breakspyware.com
0.0.0.0 www.breakspyware.com
0.0.0.0 browser-page.com
0.0.0.0 www.browser-page.com
0.0.0.0 bulletproofsoft.biz
0.0.0.0 www.bulletproofsoft.biz
0.0.0.0 bulletproofsoft.com
0.0.0.0 www.bulletproofsoft.com
0.0.0.0 bulletproofsoft.info
0.0.0.0 www.bulletproofsoft.info
0.0.0.0 bulletproofsoft.net
0.0.0.0 www.bulletproofsoft.net
0.0.0.0 bulletproofsoft.org
0.0.0.0 www.bulletproofsoft.org
0.0.0.0 bulletproofsoft.us
0.0.0.0 www.bulletproofsoft.us
0.0.0.0 cashunlim.com
0.0.0.0 www.cashunlim.com
0.0.0.0 cdmworldsoftware.com
0.0.0.0 www.cdmworldsoftware.com
0.0.0.0 certified-safe-downloads.com
0.0.0.0 www.certified-safe-downloads.com
0.0.0.0 checkflow.com
0.0.0.0 www.checkflow.com
0.0.0.0 checkforspyware.com
0.0.0.0 www.checkforspyware.com
0.0.0.0 checkspy.com
0.0.0.0 www.checkspy.com
0.0.0.0 checkssecurity.com
0.0.0.0 www.checkssecurity.com
0.0.0.0 cleanpcsoftware.com
0.0.0.0 www.cleanpcsoftware.com
0.0.0.0 cleanup-adware.com
0.0.0.0 www.cleanup-adware.com
0.0.0.0 cleanx.co.kr
0.0.0.0 www.cleanx.co.kr
0.0.0.0 clickspring.net
0.0.0.0 www.clickspring.net
0.0.0.0 clixtrader.net
0.0.0.0 www.clixtrader.net
0.0.0.0 comadwarefinder.com
0.0.0.0 www.comadwarefinder.com
0.0.0.0 consumeridentity.com
0.0.0.0 www.consumeridentity.com
0.0.0.0 contra-virus.com
0.0.0.0 www.contra-virus.com
0.0.0.0 crawler.com
0.0.0.0 www.crawler.com
0.0.0.0 curepcsolutions.com
0.0.0.0 www.curepcsolutions.com
0.0.0.0 cyber-defender.com
0.0.0.0 www.cyber-defender.com
0.0.0.0 cyberdefender.com
0.0.0.0 www.cyberdefender.com
0.0.0.0 cybergations.com
0.0.0.0 www.cybergations.com
0.0.0.0 defenza.com
0.0.0.0 www.defenza.com
0.0.0.0 diaremover.com
0.0.0.0 www.diaremover.com
0.0.0.0 doctor-alex.com
0.0.0.0 www.doctor-alex.com
0.0.0.0 doctoradware.com
0.0.0.0 www.doctoradware.com
0.0.0.0 doctoradwarepro.com
0.0.0.0 www.doctoradwarepro.com
0.0.0.0 doctorcleaner.com
0.0.0.0 www.doctorcleaner.com
0.0.0.0 dreamenstudio.com
0.0.0.0 www.dreamenstudio.com
0.0.0.0 drivecleaner.com
0.0.0.0 www.drivecleaner.com
0.0.0.0 dvds-access.com
0.0.0.0 www.dvds-access.com
0.0.0.0 easyerase.com
0.0.0.0 www.easyerase.com
0.0.0.0 easyspyremover.com
0.0.0.0 www.easyspyremover.com
0.0.0.0 easyspywarekiller.com
0.0.0.0 www.easyspywarekiller.com
0.0.0.0 eblocs.com
0.0.0.0 www.eblocs.com
0.0.0.0 egeosoftware.com
0.0.0.0 www.egeosoftware.com
0.0.0.0 elimiware.com
0.0.0.0 www.elimiware.com
0.0.0.0 endthespyware.com
0.0.0.0 www.endthespyware.com
0.0.0.0 engagemarketing.com
0.0.0.0 www.engagemarketing.com
0.0.0.0 errornuker.com
0.0.0.0 www.errornuker.com
0.0.0.0 errorprotector.com
0.0.0.0 www.errorprotector.com
0.0.0.0 errorsafe.com
0.0.0.0 www.errorsafe.com
0.0.0.0 espywarekiller.privacyregained.com
0.0.0.0 www.espywarekiller.privacyregained.com
0.0.0.0 esunsofttechnologies.com
0.0.0.0 www.esunsofttechnologies.com
0.0.0.0 etdscanner.com
0.0.0.0 www.etdscanner.com
0.0.0.0 evonsoft.com
0.0.0.0 www.evonsoft.com
0.0.0.0 fastlink2.com
0.0.0.0 www.fastlink2.com
0.0.0.0 fightpycity.net
0.0.0.0 www.fightpycity.net
0.0.0.0 fightpyco.net
0.0.0.0 www.fightpyco.net
0.0.0.0 filejunction.com
0.0.0.0 www.filejunction.com
0.0.0.0 findmenow.info
0.0.0.0 www.findmenow.info
0.0.0.0 fixerantispy.com
0.0.0.0 www.fixerantispy.com
0.0.0.0 floborecovery.com
0.0.0.0 www.floborecovery.com
0.0.0.0 floborecovery.us
0.0.0.0 www.floborecovery.us
0.0.0.0 flyyasoft.com
0.0.0.0 www.flyyasoft.com
0.0.0.0 free-kazaa-spyware.info
0.0.0.0 www.free-kazaa-spyware.info
0.0.0.0 free-spybot.com
0.0.0.0 www.free-spybot.com
0.0.0.0 free-spyware-scan.com
0.0.0.0 www.free-spyware-scan.com
0.0.0.0 free-spyware-scan.info
0.0.0.0 www.free-spyware-scan.info
0.0.0.0 freepcscan.com
0.0.0.0 www.freepcscan.com
0.0.0.0 freespywarescan.org
0.0.0.0 www.freespywarescan.org
0.0.0.0 freeze.com
0.0.0.0 www.freeze.com
0.0.0.0 froggie-scan.software4yoursuccess-com.qarchive.org
0.0.0.0 www.froggie-scan.software4yoursuccess-com.qarchive.org
0.0.0.0 fzyonline.com
0.0.0.0 www.fzyonline.com
0.0.0.0 generateskey.com
0.0.0.0 www.generateskey.com
0.0.0.0 genericscanner.com
0.0.0.0 www.genericscanner.com
0.0.0.0 goggle.com
0.0.0.0 www.goggle.com
0.0.0.0 gsiconcepts.com
0.0.0.0 www.gsiconcepts.com
0.0.0.0 guardbar.com
0.0.0.0 www.guardbar.com
0.0.0.0 guardwall.com
0.0.0.0 www.guardwall.com
0.0.0.0 halt-spyware.com
0.0.0.0 www.halt-spyware.com
0.0.0.0 haltspyware.info
0.0.0.0 www.haltspyware.info
0.0.0.0 healthycomputerclub.com
0.0.0.0 www.healthycomputerclub.com
0.0.0.0 hijack-this.com
0.0.0.0 www.hijack-this.com
0.0.0.0 hijack-this.net
0.0.0.0 www.hijack-this.net
0.0.0.0 hijackers.qarchive.org
0.0.0.0 www.hijackers.qarchive.org
0.0.0.0 hitvirus.com
0.0.0.0 www.hitvirus.com
0.0.0.0 hotwinupdates.com
0.0.0.0 www.hotwinupdates.com
0.0.0.0 iaxobject.com
0.0.0.0 www.iaxobject.com
0.0.0.0 idownload.com
0.0.0.0 www.idownload.com
0.0.0.0 ihateadware.com
0.0.0.0 www.ihateadware.com
0.0.0.0 imagemediaobject.com
0.0.0.0 www.imagemediaobject.com
0.0.0.0 inicom.dk
0.0.0.0 www.inicom.dk
0.0.0.0 innovagest2000.com
0.0.0.0 www.innovagest2000.com
0.0.0.0 interesoft.com
0.0.0.0 www.interesoft.com
0.0.0.0 interestslinks.com
0.0.0.0 www.interestslinks.com
0.0.0.0 internetantispy.com
0.0.0.0 www.internetantispy.com
0.0.0.0 internetshield.com
0.0.0.0 www.internetshield.com
0.0.0.0 invender.nl
0.0.0.0 www.invender.nl
0.0.0.0 isnake.net
0.0.0.0 www.isnake.net
0.0.0.0 ispykiller.com
0.0.0.0 www.ispykiller.com
0.0.0.0 itcompany.com
0.0.0.0 www.itcompany.com
0.0.0.0 iteens.comsg08.biz
0.0.0.0 www.iteens.comsg08.biz
0.0.0.0 jcspyware-remover.com
0.0.0.0 www.jcspyware-remover.com
0.0.0.0 jeanharris.com
0.0.0.0 www.jeanharris.com
0.0.0.0 jointventureforprofit.com
0.0.0.0 www.jointventureforprofit.com
0.0.0.0 kazaap.org
0.0.0.0 www.kazaap.org
0.0.0.0 killadwareco.com
0.0.0.0 www.killadwareco.com
0.0.0.0 killallspyware.com
0.0.0.0 www.killallspyware.com
0.0.0.0 killandclean.com
0.0.0.0 www.killandclean.com
0.0.0.0 killercash.com
0.0.0.0 www.killercash.com
0.0.0.0 killersoftware.com
0.0.0.0 www.killersoftware.com
0.0.0.0 killspy.net
0.0.0.0 www.killspy.net
0.0.0.0 killthespyware.com
0.0.0.0 www.killthespyware.com
0.0.0.0 logiguard.com
0.0.0.0 www.logiguard.com
0.0.0.0 mailwiper.com
0.0.0.0 www.mailwiper.com
0.0.0.0 mainstreamdollars.com
0.0.0.0 www.mainstreamdollars.com
0.0.0.0 malwarealarm.com
0.0.0.0 www.malwarealarm.com
0.0.0.0 malwarewipe.com
0.0.0.0 www.malwarewipe.com
0.0.0.0 malwarewiped.com
0.0.0.0 www.malwarewiped.com
0.0.0.0 malwhere.com
0.0.0.0 www.malwhere.com
0.0.0.0 maximumsoftware.com
0.0.0.0 www.maximumsoftware.com
0.0.0.0 maxionsoftware.com
0.0.0.0 www.maxionsoftware.com
0.0.0.0 maxnetshield.com
0.0.0.0 www.maxnetshield.com
0.0.0.0 maxprivacyprotector.com
0.0.0.0 www.maxprivacyprotector.com
0.0.0.0 maxtheater.com
0.0.0.0 www.maxtheater.com
0.0.0.0 mediaactivexpage.com
0.0.0.0 www.mediaactivexpage.com
0.0.0.0 microantivirus.com
0.0.0.0 www.microantivirus.com
0.0.0.0 microantivirusxp.com
0.0.0.0 www.microantivirusxp.com
0.0.0.0 microsoftantispy.com
0.0.0.0 www.microsoftantispy.com
0.0.0.0 microsoftantispyware.net
0.0.0.0 www.microsoftantispyware.net
0.0.0.0 minutegroup.com
0.0.0.0 www.minutegroup.com
0.0.0.0 mntolympus.org
0.0.0.0 www.mntolympus.org
0.0.0.0 mrantispy.com
0.0.0.0 www.mrantispy.com
0.0.0.0 multimediaobject.com
0.0.0.0 www.multimediaobject.com
0.0.0.0 mynetprotector.com
0.0.0.0 www.mynetprotector.com
0.0.0.0 mypctuneup.com
0.0.0.0 www.mypctuneup.com
0.0.0.0 myspyerase.biz
0.0.0.0 www.myspyerase.biz
0.0.0.0 myspyfreepc.com
0.0.0.0 www.myspyfreepc.com
0.0.0.0 myspyprotector.com
0.0.0.0 www.myspyprotector.com
0.0.0.0 myspywarecleaner.com
0.0.0.0 www.myspywarecleaner.com
0.0.0.0 myspywarescan.com
0.0.0.0 www.myspywarescan.com
0.0.0.0 neosoftlabs.com
0.0.0.0 www.neosoftlabs.com
0.0.0.0 netspyprotector.com
0.0.0.0 www.netspyprotector.com
0.0.0.0 networkdynamicscorp.com
0.0.0.0 www.networkdynamicscorp.com
0.0.0.0 newcodecscentral.biz
0.0.0.0 www.newcodecscentral.biz
0.0.0.0 newfreedownloads.com
0.0.0.0 www.newfreedownloads.com
0.0.0.0 nixad.com
0.0.0.0 www.nixad.com
0.0.0.0 no-spy-ware.com
0.0.0.0 www.no-spy-ware.com
0.0.0.0 noadware.net
0.0.0.0 www.noadware.net
0.0.0.0 nospyware.info
0.0.0.0 www.nospyware.info
0.0.0.0 nospywaresoft.com
0.0.0.0 www.nospywaresoft.com
0.0.0.0 nospyx.com
0.0.0.0 www.nospyx.com
0.0.0.0 nuker.com
0.0.0.0 www.nuker.com
0.0.0.0 online-spyware-scan.com
0.0.0.0 www.online-spyware-scan.com
0.0.0.0 onlinepcfix.com
0.0.0.0 www.onlinepcfix.com
0.0.0.0 oreware.com
0.0.0.0 www.oreware.com
0.0.0.0 outgates.com
0.0.0.0 www.outgates.com
0.0.0.0 oxfordspywareremover.com
0.0.0.0 www.oxfordspywareremover.com
0.0.0.0 palsol.biz
0.0.0.0 www.palsol.biz
0.0.0.0 palsol.com
0.0.0.0 www.palsol.com
0.0.0.0 palsol.net
0.0.0.0 www.palsol.net
0.0.0.0 paltek.net
0.0.0.0 www.paltek.net
0.0.0.0 pcadwareremoval.com
0.0.0.0 www.pcadwareremoval.com
0.0.0.0 pcarmor.net
0.0.0.0 www.pcarmor.net
0.0.0.0 pchealthplan.com
0.0.0.0 www.pchealthplan.com
0.0.0.0 pcmaxsoftware.com
0.0.0.0 www.pcmaxsoftware.com
0.0.0.0 pcorion.com
0.0.0.0 www.pcorion.com
0.0.0.0 pcperformancetools.com
0.0.0.0 www.pcperformancetools.com
0.0.0.0 pcprivacysoftware.com
0.0.0.0 www.pcprivacysoftware.com
0.0.0.0 pcsafe.com
0.0.0.0 www.pcsafe.com
0.0.0.0 pcsecuritysheild.com
0.0.0.0 www.pcsecuritysheild.com
0.0.0.0 pcsecurityshield.com
0.0.0.0 www.pcsecurityshield.com
0.0.0.0 pcsecuritywall.com
0.0.0.0 www.pcsecuritywall.com
0.0.0.0 pcspytool.com
0.0.0.0 www.pcspytool.com
0.0.0.0 pctoolworks2004.com
0.0.0.0 www.pctoolworks2004.com
0.0.0.0 pctoolworks2005.com
0.0.0.0 www.pctoolworks2005.com
0.0.0.0 pest-wiper.com
0.0.0.0 www.pest-wiper.com
0.0.0.0 pestbot.com
0.0.0.0 www.pestbot.com
0.0.0.0 pestcapture.com
0.0.0.0 www.pestcapture.com
0.0.0.0 pestprotector.com
0.0.0.0 www.pestprotector.com
0.0.0.0 pesttrap.com
0.0.0.0 www.pesttrap.com
0.0.0.0 pestwiper.com
0.0.0.0 www.pestwiper.com
0.0.0.0 petspatrol.com
0.0.0.0 www.petspatrol.com
0.0.0.0 pigeons.net
0.0.0.0 www.pigeons.net
0.0.0.0 pimasoft.com
0.0.0.0 www.pimasoft.com
0.0.0.0 platinumparter.com
0.0.0.0 www.platinumparter.com
0.0.0.0 playcodecs.com
0.0.0.0 www.playcodecs.com
0.0.0.0 privacycash.com
0.0.0.0 www.privacycash.com
0.0.0.0 privacychampion.com
0.0.0.0 www.privacychampion.com
0.0.0.0 privacytools2004.com
0.0.0.0 www.privacytools2004.com
0.0.0.0 procounter.biz
0.0.0.0 www.procounter.biz
0.0.0.0 professionalcash.com
0.0.0.0 www.professionalcash.com
0.0.0.0 protectgates.com
0.0.0.0 www.protectgates.com
0.0.0.0 protectionssoft.com
0.0.0.0 www.protectionssoft.com
0.0.0.0 protectionszone.com
0.0.0.0 www.protectionszone.com
0.0.0.0 protectorsuite.com
0.0.0.0 www.protectorsuite.com
0.0.0.0 protectwin.com
0.0.0.0 www.protectwin.com
0.0.0.0 psguard.com
0.0.0.0 www.psguard.com
0.0.0.0 purityscan.com
0.0.0.0 www.purityscan.com
0.0.0.0 puritysweep.com
0.0.0.0 www.puritysweep.com
0.0.0.0 qspyware.com
0.0.0.0 www.qspyware.com
0.0.0.0 quickcleaner.com
0.0.0.0 www.quickcleaner.com
0.0.0.0 razespyware.com
0.0.0.0 www.razespyware.com
0.0.0.0 razespyware.net
0.0.0.0 www.razespyware.net
0.0.0.0 realspyerase.biz
0.0.0.0 www.realspyerase.biz
0.0.0.0 rebrandsoftware.com
0.0.0.0 www.rebrandsoftware.com
0.0.0.0 redemptionengine.com
0.0.0.0 www.redemptionengine.com
0.0.0.0 redv.net
0.0.0.0 www.redv.net
0.0.0.0 regfreeze.com
0.0.0.0 www.regfreeze.com
0.0.0.0 regfreeze.net
0.0.0.0 www.regfreeze.net
0.0.0.0 registry-doctor.com
0.0.0.0 www.registry-doctor.com
0.0.0.0 registryoptimizer.com
0.0.0.0 www.registryoptimizer.com
0.0.0.0 remedy-antispy.com
0.0.0.0 www.remedy-antispy.com
0.0.0.0 remedyantispy.com
0.0.0.0 www.remedyantispy.com
0.0.0.0 remove-spyware.com
0.0.0.0 www.remove-spyware.com
0.0.0.0 revolt-search.com
0.0.0.0 www.revolt-search.com
0.0.0.0 rewardsengine.com
0.0.0.0 www.rewardsengine.com
0.0.0.0 rizalsoftware.com
0.0.0.0 www.rizalsoftware.com
0.0.0.0 safer-networking.com
0.0.0.0 www.safer-networking.com
0.0.0.0 safewebsurfer.com
0.0.0.0 www.safewebsurfer.com
0.0.0.0 samuraispy.com
0.0.0.0 www.samuraispy.com
0.0.0.0 scanandclean.com
0.0.0.0 www.scanandclean.com
0.0.0.0 scanandrepair.com
0.0.0.0 www.scanandrepair.com
0.0.0.0 scanspyware.net
0.0.0.0 www.scanspyware.net
0.0.0.0 scanthenet.com
0.0.0.0 www.scanthenet.com
0.0.0.0 scosoft.com
0.0.0.0 www.scosoft.com
0.0.0.0 scumware-remover.org
0.0.0.0 www.scumware-remover.org
0.0.0.0 securetactics.com
0.0.0.0 www.securetactics.com
0.0.0.0 securityiguard.com
0.0.0.0 www.securityiguard.com
0.0.0.0 securityplugins.com
0.0.0.0 www.securityplugins.com
0.0.0.0 securitystronghold.com
0.0.0.0 www.securitystronghold.com
0.0.0.0 sheriffcash.com
0.0.0.0 www.sheriffcash.com
0.0.0.0 shmyl.comierison
0.0.0.0 www.shmyl.comierison
0.0.0.0 shootspyware.com
0.0.0.0 www.shootspyware.com
0.0.0.0 site-entrance.net
0.0.0.0 www.site-entrance.net
0.0.0.0 site-ticket.net
0.0.0.0 www.site-ticket.net
0.0.0.0 siteentrances.com
0.0.0.0 www.siteentrances.com
0.0.0.0 sitesentrance.com
0.0.0.0 www.sitesentrance.com
0.0.0.0 slimshield.com
0.0.0.0 www.slimshield.com
0.0.0.0 smart-security.info
0.0.0.0 www.smart-security.info
0.0.0.0 smartestsearch.com
0.0.0.0 www.smartestsearch.com
0.0.0.0 softbulldog.com
0.0.0.0 www.softbulldog.com
0.0.0.0 softdd.com
0.0.0.0 www.softdd.com
0.0.0.0 softsky.com.ua
0.0.0.0 www.softsky.com.ua
0.0.0.0 software4yoursuccess.com
0.0.0.0 www.software4yoursuccess.com
0.0.0.0 softwareoasis.cc
0.0.0.0 www.softwareoasis.cc
0.0.0.0 softwareonline.com
0.0.0.0 www.softwareonline.com
0.0.0.0 softwareprofit.com
0.0.0.0 www.softwareprofit.com
0.0.0.0 solidlabs.com
0.0.0.0 www.solidlabs.com
0.0.0.0 spw2a.com
0.0.0.0 www.spw2a.com
0.0.0.0 spw2f.com
0.0.0.0 www.spw2f.com
0.0.0.0 spw3e.com
0.0.0.0 www.spw3e.com
0.0.0.0 spw4.com
0.0.0.0 www.spw4.com
0.0.0.0 spw8.com
0.0.0.0 www.spw8.com
0.0.0.0 spy-block.com
0.0.0.0 www.spy-block.com
0.0.0.0 spy-bot.com
0.0.0.0 www.spy-bot.com
0.0.0.0 spy-bot.net
0.0.0.0 www.spy-bot.net
0.0.0.0 spy-bot.org
0.0.0.0 www.spy-bot.org
0.0.0.0 spy-buster.com
0.0.0.0 www.spy-buster.com
0.0.0.0 spy-control-now.com
0.0.0.0 www.spy-control-now.com
0.0.0.0 spy-control.com
0.0.0.0 www.spy-control.com
0.0.0.0 spy-crusher.com
0.0.0.0 www.spy-crusher.com
0.0.0.0 spy-iblock.com
0.0.0.0 www.spy-iblock.com
0.0.0.0 spy-kill.com
0.0.0.0 www.spy-kill.com
0.0.0.0 spy-killer.com
0.0.0.0 www.spy-killer.com
0.0.0.0 spy-sheriff.com
0.0.0.0 www.spy-sheriff.com
0.0.0.0 spy-shield.com
0.0.0.0 www.spy-shield.com
0.0.0.0 spy-spyware.com
0.0.0.0 www.spy-spyware.com
0.0.0.0 spy-trooper.com
0.0.0.0 www.spy-trooper.com
0.0.0.0 spy-ware-remover.com
0.0.0.0 www.spy-ware-remover.com
0.0.0.0 spy.storebiz4u.com
0.0.0.0 www.spy.storebiz4u.com
0.0.0.0 spyadvanced.com
0.0.0.0 www.spyadvanced.com
0.0.0.0 spyassassin.com
0.0.0.0 www.spyassassin.com
0.0.0.0 spyassault.com
0.0.0.0 www.spyassault.com
0.0.0.0 spyaxe.biz
0.0.0.0 www.spyaxe.biz
0.0.0.0 spyaxe.com
0.0.0.0 www.spyaxe.com
0.0.0.0 spyaxe.net
0.0.0.0 www.spyaxe.net
0.0.0.0 spyaxeupdate.com
0.0.0.0 www.spyaxeupdate.com
0.0.0.0 spyban.net
0.0.0.0 www.spyban.net
0.0.0.0 spybeware.com
0.0.0.0 www.spybeware.com
0.0.0.0 spyblast.com
0.0.0.0 www.spyblast.com
0.0.0.0 spybloc.com
0.0.0.0 www.spybloc.com
0.0.0.0 spyblocs.com
0.0.0.0 www.spyblocs.com
0.0.0.0 spybot-scan.com
0.0.0.0 www.spybot-scan.com
0.0.0.0 spybot-scanner.com
0.0.0.0 www.spybot-scanner.com
0.0.0.0 spybot-spyware-removal.com
0.0.0.0 www.spybot-spyware-removal.com
0.0.0.0 spybot-virus-scan.com
0.0.0.0 www.spybot-virus-scan.com
0.0.0.0 spybot.com-xp.com
0.0.0.0 www.spybot.com-xp.com
0.0.0.0 spybotsd.com
0.0.0.0 www.spybotsd.com
0.0.0.0 spybouncer.com
0.0.0.0 www.spybouncer.com
0.0.0.0 spyburn.palsol.biz
0.0.0.0 www.spyburn.palsol.biz
0.0.0.0 spybutcher.com
0.0.0.0 www.spybutcher.com
0.0.0.0 spyclean.com
0.0.0.0 www.spyclean.com
0.0.0.0 spycleaner-gold.com
0.0.0.0 www.spycleaner-gold.com
0.0.0.0 spycleaner.net
0.0.0.0 www.spycleaner.net
0.0.0.0 spycontra.com
0.0.0.0 www.spycontra.com
0.0.0.0 spycut.com
0.0.0.0 www.spycut.com
0.0.0.0 spydeface.com
0.0.0.0 www.spydeface.com
0.0.0.0 spydefence.com
0.0.0.0 www.spydefence.com
0.0.0.0 spydeleter.com
0.0.0.0 www.spydeleter.com
0.0.0.0 spydemolisher.com
0.0.0.0 www.spydemolisher.com
0.0.0.0 spydestroy.com
0.0.0.0 www.spydestroy.com
0.0.0.0 spydestroying.com
0.0.0.0 www.spydestroying.com
0.0.0.0 spydetector.net
0.0.0.0 www.spydetector.net
0.0.0.0 spyelimination.com
0.0.0.0 www.spyelimination.com
0.0.0.0 spyfalcon.com
0.0.0.0 www.spyfalcon.com
0.0.0.0 spyferret.com
0.0.0.0 www.spyferret.com
0.0.0.0 spyfighter.com
0.0.0.0 www.spyfighter.com
0.0.0.0 spyfirewall.com
0.0.0.0 www.spyfirewall.com
0.0.0.0 spyflusher.com
0.0.0.0 www.spyflusher.com
0.0.0.0 spyheal.com
0.0.0.0 www.spyheal.com
0.0.0.0 spyiblock.com
0.0.0.0 www.spyiblock.com
0.0.0.0 spyikiller.com
0.0.0.0 www.spyikiller.com
0.0.0.0 spyinator.com
0.0.0.0 www.spyinator.com
0.0.0.0 spykiller.com
0.0.0.0 www.spykiller.com
0.0.0.0 spykillerdownload.com
0.0.0.0 www.spykillerdownload.com
0.0.0.0 spykillerpro.com
0.0.0.0 www.spykillerpro.com
0.0.0.0 spymarshal.com
0.0.0.0 www.spymarshal.com
0.0.0.0 spyofficer.com
0.0.0.0 www.spyofficer.com
0.0.0.0 spyonthis.net
0.0.0.0 www.spyonthis.net
0.0.0.0 spypolice.com
0.0.0.0 www.spypolice.com
0.0.0.0 spypry.com
0.0.0.0 www.spypry.com
0.0.0.0 spyreaper.com
0.0.0.0 www.spyreaper.com
0.0.0.0 spysanitizer.com
0.0.0.0 www.spysanitizer.com
0.0.0.0 spysheriff.com
0.0.0.0 www.spysheriff.com
0.0.0.0 spyshield.org
0.0.0.0 www.spyshield.org
0.0.0.0 spysniper.net
0.0.0.0 www.spysniper.net
0.0.0.0 spyspotter.com
0.0.0.0 www.spyspotter.com
0.0.0.0 spysquash.com
0.0.0.0 www.spysquash.com
0.0.0.0 spystalker.com
0.0.0.0 www.spystalker.com
0.0.0.0 spystriker.com
0.0.0.0 www.spystriker.com
0.0.0.0 spyterm.com
0.0.0.0 www.spyterm.com
0.0.0.0 spytoaster.com
0.0.0.0 www.spytoaster.com
0.0.0.0 spytrooper.com
0.0.0.0 www.spytrooper.com
0.0.0.0 spyvest.com
0.0.0.0 www.spyvest.com
0.0.0.0 spyville.com
0.0.0.0 www.spyville.com
0.0.0.0 spyviper.com
0.0.0.0 www.spyviper.com
0.0.0.0 spyware-b1aster-software.com
0.0.0.0 www.spyware-b1aster-software.com
0.0.0.0 spyware-cash.com
0.0.0.0 www.spyware-cash.com
0.0.0.0 spyware-cop.com
0.0.0.0 www.spyware-cop.com
0.0.0.0 spyware-destroyer.com
0.0.0.0 www.spyware-destroyer.com
0.0.0.0 spyware-finder.info
0.0.0.0 www.spyware-finder.info
0.0.0.0 spyware-list.info
0.0.0.0 www.spyware-list.info
0.0.0.0 spyware-pest-remover.com
0.0.0.0 www.spyware-pest-remover.com
0.0.0.0 spyware-removal.net
0.0.0.0 www.spyware-removal.net
0.0.0.0 spyware-remover-software.net
0.0.0.0 www.spyware-remover-software.net
0.0.0.0 spyware-spyware.org
0.0.0.0 www.spyware-spyware.org
0.0.0.0 spyware-stop.com
0.0.0.0 www.spyware-stop.com
0.0.0.0 spyware-virus-remover.com
0.0.0.0 www.spyware-virus-remover.com
0.0.0.0 spyware-virus-scan.com
0.0.0.0 www.spyware-virus-scan.com
0.0.0.0 spyware-wiper.com
0.0.0.0 www.spyware-wiper.com
0.0.0.0 spyware1.com
0.0.0.0 www.spyware1.com
0.0.0.0 spywarealert.com
0.0.0.0 www.spywarealert.com
0.0.0.0 spywareassassin.com
0.0.0.0 www.spywareassassin.com
0.0.0.0 spywareavenger.com
0.0.0.0 www.spywareavenger.com
0.0.0.0 spywarebegone.com
0.0.0.0 www.spywarebegone.com
0.0.0.0 spywareboard.com
0.0.0.0 www.spywareboard.com
0.0.0.0 spywarebomber.com
0.0.0.0 www.spywarebomber.com
0.0.0.0 spywarebot.com
0.0.0.0 www.spywarebot.com
0.0.0.0 spywarebutcher.com
0.0.0.0 www.spywarebutcher.com
0.0.0.0 spywarecatch.com
0.0.0.0 www.spywarecatch.com
0.0.0.0 spywarecatcher.com
0.0.0.0 www.spywarecatcher.com
0.0.0.0 spywarecleanerdownload2.com
0.0.0.0 www.spywarecleanerdownload2.com
0.0.0.0 spywarecleaneronline.biz
0.0.0.0 www.spywarecleaneronline.biz
0.0.0.0 spywarecleanser.info
0.0.0.0 www.spywarecleanser.info
0.0.0.0 spywarecops.com
0.0.0.0 www.spywarecops.com
0.0.0.0 spywarecrusher.com
0.0.0.0 www.spywarecrusher.com
0.0.0.0 spywarecure.net
0.0.0.0 www.spywarecure.net
0.0.0.0 spywaredefense.com
0.0.0.0 www.spywaredefense.com
0.0.0.0 spywaredetector.net
0.0.0.0 www.spywaredetector.net
0.0.0.0 spywaredisinfector.com
0.0.0.0 www.spywaredisinfector.com
0.0.0.0 spywaredollars.com
0.0.0.0 www.spywaredollars.com
0.0.0.0 spywarefinder.net
0.0.0.0 www.spywarefinder.net
0.0.0.0 spywareflush.com
0.0.0.0 www.spywareflush.com
0.0.0.0 spywareflusher.com
0.0.0.0 www.spywareflusher.com
0.0.0.0 spywarehospital.com
0.0.0.0 www.spywarehospital.com
0.0.0.0 spywarehound.com
0.0.0.0 www.spywarehound.com
0.0.0.0 spywareindanger.com
0.0.0.0 www.spywareindanger.com
0.0.0.0 spywarekill.com
0.0.0.0 www.spywarekill.com
0.0.0.0 spywarekilla.com
0.0.0.0 www.spywarekilla.com
0.0.0.0 spywarekiller.net
0.0.0.0 www.spywarekiller.net
0.0.0.0 spywarekiller.us
0.0.0.0 www.spywarekiller.us
0.0.0.0 spywarelabs.com
0.0.0.0 www.spywarelabs.com
0.0.0.0 spywareno.com
0.0.0.0 www.spywareno.com
0.0.0.0 spywarepolice.com
0.0.0.0 www.spywarepolice.com
0.0.0.0 spywarequake.com
0.0.0.0 www.spywarequake.com
0.0.0.0 spywarequake.info
0.0.0.0 www.spywarequake.info
0.0.0.0 spywareremoval.ws
0.0.0.0 www.spywareremoval.ws
0.0.0.0 spywareremovalwizard.com
0.0.0.0 www.spywareremovalwizard.com
0.0.0.0 spywareremover.com
0.0.0.0 www.spywareremover.com
0.0.0.0 spywarescout.com
0.0.0.0 www.spywarescout.com
0.0.0.0 spywarescrapper.com
0.0.0.0 www.spywarescrapper.com
0.0.0.0 spywarescrub.com
0.0.0.0 www.spywarescrub.com
0.0.0.0 spywareseeker.com
0.0.0.0 www.spywareseeker.com
0.0.0.0 spywaresheriff.com
0.0.0.0 www.spywaresheriff.com
0.0.0.0 spywareshield.com
0.0.0.0 www.spywareshield.com
0.0.0.0 spywaresledgehammer.com
0.0.0.0 www.spywaresledgehammer.com
0.0.0.0 spywaresnooper.com
0.0.0.0 www.spywaresnooper.com
0.0.0.0 spywaresoftstop-cash.com
0.0.0.0 www.spywaresoftstop-cash.com
0.0.0.0 spywaresoftstop.com
0.0.0.0 www.spywaresoftstop.com
0.0.0.0 spywarespy.com
0.0.0.0 www.spywarespy.com
0.0.0.0 spywaresquash.com
0.0.0.0 www.spywaresquash.com
0.0.0.0 spywaresterilizer.com
0.0.0.0 www.spywaresterilizer.com
0.0.0.0 spywarestormer.com
0.0.0.0 www.spywarestormer.com
0.0.0.0 spywarestrike.com
0.0.0.0 www.spywarestrike.com
0.0.0.0 spywarestriker.com
0.0.0.0 www.spywarestriker.com
0.0.0.0 spywaretek.com
0.0.0.0 www.spywaretek.com
0.0.0.0 spywarethis.com
0.0.0.0 www.spywarethis.com
0.0.0.0 spywarethis.com-xp.com
0.0.0.0 www.spywarethis.com-xp.com
0.0.0.0 spywarevanisher.com
0.0.0.0 www.spywarevanisher.com
0.0.0.0 spywarewipe.com
0.0.0.0 www.spywarewipe.com
0.0.0.0 spywarewizard.com
0.0.0.0 www.spywarewizard.com
0.0.0.0 spywarewizard.net
0.0.0.0 www.spywarewizard.net
0.0.0.0 spywarexp.com
0.0.0.0 www.spywarexp.com
0.0.0.0 spywarezapper.com
0.0.0.0 www.spywarezapper.com
0.0.0.0 spywarmegasite.com
0.0.0.0 www.spywarmegasite.com
0.0.0.0 spywipe.com
0.0.0.0 www.spywipe.com
0.0.0.0 spyxpress.com
0.0.0.0 www.spyxpress.com
0.0.0.0 spyzonetown.com
0.0.0.0 www.spyzonetown.com
0.0.0.0 spyzooka.com
0.0.0.0 www.spyzooka.com
0.0.0.0 stingware.com
0.0.0.0 www.stingware.com
0.0.0.0 stop-spyware-now.info
0.0.0.0 www.stop-spyware-now.info
0.0.0.0 stopguard.com
0.0.0.0 www.stopguard.com
0.0.0.0 stopitblockit.com
0.0.0.0 www.stopitblockit.com
0.0.0.0 surfertools.com
0.0.0.0 www.surfertools.com
0.0.0.0 swanksoft.com
0.0.0.0 www.swanksoft.com
0.0.0.0 swipespy.com
0.0.0.0 www.swipespy.com
0.0.0.0 synergeticsoft.com
0.0.0.0 www.synergeticsoft.com
0.0.0.0 sysprotect.com
0.0.0.0 www.sysprotect.com
0.0.0.0 systemdetective.com
0.0.0.0 www.systemdetective.com
0.0.0.0 systemstable.com
0.0.0.0 www.systemstable.com
0.0.0.0 tekeffect.com
0.0.0.0 www.tekeffect.com
0.0.0.0 teocash.com
0.0.0.0 www.teocash.com
0.0.0.0 teosoft.biz
0.0.0.0 www.teosoft.biz
0.0.0.0 teosoft.com
0.0.0.0 www.teosoft.com
0.0.0.0 terminexor.com
0.0.0.0 www.terminexor.com
0.0.0.0 the-spy-guard.com
0.0.0.0 www.the-spy-guard.com
0.0.0.0 theadwarehunter.com
0.0.0.0 www.theadwarehunter.com
0.0.0.0 thespyguard.com
0.0.0.0 www.thespyguard.com
0.0.0.0 thespywaredetective.com
0.0.0.0 www.thespywaredetective.com
0.0.0.0 thespywarekiller.com
0.0.0.0 www.thespywarekiller.com
0.0.0.0 thespywareshield.com
0.0.0.0 www.thespywareshield.com
0.0.0.0 threatlevel.com
0.0.0.0 www.threatlevel.com
0.0.0.0 titanantispyware.com
0.0.0.0 www.titanantispyware.com
0.0.0.0 titanshield.com
0.0.0.0 www.titanshield.com
0.0.0.0 topantispy.com
0.0.0.0 www.topantispy.com
0.0.0.0 topdownloads.net
0.0.0.0 www.topdownloads.net
0.0.0.0 topics-ent.com
0.0.0.0 www.topics-ent.com
0.0.0.0 topsecuritypage.com
0.0.0.0 www.topsecuritypage.com
0.0.0.0 toptenreviews.com
0.0.0.0 www.toptenreviews.com
0.0.0.0 torrentsbot.com
0.0.0.0 www.torrentsbot.com
0.0.0.0 trackzapper.com
0.0.0.0 www.trackzapper.com
0.0.0.0 trojan-scan.com
0.0.0.0 www.trojan-scan.com
0.0.0.0 trojan-virus-scan.com
0.0.0.0 www.trojan-virus-scan.com
0.0.0.0 truesuite.com
0.0.0.0 www.truesuite.com
0.0.0.0 trustcleaner.com
0.0.0.0 www.trustcleaner.com
0.0.0.0 trustsoft.com
0.0.0.0 www.trustsoft.com
0.0.0.0 udefender.com
0.0.0.0 www.udefender.com
0.0.0.0 ultimatecleaner.com
0.0.0.0 www.ultimatecleaner.com
0.0.0.0 unspypc.com
0.0.0.0 www.unspypc.com
0.0.0.0 untdd.com
0.0.0.0 www.untdd.com
0.0.0.0 uptodateprotect.com
0.0.0.0 www.uptodateprotect.com
0.0.0.0 vantagesoftware.com
0.0.0.0 www.vantagesoftware.com
0.0.0.0 vaxcodec.com
0.0.0.0 www.vaxcodec.com
0.0.0.0 videosaccess.net
0.0.0.0 www.videosaccess.net
0.0.0.0 vids-access.com
0.0.0.0 www.vids-access.com
0.0.0.0 virtualbouncer.com
0.0.0.0 www.virtualbouncer.com
0.0.0.0 virusblast.com
0.0.0.0 www.virusblast.com
0.0.0.0 virusblaster.com
0.0.0.0 www.virusblaster.com
0.0.0.0 virusburst.com
0.0.0.0 www.virusburst.com
0.0.0.0 virusburster.com
0.0.0.0 www.virusburster.com
0.0.0.0 virusguard.com
0.0.0.0 www.virusguard.com
0.0.0.0 virusrescue.com
0.0.0.0 www.virusrescue.com
0.0.0.0 wareout.com
0.0.0.0 www.wareout.com
0.0.0.0 webalias.com
0.0.0.0 www.webalias.com
0.0.0.0 websafesecure.com
0.0.0.0 www.websafesecure.com
0.0.0.0 websoftsecure.com
0.0.0.0 www.websoftsecure.com
0.0.0.0 whenu.com
0.0.0.0 www.whenu.com
0.0.0.0 win-fix.com
0.0.0.0 www.win-fix.com
0.0.0.0 winantispy.com
0.0.0.0 www.winantispy.com
0.0.0.0 winantispyware.com
0.0.0.0 www.winantispyware.com
0.0.0.0 winantivirus.com
0.0.0.0 www.winantivirus.com
0.0.0.0 wincleaner.com
0.0.0.0 www.wincleaner.com
0.0.0.0 winhound.com
0.0.0.0 www.winhound.com
0.0.0.0 winkeeper.net
0.0.0.0 www.winkeeper.net
0.0.0.0 winsoftware.com
0.0.0.0 www.winsoftware.com
0.0.0.0 winsos.com
0.0.0.0 www.winsos.com
0.0.0.0 worldantispy.com
0.0.0.0 www.worldantispy.com
0.0.0.0 x-con.freedomofidiom.ca
0.0.0.0 www.x-con.freedomofidiom.ca
0.0.0.0 x-conspywaredestroyer.com
0.0.0.0 www.x-conspywaredestroyer.com
0.0.0.0 x-spyware.com
0.0.0.0 www.x-spyware.com
0.0.0.0 xmembytes.com
0.0.0.0 www.xmembytes.com
0.0.0.0 xp67.com
0.0.0.0 www.xp67.com
0.0.0.0 xspyware.net
0.0.0.0 www.xspyware.net
0.0.0.0 xsremover.com
0.0.0.0 www.xsremover.com
0.0.0.0 xtremeinnovations.net
0.0.0.0 www.xtremeinnovations.net
0.0.0.0 yatorrents.com
0.0.0.0 www.yatorrents.com
0.0.0.0 your-soft.com
0.0.0.0 www.your-soft.com
0.0.0.0 zendmedia.com
0.0.0.0 www.zendmedia.com
0.0.0.0 zerotraces.com
0.0.0.0 www.zerotraces.com
0.0.0.0 zoneprotect.com
0.0.0.0 www.zoneprotect.com
0.0.0.0 accessvid.net
0.0.0.0 www.accessvid.net
0.0.0.0 acegates.com
0.0.0.0 www.acegates.com
0.0.0.0 activexsite.com
0.0.0.0 www.activexsite.com
0.0.0.0 activexsoftwares.com
0.0.0.0 www.activexsoftwares.com
0.0.0.0 adarmor.com
0.0.0.0 www.adarmor.com
0.0.0.0 alldnserrors.com
0.0.0.0 www.alldnserrors.com
0.0.0.0 allprotections.com
0.0.0.0 www.allprotections.com
0.0.0.0 allsecuritysite.com
0.0.0.0 www.allsecuritysite.com
0.0.0.0 amaena.com
0.0.0.0 www.amaena.com
0.0.0.0 anetgate.com
0.0.0.0 www.anetgate.com
0.0.0.0 antispyware.com
0.0.0.0 www.antispyware.com
0.0.0.0 antivirusgolden.com
0.0.0.0 www.antivirusgolden.com
0.0.0.0 apassmanager.com
0.0.0.0 www.apassmanager.com
0.0.0.0 asafetypage.com
0.0.0.0 www.asafetypage.com
0.0.0.0 atotalsafety.com
0.0.0.0 www.atotalsafety.com
0.0.0.0 botmaster.net
0.0.0.0 www.botmaster.net
0.0.0.0 botmaster.ru
0.0.0.0 www.botmaster.ru
0.0.0.0 cleansoftwares.com
0.0.0.0 www.cleansoftwares.com
0.0.0.0 corpsespyware.net
0.0.0.0 www.corpsespyware.net
0.0.0.0 dreamsexy.info
0.0.0.0 www.dreamsexy.info
0.0.0.0 dvdcodec.net
0.0.0.0 www.dvdcodec.net
0.0.0.0 enigmasoftware.com
0.0.0.0 www.enigmasoftware.com
0.0.0.0 entertainingzone.com
0.0.0.0 www.entertainingzone.com
0.0.0.0 iesafetywarning.com
0.0.0.0 www.iesafetywarning.com
0.0.0.0 iesecuritytool.com
0.0.0.0 www.iesecuritytool.com
0.0.0.0 imageactivex.com
0.0.0.0 www.imageactivex.com
0.0.0.0 kliksoftware.com
0.0.0.0 www.kliksoftware.com
0.0.0.0 mediaobjectguide.com
0.0.0.0 www.mediaobjectguide.com
0.0.0.0 mediaobjectsite.com
0.0.0.0 www.mediaobjectsite.com
0.0.0.0 objectactivex.com
0.0.0.0 www.objectactivex.com
0.0.0.0 playerscodec.com
0.0.0.0 www.playerscodec.com
0.0.0.0 registrycare.com
0.0.0.0 www.registrycare.com
0.0.0.0 registrydoc.com
0.0.0.0 www.registrydoc.com
0.0.0.0 registrysweeper.com
0.0.0.0 www.registrysweeper.com
0.0.0.0 regsweep.com
0.0.0.0 www.regsweep.com
0.0.0.0 safer-scan.com
0.0.0.0 www.safer-scan.com
0.0.0.0 sites-entrance.com
0.0.0.0 www.sites-entrance.com
0.0.0.0 sites-entrance.net
0.0.0.0 www.sites-entrance.net
0.0.0.0 siteticket.net
0.0.0.0 www.siteticket.net
0.0.0.0 spyanalyst.com
0.0.0.0 www.spyanalyst.com
0.0.0.0 spynomore.com
0.0.0.0 www.spynomore.com
0.0.0.0 spysoldier.com
0.0.0.0 www.spysoldier.com
0.0.0.0 spywareknight.com
0.0.0.0 www.spywareknight.com
0.0.0.0 thesafebar.com
0.0.0.0 www.thesafebar.com
0.0.0.0 vaxobject.com
0.0.0.0 www.vaxobject.com
0.0.0.0 vidaccess.net
0.0.0.0 www.vidaccess.net
0.0.0.0 videocardcodecs.biz
0.0.0.0 www.videocardcodecs.biz
0.0.0.0 videocodecs.biz
0.0.0.0 www.videocodecs.biz
0.0.0.0 virus-kill.co.kr
0.0.0.0 www.virus-kill.co.kr
0.0.0.0 washnsweep.com
0.0.0.0 www.washnsweep.com
0.0.0.0 yourieprotect.com
0.0.0.0 www.yourieprotect.com
0.0.0.0 zcodec.com
0.0.0.0 www.zcodec.com
0.0.0.0 myarmory.com
0.0.0.0 www.myarmory.com
0.0.0.0 registrysmart.com
0.0.0.0 www.registrysmart.com
0.0.0.0 illlll.com
0.0.0.0 www.illlll.com
0.0.0.0 anti-vermins.com
0.0.0.0 www.anti-vermins.com
0.0.0.0 privacyfusion.com
0.0.0.0 www.privacyfusion.com
0.0.0.0 thenuker.com
0.0.0.0 www.thenuker.com
0.0.0.0 adbutcher.com
0.0.0.0 www.adbutcher.com
0.0.0.0 adwareaway.com
0.0.0.0 www.adwareaway.com
0.0.0.0 adwarebutcher.com
0.0.0.0 www.adwarebutcher.com
0.0.0.0 adwarecheck.com
0.0.0.0 www.adwarecheck.com
0.0.0.0 adwarechecker.com
0.0.0.0 www.adwarechecker.com
0.0.0.0 spycrush.com
0.0.0.0 www.spycrush.com
0.0.0.0 antivirusadvance.com
0.0.0.0 www.antivirusadvance.com
0.0.0.0 antiviruspremium.com
0.0.0.0 www.antiviruspremium.com
0.0.0.0 pestguardian.com
0.0.0.0 www.pestguardian.com
0.0.0.0 virusscansite.com
0.0.0.0 www.virusscansite.com
0.0.0.0 evidence-eliminator.com
0.0.0.0 www.evidence-eliminator.com
0.0.0.0 spydawn.com
0.0.0.0 www.spydawn.com
0.0.0.0 codeclean.co.kr
0.0.0.0 www.codeclean.co.kr
0.0.0.0 privacy-solution.com
0.0.0.0 www.privacy-solution.com
0.0.0.0 udefender.org
0.0.0.0 www.udefender.org
0.0.0.0 udefender.biz
0.0.0.0 www.udefender.biz
0.0.0.0 udefender.net
0.0.0.0 www.udefender.net
0.0.0.0 spywareremover.storebiz4u.com
0.0.0.0 www.spywareremover.storebiz4u.com
0.0.0.0 zzztech.com
0.0.0.0 www.zzztech.com
0.0.0.0 needupdate.com
0.0.0.0 www.needupdate.com
0.0.0.0 securityfeature.com
0.0.0.0 www.securityfeature.com
0.0.0.0 warningmessage.com
0.0.0.0 www.warningmessage.com
0.0.0.0 syserrors.com
0.0.0.0 www.syserrors.com
0.0.0.0 todaywarnings.com
0.0.0.0 www.todaywarnings.com
0.0.0.0 updateyoursystem.com
0.0.0.0 www.updateyoursystem.com
0.0.0.0 perfectedsecurity.com
0.0.0.0 www.perfectedsecurity.com
0.0.0.0 systemupdates.net
0.0.0.0 www.systemupdates.net
0.0.0.0 bestsecurityguide.com
0.0.0.0 www.bestsecurityguide.com
0.0.0.0 systemsecurityindex.com
0.0.0.0 www.systemsecurityindex.com
0.0.0.0 theguardservices.com
0.0.0.0 www.theguardservices.com
0.0.0.0 awarninglist.com
0.0.0.0 www.awarninglist.com
0.0.0.0 idnserror.com
0.0.0.0 www.idnserror.com
0.0.0.0 isecuritypage.com
0.0.0.0 www.isecuritypage.com
0.0.0.0 iupdatepage.com
0.0.0.0 www.iupdatepage.com
0.0.0.0 youriesecure.com
0.0.0.0 www.youriesecure.com
0.0.0.0 asecureboard.com
0.0.0.0 www.asecureboard.com
0.0.0.0 assureprotection.com
0.0.0.0 www.assureprotection.com
0.0.0.0 esafetylist.com
0.0.0.0 www.esafetylist.com
0.0.0.0 esecuritynote.com
0.0.0.0 www.esecuritynote.com
0.0.0.0 iprotectpage.com
0.0.0.0 www.iprotectpage.com
0.0.0.0 isafetypage.com
0.0.0.0 www.isafetypage.com
0.0.0.0 safetyhall.com
0.0.0.0 www.safetyhall.com
0.0.0.0 eprotectionline.com
0.0.0.0 www.eprotectionline.com
0.0.0.0 safetyhomepage.com
0.0.0.0 www.safetyhomepage.com
0.0.0.0 securitynetpage.net
0.0.0.0 www.securitynetpage.net
0.0.0.0 sysnetsecurity.net
0.0.0.0 www.sysnetsecurity.net
0.0.0.0 sysprotectionpage.net
0.0.0.0 www.sysprotectionpage.net
0.0.0.0 theuptodatesafety.com
0.0.0.0 www.theuptodatesafety.com
0.0.0.0 anerrordns.com
0.0.0.0 www.anerrordns.com
0.0.0.0 atrueprotection.com
0.0.0.0 www.atrueprotection.com
0.0.0.0 theuptodatesecurity.com
0.0.0.0 www.theuptodatesecurity.com
0.0.0.0 uptodateprotection.net
0.0.0.0 www.uptodateprotection.net
0.0.0.0 asecurityissue.com
0.0.0.0 www.asecurityissue.com
0.0.0.0 sysprotectionpage.com
0.0.0.0 www.sysprotectionpage.com
0.0.0.0 theuptodatesecurity.net
0.0.0.0 www.theuptodatesecurity.net
0.0.0.0 safetyuptodate.net
0.0.0.0 www.safetyuptodate.net
0.0.0.0 sysnetsecurity.com
0.0.0.0 www.sysnetsecurity.com
0.0.0.0 syssecuritysite.com
0.0.0.0 www.syssecuritysite.com
0.0.0.0 syssecuritysite.net
0.0.0.0 www.syssecuritysite.net
0.0.0.0 theuptodatesafety.net
0.0.0.0 www.theuptodatesafety.net
0.0.0.0 alliesecurity.com
0.0.0.0 www.alliesecurity.com
0.0.0.0 sysguardsite.net
0.0.0.0 www.sysguardsite.net
0.0.0.0 updatestate.com
0.0.0.0 www.updatestate.com
0.0.0.0 thesecuritypages.com
0.0.0.0 www.thesecuritypages.com
0.0.0.0 thesecuritypages.net
0.0.0.0 www.thesecuritypages.net
0.0.0.0 thesecuritytest.com
0.0.0.0 www.thesecuritytest.com
0.0.0.0 thesecuritytool.net
0.0.0.0 www.thesecuritytool.net
0.0.0.0 thessecuritypages.com
0.0.0.0 www.thessecuritypages.com
0.0.0.0 iehomepages.com
0.0.0.0 www.iehomepages.com
0.0.0.0 iesafepage.com
0.0.0.0 www.iesafepage.com
0.0.0.0 ieuptodate.com
0.0.0.0 www.ieuptodate.com
0.0.0.0 esafetypage.com
0.0.0.0 www.esafetypage.com
0.0.0.0 eupdatepage.com
0.0.0.0 www.eupdatepage.com
0.0.0.0 iesecurepage.com
0.0.0.0 www.iesecurepage.com
0.0.0.0 iewarning.com
0.0.0.0 www.iewarning.com
0.0.0.0 ieprotections.com
0.0.0.0 www.ieprotections.com
0.0.0.0 safeiepage.com
0.0.0.0 www.safeiepage.com
0.0.0.0 protectionwarn.com
0.0.0.0 www.protectionwarn.com
0.0.0.0 thesafetytool.com
0.0.0.0 www.thesafetytool.com
0.0.0.0 youriesafety.com
0.0.0.0 www.youriesafety.com
0.0.0.0 eprotectpage.com
0.0.0.0 www.eprotectpage.com
0.0.0.0 esecuritypage.com
0.0.0.0 www.esecuritypage.com
0.0.0.0 neospacelab.com
0.0.0.0 www.neospacelab.com
0.0.0.0 malwareremover.com
0.0.0.0 www.malwareremover.com
0.0.0.0 spywarepainkiller.com
0.0.0.0 www.spywarepainkiller.com
0.0.0.0 6d-antivirus.com
0.0.0.0 www.6d-antivirus.com
0.0.0.0 moatsoft.com
0.0.0.0 www.moatsoft.com
0.0.0.0 almanah.biz
0.0.0.0 www.almanah.biz
0.0.0.0 adwarecavern.com
0.0.0.0 www.adwarecavern.com
0.0.0.0 virushammer.com
0.0.0.0 www.virushammer.com
0.0.0.0 spy-away.com
0.0.0.0 www.spy-away.com
0.0.0.0 copperheadsecurity.com
0.0.0.0 www.copperheadsecurity.com
0.0.0.0 perfect-cleaner.com
0.0.0.0 www.perfect-cleaner.com

Generic Renos Fix

GenericRenosFix by S!Ri


Deleting infected files

C:\WINDOWS\system32\tvomnc.dll Deleted
C:\DOCUME~1\Kevin\FAVORI~1\Online Security Test.url Deleted

Deleting Temp Files


Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


Registry Cleaning

Registry Cleaning done.

SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


End



And updated hijackthis log


Logfile of HijackThis v1.99.1
Scan saved at 5:29:06 AM, on 3/13/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\McAfee\MSK\MskAgent.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\RogueRemover PRO\RogueRemoverPRO.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\Program Files\McAfee\MPS\mpsevh.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Kevin\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Cablevision Optimum Online
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RogueMonitor] C:\Program Files\RogueRemover PRO\RogueRemoverPRO.exe /monitor
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.optonline.net
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe

#7 kairis

kairis

  • Members
  • 327 posts
  • OFFLINE
  •  
  • Location:Finland
  • Local time:07:32 PM

Posted 13 March 2007 - 04:38 AM

Hi. Thanks for the logs. Smitfraud is gone...
Lets run AVG Anti-Spyware:
Please follow the instructions provided, you may want to print out these instructions and use them as a reference:
AVG Anti-Spyware only works on Windows 2000 and Windows XP (32-Bit)

First download AVG Anti-Spyware 7.5 from HERE and save that file to your desktop.
This is a 30 day trial of the program
  • Once you have downloaded AVG Anti-Spyware 7.5, locate the icon on the desktop and double-click it to launch the set up program.
  • Once the setup is complete you will need run AVG Anti-Spyware and update the definition files.
  • On the main screen select the icon "Update" then select the "Update now" link.
    * Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
  • Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
  • Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
  • Under "Reports"
    * Select "Automatically generate report after every scan"
    * Un-Select "Only if threats were found"
Close AVG Anti-Spyware, Do Not run a scan yet!
  • Reboot your computer into SafeMode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears.
    Use your up arrow key to highlight SafeMode then hit enter.
    IMPORTANT: Do not open any other windows or programs while AVG Anti-Spyware is scanning, it may interfere with the scanning proccess:
  • Lauch AVG Anti-Spyware by double-clicking the icon on your desktop.
  • Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
  • AVG Anti-Spyware will now begin the scanning process, be patient this may take a little time.
    Once the scan is complete do the following:
  • If you have any infections you will prompted, then select "Apply all actions"
  • Next select the "Reports" icon at the top.
  • Select the "Save report as" button in the lower left hand of the screen and save it to a text file on your system
    (make sure to remember where you saved that file, this is important).
  • Close AVG Anti-Spyware and reboot your system back into Normal Mode and post the results of the AVG Anti-Spyware report scan.


#8 KevinR

KevinR
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:12:32 PM

Posted 14 March 2007 - 05:02 AM

Hi Kairis, i did what you asked, i did get 1 message after the report saying:

C\programfiles\zangotoolbar\zangoinstaller.exe/clientax.dll cannot be quarantined, but it looks like its been quarantined in report.

Thx again for help. I'll check back tomorro morning if i have to do more.

Heres report

AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 5:52:38 AM 3/14/2007

+ Scan result:



C:\Program Files\ZangoToolbar\ZangoInstaller.exe/clientax.dll -> Adware.180Solution : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP455\A0072060.exe -> Downloader.Zlob.bov : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP455\A0072059.exe -> Downloader.Zlob.bpn : Cleaned with backup (quarantined).
C:\Program Files\DIGStream\digstream.exe -> Not-A-Virus.Downloader.Win32.DigStream : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP456\A0072177.dll -> Trojan.Dialer.cs : Cleaned with backup (quarantined).


::Report end

#9 kairis

kairis

  • Members
  • 327 posts
  • OFFLINE
  •  
  • Location:Finland
  • Local time:07:32 PM

Posted 14 March 2007 - 08:05 AM

Hi there.
You can delete all of the tools that I had you download for us to use.
I'd recommend keeping AVG Anti-Spyware, as it's an excellent program that will compliment your antivirus protection.
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>

Lets reset system restore
Reset and Re-enable your System Restore to remove infected files that have been backed up by Windows.
The files in System Restore are protected to prevent any programs changing those files.
This is the only way to clean these files: You will lose all previous restore points which are likely to be infected.
Please note you need Administrator Access to do clean the restore points.

1. Turn off System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

2. Reboot.

3. Turn ON System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
UN-Check *Turn off System Restore*.
Click Apply, and then click OK.
NOTE: only do this ONCE,NOTon a regular basis
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>

== Update Java ==
Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version Java components and update.
  • Download the latest version of Java Runtime Environment (JRE) 6 .
  • Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
  • Click the "Download" button to the right.
  • Check the box that says: "Accept License Agreement".
  • The page will refresh.
  • Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
  • Close any programs you may have running - especially your web browser.
  • Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
  • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on the download to install the newest version.
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>

== Check on status ==
After you have completed the above, please provide:
* a new HijackThis log.
* and a description of any problems you are having with your PC.

#10 KevinR

KevinR
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:12:32 PM

Posted 14 March 2007 - 03:04 PM

Hi Kairis. I did what you wanted me to do.

Heres log

Logfile of HijackThis v1.99.1
Scan saved at 3:59:28 PM, on 3/14/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\McAfee\MSK\MskAgent.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\RogueRemover PRO\RogueRemoverPRO.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\McAfee\MPS\mpsevh.exe
c:\PROGRA~1\mcafee\VIRUSS~1\mcvsshld.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\dllhost.exe
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\agent.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Kevin\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Cablevision Optimum Online
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RogueMonitor] C:\Program Files\RogueRemover PRO\RogueRemoverPRO.exe /monitor
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.optonline.net
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe

#11 kairis

kairis

  • Members
  • 327 posts
  • OFFLINE
  •  
  • Location:Finland
  • Local time:07:32 PM

Posted 21 March 2007 - 03:31 AM

Well congrats, it appears your system is all clean.
Are you still noticing any problems?

#12 kairis

kairis

  • Members
  • 327 posts
  • OFFLINE
  •  
  • Location:Finland
  • Local time:07:32 PM

Posted 26 March 2007 - 05:17 AM

Since this issue appears resolved, this Topic is closed, glad we could help .

If you need this topic reopened, please request this by sending the moderating team
a PM, with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users