Hi,
Sorry but the scan took a while...
Heres the latest HJT log.
Logfile of HijackThis v1.99.1
Scan saved at 3:39:52 PM, on 6/27/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\Multimedia Card Reader\shwicon2k.exe
C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
C:\HP\KBD\KBD.EXE
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\hphmon05.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ncnk.exe
C:\Program Files\interMute\SpamSubtract\SpamSubtract.exe
C:\Program Files\SBC Self Support Tool\bin\mpbtn.exe
C:\WINDOWS\System32\wuauclt.exe
C:\HJT\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://us9.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://srch-us9.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://us9.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [PSof1] C:\WINDOWS\System32\PSof1.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [ccRegVfy] "c:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [AutoTKit] C:\hp\bin\AUTOTKIT.EXE
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [KavSvc] C:\WINDOWS\System32\rurjmm.exe reg_run
O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\Hewlett-Packard\Digital Imaging\bin\backupnotify.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Startup: spamsubtract.lnk = C:\Program Files\interMute\SpamSubtract\SpamSubtract.exe
O4 - Global Startup: 4Google2.lnk = C:\Program Files\Google Blocker\4google2.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: SBC Self Support Tool.lnk = C:\Program Files\SBC Self Support Tool\bin\matcli.exe
O8 - Extra context menu item: &Google Search -
res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word -
res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links -
res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page -
res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages -
res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English -
res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) -
http://housecall60.trendmicro.com/housecall/xscan60.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: OPXPGina - C:\Program Files\Softex\OmniPass\opxpgina.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)
And the ewido log,
---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------
+ Created on: 3:36:21 PM, 6/27/2005
+ Report-Checksum: 6123F158
+ Date of database: 6/27/2005
+ Version of scan engine: v3.0
+ Duration: 116 min
+ Scanned Files: 244807
+ Speed: 35.10 Files/Second
+ Infected files: 190
+ Removed files: 95
+ Files put in quarantine: 95
+ Files that could not be opened: 0
+ Files that could not be cleaned: 95
+ Binder: Yes
+ Crypter: Yes
+ Archives: Yes
+ Scanned items:
C:\
D:\
K:\
C:\
D:\
K:\
+ Scan result:
C:\Documents and Settings\Default User\Cookies\owner@adcontent.gamespy[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Default User\Cookies\owner@ads.techtv[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Default User\Cookies\owner@atdmt[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Default User\Cookies\owner@com[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Default User\Cookies\owner@cookie.monster[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Default User\Cookies\owner@geocities[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Default User\Cookies\owner@mediamgr.ugo[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Default User\Cookies\owner@search.msn[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Default User\Cookies\owner@us[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Lina\Cookies\lina@geocities[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@a.websponsors[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@adcontent.gamespy[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@ads.addynamix[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@ads.techtv[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@advertising[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@atdmt[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@atdmt[3].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@cgi-bin[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@com[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@com[3].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@cookie.monster[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@doubleclick[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@ehg.hitbox[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@fastclick[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@geocities[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@hit.namimedia[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@hitbox[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@mediamgr.ugo[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@mediaplex[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@perf.overture[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@search.msn[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@search123[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@servedby.advertising[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@us[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@xiti[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@z1.adserver[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\Cookies\owner@atdmt[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\Cookies\owner@mediaplex[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\Del29.tmp -> TrojanDownloader.Small.asf -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\f422406.exe -> TrojanDownloader.Qoologic.n -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\MediaAccessInstPack.exe -> Spyware.WinAD -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\nst1A.EXE -> Spyware.SmartPops -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\pcs_0029.exe -> Spyware.Pacer.b -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\ptf_0029.exe -> Spyware.Pacer -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\SSK3_B5 Seedcorn 4.exe -> TrojanDropper.Small.qn -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\6S19VNZZ\2.8.7.4[1].exe -> TrojanDownloader.Qoologic.n -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\6S19VNZZ\AppWrap[1].exe -> TrojanDownloader.Adload.a -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\6S19VNZZ\aurora[1].exe -> Spyware.BetterInternet.c -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\6S19VNZZ\inst5[1].exe -> TrojanDownloader.Small.apm -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\6S19VNZZ\trk_0029[1].exe -> Spyware.Pacer.e -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\PCJQZBPJ\abiuninst[1].exe -> Spyware.BetterInternet -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\PCJQZBPJ\npzango[1].dll -> Spyware.WinAD -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\PCJQZBPJ\svcproc[1].exe -> Trojan.Stervis.c -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\PCJQZBPJ\website[1].ocx -> TrojanDownloader.Agent.ex -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\RPGK8VR7\DrPMon[1].dll -> Trojan.Agent.db -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\RPGK8VR7\Poller[1].exe -> Spyware.BetterInternet -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\RPGK8VR7\trk_0002[1].exe -> Spyware.Pacer -> Cleaned with backup
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\VCTPBWSW\Nail[1].exe -> Trojan.Nail -> Cleaned with backup
C:\Program Files\CasStub\casstub.exe -> TrojanDownloader.Agent.qg -> Cleaned with backup
C:\Program Files\drvi\gqkknqscwu.dll -> Spyware.SmartPops -> Cleaned with backup
C:\Program Files\drvi\gqkknqscwu.exe -> Spyware.SmartPops -> Cleaned with backup
C:\Program Files\Netscape\Netscape\plugins\npwthost.dll -> Spyware.WildTangent.b -> Cleaned with backup
C:\Program Files\VBouncer\InstallT.exe -> Spyware.VirtualBouncer.c -> Cleaned with backup
C:\Program Files\Windows Media Player\wmplayer.exe.tmp -> TrojanDownloader.Small.apm -> Cleaned with backup
C:\WINDOWS\cfgmgr52.dll -> Spyware.BookedSpace.e -> Cleaned with backup
C:\WINDOWS\hzbfqkvddyi.exe -> Spyware.BetterInternet -> Cleaned with backup
C:\WINDOWS\Nail.exe -> Trojan.Nail -> Cleaned with backup
C:\WINDOWS\svcproc.exe -> Trojan.Stervis.c -> Cleaned with backup
C:\WINDOWS\systb.dll -> Spyware.ImiBar.d -> Cleaned with backup
C:\WINDOWS\system32\AUNPS2.dll -> Spyware.Small.ez -> Cleaned with backup
C:\WINDOWS\system32\bqbnooc.exe -> TrojanDownloader.Qoologic.q -> Cleaned with backup
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@adcontent.gamespy[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@ads.techtv[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@atdmt[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@com[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@cookie.monster[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@geocities[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@mediamgr.ugo[2].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@search.msn[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@us[1].txt -> Spyware.Tracking-Cookie -> Cleaned with backup
C:\WINDOWS\system32\dist001.exe -> TrojanDownloader.Agent.qg -> Cleaned with backup
C:\WINDOWS\system32\DrPMon.dll -> Trojan.Agent.db -> Cleaned with backup
C:\WINDOWS\system32\ide21201.vxd -> Spyware.MediaPass -> Cleaned with backup
C:\WINDOWS\system32\lpwabv.exe -> Spyware.BetterInternet -> Cleaned with backup
C:\WINDOWS\system32\msbe.dll -> Spyware.BargainBuddy.n -> Cleaned with backup
C:\WINDOWS\system32\nsxB6.dll -> Spyware.HotSearchBar -> Cleaned with backup
C:\WINDOWS\system32\pqpkd.dll -> TrojanDownloader.Qoologic.q -> Cleaned with backup
C:\WINDOWS\system32\supdate.dll -> TrojanDownloader.Qoologic.p -> Cleaned with backup
C:\WINDOWS\system32\uci.exe -> TrojanDropper.Agent.hl -> Cleaned with backup
C:\WINDOWS\system32\vavknn.exe -> TrojanDownloader.Qoologic.n -> Cleaned with backup
C:\WINDOWS\system32\wrapperouter.exe -> TrojanDropper.Agent.hl -> Cleaned with backup
C:\WINDOWS\system32\zbziggp.dll -> TrojanDownloader.Qoologic.q -> Cleaned with backup
C:\WINDOWS\System320nst80 -> Spyware.HotSearchBar -> Cleaned with backup
C:\WINDOWS\tdtb.exe -> Trojan.Imiserv.c -> Cleaned with backup
C:\WINDOWS\wupdt.exe -> TrojanDownloader.Intexp.c -> Cleaned with backup
C:\Documents and Settings\Default User\Cookies\owner@adcontent.gamespy[2].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Default User\Cookies\owner@ads.techtv[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Default User\Cookies\owner@atdmt[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Default User\Cookies\owner@com[2].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Default User\Cookies\owner@cookie.monster[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Default User\Cookies\owner@geocities[2].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Default User\Cookies\owner@mediamgr.ugo[2].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Default User\Cookies\owner@search.msn[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Default User\Cookies\owner@us[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Lina\Cookies\lina@geocities[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@a.websponsors[2].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@adcontent.gamespy[2].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@ads.addynamix[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@ads.techtv[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@advertising[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@atdmt[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@atdmt[3].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@cgi-bin[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@com[2].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@com[3].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@cookie.monster[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@doubleclick[2].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@ehg.hitbox[2].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@fastclick[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@geocities[2].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@hit.namimedia[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@hitbox[2].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@mediamgr.ugo[2].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@mediaplex[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@perf.overture[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@search.msn[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@search123[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@servedby.advertising[2].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@us[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@xiti[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Cookies\owner@z1.adserver[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\Cookies\owner@atdmt[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\Cookies\owner@mediaplex[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\Del29.tmp -> TrojanDownloader.Small.asf -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\f422406.exe -> TrojanDownloader.Qoologic.n -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\MediaAccessInstPack.exe -> Spyware.WinAD -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\nst1A.EXE -> Spyware.SmartPops -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\pcs_0029.exe -> Spyware.Pacer.b -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\ptf_0029.exe -> Spyware.Pacer -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temp\SSK3_B5 Seedcorn 4.exe -> TrojanDropper.Small.qn -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\6S19VNZZ\2.8.7.4[1].exe -> TrojanDownloader.Qoologic.n -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\6S19VNZZ\AppWrap[1].exe -> TrojanDownloader.Adload.a -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\6S19VNZZ\aurora[1].exe -> Spyware.BetterInternet.c -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\6S19VNZZ\inst5[1].exe -> TrojanDownloader.Small.apm -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\6S19VNZZ\trk_0029[1].exe -> Spyware.Pacer.e -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\PCJQZBPJ\abiuninst[1].exe -> Spyware.BetterInternet -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\PCJQZBPJ\npzango[1].dll -> Spyware.WinAD -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\PCJQZBPJ\svcproc[1].exe -> Trojan.Stervis.c -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\PCJQZBPJ\website[1].ocx -> TrojanDownloader.Agent.ex -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\RPGK8VR7\DrPMon[1].dll -> Trojan.Agent.db -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\RPGK8VR7\Poller[1].exe -> Spyware.BetterInternet -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\RPGK8VR7\trk_0002[1].exe -> Spyware.Pacer -> Error during cleaning
C:\Documents and Settings\Owner.YOUR-XHTR8HVC4P\Local Settings\Temporary Internet Files\Content.IE5\VCTPBWSW\Nail[1].exe -> Trojan.Nail -> Error during cleaning
C:\Program Files\CasStub\casstub.exe -> TrojanDownloader.Agent.qg -> Error during cleaning
C:\Program Files\drvi\gqkknqscwu.dll -> Spyware.SmartPops -> Error during cleaning
C:\Program Files\drvi\gqkknqscwu.exe -> Spyware.SmartPops -> Error during cleaning
C:\Program Files\Netscape\Netscape\plugins\npwthost.dll -> Spyware.WildTangent.b -> Error during cleaning
C:\Program Files\VBouncer\InstallT.exe -> Spyware.VirtualBouncer.c -> Error during cleaning
C:\Program Files\Windows Media Player\wmplayer.exe.tmp -> TrojanDownloader.Small.apm -> Error during cleaning
C:\WINDOWS\cfgmgr52.dll -> Spyware.BookedSpace.e -> Error during cleaning
C:\WINDOWS\hzbfqkvddyi.exe -> Spyware.BetterInternet -> Error during cleaning
C:\WINDOWS\Nail.exe -> Trojan.Nail -> Error during cleaning
C:\WINDOWS\svcproc.exe -> Trojan.Stervis.c -> Error during cleaning
C:\WINDOWS\systb.dll -> Spyware.ImiBar.d -> Error during cleaning
C:\WINDOWS\system32\AUNPS2.dll -> Spyware.Small.ez -> Error during cleaning
C:\WINDOWS\system32\bqbnooc.exe -> TrojanDownloader.Qoologic.q -> Error during cleaning
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@adcontent.gamespy[2].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@ads.techtv[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@atdmt[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@com[2].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@cookie.monster[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@geocities[2].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@mediamgr.ugo[2].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@search.msn[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\WINDOWS\system32\config\systemprofile\Cookies\owner@us[1].txt -> Spyware.Tracking-Cookie -> Error during cleaning
C:\WINDOWS\system32\dist001.exe -> TrojanDownloader.Agent.qg -> Error during cleaning
C:\WINDOWS\system32\DrPMon.dll -> Trojan.Agent.db -> Error during cleaning
C:\WINDOWS\system32\ide21201.vxd -> Spyware.MediaPass -> Error during cleaning
C:\WINDOWS\system32\lpwabv.exe -> Spyware.BetterInternet -> Error during cleaning
C:\WINDOWS\system32\msbe.dll -> Spyware.BargainBuddy.n -> Error during cleaning
C:\WINDOWS\system32\nsxB6.dll -> Spyware.HotSearchBar -> Error during cleaning
C:\WINDOWS\system32\pqpkd.dll -> TrojanDownloader.Qoologic.q -> Error during cleaning
C:\WINDOWS\system32\supdate.dll -> TrojanDownloader.Qoologic.p -> Error during cleaning
C:\WINDOWS\system32\uci.exe -> TrojanDropper.Agent.hl -> Error during cleaning
C:\WINDOWS\system32\vavknn.exe -> TrojanDownloader.Qoologic.n -> Error during cleaning
C:\WINDOWS\system32\wrapperouter.exe -> TrojanDropper.Agent.hl -> Error during cleaning
C:\WINDOWS\system32\zbziggp.dll -> TrojanDownloader.Qoologic.q -> Error during cleaning
C:\WINDOWS\System320nst80 -> Spyware.HotSearchBar -> Error during cleaning
C:\WINDOWS\tdtb.exe -> Trojan.Imiserv.c -> Error during cleaning
C:\WINDOWS\wupdt.exe -> TrojanDownloader.Intexp.c -> Error during cleaning
::Report End