Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

IE and Firefox keeps redirecting me to google

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: IE and Firefox keeps redirecting me to google

Unread postby amyann13 » May 4th, 2010, 6:21 pm

Hi, thank you soooo much for your help, so far my computer has been working GREAT!!! Here is my MBAB log and the Kaspersky scan report.....

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4064

Windows 5.1.2600 Service Pack 1
Internet Explorer 6.0.2800.1106

5/4/2010 12:24:21 PM
mbam-log-2010-05-04 (12-24-21).txt

Scan type: Full scan (C:\|)
Objects scanned: 224254
Time elapsed: 31 minute(s), 9 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1673\A0640522.exe (Rogue.VirusHeat) -> Not selected for removal.

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0: scan report
Tuesday, May 4, 2010
Operating system: Microsoft Windows XP Home Edition Service Pack 1 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Tuesday, May 04, 2010 12:41:34
Records in database: 4046283
--------------------------------------------------------------------------------

Scan settings:
scan using the following database: extended
Scan archives: yes
Scan e-mail databases: yes

Scan area - My Computer:
A:\
C:\
D:\

Scan statistics:
Objects scanned: 103367
Threats found: 18
Infected objects found: 340
Suspicious objects found: 0
Scan duration: 02:08:11


File name / Threat / Threats count
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\42689dc-27bb9cea.bac_a02284 Infected: Trojan.Java.ClassLoader.ao 3
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\606d9de6-19b319d6.bac_a02284 Infected: Trojan.Java.ClassLoader.ao 3
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\6cd2959b-55166c53.bac_a02284 Infected: Trojan.Java.ClassLoader.ao 3
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0551951.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0552014.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0552027.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0552117.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0552135.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0552208.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0553208.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0553335.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0553473.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0553646.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0553720.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0554026.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0554057.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0554128.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0554136.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0555136.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0556137.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0556151.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0557151.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0557165.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0558166.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0559166.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0560165.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0561165.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0561174.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0562174.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0563177.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0563198.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0565687.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0565758.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0565835.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0565954.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0568170.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0568252.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0571034.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0571712.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0572718.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0572737.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0572749.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0572830.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0572842.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0573843.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0574841.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0575012.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0578875.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0579151.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0579171.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0579179.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0580191.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0583068.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0583070.EXE.bac_a02284 Infected: not-a-virus:AdWare.Win32.BetterInternet.bh 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0583071.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0583072.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Comet.bb 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0583072.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Comet.be 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0583074.dll.bac_a02284 Infected: not-a-virus:AdWare.Win32.Comet.bb 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0586388.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0592205.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0592239.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0592249.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0593249.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0593270.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0593306.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0593319.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0593332.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0593347.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\A0593362.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\crtdcghcn.jar-10b9b7ed-79c0f7a9.zip.bac_a02284 Infected: Trojan.Java.ClassLoader.ao 3
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\crtdcghcn.jar-23c4d54d-5707a95b.zip.bac_a02284 Infected: Trojan.Java.ClassLoader.ao 3
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\crtdcghcn.jar-58cd2d08-2f5dc6c3.zip.bac_a02284 Infected: Trojan.Java.ClassLoader.ao 3
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\Setup.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Comet.bb 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\Setup.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Comet.be 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\Starware316.dll.bac_a02284 Infected: not-a-virus:AdWare.Win32.Comet.bb 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\tbon.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\TBONWnd.EXE.bac_a02284 Infected: not-a-virus:AdWare.Win32.BetterInternet.bh 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\Uninstall.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\zuplmavh.dll.bac_a02284 Infected: not-a-virus:AdWare.Win32.WurldMedia.b 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\~114275.tmp.bac_a02284 Infected: not-a-virus:AdWare.Win32.Wintol.i 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\~133370.tmp.bac_a02284 Infected: not-a-virus:AdWare.Win32.Wintol.i 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\~139746.tmp.bac_a02284 Infected: not-a-virus:AdWare.Win32.Wintol.i 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\~262956.tmp.bac_a02284 Infected: not-a-virus:AdWare.Win32.Wintol.i 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\~472630.tmp.bac_a02284 Infected: not-a-virus:AdWare.Win32.Wintol.i 1
C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\~92696.tmp.bac_a02284 Infected: not-a-virus:AdWare.Win32.Wintol.i 1
C:\Documents and Settings\AMY KOEHN\Desktop\NEW FOLDER\installer.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\Documents and Settings\AMY KOEHN\installer.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\Documents and Settings\AMY KOEHN\Local Settings\Application DataKiweeToolbar1.2.116.msi Infected: not-a-virus:AdWare.Win32.Kiwee 1
C:\Documents and Settings\AMY KOEHN\My Documents\installer-32439-19-Ares-Regular-English.exe Infected: not-a-virus:AdWare.Win32.FakeInstaller.aeu 1
C:\Documents and Settings\AMY KOEHN\NAV_EXCEL_tmp\kk20030521.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\Documents and Settings\AMY KOEHN\NAV_EXCEL_tmp\kk20030521.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\Documents and Settings\AMY KOEHN\NAV_EXCEL_tmp\kk20030521.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\Downloads\morpheus31.exe Infected: not-a-virus:AdWare.Win32.MyWay.o 1
C:\Downloads\morpheus31.exe Infected: not-a-virus:AdWare.Win32.WurldMedia.c 1
C:\Downloads\morpheus31.exe Infected: not-a-virus:AdWare.Win32.WurldMedia.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\42689dc-27bb9cea.bac_a02284 Infected: Trojan.Java.ClassLoader.ao 3
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\606d9de6-19b319d6.bac_a02284 Infected: Trojan.Java.ClassLoader.ao 3
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\6cd2959b-55166c53.bac_a02284 Infected: Trojan.Java.ClassLoader.ao 3
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0551951.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0552014.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0552027.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0552117.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0552135.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0552208.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0553208.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0553335.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0553473.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0553646.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0553720.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0554026.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0554057.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0554128.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0554136.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0555136.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0556137.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0556151.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0557151.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0557165.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0558166.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0559166.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0560165.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0561165.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0561174.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0562174.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0563177.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0563198.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0565687.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0565758.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0565835.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0565954.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0568170.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0568252.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0571034.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0571712.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0572718.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0572737.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0572749.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0572830.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0572842.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0573843.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0574841.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0575012.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0578875.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0579151.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0579171.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0579179.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0580191.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0583068.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0583070.EXE.bac_a02284 Infected: not-a-virus:AdWare.Win32.BetterInternet.bh 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0583071.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0583072.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Comet.bb 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0583072.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Comet.be 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0583074.dll.bac_a02284 Infected: not-a-virus:AdWare.Win32.Comet.bb 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0586388.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0592205.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0592239.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0592249.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0593249.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0593270.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0593306.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0593319.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0593332.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0593347.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\A0593362.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\crtdcghcn.jar-10b9b7ed-79c0f7a9.zip.bac_a02284 Infected: Trojan.Java.ClassLoader.ao 3
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\crtdcghcn.jar-23c4d54d-5707a95b.zip.bac_a02284 Infected: Trojan.Java.ClassLoader.ao 3
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\crtdcghcn.jar-58cd2d08-2f5dc6c3.zip.bac_a02284 Infected: Trojan.Java.ClassLoader.ao 3
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\Setup.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Comet.bb 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\Setup.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Comet.be 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\Starware316.dll.bac_a02284 Infected: not-a-virus:AdWare.Win32.Comet.bb 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\tbon.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\TBONWnd.EXE.bac_a02284 Infected: not-a-virus:AdWare.Win32.BetterInternet.bh 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\Uninstall.exe.bac_a02284 Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\zuplmavh.dll.bac_a02284 Infected: not-a-virus:AdWare.Win32.WurldMedia.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\~114275.tmp.bac_a02284 Infected: not-a-virus:AdWare.Win32.Wintol.i 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\~133370.tmp.bac_a02284 Infected: not-a-virus:AdWare.Win32.Wintol.i 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\~139746.tmp.bac_a02284 Infected: not-a-virus:AdWare.Win32.Wintol.i 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\~262956.tmp.bac_a02284 Infected: not-a-virus:AdWare.Win32.Wintol.i 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\~472630.tmp.bac_a02284 Infected: not-a-virus:AdWare.Win32.Wintol.i 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\.housecall6.6\Quarantine\~92696.tmp.bac_a02284 Infected: not-a-virus:AdWare.Win32.Wintol.i 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\installer.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\Desktop\NEW FOLDER\installer.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\installer.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\My Documents\installer-32439-19-Ares-Regular-English.exe Infected: not-a-virus:AdWare.Win32.FakeInstaller.aeu 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\NAV_EXCEL_tmp\kk20030521.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\NAV_EXCEL_tmp\kk20030521.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\HelpAsst_backup\C\DOCUME~1\HELPAS~1\NAV_EXCEL_tmp\kk20030521.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\installer.exe Infected: not-a-virus:FraudTool.Win32.Awola.a 1
C:\Program Files\MUSICMATCH\Common\ComponentMgr\HoldingArea\WebSys\WebSys.mmz Infected: not-a-virus:RiskTool.Win32.Deleter.f 1
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\WebSys\offline.mmz Infected: not-a-virus:RiskTool.Win32.Deleter.f 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1651\A0602473.exe Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1651\A0602634.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1651\A0604286.exe Infected: not-a-virus:AdWare.Win32.FakeInstaller.aeu 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1651\A0604376.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1651\A0604376.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1651\A0604376.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1653\A0604827.exe Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1653\A0604979.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1653\A0604988.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1653\A0606646.exe Infected: not-a-virus:AdWare.Win32.FakeInstaller.aeu 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1653\A0606736.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1653\A0606736.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1653\A0606736.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1654\A0607826.exe Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1654\A0607993.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1654\A0608001.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1654\A0609337.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1654\A0609337.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1654\A0609337.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1654\A0609767.exe Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1654\A0609934.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1654\A0609942.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1654\A0611278.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1654\A0611278.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1654\A0611278.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1659\A0612766.exe Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1659\A0612927.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1659\A0612935.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1659\A0614271.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1659\A0614271.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1659\A0614271.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1663\A0614826.exe Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1663\A0614988.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1663\A0614997.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1663\A0616332.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1663\A0616332.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1663\A0616332.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1668\A0616768.exe Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1668\A0616927.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1668\A0616936.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1668\A0618272.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1668\A0618272.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1668\A0618272.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1669\A0618768.exe Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1669\A0618930.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1669\A0618940.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1669\A0620276.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1669\A0620276.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1669\A0620276.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1669\A0620769.exe Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1669\A0620780.exe Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1669\A0620940.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1669\A0620950.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1669\A0622286.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1669\A0622286.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1669\A0622286.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1670\A0622900.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1670\A0622910.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1670\A0624245.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1670\A0624245.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1670\A0624245.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1670\A0624838.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1670\A0624851.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1670\A0626186.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1670\A0626186.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1670\A0626186.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1671\A0626624.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1671\A0626898.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1671\A0626911.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1671\A0628246.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1671\A0628246.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1671\A0628246.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1671\A0628811.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1671\A0628825.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1671\A0630160.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1671\A0630160.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1671\A0630160.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0630812.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0630826.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0632162.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0632162.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0632162.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0632738.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0632752.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0634088.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0634088.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0634088.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0635742.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0635756.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0637091.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0637091.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0637091.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0638665.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0638679.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0640014.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0640014.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1672\A0640014.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1673\A0640522.exe Infected: not-a-virus:FraudTool.Win32.AntiVermins.m 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1673\A0640889.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1673\A0641007.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1673\A0641048.exe Infected: not-a-virus:FraudTool.Win32.AwolaAntiSpyware.k 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1673\A0642388.exe Infected: not-a-virus:AdWare.Win32.NavExcel.d 2
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1673\A0642388.exe Infected: not-a-virus:AdWare.Win32.NavExcel.b 1
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1673\A0642388.exe Infected: not-a-virus:AdWare.Win32.NavExcel 1
C:\_OTM\MovedFiles\04302010_211824\C_Program Files\TBONBin\tbon.exe Infected: not-a-virus:AdWare.Win32.Bestofer.b 1
C:\_OTM\MovedFiles\04302010_211824\C_Program Files\TBONBin\Uninstall.exe Infected: not-a-virus:AdWare.Win32.Bestofer.b 1

Selected area has been scanned.
amyann13
Regular Member
 
Posts: 21
Joined: April 26th, 2010, 11:49 am
Advertisement
Register to Remove

Re: IE and Firefox keeps redirecting me to google

Unread postby xixo_12 » May 4th, 2010, 7:00 pm

Hi,
Good. Much better now. :)

First,
CFScript
  • Close any open browsers.
  • Open notepad and copy/paste the text in the code box below into it:
    Code: Select all
    File::
    C:\Documents and Settings\AMY KOEHN\Desktop\NEW FOLDER\installer.exe
    C:\Documents and Settings\AMY KOEHN\installer.exe
    C:\Documents and Settings\AMY KOEHN\Local Settings\Application DataKiweeToolbar1.2.116.msi
    C:\Documents and Settings\AMY KOEHN\My Documents\installer-32439-19-Ares-Regular-English.exe
    C:\Documents and Settings\AMY KOEHN\NAV_EXCEL_tmp\kk20030521.exe
    C:\Downloads\morpheus31.exe
    C:\installer.exe
    Folder::
    C:\Documents and Settings\AMY KOEHN\.housecall6.6\Quarantine\
    C:\HelpAsst_backup
  • Save this as CFScript.txt, in the same location as ComboFix.exe
  • Disable your AntiVirus/AntiSpyware/Firewall applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. A guide to do this can be found here
    Image
  • Refering to the picture above, drag CFScript into ComboFix.exe
  • When finished, it shall produce a log for you at "C:\ComboFix.txt"
Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall
A word of warning: Neither I nor sUBs are responsible for any damage you may cause to your machine by running ComboFix on your own. This tool is not a toy and not for everyday use.
ComboFix SHOULD NOT be used unless requested by a forum helper


Next,
clear system restore points.
This is a good time to clear your existing system restore points and establish a new clean restore point:
  • Go to Start > All Programs > Accessories > System Tools > System Restore
  • Select Create a restore point > Click Next > Put the description as you wish > Click Create.
  • Next, go to Start > Run and type in cleanmgr
  • choose your root drive (normally C:) and click Ok.
  • after it calculates how much space you will save it will open up a new window
  • Select the More options tab at the top of the window
  • Choose the option to clean up system restore and click yes.
  • Go back to the Disk Cleanup tab.
  • Put a checkmark in all - except compress old files (leave this unchecked).
  • Click Ok then click Yes
This will remove all restore points except the new one you just created and clean unneeded files

Next,
Update Windows XP.
Because of the security and reliability fixes,you should install this update.
First
  • Obtain Windows XP Service Pack 1a from the Microsoft Download Center
  • Click the Download button. Choose Save at the prompt and save to the desktop.
  • Double click the "sp1aexpress_usa.exe" file on your desktop to install the update.
  • After installation is done, reboot your computer (normally) before proceeding to the next step.
Second
  • Go to: Windows Update and install the Critical Updates.
    (Note: Do NOT install WinXP SP2... you can do this at another time!)
  • Press the Express button to have all critical updates shown.
  • Make sure all critical updates and patches are checked for download and installation.
  • Press the Install Updates button to begin downloading and installing the updates
  • After installation is done, reboot your computer normally (again) before proceeding.

Next,
HijackThis V2.0.2
Do post new Hijackthis log

Next,
Checklist.
Please post.
  • Content of ComboFix.txt
  • Content of Hijackthis log
  • Do let me know if you've any difficulty.
User avatar
xixo_12
MRU Master Emeritus
 
Posts: 2340
Joined: October 14th, 2008, 11:40 am
Location: Malaysia

Re: IE and Firefox keeps redirecting me to google

Unread postby amyann13 » May 4th, 2010, 9:39 pm

Hi, I attempted to update Windows XP via sp1aexpress_usa.exe file and I thought it was done but then a window popped up that said something like " Service Pack 1 Update Error....ACCESS DENIED..so I clicked OK, then it said SP1 installation did not complete but that windows XP has been partially updated and may not work properly. Then it told me to use my Emergency Repair disk to repair my system but I dont have it.....I'll wait to hear from you, THANKS
amyann13
Regular Member
 
Posts: 21
Joined: April 26th, 2010, 11:49 am

Re: IE and Firefox keeps redirecting me to google

Unread postby xixo_12 » May 5th, 2010, 7:56 am

Hi,

I will back to you soon. Try to consult with my colleague regarding this issue.
It's out from my expectation.
User avatar
xixo_12
MRU Master Emeritus
 
Posts: 2340
Joined: October 14th, 2008, 11:40 am
Location: Malaysia

Re: IE and Firefox keeps redirecting me to google

Unread postby xixo_12 » May 5th, 2010, 11:47 am

Hi,

We're having discussion regarding this issue and come out with one option that we agree to be suitable for this case.
Reformat and reinstall is the best option for this one. Seem like your system having such heavy infections and it's completely compromise / messy, and we agree, it's better for you to wipe all and start from stracth.
You get better pictures on what I'm trying to deliver through the fixes that I'm giving to you :)

Having SP1 for long times, with no security patch, no antivirus is really dangerous.
Furthermore, are you recognize this software?
PC Data Manager(Basic) - It's keylogger software. So, did you install it on purpose?

To move on, I need Original Windows XP SP1, and I'm doubt you can have it.

Do let me know if you have any questions..
I stress it again, Reformat and Reinstall (R&R) is the best advice I can provide in this stage.

Thanks!
User avatar
xixo_12
MRU Master Emeritus
 
Posts: 2340
Joined: October 14th, 2008, 11:40 am
Location: Malaysia

Re: IE and Firefox keeps redirecting me to google

Unread postby amyann13 » May 5th, 2010, 11:59 am

Hi, I'm sorry but I don't really understand. I do understand what you mean by wipe all and start from scratch but that is why I was trying it this way I can't find my Windows installation disk that I got when I purchased this computer from dell. Is there anything else that I can do like try the system restore point which I made yesterday prior to trying to update Windows XP SP1a? Again I am sorry if I don't understand but I am not familiar with any of this. And if there is nothing I can do now except wipe all and start over can you tell me is it bad for me (security reasons) to just keep using it this way until it comes to a point where it messes up again...as of right now I am not having any problems that I see.
amyann13
Regular Member
 
Posts: 21
Joined: April 26th, 2010, 11:49 am

Re: IE and Firefox keeps redirecting me to google

Unread postby amyann13 » May 5th, 2010, 12:03 pm

PC Data Manager(Basic) - It's keylogger software. So, did you install it on purpose?

I didn't install this on purpose and don't know what it is.
When you said that you would need Original Windows XP SP1 to move on did you mean the disk, if not how can I find out if I have it. I do want to thank you so much for all of the help that you have so nicely given me. Thanks Amy
amyann13
Regular Member
 
Posts: 21
Joined: April 26th, 2010, 11:49 am

Re: IE and Firefox keeps redirecting me to google

Unread postby xixo_12 » May 5th, 2010, 12:18 pm

Hi,

I'm not sure, if you have this function. (not required CD to install fresh windows)
http://support.dell.com/support/topics/ ... cid=181316

If you want to proceed, do this.

First,
No Antivirus!.
  • Antivirus help you to give the maximum protection for the system.
  • You are advice to have only one antivirus running on the system.
  • Please consider one of this program and install it now:

Next,
Please restore your system (system restore) using latest date.
Then, proceed to do this :
To update Windows
  • Go to Start > All Programs > Windows Update

Let's the system to install all security updates, ignore about SP1a, just proceed with SP2 and install the latest SP3. Get back to me once you get SP3

Thanks!
User avatar
xixo_12
MRU Master Emeritus
 
Posts: 2340
Joined: October 14th, 2008, 11:40 am
Location: Malaysia

Re: IE and Firefox keeps redirecting me to google

Unread postby amyann13 » May 7th, 2010, 10:07 am

Hi, I got the antivirus but every time I try to get SP2 it says the same thing ACCESS DENIED...If you know of anything that I could do please let me know. THANKS, Amy
amyann13
Regular Member
 
Posts: 21
Joined: April 26th, 2010, 11:49 am

Re: IE and Firefox keeps redirecting me to google

Unread postby xixo_12 » May 7th, 2010, 10:12 am

Hi,

Information.
Since our forum basically focusing on malware removal, I would glad to tell you, this machine quite messy and reformat and reinstall is the best option I could offer.

If you're insist to use this machine and still want to try to update your systems into SP2 > SP3. I would refer you to one of the Systems/Hardware forums here:

Good System/Hardware Help Forums

You may need to do free registration in order to post at their forum ;)
Good luck!
User avatar
xixo_12
MRU Master Emeritus
 
Posts: 2340
Joined: October 14th, 2008, 11:40 am
Location: Malaysia

Re: IE and Firefox keeps redirecting me to google

Unread postby Gary R » May 7th, 2010, 11:36 am

As your Malware problems appear to have been resolved, this topic is now closed.

We are pleased we could help you resolve your computer's malware issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.
User avatar
Gary R
Administrator
Administrator
 
Posts: 25888
Joined: June 28th, 2005, 11:36 am
Location: Yorkshire
Advertisement
Register to Remove

Previous

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 290 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware