Malwarebytes' Anti-Malware 1.38 Database version: 2328 Windows 5.1.2600 Service Pack 3 6/24/2009 7:47:05 AM mbam-log-2009-06-24 (07-47-05).txt Scan type: Quick Scan Objects scanned: 113113 Time elapsed: 17 minute(s), 0 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 24 Registry Values Infected: 3 Registry Data Items Infected: 0 Folders Infected: 12 Files Infected: 28 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\CLSID\{014da6c9-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{0494d0d0-f8e0-41ad-92a3-14154ece70ac} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{0494d0d4-f8e0-41ad-92a3-14154ece70ac} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{0494d0d6-f8e0-41ad-92a3-14154ece70ac} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{0494d0da-f8e0-41ad-92a3-14154ece70ac} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{0494d0dc-f8e0-41ad-92a3-14154ece70ac} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{014da6cd-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{0494d0d1-f8e0-41ad-92a3-14154ece70ac} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{0494d0d1-f8e0-41ad-92a3-14154ece70ac} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0494d0d1-f8e0-41ad-92a3-14154ece70ac} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{0494d0d2-f8e0-41ad-92a3-14154ece70ac} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{0494d0d3-f8e0-41ad-92a3-14154ece70ac} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{0494d0d5-f8e0-41ad-92a3-14154ece70ac} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{0494d0d7-f8e0-41ad-92a3-14154ece70ac} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{0494d0d9-f8e0-41ad-92a3-14154ece70ac} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{0494d0d9-f8e0-41ad-92a3-14154ece70ac} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{0494d0db-f8e0-41ad-92a3-14154ece70ac} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6ffe49b7-f475-4eab-8e80-e5d74c4e8d5f} (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\RegistrySmart (Rogue.RegistrySmart) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Trymedia Systems (Adware.Trymedia) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Illysoft (Rogue.SpyNoMore) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Illysoft (Rogue.SpyNoMore) -> Quarantined and deleted successfully. Registry Values Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{0494d0d9-f8e0-41ad-92a3-14154ece70ac} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser\{0494d0d9-f8e0-41ad-92a3-14154ece70ac} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Cpls\wxfw.dll (Adware.Hotbar) -> Quarantined and deleted successfully. Registry Data Items Infected: (No malicious items detected) Folders Infected: C:\WINDOWS\Ad-Ware Pro (Rogue.Ad-WarePro) -> Quarantined and deleted successfully. C:\Program Files\MyWay (Adware.MyWay) -> Quarantined and deleted successfully. c:\program files\MyWay\myBar (Adware.MyWay) -> Quarantined and deleted successfully. c:\program files\MyWay\myBar\1.bin (Adware.MyWay) -> Quarantined and deleted successfully. c:\program files\MyWay\myBar\Cache (Adware.MyWay) -> Quarantined and deleted successfully. c:\program files\MyWay\myBar\History (Adware.MyWay) -> Quarantined and deleted successfully. c:\documents and settings\steve\Application Data\RegistrySmart (Rogue.RegistrySmart) -> Quarantined and deleted successfully. c:\documents and settings\steve\application data\registrysmart\Log (Rogue.RegistrySmart) -> Quarantined and deleted successfully. c:\documents and settings\steve\application data\registrysmart\Registry Backups (Rogue.RegistrySmart) -> Quarantined and deleted successfully. C:\Program Files\A360 (Rogue.A360AntiVirus) -> Quarantined and deleted successfully. C:\Program Files\NoAdware (Rogue.NoAdware) -> Quarantined and deleted successfully. c:\program files\NoAdware\logs (Rogue.NoAdware) -> Quarantined and deleted successfully. Files Infected: C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\WINDOWS\ad-ware pro\uninstall.exe (Rogue.Ad-WarePro) -> Quarantined and deleted successfully. c:\program files\MyWay\myBar\1.bin\MY2NS.EXE (Adware.MyWay) -> Quarantined and deleted successfully. c:\program files\MyWay\myBar\1.bin\MYWAYPLUGINPROXY.CLASS (Adware.MyWay) -> Quarantined and deleted successfully. c:\program files\MyWay\myBar\1.bin\NPMYWAY.DLL (Adware.MyWay) -> Quarantined and deleted successfully. c:\program files\MyWay\myBar\1.bin\PARTNER.BMP (Adware.MyWay) -> Quarantined and deleted successfully. c:\program files\MyWay\myBar\1.bin\PARTNER.DAT (Adware.MyWay) -> Quarantined and deleted successfully. c:\program files\MyWay\myBar\1.bin\PARTNER2.DAT (Adware.MyWay) -> Quarantined and deleted successfully. c:\program files\MyWay\myBar\1.bin\PARTNER3.DAT (Adware.MyWay) -> Quarantined and deleted successfully. c:\program files\MyWay\myBar\1.bin\PARTNER4.DAT (Adware.MyWay) -> Quarantined and deleted successfully. c:\program files\MyWay\myBar\1.bin\PARTNER5.DAT (Adware.MyWay) -> Quarantined and deleted successfully. c:\program files\MyWay\myBar\1.bin\PARTNER6.DAT (Adware.MyWay) -> Quarantined and deleted successfully. c:\program files\MyWay\myBar\1.bin\UNINSTALL.INF (Adware.MyWay) -> Quarantined and deleted successfully. c:\program files\MyWay\myBar\Cache\files.ini (Adware.MyWay) -> Quarantined and deleted successfully. c:\program files\MyWay\myBar\History\search (Adware.MyWay) -> Quarantined and deleted successfully. c:\documents and settings\steve\application data\registrysmart\Errors.stg (Rogue.RegistrySmart) -> Quarantined and deleted successfully. c:\documents and settings\steve\application data\registrysmart\Results.stg (Rogue.RegistrySmart) -> Quarantined and deleted successfully. c:\documents and settings\steve\application data\registrysmart\Log\log_2007_05_10_23_23_56.log (Rogue.RegistrySmart) -> Quarantined and deleted successfully. c:\documents and settings\steve\application data\registrysmart\Log\log_2007_05_10_23_23_58.log (Rogue.RegistrySmart) -> Quarantined and deleted successfully. c:\documents and settings\steve\application data\registrysmart\registry backups\2007-05-10_23-27-24.reg (Rogue.RegistrySmart) -> Quarantined and deleted successfully. c:\program files\A360\av360.exe.tmp (Rogue.A360AntiVirus) -> Quarantined and deleted successfully. c:\program files\NoAdware\noadware_120303_def.na (Rogue.NoAdware) -> Quarantined and deleted successfully. c:\program files\Tmp_Tmp.Exe (Trojan.Alphabet) -> Quarantined and deleted successfully. c:\WINDOWS\Ad-Ware Pro Setup Log.txt (Rogue.Ad-WarePro) -> Quarantined and deleted successfully. c:\WINDOWS\Ad-Ware Pro Uninstall Log.txt (Rogue.Ad-WarePro) -> Quarantined and deleted successfully. c:\usb_driver6110.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. c:\RECYCLER\ADAPT_Installer.exe (Heuristics.Malware) -> Quarantined and deleted successfully. C:\update.exe (Trojan.Agent) -> Quarantined and deleted successfully.