This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Adware.Trymedia.B.2

143 min read

This thread's last reply is from September 28, 2006, 6:35 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

First time post here. I have done the various virus scans etc as advised in the sticky and here is my HJT log...

Logfile of HijackThis v1.99.1
Scan saved at 8:42:10 AM, on 8/08/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alias\Maya6.5\docs\wrapper.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Alias\Maya 7.0 Personal Learning Edition\docs\wrapper.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\Program Files\Alias\Maya 7.0 Personal Learning Edition\docs\jre\bin\java.exe
C:\Program Files\Alias\Maya6.5\docs\jre\bin\java.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Softwin\BitDefender9\vsserv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\progra~1\softwin\bitdef~1\bdnagent.exe
C:\progra~1\softwin\bitdef~1\bdswitch.exe
C:\Program Files\TrojanHunter 4.5\THGuard.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\HijackThis\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] "C:\Program Files\Nero\Nero 7\InCD\InCD.exe"
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [PWRISOVM.EXE] "C:\Program Files\PowerISO\PWRISOVM.EXE"
O4 - HKLM\..\Run: [BDNewsAgent] "C:\PROGRA~1\Softwin\BITDEF~1\bdnagent.exe"
O4 - HKLM\..\Run: [BDSwitchAgent] "C:\PROGRA~1\Softwin\BITDEF~1\bdswitch.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.5\THGuard.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [SpybotSD TeaTimer] "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/haphazard/raptisoftgameloader.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1145073631704
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: Maya 6.5 Documentation Server (maya65docserver) - Unknown owner - C:\Program Files\Alias\Maya6.5\docs\wrapper.exe" -s "C:\Program Files\Alias\Maya6.5\docs\Wrapper.conf (file missing)
O23 - Service: Maya 7 PLE Documentation Server (mple7docserver) - Unknown owner - C:\Program Files\Alias\Maya 7.0 Personal Learning Edition\docs\wrapper.exe" -s "C:\Program Files\Alias\Maya 7.0 Personal Learning Edition\docs\Wrapper.conf (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service (file missing)
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

Thanks in advance if anyone can help...

Shane.
My desktop PC, running Windows XP Pro, has 5 users and one of the users keeps getting multiple windows generated by the antivirus program BitDefender9. It says that there is spyware "Adware.Trymedia.B.2". It intercepts the spyware in C:\Windows\Temp\*.tmp and there are so many windows generated that the PC is unusable by that user.

I have used CleanSweep to try to remove the Temp folder's contents but it doesn't remove all entries. I think the spyware came from a downloaded game demo but I don't know how to remove it permanently.

I am away on a business trip at the moment so I don't have access to the home PC but I will do what you have advised so far when I return and I will post the HJT log and any results next Monday 14th Aug.

Thanks for your help.
Gday Navigator,

Correction to my last post. The program I used to delete the temp files was CleanUp! not CleanSweep.

I have done what you advised and here is my HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 11:41:01 AM, on 14/08/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\Explorer.EXE
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\PROGRA~1\Softwin\BITDEF~1\bdnagent.exe
C:\PROGRA~1\Softwin\BITDEF~1\bdswitch.exe
C:\Program Files\TrojanHunter 4.5\THGuard.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\HijackThis\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] "C:\Program Files\Nero\Nero 7\InCD\InCD.exe"
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [PWRISOVM.EXE] "C:\Program Files\PowerISO\PWRISOVM.EXE"
O4 - HKLM\..\Run: [BDNewsAgent] "C:\PROGRA~1\Softwin\BITDEF~1\bdnagent.exe"
O4 - HKLM\..\Run: [BDSwitchAgent] "C:\PROGRA~1\Softwin\BITDEF~1\bdswitch.exe"
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.5\THGuard.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1145073631704
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: Maya 6.5 Documentation Server (maya65docserver) - Unknown owner - C:\Program Files\Alias\Maya6.5\docs\wrapper.exe" -s "C:\Program Files\Alias\Maya6.5\docs\Wrapper.conf (file missing)
O23 - Service: Maya 7 PLE Documentation Server (mple7docserver) - Unknown owner - C:\Program Files\Alias\Maya 7.0 Personal Learning Edition\docs\wrapper.exe" -s "C:\Program Files\Alias\Maya 7.0 Personal Learning Edition\docs\Wrapper.conf (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service (file missing)
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

The problem that I am having is as follows:

"Spyware Alert

File:
C:\windows\temp\tmp18

Detected with:
Adware.Trymedia.B.2

BitDefender Action:
BitDefender has blocked this virus - your computer
has NOT been infected

More information about this virus >>>

OK"

There are multiple windows like the one I have just described with the *\tmp__ file being different in each instance.

Thanks once again...

Shane.
Gday Navigator,

Unfortunately, try as I may, I cannot get the Panda ActiveScan to work. I allowed Active X to install but I keep getting an "Error on Downloading ActiveScan" message.

Here is the Ewido report:

---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------

+ Created at: 5:31:51 PM 14/08/2006

+ Scan result:



C:\WINDOWS\Temp\tmp10 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp101 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp102 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp107 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp108 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp109 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp10a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp10b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp10e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp10f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp110 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp111 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp112 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp114 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp115 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp116 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp117 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp11a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp11b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp11c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp11d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp11f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp126 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp127 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp129 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp13 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp132 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp134 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp135 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp137 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp139 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp13a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp13c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp13d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp13e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp140 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp141 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp142 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp143 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp144 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp146 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp147 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp148 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp149 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp14a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp14b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp14d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp14e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp150 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp152 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp153 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp154 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp156 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp157 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp158 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp15b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp15c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp15d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp15e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp15f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp161 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp163 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp164 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp166 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp16a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp16c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp16f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp170 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp171 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp172 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp17a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp17c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp17d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp17f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp182 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp184 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp185 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp186 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp187 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp189 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp18a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp18b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp190 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp191 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp193 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp194 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp196 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp197 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp198 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp19b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp19c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp19e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp19f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1aa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ac -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ad -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1af -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ba -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1bb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1bd -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1be -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1bf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ca -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1cd -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ce -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1cf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1d1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1d3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1d4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1d6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1d7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1da -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1db -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1dc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1de -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1eb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ec -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ed -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ee -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1fa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1fb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1fe -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp20 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp203 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp205 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp206 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp207 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp208 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp20a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp20d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp20f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp210 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp213 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp214 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp215 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp216 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp217 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp218 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp219 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp21b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp21c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp21d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp21e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp21f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp221 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp222 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp223 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp225 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp226 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp228 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp23 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp230 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp231 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp232 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp234 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp235 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp236 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp238 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp240 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp241 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp243 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp244 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp245 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp246 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp248 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp24b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp24d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp24e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp24f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp251 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp252 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp253 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp254 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp255 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp258 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp259 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp25a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp25c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp25d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp25e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp263 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp264 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp266 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp267 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp268 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp269 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp26a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp26b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp26d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp270 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp272 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp273 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp27f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp282 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp284 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp285 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp287 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp288 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp290 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp293 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp294 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp295 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp297 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp298 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp299 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp29a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp29f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2aa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ac -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2b1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2b3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2b4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2b6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ba -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2bb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2bc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2bd -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2bf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ca -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2cb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ce -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2cf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2da -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2db -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2dc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2df -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ea -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ec -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ed -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ee -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2f2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2f4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2f7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2f9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2fb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2fc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ff -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp300 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp301 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp302 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp303 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp304 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp306 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp307 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp308 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp309 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp30a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp30b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp30c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp30d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp30f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp310 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp311 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp312 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp313 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp314 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp315 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp317 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp319 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp323 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp324 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp325 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp326 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp330 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp331 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp332 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp334 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp335 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp337 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp339 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp340 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp341 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp342 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp344 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp346 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp347 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp348 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp349 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp351 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp352 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp353 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp354 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp355 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp356 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp357 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp358 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp359 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp36 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp37 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp39 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp40 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp42 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp43 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp44 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp45 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp46 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp48 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp4b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp4c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp4d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp4f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp51 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp53 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp54 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp55 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp56 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp57 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp58 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp5c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp5e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp5f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp61 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp62 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp65 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp66 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp67 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp68 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp69 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp6a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp6b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp6c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp6e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp70 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp71 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp72 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp73 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp74 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp75 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp76 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp79 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp80 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp82 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp84 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp85 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp86 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp87 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp88 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp89 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp8c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp8e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp90 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp91 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp93 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp94 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp95 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp96 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp97 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpaa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpad -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpb1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpb3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpb4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpb9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpbb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpbc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpbe -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpbf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpca -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpcc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpce -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpda -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpdb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpde -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpe1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpe2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpe3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpe5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpe6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmped -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpee -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpef -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpfa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpfb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpfd -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpfe -> Adware.Trymedia : Cleaned with backup (quarantined).
:mozilla.103:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.104:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.105:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.106:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.107:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.108:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.109:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.110:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.111:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.112:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.113:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.114:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.115:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.117:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.118:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.226:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.280:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.332:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.370:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.459:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.517:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.622:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.679:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.78:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.79:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.806:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.80:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.81:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.82:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.83:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.84:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.85:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.86:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.87:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.88:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.89:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.90:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.91:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.923:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.92:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.93:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.94:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.95:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.95:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.96:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.168:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.246:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.249:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.250:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.432:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.560:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.901:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.383:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup (quarantined).
:mozilla.384:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup (quarantined).
:mozilla.117:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.118:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.569:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.570:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.260:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Adtech : Cleaned with backup (quarantined).
:mozilla.262:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Adtech : Cleaned with backup (quarantined).
:mozilla.662:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup (quarantined).
:mozilla.663:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup (quarantined).
:mozilla.10:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.11:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.12:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.13:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.235:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.236:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.237:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.238:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.239:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.69:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.70:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.71:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.9:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.513:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adviva : Cleaned with backup (quarantined).
:mozilla.14:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4vgnh9ix.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.253:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.33:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\bbowwcxs.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.44:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.56:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
C:\Documents and Settings\Christian\Cookies\christian@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.514:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Bfast : Cleaned with backup (quarantined).
:mozilla.569:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Bfast : Cleaned with backup (quarantined).
:mozilla.93:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup (quarantined).
:mozilla.94:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup (quarantined).
:mozilla.510:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned with backup (quarantined).
:mozilla.381:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.382:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.507:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.508:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.509:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.114:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.115:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.116:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.117:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.118:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.119:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.120:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.121:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.25:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.28:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.29:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.30:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.77:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.78:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.79:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.
I am not sure why my last post didn't display the complete list of items from the logs, so here it is again...

Gday Navigator,

Unfortunately, try as I may, I cannot get the Panda ActiveScan to work. I allowed Active X to install but I keep getting an "Error on Downloading ActiveScan" message.

Here is the Ewido report:

---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------

+ Created at: 5:31:51 PM 14/08/2006

+ Scan result:



C:\WINDOWS\Temp\tmp10 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp101 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp102 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp107 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp108 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp109 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp10a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp10b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp10e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp10f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp110 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp111 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp112 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp114 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp115 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp116 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp117 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp11a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp11b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp11c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp11d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp11f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp126 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp127 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp129 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp13 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp132 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp134 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp135 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp137 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp139 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp13a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp13c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp13d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp13e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp140 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp141 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp142 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp143 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp144 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp146 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp147 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp148 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp149 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp14a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp14b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp14d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp14e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp150 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp152 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp153 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp154 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp156 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp157 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp158 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp15b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp15c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp15d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp15e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp15f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp161 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp163 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp164 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp166 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp16a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp16c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp16f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp170 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp171 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp172 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp17a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp17c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp17d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp17f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp182 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp184 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp185 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp186 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp187 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp189 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp18a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp18b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp190 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp191 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp193 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp194 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp196 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp197 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp198 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp19b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp19c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp19e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp19f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1aa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ac -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ad -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1af -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ba -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1bb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1bd -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1be -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1bf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ca -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1cd -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ce -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1cf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1d1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1d3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1d4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1d6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1d7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1da -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1db -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1dc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1de -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1eb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ec -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ed -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ee -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1fa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1fb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1fe -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp20 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp203 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp205 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp206 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp207 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp208 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp20a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp20d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp20f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp210 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp213 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp214 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp215 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp216 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp217 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp218 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp219 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp21b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp21c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp21d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp21e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp21f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp221 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp222 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp223 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp225 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp226 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp228 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp23 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp230 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp231 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp232 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp234 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp235 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp236 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp238 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp240 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp241 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp243 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp244 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp245 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp246 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp248 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp24b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp24d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp24e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp24f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp251 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp252 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp253 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp254 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp255 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp258 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp259 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp25a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp25c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp25d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp25e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp263 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp264 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp266 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp267 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp268 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp269 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp26a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp26b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp26d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp270 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp272 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp273 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp27f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp282 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp284 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp285 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp287 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp288 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp290 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp293 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp294 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp295 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp297 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp298 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp299 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp29a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp29f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2aa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ac -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2b1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2b3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2b4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2b6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ba -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2bb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2bc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2bd -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2bf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ca -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2cb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ce -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2cf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2da -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2db -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2dc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2df -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ea -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ec -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ed -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ee -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2f2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2f4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2f7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2f9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2fb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2fc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ff -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp300 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp301 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp302 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp303 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp304 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp306 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp307 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp308 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp309 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp30a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp30b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp30c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp30d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp30f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp310 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp311 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp312 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp313 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp314 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp315 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp317 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp319 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp323 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp324 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp325 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp326 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp330 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp331 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp332 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp334 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp335 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp337 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp339 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp340 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp341 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp342 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp344 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp346 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp347 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp348 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp349 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp351 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp352 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp353 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp354 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp355 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp356 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp357 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp358 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp359 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp36 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp37 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp39 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp40 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp42 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp43 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp44 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp45 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp46 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp48 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp4b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp4c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp4d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp4f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp51 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp53 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp54 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp55 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp56 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp57 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp58 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp5c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp5e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp5f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp61 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp62 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp65 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp66 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp67 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp68 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp69 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp6a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp6b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp6c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp6e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp70 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp71 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp72 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp73 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp74 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp75 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp76 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp79 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp80 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp82 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp84 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp85 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp86 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp87 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp88 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp89 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp8c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp8e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp90 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp91 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp93 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp94 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp95 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp96 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp97 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpaa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpad -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpb1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpb3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpb4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpb9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpbb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpbc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpbe -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpbf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpca -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpcc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpce -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpda -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpdb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpde -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpe1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpe2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpe3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpe5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpe6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmped -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpee -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpef -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpfa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpfb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpfd -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpfe -> Adware.Trymedia : Cleaned with backup (quarantined).
:mozilla.103:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.104:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.105:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.106:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.107:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.108:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.109:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.110:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.111:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.112:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.113:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.114:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.115:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.117:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.118:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.226:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.280:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.332:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.370:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.459:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.517:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.622:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.679:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.78:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.79:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.806:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.80:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.81:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.82:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.83:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.84:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.85:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.86:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.87:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.88:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.89:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.90:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.91:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.923:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.92:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.93:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.94:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.95:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.95:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.96:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.168:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.246:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.249:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.250:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.432:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.560:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.901:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.383:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup (quarantined).
:mozilla.384:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup (quarantined).
:mozilla.117:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.118:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.569:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.570:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.260:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Adtech : Cleaned with backup (quarantined).
:mozilla.262:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Adtech : Cleaned with backup (quarantined).
:mozilla.662:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup (quarantined).
:mozilla.663:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup (quarantined).
:mozilla.10:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.11:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.12:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.13:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.235:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.236:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.237:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.238:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.239:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.69:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.70:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.71:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.9:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.513:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adviva : Cleaned with backup (quarantined).
:mozilla.14:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4vgnh9ix.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.253:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.33:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\bbowwcxs.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.44:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.56:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
C:\Documents and Settings\Christian\Cookies\christian@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.514:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Bfast : Cleaned with backup (quarantined).
:mozilla.569:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Bfast : Cleaned with backup (quarantined).
:mozilla.93:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup (quarantined).
:mozilla.94:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup (quarantined).
:mozilla.510:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned with backup (quarantined).
:mozilla.381:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.382:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.507:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.508:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.509:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.114:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.115:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.116:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.117:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.118:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.119:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.120:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.121:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.25:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.28:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.29:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.30:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.77:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.78:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.79:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profil
OK! Something is not working! I have tried to post the HJT log but it hasn't worked (something I have omitted??). So, once again...

Logfile of HijackThis v1.99.1
Scan saved at 8:46:50 PM, on 14/08/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Alias\Maya6.5\docs\wrapper.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Alias\Maya 7.0 Personal Learning Edition\docs\wrapper.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alias\Maya6.5\docs\jre\bin\java.exe
C:\Program Files\Alias\Maya 7.0 Personal Learning Edition\docs\jre\bin\java.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Softwin\BitDefender9\vsserv.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\progra~1\softwin\bitdef~1\bdnagent.exe
C:\progra~1\softwin\bitdef~1\bdswitch.exe
C:\Program Files\TrojanHunter 4.5\THGuard.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\HijackThis\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] "C:\Program Files\Nero\Nero 7\InCD\InCD.exe"
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [PWRISOVM.EXE] "C:\Program Files\PowerISO\PWRISOVM.EXE"
O4 - HKLM\..\Run: [BDNewsAgent] "C:\PROGRA~1\Softwin\BITDEF~1\bdnagent.exe"
O4 - HKLM\..\Run: [BDSwitchAgent] "C:\PROGRA~1\Softwin\BITDEF~1\bdswitch.exe"
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.5\THGuard.exe"
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [SpybotSD TeaTimer] "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1145073631704
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan ... asinst.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: Maya 6.5 Documentation Server (maya65docserver) - Unknown owner - C:\Program Files\Alias\Maya6.5\docs\wrapper.exe" -s "C:\Program Files\Alias\Maya6.5\docs\Wrapper.conf (file missing)
O23 - Service: Maya 7 PLE Documentation Server (mple7docserver) - Unknown owner - C:\Program Files\Alias\Maya 7.0 Personal Learning Edition\docs\wrapper.exe" -s "C:\Program Files\Alias\Maya 7.0 Personal Learning Edition\docs\Wrapper.conf (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service (file missing)
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------

+ Created at: 5:31:51 PM 14/08/2006

+ Scan result:



C:\WINDOWS\Temp\tmp10 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp101 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp102 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp107 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp108 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp109 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp10a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp10b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp10e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp10f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp110 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp111 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp112 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp114 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp115 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp116 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp117 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp11a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp11b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp11c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp11d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp11f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp126 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp127 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp129 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp12f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp13 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp132 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp134 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp135 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp137 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp139 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp13a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp13c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp13d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp13e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp140 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp141 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp142 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp143 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp144 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp146 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp147 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp148 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp149 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp14a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp14b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp14d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp14e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp150 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp152 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp153 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp154 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp156 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp157 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp158 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp15b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp15c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp15d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp15e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp15f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp161 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp163 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp164 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp166 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp16a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp16c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp16f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp170 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp171 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp172 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp17a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp17c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp17d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp17f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp182 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp184 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp185 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp186 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp187 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp189 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp18a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp18b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp190 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp191 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp193 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp194 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp196 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp197 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp198 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp19b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp19c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp19e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp19f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1a9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1aa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ac -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ad -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1af -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1b9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ba -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1bb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1bd -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1be -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1bf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1c9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ca -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1cd -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ce -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1cf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1d1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1d3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1d4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1d6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1d7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1da -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1db -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1dc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1de -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1e8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1eb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ec -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ed -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1ee -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1f9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1fa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1fb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp1fe -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp20 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp203 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp205 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp206 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp207 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp208 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp20a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp20d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp20f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp210 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp213 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp214 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp215 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp216 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp217 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp218 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp219 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp21b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp21c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp21d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp21e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp21f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp221 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp222 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp223 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp225 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp226 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp228 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp22f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp23 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp230 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp231 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp232 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp234 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp235 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp236 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp238 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp240 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp241 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp243 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp244 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp245 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp246 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp248 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp24b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp24d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp24e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp24f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp251 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp252 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp253 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp254 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp255 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp258 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp259 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp25a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp25c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp25d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp25e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp263 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp264 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp266 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp267 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp268 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp269 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp26a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp26b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp26d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp270 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp272 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp273 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp27f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp282 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp284 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp285 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp287 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp288 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp28f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp290 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp293 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp294 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp295 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp297 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp298 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp299 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp29a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp29f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2a9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2aa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ac -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2b1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2b3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2b4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2b6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ba -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2bb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2bc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2bd -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2bf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2c9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ca -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2cb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ce -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2cf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2d9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2da -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2db -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2dc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2df -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2e9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ea -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ec -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ed -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ee -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2f2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2f4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2f7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2f9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2fb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2fc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp2ff -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp300 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp301 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp302 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp303 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp304 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp306 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp307 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp308 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp309 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp30a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp30b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp30c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp30d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp30f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp310 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp311 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp312 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp313 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp314 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp315 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp317 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp319 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp31f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp323 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp324 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp325 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp326 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp32f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp330 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp331 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp332 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp334 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp335 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp337 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp339 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp33f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp340 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp341 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp342 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp344 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp346 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp347 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp348 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp349 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp34f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp351 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp352 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp353 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp354 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp355 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp356 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp357 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp358 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp359 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp36 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp37 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp39 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp3f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp40 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp42 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp43 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp44 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp45 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp46 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp48 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp4b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp4c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp4d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp4f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp51 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp53 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp54 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp55 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp56 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp57 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp58 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp5c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp5e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp5f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp61 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp62 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp65 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp66 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp67 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp68 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp69 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp6a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp6b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp6c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp6e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp70 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp71 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp72 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp73 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp74 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp75 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp76 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp79 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp7f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp80 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp82 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp84 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp85 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp86 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp87 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp88 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp89 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp8c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp8e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp90 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp91 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp93 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp94 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp95 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp96 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp97 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9a -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9b -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9c -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9d -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9e -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmp9f -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpa9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpaa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpad -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpb1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpb3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpb4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpb9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpbb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpbc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpbe -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpbf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpc9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpca -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpcc -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpce -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd0 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpd9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpda -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpdb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpde -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpe1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpe2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpe3 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpe5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpe6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmped -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpee -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpef -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf1 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf2 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf4 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf5 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf6 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf7 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf8 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpf9 -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpfa -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpfb -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpfd -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\tmpfe -> Adware.Trymedia : Cleaned with backup (quarantined).
:mozilla.103:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.104:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.105:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.106:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.107:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.108:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.109:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.110:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.111:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.112:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.113:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.114:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.115:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.117:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.118:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.226:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.280:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.332:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.370:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.459:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.517:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.622:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.679:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.78:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.79:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.806:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.80:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.81:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.82:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.83:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.84:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.85:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.86:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.87:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.88:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.89:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.90:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.91:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.923:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.92:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.93:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.94:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.95:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.95:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.96:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.168:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.246:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.249:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.250:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.432:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.560:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.901:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.383:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup (quarantined).
:mozilla.384:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup (quarantined).
:mozilla.117:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.118:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.569:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.570:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.260:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Adtech : Cleaned with backup (quarantined).
:mozilla.262:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Adtech : Cleaned with backup (quarantined).
:mozilla.662:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup (quarantined).
:mozilla.663:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup (quarantined).
:mozilla.10:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.11:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.12:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.13:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.235:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.236:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.237:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.238:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.239:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.69:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.70:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.71:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.9:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.513:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Adviva : Cleaned with backup (quarantined).
:mozilla.14:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4vgnh9ix.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.253:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.33:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\bbowwcxs.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.44:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.56:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
C:\Documents and Settings\Christian\Cookies\christian@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.514:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Bfast : Cleaned with backup (quarantined).
:mozilla.569:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Bfast : Cleaned with backup (quarantined).
:mozilla.93:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup (quarantined).
:mozilla.94:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup (quarantined).
:mozilla.510:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned with backup (quarantined).
:mozilla.381:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.382:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.507:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.508:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.509:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.114:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.115:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.116:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.117:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.118:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.119:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.120:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.121:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.25:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.28:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.29:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.30:C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\mtyzund8.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.77:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.78:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.79:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.80:C:\Documents and Settings\Christian\Application Data\Mozilla\Firefox\Profiles\kvnohxqo.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.81:C:\Documents and Settings\Christi
For some unknown reason, I cannot post the complete ewido log. Sorry.
I am still getting multiple Spyware Alerts from BitDefender about Adware.Trymedia.B.2

Shane
Gday Navigator,

Yes, BitDefender is still displaying multiple Spyware Alerts after Ewido cleaned out the *.tmp files.

Here is the SpySweeper log:


1:46 PM: Removal process completed. Elapsed time 00:00:05
1:46 PM: Quarantining All Traces: serving-sys cookie
1:46 PM: Quarantining All Traces: 2o7.net cookie
1:46 PM: Removal process initiated
11:06 AM: Traces Found: 2
11:06 AM: Full Sweep has completed. Elapsed time 01:02:08
11:06 AM: File Sweep Complete, Elapsed Time: 00:58:59
Not enough storage is available to process this command
11:06 AM: Warning: Unable to sweep compressed file: System Error. Code: 8.
11:04 AM: Warning: Stream read error
Access is denied
10:57 AM: Warning: Unable to sweep compressed file: System Error. Code: 5.
Not enough storage is available to process this command
10:57 AM: Warning: Unable to sweep compressed file: System Error. Code: 8.
10:55 AM: Warning: Stream read error
10:53 AM: Warning: Stream read error
10:51 AM: Warning: Stream read error
10:19 AM: Warning: PerformFileOffsetMatch Failed to check file "c:\windows\temp\tmpa". "c:\windows\temp\tmpa": File not found
10:17 AM: Warning: PerformFileOffsetMatch Failed to check file "c:\windows\temp\tmp1". "c:\windows\temp\tmp1": File not found
10:07 AM: Starting File Sweep
10:07 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
10:07 AM: c:\documents and settings\administrator\cookies\administrator@serving-sys[2].txt (ID = 3343)
10:07 AM: Found Spy Cookie: serving-sys cookie
10:07 AM: c:\documents and settings\administrator\cookies\administrator@msnportal.112.2o7[1].txt (ID = 1958)
10:07 AM: Found Spy Cookie: 2o7.net cookie
10:07 AM: Starting Cookie Sweep
10:06 AM: Registry Sweep Complete, Elapsed Time:00:00:39
10:06 AM: Starting Registry Sweep
10:06 AM: Memory Sweep Complete, Elapsed Time: 00:02:07
10:04 AM: Starting Memory Sweep
10:03 AM: Sweep initiated using definitions version 740
10:03 AM: Spy Sweeper 5.0.7.1608 started
10:03 AM: | Start of Session, Tuesday, 15 August 2006 |
********
10:03 AM: | End of Session, Tuesday, 15 August 2006 |
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: Off
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:49 AM: Shield States
9:45 AM: Spyware Definitions: 734
9:45 AM: Spy Sweeper 5.0.7.1608 started
9:37 AM: Your spyware definitions have been updated.
Operation: File Access
Target:
Source: C:\PROGRAM FILES\COMMON FILES\SOFTWIN\BITDEFENDER SCAN SERVER\BDSS.EXE
9:36 AM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: Off
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:34 AM: Shield States
9:34 AM: Spyware Definitions: 739
9:33 AM: Spy Sweeper 5.0.5.1286 started
9:35 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST18C.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
9:35 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST18C.tmp". Reason: The process cannot access the file because it is being used by another process
9:35 PM: Warning: Cannot create file "C:\WINDOWS\Temp\SST18C.tmp". The process cannot access the file because it is being used by another process
9:35 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST18B.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
9:35 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST18B.tmp". Reason: The process cannot access the file because it is being used by another process
9:35 PM: Warning: The process cannot access the file because it is being used by another process
9:35 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST17F.tmp.log". Reason: The process cannot access the file because it is being used by another process
9:34 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST181.tmp". Reason: The process cannot access the file because it is being used by another process
9:34 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST181.tmp.log". Reason: The process cannot access the file because it is being used by another process
9:33 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST18B.tmp.log". Reason: The process cannot access the file because it is being used by another process
9:33 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST18A.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
9:33 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST18A.tmp". Reason: The process cannot access the file because it is being used by another process
9:33 PM: Warning: The process cannot access the file because it is being used by another process
9:32 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST189.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
9:32 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST189.tmp". Reason: The process cannot access the file because it is being used by another process
9:32 PM: Warning: Cannot create file "C:\WINDOWS\Temp\SST189.tmp". The process cannot access the file because it is being used by another process
9:32 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST180.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
9:32 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST180.tmp". Reason: The process cannot access the file because it is being used by another process
9:32 PM: Warning: The process cannot access the file because it is being used by another process
9:32 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST17F.tmp.log". Reason: The process cannot access the file because it is being used by another process
9:32 PM: Warning: TCSIDLs.Refresh: could not map user [S-1-5-21-1757981266-1993962763-1060284298-1006]
9:32 PM: Warning: Cannot create file "C:\WINDOWS\Temp\SST188.tmp". The process cannot access the file because it is being used by another process
9:32 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST187.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
9:32 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST187.tmp". Reason: The process cannot access the file because it is being used by another process
9:32 PM: Warning: Cannot create file "C:\WINDOWS\Temp\SST187.tmp". The process cannot access the file because it is being used by another process
9:32 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST186.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
9:32 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST186.tmp". Reason: The process cannot access the file because it is being used by another process
9:32 PM: Warning: Cannot create file "C:\WINDOWS\Temp\SST186.tmp". The process cannot access the file because it is being used by another process
9:32 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST185.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
9:32 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST185.tmp". Reason: The process cannot access the file because it is being used by another process
9:32 PM: Warning: The process cannot access the file because it is being used by another process
9:31 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST17E.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
9:31 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST17E.tmp". Reason: The process cannot access the file because it is being used by another process
Operation: File Access
Target:
Source: C:\PROGRAM FILES\COMMON FILES\SOFTWIN\BITDEFENDER SCAN SERVER\BDSS.EXE
9:08 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
9:07 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
9:07 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: Off
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
8:32 PM: Shield States
8:32 PM: Spyware Definitions: 739
8:32 PM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
8:29 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
8:29 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: Off
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
5:35 PM: Shield States
5:35 PM: Spyware Definitions: 739
5:34 PM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
2:55 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
2:55 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
2:47 PM: Warning: Access is denied
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: Off
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
2:47 PM: Shield States
2:47 PM: Spyware Definitions: 739
2:47 PM: Spy Sweeper 5.0.5.1286 started
2:38 PM: Removal process completed. Elapsed time 00:00:45
2:38 PM: Quarantining All Traces: serving-sys cookie
2:38 PM: Quarantining All Traces: 2o7.net cookie
2:38 PM: Quarantining All Traces: bs.serving-sys cookie
2:37 PM: Failed to quarantine christian@atdmt[2].txt
2:37 PM: Failed to quarantine atlas dmt cookie
2:37 PM: Warning: Cannot create file "C:\WINDOWS\Temp\SST110.tmp". The process cannot access the file because it is being used by another process
2:37 PM: Quarantining All Traces: atlas dmt cookie
2:37 PM: Removal process initiated
2:37 PM: Sweep Status: 4 Items Found
2:37 PM: Traces Found: 4
2:37 PM: File Sweep Complete, Elapsed Time: 01:32:38
2:37 PM: Sweep Canceled
2:25 PM: Warning: PerformFileOffsetMatch Failed to check file "c:\windows\temp\tmp136". "c:\windows\temp\tmp136": File not found
2:23 PM: Warning: PerformFileOffsetMatch Failed to check file "c:\windows\temp\tmp7c". "c:\windows\temp\tmp7c": File not found
2:23 PM: Warning: PerformFileOffsetMatch Failed to check file "c:\windows\temp\tmp78". "c:\windows\temp\tmp78": File not found
2:23 PM: Warning: PerformFileOffsetMatch Failed to check file "c:\windows\temp\tmp18e". "c:\windows\temp\tmp18e": File not found
2:21 PM: Warning: PerformFileOffsetMatch Failed to check file "c:\windows\temp\tmp131". "c:\windows\temp\tmp131": File not found
2:20 PM: Warning: PerformFileOffsetMatch Failed to check file "c:\windows\temp\tmp176". "c:\windows\temp\tmp176": File not found
2:17 PM: Warning: PerformFileOffsetMatch Failed to check file "c:\windows\temp\tmp175". "c:\windows\temp\tmp175": File not found
2:08 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTF9.tmp.log". Reason: The process cannot access the file because it is being used by another process
2:08 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST10B.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
2:08 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST10B.tmp". Reason: The process cannot access the file because it is being used by another process
2:08 PM: Warning: The process cannot access the file because it is being used by another process
2:08 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST109.tmp". Reason: The process cannot access the file because it is being used by another process
2:08 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST109.tmp.log". Reason: The process cannot access the file because it is being used by another process
2:07 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST10E.tmp". Reason: The process cannot access the file because it is being used by another process
2:07 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST10E.tmp.log". Reason: The process cannot access the file because it is being used by another process
2:06 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST10D.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1003"
2:06 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST10D.tmp". Reason: The process cannot access the file because it is being used by another process
2:06 PM: Warning: Cannot create file "C:\WINDOWS\Temp\SST10D.tmp". The process cannot access the file because it is being used by another process
2:06 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST10C.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1003"
2:06 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST10C.tmp". Reason: The process cannot access the file because it is being used by another process
2:06 PM: Warning: Cannot create file "C:\WINDOWS\Temp\SST10C.tmp". The process cannot access the file because it is being used by another process
2:06 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTFB.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1003"
2:06 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTFB.tmp". Reason: The process cannot access the file because it is being used by another process
2:06 PM: Warning: The process cannot access the file because it is being used by another process
2:06 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST10A.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
2:06 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST10A.tmp". Reason: The process cannot access the file because it is being used by another process
2:06 PM: Warning: Cannot create file "C:\WINDOWS\Temp\SST10A.tmp". The process cannot access the file because it is being used by another process
2:05 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST105.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
2:05 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST105.tmp". Reason: The process cannot access the file because it is being used by another process
2:05 PM: Warning: The process cannot access the file because it is being used by another process
2:05 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST108.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1007"
2:05 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST108.tmp". Reason: The process cannot access the file because it is being used by another process
2:05 PM: Warning: Cannot create file "C:\WINDOWS\Temp\SST108.tmp". The process cannot access the file because it is being used by another process
2:05 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST104.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1007"
2:05 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST104.tmp". Reason: The process cannot access the file because it is being used by another process
2:05 PM: Warning: The process cannot access the file because it is being used by another process
2:04 PM: Warning: PerformFileOffsetMatch Failed to check file "c:\windows\temp\tmp128". "c:\windows\temp\tmp128": File not found
2:04 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST106.tmp.log". Reason: The process cannot access the file because it is being used by another process
2:03 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST103.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
2:03 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST103.tmp". Reason: The process cannot access the file because it is being used by another process
2:03 PM: Warning: The process cannot access the file because it is being used by another process
2:03 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTF9.tmp.log". Reason: The process cannot access the file because it is being used by another process
2:03 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST105.tmp". Reason: The process cannot access the file because it is being used by another process
2:03 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST105.tmp.log". Reason: The process cannot access the file because it is being used by another process
2:02 PM: Warning: PerformFileOffsetMatch Failed to check file "c:\windows\temp\tmp49". "c:\windows\temp\tmp49": File not found
2:02 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST102.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
2:02 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST102.tmp". Reason: The process cannot access the file because it is being used by another process
2:02 PM: Warning: The process cannot access the file because it is being used by another process
2:02 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST104.tmp". Reason: The process cannot access the file because it is being used by another process
2:02 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST104.tmp.log". Reason: The process cannot access the file because it is being used by another process
2:01 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTF7.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1007"
2:01 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTF7.tmp". Reason: The process cannot access the file because it is being used by another process
2:01 PM: Warning: The process cannot access the file because it is being used by another process
2:01 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTFB.tmp". Reason: The process cannot access the file because it is being used by another process
2:01 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTFB.tmp.log". Reason: The process cannot access the file because it is being used by another process
2:01 PM: Warning: PerformFileOffsetMatch Failed to check file "c:\windows\temp\tmp4a". "c:\windows\temp\tmp4a": File not found
2:01 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST103.tmp.log". Reason: The process cannot access the file because it is being used by another process
2:00 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST101.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
2:00 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST101.tmp". Reason: The process cannot access the file because it is being used by another process
2:00 PM: Warning: The process cannot access the file because it is being used by another process
2:00 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTF9.tmp.log". Reason: The process cannot access the file because it is being used by another process
1:59 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST102.tmp". Reason: The process cannot access the file because it is being used by another process
1:59 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST102.tmp.log". Reason: The process cannot access the file because it is being used by another process
1:59 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTF8.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
1:59 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTF8.tmp". Reason: The process cannot access the file because it is being used by another process
1:59 PM: Warning: The process cannot access the file because it is being used by another process
1:58 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SST100.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
1:58 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST100.tmp". Reason: The process cannot access the file because it is being used by another process
1:58 PM: Warning: The process cannot access the file because it is being used by another process
1:58 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTFF.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
1:58 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTFF.tmp". Reason: The process cannot access the file because it is being used by another process
1:58 PM: Warning: Cannot create file "C:\WINDOWS\Temp\SSTFF.tmp". The process cannot access the file because it is being used by another process
1:58 PM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTFA.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
1:58 PM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTFA.tmp". Reason: The process cannot access the file because it is being used by another process
1:58 PM: Warning: The process cannot access the file because it is being used by another process
1:04 PM: Starting File Sweep
1:04 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
1:04 PM: c:\documents and settings\christian\cookies\christian@serving-sys[2].txt (ID = 3343)
1:04 PM: Found Spy Cookie: serving-sys cookie
1:04 PM: c:\documents and settings\christian\cookies\christian@msnportal.112.2o7[1].txt (ID = 1958)
1:04 PM: Found Spy Cookie: 2o7.net cookie
1:04 PM: c:\documents and settings\christian\cookies\[removed]-sys[1].txt (ID = 2330)
1:04 PM: Found Spy Cookie: bs.serving-sys cookie
1:04 PM: c:\documents and settings\christian\cookies\christian@atdmt[2].txt (ID = 2253)
1:04 PM: Found Spy Cookie: atlas dmt cookie
1:04 PM: Starting Cookie Sweep
1:04 PM: Registry Sweep Complete, Elapsed Time:00:00:28
1:04 PM: Starting Registry Sweep
1:04 PM: Memory Sweep Complete, Elapsed Time: 00:02:54
1:01 PM: Starting Memory Sweep
1:00 PM: Sweep initiated using definitions version 739
1:00 PM: Spy Sweeper 5.0.5.1286 started
1:00 PM: | Start of Session, Monday, 14 August 2006 |
********
1:00 PM: | End of Session, Monday, 14 August 2006 |
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: Off
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
1:00 PM: Shield States
1:00 PM: Spyware Definitions: 739
12:59 PM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
12:13 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
12:13 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
11:18 AM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
11:18 AM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: Off
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
11:17 AM: Shield States
11:17 AM: Spyware Definitions: 739
11:17 AM: Spy Sweeper 5.0.5.1286 started
9:54 AM: Your definitions are up to date.
9:54 AM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: Off
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
9:53 AM: Shield States
9:53 AM: Spyware Definitions: 739
9:52 AM: Spy Sweeper 5.0.5.1286 started
11:09 PM: Warning: Unable to query service start type: A system shutdown is in progress
A system shutdown is in progress
11:09 PM: Warning: System Error. Code: 1115.
11:09 PM: Warning: Unable to query service start type: A system shutdown is in progress
A system shutdown is in progress
11:09 PM: Warning: System Error. Code: 1115.
11:09 PM: Warning: Unable to query service start type: A system shutdown is in progress
A system shutdown is in progress
11:09 PM: Warning: System Error. Code: 1115.
11:09 PM: Warning: Unable to query service start type: A system shutdown is in progress
A system shutdown is in progress
11:09 PM: Warning: System Error. Code: 1115.
11:09 PM: Warning: Unable to query service start type: A system shutdown is in progress
A system shutdown is in progress
11:09 PM: Warning: System Error. Code: 1115.
11:09 PM: Warning: Unable to query service start type: A system shutdown is in progress
A system shutdown is in progress
11:09 PM: Warning: System Error. Code: 1115.
11:09 PM: Warning: Unable to query service start type: A system shutdown is in progress
A system shutdown is in progress
11:09 PM: Warning: System Error. Code: 1115.
11:09 PM: Warning: Unable to query service start type: A system shutdown is in progress
A system shutdown is in progress
11:09 PM: Warning: System Error. Code: 1115.
11:09 PM: Warning: Unable to query service start type: A system shutdown is in progress
A system shutdown is in progress
11:09 PM: Warning: System Error. Code: 1115.
11:09 PM: Warning: Unable to query service start type: A system shutdown is in progress
A system shutdown is in progress
11:09 PM: Warning: System Error. Code: 1115.
11:09 PM: Warning: Unable to query service start type: A system shutdown is in progress
A system shutdown is in progress
11:09 PM: Warning: System Error. Code: 1115.
11:09 PM: Warning: Unable to query service start type: A system shutdown is in progress
A system shutdown is in progress
11:09 PM: Warning: System Error. Code: 1115.
11:09 PM: Warning: Unable to query service start type: A system shutdown is in progress
A system shutdown is in progress
11:09 PM: Warning: System Error. Code: 1115.
11:09 PM: Warning: Unable to query service start type: A system shutdown is in progress
A system shutdown is in progress
11:09 PM: Warning: System Error. Code: 1115.
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
9:31 PM: Tamper Detection
Operation: File Access
Target:
Source: C:\PROGRAM FILES\COMMON FILES\SOFTWIN\BITDEFENDER SCAN SERVER\BDSS.EXE
8:51 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
8:46 PM: Tamper Detection
Operation: File Access
Target:
Source: C:\PROGRAM FILES\COMMON FILES\SOFTWIN\BITDEFENDER SCAN SERVER\BDSS.EXE
8:41 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
8:40 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
8:40 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
8:36 PM: Shield States
8:36 PM: Spyware Definitions: 735
8:36 PM: Spy Sweeper 5.0.5.1286 started
8:41 AM: Your spyware definitions have been updated.
Operation: File Access
Target:
Source: C:\PROGRAM FILES\COMMON FILES\SOFTWIN\BITDEFENDER SCAN SERVER\BDSS.EXE
8:40 AM: Tamper Detection
8:40 AM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
8:39 AM: Shield States
8:39 AM: Spyware Definitions: 734
8:39 AM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
1:46 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
1:46 PM: Tamper Detection
Operation: File Access
Target:
Source: C:\PROGRAM FILES\COMMON FILES\SOFTWIN\BITDEFENDER SCAN SERVER\BDSS.EXE
1:01 PM: Tamper Detection
10:54 AM: Your definitions are up to date.
10:54 AM: Automated check for program update in progress.
Operation: File Access
Target:
Source: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
10:34 AM: Tamper Detection
Operation: File Access
Target:
Source: C:\PROGRAM FILES\COMMON FILES\SOFTWIN\BITDEFENDER SCAN SERVER\BDSS.EXE
10:34 AM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
8:36 AM: Shield States
8:36 AM: Spyware Definitions: 730
8:36 AM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
8:58 PM: Shield States
8:58 PM: Spyware Definitions: 730
8:58 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
12:41 PM: Shield States
12:41 PM: Spyware Definitions: 730
12:41 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
11:37 AM: Shield States
11:37 AM: Spyware Definitions: 730
11:37 AM: Spy Sweeper 5.0.5.1286 started
10:52 AM: Your spyware definitions have been updated.
Operation: File Access
Target:
Source: C:\PROGRAM FILES\COMMON FILES\SOFTWIN\BITDEFENDER SCAN SERVER\BDSS.EXE
10:51 AM: Tamper Detection
10:51 AM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
10:50 AM: Shield States
10:50 AM: Spyware Definitions: 729
10:50 AM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
8:40 AM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
8:39 AM: Tamper Detection
8:28 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SST94.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
8:28 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST94.tmp". Reason: The process cannot access the file because it is being used by another process
8:28 AM: Warning: The process cannot access the file because it is being used by another process
8:27 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SST58.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
8:27 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST58.tmp". Reason: The process cannot access the file because it is being used by another process
8:27 AM: Warning: The process cannot access the file because it is being used by another process
8:27 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST57.tmp.log". Reason: The process cannot access the file because it is being used by another process
8:26 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST55.tmp". Reason: The process cannot access the file because it is being used by another process
8:26 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST55.tmp.log". Reason: The process cannot access the file because it is being used by another process
8:25 AM: Warning: The process cannot access the file because it is being used by another process
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
8:25 AM: Shield States
8:25 AM: Spyware Definitions: 729
8:24 AM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
5:40 PM: Tamper Detection
Operation: File Access
Target:
Source: C:\PROGRAM FILES\COMMON FILES\SOFTWIN\BITDEFENDER SCAN SERVER\BDSS.EXE
3:54 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
3:34 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
3:34 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
1:40 PM: Shield States
1:40 PM: Spyware Definitions: 729
1:39 PM: Spy Sweeper 5.0.5.1286 started
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
12:40 PM: Shield States
12:40 PM: Spyware Definitions: 729
12:39 PM: Spy Sweeper 5.0.5.1286 started
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
12:37 PM: Shield States
12:37 PM: Spyware Definitions: 729
12:36 PM: Spy Sweeper 5.0.5.1286 started
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
12:34 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
12:34 PM: Tamper Detection
11:23 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA1.tmp.log". Reason: The process cannot access the file because it is being used by another process
11:22 AM: Warning: TCSIDLs.Refresh: could not map user [S-1-5-21-1757981266-1993962763-1060284298-1006]
11:22 AM: Warning: Cannot create file "C:\WINDOWS\Temp\SSTC2.tmp". The process cannot access the file because it is being used by another process
11:22 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTC1.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
11:22 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTC1.tmp". Reason: The process cannot access the file because it is being used by another process
11:22 AM: Warning: Cannot create file "C:\WINDOWS\Temp\SSTC1.tmp". The process cannot access the file because it is being used by another process
11:22 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTC0.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
11:22 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTC0.tmp". Reason: The process cannot access the file because it is being used by another process
11:22 AM: Warning: Cannot create file "C:\WINDOWS\Temp\SSTC0.tmp". The process cannot access the file because it is being used by another process
11:22 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTB6.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
11:22 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTB6.tmp". Reason: The process cannot access the file because it is being used by another process
11:22 AM: Warning: The process cannot access the file because it is being used by another process
11:21 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTBE.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1007"
11:21 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTBE.tmp". Reason: The process cannot access the file because it is being used by another process
11:21 AM: Warning: Cannot create file "C:\WINDOWS\Temp\SSTBE.tmp". The process cannot access the file because it is being used by another process
11:21 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTBD.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1007"
11:21 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTBD.tmp". Reason: The process cannot access the file because it is being used by another process
11:21 AM: Warning: The process cannot access the file because it is being used by another process
11:20 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA1.tmp.log". Reason: The process cannot access the file because it is being used by another process
11:20 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTB6.tmp". Reason: The process cannot access the file because it is being used by another process
11:20 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTB6.tmp.log". Reason: The process cannot access the file because it is being used by another process
11:19 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTBD.tmp". Reason: The process cannot access the file because it is being used by another process
11:19 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTBD.tmp.log". Reason: The process cannot access the file because it is being used by another process
11:19 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTA7.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1007"
11:19 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA7.tmp". Reason: The process cannot access the file because it is being used by another process
11:19 AM: Warning: The process cannot access the file because it is being used by another process
11:18 AM: Warning: TCSIDLs.Refresh: could not map user [S-1-5-21-1757981266-1993962763-1060284298-1003]
11:18 AM: Warning: Cannot create file "C:\WINDOWS\Temp\SSTBC.tmp". The process cannot access the file because it is being used by another process
11:18 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTBB.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1003"
11:18 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTBB.tmp". Reason: The process cannot access the file because it is being used by another process
11:18 AM: Warning: Cannot create file "C:\WINDOWS\Temp\SSTBB.tmp". The process cannot access the file because it is being used by another process
11:18 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTBA.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1003"
11:18 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTBA.tmp". Reason: The process cannot access the file because it is being used by another process
11:18 AM: Warning: Cannot create file "C:\WINDOWS\Temp\SSTBA.tmp". The process cannot access the file because it is being used by another process
11:18 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTAE.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1003"
11:18 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTAE.tmp". Reason: The process cannot access the file because it is being used by another process
11:18 AM: Warning: The process cannot access the file because it is being used by another process
11:18 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTB9.tmp". Reason: The process cannot access the file because it is being used by another process
11:18 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTB9.tmp.log". Reason: The process cannot access the file because it is being used by another process
11:17 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA1.tmp.log". Reason: The process cannot access the file because it is being used by another process
11:17 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTB6.tmp". Reason: The process cannot access the file because it is being used by another process
11:17 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTB6.tmp.log". Reason: The process cannot access the file because it is being used by another process
11:16 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTAE.tmp". Reason: The process cannot access the file because it is being used by another process
11:16 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTAE.tmp.log". Reason: The process cannot access the file because it is being used by another process
11:16 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTB8.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
11:16 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTB8.tmp". Reason: The process cannot access the file because it is being used by another process
11:16 AM: Warning: The process cannot access the file because it is being used by another process
11:15 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA1.tmp.log". Reason: The process cannot access the file because it is being used by another process
11:15 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTB7.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
11:15 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTB7.tmp". Reason: The process cannot access the file because it is being used by another process
11:15 AM: Warning: Cannot create file "C:\WINDOWS\Temp\SSTB7.tmp". The process cannot access the file because it is being used by another process
11:15 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTAD.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
11:15 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTAD.tmp". Reason: The process cannot access the file because it is being used by another process
11:15 AM: Warning: The process cannot access the file because it is being used by another process
11:15 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA1.tmp.log". Reason: The process cannot access the file because it is being used by another process
11:14 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTB6.tmp". Reason: The process cannot access the file because it is being used by another process
11:14 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTB6.tmp.log". Reason: The process cannot access the file because it is being used by another process
11:14 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA7.tmp". Reason: The process cannot access the file because it is being used by another process
11:14 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA7.tmp.log". Reason: The process cannot access the file because it is being used by another process
11:13 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTB5.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
11:13 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTB5.tmp". Reason: The process cannot access the file because it is being used by another process
11:12 AM: Warning: The process cannot access the file because it is being used by another process
11:12 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTB4.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
11:12 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTB4.tmp". Reason: The process cannot access the file because it is being used by another process
11:12 AM: Warning: Cannot create file "C:\WINDOWS\Temp\SSTB4.tmp". The process cannot access the file because it is being used by another process
11:12 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTB2.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
11:12 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTB2.tmp". Reason: The process cannot access the file because it is being used by another process
11:12 AM: Warning: The process cannot access the file because it is being used by another process
11:10 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTB1.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
11:10 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTB1.tmp". Reason: The process cannot access the file because it is being used by another process
11:10 AM: Warning: The process cannot access the file because it is being used by another process
11:10 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA7.tmp". Reason: The process cannot access the file because it is being used by another process
11:10 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA7.tmp.log". Reason: The process cannot access the file because it is being used by another process
11:08 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTB1.tmp". Reason: The process cannot access the file because it is being used by another process
11:07 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTB0.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
11:07 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTB0.tmp". Reason: The process cannot access the file because it is being used by another process
11:07 AM: Warning: Cannot create file "C:\WINDOWS\Temp\SSTB0.tmp". The process cannot access the file because it is being used by another process
11:07 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTAF.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
11:07 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTAF.tmp". Reason: The process cannot access the file because it is being used by another process
11:07 AM: Warning: Cannot create file "C:\WINDOWS\Temp\SSTAF.tmp". The process cannot access the file because it is being used by another process
11:07 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTAA.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
11:07 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTAA.tmp". Reason: The process cannot access the file because it is being used by another process
11:07 AM: Warning: The process cannot access the file because it is being used by another process
11:06 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTAE.tmp". Reason: The process cannot access the file because it is being used by another process
11:06 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTAE.tmp.log". Reason: The process cannot access the file because it is being used by another process
11:06 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTA3.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1003"
11:06 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA3.tmp". Reason: The process cannot access the file because it is being used by another process
11:06 AM: Warning: The process cannot access the file because it is being used by another process
11:03 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTAC.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
11:03 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTAC.tmp". Reason: The process cannot access the file because it is being used by another process
11:03 AM: Warning: Cannot create file "C:\WINDOWS\Temp\SSTAC.tmp". The process cannot access the file because it is being used by another process
11:03 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTAB.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
11:03 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTAB.tmp". Reason: The process cannot access the file because it is being used by another process
11:03 AM: Warning: Cannot create file "C:\WINDOWS\Temp\SSTAB.tmp". The process cannot access the file because it is being used by another process
11:03 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTA2.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1004"
11:03 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA2.tmp". Reason: The process cannot access the file because it is being used by another process
11:03 AM: Warning: The process cannot access the file because it is being used by another process
11:02 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA1.tmp.log". Reason: The process cannot access the file because it is being used by another process
11:02 AM: Warning: TCSIDLs.Refresh: could not map user [S-1-5-21-1757981266-1993962763-1060284298-1006]
11:02 AM: Warning: Cannot create file "C:\WINDOWS\Temp\SSTAA.tmp". The process cannot access the file because it is being used by another process
11:02 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTA9.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
11:02 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA9.tmp". Reason: The process cannot access the file because it is being used by another process
11:02 AM: Warning: Cannot create file "C:\WINDOWS\Temp\SSTA9.tmp". The process cannot access the file because it is being used by another process
11:02 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTA8.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
11:02 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA8.tmp". Reason: The process cannot access the file because it is being used by another process
11:02 AM: Warning: The process cannot access the file because it is being used by another process
11:02 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SSTA0.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1006"
11:02 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA0.tmp". Reason: The process cannot access the file because it is being used by another process
11:02 AM: Warning: The process cannot access the file because it is being used by another process
11:02 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA7.tmp". Reason: The process cannot access the file because it is being used by another process
11:02 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SSTA7.tmp.log". Reason: The process cannot access the file because it is being used by another process
11:01 AM: Warning: Profile shadow "C:\WINDOWS\Temp\SST9F.tmp" exists for "S-1-5-21-1757981266-1993962763-1060284298-1007"
11:01 AM: Warning: Failed to delete profile shadow file "C:\WINDOWS\Temp\SST9F.tmp". Reason: The process cannot access the file because it is being used by another process
10:02 AM: Your definitions are up to date.
10:02 AM: Automated check for program update in progress.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
10:02 AM: Shield States
10:02 AM: Spyware Definitions: 729
10:01 AM: Spy Sweeper 5.0.5.1286 started
10:16 PM: | End of Session, Friday, 28 July 2006 |
10:16 PM: Deletion from quarantine completed. Elapsed time 00:00:00
10:16 PM: Processing: atlas dmt cookie
10:16 PM: Processing: serving-sys cookie
10:16 PM: Processing: 2o7.net cookie
10:16 PM: Processing: 2o7.net cookie
10:16 PM: Processing: 2o7.net cookie
10:16 PM: Processing: tribalfusion cookie
10:16 PM: Processing: yieldmanager cookie
10:16 PM: Processing: casalemedia cookie
10:16 PM: Processing: bs.serving-sys cookie
10:16 PM: Processing: advertising cookie
10:16 PM: Processing: fastclick cookie
10:16 PM: Processing: mediaplex cookie
10:16 PM: Deletion from quarantine initiated
10:16 PM: Your definitions are up to date.
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
IE Hijack Shield: On
IE Tracking Cookies Shield: Off
10:14 PM: Shield States
10:14 PM: Spyware Definitions: 728
10:14 PM: Spy Sweeper 5.0.5.1286 started
10:09 PM: Spy Installation Shield: found: Adware: marketscore, version 1.0.0.0
10:09 PM: Spy Installation Shield: found: Adware: marketscore, version 1.0.0.0
10:09 PM: Spy Installation Shield: found: Adware: marketscore, version 1.0.0.0
10:09 PM: Spy Installation Shield: found: Adware: marketscore, version 1.0.0.0
10:09 PM: Spy Installation Shield: found: Adware: marketscore, version 1.0.0.0
10:09 PM: Spy Installation Shield: found: Adware: marketscore, version 1.0.0.0
10:09 PM: Spy Installation Shield: found: Adware: marketscore, version 1.0.0.0
10:09 PM: Spy Installation Shield: found: Adware: marketscore, version 1.0.0.0
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:09 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:05 PM: Tamper Detection
Operation: Terminate
Target: C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPERUI.EXE
Source: C:\WINDOWS\SYSTEM32\CSRSS.EXE
10:04 PM: Tamper Detection
Keylogger Shield: On
BHO Shield: On
IE Security Shield: On
Alternate Data Stream (ADS) Execution Shield: On
Startup Shield: On
Common Ad Sites Shield: Off
Hosts File Shield: On
Spy Communication Shield: On
ActiveX Shield: On
Windows Messenger Service Shield: On
IE Favorites Shield: On
Spy Installation Shield: On
Memory Shield: On
Thanks for your patience, Navigator. I will do as you suggest when I return from another business trip that I am on. I will post the result Tuesday next.

Shane.
Gday Navigator,

Here is the WinPFind log:

WARNING: not all files found by this scanner are bad. Consult with a knowledgable person before proceeding.

If you see a message in the titlebar saying "Not responding..." you can ignore it. Windows somethimes displays this message due to the high volume of disk I/O. As long as the hard disk light is flashing, the program is still working properly.

»»»»»»»»»»»»»»»»» Windows OS and Versions »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Product Name: Microsoft Windows XP Current Build: Service Pack 2 Current Build Number: 2600
Internet Explorer Version: 6.0.2900.2180

»»»»»»»»»»»»»»»»» Checking Selected Standard Folders »»»»»»»»»»»»»»»»»»»»

Checking %SystemDrive% folder...

Checking %ProgramFilesDir% folder...
UPX! 12/06/2005 3:21:20 AM 280829212 C:\Program Files\battlefield_1942_patch_v1.6.19.exe
FSG! 12/06/2005 3:21:20 AM 280829212 C:\Program Files\battlefield_1942_patch_v1.6.19.exe
UPX! 20/08/2005 4:18:58 PM 724030272 C:\Program Files\bf1942_1.mdf
FSG! 20/08/2005 4:18:58 PM 724030272 C:\Program Files\bf1942_1.mdf
PEC2 20/08/2005 4:18:58 PM 724030272 C:\Program Files\bf1942_1.mdf
UPX! 20/08/2005 4:27:08 PM 508876368 C:\Program Files\BF1942_2.mdf
FSG! 20/08/2005 4:27:08 PM 508876368 C:\Program Files\BF1942_2.mdf
UPX! 27/10/2005 6:48:00 AM 5126656 C:\Program Files\trial_setup.msi

Checking %WinDir% folder...
PEC2 6/05/2006 12:01:48 PM 20992 C:\WINDOWS\igBrowse.exe
PECompact2 6/05/2006 12:01:48 PM 20992 C:\WINDOWS\igBrowse.exe
PEC2 6/05/2006 8:44:32 AM 18432 C:\WINDOWS\igUninst.exe
PECompact2 6/05/2006 8:44:32 AM 18432 C:\WINDOWS\igUninst.exe
PEC2 19/05/2006 11:43:14 AM 82944 C:\WINDOWS\npigl.dll
PECompact2 19/05/2006 11:43:14 AM 82944 C:\WINDOWS\npigl.dll

Checking %System% folder...
UPX! 2/09/2004 12:49:56 AM 284672 C:\WINDOWS\SYSTEM32\avisynth.dll
aspack 26/05/2005 3:34:52 PM 2297552 C:\WINDOWS\SYSTEM32\d3dx9_26.dll
PEC2 31/03/2003 10:00:00 PM 41397 C:\WINDOWS\SYSTEM32\dfrg.msc
PTech 19/06/2006 4:19:42 PM 571184 C:\WINDOWS\SYSTEM32\LegitCheckControl.dll
PECompact2 3/08/2006 11:22:50 AM 8255912 C:\WINDOWS\SYSTEM32\MRT.exe
aspack 3/08/2006 11:22:50 AM 8255912 C:\WINDOWS\SYSTEM32\MRT.exe
aspack 4/08/2004 12:56:38 AM 708096 C:\WINDOWS\SYSTEM32\ntdll.dll
Umonitor 4/08/2004 12:56:46 AM 657920 C:\WINDOWS\SYSTEM32\rasdlg.dll
UPX! 19/12/2004 11:00:00 PM 111104 C:\WINDOWS\SYSTEM32\uharc.exe
winsync 31/03/2003 10:00:00 PM 1309184 C:\WINDOWS\SYSTEM32\wbdbase.deu
PTech 19/06/2006 4:19:26 PM 304944 C:\WINDOWS\SYSTEM32\WgaTray.exe

Checking %System%\Drivers folder and sub-folders...
PTech 3/08/2004 10:41:38 PM 1309184 C:\WINDOWS\SYSTEM32\drivers\mtlstrm.sys

Items found in C:\WINDOWS\SYSTEM32\drivers\etc\hosts


Checking the Windows folder and sub-folders for system and hidden files within the last 60 days...
22/08/2006 1:08:00 PM S 2048 C:\WINDOWS\bootstat.dat
21/08/2006 9:38:02 PM H 54156 C:\WINDOWS\QTFont.qfn
10/08/2006 10:07:44 PM HS 7680 C:\WINDOWS\Thumbs.db
12/07/2006 9:17:02 PM RH 0 C:\WINDOWS\assembly\PublisherPolicy.tme
12/07/2006 9:17:02 PM RH 0 C:\WINDOWS\assembly\pubpol17.dat
13/07/2006 1:24:10 PM RH 0 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\index29.dat
13/07/2006 1:24:10 PM RH 0 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\index2a.dat
7/07/2006 5:03:30 PM S 10690 C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB914440.cat
5/07/2006 10:21:58 PM S 10925 C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB917422.cat
28/07/2006 10:16:08 PM S 23751 C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB918899.cat
28/07/2006 12:00:28 AM S 10337 C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB920214.cat
21/07/2006 7:03:14 PM S 10925 C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB920670.cat
27/06/2006 5:47:22 AM S 11929 C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB920683.cat
14/07/2006 12:24:46 AM S 13050 C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB921398.cat
15/07/2006 2:13:00 AM S 10925 C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB921883.cat
15/07/2006 1:53:20 AM S 10925 C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB922616.cat
22/08/2006 1:08:08 PM H 16384 C:\WINDOWS\system32\config\default.LOG
22/08/2006 1:08:32 PM H 1024 C:\WINDOWS\system32\config\SAM.LOG
22/08/2006 1:08:02 PM H 16384 C:\WINDOWS\system32\config\SECURITY.LOG
22/08/2006 1:08:58 PM H 94208 C:\WINDOWS\system32\config\software.LOG
22/08/2006 1:08:10 PM H 1085440 C:\WINDOWS\system32\config\system.LOG
11/08/2006 7:04:02 AM H 1024 C:\WINDOWS\system32\config\systemprofile\ntuser.dat.LOG
14/07/2006 4:36:56 PM HS 388 C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\c1c0e2cd-7aed-473b-abee-a8c6af13206e
14/07/2006 4:36:56 PM HS 24 C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\Preferred
15/07/2006 6:06:26 AM HS 388 C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\User\84585aad-c7b1-424a-977c-fad125ad0c1f
15/07/2006 6:06:26 AM HS 24 C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\User\Preferred
22/08/2006 1:11:30 PM H 330 C:\WINDOWS\Tasks\MP Scheduled Scan.job
22/08/2006 1:06:38 PM H 6 C:\WINDOWS\Tasks\SA.DAT
5/08/2006 4:35:08 PM H 1024 C:\WINDOWS\Temp\SST5A.tmp.LOG
25/06/2006 1:05:48 PM HS 67 C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\desktop.ini
25/06/2006 1:05:48 PM HS 67 C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\0MMU70I9\desktop.ini
25/06/2006 1:05:48 PM HS 67 C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\F5WWBORW\desktop.ini
25/06/2006 1:05:48 PM HS 67 C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\KPMJSX2B\desktop.ini
25/06/2006 1:05:48 PM HS 67 C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\RCEYODT6\desktop.ini

Checking for CPL files...
25/05/2004 4:06:58 PM 417792 C:\WINDOWS\SYSTEM32\ac3filter.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 68608 C:\WINDOWS\SYSTEM32\access.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 549888 C:\WINDOWS\SYSTEM32\appwiz.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 110592 C:\WINDOWS\SYSTEM32\bthprops.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 135168 C:\WINDOWS\SYSTEM32\desk.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 80384 C:\WINDOWS\SYSTEM32\firewall.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 155136 C:\WINDOWS\SYSTEM32\hdwwiz.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 358400 C:\WINDOWS\SYSTEM32\inetcpl.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 129536 C:\WINDOWS\SYSTEM32\intl.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 380416 C:\WINDOWS\SYSTEM32\irprops.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 68608 C:\WINDOWS\SYSTEM32\joy.cpl
Sun Microsystems, Inc. 10/11/2005 1:03:50 PM 49265 C:\WINDOWS\SYSTEM32\jpicpl32.cpl
Microsoft Corporation 31/03/2003 10:00:00 PM 187904 C:\WINDOWS\SYSTEM32\main.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 618496 C:\WINDOWS\SYSTEM32\mmsys.cpl
Microsoft Corporation 31/03/2003 10:00:00 PM 35840 C:\WINDOWS\SYSTEM32\ncpa.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 25600 C:\WINDOWS\SYSTEM32\netsetup.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 257024 C:\WINDOWS\SYSTEM32\nusrmgr.cpl
NVIDIA Corporation 28/07/2003 3:19:00 PM 143360 C:\WINDOWS\SYSTEM32\nvtuicpl.cpl
Microsoft Corporation 31/03/2003 10:00:00 PM 36864 C:\WINDOWS\SYSTEM32\nwc.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 32768 C:\WINDOWS\SYSTEM32\odbccp32.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 114688 C:\WINDOWS\SYSTEM32\powercfg.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 298496 C:\WINDOWS\SYSTEM32\sysdm.cpl
Microsoft Corporation 31/03/2003 10:00:00 PM 28160 C:\WINDOWS\SYSTEM32\telephon.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 94208 C:\WINDOWS\SYSTEM32\timedate.cpl
Microsoft Corporation 4/08/2004 12:56:58 AM 148480 C:\WINDOWS\SYSTEM32\wscui.cpl
Microsoft Corporation 26/05/2005 4:16:30 AM 174360 C:\WINDOWS\SYSTEM32\wuaucpl.cpl
Microsoft Corporation 31/03/2003 10:00:00 PM 187904 C:\WINDOWS\SYSTEM32\dllcache\main.cpl
Microsoft Corporation 31/03/2003 10:00:00 PM 35840 C:\WINDOWS\SYSTEM32\dllcache\ncpa.cpl
Microsoft Corporation 31/03/2003 10:00:00 PM 36864 C:\WINDOWS\SYSTEM32\dllcache\nwc.cpl
Microsoft Corporation 31/03/2003 10:00:00 PM 28160 C:\WINDOWS\SYSTEM32\dllcache\telephon.cpl
Microsoft Corporation 26/05/2005 4:16:30 AM 174360 C:\WINDOWS\SYSTEM32\dllcache\wuaucpl.cpl

»»»»»»»»»»»»»»»»» Checking Selected Startup Folders »»»»»»»»»»»»»»»»»»»»»

Checking files in %ALLUSERSPROFILE%\Startup folder...
13/06/2006 5:51:48 PM 1757 C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
15/04/2006 12:23:02 PM HS 84 C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini

Checking files in %ALLUSERSPROFILE%\Application Data folder...
15/04/2006 9:50:14 PM HS 62 C:\Documents and Settings\All Users\Application Data\desktop.ini
11/08/2006 4:36:38 PM 1359 C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache

Checking files in %USERPROFILE%\Startup folder...
15/04/2006 12:23:02 PM HS 84 C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\desktop.ini

Checking files in %USERPROFILE%\Application Data folder...
16/04/2006 9:24:18 PM 879 C:\Documents and Settings\Administrator\Application Data\AdobeDLM.log
15/04/2006 9:50:14 PM HS 62 C:\Documents and Settings\Administrator\Application Data\desktop.ini
16/04/2006 9:24:18 PM 0 C:\Documents and Settings\Administrator\Application Data\dm.ini

»»»»»»»»»»»»»»»»» Checking Selected Registry Keys »»»»»»»»»»»»»»»»»»»»»»»

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
SV1 =

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]

[HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers]
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\ewido anti-spyware
{8934FCEF-F5B8-468f-951F-78A921CD3920} = C:\Program Files\ewido anti-spyware 4.0\context.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\MagicISO
{DB85C504-C730-49DD-BEC1-7B39C6103B7A} = C:\Program Files\MagicISO\misosh.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Offline Files
{750fdf0e-2a26-11d1-a3ea-080036587f03} = %SystemRoot%\System32\cscui.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Open With
{09799AFB-AD67-11d1-ABCD-00C04FC30936} = %SystemRoot%\system32\SHELL32.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Open With EncryptionMenu
{A470F8CF-A1E8-4f65-8335-227475AA5C46} = %SystemRoot%\system32\SHELL32.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\PowerISO
{967B2D40-8B7D-4127-9049-61EA0C2C6DCE} = C:\Program Files\PowerISO\PWRISOSH.DLL
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\TrojanHunter
{EBDF1F20-C829-11D1-8233-FF20AF3E97A9} = C:\PROGRA~1\TROJAN~1.5\contmenu.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\WinRAR
{B41DB860-8EE4-11D2-9906-E49FADC173CA} = C:\Program Files\WinRAR\rarext.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}
Start Menu Pin = %SystemRoot%\system32\SHELL32.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\{D653647D-D607-4df6-A5B8-48D2BA195F7B}
= C:\Program Files\Softwin\BitDefender9\bdshelxt.dll
HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\{EB4D3CFE-E2AA-4C6E-B2FE-2A749F95D208}
= C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShell.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers]
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\MagicISO
{DB85C504-C730-49DD-BEC1-7B39C6103B7A} = C:\Program Files\MagicISO\misosh.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\PowerISO
{967B2D40-8B7D-4127-9049-61EA0C2C6DCE} = C:\Program Files\PowerISO\PWRISOSH.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\SpySweeper
{7C9D5882-CB4A-4090-96C8-430BFE8B795B} = C:\PROGRA~1\Webroot\SPYSWE~1\SSCtxMnu.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\TrojanHunter
{EBDF1F20-C829-11D1-8233-FF20AF3E97A9} = C:\PROGRA~1\TROJAN~1.5\contmenu.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\WinRAR
{B41DB860-8EE4-11D2-9906-E49FADC173CA} = C:\Program Files\WinRAR\rarext.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\{D653647D-D607-4df6-A5B8-48D2BA195F7B}
= C:\Program Files\Softwin\BitDefender9\bdshelxt.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\{EB4D3CFE-E2AA-4C6E-B2FE-2A749F95D208}
= C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShell.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers]
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\EncryptionMenu
{A470F8CF-A1E8-4f65-8335-227475AA5C46} = %SystemRoot%\system32\SHELL32.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\ewido anti-spyware
{8934FCEF-F5B8-468f-951F-78A921CD3920} = C:\Program Files\ewido anti-spyware 4.0\context.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\MagicISO
{DB85C504-C730-49DD-BEC1-7B39C6103B7A} = C:\Program Files\MagicISO\misosh.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\Offline Files
{750fdf0e-2a26-11d1-a3ea-080036587f03} = %SystemRoot%\System32\cscui.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\PowerISO
{967B2D40-8B7D-4127-9049-61EA0C2C6DCE} = C:\Program Files\PowerISO\PWRISOSH.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\Sharing
{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} = ntshrui.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\TrojanHunter
{EBDF1F20-C829-11D1-8233-FF20AF3E97A9} = C:\PROGRA~1\TROJAN~1.5\contmenu.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\WinRAR
{B41DB860-8EE4-11D2-9906-E49FADC173CA} = C:\Program Files\WinRAR\rarext.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers]
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{0D2E74C4-3C34-11d2-A27E-00C04FC30871}
= %SystemRoot%\system32\SHELL32.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{24F14F01-7B1C-11d1-838f-0000F80461CF}
= %SystemRoot%\system32\SHELL32.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{24F14F02-7B1C-11d1-838f-0000F80461CF}
= %SystemRoot%\system32\SHELL32.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{66742402-F9B9-11D1-A202-0000F81FEDEE}
= %SystemRoot%\system32\SHELL32.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{7D4D6379-F301-4311-BEBA-E26EB0561882}
= C:\Program Files\Common Files\Ahead\Lib\NeroDigitalExt.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}
= "C:\Program Files\OpenOffice.org 2.0\program\shlxthdl.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{F9DB5320-233E-11D1-9F84-707F02C10627}
= C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll

[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
AcroIEHlprObj Class = C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}
= C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{4D5C8C25-D075-11d0-B416-00C04FB90376}
&Tip of the Day = %SystemRoot%\System32\shdocvw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}
MenuText = Sun Java Console : C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583}
MenuText = @xpsp3res.dll,-20001 :
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}
ButtonText = Messenger : C:\Program Files\Messenger\msmsgs.exe

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{32683183-48a0-441b-a342-7c2a440a9478}
=

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar]
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
{01E04581-4EEE-11D0-BFE9-00AA005B4383} = &Address : %SystemRoot%\System32\browseui.dll
{0E5CBF21-D15F-11D0-8301-00AA005B4383} = &Links : %SystemRoot%\system32\SHELL32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
NeroFilterCheck C:\WINDOWS\system32\NeroCheck.exe
InCD "C:\Program Files\Nero\Nero 7\InCD\InCD.exe"
SpySweeper "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
BDMCon C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
PWRISOVM.EXE "C:\Program Files\PowerISO\PWRISOVM.EXE"
BDNewsAgent "C:\PROGRA~1\Softwin\BITDEF~1\bdnagent.exe"
BDSwitchAgent "C:\PROGRA~1\Softwin\BITDEF~1\bdswitch.exe"
THGuard "C:\Program Files\TrojanHunter 4.5\THGuard.exe"
!ewido "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
CTFMON.EXE C:\WINDOWS\system32\ctfmon.exe
NvMediaCenter "RUNDLL32.EXE" C:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit
SpybotSD TeaTimer "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\load]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\services

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\state

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Attachments
ScanWithAntiVirus 2


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
NoDriveAutoRun 768


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ext

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ext\CLSID
{17492023-C23A-453E-A040-C7C580BBF700} 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum
{BDEADF00-C265-11D0-BCED-00A0C90AB50F} = C:\Program Files\Common Files\Microsoft Shared\Web Folders\MSONSEXT.DLL
{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} =
{0DF44EAA-FF21-4412-828E-260A8728E7F1} =


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ratings

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
dontdisplaylastusername 0
legalnoticecaption
legalnoticetext
shutdownwithoutlogon 1
undockwithoutlogon 1


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies]

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
NoDriveTypeAutoRun 145

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
DisableRegistryTools 0


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
PostBootReminder {7849596a-48ea-486e-8937-a2a3009f31a9} = %SystemRoot%\system32\SHELL32.dll
CDBurn {fbeb8a05-beee-4442-804e-409d6c4515e9} = %SystemRoot%\system32\SHELL32.dll
WebCheck {E6FB5E20-DE35-11CF-9C87-00AA005127ED} = %SystemRoot%\System32\webcheck.dll
SysTray {35CEC8A3-2BE6-11D2-8773-92E220524153} = C:\WINDOWS\System32\stobject.dll
WPDShServiceObj {AAA288BA-9A4C-45B0-95D7-94D524869DB5} = C:\WINDOWS\system32\WPDShServiceObj.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,
Shell = Explorer.exe
System =

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain
= crypt32.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet
= cryptnet.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll
= cscdll.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp
= wlnotify.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule
= wlnotify.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy
= sclgntfy.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn
= WlNotify.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv
= wlnotify.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon
= WgaLogon.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon
= wlnotify.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WRNotifier
= WRLogonNTF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Your Image File Name Here without a path
Debugger = ntsd -d

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
AppInit_DLLs


»»»»»»»»»»»»»»»»»»»»»»»» Scan Complete »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
WinPFind v1.4.1 - Log file written to "WinPFind.Txt" in the WinPFind folder.
Scan completed on 22/08/2006 5:49:08 PM
I have been doing all the tests, etc, logged in as Administrator.

The problem with Adware seems to be mainly in one particular user account.

Should I do the tests, etc, logged into that account or is it OK to still do everything logged into the Administrator account?
I have been doing all the tests, etc, from within the Administrator account (CRTL-ALT-DEL twice to log into that account).

The problems have been occuring mainly in my son's user account which has administrator privileges.

Which one should I run the scans from?
Gday Navigator,

When I boot into Safe Mode, there are only three accounts displayed when normally there would be three more. ie. There is "Administrator", plus two others. The missing accounts include my son's which is having all the trouble with Adware.Trymedia.B.2

If I go to Control Panel whilst in Safe Mode and then go to User Accounts, there are still three user accounts missing.

Any ideas?

Thanks,
Shane.