WE'RE SURE THAT YOU'LL LOVE US!
Hey there! 
Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. 
Join 93101 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.
Try What the Tech -- It's free!
Help..how to remove iworm_attack_v122.02a?
Started by
dickychan345
, May 27 2006 06:05 AM
-
This topic is locked
23 replies to this topic
#16
dickychan345
-
- Authentic Member
-
- 17 posts
New Member
Posted 27 May 2006 - 12:39 PM
Register to Remove
#17
dickychan345
-
- Authentic Member
-
- 17 posts
New Member
Posted 27 May 2006 - 12:40 PM
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SwMw1KDwAAAIEwXDT2ibsH91JSDQhS2oE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SWQHSXCQAAABtuCd4nrvAHIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SWRLJfCwAAAKIOtEbXZQjuC-nsdmZjkz0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SWSN4wDwAAALQRScIKnP2kiGnc-SC8kTc=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SWszrxDQAAACXDlgQhlFgxZU-Qb-mBzW4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SwWsG7EgAAAJjtV0PAXVk3kaHIiQsFqEIzzv22nZsklQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SWxAXLDQAAALzTPKvJvsmsb18N0TFrfeM=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Sx55LvDAAAAPJnsxTfS4w-QIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Sx8fiNCgAAAHOq1+jcRRRJZfUAuZmaaCs=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SX8tZQEgAAAJEYQ8j1bL9sShDHMbM+wEbbRYZ3ynY9OA== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Sx9h0BDgAAADh1xQbPvDeYOHK82cGhxN0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Sx9HzGCwAAAE3kN3mxiS61l9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SXABuTGQAAAKC1TS8URlQQpaqNexNIYMbJbivpor22zSGdP+TaHF2h -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SXAE1fCQAAAIUrYy5NxqpuIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SXB2txDQAAADZxRuKR2CPku74rNrw6FNQ=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SXB4YEDQAAAFHDBVM9H0N0vzPNqomXeHk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SXDlqRCwAAABJ73Ts-7B0nl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SxfJUUDwAAAGec-IAzrHBpPQwvkp-WOb8=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SxlbeaCQAAAHPS2TSRtpc3nzeH+E6HDCA=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SXmMBTCAAAAP1uLYw1wtQ3 -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SXsRVsCAAAABqwSW44b3Dw -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SXwUE9CAAAAH2d7G7wPOyl -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SY4N1wCwAAAPbEIHaLc1Fdl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SYhfcECwAAAKfCE+i-ViJhl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SyJoJIDgAAAB9wGawNcOuy3twqZ6CHy9E=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SYLaxdDQAAAGSc7JIBqMfUZU-Qb-mBzW4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SYMoY2CAAAAB06eik9z+Dk -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SyohfiDwAAAG0KtAscMFRCooi2CWCN2I4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SYSIgHDQAAANrsKUG+01OVSAEBrFGys5M=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SYV+SJDQAAALor2FJXxL9WNJF2ioqmDt0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SyYzOPCAAAAK0Cohb9VFFE -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SyZIzvEAAAAG5Wc4K6rm+6sRNFINizgt8=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SyZuwfDgAAAHI5IX1wuOW1+EK4-l2Uids=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Sz3AV0DQAAAGFQfYKI-Yhru74rNrw6FNQ=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Sz422ACgAAABjtefb6Oe92zBriqJCyAkY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SzcMVEDAAAAKaulE2eD-jqQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SzCSaMDwAAAMOUEjAgaGLIaoSaElQANQ8=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SzdKuLDgAAAKVH00gIOmO5+8OSbdUVK2U=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SZtDqSDQAAAFRGCjXDkoSQC-ts2ezxLzo=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SZuIN4EgAAAFHr3awNCFNm3s+qmb0s9IXk7z+gDvTwVQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0SzzYBwDAAAAKVIiErsudEkC1w6nYC-qU4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T+LUN5EAAAABl8mjsvDnq0PwUFhk-AKMQ=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T+ppqSDQAAAPI10wZdx5E1r7Htb78725Y=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T+QwA9DQAAABVbmbMc0v3NYMCaEJNO5z0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T+spwUEAAAAGKhlSVklakncKQs8ZpLV44=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T-C5aNBQAAALIP3W8oQuz7 -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T-n18cEAAAAFpToGyjIeVPwhHSuVnyb3I=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T-nRqaCQAAAIpjuq8lnqBvnzeH+E6HDCA=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T-qAPdCwAAAK1YqVrJrOCKl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T-tGJpDAAAAF0DEl7yqCP1mb+C94lMWj4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T-v3LeDgAAADOPtYliiPPJgyuafr346L4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T-v7x0DQAAAJacWsh2ci270h0pUCAaWHI=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T-zwHVCgAAAAjYi6oxkIAc-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T01ADJEAAAAPeKIA28kWEHBsYIlEXtnJQ=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T0FIsUFQAAADu3HtXLj5jtoCUdZ4t+b0m7vis2vDoU1A== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T0LiWODQAAABejmqK8CCNENJF2ioqmDt0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T0RgBaBgAAANrrLXtnYk6o -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T0Yl3VCQAAAMFfJW3mGIcUIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T1++ZOCwAAAG9174OTaiit135WRuCcYj4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T17Xn1CgAAAA6pCCTnvhzE-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T1kTg9DQAAAL4mwGng7ClBwkdv4-nhgtQ=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T1lZA6EQAAAJZprOovl3ynLNZ3yAIc39shnT-k2hxdoQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T1P97wCgAAAJyoScSB+f-5-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T1S6nHCAAAAC9KVTs2FXQ8 -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T1tseZCwAAAHr00POv5Iq9l9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T28YlKCwAAAE0dUuc-7K72PF6p604a7WQ=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T2au-eDQAAAPrbAcC+YY9SxBokeN7f1-0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T2la6bDgAAADRv0KETl71+yWzuFvrxyAk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T2S2WGCwAAALYF7A5n1DpJl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T2tObjDAAAAO87jkxGOR4q6SLJ7hI5wJ4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T2XIfcDAAAAJr653-K2VLbYuLrinoGoVw=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T2xNsZEgAAAL3uadFAy3-eV4pBVligdK78jwWzEK0YEQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T33Y3KEQAAAKSoG6hk-gciuavGtFI4wrYhnT-k2hxdoQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T3788xCQAAABEocEkLeQuKPUg2Lov0Nhk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T3bg83CQAAANq6sKw4LyWqIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T3fVrZEwAAANv4ruuYXhjQVgzQS6POyUmX2r3lbh73AQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T3fwZQCgAAAFjd3WnT9TWN9-DJTqSl6Qs=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T3gOUsDQAAAEg8cV+jDshzO0ySa2TMEx8=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T3Hk2xCAAAAKoMFmmIG+L- -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T3lMWOBwAAAEVwc5xlMz-3 -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T3MJTLCwAAAIfQK3h-FgpH135WRuCcYj4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T3Nn4eCgAAAOvRBbToc9yMfjdeDhWBqDs=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T3uMosCwAAAMBKAy6kCAYwOfRFHkaVFkA=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T3vyr6CgAAAEog40XOcmX0M879tp2bJJU=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T3yf0jFAAAANOvPgdtz75wKF4+HvAvFsdi4uuKegahXA== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T40LIiDAAAAGtkppmwY1a-QIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T41A6ZBwAAAB6VST5-SDrV -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T45xHiEQAAAJV8UakWLJFbFOG1FnCH+IEhnT-k2hxdoQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T4FLK0CgAAAIU9I5Mt7ZHiM879tp2bJJU=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T4p05NDQAAABlWKNV9Sq+zu74rNrw6FNQ=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T59idSCgAAAK0BKB7GmLf--I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T5C6jmEAAAABUZGUChRfKa8abZ1jUyCVQ=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T5Ci9nCAAAAM9hQ7pzOoxY -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T5gd6TCgAAAEzJfQVHjQq7-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T5OiJ+CQAAAItFZPayB7eIPUg2Lov0Nhk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T5roujCAAAAMFND+2H38Ii -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T5w4w1CwAAAH1CavK-XUJKr6wR2k70UYY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T65gySDQAAAEo20fhL6uTZxBokeN7f1-0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T6FwUoDAAAANZj6YhMk0y+QIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T6gQ9jDAAAAIb+tWEP9RyrQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T6jaDoDgAAADjxPIj4KdXxKwX-RohUrm8=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T6QHH2CQAAAMc2Ci6c41DtPUg2Lov0Nhk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T6rIpWCQAAALX3-XLT1Kb4IZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T6rk5NFgAAAGIhuX0BTNEaUQ2VLJMaEkdTTH2dP3vn1Q== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T6tTMVBwAAAJNqqSNHmQbp -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T6x0NtCgAAADpTl+a5bdJ-M879tp2bJJU=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T6xTURCAAAAJdy8urJEI0t -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T7DCb8CgAAAJpD5a3uL1q3-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T7N6FhCgAAALH0JIjKwAIU-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T7TQV5CwAAADXMiroI7bbvl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T85h5IEgAAAKq+j4yigGTgsUtWC-R+zDj8jwWzEK0YEQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T8ImHgDQAAACPHi7t9uT9g70ng3Z-ls-8=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T8IZVXDwAAAEatF6uM0dIAmzArQNq272I=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T8S2WmCwAAAKNy4ugAb2APrXGUV-E4PPU=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T8unadCgAAAGXXrJ+Ehwdw-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T8YbadFAAAAC7-d8LIc0SuQwii6XiUm0ZAiXrho0tG5g== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T9B-PpCQAAAKvr95O+Uqv9IZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T9FV1yCgAAACUFz0NwMfDS-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T9IlNfCQAAACJrtcmB0ftBIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T9k5epDAAAAFWnouWD+4oQQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T9l1jOEgAAANpmkMbXqpqTE4fm9LsQ4ODE2vN3wpXwZQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T9LlQrDwAAAD-4fAmP225qjf6616C6TcQ=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T9LmOCDQAAAKXg3J3ZZPoUC-ts2ezxLzo=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T9xGfZDAAAAKK5d4+jkZksDPuAbuwCyKs=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T9ZgwZCwAAAPVy9hMpci78l9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T9zLtqCAAAAEGtHsb5kJZm -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0T9zPU6CwAAAPnq1oi+96aOC-nsdmZjkz0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TA-4qCCAAAABaY7hFRfUpY -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Ta7EJYDAAAABdQ8weWfnme89yBk+AFfLI=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TADqmNDwAAAC5D6+CmywpnH-iCMp+GTsM=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TAgz6yCAAAAPEXXqHkW2YM -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TaLfr1EQAAAIR+CcTcgQDNnfEudWPayZghnT-k2hxdoQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TaomHdCwAAAANiJ5pkbYqql9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TaomKMBwAAAHjxuQBJV0yp -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TApfDhCgAAABW5FMAS3WG2M879tp2bJJU=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TaPmZ4DgAAACbrSjL0JQcNx+VMiPIQ6x4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TaPUR0CgAAAF0DEl7yqCP1-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TASJbQBgAAALeq-toBgnpj -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TAT2BrCgAAAF3Oz+tgsQN55O8-oA708FU=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TaTIqsDgAAAH9JeRa11tjHggkyPJVrzRo=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tauf7OCQAAAJjq1BMqp5JCIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TAUvWeDAAAAHLJfy8duXuxQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TAZopoCQAAABD9JUhmyY8FIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TbBXAbDAAAAOb4IjNSqFzyQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TbCg3bDwAAAIh1dNOrRJVhH-iCMp+GTsM=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TbcTzWCwAAAEM8xawo9-Ujl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TbekqlBgAAADoE94sJpFsI -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TBeY1HEAAAAHgkop3lAAbOp5h7S95I-GA=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TbL4FECQAAAED3FWStqoL3IZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TbRVuOCAAAAMMeSrndmXMr -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TBzNbjDwAAAKPhjPZuUxPpBGFZsQ-is50=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TbzwQ6DAAAAIQDFoRB98zvQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TbZz-SDAAAAMCMEL1nKuN7YuLrinoGoVw=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tc-AABEQAAAPaqCRovXdPW6QHq3xMRu8KfN4f4TocMIA== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tc2aPfCgAAAMaPjv1XzS3r-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TCCvfYDAAAAFgR343DB2++Q6Q8pu0wCC4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TcLZ0CCQAAAArVXjm6j0xxPUg2Lov0Nhk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TCMbNXDwAAAJSY7weKfP67LrqhWweES4o=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tcmg5gDAAAAPD5nHlcJcDg5ThlXuYeeNI=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TcnXZ3CgAAADHN7HiltJqf5O8-oA708FU=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TcWwZyBwAAAKjoVC7ZY35i -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Td0C93DQAAAGcRxh-x+Ov2xBokeN7f1-0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Td41sjDQAAAEawwYyqZ+aKKWULoJw4AgA=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TD62xlCwAAAH15FCP6nMVGl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TdAHBNDgAAAHqPxrU8V7rqpaRIRsp7P4s=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TDDb3wCAAAAFzPsOMHElQB -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TdDkIlCwAAACMTavhkCFJ6C-nsdmZjkz0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TdEm5UCwAAAJraDCusyOowr6wR2k70UYY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TdlcK3DQAAAHWQ-e6lrd0k0h0pUCAaWHI=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TdNYgADwAAAFSmuH0DzFd-payNu-mVmng=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TdPPYsDgAAAMnq34a99mHFMv1exA7x9do=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TDrbpGCwAAAHjRqHv6Sji5C-nsdmZjkz0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TDSoEJEgAAAMSF+lbISmNE6rcd71dE0dqW1jXVT4LBYA== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TDVKCbCQAAACFgQajpUyk-IZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TdyXKqCgAAAKvGDWoWNcPCM879tp2bJJU=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Te7QjZFAAAAHXYcf2j5LD+K2hhdQuNTeNAiXrho0tG5g== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TE8OwcEwAAAL3bK2IHqquLnr4w51pJQf-Ta9gEg3KCpg== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TeEChcDgAAAHBbbeuxFhCS36g-amRS9wY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TeiUiNCwAAAEdmYlR7UgOtC-nsdmZjkz0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TeL3PSDwAAAL1pD+r87K3QzOgxB1uV8Pg=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tem7QoCQAAABOWqwUNi4bPPUg2Lov0Nhk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TeS3V0DAAAAC7tX1hUWls2mb+C94lMWj4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TETePODAAAAGGX9q8Sh0E1QIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TevoNSDwAAAPvp2ZXjl+iZolCJeM7ufPs=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TezrpQEAAAAE6j00WTp6Yq8SaXXItnwy0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tf-6S8DQAAAFqomY80jjkr4IBxGv3YqHA=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TF3hEeDwAAAKpzDZcSqsf4PCEOFPgHYks=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TF4I3cDwAAAHPwKQoVeSFCLA-nPgK9QwM=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TFbIMFCAAAAF0DDNMrrBrX -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TfbLokCwAAAMGwF5Boi1Gf135WRuCcYj4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TfgAbgCgAAAIO8SxjJlGk9zBriqJCyAkY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TfIGl9DQAAAKNduxtcHevdsXvuB72oVW4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TfKn4tDwAAAHHDx+cxdQPWAaCiVNeJtec=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TFnGP5EQAAAP8wMBgMCa2UOMs89qVs0yOfN4f4TocMIA== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TfSuIaDAAAALxYRUIdoG+KYuLrinoGoVw=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TfzLg6BwAAALNMsDkw+f2g -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TFzsPjDgAAADPAdrdHmKQIbbXRkNiprDU=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tg214rCwAAANIuun02aKEEl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tg33HICQAAAB-yO9DFDOLyIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TG5bsoDQAAAFu+NTSIDtvm0h0pUCAaWHI=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tgaqi0CwAAADowG0Yz4weYl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TgBPGfDwAAAPd+zG6++RwMFH-R4O6aUTM=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TgC2MzCgAAAMEEleCIm0dk-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TGCg+zDwAAAJDZIitN2Aa5pHhrRYzDBC0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TGdrfZEAAAAI5aM6BNOdQHYosminJyBsU=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TgdZdODwAAADqv06fG-mIXAaCiVNeJtec=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TGetlqDwAAAB8xXZ+FW2K7YQKSYltf+aA=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tgfzn6CAAAAJ7wemcLHmWS -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TGG-UCCgAAAAAq7hkjjFZ2-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TggIv6DAAAAP7OGN6RMFZCQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TgHIS2DQAAAB04TqXFHOoiNJF2ioqmDt0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TgnOh+CgAAAP-HDqDT3vFO5O8-oA708FU=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TgO1LHEgAAAFougU5SmQ06RJwYC+Tlujr8jwWzEK0YEQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tgp+g6CQAAAH2lnkL2HWsTy2Ph0A0y1bU=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tgq17ECwAAADfu7it-SIGFSyI1XU+56GA=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TgqBemCwAAAHVPIZd6sLbJl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TgRTQ8DAAAADMQXv1XbEwtQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TGS83DCgAAALkXtTZ2LqSsbn+njkDhfXs=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Th+DG2DgAAALA2ecg0XPvUMYq+t8CZYIg=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TH-TN2DgAAAJ5pWOctJd2gYl0LaKe2g4Q=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TH3pG3DQAAAOLQCAvfRivY0IeN9w2Rx28=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Th8A+CDgAAANL8rMPWG0jMweHd6kD8v3A=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0ThLzGBCAAAABo21I5h2ZNm -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0THn33pDQAAALTesJQTyZSAx9EJPDhgwco=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tht9q0CQAAAG+dRHBXd5trIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0ThTn12DQAAAFoIhWIuHLv3jwk+lBjyNLs=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0ThUHSeFQAAACq0QpUL0eOSXiP0Za-8A+fSHSlQIBpYcg== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0THVCI9CgAAAD0Lz7e7vm3x-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TI+Uo4DQAAAGlMvuNljiqvihFk+g0ZZFo=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Ti4FwHCgAAAFvPg0QqtS3t-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tia8BYDAAAANm0FgcQeaqUQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TibaguCgAAACw3PrtulU5PltY11U+CwWA=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TiCLLqDAAAACsUBVO6LusvQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TIdw9BCAAAACW5GIJ-3gNX -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TiEEG7DQAAAOSkf5QZ+LB8QPT6vdxVOJk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tifoz+DQAAAHgYro1UNRtzw0LvxunBylI=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TiGjBHCgAAALSo6dKQzmDD-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TiP7msCwAAADKYQrSiZcjrl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tirgo4CQAAAOeK7wDeG3JEIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TIsgCIDAAAANt2gCluukvSylINuY1Lv+k=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TiSWcHDAAAAEj-3RgVF8SKQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TiUCjfCgAAAFt3YVtKrmOt-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TIUsbADQAAAMQLZbAIHk3YSHJyzgVXuoY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TiUzfNCQAAAONvp6Db8b9LgyfG9EBpVVk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TivI4gEQAAAB831m5KSXdi-ma5etkn7zFxXjyASd+GCw== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TIWJbcCwAAADBfr3zX9UFRl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tj+em7CwAAABiIxYTJOfx6r6wR2k70UYY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TJDHiyCQAAAAKZB7i3Lz5WIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TjHr5RCQAAALsAAAggjMsaIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TJiHw4DgAAAKXTwStkOQdCZCi-Zj78KDY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TjkFC-CwAAAKdSiApnSSjwl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TJLSmrCAAAALNjXgeOBb6T -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TjPKWwCwAAAEU54pQyoSjHC-nsdmZjkz0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TJv7+oDgAAAPutcRFmr8XYaGiXYZF2IaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TJZNx8DgAAAGD7UhrhXFobeqD06WmFmP0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tjzu9lCQAAADp-1aduX2CNIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TK0iRbCQAAAOwCTIiADT0LIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TK3pf9CwAAAKg6HyxHX8DI135WRuCcYj4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TK6mTqCQAAAP2DWgnTy3b-GL8F0EDpuDI=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tkf6raDAAAALMmrsrtqIndie2vCrDKZac=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TklmR3CwAAAK-C4w9PfAEil9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TKnycpDAAAANpRGG5Bxb1w1EOzPaEFAAc=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TKqTGLCAAAAD33qnRZHWid -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TKRxnHDAAAAGTJ1ckiI3+VQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TKUABIDAAAAPmNG5Wn9g+PQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TKws5zEgAAAIERvraOZvzsOUrbfKMpaNv8jwWzEK0YEQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tl1A3QBwAAABQ6SKuXXMVU -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tl9sskEgAAALOinPrS6f2Qlf2R49Jff-gzzv22nZsklQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tl9TeyDgAAALjn0dPVSbpqTDWq1vXhJtk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TLbb3aEAAAAFf++ob+07fJG1HC5cD9Xwk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TLErsRDQAAAOHlXjfuKcmFkLr7Jt60bcA=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TleuayCQAAAHqQDzRnP54fIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TLIyviDwAAAAuvqzzjoFxyQq5HSVcCJg0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TLL8KzDQAAAGAWeQzLAdjv8jK1UGXqByg=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TlMFVlCgAAAMFG2aLDXdPq-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TLOPcTDQAAAI+lcIyp5K3RWDHFzvtoiwQ=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TlOR2IDQAAAGNzkQ60vMYr4XVZQ88Ghn8=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TlqHviCwAAAIuaDIJ+hoVBSyI1XU+56GA=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TlSqEjCwAAAFZxkVPz9QKNDQ109l1GQ5U=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tlu8xnDgAAAO+vuKyAtsIP+EK4-l2Uids=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TLWdBhFQAAAM6GCy6tWyAcJOWv41Kp13+Quvsm3rRtwA== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TM+BPPDQAAAGWruXVe4604u74rNrw6FNQ=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TM+HfODwAAAOxPrQ6w62VDzg1vbUC0mVU=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tm3Qg-DAAAAKbVrKlMuo+o805byqyWMlk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tm9NIgCQAAAFKNRGtt1igvIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TMAo6bEAAAAKR+SIAGoSB6lAmCK-3N7yk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TMjPrtEAAAAFm5C-+BmNT4UbieOQQsk5o=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TmjtbBCwAAAEdFeOwNpmEV135WRuCcYj4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TMO8HbEAAAAErzTuI7Z4h7doybxUSd6-8=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TMouyEEwAAANU3gbTfm1VynS++gPn3Wz0L+ex2ZmOTPQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TMOWsyEgAAAFqtw+GtVoBrVykAo28gEivk7z+gDvTwVQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TMPvL4DgAAAEOuyZfJn-OCjUS4Pxmvqhk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TmqfcWBgAAAP+ooNdD4aHM -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tmr0k4DAAAAOR2TJharooJQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TmVTAsDwAAAOQC+Eg9W-u+HX8rkF-Ybyg=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TMYcWdDAAAAK1yhmMy-KuWQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TMYJKACQAAANLbN0dWQoFfIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TMZ6etDgAAANutQY9QE9RCXmMKBkumeR0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TMzYbSCgAAAJYfGyXxK8Q3-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TNBhMSCQAAAGU2K3ifU7P2IZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tnc4lnCQAAAH1CavK-XUJKIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TnCXZREAAAABxLb0ebHrpZ1ApY-2rRQ2M=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TnIiSiCAAAAGpMFZy0ivHd -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TniyBFDwAAACD+g5gwdlCEXjU31lZd31w=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TNk6z-CwAAAMfjqF+0jUjjl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TnNlVrDAAAAC8+MVhbNicqQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TNOIUSCQAAAM4YoKOB2jKpGL8F0EDpuDI=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TNtEp6CQAAAOSCW1iVqfClIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TnYQQ9DAAAADFn03E9spY8QIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TNzAGODAAAAP2U8WTzhgCDQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0To5l5QBgAAAHsqcnFA9IPS -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TO9v-pDgAAAIdWSehDTwntmyS0BDCJ7HA=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TobjThBwAAAI6jLXgfBtWy -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TOclmiDQAAAFf9zrl2Bp-NsXvuB72oVW4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0ToeOnDCwAAAOqCwfGNpjWbl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TOkrRbCQAAACM9Ey7AjBXBPUg2Lov0Nhk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TOlVEdCgAAAFjdSCsKIgNdltY11U+CwWA=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0ToNAQbCgAAAE3h7XS4I+CA-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0ToNVa3DAAAAHc76Jj5E0MsQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TOpFd4CQAAAMUpfV-+R92-IZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0ToSrdMCQAAABlX37uZ28YoC0B8iS1zC94=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Toszl+CgAAAJc3xVXKk0j1M879tp2bJJU=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0ToWGKUCwAAAHtGY0bkgXP0l9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tp0D2ZCwAAAB6C2Kx+8xtMl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tp32kCDAAAANg2eRXZc3s6QIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tp5DlXCQAAAFvqPiatzq-vPUg2Lov0Nhk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TP5Rv1DQAAABPiBFcN54DtKWULoJw4AgA=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TP6PofCQAAAAVpqxGQtHj1in32xIPdvxs=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TP760tBwAAAEKUKp8DHJ11 -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TP8l1HCwAAAOuO+kn2IyusC-nsdmZjkz0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TpCMNUFgAAAG8g+JxS8z1IaojgvOf1MoDqIRocWLHZzw== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TpcNlECAAAAFqsUqj77OY7 -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TpEA60CgAAAGhrw1MzM+zA-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tpj-bJCgAAAOZzIEZzgQPp-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TpL1zCDwAAAD9EpMF3M5My9Dd6KSyXFAE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TPMu2MCQAAACFha5WgZ4T8IZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TPnVNQCQAAAN1+ZcIhl6rdIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TprN7cDAAAABh0fMrAZmcJQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TPTjhtFQAAABhtx4uvhT24yfqUL8RXzmLSHSlQIBpYcg== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TPVj8oDgAAAHOsMnAHxeYExEeiV5FJGvo=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TPVJQKEgAAADNBEKN9k-KecTzZEXKE6m38jwWzEK0YEQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TpxIjoCQAAAHFeBuZbkmHWIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TQ5nvJCQAAAFJKKGn7TZYPIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tq6e6xCQAAACeZljwNaYj3IZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TQ9ZDrCwAAAPREtCrXQ-ILl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TQc9jZEgAAACf60Pc44mfn-jAX1Vq7PdX8jwWzEK0YEQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TQgTSLDQAAADCt22E81KQPkLr7Jt60bcA=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TQI29FDQAAAAh0KQ-djmtw6+d4UhhrlY8=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TqK-n3DQAAAI+lcIyp5K3Rdi6D0LmUR3M=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TQkclJCAAAAJy3kSudV+dz -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TQofzLBwAAAKZohGdp9uIQ -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TqQ-+CDgAAAEIAJW0PCdqCpUb+XDkk+8A=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TQsXR1CgAAAIGBRhEcBeTxzBriqJCyAkY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tqxl2pEQAAACZ9BCck54wIZtfMAX+xH7AhnT-k2hxdoQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TqzTSRBwAAANdkUVHnDnGI -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tr01xXEQAAAJqcKXBFkzjJ1TmE5Q+Tx5EhnT-k2hxdoQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tr1OeUEQAAAPpADFXxu5QIKQ6nU2rDAbOfN4f4TocMIA== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TR5XK4DAAAAH+D+LVypdlIQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TrjNM2EgAAAL0mNX9A5e4CA2Bnd7JRjYDk7z+gDvTwVQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TrMAmCDAAAADVeEb1cxfFqQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TRNsxTCAAAAHTo0tf9PqB9 -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TRqNRbCAAAAHa0aSeoPFtH -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TRw8-tCgAAAE7g5Hz+3aBk-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TrWlaaBwAAAKcSGWCYF0Tq -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TrzISuDwAAANyOgyi2i6p101iYXwTCqNM=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TrZkqBEAAAAOP677kUMpTKqtPC8bUIoFQ=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TRZNHlDQAAAHqSqt2oDp3eZXtJHCgVpuI=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TSblMaDwAAAPOB8eKtRwQVVyDaefpbvZ8=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TsC6AyCAAAADuTPu4wErMW -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TSeCPFDQAAAJ2nyoItQYvzG-CllUDxvzk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tsg9MpDAAAAF8Z4q8VYKI3QIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TSiA6JDwAAAPclxaCksGw0eJqLxi+3O-4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TSQiz-CwAAAAQC42OC-+Thl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TstBjWCQAAAFT3hhqV+1DHPUg2Lov0Nhk=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TSw0WdBwAAAFsC7uJmuE+o -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TSXsYtDAAAALTKdeMoJ0hXYuLrinoGoVw=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TT1TH8CQAAAEE97GSRxKmBIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TT4i2pCAAAAKKmX5vELXcB -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tt6IJ5CgAAADuOn2CEpw1T-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tt7eQRCwAAACzMmSkFM3jTl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TthcKtDAAAAFGM-HARHWblQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TtHKwZCwAAAI2rSIc8dm4fl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TTk62XEgAAAL9o2sTqztqnKDNyC6xwXxD8jwWzEK0YEQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TTMv8vCAAAAKp0nyBHPEve -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TTrcVgDAAAAA1rTeLQizY8QIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Ttt4CpDgAAAAhXxr3F7+pyCrCSTY8Boxs=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TtwY8BCgAAAL1lHc+SGg-l-I8FsxCtGBE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TuAtbcCQAAABuwMaECuVhc0tQq+Ll6gl4=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0Tulo3TDQAAAJLa0hiKRwvXxBokeN7f1-0=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TumB2VDQAAAHQU5n+OpH6hSxX1JoYup+k=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TunJ8mEgAAAGVri5+hD32lSx6baJNmShv8jwWzEK0YEQ== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TUo1AzCQAAAN4pS3jT4PR6IZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TuPrGfBwAAAK-zJrvOITMA -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TUrnkUCwAAAOp+2vVwgLyRl9q95W4e9wE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TUTE70CwAAAKfy9+lzuzrvPF6p604a7WQ=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TuTp0qCQAAAE+jwzRvNfiPIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TUUN7dDgAAAMwTela0gjeepUb+XDkk+8A=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TuXfJUEAAAAB+viN-69JFpSWMQD5KDPEU=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TUZ2LMDAAAADSMdjtUKrXsYuLrinoGoVw=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TV2MKNDwAAAEOWNKgdkcNKqSkg85nN8EI=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TvAgg1DAAAANQsyKxHyXUwQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TVCUDnDAAAAMbIjlyKlzRFQIl64aNLRuY=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TVCvLuCQAAABJa9njQXw6iIZ0-5NocXaE=== -> Adware.Gator : Cleaned with backup
HKLM\SOFTWARE\Gator.com\Gator\stat\GMT\GD\Q0TVd-rLDwAAAGKlyHvasadOAaCiVNeJtec=== -> Adware.Gator
#18
dickychan345
-
- Authentic Member
-
- 17 posts
New Member
Posted 27 May 2006 - 12:41 PM
2.HijackThis Log
Logfile of HijackThis v1.99.1
Scan saved at 2:20:28 AM, on 5/28/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
E:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
E:\Program Files\Norton AntiVirus\navapsvc.exe
E:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
E:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
E:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
E:\Program Files\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
C:\WINDOWS\system32\ctfmon.exe
E:\Program Files\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\LG PC Suite\LG PC Sync\LGSyncManager.exe
C:\WINDOWS\system32\sistray.exe
E:\Program Files\Digital Imaging\bin\hpqSTE08.exe
E:\Program Files\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\system32\wuauclt.exe
E:\HijackThis.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - E:\Program Files\ICQToolbar\toolbaru.dll
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: QQBrowserHelperObject Class - {54EBD53A-9BC1-480B-966A-843A333CA162} - e:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - E:\PROGRA~1\FLASHGET\jccatch.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - E:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - E:\Program Files\ICQToolbar\toolbaru.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [HP Software Update] E:\Program Files\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SvcHost] C:\WINDOWS\$NtServicePackUninstall$\svchost.exe
O4 - HKLM\..\Run: [VisualBasic] C:\WINDOWS\scress.exe
O4 - HKLM\..\Run: [MDN] C:\WINDOWS\mdn.exe
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - Startup: ??QQ.lnk
O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = E:\Program Files\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: LG SyncManager.lnk = C:\Program Files\LG PC Suite\LG PC Sync\LGSyncManager.exe
O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &ICQ Toolbar Search - res://E:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: &Search - http://edits.mywebse...?p=ZCxdm649DZHK
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: 上?到QQ网?硬? - E:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 上?到QQ网?硬? - E:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用 FlashGet 下載 - E:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 全部使用 FlashGet 下載 - E:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 匯出至 Microsoft Excel(&X) - res://E:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: 妏蚚刲僩眻籵陬狟婥 - C:\PROGRA~1\P4P\dl.htm
O8 - Extra context menu item: 添加到QQ自定?面板 - E:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ自定?面板 - E:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - E:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信?送??片 - E:\Program Files\Tencent\QQ\SendMMS.htm
O8 - Extra context menu item: 用QQ彩信?送??片 - E:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite2\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite2\ICQLite.exe
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - e:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: ??QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - e:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - e:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ?¯±m?u‥a??﹐m - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - e:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O16 - DPF: HKJC Applet - https://bet.hongkong.../ib/ch/HKJC.cab
O16 - DPF: i.Game MJImpressYHK - http://202.43.223.14...JImpressYHK.cab
O16 - DPF: JT's Blocks - http://download.game...ts/y/blt1_x.cab
O16 - DPF: Yahoo! Dominoes - http://download.game...ts/y/dot8_x.cab
O16 - DPF: Yahoo! MahJong Solitaire - http://download.game...s/y/mjst4_x.cab
O16 - DPF: Yahoo! Pool 2 - http://download.game...ts/y/potg_x.cab
O16 - DPF: {003FACAF-40CB-4358-96D2-B0D8CEF4DBF5} (SKeyHelper Class) - https://bet.hongkong...ab/EWinSKey.CAB
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zon...kr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfar...tup1.0.0.15.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zon...er.cab31267.cab
O16 - DPF: {3AC7F64E-6154-47B0-82B5-764ED4077F77} (DataStorage Class) - http://txn.hkjc.com/.../HKJCSecKey.cab
O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} (YazzleActiveX Control) - http://yax-download.....cab?refid=1123
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zon...ro.cab32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zon...wn.cab31267.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: winpsa32 - winpsa32.dll (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - E:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - E:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - E:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - E:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - E:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - E:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
Logfile of HijackThis v1.99.1
Scan saved at 2:20:28 AM, on 5/28/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
E:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
E:\Program Files\Norton AntiVirus\navapsvc.exe
E:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
E:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
E:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
E:\Program Files\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
C:\WINDOWS\system32\ctfmon.exe
E:\Program Files\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\LG PC Suite\LG PC Sync\LGSyncManager.exe
C:\WINDOWS\system32\sistray.exe
E:\Program Files\Digital Imaging\bin\hpqSTE08.exe
E:\Program Files\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\system32\wuauclt.exe
E:\HijackThis.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - E:\Program Files\ICQToolbar\toolbaru.dll
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: QQBrowserHelperObject Class - {54EBD53A-9BC1-480B-966A-843A333CA162} - e:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - E:\PROGRA~1\FLASHGET\jccatch.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - E:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - E:\Program Files\ICQToolbar\toolbaru.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [HP Software Update] E:\Program Files\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SvcHost] C:\WINDOWS\$NtServicePackUninstall$\svchost.exe
O4 - HKLM\..\Run: [VisualBasic] C:\WINDOWS\scress.exe
O4 - HKLM\..\Run: [MDN] C:\WINDOWS\mdn.exe
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - Startup: ??QQ.lnk
O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = E:\Program Files\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: LG SyncManager.lnk = C:\Program Files\LG PC Suite\LG PC Sync\LGSyncManager.exe
O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &ICQ Toolbar Search - res://E:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: &Search - http://edits.mywebse...?p=ZCxdm649DZHK
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: 上?到QQ网?硬? - E:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 上?到QQ网?硬? - E:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用 FlashGet 下載 - E:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 全部使用 FlashGet 下載 - E:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 匯出至 Microsoft Excel(&X) - res://E:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: 妏蚚刲僩眻籵陬狟婥 - C:\PROGRA~1\P4P\dl.htm
O8 - Extra context menu item: 添加到QQ自定?面板 - E:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ自定?面板 - E:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - E:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信?送??片 - E:\Program Files\Tencent\QQ\SendMMS.htm
O8 - Extra context menu item: 用QQ彩信?送??片 - E:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite2\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite2\ICQLite.exe
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - e:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: ??QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - e:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - e:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ?¯±m?u‥a??﹐m - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - e:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O16 - DPF: HKJC Applet - https://bet.hongkong.../ib/ch/HKJC.cab
O16 - DPF: i.Game MJImpressYHK - http://202.43.223.14...JImpressYHK.cab
O16 - DPF: JT's Blocks - http://download.game...ts/y/blt1_x.cab
O16 - DPF: Yahoo! Dominoes - http://download.game...ts/y/dot8_x.cab
O16 - DPF: Yahoo! MahJong Solitaire - http://download.game...s/y/mjst4_x.cab
O16 - DPF: Yahoo! Pool 2 - http://download.game...ts/y/potg_x.cab
O16 - DPF: {003FACAF-40CB-4358-96D2-B0D8CEF4DBF5} (SKeyHelper Class) - https://bet.hongkong...ab/EWinSKey.CAB
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zon...kr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfar...tup1.0.0.15.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zon...er.cab31267.cab
O16 - DPF: {3AC7F64E-6154-47B0-82B5-764ED4077F77} (DataStorage Class) - http://txn.hkjc.com/.../HKJCSecKey.cab
O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} (YazzleActiveX Control) - http://yax-download.....cab?refid=1123
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zon...ro.cab32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zon...wn.cab31267.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: winpsa32 - winpsa32.dll (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - E:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - E:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - E:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - E:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - E:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - E:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
#19
LDTate
-
- Root Admin
-
- 57,211 posts
Grand Poobah
Posted 27 May 2006 - 12:53 PM
I suggest you do this:
Please do not delete anything unless instructed to.
1.Click Start > Settings > Control Panel.
2.Next, open Add/Remove Programs and remove if listed:
MyWebSearch
Run hijackthis. Hit None of the above, Click Do a System Scan Only. Put a Check in the box on the left side on these:
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O4 - HKLM\..\Run: [SvcHost] C:\WINDOWS\$NtServicePackUninstall$\svchost.exe
O4 - HKLM\..\Run: [VisualBasic] C:\WINDOWS\scress.exe
O4 - HKLM\..\Run: [MDN] C:\WINDOWS\mdn.exe
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe
O8 - Extra context menu item: &Search - http://edits.mywebse...?p=ZCxdm649DZHK
O16 - DPF: HKJC Applet - https://bet.hongkong.../ib/ch/HKJC.cab
O16 - DPF: i.Game MJImpressYHK - http://202.43.223.14...JImpressYHK.cab
O16 - DPF: {003FACAF-40CB-4358-96D2-B0D8CEF4DBF5} (SKeyHelper Class) - https://bet.hongkong...ab/EWinSKey.CAB
O16 - DPF: {3AC7F64E-6154-47B0-82B5-764ED4077F77} (DataStorage Class) - http://txn.hkjc.com/.../HKJCSecKey.cab
O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} (YazzleActiveX Control) - http://yax-download.....cab?refid=1123
O20 - Winlogon Notify: winpsa32 - winpsa32.dll (file missing)
Close ALL windows and browsers except HijackThis and click "Fix checked"
Delete these Files if listed:
C:\WINDOWS\scress.exe
C:\WINDOWS\mdn.exe
Delete this Folder if listed:
C:\Program Files\Common Files\GMT
Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»
This program is for XP and Windows 2000 only
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
Reboot and "copy/paste" a new HijackThis log file into this thread.
Also please describe how your computer behaves at the moment.
Please do not delete anything unless instructed to.
1.Click Start > Settings > Control Panel.
2.Next, open Add/Remove Programs and remove if listed:
MyWebSearch
Run hijackthis. Hit None of the above, Click Do a System Scan Only. Put a Check in the box on the left side on these:
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O4 - HKLM\..\Run: [SvcHost] C:\WINDOWS\$NtServicePackUninstall$\svchost.exe
O4 - HKLM\..\Run: [VisualBasic] C:\WINDOWS\scress.exe
O4 - HKLM\..\Run: [MDN] C:\WINDOWS\mdn.exe
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe
O8 - Extra context menu item: &Search - http://edits.mywebse...?p=ZCxdm649DZHK
O16 - DPF: HKJC Applet - https://bet.hongkong.../ib/ch/HKJC.cab
O16 - DPF: i.Game MJImpressYHK - http://202.43.223.14...JImpressYHK.cab
O16 - DPF: {003FACAF-40CB-4358-96D2-B0D8CEF4DBF5} (SKeyHelper Class) - https://bet.hongkong...ab/EWinSKey.CAB
O16 - DPF: {3AC7F64E-6154-47B0-82B5-764ED4077F77} (DataStorage Class) - http://txn.hkjc.com/.../HKJCSecKey.cab
O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} (YazzleActiveX Control) - http://yax-download.....cab?refid=1123
O20 - Winlogon Notify: winpsa32 - winpsa32.dll (file missing)
Close ALL windows and browsers except HijackThis and click "Fix checked"
Delete these Files if listed:
C:\WINDOWS\scress.exe
C:\WINDOWS\mdn.exe
Delete this Folder if listed:
C:\Program Files\Common Files\GMT
Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»
This program is for XP and Windows 2000 only
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
Reboot and "copy/paste" a new HijackThis log file into this thread.
Also please describe how your computer behaves at the moment.
The forum is run by volunteers who donate their time and expertise.
Want to help others? Join the ClassRoom and learn how.
Logs will be closed if you haven't replied within 3 days
If you would like to 
for the help you received.
Proud graduate of TC/WTT Classroom
#20
dickychan345
-
- Authentic Member
-
- 17 posts
New Member
Posted 27 May 2006 - 01:08 PM
How my computer behaves this moment?? 
I am not good at 'computer' and dont know how to describe...lol,but it seems better,thanks
here is the HijackThis Log
Logfile of HijackThis v1.99.1
Scan saved at 3:02:30 AM, on 5/28/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
E:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
E:\Program Files\Norton AntiVirus\navapsvc.exe
E:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
E:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
E:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
E:\Program Files\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
E:\Program Files\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\LG PC Suite\LG PC Sync\LGSyncManager.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Messenger\msmsgs.exe
E:\Program Files\Digital Imaging\bin\hpqSTE08.exe
E:\Program Files\HKBN Connection\HKBN Connector 2.0a.exe
E:\Program Files\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
E:\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: QQBrowserHelperObject Class - {54EBD53A-9BC1-480B-966A-843A333CA162} - e:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - E:\PROGRA~1\FLASHGET\jccatch.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - E:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - E:\Program Files\ICQToolbar\toolbaru.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [HP Software Update] E:\Program Files\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: ??QQ.lnk
O4 - Global Startup: HP Digital Imaging Monitor.lnk = E:\Program Files\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: LG SyncManager.lnk = C:\Program Files\LG PC Suite\LG PC Sync\LGSyncManager.exe
O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &ICQ Toolbar Search - res://E:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: 上?到QQ网?硬? - E:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 上?到QQ网?硬? - E:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用 FlashGet 下載 - E:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 全部使用 FlashGet 下載 - E:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 匯出至 Microsoft Excel(&X) - res://E:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: 妏蚚刲僩眻籵陬狟婥 - C:\PROGRA~1\P4P\dl.htm
O8 - Extra context menu item: 添加到QQ自定?面板 - E:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ自定?面板 - E:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - E:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信?送??片 - E:\Program Files\Tencent\QQ\SendMMS.htm
O8 - Extra context menu item: 用QQ彩信?送??片 - E:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite2\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite2\ICQLite.exe
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - e:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: ??QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - e:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - e:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ?¯±m?u‥a??﹐m - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - e:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O16 - DPF: JT's Blocks - http://download.game...ts/y/blt1_x.cab
O16 - DPF: Yahoo! Dominoes - http://download.game...ts/y/dot8_x.cab
O16 - DPF: Yahoo! MahJong Solitaire - http://download.game...s/y/mjst4_x.cab
O16 - DPF: Yahoo! Pool 2 - http://download.game...ts/y/potg_x.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zon...kr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfar...tup1.0.0.15.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zon...er.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zon...ro.cab32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zon...wn.cab31267.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - E:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - E:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - E:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - E:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - E:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - E:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
I am not good at 'computer' and dont know how to describe...lol,but it seems better,thanks here is the HijackThis Log
Logfile of HijackThis v1.99.1
Scan saved at 3:02:30 AM, on 5/28/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
E:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
E:\Program Files\Norton AntiVirus\navapsvc.exe
E:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
E:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
E:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
E:\Program Files\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
E:\Program Files\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\LG PC Suite\LG PC Sync\LGSyncManager.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Messenger\msmsgs.exe
E:\Program Files\Digital Imaging\bin\hpqSTE08.exe
E:\Program Files\HKBN Connection\HKBN Connector 2.0a.exe
E:\Program Files\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
E:\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: QQBrowserHelperObject Class - {54EBD53A-9BC1-480B-966A-843A333CA162} - e:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - E:\PROGRA~1\FLASHGET\jccatch.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - E:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - E:\Program Files\ICQToolbar\toolbaru.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - E:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [HP Software Update] E:\Program Files\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: ??QQ.lnk
O4 - Global Startup: HP Digital Imaging Monitor.lnk = E:\Program Files\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: LG SyncManager.lnk = C:\Program Files\LG PC Suite\LG PC Sync\LGSyncManager.exe
O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &ICQ Toolbar Search - res://E:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: 上?到QQ网?硬? - E:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 上?到QQ网?硬? - E:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用 FlashGet 下載 - E:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 全部使用 FlashGet 下載 - E:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 匯出至 Microsoft Excel(&X) - res://E:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: 妏蚚刲僩眻籵陬狟婥 - C:\PROGRA~1\P4P\dl.htm
O8 - Extra context menu item: 添加到QQ自定?面板 - E:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ自定?面板 - E:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - E:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信?送??片 - E:\Program Files\Tencent\QQ\SendMMS.htm
O8 - Extra context menu item: 用QQ彩信?送??片 - E:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite2\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite2\ICQLite.exe
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - e:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: ??QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - e:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - e:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ?¯±m?u‥a??﹐m - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - e:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O16 - DPF: JT's Blocks - http://download.game...ts/y/blt1_x.cab
O16 - DPF: Yahoo! Dominoes - http://download.game...ts/y/dot8_x.cab
O16 - DPF: Yahoo! MahJong Solitaire - http://download.game...s/y/mjst4_x.cab
O16 - DPF: Yahoo! Pool 2 - http://download.game...ts/y/potg_x.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zon...kr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfar...tup1.0.0.15.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zon...er.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zon...ro.cab32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zon...wn.cab31267.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - E:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - E:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - E:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - E:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - E:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - E:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
#21
LDTate
-
- Root Admin
-
- 57,211 posts
Grand Poobah
Posted 27 May 2006 - 01:15 PM
Good Job 
Log looks good How is it running any issues?
You need to create a new Clean restore point.
Note: This will remove all previous Restore Points
Turn off System Restore:
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.
Restart your computer, turn it back on.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Remove the Check Turn off System Restore.
Click Apply, and then click OK.
Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Check "Hide file extensions for known file types."
Under the "Hidden files" folder, Uncheck "Show hidden files and folders."
Check "Hide protected operating system files."
Click Apply, and then click OK.
If you dont have these programs I would recommend that you get them. Spywareblaster, Spywareguard. They will add 1000's of sites to your resticted zone and block some hijacks from happening. I also have a FREE FIREWALL and FREE ANTI VIRUS if you need one.
It is critical to have both a firewall and anti virus to protect your system.
Keep your system up to date and run Adaware & Spybot, once a week works, and hopefully you will be ok from here on. Both are available below.
Safe Surfing.
I would also suggest you read this:
So how did I get infected in the first place?
by Tony Klein
Log looks good
How is it running any issues?You need to create a new Clean restore point.
Note: This will remove all previous Restore Points
Turn off System Restore:
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.
Restart your computer, turn it back on.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Remove the Check Turn off System Restore.
Click Apply, and then click OK.
Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Check "Hide file extensions for known file types."
Under the "Hidden files" folder, Uncheck "Show hidden files and folders."
Check "Hide protected operating system files."
Click Apply, and then click OK.
If you dont have these programs I would recommend that you get them. Spywareblaster, Spywareguard. They will add 1000's of sites to your resticted zone and block some hijacks from happening. I also have a FREE FIREWALL and FREE ANTI VIRUS if you need one.
It is critical to have both a firewall and anti virus to protect your system.
Keep your system up to date and run Adaware & Spybot, once a week works, and hopefully you will be ok from here on. Both are available below.
Safe Surfing.
I would also suggest you read this:
So how did I get infected in the first place?
by Tony Klein
The forum is run by volunteers who donate their time and expertise.
Want to help others? Join the ClassRoom and learn how.
Logs will be closed if you haven't replied within 3 days
If you would like to for the help you received.
Proud graduate of TC/WTT Classroom
#22
dickychan345
-
- Authentic Member
-
- 17 posts
New Member
Posted 27 May 2006 - 01:29 PM
Thanks alot
I am installing those programs 
I will be more careful and prevent another time for bothering u again 
I am installing those programs
I will be more careful and prevent another time for bothering u again
#23
LDTate
-
- Root Admin
-
- 57,211 posts
Grand Poobah
Posted 27 May 2006 - 01:53 PM
Great job
You're more then welcome.
Glad we were able to help
Peace be with you 
You're more then welcome.
Glad we were able to help
Peace be with you
The forum is run by volunteers who donate their time and expertise.
Want to help others? Join the ClassRoom and learn how.
Logs will be closed if you haven't replied within 3 days
If you would like to for the help you received.
Proud graduate of TC/WTT Classroom
#24
LDTate
-
- Root Admin
-
- 57,211 posts
Grand Poobah
Posted 27 May 2006 - 02:04 PM
Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.
Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.
Coyote's Installed programs for prevention:
http://forums.tomcoy...showtopic=31418
The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.
Visit the CoyoteStore http://TomCoyote.org/coyotestore.php
Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.
Coyote's Installed programs for prevention:
http://forums.tomcoy...showtopic=31418
The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.
Visit the CoyoteStore http://TomCoyote.org/coyotestore.php
The forum is run by volunteers who donate their time and expertise.
Want to help others? Join the ClassRoom and learn how.
Logs will be closed if you haven't replied within 3 days
If you would like to for the help you received.
Proud graduate of TC/WTT Classroom
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users
