Spyware / Malware / Virus Removal

[Resolved] (win32/rootkit.agent.odg trojan)

75 min read

Looking for the outcome? Ask AI

7e5PE Topic Starter

Post #1August 12, 2009, 4:15 PM UTC

i've followed your instructions and got the DDS logs and gmer log that you need for analysis. i have the same problem with krunkdog. could you please help me with this.. thanks.

Attachments:

CatByte

Post #2August 12, 2009, 4:25 PM UTC

Hi,

Please do the following

Download Combofix from either of the links below. You must rename it before saving it.
Save it to your desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved and renamed following this process directly to your desktop**

If you are using Firefox, make sure that your download settings are as follows:
Tools->Options->Main tab
Set to "Always ask me where to Save the files".

Link 1
Link 2

During the download, rename Combofix to Combo-Fix as follows:

[external image: Posted Image]

[external image: Posted Image]
——————————————————————–

It is important you rename Combofix during the download, but not after.
Please do not rename Combofix to other names, but only to the one indicated.

———————————————————–

Double click on Combo-Fix.exe & follow the prompts.
- When finished, it will produce a report for you.
- Please post the "C:\Combo-Fix.txt" for further review.
**Note: Do not mouseclick combo-fix's window while it's running. That may cause it to stall**

———————————————————–
Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.

———————————————————–

NOTE: ComboFix shall request to install the Recovery Console, please ALLOW it to do so.

7e5PE

Post #3August 12, 2009, 5:28 PM UTC

ComboFix 09-08-10.06 - pc 08/13/2009 1:48.1.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3071.2698 [GMT -7:00]
Running from: c:\documents and settings\[removed]\Desktop\Combo-Fix.exe
AV: BitDefender Antivirus *On-access scanning disabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: BitDefender Firewall *disabled* {4055920F-2E99-48A8-A270-4243D2B8F242}
* Resident AV is active

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\All Users\Application Data\SeekappSrch
c:\documents and settings\All Users\Application Data\SeekappSrch\seekapp145.exe
c:\program files\FunWebProducts
c:\program files\FunWebProducts\Shared\Cache\CursorManiaBtn-new.html
c:\program files\FunWebProducts\Shared\Cache\CursorManiaBtn.html
c:\program files\FunWebProducts\Shared\Cache\SmileyCentralBtn-new.html
c:\program files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html
c:\program files\Internet Saving Optimizer
c:\program files\Internet Saving Optimizer\3.4.0.4340\adwpx.exe
c:\program files\Internet Saving Optimizer\3.4.0.4340\Data\config.md
c:\program files\Internet Saving Optimizer\3.4.0.4340\FF\chrome.manifest
c:\program files\Internet Saving Optimizer\3.4.0.4340\FF\chrome\content\NPAddOn.js
c:\program files\Internet Saving Optimizer\3.4.0.4340\FF\chrome\content\NPAddOn.xul
c:\program files\Internet Saving Optimizer\3.4.0.4340\FF\chrome\NPAddOn.jar
c:\program files\Internet Saving Optimizer\3.4.0.4340\FF\components\NPFFAddOn.dll
c:\program files\Internet Saving Optimizer\3.4.0.4340\FF\components\NPFFAddOn.xpt
c:\program files\Internet Saving Optimizer\3.4.0.4340\FF\components\NPFFHelperComponent.js
c:\program files\Internet Saving Optimizer\3.4.0.4340\FF\install.rdf
c:\program files\Internet Saving Optimizer\3.4.0.4340\NPCommon.dll
c:\program files\Internet Saving Optimizer\3.4.0.4340\NPIEAddOn.dll
c:\program files\Internet Saving Optimizer\3.4.0.4340\unins000.dat
c:\program files\Internet Saving Optimizer\3.4.0.4340\unins000.exe
c:\program files\Media Access Startup
c:\program files\Media Access Startup\1.5.0.850\Data\config.md
c:\program files\Media Access Startup\1.5.0.850\FF\chrome.manifest
c:\program files\Media Access Startup\1.5.0.850\FF\chrome\content\HPAddOn.js
c:\program files\Media Access Startup\1.5.0.850\FF\chrome\content\HPAddOn.xul
c:\program files\Media Access Startup\1.5.0.850\FF\chrome\HPAddOn.jar
c:\program files\Media Access Startup\1.5.0.850\FF\components\HPFFAddOn.dll
c:\program files\Media Access Startup\1.5.0.850\FF\components\HPFFAddOn.xpt
c:\program files\Media Access Startup\1.5.0.850\FF\components\HPFFHelperComponent.js
c:\program files\Media Access Startup\1.5.0.850\FF\install.rdf
c:\program files\Media Access Startup\1.5.0.850\HPCommon.dll
c:\program files\Media Access Startup\1.5.0.850\HPIEAddOn.dll
c:\program files\Media Access Startup\1.5.0.850\hppx.exe
c:\program files\Media Access Startup\1.5.0.850\MAHelper.exe
c:\program files\Media Access Startup\1.5.0.850\unins000.dat
c:\program files\Media Access Startup\1.5.0.850\unins000.exe
c:\program files\MyWebSearch
c:\program files\MyWebSearch\bar\2.bin\F3BKGERR.JPG
c:\program files\MyWebSearch\bar\2.bin\F3HKSTUB.DLL
c:\program files\MyWebSearch\bar\2.bin\F3REGHK.DLL
c:\program files\MyWebSearch\bar\2.bin\F3SPACER.WMV
c:\program files\MyWebSearch\bar\2.bin\F3WALLPP.DAT
c:\program files\MyWebSearch\bar\2.bin\F3WPHOOK.DLL
c:\program files\MyWebSearch\bar\2.bin\FWPBUDDY.PNG
c:\program files\MyWebSearch\bar\2.bin\M3FFXTBR.JAR
c:\program files\MyWebSearch\bar\2.bin\M3FFXTBR.MANIFEST
c:\program files\MyWebSearch\bar\2.bin\M3HIGHIN.EXE
c:\program files\MyWebSearch\bar\2.bin\M3IMPIPE.EXE
c:\program files\MyWebSearch\bar\2.bin\M3MEDINT.EXE
c:\program files\MyWebSearch\bar\2.bin\M3NTSTBR.MANIFEST
c:\program files\MyWebSearch\bar\2.bin\M3SKPLAY.EXE
c:\program files\MyWebSearch\bar\2.bin\M3SRCHMN.EXE
c:\program files\MyWebSearch\bar\2.bin\MWSBAR.DLL
c:\program files\MyWebSearch\bar\2.bin\MWSOEPLG.DLL
c:\program files\MyWebSearch\bar\2.bin\MWSSRCAS.DLL
c:\program files\MyWebSearch\bar\Avatar\COMMON.F3S
c:\program files\MyWebSearch\bar\Cache\0121F7A0
c:\program files\MyWebSearch\bar\Cache\01220462.bin
c:\program files\MyWebSearch\bar\Cache\01220869.bin
c:\program files\MyWebSearch\bar\Cache\0122127B.bin
c:\program files\MyWebSearch\bar\Cache\01221606.bin
c:\program files\MyWebSearch\bar\Cache\01221961
c:\program files\MyWebSearch\bar\Cache\0124383A.bin
c:\program files\MyWebSearch\bar\Cache\01244356.bin
c:\program files\MyWebSearch\bar\Cache\01244605.bin
c:\program files\MyWebSearch\bar\Cache\012448B5.bin
c:\program files\MyWebSearch\bar\Cache\01244B64.bin
c:\program files\MyWebSearch\bar\Cache\files.ini
c:\program files\MyWebSearch\bar\Game\CHECKERS.F3S
c:\program files\MyWebSearch\bar\Game\CHESS.F3S
c:\program files\MyWebSearch\bar\Game\REVERSI.F3S
c:\program files\MyWebSearch\bar\History\search3
c:\program files\MyWebSearch\bar\icons\CM.ICO
c:\program files\MyWebSearch\bar\icons\MFC.ICO
c:\program files\MyWebSearch\bar\icons\PSS.ICO
c:\program files\MyWebSearch\bar\icons\SMILEY.ICO
c:\program files\MyWebSearch\bar\icons\WB.ICO
c:\program files\MyWebSearch\bar\icons\ZWINKY.ICO
c:\program files\MyWebSearch\bar\Message\COMMON.F3S
c:\program files\MyWebSearch\bar\Notifier\COMMON.F3S
c:\program files\MyWebSearch\bar\Notifier\DOG.F3S
c:\program files\MyWebSearch\bar\Notifier\FISH.F3S
c:\program files\MyWebSearch\bar\Notifier\KUNGFU.F3S
c:\program files\MyWebSearch\bar\Notifier\LIFEGARD.F3S
c:\program files\MyWebSearch\bar\Notifier\MAID.F3S
c:\program files\MyWebSearch\bar\Notifier\MAILBOX.F3S
c:\program files\MyWebSearch\bar\Notifier\OPERA.F3S
c:\program files\MyWebSearch\bar\Notifier\ROBOT.F3S
c:\program files\MyWebSearch\bar\Notifier\SEDUCT.F3S
c:\program files\MyWebSearch\bar\Notifier\SURFER.F3S
c:\program files\MyWebSearch\bar\Settings\prevcfg2.htm
c:\program files\MyWebSearch\bar\Settings\s_pid.dat
c:\program files\SeekappSrch
c:\program files\SeekappSrch\seekapp.dll
c:\program files\SeekappSrch\seekappsrch.exe
c:\program files\SeekappSrch\uninstall.exe
c:\program files\System Search Dispatcher\1.2.0.750\ssd.dll
c:\windows\Installer\1cb02af.msi
c:\windows\Installer\60304.msi
c:\windows\Installer\7a8706.msp
c:\windows\Installer\cadb6.msp
c:\windows\system32\drivers\SKYNETmfoobwqw.sys
c:\windows\system32\drivers\UACveusexnwis.sys
c:\windows\system32\net.net
c:\windows\system32\OGACheckControl.dll
c:\windows\system32\SKYNEThwkvomrm.dat
c:\windows\system32\SKYNETlkdqxmei.dat
c:\windows\system32\SKYNETpfuxtmwb.dll
c:\windows\system32\SKYNETtamypyrj.dll
c:\windows\system32\UAChwdyxabvpd.dll
c:\windows\system32\uacinit.dll
c:\windows\system32\UACiyirjkobqc.dat
c:\windows\system32\UACktklqapset.dll
c:\windows\system32\UACkyigtatkbu.dll
c:\windows\system32\UAClvxfmqhrfh.db
c:\windows\system32\UACwyrckolild.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

——-\Service_SKYNETvrerqhxn
——-\Legacy_SKYNETvrerqhxn
——-\Service_UACd.sys
——-\Legacy_UACd.sys

((((((((((((((((((((((((( Files Created from 2009-07-13 to 2009-08-13 )))))))))))))))))))))))))))))))
.

2009-08-12 05:33 . 2009-08-12 05:33 ——– d—–w- c:\documents and settings\pc\Application Data\Logs
2009-08-12 05:18 . 2009-08-12 05:18 ——– d-sh–w- c:\windows\system32\config\systemprofile\IETldCache
2009-08-11 19:36 . 2009-08-11 19:36 ——– d—–w- c:\documents and settings\pc\Local Settings\Application Data\Microsoft Corporation
2009-08-11 19:08 . 2009-08-11 19:08 ——– d—–w- c:\docume~1\ALLUSE~1\APPLIC~1\Innovative Solutions
2009-08-06 22:18 . 2002-07-17 23:22 3535 —-a-w- c:\windows\system\Wowpost.exe
2009-08-06 22:18 . 2002-07-17 23:22 4455 —-a-w- c:\windows\system\Winaspi.dll
2009-08-06 22:18 . 2002-07-17 16:20 45056 —-a-w- c:\windows\system32\Wnaspi32.dll
2009-08-06 22:18 . 2002-07-17 15:53 16877 —-a-w- c:\windows\system32\drivers\Aspi32.sys
2009-08-06 22:18 . 2009-08-06 22:18 ——– d—–w- c:\program files\Xvid
2009-08-06 22:18 . 2009-08-06 22:30 ——– d—–w- c:\program files\AoA DVD Ripper
2009-08-06 21:48 . 2009-08-06 21:48 ——– d—–w- c:\documents and settings\pc\Application Data\NeroDigital™
2009-08-03 09:47 . 2009-08-03 09:47 10134 —-a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
2009-08-03 09:47 . 2008-09-04 18:17 447752 —-a-r- c:\windows\system32\vp6vfw.dll
2009-08-03 09:47 . 2009-08-03 09:47 ——– d—–w- c:\program files\Microsoft WSE
2009-07-29 13:15 . 2009-07-03 17:09 594432 -c—-w- c:\windows\system32\dllcache\msfeeds.dll
2009-07-29 13:15 . 2009-07-03 17:09 55296 -c—-w- c:\windows\system32\dllcache\msfeedsbs.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-13 07:30 . 2008-11-10 15:54 169936 -c–a-w- c:\documents and settings\pc\Application Data\Mozilla\Firefox\Profiles\lcbaypjo.default\FlashGot.exe
2009-08-13 07:14 . 2009-02-01 20:56 ——– d—a-w- c:\docume~1\ALLUSE~1\APPLIC~1\TEMP
2009-08-12 05:31 . 2008-11-14 08:17 ——– d—–w- c:\documents and settings\pc\Application Data\Orbit
2009-08-10 11:24 . 2009-02-17 09:05 ——– d—–w- c:\documents and settings\pc\Application Data\uTorrent
2009-08-08 18:41 . 2008-10-15 07:28 ——– d—–w- c:\documents and settings\pc\Application Data\LimeWire
2009-08-08 10:56 . 2009-03-08 20:57 ——– d—–w- c:\program files\Garena3.3beta3
2009-08-05 09:01 . 2008-04-14 12:00 204800 —-a-w- c:\windows\system32\mswebdvd.dll
2009-08-03 15:42 . 2009-02-08 06:59 ——– d—–w- c:\program files\LimeWire
2009-08-03 09:43 . 2008-10-15 21:09 ——– d–h–w- c:\program files\InstallShield Installation Information
2009-08-01 01:50 . 2008-10-15 21:46 ——– d—–w- c:\program files\Microsoft Silverlight
2009-07-17 19:01 . 2008-04-14 12:00 58880 —-a-w- c:\windows\system32\atl.dll
2009-07-14 06:43 . 2008-04-14 12:00 286208 —-a-w- c:\windows\system32\wmpdxm.dll
2009-07-12 00:48 . 2009-07-12 00:47 ——– d—–w- c:\program files\Boost Windows
2009-07-12 00:46 . 2009-07-12 00:46 ——– d—–w- c:\program files\CCleaner
2009-07-11 19:45 . 2009-07-11 19:45 ——– d—–w- c:\program files\YouTube Downloader
2009-07-11 19:27 . 2009-07-11 19:27 ——– d—–w- c:\program files\YDLHQPro
2009-07-11 18:50 . 2008-11-14 08:17 ——– d—–w- c:\program files\Orbitdownloader
2009-07-11 02:08 . 2009-07-11 02:04 ——– d—–w- c:\program files\DAEMON Tools Pro
2009-07-11 02:08 . 2009-07-11 02:07 ——– d—–w- c:\docume~1\ALLUSE~1\APPLIC~1\DAEMON Tools Pro
2009-07-10 05:49 . 2007-06-13 09:49 49152 —-a-w- c:\windows\vmsnap3.exe
2009-07-10 05:49 . 2009-04-19 20:06 262144 —-a-w- c:\windows\system32\wrap_oal.dll
2009-07-10 05:49 . 2006-03-17 22:49 368640 —-a-w- c:\windows\system32\TwnLib4.dll
2009-07-10 05:49 . 1999-11-24 18:40 40960 —-a-w- c:\windows\system32\VBAME.DLL
2009-07-10 05:47 . 2007-06-13 09:49 57344 —-a-w- c:\windows\ALCMTR.EXE
2009-07-10 05:45 . 2007-06-13 09:49 90112 —-a-w- C:\Progr_.dll
2009-07-10 05:38 . 2009-05-19 09:50 290816 —-a-w- c:\documents and settings\pc\Application Data\SystemRequirementsLab\SRLProxy_nvd_4.dll
2009-07-10 05:38 . 2009-05-19 09:50 290816 —-a-w- c:\documents and settings\pc\Application Data\SystemRequirementsLab\SRLProxy_nvd_3.dll
2009-07-10 05:38 . 2009-05-19 09:50 290816 —-a-w- c:\documents and settings\pc\Application Data\SystemRequirementsLab\SRLProxy_nvd_2.dll
2009-07-10 05:38 . 2009-05-19 09:50 290816 —-a-w- c:\documents and settings\pc\Application Data\SystemRequirementsLab\SRLProxy_nvd_1.dll
2009-07-09 01:57 . 2002-01-01 21:24 1324 —-a-w- c:\windows\system32\d3d9caps.dat
2009-07-08 04:13 . 2008-12-18 14:50 ——– d—–w- c:\documents and settings\pc\Application Data\DivX
2009-07-04 23:41 . 2009-05-01 01:24 ——– d—–w- c:\program files\Common Files\Wise Installation Wizard
2009-07-04 11:12 . 2008-12-18 09:12 ——– d—–w- c:\program files\DivX
2009-07-04 11:12 . 2009-04-22 00:25 ——– d—–w- c:\program files\Common Files\DivX Shared
2009-07-03 17:09 . 2008-04-14 12:00 915456 —-a-w- c:\windows\system32\wininet.dll
2009-07-02 04:19 . 2008-10-15 21:06 77992 -c–a-w- c:\documents and settings\pc\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-07-02 03:56 . 2009-02-03 09:50 ——– d-sh–w- c:\docume~1\ALLUSE~1\APPLIC~1\{55A29068-F2CE-456C-9148-C869879E2357}
2009-07-02 03:40 . 2009-07-02 03:40 ——– d—–w- c:\program files\Microsoft ActiveSync
2009-07-02 03:40 . 2009-07-02 03:40 ——– d—–w- c:\program files\Microsoft.NET
2009-07-02 03:27 . 2009-02-11 19:49 ——– d—–w- c:\program files\MSBuild
2009-07-02 03:27 . 2009-07-01 16:17 ——– d—–w- c:\docume~1\ALLUSE~1\APPLIC~1\Microsoft Help
2009-07-01 15:19 . 2009-07-01 15:19 ——– dc-h–w- c:\docume~1\ALLUSE~1\APPLIC~1\{F94ED97F-1871-47C6-87A8-69513EF3C279}
2009-07-01 07:00 . 2009-07-01 07:00 ——– d—–w- c:\program files\System Search Dispatcher
2009-07-01 07:00 . 2009-07-01 07:00 ——– d—–w- c:\program files\DoubleD
2009-06-28 21:52 . 2009-06-28 21:52 ——– d—–w- c:\program files\Veoh Networks
2009-06-27 07:16 . 2008-11-21 05:37 24576 —-a-r- c:\windows\system32\AsIO.dll
2009-06-27 04:47 . 2009-06-27 04:47 ——– d—–w- c:\program files\FileSubmit
2009-06-27 04:30 . 2008-10-15 21:41 ——– d—–w- c:\program files\Winamp
2009-06-20 21:54 . 2009-06-20 21:54 ——– d—–w- c:\program files\inKline Global
2009-06-18 02:08 . 2009-03-30 10:13 ——– d—–w- c:\program files\Destiny
2009-06-16 22:36 . 2009-06-16 22:36 ——– d—–w- c:\program files\Stardock
2009-06-16 14:36 . 2008-04-14 12:00 81920 —-a-w- c:\windows\system32\fontsub.dll
2009-06-16 14:36 . 2008-04-14 12:00 119808 —-a-w- c:\windows\system32\t2embed.dll
2009-06-12 12:31 . 2008-04-14 12:00 80896 —-a-w- c:\windows\system32\tlntsess.exe
2009-06-12 12:31 . 2008-04-14 12:00 76288 —-a-w- c:\windows\system32\telnet.exe
2009-06-10 16:19 . 2008-10-15 20:51 2066432 —-a-w- c:\windows\system32\mstscax.dll
2009-06-10 14:13 . 2008-04-14 12:00 84992 —-a-w- c:\windows\system32\avifil32.dll
2009-06-10 06:14 . 2008-04-14 12:00 132096 —-a-w- c:\windows\system32\wkssvc.dll
2009-06-03 19:09 . 2008-04-14 12:00 1291264 —-a-w- c:\windows\system32\quartz.dll
2009-07-10 05:43 . 2009-05-01 21:02 1044480 —-a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-07-10 05:43 . 2009-05-01 21:02 200704 —-a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VeohPlugin"="c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" [2009-05-19 3561720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2008-06-10 1406024]
"Ai Nap"="c:\program files\ASUS\AI Suite\AiNap\AiNap.exe" [2008-05-27 1423360]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-05-01 13750272]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-05-01 86016]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-02-06 2021400]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.EXE [2009-03-27 17567744]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2009-05-01 1657376]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2008-09-17 15:05 210168 —-a-w- c:\program files\Stardock\Object Desktop\WindowBlinds\WbSrv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\wbsys.dll
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe_ID0EYTHM
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Media Codec Update Service
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"EBOOSTRSVC"=2 (0x2)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
"ctfmon.exe"=c:\windows\system32\ctfmon.exe
"system34"=c:\windows\SoftwareProtection\systemvital.exe
"nodenable"=c:\program files\eset\nodenable.exe
"DAEMON Tools Pro Agent"="c:\program files\DAEMON Tools Pro\DTProAgent.exe"
"SpeedConnectStartUp"=c:\program files\CBS Software\SpeedConnect Internet Accelerator\SpeedConnectStartUp.exe -run

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"PWRISOVM.EXE"=c:\program files\PowerISO\PWRISOVM.EXE
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
"Domino"=c:\windows\Domino.exe
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
"NeroFilterCheck"=c:\program files\Common Files\Nero\Lib\NeroCheck.exe
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
"QFan Help"="c:\program files\ASUS\AI Suite\QFan3\QFanHelp.exe"
"Cpu Level Up help"=c:\program files\ASUS\AI Suite\CpuLevelUpHelp.exe
"VMSnap3"=c:\windows\VMSnap3.exe
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"KernelFaultCheck"=%systemroot%\system32\dumprep 0 -k
"Six Engine"="c:\program files\ASUS\EPU-4 Engine\FourEngine.exe" -r
"My Web Search Bar Search Scope Monitor"="c:\progra~1\MyWebSearch\bar\2.bin\m3SrchMn.exe" /m=2 /w /h

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Orbitdownloader\\orbitnet.exe"=
"c:\\Program Files\\Orbitdownloader\\orbitdm.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\ASUS\\ASUSUpdate\\Update.exe"=
"c:\\Program Files\\Garena3.3beta3\\Garena.exe"=
"f:\\Call of Duty 4\\Call of Duty 4 Multiplayer.exe"=
"f:\\Counter-Strike 1.6\\hl.exe"=
"d:\\Left 4 Dead\\Left4Dead\\hl2.exe"=
"f:\\Call of Duty 5\\CoDWaW.exe"=
"f:\\Special Force\\specialforce.exe"=
"f:\\Prototype\\prototypef.exe"=
"c:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"=
"f:\\Company of Heroes\\RelicDownloader\\RelicDownloader.exe"=
"f:\\Company of Heroes\\RelicCOH.exe"=
"d:\\Far Cry 2\\bin\\FarCry2.exe"=
"d:\\Far Cry 2\\bin\\FC2Launcher.exe"=
"d:\\Far Cry 2\\bin\\FC2Editor.exe"=

R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2/6/2009 2:23 PM 106208]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2/6/2009 2:24 PM 93336]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2/6/2009 2:23 PM 727720]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [5/6/2009 8:58 PM 604416]
R3 L1e;Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1e51x86.sys [2/19/2009 5:13 PM 38400]
S0 eBoost;eBoostr caching filter driver;c:\windows\system32\drivers\eBoost.sys –> c:\windows\system32\drivers\eBoost.sys [?]
S2 BDVEDISK;BDVEDISK;\??\c:\program files\BitDefender\BitDefender 2009\BDVEDISK.sys –> c:\program files\BitDefender\BitDefender 2009\BDVEDISK.sys [?]
S2 RPCER;Remote Procedure Call (HNM);c:\program files\Common Files\ODBC\comp.exe –> c:\program files\Common Files\ODBC\comp.exe [?]
S2 SeekappSrch Service;SeekappSrch Service;"c:\documents and settings\All Users\Application Data\SeekappSrch\seekapp145.exe" "c:\program files\SeekappSrch\seekapp.dll" Service –> c:\documents and settings\All Users\Application Data\SeekappSrch\seekapp145.exe [?]
S3 Arrakis3;BitDefender Arrakis Server;"c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe" –> c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [?]
S3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys –> c:\windows\system32\drivers\bdfm.sys [?]
S3 cpuz130;cpuz130;\??\c:\docume~1\pc\LOCALS~1\Temp\cpuz130\cpuz_x32.sys –> c:\docume~1\pc\LOCALS~1\Temp\cpuz130\cpuz_x32.sys [?]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\pc\LOCALS~1\Temp\DRZ8B.tmp –> c:\docume~1\pc\LOCALS~1\Temp\DRZ8B.tmp [?]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service –> c:\windows\system32\GameMon.des -service [?]
S3 SBRE;SBRE;\??\c:\windows\system32\drivers\SBREdrv.sys –> c:\windows\system32\drivers\SBREdrv.sys [?]
S3 vvftav303;vvftav303;c:\windows\system32\drivers\vvftav303.sys [2/23/2009 12:59 PM 475136]
S3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files\Real Temp\WinRing0.sys [5/21/2009 4:45 PM 14416]
S3 ZSMC0303;INTEX Game Camera;c:\windows\system32\drivers\usbVM303.sys [2/23/2009 12:59 PM 1474560]
S4 EBOOSTRSVC;eBoostr Service;"c:\program files\eBoostr\EBstrSvc.exe" –> c:\program files\eBoostr\EBstrSvc.exe [?]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A509B1FF-37FF-4bFF-8CFF-4F3A747040FF}]
c:\windows\system32\rundll32.exe c:\windows\system32\advpack.dll,LaunchINFSectionEx c:\program files\Internet Explorer\clrtour.inf,DefaultInstall.ResetTour,,12
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-My Web Search Bar Search Scope Monitor - c:\progra~1\MyWebSearch\bar\2.bin\m3SrchMn.exe
HKLM-Run-net - c:\windows\system32\net.net
Notify-AtiExtEvent - (no file)

.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.theprizeday.com/today.php
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
IE: &Download by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/201
IE: &Grab video by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/204
IE: &Search - http://edits.mywebsearch.com/toolbaredits/…html?p=ZKfox000
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Do&wnload selected by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/203
IE: Down&load all by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/202
IE: E&xport to Microsoft Excel - c:\progra~1\Microsoft Office\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\docume~1\pc\APPLIC~1\Mozilla\Firefox\Profiles\lcbaypjo.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
FF - prefs.js: keyword.URL - hxxp://search.freecause.com/search?fr=freecause&ourmark=3&type=59099&p=
FF - plugin: c:\documents and settings\pc\Application Data\Mozilla\Firefox\Profiles\lcbaypjo.default\extensions\[removed]\platform\WINNT_x86-msvc\plugins\npmnqmp071101000055.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

—- FIREFOX POLICIES —-
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.notify.interval - 600000
FF - user.js: content.switch.threshold - 600000
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: network.http.max-connections-per-server - 8
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-13 01:51
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet011\Services\GarenaPEngine]
"ImagePath"="\??\c:\docume~1\pc\LOCALS~1\Temp\DRZ8B.tmp"

[HKEY_LOCAL_MACHINE\System\ControlSet011\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
——————— LOCKED REGISTRY KEYS ———————

[HKEY_USERS\S-1-5-21-1417001333-854245398-1606980848-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID]
@Denied: (Full) (LocalSystem)
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}"="c:\\WINDOWS\\System32\\shell32.dll,15"
"{992CFFA0-F557-101A-88EC-00DD010CCC48}"="c:\\WINDOWS\\system32\\SHELL32.dll,17"
"{208D2C60-3AEA-1069-A2D7-08002B30309D}"="c:\\WINDOWS\\system32\\SHELL32.dll,17"
"{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"="c:\\WINDOWS\\system32\\shell32.dll,22"
"{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"="c:\\WINDOWS\\system32\\shell32.dll,23"
"{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"="c:\\WINDOWS\\system32\\shell32.dll,24"
"{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="c:\\WINDOWS\\system32\\shell32.dll,-175"
"{21EC2020-3AEA-1069-A2DD-08002B30309D}"="c:\\WINDOWS\\System32\\shell32.dll,-137"
"{2227A280-3AEA-1069-A2DE-08002B30309D}"="c:\\WINDOWS\\System32\\shell32.dll,-138"
"{D20EA4E1-3957-11d2-A40B-0C5020524152}"="c:\\WINDOWS\\system32\\shell32.dll,38"
"AudioCD"="c:\\WINDOWS\\System32\\shell32.dll,40"
"{FBF23B42-E3F0-101B-8488-00AA003E56F8}"="c:\\WINDOWS\\system32\\shell32.dll,220"
"{450D8FBA-AD25-11D0-98A8-0800361B1103}"="c:\\WINDOWS\\system32\\mydocs.dll,0"
"{D20EA4E1-3957-11d2-A40B-0C5020524153}"="c:\\WINDOWS\\system32\\main.cpl,10"
"{E211B736-43FD-11D1-9EFB-0000F8757FCD}"="c:\\WINDOWS\\system32\\wiashext.dll,0"
"{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="c:\\WINDOWS\\system32\\mstask.dll,-100"
"{88C6C381-2E85-11D0-94DE-444553540000}"="c:\\WINDOWS\\System32\\occache.dll,0"
"{BDEADF00-C265-11d0-BCED-00A0C90AB50F}"="c:\\Program Files\\COMMON~1\\MICROS~1\\WEBFOL~1\\MSONSEXT.DLL,0"
"{FF393560-C2A7-11CF-BFF4-444553540000}"="c:\\WINDOWS\\System32\\shdocvw.dll,-20785"
"{F5175861-2688-11d0-9C5E-00AA00A45957}"="c:\\WINDOWS\\System32\\webcheck.dll,0"
"{85BBD920-42A0-1069-A2E4-08002B30309D}"="c:\\WINDOWS\\system32\\syncui.dll,0"

[HKEY_USERS\S-1-5-21-1417001333-854245398-1606980848-1003\Software\SecuROM\License information*]
"datasecu"=hex:b4,88,64,48,63,2c,b0,b1,2d,33,4b,0d,f8,6d,9b,ca,3d,d6,07,a3,77,
5f,83,7c,c7,3d,7e,61,11,d9,d9,a6,e3,b4,48,69,8a,8a,33,60,79,37,20,b4,02,1a,\
"rkeysecu"=hex:1b,3e,9c,62,e4,90,e1,1f,47,da,f1,67,41,b0,5c,9d
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'winlogon.exe'(924)
c:\program files\Stardock\Object Desktop\WindowBlinds\WBSrv.dll
.
Completion time: 2009-08-13 1:52
ComboFix-quarantined-files.txt 2009-08-13 08:52

Pre-Run: 10,734,600,192 bytes free
Post-Run: 10,707,365,888 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

465 — E O F — 2009-08-12 15:46

CatByte

Post #4August 12, 2009, 6:06 PM UTC

Hi,

Please do the following:

Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below.
They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".

Copy/paste the text inside the Codebox below into notepad:

Here's how to do that:
Click Start > Run type Notepad click OK.
This will open an empty notepad file:

Copy all the text inside of the code box - Press Ctrl+C (or right click on the highlighted section and choose 'copy')

http://forums.whatthetech.com/RAKTOR_win32_rootkit_agent_odg_trojan_t106054.html&view=findpost&p=586941#entry586941

Collect::
c:\progra~1\MyWebSearch\bar\2.bin\m3SrchMn.exe

Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"My Web Search Bar Search Scope Monitor"=-

DDS::
IE: &Search - http://edits.mywebsearch.com/toolbaredits/…html?p=ZKfox000

Now paste the copied text into the open notepad - press CTRL+V (or right click and choose 'paste')

Save this file to your desktop, Save this as "CFScript"

Here's how to do that:

1.Click File;
2.Click Save As… Change the directory to your desktop;
3.Change the Save as type to "All Files";
4.Type in the file name: CFScript
5.Click Save …

[external image: Posted Image]

Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
When finished, it shall produce a log for you.
Copy and paste the contents of the log in your next reply.

CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.

**Note**
When CF finishes running, the ComboFix log will open along with a message box–do not be alarmed. With the above script, ComboFix will capture files to submit for analysis.

Ensure you are connected to the internet and click OK on the message box.

NEXT:

Please do the following:

I would like you to upload a file to be scanned

Make sure to use Internet Explorer for this
Please go to VirSCAN.org FREE on-line scan service
Copy and paste the following file path into the "Suspicious files to scan" box on the top of the page:

C:\Progr_.dll
Click on the Upload button
If a pop-up appears saying the file has been scanned already, please select the ReScan button.
Once the Scan is completed, click on the "Copy to Clipboard" button. This will copy the link of the report into the Clipboard.
Paste the contents of the Clipboard in your next reply.

Please do the same for the following file::

c:\windows\SoftwareProtection\systemvital.exe

7e5PE

Post #5August 12, 2009, 6:35 PM UTC

ComboFix 09-08-10.06 - pc 08/13/2009 2:42.2.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3071.2469 [GMT -7:00]
Running from: c:\documents and settings\[removed]\Desktop\Combo-Fix.exe
Command switches used :: c:\documents and settings\pc\Desktop\CFScript.txt
AV: BitDefender Antivirus *On-access scanning disabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: BitDefender Firewall *disabled* {4055920F-2E99-48A8-A270-4243D2B8F242}
.

((((((((((((((((((((((((( Files Created from 2009-07-13 to 2009-08-13 )))))))))))))))))))))))))))))))
.

2009-08-12 05:33 . 2009-08-12 05:33 ——– d—–w- c:\documents and settings\pc\Application Data\Logs
2009-08-12 05:18 . 2009-08-12 05:18 ——– d-sh–w- c:\windows\system32\config\systemprofile\IETldCache
2009-08-11 19:36 . 2009-08-11 19:36 ——– d—–w- c:\documents and settings\pc\Local Settings\Application Data\Microsoft Corporation
2009-08-11 19:08 . 2009-08-11 19:08 ——– d—–w- c:\docume~1\ALLUSE~1\APPLIC~1\Innovative Solutions
2009-08-06 22:18 . 2002-07-17 23:22 3535 —-a-w- c:\windows\system\Wowpost.exe
2009-08-06 22:18 . 2002-07-17 23:22 4455 —-a-w- c:\windows\system\Winaspi.dll
2009-08-06 22:18 . 2002-07-17 16:20 45056 —-a-w- c:\windows\system32\Wnaspi32.dll
2009-08-06 22:18 . 2002-07-17 15:53 16877 —-a-w- c:\windows\system32\drivers\Aspi32.sys
2009-08-06 22:18 . 2009-08-06 22:18 ——– d—–w- c:\program files\Xvid
2009-08-06 22:18 . 2009-08-06 22:30 ——– d—–w- c:\program files\AoA DVD Ripper
2009-08-06 21:48 . 2009-08-06 21:48 ——– d—–w- c:\documents and settings\pc\Application Data\NeroDigital™
2009-08-03 09:47 . 2009-08-03 09:47 10134 —-a-r- c:\documents and settings\pc\Application Data\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
2009-08-03 09:47 . 2008-09-04 18:17 447752 —-a-r- c:\windows\system32\vp6vfw.dll
2009-08-03 09:47 . 2009-08-03 09:47 ——– d—–w- c:\program files\Microsoft WSE
2009-07-29 13:15 . 2009-07-03 17:09 594432 -c—-w- c:\windows\system32\dllcache\msfeeds.dll
2009-07-29 13:15 . 2009-07-03 17:09 55296 -c—-w- c:\windows\system32\dllcache\msfeedsbs.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-13 08:53 . 2008-11-10 15:54 169936 -c–a-w- c:\documents and settings\pc\Application Data\Mozilla\Firefox\Profiles\lcbaypjo.default\FlashGot.exe
2009-08-13 07:14 . 2009-02-01 20:56 ——– d—a-w- c:\docume~1\ALLUSE~1\APPLIC~1\TEMP
2009-08-12 05:31 . 2008-11-14 08:17 ——– d—–w- c:\documents and settings\pc\Application Data\Orbit
2009-08-10 11:24 . 2009-02-17 09:05 ——– d—–w- c:\documents and settings\pc\Application Data\uTorrent
2009-08-08 18:41 . 2008-10-15 07:28 ——– d—–w- c:\documents and settings\pc\Application Data\LimeWire
2009-08-08 10:56 . 2009-03-08 20:57 ——– d—–w- c:\program files\Garena3.3beta3
2009-08-05 09:01 . 2008-04-14 12:00 204800 —-a-w- c:\windows\system32\mswebdvd.dll
2009-08-03 15:42 . 2009-02-08 06:59 ——– d—–w- c:\program files\LimeWire
2009-08-03 09:43 . 2008-10-15 21:09 ——– d–h–w- c:\program files\InstallShield Installation Information
2009-08-01 01:50 . 2008-10-15 21:46 ——– d—–w- c:\program files\Microsoft Silverlight
2009-07-17 19:01 . 2008-04-14 12:00 58880 —-a-w- c:\windows\system32\atl.dll
2009-07-14 06:43 . 2008-04-14 12:00 286208 —-a-w- c:\windows\system32\wmpdxm.dll
2009-07-12 00:48 . 2009-07-12 00:47 ——– d—–w- c:\program files\Boost Windows
2009-07-12 00:46 . 2009-07-12 00:46 ——– d—–w- c:\program files\CCleaner
2009-07-11 19:45 . 2009-07-11 19:45 ——– d—–w- c:\program files\YouTube Downloader
2009-07-11 19:27 . 2009-07-11 19:27 ——– d—–w- c:\program files\YDLHQPro
2009-07-11 18:50 . 2008-11-14 08:17 ——– d—–w- c:\program files\Orbitdownloader
2009-07-11 02:08 . 2009-07-11 02:04 ——– d—–w- c:\program files\DAEMON Tools Pro
2009-07-11 02:08 . 2009-07-11 02:07 ——– d—–w- c:\docume~1\ALLUSE~1\APPLIC~1\DAEMON Tools Pro
2009-07-10 05:49 . 2007-06-13 09:49 49152 —-a-w- c:\windows\vmsnap3.exe
2009-07-10 05:49 . 2009-04-19 20:06 262144 —-a-w- c:\windows\system32\wrap_oal.dll
2009-07-10 05:49 . 2006-03-17 22:49 368640 —-a-w- c:\windows\system32\TwnLib4.dll
2009-07-10 05:49 . 1999-11-24 18:40 40960 —-a-w- c:\windows\system32\VBAME.DLL
2009-07-10 05:47 . 2007-06-13 09:49 57344 —-a-w- c:\windows\ALCMTR.EXE
2009-07-10 05:45 . 2007-06-13 09:49 90112 —-a-w- C:\Progr_.dll
2009-07-10 05:38 . 2009-05-19 09:50 290816 —-a-w- c:\documents and settings\pc\Application Data\SystemRequirementsLab\SRLProxy_nvd_4.dll
2009-07-10 05:38 . 2009-05-19 09:50 290816 —-a-w- c:\documents and settings\pc\Application Data\SystemRequirementsLab\SRLProxy_nvd_3.dll
2009-07-10 05:38 . 2009-05-19 09:50 290816 —-a-w- c:\documents and settings\pc\Application Data\SystemRequirementsLab\SRLProxy_nvd_2.dll
2009-07-10 05:38 . 2009-05-19 09:50 290816 —-a-w- c:\documents and settings\pc\Application Data\SystemRequirementsLab\SRLProxy_nvd_1.dll
2009-07-09 01:57 . 2002-01-01 21:24 1324 —-a-w- c:\windows\system32\d3d9caps.dat
2009-07-08 04:13 . 2008-12-18 14:50 ——– d—–w- c:\documents and settings\pc\Application Data\DivX
2009-07-04 23:41 . 2009-05-01 01:24 ——– d—–w- c:\program files\Common Files\Wise Installation Wizard
2009-07-04 11:12 . 2008-12-18 09:12 ——– d—–w- c:\program files\DivX
2009-07-04 11:12 . 2009-04-22 00:25 ——– d—–w- c:\program files\Common Files\DivX Shared
2009-07-03 17:09 . 2008-04-14 12:00 915456 —-a-w- c:\windows\system32\wininet.dll
2009-07-02 04:19 . 2008-10-15 21:06 77992 -c–a-w- c:\documents and settings\pc\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-07-02 03:56 . 2009-02-03 09:50 ——– d-sh–w- c:\docume~1\ALLUSE~1\APPLIC~1\{55A29068-F2CE-456C-9148-C869879E2357}
2009-07-02 03:40 . 2009-07-02 03:40 ——– d—–w- c:\program files\Microsoft ActiveSync
2009-07-02 03:40 . 2009-07-02 03:40 ——– d—–w- c:\program files\Microsoft.NET
2009-07-02 03:27 . 2009-02-11 19:49 ——– d—–w- c:\program files\MSBuild
2009-07-02 03:27 . 2009-07-01 16:17 ——– d—–w- c:\docume~1\ALLUSE~1\APPLIC~1\Microsoft Help
2009-07-01 15:19 . 2009-07-01 15:19 ——– dc-h–w- c:\docume~1\ALLUSE~1\APPLIC~1\{F94ED97F-1871-47C6-87A8-69513EF3C279}
2009-07-01 07:00 . 2009-07-01 07:00 ——– d—–w- c:\program files\System Search Dispatcher
2009-07-01 07:00 . 2009-07-01 07:00 ——– d—–w- c:\program files\DoubleD
2009-06-28 21:52 . 2009-06-28 21:52 ——– d—–w- c:\program files\Veoh Networks
2009-06-27 07:16 . 2008-11-21 05:37 24576 —-a-r- c:\windows\system32\AsIO.dll
2009-06-27 04:47 . 2009-06-27 04:47 ——– d—–w- c:\program files\FileSubmit
2009-06-27 04:30 . 2008-10-15 21:41 ——– d—–w- c:\program files\Winamp
2009-06-20 21:54 . 2009-06-20 21:54 ——– d—–w- c:\program files\inKline Global
2009-06-18 02:08 . 2009-03-30 10:13 ——– d—–w- c:\program files\Destiny
2009-06-16 22:36 . 2009-06-16 22:36 ——– d—–w- c:\program files\Stardock
2009-06-16 14:36 . 2008-04-14 12:00 81920 —-a-w- c:\windows\system32\fontsub.dll
2009-06-16 14:36 . 2008-04-14 12:00 119808 —-a-w- c:\windows\system32\t2embed.dll
2009-06-12 12:31 . 2008-04-14 12:00 80896 —-a-w- c:\windows\system32\tlntsess.exe
2009-06-12 12:31 . 2008-04-14 12:00 76288 —-a-w- c:\windows\system32\telnet.exe
2009-06-10 16:19 . 2008-10-15 20:51 2066432 —-a-w- c:\windows\system32\mstscax.dll
2009-06-10 14:13 . 2008-04-14 12:00 84992 —-a-w- c:\windows\system32\avifil32.dll
2009-06-10 06:14 . 2008-04-14 12:00 132096 —-a-w- c:\windows\system32\wkssvc.dll
2009-06-03 19:09 . 2008-04-14 12:00 1291264 —-a-w- c:\windows\system32\quartz.dll
2009-07-10 05:43 . 2009-05-01 21:02 1044480 —-a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-07-10 05:43 . 2009-05-01 21:02 200704 —-a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-08-13_08.51.44 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-04-14 12:00 . 2009-08-13 07:33 71962 c:\windows\system32\perfc009.dat
+ 2008-04-14 12:00 . 2009-08-13 08:52 71962 c:\windows\system32\perfc009.dat
+ 2008-04-14 12:00 . 2009-08-13 08:52 443896 c:\windows\system32\perfh009.dat
- 2008-04-14 12:00 . 2009-08-13 07:33 443896 c:\windows\system32\perfh009.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VeohPlugin"="c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" [2009-05-19 3561720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2008-06-10 1406024]
"Ai Nap"="c:\program files\ASUS\AI Suite\AiNap\AiNap.exe" [2008-05-27 1423360]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-05-01 13750272]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-05-01 86016]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-02-06 2021400]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.EXE [2009-03-27 17567744]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2009-05-01 1657376]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2008-09-17 15:05 210168 —-a-w- c:\program files\Stardock\Object Desktop\WindowBlinds\WbSrv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\wbsys.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"EBOOSTRSVC"=2 (0x2)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
"ctfmon.exe"=c:\windows\system32\ctfmon.exe
"system34"=c:\windows\SoftwareProtection\systemvital.exe
"nodenable"=c:\program files\eset\nodenable.exe
"DAEMON Tools Pro Agent"="c:\program files\DAEMON Tools Pro\DTProAgent.exe"
"SpeedConnectStartUp"=c:\program files\CBS Software\SpeedConnect Internet Accelerator\SpeedConnectStartUp.exe -run

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"PWRISOVM.EXE"=c:\program files\PowerISO\PWRISOVM.EXE
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
"Domino"=c:\windows\Domino.exe
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
"NeroFilterCheck"=c:\program files\Common Files\Nero\Lib\NeroCheck.exe
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
"QFan Help"="c:\program files\ASUS\AI Suite\QFan3\QFanHelp.exe"
"Cpu Level Up help"=c:\program files\ASUS\AI Suite\CpuLevelUpHelp.exe
"VMSnap3"=c:\windows\VMSnap3.exe
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"KernelFaultCheck"=%systemroot%\system32\dumprep 0 -k
"Six Engine"="c:\program files\ASUS\EPU-4 Engine\FourEngine.exe" -r

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\Orbitdownloader\\orbitnet.exe"=
"c:\\Program Files\\Orbitdownloader\\orbitdm.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\ASUS\\ASUSUpdate\\Update.exe"=
"c:\\Program Files\\Garena3.3beta3\\Garena.exe"=
"f:\\Call of Duty 4\\Call of Duty 4 Multiplayer.exe"=
"f:\\Counter-Strike 1.6\\hl.exe"=
"d:\\Left 4 Dead\\Left4Dead\\hl2.exe"=
"f:\\Call of Duty 5\\CoDWaW.exe"=
"f:\\Special Force\\specialforce.exe"=
"f:\\Prototype\\prototypef.exe"=
"c:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"=
"f:\\Company of Heroes\\RelicDownloader\\RelicDownloader.exe"=
"f:\\Company of Heroes\\RelicCOH.exe"=
"d:\\Far Cry 2\\bin\\FarCry2.exe"=
"d:\\Far Cry 2\\bin\\FC2Launcher.exe"=
"d:\\Far Cry 2\\bin\\FC2Editor.exe"=

R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2/6/2009 2:23 PM 106208]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2/6/2009 2:24 PM 93336]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2/6/2009 2:23 PM 727720]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [5/6/2009 8:58 PM 604416]
R3 L1e;Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1e51x86.sys [2/19/2009 5:13 PM 38400]
S0 eBoost;eBoostr caching filter driver;c:\windows\system32\drivers\eBoost.sys –> c:\windows\system32\drivers\eBoost.sys [?]
S2 BDVEDISK;BDVEDISK;\??\c:\program files\BitDefender\BitDefender 2009\BDVEDISK.sys –> c:\program files\BitDefender\BitDefender 2009\BDVEDISK.sys [?]
S2 RPCER;Remote Procedure Call (HNM);c:\program files\Common Files\ODBC\comp.exe –> c:\program files\Common Files\ODBC\comp.exe [?]
S2 SeekappSrch Service;SeekappSrch Service;"c:\documents and settings\All Users\Application Data\SeekappSrch\seekapp145.exe" "c:\program files\SeekappSrch\seekapp.dll" Service –> c:\documents and settings\All Users\Application Data\SeekappSrch\seekapp145.exe [?]
S3 Arrakis3;BitDefender Arrakis Server;"c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe" –> c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [?]
S3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys –> c:\windows\system32\drivers\bdfm.sys [?]
S3 cpuz130;cpuz130;\??\c:\docume~1\pc\LOCALS~1\Temp\cpuz130\cpuz_x32.sys –> c:\docume~1\pc\LOCALS~1\Temp\cpuz130\cpuz_x32.sys [?]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\pc\LOCALS~1\Temp\DRZ8B.tmp –> c:\docume~1\pc\LOCALS~1\Temp\DRZ8B.tmp [?]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service –> c:\windows\system32\GameMon.des -service [?]
S3 SBRE;SBRE;\??\c:\windows\system32\drivers\SBREdrv.sys –> c:\windows\system32\drivers\SBREdrv.sys [?]
S3 vvftav303;vvftav303;c:\windows\system32\drivers\vvftav303.sys [2/23/2009 12:59 PM 475136]
S3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files\Real Temp\WinRing0.sys [5/21/2009 4:45 PM 14416]
S3 ZSMC0303;INTEX Game Camera;c:\windows\system32\drivers\usbVM303.sys [2/23/2009 12:59 PM 1474560]
S4 EBOOSTRSVC;eBoostr Service;"c:\program files\eBoostr\EBstrSvc.exe" –> c:\program files\eBoostr\EBstrSvc.exe [?]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A509B1FF-37FF-4bFF-8CFF-4F3A747040FF}]
c:\windows\system32\rundll32.exe c:\windows\system32\advpack.dll,LaunchINFSectionEx c:\program files\Internet Explorer\clrtour.inf,DefaultInstall.ResetTour,,12
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.theprizeday.com/today.php
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
IE: &Download by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/201
IE: &Grab video by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/204
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Do&wnload selected by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/203
IE: Down&load all by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/202
IE: E&xport to Microsoft Excel - c:\progra~1\Microsoft Office\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\docume~1\pc\APPLIC~1\Mozilla\Firefox\Profiles\lcbaypjo.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
FF - prefs.js: keyword.URL - hxxp://search.freecause.com/search?fr=freecause&ourmark=3&type=59099&p=
FF - plugin: c:\documents and settings\pc\Application Data\Mozilla\Firefox\Profiles\lcbaypjo.default\extensions\[removed]\platform\WINNT_x86-msvc\plugins\npmnqmp071101000055.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll
FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

—- FIREFOX POLICIES —-
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.notify.interval - 600000
FF - user.js: content.switch.threshold - 600000
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: network.http.max-connections-per-server - 8
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-13 02:43
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet011\Services\GarenaPEngine]
"ImagePath"="\??\c:\docume~1\pc\LOCALS~1\Temp\DRZ8B.tmp"

[HKEY_LOCAL_MACHINE\System\ControlSet011\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
——————— LOCKED REGISTRY KEYS ———————

[HKEY_USERS\S-1-5-21-1417001333-854245398-1606980848-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID]
@Denied: (Full) (LocalSystem)
"{20D04FE0-3AEA-1069-A2D8-08002B30309D}"="c:\\WINDOWS\\System32\\shell32.dll,15"
"{992CFFA0-F557-101A-88EC-00DD010CCC48}"="c:\\WINDOWS\\system32\\SHELL32.dll,17"
"{208D2C60-3AEA-1069-A2D7-08002B30309D}"="c:\\WINDOWS\\system32\\SHELL32.dll,17"
"{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"="c:\\WINDOWS\\system32\\shell32.dll,22"
"{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"="c:\\WINDOWS\\system32\\shell32.dll,23"
"{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"="c:\\WINDOWS\\system32\\shell32.dll,24"
"{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="c:\\WINDOWS\\system32\\shell32.dll,-175"
"{21EC2020-3AEA-1069-A2DD-08002B30309D}"="c:\\WINDOWS\\System32\\shell32.dll,-137"
"{2227A280-3AEA-1069-A2DE-08002B30309D}"="c:\\WINDOWS\\System32\\shell32.dll,-138"
"{D20EA4E1-3957-11d2-A40B-0C5020524152}"="c:\\WINDOWS\\system32\\shell32.dll,38"
"AudioCD"="c:\\WINDOWS\\System32\\shell32.dll,40"
"{FBF23B42-E3F0-101B-8488-00AA003E56F8}"="c:\\WINDOWS\\system32\\shell32.dll,220"
"{450D8FBA-AD25-11D0-98A8-0800361B1103}"="c:\\WINDOWS\\system32\\mydocs.dll,0"
"{D20EA4E1-3957-11d2-A40B-0C5020524153}"="c:\\WINDOWS\\system32\\main.cpl,10"
"{E211B736-43FD-11D1-9EFB-0000F8757FCD}"="c:\\WINDOWS\\system32\\wiashext.dll,0"
"{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="c:\\WINDOWS\\system32\\mstask.dll,-100"
"{88C6C381-2E85-11D0-94DE-444553540000}"="c:\\WINDOWS\\System32\\occache.dll,0"
"{BDEADF00-C265-11d0-BCED-00A0C90AB50F}"="c:\\Program Files\\COMMON~1\\MICROS~1\\WEBFOL~1\\MSONSEXT.DLL,0"
"{FF393560-C2A7-11CF-BFF4-444553540000}"="c:\\WINDOWS\\System32\\shdocvw.dll,-20785"
"{F5175861-2688-11d0-9C5E-00AA00A45957}"="c:\\WINDOWS\\System32\\webcheck.dll,0"
"{85BBD920-42A0-1069-A2E4-08002B30309D}"="c:\\WINDOWS\\system32\\syncui.dll,0"

[HKEY_USERS\S-1-5-21-1417001333-854245398-1606980848-1003\Software\SecuROM\License information*]
"datasecu"=hex:b4,88,64,48,63,2c,b0,b1,2d,33,4b,0d,f8,6d,9b,ca,3d,d6,07,a3,77,
5f,83,7c,c7,3d,7e,61,11,d9,d9,a6,e3,b4,48,69,8a,8a,33,60,79,37,20,b4,02,1a,\
"rkeysecu"=hex:1b,3e,9c,62,e4,90,e1,1f,47,da,f1,67,41,b0,5c,9d
.
——————— DLLs Loaded Under Running Processes ———————

- - - - - - - > 'winlogon.exe'(924)
c:\program files\Stardock\Object Desktop\WindowBlinds\WBSrv.dll

- - - - - - - > 'explorer.exe'(3696)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2009-08-13 2:44
ComboFix-quarantined-files.txt 2009-08-13 09:44
ComboFix2.txt 2009-08-13 08:52

Pre-Run: 10,678,857,728 bytes free
Post-Run: 10,648,182,784 bytes free

329 — E O F — 2009-08-12 15:46

http://virscan.org/report/c211282225729aef…f1da6ff7d7.html

http://virscan.org/report/ab6d8c530526e439…def3a567c6.html

CatByte

Post #6August 12, 2009, 6:43 PM UTC

Hi,

Please do the following:

Please download Malwarebytes' Anti-Malware

Double Click mbam-setup.exe to install the application.
Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform Quick Scan", then click Scan.
The scan may take some time to finish, so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected. <– very important
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply.

Extra Note:If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.

NEXT

Go here to run an online scanner from ESET.

Note: You will need to use Internet explorer for this scan
Turn off the real time scanner of any existing antivirus program while performing the online scan
Tick the box next to YES, I accept the Terms of Use.
Click Start
When asked, allow the activeX control to install
Click Start
Make sure that the option Remove found threats is unticked and the Scan Archives option is ticked.
Click on Advanced Settings, ensure the options Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.
Click Scan
Wait for the scan to finish
Use notepad to open the logfile located at C:\Program Files\Eset\Eset Online Scanner\log.txt
Copy and paste that log as a reply to this topic and also let me know how things are now.

7e5PE

Post #7August 13, 2009, 2:50 AM UTC

Malwarebytes' Anti-Malware 1.40 Database version: 2612 Windows 5.1.2600 Service Pack 3 8/13/2009 3:40:36 AM mbam-log-2009-08-13 (03-40-36).txt Scan type: Quick Scan Objects scanned: 87218 Time elapsed: 1 minute(s), 43 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 55 Registry Values Infected: 2 Registry Data Items Infected: 0 Folders Infected: 15 Files Infected: 900 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{07b18eaa-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{07b18eac-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{1093995a-ba37-41d2-836e-091067c4ad17} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{120927bf-1700-43bc-810f-fab92549b390} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{17de5e5e-bfe3-4e83-8e1f-8755795359ec} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{1f52a5fa-a705-4415-b975-88503b291728} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{247a115f-06c2-4fb3-967d-2d62d3cf4f0a} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{3e53e2cb-86db-4a4a-8bd9-ffeb7a64df82} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{480098c6-f6ad-4c61-9b5c-2bae228a34d1} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{6160f76a-1992-4b17-a32d-0c706d159105} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{63d0ed2b-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{63d0ed2d-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{6e74766c-4d93-4cc0-96d1-47b8e07ff9ca} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{877f3eab-4462-44df-8475-6064eafd7fbf} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{90449521-d834-4703-bb4e-d3aa44042ff8} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{991aac62-b100-47ce-8b75-253965244f69} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{bbabdc90-f3d5-4801-863a-ee6ae529862d} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{d6ff3684-ad3b-48eb-bbb4-b9e6c5a355c1} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{de38c398-b328-4f4c-a3ad-1b5e4ed93477} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25e} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25f} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{eb9e5c1c-b1f9-4c2b-be8a-27d6446fdaf8} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{f87d7fb5-9dc5-4c8c-b998-d8dfe02e2978} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{1e0de227-5ce4-4ea3-ab0c-8b03e1aa76bc} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{f42228fb-e84e-479e-b922-fbbd096e792c} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5617eca9-488d-4ba2-8562-9710b9ab78d2} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\mywebsearch.outlookaddin (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\mywebsearch.outlookaddin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\{5617ECA9-488D-4BA2-8562-9710B9AB78D2} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWay) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{c5096216-7703-409e-b85a-8a6ee7395128}}_is1 (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall (Adware.MyWebSearch) -> Quarantined and deleted successfully. Registry Values Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\{0ba0192d-94a5-45e3-b2b8-3ec5a1a0b5ec} (Adware.DoubleD) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\{2224e955-00e9-4613-a844-ce69fccaae91} (Adware.DoubleD) -> Quarantined and deleted successfully. Registry Data Items Infected: (No malicious items detected) Folders Infected: C:\Program Files\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Program Files\DoubleD\GamingHarbor Toolbar (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Program Files\System Search Dispatcher (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Program Files\System Search Dispatcher\1.2.0.750 (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Program Files\System Search Dispatcher\1.2.0.750\Data (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.1.0.17730 (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\DoubleD\GamingHarbor Toolbar\4.1.0.17730\bin (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160 (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340 (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790 (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850 (Adware.DoubleD) -> Quarantined and deleted successfully. Files Infected: C:\Program Files\System Search Dispatcher\1.2.0.750\unins000.dat (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Program Files\System Search Dispatcher\1.2.0.750\unins000.exe (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Program Files\System Search Dispatcher\1.2.0.750\Data\eacore.mx (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Program Files\System Search Dispatcher\1.2.0.750\Data\URLDynamic.mx (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Program Files\System Search Dispatcher\1.2.0.750\Data\URLStatic.mx (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\config.md (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\ipdata.md (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-000134.937.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-081857.437.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-084533.437.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-094713.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-095348.093.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-095358.609.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-095822.796.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-101102.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-132911.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-202257.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-204258.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-210832.875.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-213923.015.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-214053.968.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-214250.203.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-220803.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-221146.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-222037.875.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090701-225222.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090702-032614.125.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090702-032616.093.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090702-090758.203.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090702-090801.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090702-092253.953.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090702-203656.359.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090702-225813.015.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090703-051309.468.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090703-090256.750.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090703-111216.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090703-130635.968.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090703-155421.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090703-205840.171.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090704-092203.546.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090704-120653.750.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090704-123409.437.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090704-130356.187.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090704-130902.234.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090704-132346.312.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090704-143436.937.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090704-143800.890.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090704-180728.140.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090704-190609.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090704-195227.859.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090704-215842.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090704-215845.125.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090705-013104.359.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090705-013106.734.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090705-102121.875.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090705-112552.000.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090705-131810.781.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090705-153137.125.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090706-021501.718.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090706-021522.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090706-031140.343.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090706-062318.796.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090706-100943.578.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090707-061154.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090707-100736.468.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090707-103003.296.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090707-121121.703.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090707-165759.859.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090708-084823.187.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090708-091255.937.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090708-103753.015.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090708-211020.515.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090709-075117.890.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090709-214924.859.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090709-230256.937.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090710-073619.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090710-093550.734.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090710-094706.531.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090710-113618.625.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090710-182405.859.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090710-183108.562.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090710-193405.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090711-062512.687.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090711-115039.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090711-115044.046.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090711-165751.343.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090711-165754.437.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090711-174157.531.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090711-194226.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090711-204110.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090711-204500.515.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090711-204724.609.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090711-215504.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090711-221720.312.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090711-224313.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090711-230507.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090712-031818.281.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090712-120616.109.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090712-133303.453.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090712-135142.109.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090712-142416.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090712-153301.046.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090712-160746.156.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090712-162924.375.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090712-164307.484.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090712-221024.390.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090712-222455.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-005305.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-013045.515.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-031737.968.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-031914.765.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-031917.437.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-064648.296.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-083457.656.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-090011.203.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-095512.765.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-095517.296.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-134259.031.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-134301.718.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-134512.937.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-134516.812.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-135302.796.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-135304.531.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-210049.296.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-213431.468.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-221649.343.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090713-234526.031.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-000423.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-001952.875.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-011042.515.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-060527.437.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-060615.781.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-060646.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-061049.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-102614.687.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-114808.750.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-121244.328.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-121501.968.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-121809.578.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090714-121841.359.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090715-053933.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090715-054014.937.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090715-222347.750.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090715-222501.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090715-223702.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090715-223745.828.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090715-223854.656.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090716-004347.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090716-231316.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090716-234148.281.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090717-002339.281.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090717-132347.328.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090717-132507.953.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\NP_20090729-061251.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.3.0.4160\rstatus.md (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\config.md (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\ipdata.md (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090729-061852.750.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090729-101329.703.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090729-200541.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090729-212952.296.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090730-060656.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090730-080315.671.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090730-204931.203.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090731-002130.000.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090731-083922.734.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090731-153858.765.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090731-184306.734.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090731-185723.750.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090731-215314.656.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090801-013436.718.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090801-013553.125.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090801-092711.171.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090801-100001.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090801-204723.562.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090802-111836.281.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090802-120018.187.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090802-121443.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090803-004834.937.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090803-021703.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090803-044814.468.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090803-074726.718.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090803-084758.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090803-193330.640.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090803-193350.468.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090803-193352.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090804-010437.515.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090804-013716.109.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090804-083737.578.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090804-105715.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090804-120448.578.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090804-122548.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090804-214916.343.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090804-215339.796.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090804-215701.687.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090805-033045.796.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090805-110104.484.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090805-112541.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090805-113205.343.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090805-163559.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090805-175337.343.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090805-194209.890.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090805-194606.968.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090805-221455.593.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090806-010539.484.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090806-045733.656.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090806-112523.000.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090806-123336.437.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090806-150554.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090806-150949.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090806-151354.234.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090806-154443.781.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090807-090949.203.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090807-102003.234.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090807-124245.234.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090807-141005.484.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090807-171855.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090807-182617.484.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090807-183350.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090807-222918.656.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090808-035233.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090808-095342.625.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090808-124142.937.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090808-174541.812.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090808-175309.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090808-222731.015.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090809-092546.859.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090809-145114.812.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090809-145208.718.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090809-162156.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090809-163239.203.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090809-164858.640.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090809-165405.812.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090809-175725.546.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090809-232650.000.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090810-063918.812.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090810-094812.343.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090810-100358.031.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090810-103603.140.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090810-114449.671.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090810-120547.187.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090810-120844.734.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090810-132733.187.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090810-143914.968.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090810-153351.968.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090810-153508.468.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090811-060555.031.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090811-083635.234.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090811-083655.187.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090811-120552.281.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090811-121620.609.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090811-122346.890.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090811-154445.656.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090811-222837.156.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090811-222846.968.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090811-222852.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090811-222902.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090811-222910.625.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090811-232128.593.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090811-233102.718.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-000723.937.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-001022.375.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-001658.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-002704.765.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-002708.968.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-003659.531.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-003707.046.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-004659.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-004754.531.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-004926.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-005128.156.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-005245.281.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-005659.000.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-010658.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-010741.312.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-010952.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-011659.015.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-012645.203.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-012800.203.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-013450.156.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-013607.781.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-014222.296.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-014514.125.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-015144.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-020144.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-021017.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-021144.234.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-022144.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-022207.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-023147.671.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-024148.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-025144.718.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-030144.546.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-030149.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-030824.187.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-030849.562.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-031144.390.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-032144.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-033144.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-033207.609.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-034144.437.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-034219.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-060727.859.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-060942.125.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-061629.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-061644.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-062644.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-063644.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-063651.859.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-064644.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-064748.437.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-065644.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-070644.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-070834.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-071007.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-071122.359.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-071428.125.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-071644.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-072644.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-073644.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-073648.546.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-074644.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-075644.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-075755.750.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-075951.687.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-080425.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-080644.296.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-081644.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-081738.640.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-082644.281.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-083644.234.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-092756.828.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-092919.531.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-093732.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-094732.312.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-094850.234.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-095000.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-095735.781.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-100733.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-101735.953.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-102734.078.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-102738.609.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-103144.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-103732.609.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-104523.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-104732.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-105732.390.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-115746.000.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-115851.609.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-120702.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-121702.859.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-122703.015.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-123634.625.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-123702.859.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-123745.015.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-125736.671.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-130618.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-130847.234.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-131846.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-131938.359.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-132758.515.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-132802.343.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-133618.375.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-133747.828.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-201309.640.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-201400.390.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-201534.609.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-201613.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-201711.187.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-202222.015.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-202909.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-203222.078.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-204222.109.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-205616.625.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-211800.437.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-211901.125.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-212734.625.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-213734.578.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-214734.640.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-215401.046.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-220332.109.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-221334.937.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-222332.015.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-223337.078.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-223843.828.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-223848.468.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-224332.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-225331.093.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-230331.015.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-231331.078.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-232331.046.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-233331.046.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-234331.093.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090812-235331.046.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090813-000725.734.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090813-000908.734.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090813-001658.390.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090813-001705.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090813-002950.046.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090813-003027.640.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090813-003052.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090813-003902.453.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090813-003913.093.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090813-004902.453.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090813-005902.468.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090813-010902.453.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090813-010906.078.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090813-011902.484.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090813-012902.437.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\NP_20090813-013902.437.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Internet Saving Optimizer\3.4.0.4340\rstatus.md (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\config.md (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-000033.781.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-000134.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-081857.375.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-084533.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-094713.890.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-095348.078.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-095358.609.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-095822.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-101102.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-132910.734.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-202257.453.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-204258.890.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-210832.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-213922.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-214053.953.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-214250.203.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-220803.390.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-221146.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-222037.859.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090701-225222.312.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090702-032614.125.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090702-032616.093.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090702-090758.156.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090702-090801.484.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090702-092253.937.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090702-203656.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090702-225813.015.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090703-051309.453.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090703-090256.109.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090703-111216.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090703-130635.968.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090703-155421.171.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090703-205840.156.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090704-092203.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090704-120653.734.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090704-123409.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090704-130356.171.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090704-130902.234.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090704-132346.312.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090704-143436.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090704-143800.890.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090704-180728.125.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090704-190609.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090704-195227.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090704-215842.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090704-215845.125.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090705-013104.343.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090705-013106.718.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090705-102121.781.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090705-112552.000.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090705-131810.781.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090705-153137.078.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090706-021501.703.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090706-021522.390.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090706-031140.343.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090706-062318.734.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090706-100943.531.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090707-061154.031.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090707-100736.375.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090707-103003.296.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090707-121121.703.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090707-165759.796.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090708-084823.140.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090708-091255.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090708-103752.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090708-211020.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090709-075117.875.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090709-214924.796.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090709-230256.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090710-073619.187.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090710-093550.703.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090710-094706.468.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090710-113618.578.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090710-182405.750.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090710-183108.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090710-193405.875.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090711-062512.640.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090711-115039.828.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090711-115044.046.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090711-165751.281.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090711-165754.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090711-174157.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090711-194226.015.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090711-204110.812.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090711-204500.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090711-204724.593.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090711-215504.953.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090711-221720.296.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090711-224313.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090711-230507.375.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090712-031818.234.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090712-120616.093.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090712-133303.453.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090712-135142.093.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090712-142416.484.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090712-153301.000.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090712-160746.140.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090712-162924.312.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090712-164307.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090712-221024.359.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090712-222455.343.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-005305.093.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-013045.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-031737.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-031914.765.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-031917.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-064648.296.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-083457.578.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-090011.156.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-095512.765.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-095517.296.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-134259.031.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-134301.718.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-134512.937.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-134516.796.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-135302.796.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-135304.515.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-210049.281.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-213431.312.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-221649.296.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090713-234526.031.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090714-000423.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090714-001952.875.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090714-011042.515.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090714-060527.390.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090714-060615.781.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090714-060646.828.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090714-061049.156.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090714-102614.671.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090714-114808.734.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090714-121244.296.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090714-121501.953.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090714-121809.562.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090714-121841.343.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090715-053933.890.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090715-054014.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090715-222347.671.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090715-222501.890.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090715-223702.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090715-223745.812.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090715-223854.640.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090716-004347.890.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\HJHP_20090716-231316.203.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.3.0.790\ipdata.md (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\config.md (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090716-231325.875.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090716-234148.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-002339.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-003437.375.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-003637.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-003639.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-003713.312.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-010900.328.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-010944.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-010946.453.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-010954.312.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-011159.890.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-011203.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-011237.359.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-012753.812.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-060051.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-102908.078.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-130153.859.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-132347.281.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-132507.937.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-161900.765.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-162912.718.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-211834.718.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090717-222628.781.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090718-022548.718.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090718-061958.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090718-105727.546.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090718-213330.437.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090718-213704.703.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090718-220550.015.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090718-221312.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090719-103838.468.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090719-180155.890.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090720-094838.890.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090720-211454.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090720-225140.578.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090720-231503.687.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090721-061107.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090721-073615.484.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090721-113727.156.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090721-163350.625.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090721-234230.046.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090722-010310.781.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090722-060910.953.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090722-091303.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090722-100546.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090722-163703.312.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090723-060712.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090723-104525.625.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090723-143046.015.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090723-150149.203.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090724-060628.968.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090724-103432.546.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090724-172947.625.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090724-173011.750.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090724-185515.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090724-230837.359.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090725-010819.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090725-055932.937.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090725-102931.578.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090725-110747.609.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090725-114514.687.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090725-115718.078.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090725-131132.828.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090725-183414.593.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090725-235757.171.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090726-003833.531.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090726-075214.125.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090726-231449.671.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090726-231818.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090727-024335.234.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090727-060833.515.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090727-102215.703.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090727-134320.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090727-155604.671.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090727-225830.937.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090728-025838.312.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090728-060229.109.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090728-101258.609.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090728-130437.593.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090728-194347.734.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090728-194903.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090728-200846.140.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090728-201039.703.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090728-235101.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090729-061025.953.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090729-061251.703.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090729-061846.484.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090729-061852.687.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090729-101329.390.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090729-200540.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090729-212951.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090730-060656.765.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090730-080315.593.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090730-204931.171.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090731-002129.937.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090731-083922.703.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090731-153858.625.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090731-184306.718.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090731-185723.734.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090731-215314.609.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090801-013436.687.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090801-013553.109.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090801-092711.156.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090801-100001.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090801-204723.531.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090802-111836.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090802-120018.171.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090802-121443.187.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090803-004834.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090803-021703.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090803-044814.281.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090803-074726.609.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090803-084758.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090803-193330.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090803-193350.468.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090803-193352.828.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090804-010437.453.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090804-013716.093.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090804-083737.453.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090804-105715.890.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090804-120448.562.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090804-122548.312.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090804-214915.953.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090804-215339.796.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090804-215701.671.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090805-033045.453.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090805-110104.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090805-112541.890.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090805-113205.343.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090805-163559.140.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090805-175337.234.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090805-194209.875.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090805-194606.968.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090805-221455.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090806-010539.390.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090806-045733.578.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090806-112522.750.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090806-123336.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090806-150554.359.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090806-150949.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090806-151354.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090806-154443.765.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090807-090949.171.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090807-102003.187.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090807-124245.171.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090807-141005.468.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090807-171855.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090807-182617.484.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090807-183350.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090807-222918.625.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090808-035233.875.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090808-095342.515.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090808-124142.890.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090808-174541.796.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090808-175309.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090808-222730.953.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090809-092546.734.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090809-145114.359.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090809-145208.718.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090809-162156.953.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090809-163239.125.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090809-164858.640.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090809-165405.718.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090809-175725.468.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090809-232649.968.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090810-063918.765.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090810-094812.328.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090810-100358.031.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090810-103603.125.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090810-114449.656.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090810-120547.187.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090810-120844.703.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090810-132733.156.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090810-143914.875.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090810-153351.921.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090810-153508.453.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090811-060554.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090811-083635.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090811-083655.171.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090811-120552.203.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090811-121620.609.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090811-122346.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090811-154445.625.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090811-222837.140.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090811-222846.968.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090811-222852.484.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090811-222902.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090811-222910.609.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090811-232127.718.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090811-233102.703.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-000722.671.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-001022.375.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-001658.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-002704.578.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-002708.968.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-003659.531.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-003707.046.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-004659.046.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-004754.515.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-004926.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-005128.125.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-005245.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-005658.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-010658.968.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-010741.296.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-010952.203.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-011659.015.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-012644.734.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-012800.203.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-013450.140.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-013607.765.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-014221.656.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-014514.125.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-015144.234.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-020144.203.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-021017.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-021144.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-022144.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-022207.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-023147.546.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-024148.109.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-025144.703.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-030144.531.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-030149.046.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-030824.156.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-030849.562.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-031144.390.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-032144.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-033144.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-033207.593.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-034144.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-034219.046.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-060726.828.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-060942.078.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-061629.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-061644.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-062644.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-063644.203.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-063651.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-064644.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-064748.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-065644.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-070644.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-070834.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-071007.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-071122.359.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-071428.109.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-071644.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-072644.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-073644.234.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-073648.546.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-074644.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-075644.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-075755.750.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-075951.671.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-080425.265.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-080644.281.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-081644.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-081738.625.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-082644.281.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-083644.234.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-092755.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-092919.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-093732.203.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-094732.296.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-094850.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-095000.984.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-095735.671.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-100733.875.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-101735.828.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-102734.046.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-102738.593.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-103144.031.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-103732.593.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-104523.968.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-104732.406.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-105732.375.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-115745.328.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-115851.593.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-120702.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-121702.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-122703.000.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-123634.625.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-123702.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-123745.015.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-125736.546.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-130618.250.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-130847.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-131845.218.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-131938.343.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-132758.500.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-132802.328.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-133617.765.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-133747.812.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-201309.312.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-201400.375.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-201534.609.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-201613.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-201711.187.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-202222.015.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-202909.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-203222.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-204222.093.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-205616.562.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-211759.000.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-211901.109.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-212734.625.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-213734.578.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-214734.625.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-215359.734.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-220332.031.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-221334.843.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-222331.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-223337.000.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-223843.640.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-223848.453.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-224332.234.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-225331.078.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-230331.000.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-231331.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-232331.031.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-233331.031.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-234331.078.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090812-235331.046.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090813-000724.375.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090813-000908.718.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090813-001658.390.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090813-001705.484.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090813-002949.093.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090813-003027.609.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090813-003052.906.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090813-003902.453.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090813-003913.078.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090813-004902.437.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090813-005902.453.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090813-010902.437.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090813-010906.062.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090813-011902.484.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090813-012902.421.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\HJHP_20090813-013902.437.log (Adware.DoubleD) -> Quarantined and deleted successfully. C:\Documents and Settings\pc\Local Settings\Application Data\Media Access Startup\1.5.0.850\ipdata.md (Adware.DoubleD) -> Quarantined and deleted successfully. C:\WINDOWS\explorer.backup (Heuristics.Reserved.Word.Exploit) -> Quarantined and deleted successfully. ESETSmartInstaller@High as CAB hook log: OnlineScanner.ocx - registred OK # version=6 # iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339) # OnlineScanner.ocx=1.0.0.6048 # api_version=3.0.2 # EOSSerial=6555dd8d0d70fe4a931bc722f24a945e # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2009-08-13 12:32:58 # local_time=2009-08-13 05:32:58 (-0800, Pacific Daylight Time) # country="United States" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=8199 37 100 100 118526093750 # scanned=120865 # found=26 # cleaned=0 # scan_time=2601 # nod_component=V3 Build:0x30000000 C:\Documents and Settings\pc\Desktop\J's documents\NodEnabler.v2.8_funbox.rar Win32/HackAV.BS application 00000000000000000000000000000000 I C:\Program Files\ESET\nodenable.exe Win32/HackAV.BS application 00000000000000000000000000000000 I C:\Qoobox\Quarantine\C\Program Files\MyWebSearch\bar\2.bin\F3HKSTUB.DLL.vir Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\Qoobox\Quarantine\C\Program Files\MyWebSearch\bar\2.bin\F3REGHK.DLL.vir Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\Qoobox\Quarantine\C\Program Files\MyWebSearch\bar\2.bin\F3WPHOOK.DLL.vir Win32/FunWeb application 00000000000000000000000000000000 I C:\Qoobox\Quarantine\C\Program Files\MyWebSearch\bar\2.bin\M3HIGHIN.EXE.vir Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\Qoobox\Quarantine\C\Program Files\MyWebSearch\bar\2.bin\M3IMPIPE.EXE.vir Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\Qoobox\Quarantine\C\Program Files\MyWebSearch\bar\2.bin\M3MEDINT.EXE.vir Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\Qoobox\Quarantine\C\Program Files\MyWebSearch\bar\2.bin\M3SKPLAY.EXE.vir Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\Qoobox\Quarantine\C\Program Files\MyWebSearch\bar\2.bin\M3SRCHMN.EXE.vir Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\Qoobox\Quarantine\C\Program Files\MyWebSearch\bar\2.bin\MWSBAR.DLL.vir Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\Qoobox\Quarantine\C\Program Files\MyWebSearch\bar\2.bin\MWSOEPLG.DLL.vir Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\Qoobox\Quarantine\C\Program Files\MyWebSearch\bar\2.bin\MWSSRCAS.DLL.vir Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\Qoobox\Quarantine\C\WINDOWS\system32\UAChwdyxabvpd.dll.vir Win32/Olmarik.KI trojan 00000000000000000000000000000000 I C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300873.dll Win32/Olmarik.KI trojan 00000000000000000000000000000000 I C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300918.DLL Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300919.DLL Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300920.DLL Win32/FunWeb application 00000000000000000000000000000000 I C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300922.EXE Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300923.EXE Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300924.EXE Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300926.EXE Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300927.EXE Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300928.DLL Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300929.DLL Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300930.DLL Win32/Toolbar.MyWebSearch application 00000000000000000000000000000000 I

CatByte

Post #8August 13, 2009, 3:01 AM UTC

Correct me if i am wrong, but i believe you have a software crack on your system

C:\Documents and Settings\pc\Desktop\J's documents\NodEnabler.v2.8_funbox.rar Win32/HackAV.BS
C:\Program Files\ESET\nodenable.exe Win32/HackAV.BS application

which leaves me to believe the Nod32 Antivirus is a pirated version.

There are plenty of excellent free antivirus programs available.

Remove the pirated software from your system.

Download this excellent antivirus:
Avira AntiVir Personal

If there was any doubt in your mind about the dangers of downloading cracks or keygens, the state of your computer should convince you this type of practice is simply not worth it - especially when there are plenty of free programs available.

Once you have removed all the pirated software. Post a fresh DDS log and I will do the final tool clean up and what ever housekeeping that remains.

Please see this topic for more information:
Perils of P2P File Sharing.

7e5PE

Post #9August 13, 2009, 5:28 PM UTC

after i download avira should i scan or just do the dds?

CatByte

Post #10August 13, 2009, 5:40 PM UTC last edited August 13, 2009, 5:41 PM UTC

Hi, Please do both. Just post the DDS log (and Attach.txt) and advise what Avira found (if anything)

7e5PE

Post #11August 13, 2009, 7:32 PM UTC

Avira AntiVir Personal Report file date: Friday, August 14, 2009 03:12 Scanning for 1637477 virus strains and unwanted programs. Licensee : Avira AntiVir Personal - FREE Antivirus Serial number : 0000149996-ADJIE-0000001 Platform : Windows XP Windows version : (Service Pack 3) [5.1.2600] Boot mode : Normally booted Username : SYSTEM Computer name : ASUS Version information: BUILD.DAT : 9.0.0.407 17961 Bytes 7/29/2009 10:34:00 AVSCAN.EXE : 9.0.3.7 466689 Bytes 7/21/2009 21:36:14 AVSCAN.DLL : 9.0.3.0 40705 Bytes 2/27/2009 18:58:24 LUKE.DLL : 9.0.3.2 209665 Bytes 2/20/2009 19:35:49 LUKERES.DLL : 9.0.2.0 12033 Bytes 2/27/2009 18:58:52 ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 10/27/2008 20:30:36 ANTIVIR1.VDF : 7.1.4.132 5707264 Bytes 6/24/2009 17:21:42 ANTIVIR2.VDF : 7.1.5.88 2668032 Bytes 8/10/2009 09:57:29 ANTIVIR3.VDF : 7.1.5.110 263680 Bytes 8/13/2009 09:58:06 Engineversion : 8.2.1.1 AEVDF.DLL : 8.1.1.1 106868 Bytes 7/28/2009 21:31:50 AESCRIPT.DLL : 8.1.2.25 459130 Bytes 8/14/2009 10:06:16 AESCN.DLL : 8.1.2.4 127348 Bytes 7/23/2009 17:59:39 AERDL.DLL : 8.1.2.4 430452 Bytes 7/23/2009 17:59:39 AEPACK.DLL : 8.1.3.18 401783 Bytes 7/28/2009 21:31:50 AEOFFICE.DLL : 8.1.0.38 196987 Bytes 7/23/2009 17:59:39 AEHEUR.DLL : 8.1.0.154 1917302 Bytes 8/14/2009 10:03:18 AEHELP.DLL : 8.1.5.3 233846 Bytes 7/23/2009 17:59:39 AEGEN.DLL : 8.1.1.56 356725 Bytes 8/14/2009 09:58:44 AEEMU.DLL : 8.1.0.9 393588 Bytes 10/9/2008 22:32:40 AECORE.DLL : 8.1.7.6 184694 Bytes 7/23/2009 17:59:39 AEBB.DLL : 8.1.0.3 53618 Bytes 10/9/2008 22:32:40 AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 16:47:59 AVPREF.DLL : 9.0.0.1 43777 Bytes 12/5/2008 18:32:15 AVREP.DLL : 8.0.0.3 155905 Bytes 1/20/2009 22:34:28 AVREG.DLL : 9.0.0.0 36609 Bytes 12/5/2008 18:32:09 AVARKT.DLL : 9.0.0.3 292609 Bytes 3/24/2009 23:05:41 AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 1/30/2009 18:37:08 SQLITE3.DLL : 3.6.1.0 326401 Bytes 1/28/2009 23:03:49 SMTPLIB.DLL : 9.2.0.25 28417 Bytes 2/2/2009 16:21:33 NETNT.DLL : 9.0.0.0 11521 Bytes 12/5/2008 18:32:10 RCIMAGE.DLL : 9.0.0.25 2438913 Bytes 5/15/2009 23:39:58 RCTEXT.DLL : 9.0.37.0 86785 Bytes 4/17/2009 18:19:48 Configuration settings for the scan: Jobname………………………..: Complete system scan Configuration file………………: c:\program files\avira\antivir desktop\sysscan.avp Logging………………………..: low Primary action………………….: interactive Secondary action………………..: ignore Scan master boot sector………….: on Scan boot sector………………..: on Boot sectors……………………: C:, D:, F:, Process scan……………………: on Scan registry…………………..: on Search for rootkits……………..: on Integrity checking of system files..: off Scan all files………………….: All files Scan archives…………………..: on Recursion depth…………………: 20 Smart extensions………………..: on Macro heuristic…………………: on File heuristic………………….: medium Start of the scan: Friday, August 14, 2009 03:12 Starting search for hidden objects. '24450' objects were checked, '0' hidden objects were found. The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'DivX Player.exe' - '1' Module(s) have been scanned Scan process 'firefox.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'UpdateCenterService.exe' - '1' Module(s) have been scanned Scan process 'TUProgSt.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'PnkBstrA.exe' - '1' Module(s) have been scanned Scan process 'IoctlSvc.exe' - '1' Module(s) have been scanned Scan process 'nTuneService.exe' - '1' Module(s) have been scanned Scan process 'NBService.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'veohwebplayer.exe' - '1' Module(s) have been scanned Scan process 'rundll32.exe' - '1' Module(s) have been scanned Scan process 'AiNap.exe' - '1' Module(s) have been scanned Scan process 'RTHDCPL.EXE' - '1' Module(s) have been scanned Scan process 'ipoint.exe' - '1' Module(s) have been scanned Scan process 'LSSrvc.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 35 processes with 35 modules were scanned Starting master boot sector scan: Master boot sector HD0 [INFO] No virus was found! Start scanning boot sectors: Boot sector 'C:\' [INFO] No virus was found! Boot sector 'D:\' [INFO] No virus was found! Boot sector 'F:\' [INFO] No virus was found! Starting to scan executable files (registry). The registry was scanned ( '61' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! [NOTE] This file is a Windows system file. [NOTE] This file cannot be opened for scanning. C:\Documents and Settings\pc\Application Data\Auslogics\Rescue\One Button Checkup\090812132424906.rsc [0] Archive type: ZIP –> 090812132424906-000191.file [DETECTION] Is the TR/Click.VBiframe.XI Trojan –> 090812132424906-000205.file [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan –> 090812132424906-000206.file [DETECTION] Is the TR/Click.VBiframe.XI Trojan C:\Documents and Settings\pc\Desktop\J's documents\NodEnabler.v2.8_funbox.rar [0] Archive type: RAR –> NodEnabler.v2.8\setupx86.exe [DETECTION] Is the TR/Agent.871556.A Trojan C:\Program Files\ESET\nodenable.exe [DETECTION] Is the TR/Spy.326829 Trojan C:\Program Files\GameHouse Games Collection\Magic Ball 2\MagicBall2.exe [DETECTION] Contains recognition pattern of the WORM/IrcBot.707180 worm C:\Qoobox\Quarantine\C\Program Files\Media Access Startup\1.5.0.850\HPIEAddOn.dll.vir [DETECTION] Is the TR/Dldr.Agent.cikx Trojan C:\Qoobox\Quarantine\C\WINDOWS\system32\net.net.vir [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan C:\Qoobox\Quarantine\C\WINDOWS\system32\UAChwdyxabvpd.dll.vir [DETECTION] Is the TR/Alureon.BF.2 Trojan C:\Qoobox\Quarantine\C\WINDOWS\system32\UACktklqapset.dll.vir [DETECTION] Is the TR/Alureon.20480C.1 Trojan C:\Qoobox\Quarantine\C\WINDOWS\system32\UACkyigtatkbu.dll.vir [DETECTION] Is the TR/Alureon.30208R Trojan C:\Qoobox\Quarantine\C\WINDOWS\system32\UACwyrckolild.dll.vir [DETECTION] Is the TR/TDss.amwo Trojan C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300872.dll [DETECTION] Is the TR/TDss.amwo Trojan C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300873.dll [DETECTION] Is the TR/Alureon.BF.2 Trojan C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300874.dll [DETECTION] Is the TR/Alureon.30208R Trojan C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300875.dll [DETECTION] Is the TR/Alureon.20480C.1 Trojan C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300914.dll [DETECTION] Is the TR/Dldr.Agent.cikx Trojan C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0301081.exe [DETECTION] Is the TR/Trash.Gen Trojan C:\WINDOWS\system32\drivers\sptd.sys [WARNING] The file could not be opened! Begin scan in 'D:\' D:\LimeWire\Downloads\OPM\Imago\Imago - The Butterfly Effect.mp3 [DETECTION] Is the TR/Dldr.WMA.Wimad.N Trojan D:\LimeWire\Downloads\ROCK\EMO\Silverstein\Silverstein - If You Could See into My Soul.mp3 [DETECTION] Is the TR/Dldr.WMA.Wimad.N Trojan D:\LimeWire\Downloads\Saved\Twilight Soundtrack- Paramore- I Caught Myself.mp3 [DETECTION] Is the TR/Dldr.WMA.Wimad.N Trojan D:\System Volume Information\_restore{2B6B95C5-7891-405B-81B5-6ACC7CEE60E4}\RP8\A0001165.exe [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan D:\System Volume Information\_restore{2B6B95C5-7891-405B-81B5-6ACC7CEE60E4}\RP8\A0001170.exe [DETECTION] Is the TR/Spy.61440.F Trojan Begin scan in 'F:\' F:\Chocolatier\Chocolatier.exe [DETECTION] Is the TR/Dropper.Gen Trojan F:\Warcraft III\WARCRAFT.3.104.LEITWOLF.NOCD.ZIP [0] Archive type: ZIP –> W3Tools/runonce.exe [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan F:\Warcraft III\Original WIII\warcraft3 keygen.exe [DETECTION] Is the TR/Spy.61440.F Trojan F:\Warcraft III\W3Tools\runonce.exe [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan Beginning disinfection: C:\Documents and Settings\pc\Application Data\Auslogics\Rescue\One Button Checkup\090812132424906.rsc [NOTE] The file was moved to '4ab541a5.qua'! C:\Documents and Settings\pc\Desktop\J's documents\NodEnabler.v2.8_funbox.rar [NOTE] The file was moved to '4ae941dc.qua'! C:\Program Files\ESET\nodenable.exe [DETECTION] Is the TR/Spy.326829 Trojan [NOTE] The file was moved to '4b687455.qua'! C:\Program Files\GameHouse Games Collection\Magic Ball 2\MagicBall2.exe [DETECTION] Contains recognition pattern of the WORM/IrcBot.707180 worm [NOTE] The file was moved to '4aec41ce.qua'! C:\Qoobox\Quarantine\C\Program Files\Media Access Startup\1.5.0.850\HPIEAddOn.dll.vir [DETECTION] Is the TR/Dldr.Agent.cikx Trojan [NOTE] The file was moved to '4ace41bd.qua'! C:\Qoobox\Quarantine\C\WINDOWS\system32\net.net.vir [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan [NOTE] The file was moved to '4af941d3.qua'! C:\Qoobox\Quarantine\C\WINDOWS\system32\UAChwdyxabvpd.dll.vir [DETECTION] Is the TR/Alureon.BF.2 Trojan [NOTE] The file was moved to '4ac841af.qua'! C:\Qoobox\Quarantine\C\WINDOWS\system32\UACktklqapset.dll.vir [DETECTION] Is the TR/Alureon.20480C.1 Trojan [NOTE] The file was moved to '4900a1e8.qua'! C:\Qoobox\Quarantine\C\WINDOWS\system32\UACkyigtatkbu.dll.vir [DETECTION] Is the TR/Alureon.30208R Trojan [NOTE] The file was moved to '4b413278.qua'! C:\Qoobox\Quarantine\C\WINDOWS\system32\UACwyrckolild.dll.vir [DETECTION] Is the TR/TDss.amwo Trojan [NOTE] The file was moved to '4b423a20.qua'! C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300872.dll [DETECTION] Is the TR/TDss.amwo Trojan [NOTE] The file was moved to '4ab8419e.qua'! C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300873.dll [DETECTION] Is the TR/Alureon.BF.2 Trojan [NOTE] The file was moved to '4b3c0d7f.qua'! C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300874.dll [DETECTION] Is the TR/Alureon.30208R Trojan [NOTE] The file was moved to '49f9bc5f.qua'! C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300875.dll [DETECTION] Is the TR/Alureon.20480C.1 Trojan [NOTE] The file was moved to '49fb4417.qua'! C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0300914.dll [DETECTION] Is the TR/Dldr.Agent.cikx Trojan [NOTE] The file was moved to '49fc4ccf.qua'! C:\System Volume Information\_restore{0053D3A8-D32C-4F51-A6FC-CDD85159D990}\RP440\A0301081.exe [DETECTION] Is the TR/Trash.Gen Trojan [NOTE] The file was moved to '4ab8419f.qua'! D:\LimeWire\Downloads\OPM\Imago\Imago - The Butterfly Effect.mp3 [DETECTION] Is the TR/Dldr.WMA.Wimad.N Trojan [NOTE] The file was moved to '4ae641dc.qua'! D:\LimeWire\Downloads\ROCK\EMO\Silverstein\Silverstein - If You Could See into My Soul.mp3 [DETECTION] Is the TR/Dldr.WMA.Wimad.N Trojan [NOTE] The file was moved to '4af141d8.qua'! D:\LimeWire\Downloads\Saved\Twilight Soundtrack- Paramore- I Caught Myself.mp3 [DETECTION] Is the TR/Dldr.WMA.Wimad.N Trojan [NOTE] The file was moved to '4aee41e6.qua'! D:\System Volume Information\_restore{2B6B95C5-7891-405B-81B5-6ACC7CEE60E4}\RP8\A0001165.exe [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan [NOTE] The file was moved to '4ab5419f.qua'! D:\System Volume Information\_restore{2B6B95C5-7891-405B-81B5-6ACC7CEE60E4}\RP8\A0001170.exe [DETECTION] Is the TR/Spy.61440.F Trojan [NOTE] The file was moved to '49f35d40.qua'! F:\Chocolatier\Chocolatier.exe [DETECTION] Is the TR/Dropper.Gen Trojan [NOTE] The file was moved to '4af441d7.qua'! F:\Warcraft III\WARCRAFT.3.104.LEITWOLF.NOCD.ZIP [NOTE] The file was moved to '4ad741b1.qua'! F:\Warcraft III\Original WIII\warcraft3 keygen.exe [DETECTION] Is the TR/Spy.61440.F Trojan [NOTE] The file was moved to '4af741d1.qua'! F:\Warcraft III\W3Tools\runonce.exe [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan [NOTE] The file was moved to '4af341e5.qua'! End of the scan: Friday, August 14, 2009 03:50 Used time: 37:43 Minute(s) The scan has been done completely. 11795 Scanned directories 489668 Files were scanned 27 Viruses and/or unwanted programs were found 0 Files were classified as suspicious 0 files were deleted 0 Viruses and unwanted programs were repaired 25 Files were moved to quarantine 0 Files were renamed 2 Files cannot be scanned 489639 Files not concerned 3614 Archives were scanned 2 Warnings 26 Notes 24450 Objects were scanned with rootkit scan 0 Hidden objects were found DDS (Ver_09-07-30.01) - NTFSx86 Run by [removed] at 3:53:07.26 on Fri 08/14/2009 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_07 Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3071.2374 [GMT -7:00] AV: BitDefender Antivirus *On-access scanning disabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB} AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7} FW: BitDefender Firewall *disabled* {4055920F-2E99-48A8-A270-4243D2B8F242} ============== Running Processes =============== C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\Microsoft IntelliPoint\ipoint.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe C:\WINDOWS\system32\IoctlSvc.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\WINDOWS\System32\TUProgSt.exe C:\Program Files\NVIDIA Corporation\System Update\UpdateCenterService.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\DivX\DivX Player\DivX Player.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\WINDOWS\system32\notepad.exe C:\Documents and Settings\pc\Desktop\dds.scr ============== Pseudo HJT Report =============== uStart Page = hxxp://www.theprizeday.com/today.php mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html uInternet Connection Wizard,ShellNext = iexplore uInternet Settings,ProxyOverride = *.local uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll BHO: Octh Class: {000123b4-9b42-4900-b3f7-f4b073efc214} - c:\program files\orbitdownloader\orbitcth.dll BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_07\bin\ssv.dll BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn0\YTSingleInstance.dll TB: Grab Pro: {c55bbcd6-41ad-48ad-9953-3609c48eacc7} - c:\program files\orbitdownloader\GrabPro.dll TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll TB: Veoh Web Player Video Finder: {0fbb9689-d3d7-4f7a-a2e2-585b10099bfc} - c:\program files\veoh networks\veohwebplayer\VeohIEToolbar.dll uRun: [VeohPlugin] "c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe" mRun: [RTHDCPL] RTHDCPL.EXE mRun: [Ai Nap] "c:\program files\asus\ai suite\ainap\AiNap.exe" mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [nwiz] nwiz.exe /install mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min IE: &Download by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/201 IE: &Grab video by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/204 IE: Append Link Target to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Append to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert Link Target to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html IE: Do&wnload selected by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/203 IE: Down&load all by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/202 IE: E&xport to Microsoft Excel - c:\progra~1\microsoft office\office12\EXCEL.EXE/3000 IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_07\bin\ssv.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\microsoft office\office11\REFIEBAR.DLL DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab Notify: igfxcui - igfxdev.dll Notify: WBSrv - c:\program files\stardock\object desktop\windowblinds\WBSrv.dll AppInit_DLLs: c:\windows\system32\wbsys.dll SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll ================= FIREFOX =================== FF - ProfilePath - c:\docume~1\pc\applic~1\mozilla\firefox\profiles\lcbaypjo.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p= FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/ FF - prefs.js: keyword.URL - hxxp://search.freecause.com/search?fr=freecause&ourmark=3&type=59099&p= FF - plugin: c:\documents and settings\pc\application data\mozilla\firefox\profiles\lcbaypjo.default\extensions\[removed]\platform\winnt_x86-msvc\plugins\npmnqmp071101000055.dll FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nppl3260.dll FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nprpjplug.dll FF - plugin: c:\program files\veoh networks\veohwebplayer\NPVeohTVPlugin.dll FF - plugin: c:\program files\veoh networks\veohwebplayer\npWebPlayerVideoPluginATL.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\ FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} —- FIREFOX POLICIES —- FF - user.js: network.http.max-persistent-connections-per-server - 4 FF - user.js: content.max.tokenizing.time - 1800000 FF - user.js: content.notify.interval - 600000 FF - user.js: content.switch.threshold - 600000 FF - user.js: nglayout.initialpaint.delay - 600 FF - user.js: network.http.max-connections-per-server - 8 c:\program files\mozilla firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false); c:\program files\mozilla firefox\greprefs\all.js - pref("media.cache_size", 51200); c:\program files\mozilla firefox\greprefs\all.js - pref("media.ogg.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("media.wave.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("media.autoplay.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true); c:\program files\mozilla firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess"); c:\program files\mozilla firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120); c:\program files\mozilla firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3); c:\program files\mozilla firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true); c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.dpi", -1); c:\program files\mozilla firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1); c:\program files\mozilla firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true); c:\program files\mozilla firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0); c:\program files\mozilla firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072); c:\program files\mozilla firefox\greprefs\all.js - pref("geo.enabled", true); c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true); c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35"); c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror"); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false); c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json"); ============= SERVICES / DRIVERS =============== R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2009-8-14 11608] R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2009-8-14 108289] R2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2009-8-14 185089] R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2009-8-14 55656] R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [2009-5-6 604416] R3 L1e;Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1e51x86.sys [2009-2-19 38400] S0 eBoost;eBoostr caching filter driver;c:\windows\system32\drivers\eboost.sys –> c:\windows\system32\drivers\eBoost.sys [?] S2 BDVEDISK;BDVEDISK;\??\c:\program files\bitdefender\bitdefender 2009\bdvedisk.sys –> c:\program files\bitdefender\bitdefender 2009\BDVEDISK.sys [?] S2 RPCER;Remote Procedure Call (HNM);c:\program files\common files\odbc\comp.exe –> c:\program files\common files\odbc\comp.exe [?] S2 SeekappSrch Service;SeekappSrch Service;"c:\documents and settings\all users\application data\seekappsrch\seekapp145.exe" "c:\program files\seekappsrch\seekapp.dll" service –> c:\documents and settings\all users\application data\seekappsrch\seekapp145.exe [?] S3 Arrakis3;BitDefender Arrakis Server;"c:\program files\common files\bitdefender\bitdefender arrakis server\bin\arrakis3.exe" –> c:\program files\common files\bitdefender\bitdefender arrakis server\bin\Arrakis3.exe [?] S3 AtcL002;NDIS Miniport Driver for Atheros L2 Fast Ethernet Controller;c:\windows\system32\drivers\l251x86.sys [2008-10-15 30720] S3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys –> c:\windows\system32\drivers\bdfm.sys [?] S3 cpuz130;cpuz130;\??\c:\docume~1\pc\locals~1\temp\cpuz130\cpuz_x32.sys –> c:\docume~1\pc\locals~1\temp\cpuz130\cpuz_x32.sys [?] S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\pc\locals~1\temp\drz8b.tmp –> c:\docume~1\pc\locals~1\temp\DRZ8B.tmp [?] S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\gamemon.des -service –> c:\windows\system32\GameMon.des -service [?] S3 SBRE;SBRE;\??\c:\windows\system32\drivers\sbredrv.sys –> c:\windows\system32\drivers\SBREdrv.sys [?] S3 vvftav303;vvftav303;c:\windows\system32\drivers\vvftav303.sys [2009-2-23 475136] S3 ZSMC0303;INTEX Game Camera;c:\windows\system32\drivers\usbVM303.sys [2009-2-23 1474560] S4 EBOOSTRSVC;eBoostr Service;"c:\program files\eboostr\ebstrsvc.exe" –> c:\program files\eboostr\EBstrSvc.exe [?] =============== Created Last 30 ================ 2009-08-14 02:31 55,656 a——- c:\windows\system32\drivers\avgntflt.sys 2009-08-14 02:31 –d—– c:\program files\Avira 2009-08-14 02:31 –d—– c:\docume~1\alluse~1\applic~1\Avira 2009-08-13 03:31 –d—– c:\docume~1\pc\applic~1\Malwarebytes 2009-08-13 03:31 38,160 a——- c:\windows\system32\drivers\mbamswissarmy.sys 2009-08-13 03:31 19,096 a——- c:\windows\system32\drivers\mbam.sys 2009-08-13 03:31 –d—– c:\program files\Malwarebytes' Anti-Malware 2009-08-13 03:31 –d—– c:\docume~1\alluse~1\applic~1\Malwarebytes 2009-08-13 02:41 –ds—- C:\Combo-Fix 2009-08-13 01:52 -cd—– c:\windows\system32\dllcache\cache 2009-08-13 01:45 a-dshr– C:\cmdcons 2009-08-13 01:25 216,064 a——- c:\windows\PEV.exe 2009-08-13 01:25 161,792 a——- c:\windows\SWREG.exe 2009-08-13 01:25 98,816 a——- c:\windows\sed.exe 2009-08-11 22:33 –d—– c:\docume~1\pc\applic~1\Logs 2009-08-11 12:08 –d—– c:\docume~1\alluse~1\applic~1\Innovative Solutions 2009-08-06 15:18 67 a——- c:\windows\AoADVDRipper.INI 2009-08-06 15:18 45,056 a——- c:\windows\system32\Wnaspi32.dll 2009-08-06 15:18 16,877 a——- c:\windows\system32\drivers\Aspi32.sys 2009-08-06 15:18 4,455 a——- c:\windows\system\Winaspi.dll 2009-08-06 15:18 3,535 a——- c:\windows\system\Wowpost.exe 2009-08-06 15:18 77,824 a——- c:\windows\system32\xvid.ax 2009-08-06 15:18 –d—– c:\program files\Xvid 2009-08-06 15:18 –d—– c:\program files\AoA DVD Ripper 2009-08-06 14:48 –d—– c:\docume~1\pc\applic~1\NeroDigital™ 2009-08-03 02:47 447,752 a—-r– c:\windows\system32\vp6vfw.dll 2009-08-03 02:47 –d—– c:\program files\Microsoft WSE 2009-07-29 06:15 594,432 -c—— c:\windows\system32\dllcache\msfeeds.dll 2009-07-29 06:15 55,296 -c—— c:\windows\system32\dllcache\msfeedsbs.dll ==================== Find3M ==================== 2009-08-05 02:01 204,800 a——- c:\windows\system32\mswebdvd.dll 2009-07-17 12:01 58,880 a——- c:\windows\system32\atl.dll 2009-07-13 23:43 286,208 a——- c:\windows\system32\wmpdxm.dll 2009-07-09 22:49 49,152 a——- c:\windows\vmsnap3.exe 2009-07-09 22:49 262,144 a——- c:\windows\system32\wrap_oal.dll 2009-07-09 22:49 368,640 a——- c:\windows\system32\TwnLib4.dll 2009-07-09 22:49 40,960 a——- c:\windows\system32\VBAME.DLL 2009-07-09 22:47 57,344 a——- c:\windows\ALCMTR.EXE 2009-07-09 22:45 90,112 a——- C:\Progr_.dll 2009-07-03 10:09 915,456 a——- c:\windows\system32\wininet.dll 2009-06-27 00:16 24,576 a—-r– c:\windows\system32\AsIO.dll 2009-06-16 07:36 119,808 a——- c:\windows\system32\t2embed.dll 2009-06-16 07:36 81,920 a——- c:\windows\system32\fontsub.dll 2009-06-12 05:31 80,896 a——- c:\windows\system32\tlntsess.exe 2009-06-12 05:31 76,288 a——- c:\windows\system32\telnet.exe 2009-06-10 09:19 2,066,432 a——- c:\windows\system32\mstscax.dll 2009-06-10 07:13 84,992 a——- c:\windows\system32\avifil32.dll 2009-06-09 23:14 132,096 a——- c:\windows\system32\wkssvc.dll 2009-06-03 12:09 1,291,264 a——- c:\windows\system32\quartz.dll 2009-03-03 01:16 102,400 ac—— c:\docume~1\pc\applic~1\Serial_Grabber.exe 2006-06-24 15:48 32,768 ac—r– c:\windows\inf\UpdateUSB.exe ============= FINISH: 3:53:27.89 =============== UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT DDS (Ver_09-07-30.01) Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 10/15/2008 1:57:42 PM System Uptime: 8/13/2009 11:31:54 PM (4 hours ago) Motherboard: ASUSTeK Computer INC. | | P5QL PRO Processor: Intel Pentium III Xeon processor | LGA775 | 4000/402mhz ==== Disk Partitions ========================= C: is FIXED (NTFS) - 29 GiB total, 9.684 GiB free. D: is FIXED (NTFS) - 45 GiB total, 13.882 GiB free. E: is CDROM () F: is FIXED (NTFS) - 158 GiB total, 40.604 GiB free. ==== Disabled Device Manager Items ============= ==== System Restore Points =================== RP438: 8/11/2009 10:17:56 PM - System Checkpoint RP439: 8/11/2009 10:17:56 PM - System Checkpoint RP440: 8/11/2009 10:17:56 PM - System Checkpoint RP441: 8/13/2009 6:07:03 AM - System Checkpoint RP442: 8/13/2009 11:44:43 AM - Removed ESET NOD32 Antivirus RP443: 8/14/2009 2:29:05 AM - Avira AntiVir Personal - 8/14/2009 2:29 ==== Installed Programs ====================== µTorrent 183687 7-Zip 4.65 Acrobat.com Adobe Acrobat 9 Pro - English, Français, Deutsch Adobe AIR Adobe ExtendScript Toolkit 2 Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Setup Adobe Shockwave Player 11.5 AI Suite Allok 3GP PSP MP4 iPod Video Converter 4.8.0310 AoA DVD Ripper Apple Software Update ASUSUpdate Atheros Communications Inc.® AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver Atheros Communications Inc.® L2 Fast Ethernet Driver Atheros Ethernet Utility Auslogics BoostSpeed Avira AntiVir Personal - Free Antivirus Boost Windows Version 2.1 Call of Duty® - World at War™ Call of Duty® 4 - Modern Warfare™ CCleaner (remove only) Chikka Messenger V4 CircleSurround II Plugin for Windows Media Player Company of Heroes Company of Heroes - FAKEMSI Crysis WARHEAD® Destiny [removed] DivX Codec DivX Converter DivX Player DivX Plus DirectShow Filters DivX Web Player DriverMax 4 EPU-4 Engine ESET Online Scanner v3 EVEREST Ultimate Edition v5.00 Far Cry 2 Fraps Futuremark SystemInfo GameHouse Games Collection: Academy of Magic GameHouse Games Collection: Adventure Inlay GameHouse Games Collection: Adventure Inlay - Safari Edition GameHouse Games Collection: Air Strike 3D GameHouse Games Collection: Alien Sky GameHouse Games Collection: Aloha Solitaire GameHouse Games Collection: Aloha TriPeaks GameHouse Games Collection: Ancient Tri-Jong GameHouse Games Collection: Ancient Tripeaks GameHouse Games Collection: Astrobatics GameHouse Games Collection: Atlantis GameHouse Games Collection: Atomaders GameHouse Games Collection: Bejeweled 2 GameHouse Games Collection: Bewitched GameHouse Games Collection: Big Kahuna Reef GameHouse Games Collection: Boggle Supreme GameHouse Games Collection: Bounce Out Blitz GameHouse Games Collection: Casino Island To Go GameHouse Games Collection: Chainz GameHouse Games Collection: Chainz 2 - Relinked GameHouse Games Collection: Charm Solitaire GameHouse Games Collection: Charm Tale GameHouse Games Collection: Chicktionary GameHouse Games Collection: Chuzzle Deluxe GameHouse Games Collection: Collapse! Crunch GameHouse Games Collection: Combo Chaos! GameHouse Games Collection: Crystal Path GameHouse Games Collection: Cubis Gold 2 GameHouse Games Collection: Digby's Donuts GameHouse Games Collection: Diner Dash GameHouse Games Collection: Feeding Frenzy GameHouse Games Collection: Fiber Twig GameHouse Games Collection: Five Card Deluxe GameHouse Games Collection: Flip Words GameHouse Games Collection: Flying Leo GameHouse Games Collection: Fortune Tiles Gold GameHouse Games Collection: Fresco Wizard GameHouse Games Collection: GameHouse Sudoku GameHouse Games Collection: Gearz GameHouse Games Collection: Granny in Paradise GameHouse Games Collection: Gutterball GameHouse Games Collection: Gutterball 2 GameHouse Games Collection: Hamsterball GameHouse Games Collection: Hello! GameHouse Games Collection: Holiday Express GameHouse Games Collection: Iggle Pop! GameHouse Games Collection: Incadia GameHouse Games Collection: Incredible Ink GameHouse Games Collection: Insaniquarium Deluxe GameHouse Games Collection: Inspector Parker GameHouse Games Collection: Invadazoid GameHouse Games Collection: Jewel Quest GameHouse Games Collection: Lemonade Tycoon GameHouse Games Collection: Luxor GameHouse Games Collection: Mad Caps GameHouse Games Collection: Magic Ball GameHouse Games Collection: Magic Ball 2 GameHouse Games Collection: Magic Ball 2 - New Worlds GameHouse Games Collection: Magic Inlay GameHouse Games Collection: Magic Vines GameHouse Games Collection: Mah Jong Adventures GameHouse Games Collection: Mah Jong Medley GameHouse Games Collection: Mah Jong Quest GameHouse Games Collection: Mahjong Garden To Go GameHouse Games Collection: Mahjong Towers Eternity GameHouse Games Collection: Maui Wowee GameHouse Games Collection: Phlinx To Go GameHouse Games Collection: Pin High Country Club Golf GameHouse Games Collection: Pizza Frenzy GameHouse Games Collection: Platypus GameHouse Games Collection: Poker Superstars GameHouse Games Collection: Puzzle Express GameHouse Games Collection: Puzzle Inlay GameHouse Games Collection: Puzzle Solitaire GameHouse Games Collection: QBz GameHouse Games Collection: Reader's Digest Super Word Power GameHouse Games Collection: Ricochet GameHouse Games Collection: Ricochet Lost Worlds GameHouse Games Collection: Ricochet Lost Worlds - Recharged GameHouse Games Collection: Roller Rush GameHouse Games Collection: Saints & Sinners Bingo GameHouse Games Collection: SCRABBLE GameHouse Games Collection: Shape Shifter GameHouse Games Collection: Slingo Deluxe GameHouse Games Collection: Spelvin GameHouse Games Collection: Splash GameHouse Games Collection: Spring Sprang Sprung GameHouse Games Collection: Super 5-Line Slots GameHouse Games Collection: Super Blackjack! GameHouse Games Collection: Super Bounce Out! GameHouse Games Collection: Super Candy Cruncher GameHouse Games Collection: Super Collapse! GameHouse Games Collection: Super Collapse! II GameHouse Games Collection: Super Collapse! II Platinum GameHouse Games Collection: Super Fruit Frolic GameHouse Games Collection: Super GameHouse Solitaire Vol. 1 GameHouse Games Collection: Super GameHouse Solitaire Vol. 2 GameHouse Games Collection: Super GameHouse Solitaire Vol. 3 GameHouse Games Collection: Super Gem Drop GameHouse Games Collection: Super Glinx! GameHouse Games Collection: Super Letter Linker GameHouse Games Collection: Super Mah Jong Solitaire GameHouse Games Collection: Super Nisqually GameHouse Games Collection: Super PileUp! GameHouse Games Collection: Super Pool GameHouse Games Collection: Super Pop & Drop! GameHouse Games Collection: Super Rumble Cube GameHouse Games Collection: Super SpongeBob Collapse! GameHouse Games Collection: Super TextTwist GameHouse Games Collection: Super WHATword GameHouse Games Collection: Super Wild Wild Words GameHouse Games Collection: Tap a Jam GameHouse Games Collection: Ten Pin Championship Bowling Pro GameHouse Games Collection: Tennis Titans GameHouse Games Collection: Tradewinds 2 GameHouse Games Collection: Trivia Machine GameHouse Games Collection: Tropical Swaps GameHouse Games Collection: Tumblebugs GameHouse Games Collection: Turtle Bay GameHouse Games Collection: Twistingo GameHouse Games Collection: Ultimate Dominoes GameHouse Games Collection: Varmintz Deluxe GameHouse Games Collection: Walls of Jericho, The GameHouse Games Collection: Wheel of Fortune GameHouse Games Collection: Word Jolt GameHouse Games Collection: Word Slinger GameHouse Games Collection: WordJong To Go GameHouse Games Collection: Zuma Deluxe Garena Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) INTEX Game Camera Java™ 6 Update 7 K-Lite Mega Codec Pack 4.5.3 LightScribe System Software 1.14.25.1 LimeWire 5.2.13 Malwarebytes' Anti-Malware Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft .NET Framework 2.0 Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 2 Microsoft .NET Framework 3.5 SP1 Microsoft Application Error Reporting Microsoft Games for Windows - LIVE Redistributable Microsoft Math Microsoft Office Professional Edition 2003 Microsoft Silverlight Microsoft Student 2007 for Learning Essentials Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft WSE 3.0 Runtime Mozilla Firefox (3.5.2) MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB954430) MSXML 6.0 Parser MYGAME Launcher(Remove Only) Need for Speed™ Undercover Nero 8 Essentials neroxml NVIDIA Drivers NVIDIA Performance NVIDIA PhysX NVIDIA System Monitor NVIDIA System Update OpenOffice.org Installer 1.0 Orbit Downloader PowerISO Prototype™ QuickTime Realtek High Definition Audio Driver Security Update for Windows Internet Explorer 8 (KB969897) Security Update for Windows Internet Explorer 8 (KB972260) Security Update for Windows Media Player (KB973540) Security Update for Windows XP (KB956744) Security Update for Windows XP (KB960859) Security Update for Windows XP (KB961371) Security Update for Windows XP (KB961501) Security Update for Windows XP (KB968537) Security Update for Windows XP (KB969898) Security Update for Windows XP (KB970238) Security Update for Windows XP (KB971557) Security Update for Windows XP (KB971633) Security Update for Windows XP (KB971657) Security Update for Windows XP (KB973346) Security Update for Windows XP (KB973354) Security Update for Windows XP (KB973507) Security Update for Windows XP (KB973869) Sony Vegas Pro 8.0 Special Force(Remove only) SpeedConnect Internet Accelerator v.7.5 System Requirements Lab The Sims™ 3 TuneUp Utilities 2009 Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Windows Internet Explorer 8 (KB968220) Update for Windows XP (KB973815) VC80CRTRedist - 8.0.50727.762 Veoh Web Player WebFldrs XP Winamp WindowBlinds Windows Internet Explorer 8 Windows Media Format 11 runtime Windows Media Player 11 WinRAR archiver Xvid 1.1.3 final uninstall Yahoo! Messenger Yahoo! Toolbar YouTube Downloader HQ Pro ==== Event Viewer Messages From Past Week ======== 8/7/2009 10:19:53 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 8/13/2009 3:42:22 AM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume. 8/13/2009 1:51:18 AM, error: Service Control Manager [7034] - The SeekappSrch Service service terminated unexpectedly. It has done this 1 time(s). 8/13/2009 1:49:41 AM, error: Service Control Manager [7023] - The Automatic Updates service terminated with the following error: The specified module could not be found. 8/13/2009 1:46:28 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the PEVSystemStart service to connect. 8/11/2009 12:21:28 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: bdftdif eBoost 8/11/2009 12:21:26 PM, error: Service Control Manager [7000] - The Parallel port driver service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 8/11/2009 12:21:26 PM, error: Service Control Manager [7000] - The BitDefender Virus Shield service failed to start due to the following error: The system cannot find the path specified. 8/11/2009 12:21:26 PM, error: Service Control Manager [7000] - The BitDefender Desktop Update Service service failed to start due to the following error: The system cannot find the path specified. 8/11/2009 12:21:26 PM, error: Service Control Manager [7000] - The BDVEDISK service failed to start due to the following error: The system cannot find the path specified. 8/11/2009 12:15:41 PM, error: Service Control Manager [7034] - The TuneUp Drive Defrag Service service terminated unexpectedly. It has done this 1 time(s). ==== End Of File ===========================

CatByte

Post #12August 13, 2009, 7:43 PM UTC

Hi,

You appear to be clean,

just some housekeeping to do now

P2P - I see you have P2P software µTorrent and LimeWire 5.2.13 installed on your machine. We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It likely contributed to your current situation. This page will give you further information.
Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.
Please see this topic for more information:
Perils of P2P File Sharing.
I would strongly recommend that you uninstall these now. You can do so via Control Panel >> Add or Remove Programs.

NEXT

[external image: Posted Image]
Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version Java components and update.

Download the latest version of Java Runtime Environment (JRE) 6 and save it to your desktop.
Scroll down to where it says "Java SE Runtime Environment (JRE) 6 Update 15. The Java SE Runtime Environment (JRE) allows end-users to run Java applications."
Click the "Download" button to the right.
Select the Windows platform from the dropdown menu.
Read the License Agreement and then check the box that says: " I agree to the Java SE Runtime Environment 6 with JavaFX License Agreement". Click on Continue.The page will refresh.
Click on the link to download Windows Offline Installation and save the file to your desktop.
Close any programs you may have running - especially your web browser.

Now go to Start > Settings > Control Panel, double-click on Add/Remove Programs and remove all older versions of Java.
Check (highlight) any item with Java Runtime Environment (JRE or J2SE or Java™ 6) in the name.
Click the Remove or Change/Remove button.
Repeat as many times as necessary to remove each Java version.
Reboot your computer once all Java components are removed.
Then from your desktop double-click on jre-6u15-windows-i586-p.exe to install the newest version.

After the install is complete, go into the Control Panel (using Classic View) and double-click the Java Icon. (looks like a coffee cup)
- On the General tab, under Temporary Internet Files, click the Settings button.
- Next, click on the Delete Files button
- There are two options in the window to clear the cache - Leave BOTH CheckedApplications and AppletsTrace and Log Files
Click OK on Delete Temporary Files Window

Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.
Click OK to leave the Temporary Files Window
Click OK to leave the Java Control Panel.

NEXT

Keep the Malwarebytes program, make sure you update it once a month or so, then scan, to keep your computer clean.

Follow these steps to uninstall Combofix

Click START then RUN
Now type Combofix /u in the runbox and click OK. Note the space between the ..X and the /U, it needs to be there.

[external image: Posted Image]

NEXT

Now to remove the rest of the tools that we have used in fixing your machine:

Make sure you have an Internet Connection.
Download OTC to your desktop and run it
A list of tool components used in the Cleanup of malware will be downloaded.
If your Firewall or Real Time protection attempts to block OTC to reach the Internet, please allow the application to do so.
Click Yes to begin the Cleanup process and remove these components, including this application.
You will be asked to reboot the machine to finish the Cleanup process. If you are asked to reboot the machine choose Yes.

If there are any remaining logs or tools that I had you download (other than malwareBytes - keep that) on your desktop just right click and choose delete

NEXT

Below I have included a number of recommendations for how to protect your computer against malware infections.

It is good security practice to change your passwords to all your online accounts on a fairly regular basis, this is especially true after an infection. Refer to this Microsoft article
Strong passwords: How to create and use them
Then consider a password keeper, to keep all your passwords safe.
Keep Windows updated by regularly checking their website at :
http://windowsupdate.microsoft.com/
This will ensure your computer has always the latest security updates available installed on your computer.
SpywareBlaster protects against bad ActiveX, it immunizes your PC against them.
SpywareGuard offers realtime protection from spyware installation attempts. Make sure you are only running one real-time anti-spyware protection program ( eg : TeaTimer, Windows Defender ) or there will be a conflict.
Make Internet Explorer more secure
- Click Start > Run
- Type Inetcpl.cpl & click OK
- Click on the Security tab
- Click Reset all zones to default level
- Make sure the Internet Zone is selected & Click Custom level
- In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to "Prompt", and ("Initialize and Script ActiveX controls not marked as safe") to "Disable".
- Next Click OK, then Apply button and then OK to exit the Internet Properties page.
ATF Cleaner - Cleans temporary files from IE and Windows, empties the recycle bin and more. Great tool to help speed up your computer and knock out those nasties that like to reside in the temp folders.
MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.

WOT, Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:
- Green to go
- Yellow for caution
- Red to stop
WOT has an addon available for both Firefox and IE
For Firefox, I highly recommend this add-on to keep your PC even more secure.
- NoScript - for blocking ads and other potential website attacks
Keep a backup of your important files - Now, more than ever, it's especially important to protect your digital files and memories. This article is full of good information on alternatives for home backup solutions.
ERUNT (Emergency Recovery Utility NT) allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed.
In light of your recent issue, I'm sure you'd like to avoid any future infections. Please take a look at these well written articles:
Think Prevention.
PC Safety and Security–What Do I Need?.

**Be very wary with any security software that is advertised in popups or in other ways. They are not only usually of no use, but often have malware in them.

Thank you for your patience, and performing all of the procedures requested.

Please respond one last time so we can consider the thread resolved and close it, thank-you.

7e5PE

Post #13August 13, 2009, 8:00 PM UTC

JRE 6 update 15 is not on the list instead JRE 6 update 16 is on the list. should i download JRE 6 update 16 instead?

CatByte

Post #14August 13, 2009, 8:01 PM UTC

Yes, they must have just updated it again…thanks

7e5PE

Post #15August 14, 2009, 5:02 AM UTC

i did the OTC clean up.. there are stil tools in my desktop like rootrepeal.exe, dds.scr, remg.exe.. what to do with this? delete it?

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

[Resolved] (win32/rootkit.agent.odg trojan)

✨ Ask AI

Ask AI