Browser Jacked

Yikes! 2259 viruses I assume you don't maintain an up to date AV?

That's too big for me to work with - let's see if we can make it more managable. Go here and run online scans (all), allow them to delete whatever they find:

TrendMicro HouseCall
eTrust AntiVirus Web Scanner
Panda ActiveScan
Bitdefender
Command on Demand

Reboot when done. Post a new mwav scan log if possible.

Norton Anti Virus is currently on and up to date. Might have been turned off somewhere down the line, because there are some wacky things lurking in there – Have run all five online virus programs listed – barely made a dent elminated only 170 + Thinking about a complete hard drive erase, file salvage and XP reboot. Any programs you think could help appreciated… Thanks G

send me the mwavscan lower pane log at [removed]

okay file sent - G

OK, got it - let's see what these two clear out. Click here to download Spybot Search & Destroy - install, update, scan and fix all RED items it finds. Reboot when done.

Click here to download Ad-Aware SE and install. Before scanning click on "check for updates now" to make sure you have the latest reference file. Click "Start", select "Perform Full System scan" and "Next" to start the scan. When the scan is finished, the screen will tell you if anything has been found, click "Next". The bad files will be listed, right click the pane and click "Select all objects" - this will put a check mark in the box at the side, click "Next" again and click "OK" at the prompt "# objects will be removed. Continue?".

Reboot when done. Follow this sequence:

1. Right-click My Computer>Click Properties>Click the System Restore tab>Check the box next to 'Turn off System Restore on all drives'>Click Apply>Click OK.

2. Reboot.

3. Repeat the process but this time remove the check from the box.

Re-run mwav scan and see if you can post the log now, otherwise email it to me again.

Okay… new scans after adaware and spybot and reboots….done File still to large to post….has been sent via e-mail. Here is MWAV summary… Thanks G Wed Mar 09 23:54:17 2005 => ***** Scanning complete. ***** Wed Mar 09 23:54:17 2005 => Total Files Scanned: 139326 Wed Mar 09 23:54:17 2005 => Total Virus(es) Found: 770 Wed Mar 09 23:54:17 2005 => Total Disinfected Files: 0 Wed Mar 09 23:54:17 2005 => Total Files Renamed: 0 Wed Mar 09 23:54:17 2005 => Total Deleted Files: 0 Wed Mar 09 23:54:17 2005 => Total Errors: 156 Wed Mar 09 23:54:17 2005 => Time Elapsed: 05:43:28 Wed Mar 09 23:54:17 2005 => Virus Database Date: 2005/02/25 Wed Mar 09 23:54:17 2005 => Virus Database Count: 119374

Got rid of two thirds of them

Click here to download Pocket Killbox by Option^Explicit. Extract it from the zip file to your desktop.

Start Killbox and click on Tools->Delete Temp Files. Exit the program.

Click here to download System Security Suite. Extract it from the zip file into a folder and doubleclick on sss.exe. Check the boxes under the 'Items to Clear' tab and click 'Clear Selected Items'. You will be prompted to reboot, do so. Repeat for all log-in accounts on your computer.

Delete all the files in your Norton Antivirus quarantine, then carry out a new mwav scan and post the log - mail it if it's still too big.

okay - done we're down to 234… things are looking up! – G Fri Mar 11 14:57:38 2005 => Total Virus(es) Found: 234 Fri Mar 11 14:57:38 2005 => Total Disinfected Files: 0 Fri Mar 11 14:57:38 2005 => Total Files Renamed: 0 Fri Mar 11 14:57:38 2005 => Total Deleted Files: 0 Fri Mar 11 14:57:38 2005 => Total Errors: 146 Fri Mar 11 14:57:38 2005 => Time Elapsed: 04:02:55 Fri Mar 11 14:57:38 2005 => Virus Database Date: 2005/02/25 Fri Mar 11 14:57:38 2005 => Virus Database Count: 119374 Fri Mar 11 14:57:38 2005 => Scan Completed. File C:\WINDOWS\SYSTEM32\HIINYEE.SYS infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM32\HKIJYEC.SYS infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\msCMTSrvc.exe infected by "Trojan-Downloader.Win32.Presario" Virus. Action Taken: No Action Taken. File C:\WINDOWS\IEMenuExtension.exe infected by "not-a-virus:AdWare.ToolBar.Ucmore.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\internet.exe infected by "Trojan.Win32.Dialer.eb" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mxTarget(4).dll infected by "not-a-virus:AdWare.BiSpy.o" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mxTarget(5).dll infected by "not-a-virus:AdWare.BiSpy.o" Virus. Action Taken: No Action Taken. File C:\WINDOWS\NDNuninstall4_88.exe infected by "not-a-virus:AdWare.NewDotNet" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sideb.exe infected by "not-a-virus:AdWare.ToolBar.EliteBar.v" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SSK_B5.EXE infected by "Trojan-Dropper.Win32.SurfSide.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\woinstall.exe infected by "not-a-virus:AdWare.EZula.ak" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\Agent.dll infected by "not-a-virus:AdWare.Sahat.g" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\dhcml3a.exe infected by "Trojan-Downloader.Win32.Apropo.d" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\docore.dll infected by "not-a-virus:AdWare.Couponage.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\dosync.dll infected by "not-a-virus:AdWare.Couponage.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\dsoycv.dll infected by "not-a-virus:AdWare.PurityScan.ak" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\exdl.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\exdl0.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\exul.exe infected by "not-a-virus:AdWare.BargainBuddy.q" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\ezStubi.dll infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\ezStubi1.dll infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\ezStubx.exe infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\ftrwg.dll infected by "not-a-virus:AdWare.Adstart.h" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\ftrwgc.exe infected by "not-a-virus:AdWare.Adstart.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\ftrwgd.exe infected by "not-a-virus:AdWare.Adstart.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\ftrwgf.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hfanebn.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hfikecs.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hlateaf.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hmagefn.vxd infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hoaqygf.dll infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hrajefb.vxd infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hsatygm.dll infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\htikyam.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hxzdr.dll infected by "not-a-virus:AdWare.Adstart.i" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hxzdrd.exe infected by "not-a-virus:AdWare.Adstart.i" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hxzdrf.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\installer.exe infected by "Trojan-Dropper.Win32.Small.kz" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\javexulm.vxd infected by "not-a-virus:AdWare.BargainBuddy.q" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\lmf32v.dll infected by "not-a-virus:AdWare.Suggestor.g" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\mqexdlm.srg infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\n20050308.exe infected by "not-a-virus:AdWare.EZula.ah" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\newdevin.exe infected by "not-a-virus:AdWare.BookedSpace.c" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\NLNP!3.exe infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\NLNP13.dll infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\NLNP131.dll infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\nostalgia.dll infected by "not-a-virus:AdWare.BiSpy.m" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\optimizer.exe infected by "Trojan-Downloader.Win32.IstBar.er" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\PreUninstall.exe infected by "not-a-virus:AdWare.Suggestor.g" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\QNQAOHIS.exe infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\setup_silent_26198.exe infected by "not-a-virus:AdWare.MDH.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\SHAgent.dll infected by "not-a-virus:AdWare.Sahat.g" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\unpack.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\wiudc.dll infected by "not-a-virus:AdWare.Adstart.c" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\wiudcf.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\AOL Downloads\updateni_setup90\comp01.000 tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04040000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04F00000.VBN infected by "Trojan.Win32.VB.kq" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04F00002.VBN infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04F00004.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08600000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08CC0000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900000.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900002.VBN infected by "Trojan-Dropper.Win32.Small.eh" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900004.VBN infected by "Trojan-Downloader.VBS.Iwill.o" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900006.VBN infected by "Trojan-Downloader.VBS.Iwill.o" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900008.VBN infected by "Backdoor.Win32.Padodor.gen" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900009.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90000A.VBN infected by "Trojan-Dropper.Win32.Agent.ec" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90000C.VBN infected by "Trojan-Dropper.Win32.Agent.ec" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90000E.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900010.VBN infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900012.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900014.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900016.VBN infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900018.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90001A.VBN infected by "Trojan.Java.ClassLoader.i" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90001C.VBN infected by "Trojan-Downloader.JS.Small.d" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90001E.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900020.VBN infected by "Exploit.HTML.ObjData" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900024.VBN infected by "Trojan.Win32.StartPage.hi" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900026.VBN infected by "Trojan-Downloader.Win32.Small.kc" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900028.VBN infected by "Trojan-Downloader.Win32.Small.kc" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0C900000.VBN infected by "Trojan-Downloader.Win32.Agent.ae" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0C900002.VBN infected by "Trojan-Dropper.Win32.Small.mr" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0C900004.VBN infected by "Trojan-Downloader.Win32.Small.wj" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0C900006.VBN infected by "Trojan-Dropper.Win32.Small.mr" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0C900008.VBN infected by "Trojan-Downloader.Win32.Small.wj" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CB00000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0E8C0000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0F280000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0FA00000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\10B40000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Documents\AOL Downloads\aolsetup90\comp01.000 tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Documents and Settings\Jerry\.jpi_cache\jar\1.0\javainstaller.jar-4514e5ea-3d8527a0.zip infected by "Trojan-Downloader.Java.OpenStream.t" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Jerry\Application Data\othb.exe infected by "not-a-virus:AdWare.PurityScan.w" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Jerry\Desktop\iMeshV4.exe infected by "not-a-virus:AdWare.Gator.4104" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Jerry\Desktop\l2mfix\backup.zip infected by "not-a-virus:AdWare.Look2Me.u" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Jerry\Desktop\l2mfix\Process.exe tagged as not-a-virus:RiskWare.Tool.Processor.20. No Action Taken. File C:\Documents and Settings\Jerry\Desktop\l2mfix.exe tagged as not-a-virus:RiskWare.Tool.Processor.20. No Action Taken. File C:\EliteToolBar version 54.dll infected by "not-a-virus:AdWare.ToolBar.EliteBar.u" Virus. Action Taken: No Action Taken. File C:\hp\bin\Terminator.exe tagged as not-a-virus:RiskWare.Tool.KillApp. No Action Taken. File C:\hp\bin\win32all-146.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\hp\drivers\audio\Creative\Audio\Drivers\COMMON\killapps.exe tagged as not-a-virus:RiskWare.Tool.KillApp.b. No Action Taken. File C:\info6_s.cab infected by "Trojan.Win32.Dialer.t" Virus. Action Taken: No Action Taken. File C:\Program Files\America Online 9.0a\Jiti\Jiti_mm.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Program Files\America Online 9.0b\Jiti\Jiti_mm.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\21016854.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\21016889.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30745406.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30746812.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30747906.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.q" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30748750.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.l" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30749125.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30751109.asw infected by "not-a-virus:AdWare.ToolBar.SideFind" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30752562.asw infected by "not-a-virus:AdWare.Cres" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30753406.asw infected by "not-a-virus:AdWare.WindowEnhancer" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30755562.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30755984.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.q" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30756203.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.q" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30756656.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.q" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30757343.asw infected by "not-a-virus:AdWare.BiSpy.o" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34026593.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.q" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34026765.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34027421.asw infected by "not-a-virus:AdWare.ToolBar.SideFind" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34027656.asw infected by "not-a-virus:AdWare.Cres" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34027796.asw infected by "not-a-virus:AdWare.WindowEnhancer" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34027921.asw infected by "not-a-virus:AdWare.SmartPops" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34028000.asw infected by "not-a-virus:AdWare.SmartPops" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34030625.asw infected by "Trojan-Downloader.Win32.IstBar.dh" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34030906.asw infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34030968.asw infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34031000.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34031109.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\HijackThis\backups\backup-20050204-202007-756.dll infected by "not-a-virus:AdWare.Wintol.t" Virus. Action Taken: No Action Taken. File C:\Program Files\HijackThis\backups\backup-20050204-202008-896.dll infected by "not-a-virus:AdWare.WebSearch.o" Virus. Action Taken: No Action Taken. File C:\Program Files\Internet Explorer\mzhma.exe infected by "Trojan-Downloader.Win32.Petrolin.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc1\WSup.exe infected by "not-a-virus:AdWare.Wintol.t" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc1\WToolsA.exe infected by "not-a-virus:AdWare.Wintol.t" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc1\WToolsB.dll infected by "not-a-virus:AdWare.Wintol.t" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc2\common.dll infected by "not-a-virus:AdWare.WebSearch.o" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc2\PIB.exe infected by "not-a-virus:AdWare.WebSearch.n" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc2\TBPS.exe infected by "not-a-virus:AdWare.WebSearch.n" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc2\TBPSSvc.exe infected by "not-a-virus:AdWare.WebSearch.f" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc2\toolbar.dll infected by "not-a-virus:AdWare.WebSearch.o" Virus. Action Taken: No Action Taken. File C:\SaveInstCsSm.exe infected by "Trojan-Downloader.Win32.Small.kl" Virus. Action Taken: No Action Taken. File C:\stcupdt.exe infected by "Trojan.Win32.SecondThought.bd" Virus. Action Taken: No Action Taken. File C:\WINDOWS\bundles\CSv10P070.exe infected by "not-a-virus:AdWare.ClearSearch.q" Virus. Action Taken: No Action Taken. File C:\WINDOWS\bundles\runsearch.exe infected by "not-a-virus:AdWare.BHO.MegaSearch.d" Virus. Action Taken: No Action Taken. File C:\WINDOWS\bundles\sahagent-seedcorn1002.exe infected by "not-a-virus:AdWare.Sahat.h" Virus. Action Taken: No Action Taken. File C:\WINDOWS\bundles\WebRebates_Auto_InstallSilent.exe infected by "not-a-virus:AdWare.WebRebates.g" Virus. Action Taken: No Action Taken. File C:\WINDOWS\bundles\wrapperouter.exe infected by "not-a-virus:AdWare.VirtualBouncer.f" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\060585.exe infected by "not-a-virus:PornWare.Dialer.Playground.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\CONFLICT.1\install007.exe infected by "Trojan.Win32.SecondThought.ao" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\CONFLICT.1\rundlg32.dll infected by "not-a-virus:AdWare.ToolBar.SBSoft.f" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\CONFLICT.1\WrapperOuter1154041108.EXE infected by "not-a-virus:AdWare.VirtualBouncer.c" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\DS4.dll infected by "Trojan-Downloader.Win32.Lookme.j" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\install007.exe infected by "Trojan.Win32.SecondThought.ao" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\QDow.dll infected by "Trojan-Downloader.Win32.QDown.d" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\SAHAgent_.exe infected by "not-a-virus:AdWare.ShopAtHome.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\SahHtml_.exe infected by "not-a-virus:AdWare.Sahat.i" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\WrapperOuter1154041108.EXE infected by "not-a-virus:AdWare.VirtualBouncer.c" Virus. Action Taken: No Action Taken. File C:\WINDOWS\EliteSideBar\EliteSideBar 07.dll infected by "not-a-virus:AdWare.ToolBar.EliteBar.v" Virus. Action Taken: No Action Taken. File C:\WINDOWS\IEMenuExtension.exe infected by "not-a-virus:AdWare.ToolBar.Ucmore.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\internet.exe infected by "Trojan.Win32.Dialer.eb" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mxTarget(4).dll infected by "not-a-virus:AdWare.BiSpy.o" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mxTarget(5).dll infected by "not-a-virus:AdWare.BiSpy.o" Virus. Action Taken: No Action Taken. File C:\WINDOWS\NDNuninstall4_88.exe infected by "not-a-virus:AdWare.NewDotNet" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sideb.exe infected by "not-a-virus:AdWare.ToolBar.EliteBar.v" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SSK_B5.EXE infected by "Trojan-Dropper.Win32.SurfSide.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\Agent.dll infected by "not-a-virus:AdWare.Sahat.g" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\Cache\cxtpls_loader.exe infected by "not-a-virus:AdWare.Apropos.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\dhcml3a.exe infected by "Trojan-Downloader.Win32.Apropo.d" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\docore.dll infected by "not-a-virus:AdWare.Couponage.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\dosync.dll infected by "not-a-virus:AdWare.Couponage.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\dsoycv.dll infected by "not-a-virus:AdWare.PurityScan.ak" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\exdl.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\exdl0.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\exul.exe infected by "not-a-virus:AdWare.BargainBuddy.q" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\ezStubi.dll infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\ezStubi1.dll infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\ezStubx.exe infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\ftrwg.dll infected by "not-a-virus:AdWare.Adstart.h" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\ftrwgc.exe infected by "not-a-virus:AdWare.Adstart.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\ftrwgd.exe infected by "not-a-virus:AdWare.Adstart.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\ftrwgf.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hfanebn.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hfikecs.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hlateaf.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hmagefn.vxd infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hoaqygf.dll infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hrajefb.vxd infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hsatygm.dll infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\htikyam.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hxzdr.dll infected by "not-a-virus:AdWare.Adstart.i" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hxzdrd.exe infected by "not-a-virus:AdWare.Adstart.i" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\hxzdrf.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\installer.exe infected by "Trojan-Dropper.Win32.Small.kz" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\javexulm.vxd infected by "not-a-virus:AdWare.BargainBuddy.q" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\lmf32v.dll infected by "not-a-virus:AdWare.Suggestor.g" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\mqexdlm.srg infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\n20050308.exe infected by "not-a-virus:AdWare.EZula.ah" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\newdevin.exe infected by "not-a-virus:AdWare.BookedSpace.c" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\NLNP!3.exe infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\NLNP13.dll infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\NLNP131.dll infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\nostalgia.dll infected by "not-a-virus:AdWare.BiSpy.m" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\optimizer.exe infected by "Trojan-Downloader.Win32.IstBar.er" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\PreUninstall.exe infected by "not-a-virus:AdWare.Suggestor.g" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\QNQAOHIS.exe infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\setup_silent_26198.exe infected by "not-a-virus:AdWare.MDH.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\SHAgent.dll infected by "not-a-virus:AdWare.Sahat.g" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\unpack.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\wiudc.dll infected by "not-a-virus:AdWare.Adstart.c" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\wiudcf.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Temp\adlinstallwin32.exe infected by "not-a-virus:AdWare.Adstart.i" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Temp\bw2.exe infected by "Trojan-Dropper.Win32.Small.ru" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Temp\msg183.tmp10958536420259.exe infected by "not-a-virus:AdWare.Beginto.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Temp\msg185.tmp10958536440259.exe infected by "not-a-virus:AdWare.Beginto.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Temp\nsdtmp09.dll infected by "not-a-virus:AdWare.MetaDirect.a" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Temp\se.exe infected by "not-a-virus:AdWare.WindowEnhancer" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\012FGTU7\Toolbar3[1].cab tagged as not-a-virus:RiskWare.Tool.Exporun. No Action Taken. File C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\8LMNOD23\install007[1].exe infected by "Trojan.Win32.SecondThought.ao" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\GTIVK9MZ\eZinstall[1].exe infected by "not-a-virus:AdWare.EZula.ak" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\GTIVK9MZ\WinTS[1].cab infected by "Trojan-Downloader.Win32.Wintool.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\OG8RJTUM\TBPSSvc[1].cab infected by "not-a-virus:AdWare.WebSearch.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\OG8RJTUM\woinstall[1].exe infected by "not-a-virus:AdWare.EZula.ak" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Temp\tvmupdater.exe infected by "not-a-virus:AdWare.TotalVelocity.u" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Temp\vern16.exe infected by "Trojan-Dropper.Win32.Miewer.d" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Temp\vmstmp\vmstmp.exe infected by "not-a-virus:AdWare.DelphinMediaViewer.c" Virus. Action Taken: No Action Taken. File C:\WINDOWS\woinstall.exe infected by "not-a-virus:AdWare.EZula.ak" Virus. Action Taken: No Action Taken. File C:\WINDOWS\wt\wtbgm\wtbgmtt.exe infected by "not-a-virus:AdWare.WinAD" Virus. Action Taken: No Action Taken. File C:\WINDOWS\wt\wtvh.dll infected by "not-a-virus:AdWare.WildTangent.b" Virus. Action Taken: No Action Taken.

Click Start>Settings>Control Panel>Add or Remove Programs and uninstall New.Net and Shop-at-Home Agent if there.

Start Killbox, copy and paste each of the following lines into the "Full Path of File to Delete" box in Killbox, and click the red button with the white X on it after each. Keep track of any files it tells you either could not be found or could not be deleted, as you'll need those later:

C:\Documents and Settings\Jerry\Application Data\othb.exe
C:\Documents and Settings\Jerry\Desktop\iMeshV4.exe
C:\EliteToolBar version 54.dll
C:\info6_s.cab
C:\Program Files\Internet Explorer\mzhma.exe
C:\SaveInstCsSm.exe
C:\stcupdt.exe
C:\WINDOWS\bundles\CSv10P070.exe
C:\WINDOWS\bundles\runsearch.exe
C:\WINDOWS\bundles\WebRebates_Auto_InstallSilent.exe
C:\WINDOWS\bundles\wrapperouter.exe
C:\WINDOWS\Downloaded Program Files\060585.exe
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\install007.exe
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\rundlg32.dll
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\WrapperOuter1154041108.EXE
C:\WINDOWS\Downloaded Program Files\DS4.dll
C:\WINDOWS\Downloaded Program Files\install007.exe
C:\WINDOWS\Downloaded Program Files\QDow.dll
C:\WINDOWS\Downloaded Program Files\WrapperOuter1154041108.EXE
C:\WINDOWS\EliteSideBar\EliteSideBar 07.dll
C:\WINDOWS\IEMenuExtension.exe
C:\WINDOWS\internet.exe
C:\WINDOWS\mxTarget(4).dll
C:\WINDOWS\mxTarget(5).dll
C:\WINDOWS\sideb.exe
C:\WINDOWS\SSK_B5.EXE
C:\WINDOWS\system32\Cache\cxtpls
C:\WINDOWS\system32\dhcml3a.exe
C:\WINDOWS\system32\docore.dll
C:\WINDOWS\system32\dosync.dll
C:\WINDOWS\system32\dsoycv.dll
C:\WINDOWS\system32\exdl.exe
C:\WINDOWS\system32\exdl0.exe
C:\WINDOWS\system32\exul.exe
C:\WINDOWS\system32\ezStubi.dll
C:\WINDOWS\system32\ezStubi1.dll
C:\WINDOWS\system32\ezStubx.exe
C:\WINDOWS\system32\ftrwg.dll
C:\WINDOWS\system32\ftrwgc.exe
C:\WINDOWS\system32\ftrwgd.exe
C:\WINDOWS\system32\ftrwgf.exe
C:\WINDOWS\system32\hfanebn.exe
C:\WINDOWS\system32\hfikecs.exe
C:\WINDOWS\SYSTEM32\HIINYEE.SYS
C:\WINDOWS\SYSTEM32\HKIJYEC.SYS
C:\WINDOWS\system32\hlateaf.exe
C:\WINDOWS\system32\hmagefn.vxd
C:\WINDOWS\system32\hoaqygf.dll
C:\WINDOWS\system32\hrajefb.vxd
C:\WINDOWS\system32\hsatygm.dll
C:\WINDOWS\system32\htikyam.exe
C:\WINDOWS\system32\hxzdr.dll
C:\WINDOWS\system32\hxzdrd.exe
C:\WINDOWS\system32\hxzdrf.exe
C:\WINDOWS\system32\installer.exe
C:\WINDOWS\system32\javexulm.vxd
C:\WINDOWS\system32\lmf32v.dll
C:\WINDOWS\system32\mqexdlm.srg
C:\WINDOWS\system32\msCMTSrvc.exe
C:\WINDOWS\system32\n20050308.exe
C:\WINDOWS\system32\newdevin.exe
C:\WINDOWS\system32\NLNP!3.exe
C:\WINDOWS\system32\NLNP13.dll
C:\WINDOWS\system32\NLNP131.dll
C:\WINDOWS\system32\nostalgia.dll
C:\WINDOWS\system32\optimizer.exe
C:\WINDOWS\system32\PreUninstall.exe
C:\WINDOWS\system32\QNQAOHIS.exe
C:\WINDOWS\system32\setup_silent_26198.exe
C:\WINDOWS\system32\unpack.exe
C:\WINDOWS\system32\wiudc.dll
C:\WINDOWS\system32\wiudcf.exe
C:\WINDOWS\Temp\adlinstallwin32.exe
C:\WINDOWS\Temp\bw2.exe
C:\WINDOWS\Temp\msg183.tmp10958536420259.exe
C:\WINDOWS\Temp\msg185.tmp10958536440259.exe
C:\WINDOWS\Temp\nsdtmp09.dll
C:\WINDOWS\Temp\se.exe
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\8LMNOD23\install007[1].exe
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\GTIVK9MZ\eZinstall[1].exe
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\GTIVK9MZ\WinTS[1].cab
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\OG8RJTUM\TBPSSvc[1].cab
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\OG8RJTUM\woinstall[1].exe
C:\WINDOWS\Temp\tvmupdater.exe
C:\WINDOWS\Temp\vern16.exe
C:\WINDOWS\Temp\vmstmp\vmstmp.exe
C:\WINDOWS\woinstall.exe
C:\WINDOWS\wt\wtbgm\wtbgmtt.exe
C:\WINDOWS\wt\wtvh.dll

For the files that it either couldn't find or couldn't delete, in the killbox again this time, put a mark next to "Delete on Reboot". Copy and paste each file into the file name box, then click the red button with the X after each. It will ask you if you want to reboot each time you click it, answer NO until after you've pasted the last file name, at which time you should answer Yes.

Reboot if it doesn't do so automatically. Post a new mwav scan in your next reply.

Uh Oh, now things are looking down Did killbox actions and virus # is up… Also, New Net and Shop at Home could not be found Sat Mar 12 15:13:23 2005 => ***** Scanning complete. ***** Sat Mar 12 15:13:23 2005 => Total Files Scanned: 66196 Sat Mar 12 15:13:23 2005 => Total Virus(es) Found: 248 Sat Mar 12 15:13:23 2005 => Total Disinfected Files: 0 Sat Mar 12 15:13:23 2005 => Total Files Renamed: 0 Sat Mar 12 15:13:23 2005 => Total Deleted Files: 0 Sat Mar 12 15:13:23 2005 => Total Errors: 149 Sat Mar 12 15:13:23 2005 => Time Elapsed: 03:59:29 Sat Mar 12 15:13:23 2005 => Virus Database Date: 2005/02/25 Sat Mar 12 15:13:23 2005 => Virus Database Count: 119374 Sat Mar 12 15:13:23 2005 => Scan Completed. File C:\WINDOWS\NDNuninstall4_88.exe infected by "not-a-virus:AdWare.NewDotNet" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\Agent.dll infected by "not-a-virus:AdWare.Sahat.g" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\SHAgent.dll infected by "not-a-virus:AdWare.Sahat.g" Virus. Action Taken: No Action Taken. File C:\!Submit\060585.exe infected by "not-a-virus:PornWare.Dialer.Playground.b" Virus. Action Taken: No Action Taken. File C:\!Submit\adlinstallwin32.exe infected by "not-a-virus:AdWare.Adstart.i" Virus. Action Taken: No Action Taken. File C:\!Submit\bw2.exe infected by "Trojan-Dropper.Win32.Small.ru" Virus. Action Taken: No Action Taken. File C:\!Submit\CSv10P070.exe infected by "not-a-virus:AdWare.ClearSearch.q" Virus. Action Taken: No Action Taken. File C:\!Submit\dhcml3a.exe infected by "Trojan-Downloader.Win32.Apropo.d" Virus. Action Taken: No Action Taken. File C:\!Submit\docore.dll infected by "not-a-virus:AdWare.Couponage.a" Virus. Action Taken: No Action Taken. File C:\!Submit\dosync.dll infected by "not-a-virus:AdWare.Couponage.a" Virus. Action Taken: No Action Taken. File C:\!Submit\DS4.dll infected by "Trojan-Downloader.Win32.Lookme.j" Virus. Action Taken: No Action Taken. File C:\!Submit\dsoycv.dll infected by "not-a-virus:AdWare.PurityScan.ak" Virus. Action Taken: No Action Taken. File C:\!Submit\EliteSideBar 07.dll infected by "not-a-virus:AdWare.ToolBar.EliteBar.v" Virus. Action Taken: No Action Taken. File C:\!Submit\EliteToolBar version 54.dll infected by "not-a-virus:AdWare.ToolBar.EliteBar.u" Virus. Action Taken: No Action Taken. File C:\!Submit\exdl.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\!Submit\exdl0.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\!Submit\exul.exe infected by "not-a-virus:AdWare.BargainBuddy.q" Virus. Action Taken: No Action Taken. File C:\!Submit\eZinstall[1].exe infected by "not-a-virus:AdWare.EZula.ak" Virus. Action Taken: No Action Taken. File C:\!Submit\ezStubi.dll infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\!Submit\ezStubi1.dll infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\!Submit\ezStubx.exe infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\!Submit\ftrwg.dll infected by "not-a-virus:AdWare.Adstart.h" Virus. Action Taken: No Action Taken. File C:\!Submit\ftrwgc.exe infected by "not-a-virus:AdWare.Adstart.b" Virus. Action Taken: No Action Taken. File C:\!Submit\ftrwgd.exe infected by "not-a-virus:AdWare.Adstart.b" Virus. Action Taken: No Action Taken. File C:\!Submit\ftrwgf.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\!Submit\hfanebn.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\!Submit\hfikecs.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\!Submit\hiinyee.sys infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\!Submit\hkijyec.sys infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\!Submit\hlateaf.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\!Submit\hmagefn.vxd infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\!Submit\hoaqygf.dll infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\!Submit\hrajefb.vxd infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\!Submit\hsatygm.dll infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\!Submit\htikyam.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\!Submit\hxzdr.dll infected by "not-a-virus:AdWare.Adstart.i" Virus. Action Taken: No Action Taken. File C:\!Submit\hxzdrd.exe infected by "not-a-virus:AdWare.Adstart.i" Virus. Action Taken: No Action Taken. File C:\!Submit\hxzdrf.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\!Submit\IEMenuExtension.exe infected by "not-a-virus:AdWare.ToolBar.Ucmore.a" Virus. Action Taken: No Action Taken. File C:\!Submit\iMeshV4.exe infected by "not-a-virus:AdWare.Gator.4104" Virus. Action Taken: No Action Taken. File C:\!Submit\info6_s.cab infected by "Trojan.Win32.Dialer.t" Virus. Action Taken: No Action Taken. File C:\!Submit\install007.exe infected by "Trojan.Win32.SecondThought.ao" Virus. Action Taken: No Action Taken. File C:\!Submit\install007[1].exe infected by "Trojan.Win32.SecondThought.ao" Virus. Action Taken: No Action Taken. File C:\!Submit\installer.exe infected by "Trojan-Dropper.Win32.Small.kz" Virus. Action Taken: No Action Taken. File C:\!Submit\internet.exe infected by "Trojan.Win32.Dialer.eb" Virus. Action Taken: No Action Taken. File C:\!Submit\javexulm.vxd infected by "not-a-virus:AdWare.BargainBuddy.q" Virus. Action Taken: No Action Taken. File C:\!Submit\lmf32v.dll infected by "not-a-virus:AdWare.Suggestor.g" Virus. Action Taken: No Action Taken. File C:\!Submit\mqexdlm.srg infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\!Submit\msCMTsrvc.exe infected by "Trojan-Downloader.Win32.Presario" Virus. Action Taken: No Action Taken. File C:\!Submit\msg183.tmp10958536420259.exe infected by "not-a-virus:AdWare.Beginto.a" Virus. Action Taken: No Action Taken. File C:\!Submit\msg185.tmp10958536440259.exe infected by "not-a-virus:AdWare.Beginto.a" Virus. Action Taken: No Action Taken. File C:\!Submit\mxTarget(4).dll infected by "not-a-virus:AdWare.BiSpy.o" Virus. Action Taken: No Action Taken. File C:\!Submit\mxTarget(5).dll infected by "not-a-virus:AdWare.BiSpy.o" Virus. Action Taken: No Action Taken. File C:\!Submit\mzhma.exe infected by "Trojan-Downloader.Win32.Petrolin.a" Virus. Action Taken: No Action Taken. File C:\!Submit\n20050308.exe infected by "not-a-virus:AdWare.EZula.ah" Virus. Action Taken: No Action Taken. File C:\!Submit\newdevin.exe infected by "not-a-virus:AdWare.BookedSpace.c" Virus. Action Taken: No Action Taken. File C:\!Submit\NLNP!3.exe infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\!Submit\NLNP13.dll infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\!Submit\NLNP131.dll infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\!Submit\nostalgia.dll infected by "not-a-virus:AdWare.BiSpy.m" Virus. Action Taken: No Action Taken. File C:\!Submit\nsdtmp09.dll infected by "not-a-virus:AdWare.MetaDirect.a" Virus. Action Taken: No Action Taken. File C:\!Submit\optimizer.exe infected by "Trojan-Downloader.Win32.IstBar.er" Virus. Action Taken: No Action Taken. File C:\!Submit\othb.exe infected by "not-a-virus:AdWare.PurityScan.w" Virus. Action Taken: No Action Taken. File C:\!Submit\PreUninstall.exe infected by "not-a-virus:AdWare.Suggestor.g" Virus. Action Taken: No Action Taken. File C:\!Submit\QDow.dll infected by "Trojan-Downloader.Win32.QDown.d" Virus. Action Taken: No Action Taken. File C:\!Submit\QNQAOHIS.exe infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\!Submit\rundlg32.dll infected by "not-a-virus:AdWare.ToolBar.SBSoft.f" Virus. Action Taken: No Action Taken. File C:\!Submit\runsearch.exe infected by "not-a-virus:AdWare.BHO.MegaSearch.d" Virus. Action Taken: No Action Taken. File C:\!Submit\SaveInstCsSm.exe infected by "Trojan-Downloader.Win32.Small.kl" Virus. Action Taken: No Action Taken. File C:\!Submit\se.exe infected by "not-a-virus:AdWare.WindowEnhancer" Virus. Action Taken: No Action Taken. File C:\!Submit\setup_silent_26198.exe infected by "not-a-virus:AdWare.MDH.a" Virus. Action Taken: No Action Taken. File C:\!Submit\sideb.exe infected by "not-a-virus:AdWare.ToolBar.EliteBar.v" Virus. Action Taken: No Action Taken. File C:\!Submit\SSK_B5.EXE infected by "Trojan-Dropper.Win32.SurfSide.a" Virus. Action Taken: No Action Taken. File C:\!Submit\stcupdt.exe infected by "Trojan.Win32.SecondThought.bd" Virus. Action Taken: No Action Taken. File C:\!Submit\TBPSSvc[1].cab infected by "not-a-virus:AdWare.WebSearch.b" Virus. Action Taken: No Action Taken. File C:\!Submit\tvmupdater.exe infected by "not-a-virus:AdWare.TotalVelocity.u" Virus. Action Taken: No Action Taken. File C:\!Submit\unpack.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\!Submit\vern16.exe infected by "Trojan-Dropper.Win32.Miewer.d" Virus. Action Taken: No Action Taken. File C:\!Submit\vmstmp.exe infected by "not-a-virus:AdWare.DelphinMediaViewer.c" Virus. Action Taken: No Action Taken. File C:\!Submit\WebRebates_Auto_InstallSilent.exe infected by "not-a-virus:AdWare.WebRebates.g" Virus. Action Taken: No Action Taken. File C:\!Submit\WinTS[1].cab infected by "Trojan-Downloader.Win32.Wintool.b" Virus. Action Taken: No Action Taken. File C:\!Submit\wiudc.dll infected by "not-a-virus:AdWare.Adstart.c" Virus. Action Taken: No Action Taken. File C:\!Submit\wiudcf.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\!Submit\woinstall.exe infected by "not-a-virus:AdWare.EZula.ak" Virus. Action Taken: No Action Taken. File C:\!Submit\woinstall[1].exe infected by "not-a-virus:AdWare.EZula.ak" Virus. Action Taken: No Action Taken. File C:\!Submit\wrapperouter.exe infected by "not-a-virus:AdWare.VirtualBouncer.f" Virus. Action Taken: No Action Taken. File C:\!Submit\WrapperOuter1154041108.EXE infected by "not-a-virus:AdWare.VirtualBouncer.c" Virus. Action Taken: No Action Taken. File C:\!Submit\wtbgmtt.exe infected by "not-a-virus:AdWare.WinAD" Virus. Action Taken: No Action Taken. File C:\!Submit\wtvh.dll infected by "not-a-virus:AdWare.WildTangent.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\AOL Downloads\updateni_setup90\comp01.000 tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04040000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04F00000.VBN infected by "Trojan.Win32.VB.kq" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04F00002.VBN infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04F00004.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08600000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08CC0000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900000.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900002.VBN infected by "Trojan-Dropper.Win32.Small.eh" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900004.VBN infected by "Trojan-Downloader.VBS.Iwill.o" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900006.VBN infected by "Trojan-Downloader.VBS.Iwill.o" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900008.VBN infected by "Backdoor.Win32.Padodor.gen" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900009.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90000A.VBN infected by "Trojan-Dropper.Win32.Agent.ec" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90000C.VBN infected by "Trojan-Dropper.Win32.Agent.ec" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90000E.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900010.VBN infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900012.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900014.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900016.VBN infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900018.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90001A.VBN infected by "Trojan.Java.ClassLoader.i" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90001C.VBN infected by "Trojan-Downloader.JS.Small.d" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90001E.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900020.VBN infected by "Exploit.HTML.ObjData" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900024.VBN infected by "Trojan.Win32.StartPage.hi" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900026.VBN infected by "Trojan-Downloader.Win32.Small.kc" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900028.VBN infected by "Trojan-Downloader.Win32.Small.kc" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0C900000.VBN infected by "Trojan-Downloader.Win32.Agent.ae" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0C900002.VBN infected by "Trojan-Dropper.Win32.Small.mr" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0C900004.VBN infected by "Trojan-Downloader.Win32.Small.wj" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0C900006.VBN infected by "Trojan-Dropper.Win32.Small.mr" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0C900008.VBN infected by "Trojan-Downloader.Win32.Small.wj" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CB00000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0E8C0000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0F280000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0FA00000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\10B40000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Documents\AOL Downloads\aolsetup90\comp01.000 tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Documents and Settings\Jerry\.jpi_cache\jar\1.0\javainstaller.jar-4514e5ea-3d8527a0.zip infected by "Trojan-Downloader.Java.OpenStream.t" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Jerry\Desktop\l2mfix\backup.zip infected by "not-a-virus:AdWare.Look2Me.u" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Jerry\Desktop\l2mfix\Process.exe tagged as not-a-virus:RiskWare.Tool.Processor.20. No Action Taken. File C:\Documents and Settings\Jerry\Desktop\l2mfix.exe tagged as not-a-virus:RiskWare.Tool.Processor.20. No Action Taken. File C:\hp\bin\Terminator.exe tagged as not-a-virus:RiskWare.Tool.KillApp. No Action Taken. File C:\hp\bin\win32all-146.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\hp\drivers\audio\Creative\Audio\Drivers\COMMON\killapps.exe tagged as not-a-virus:RiskWare.Tool.KillApp.b. No Action Taken. File C:\Program Files\America Online 9.0a\Jiti\Jiti_mm.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Program Files\America Online 9.0b\Jiti\Jiti_mm.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\21016854.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\21016889.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30745406.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30746812.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30747906.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.q" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30748750.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.l" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30749125.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30751109.asw infected by "not-a-virus:AdWare.ToolBar.SideFind" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30752562.asw infected by "not-a-virus:AdWare.Cres" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30753406.asw infected by "not-a-virus:AdWare.WindowEnhancer" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30755562.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30755984.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.q" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30756203.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.q" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30756656.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.q" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30757343.asw infected by "not-a-virus:AdWare.BiSpy.o" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34026593.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.q" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34026765.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34027421.asw infected by "not-a-virus:AdWare.ToolBar.SideFind" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34027656.asw infected by "not-a-virus:AdWare.Cres" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34027796.asw infected by "not-a-virus:AdWare.WindowEnhancer" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34027921.asw infected by "not-a-virus:AdWare.SmartPops" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34028000.asw infected by "not-a-virus:AdWare.SmartPops" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34030625.asw infected by "Trojan-Downloader.Win32.IstBar.dh" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34030906.asw infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34030968.asw infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34031000.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34031109.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\HijackThis\backups\backup-20050204-202007-756.dll infected by "not-a-virus:AdWare.Wintol.t" Virus. Action Taken: No Action Taken. File C:\Program Files\HijackThis\backups\backup-20050204-202008-896.dll infected by "not-a-virus:AdWare.WebSearch.o" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc1\WSup.exe infected by "not-a-virus:AdWare.Wintol.t" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc1\WToolsA.exe infected by "not-a-virus:AdWare.Wintol.t" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc1\WToolsB.dll infected by "not-a-virus:AdWare.Wintol.t" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc2\common.dll infected by "not-a-virus:AdWare.WebSearch.o" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc2\PIB.exe infected by "not-a-virus:AdWare.WebSearch.n" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc2\TBPS.exe infected by "not-a-virus:AdWare.WebSearch.n" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc2\TBPSSvc.exe infected by "not-a-virus:AdWare.WebSearch.f" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc2\toolbar.dll infected by "not-a-virus:AdWare.WebSearch.o" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001530.exe infected by "not-a-virus:AdWare.PurityScan.w" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001531.exe infected by "not-a-virus:AdWare.Gator.4104" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001532.dll infected by "not-a-virus:AdWare.ToolBar.EliteBar.u" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001533.exe infected by "Trojan-Downloader.Win32.Petrolin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001534.exe infected by "Trojan-Downloader.Win32.Small.kl" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001535.exe infected by "Trojan.Win32.SecondThought.bd" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001536.exe infected by "not-a-virus:AdWare.ClearSearch.q" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001537.exe infected by "not-a-virus:AdWare.BHO.MegaSearch.d" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001544.exe infected by "not-a-virus:AdWare.WebRebates.g" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001545.exe infected by "not-a-virus:AdWare.VirtualBouncer.f" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001546.dll infected by "not-a-virus:AdWare.ToolBar.EliteBar.v" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001548.exe infected by "not-a-virus:AdWare.ToolBar.Ucmore.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001549.exe infected by "Trojan.Win32.Dialer.eb" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001550.dll infected by "not-a-virus:AdWare.BiSpy.o" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001551.dll infected by "not-a-virus:AdWare.BiSpy.o" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001552.exe infected by "not-a-virus:AdWare.ToolBar.EliteBar.v" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001553.EXE infected by "Trojan-Dropper.Win32.SurfSide.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001554.dll infected by "not-a-virus:AdWare.Couponage.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001556.dll infected by "not-a-virus:AdWare.Couponage.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001557.dll infected by "not-a-virus:AdWare.PurityScan.ak" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001558.exe infected by "Trojan-Downloader.Win32.Apropo.d" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001559.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001560.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001561.exe infected by "not-a-virus:AdWare.BargainBuddy.q" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001562.dll infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001563.dll infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001564.exe infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001565.dll infected by "not-a-virus:AdWare.Adstart.h" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001566.exe infected by "not-a-virus:AdWare.Adstart.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001567.exe infected by "not-a-virus:AdWare.Adstart.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001569.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001570.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001571.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001572.sys infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001573.sys infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001574.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001575.vxd infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001576.dll infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001577.vxd infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001578.dll infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001579.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001581.dll infected by "not-a-virus:AdWare.Adstart.i" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001582.exe infected by "not-a-virus:AdWare.Adstart.i" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001583.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001584.exe infected by "Trojan-Dropper.Win32.Small.kz" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001585.vxd infected by "not-a-virus:AdWare.BargainBuddy.q" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001586.dll infected by "not-a-virus:AdWare.Suggestor.g" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001587.srg infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001588.exe infected by "Trojan-Downloader.Win32.Presario" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001589.exe infected by "not-a-virus:AdWare.EZula.ah" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001590.exe infected by "not-a-virus:AdWare.BookedSpace.c" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001591.exe infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001593.dll infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001594.dll infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001595.dll infected by "not-a-virus:AdWare.BiSpy.m" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001596.exe infected by "Trojan-Downloader.Win32.IstBar.er" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001597.exe infected by "not-a-virus:AdWare.Suggestor.g" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001598.exe infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001599.exe infected by "not-a-virus:AdWare.MDH.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001600.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001601.dll infected by "not-a-virus:AdWare.Adstart.c" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001602.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001603.exe infected by "not-a-virus:AdWare.EZula.ak" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001604.exe infected by "not-a-virus:AdWare.WinAD" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001605.dll infected by "not-a-virus:AdWare.WildTangent.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\bundles\sahagent-seedcorn1002.exe infected by "not-a-virus:AdWare.Sahat.h" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\SAHAgent_.exe infected by "not-a-virus:AdWare.ShopAtHome.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\SahHtml_.exe infected by "not-a-virus:AdWare.Sahat.i" Virus. Action Taken: No Action Taken. File C:\WINDOWS\NDNuninstall4_88.exe infected by "not-a-virus:AdWare.NewDotNet" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\Agent.dll infected by "not-a-virus:AdWare.Sahat.g" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\Cache\cxtpls_loader.exe infected by "not-a-virus:AdWare.Apropos.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\SHAgent.dll infected by "not-a-virus:AdWare.Sahat.g" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\012FGTU7\Toolbar3[1].cab tagged as not-a-virus:RiskWare.Tool.Exporun. No Action Taken.

It's looking good - they are all quarantined.

Using Windows Explorer, navigate to the !Submit folder on the C:\ drive and inside you will the files removed by TheKillbox - zip up that folder and send to this e-mail address including a link to this thread in the body of the email.

Then delete the C:\!Submit folder. Post a new mwav scan.

Okay…Isubmit folder is gone Here's new log G Sun Mar 13 01:27:30 2005 => Total Files Scanned: 66426 Sun Mar 13 01:27:30 2005 => Total Virus(es) Found: 249 Sun Mar 13 01:27:30 2005 => Total Disinfected Files: 0 Sun Mar 13 01:27:30 2005 => Total Files Renamed: 0 Sun Mar 13 01:27:30 2005 => Total Deleted Files: 0 Sun Mar 13 01:27:30 2005 => Total Errors: 146 Sun Mar 13 01:27:30 2005 => Time Elapsed: 04:00:57 Sun Mar 13 01:27:30 2005 => Virus Database Date: 2005/02/25 Sun Mar 13 01:27:30 2005 => Virus Database Count: 119374 Sun Mar 13 01:27:30 2005 => Scan Completed. File C:\WINDOWS\NDNuninstall4_88.exe infected by "not-a-virus:AdWare.NewDotNet" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\Agent.dll infected by "not-a-virus:AdWare.Sahat.g" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\SHAgent.dll infected by "not-a-virus:AdWare.Sahat.g" Virus. Action Taken: No Action Taken. File C:\!Submit.zip infected by "not-a-virus:PornWare.Dialer.Playground.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\AOL Downloads\updateni_setup90\comp01.000 tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04040000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04F00000.VBN infected by "Trojan.Win32.VB.kq" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04F00002.VBN infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04F00004.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08600000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08CC0000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900000.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900002.VBN infected by "Trojan-Dropper.Win32.Small.eh" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900004.VBN infected by "Trojan-Downloader.VBS.Iwill.o" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900006.VBN infected by "Trojan-Downloader.VBS.Iwill.o" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900008.VBN infected by "Backdoor.Win32.Padodor.gen" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900009.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90000A.VBN infected by "Trojan-Dropper.Win32.Agent.ec" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90000C.VBN infected by "Trojan-Dropper.Win32.Agent.ec" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90000E.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900010.VBN infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900012.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900014.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900016.VBN infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900018.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90001A.VBN infected by "Trojan.Java.ClassLoader.i" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90001C.VBN infected by "Trojan-Downloader.JS.Small.d" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A90001E.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900020.VBN infected by "Exploit.HTML.ObjData" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900024.VBN infected by "Trojan.Win32.StartPage.hi" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900026.VBN infected by "Trojan-Downloader.Win32.Small.kc" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A900028.VBN infected by "Trojan-Downloader.Win32.Small.kc" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0C900000.VBN infected by "Trojan-Downloader.Win32.Agent.ae" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0C900002.VBN infected by "Trojan-Dropper.Win32.Small.mr" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0C900004.VBN infected by "Trojan-Downloader.Win32.Small.wj" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0C900006.VBN infected by "Trojan-Dropper.Win32.Small.mr" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0C900008.VBN infected by "Trojan-Downloader.Win32.Small.wj" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CB00000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0E8C0000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0F280000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0FA00000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\10B40000.VBN infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Documents\AOL Downloads\aolsetup90\comp01.000 tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Documents and Settings\Jerry\.jpi_cache\jar\1.0\javainstaller.jar-4514e5ea-3d8527a0.zip infected by "Trojan-Downloader.Java.OpenStream.t" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Jerry\Desktop\l2mfix\backup.zip infected by "not-a-virus:AdWare.Look2Me.u" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\Jerry\Desktop\l2mfix\Process.exe tagged as not-a-virus:RiskWare.Tool.Processor.20. No Action Taken. File C:\Documents and Settings\Jerry\Desktop\l2mfix.exe tagged as not-a-virus:RiskWare.Tool.Processor.20. No Action Taken. File C:\hp\bin\Terminator.exe tagged as not-a-virus:RiskWare.Tool.KillApp. No Action Taken. File C:\hp\bin\win32all-146.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\hp\drivers\audio\Creative\Audio\Drivers\COMMON\killapps.exe tagged as not-a-virus:RiskWare.Tool.KillApp.b. No Action Taken. File C:\Program Files\America Online 9.0a\Jiti\Jiti_mm.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Program Files\America Online 9.0b\Jiti\Jiti_mm.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\21016854.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\21016889.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30745406.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30746812.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30747906.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.q" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30748750.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.l" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30749125.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30751109.asw infected by "not-a-virus:AdWare.ToolBar.SideFind" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30752562.asw infected by "not-a-virus:AdWare.Cres" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30753406.asw infected by "not-a-virus:AdWare.WindowEnhancer" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30755562.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30755984.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.q" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30756203.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.q" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30756656.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.q" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\30757343.asw infected by "not-a-virus:AdWare.BiSpy.o" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34026593.asw infected by "not-a-virus:AdWare.ToolBar.EliteBar.q" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34026765.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34027421.asw infected by "not-a-virus:AdWare.ToolBar.SideFind" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34027656.asw infected by "not-a-virus:AdWare.Cres" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34027796.asw infected by "not-a-virus:AdWare.WindowEnhancer" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34027921.asw infected by "not-a-virus:AdWare.SmartPops" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34028000.asw infected by "not-a-virus:AdWare.SmartPops" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34030625.asw infected by "Trojan-Downloader.Win32.IstBar.dh" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34030906.asw infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34030968.asw infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34031000.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\34031109.asw infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. File C:\Program Files\HijackThis\backups\backup-20050204-202007-756.dll infected by "not-a-virus:AdWare.Wintol.t" Virus. Action Taken: No Action Taken. File C:\Program Files\HijackThis\backups\backup-20050204-202008-896.dll infected by "not-a-virus:AdWare.WebSearch.o" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\060585.exe infected by "not-a-virus:PornWare.Dialer.Playground.b" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\adlinstallwin32.exe infected by "not-a-virus:AdWare.Adstart.i" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\bw2.exe infected by "Trojan-Dropper.Win32.Small.ru" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\CSv10P070.exe infected by "not-a-virus:AdWare.ClearSearch.q" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\dhcml3a.exe infected by "Trojan-Downloader.Win32.Apropo.d" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\docore.dll infected by "not-a-virus:AdWare.Couponage.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\dosync.dll infected by "not-a-virus:AdWare.Couponage.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\DS4.dll infected by "Trojan-Downloader.Win32.Lookme.j" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\dsoycv.dll infected by "not-a-virus:AdWare.PurityScan.ak" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\EliteSideBar 07.dll infected by "not-a-virus:AdWare.ToolBar.EliteBar.v" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\EliteToolBar version 54.dll infected by "not-a-virus:AdWare.ToolBar.EliteBar.u" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\exdl.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\exdl0.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\exul.exe infected by "not-a-virus:AdWare.BargainBuddy.q" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\eZinstall[1].exe infected by "not-a-virus:AdWare.EZula.ak" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\ezStubi.dll infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\ezStubi1.dll infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\ezStubx.exe infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\ftrwg.dll infected by "not-a-virus:AdWare.Adstart.h" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\ftrwgc.exe infected by "not-a-virus:AdWare.Adstart.b" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\ftrwgd.exe infected by "not-a-virus:AdWare.Adstart.b" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\ftrwgf.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\hfanebn.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\hfikecs.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\hiinyee.sys infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\hkijyec.sys infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\hlateaf.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\hmagefn.vxd infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\hoaqygf.dll infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\hrajefb.vxd infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\hsatygm.dll infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\htikyam.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\hxzdr.dll infected by "not-a-virus:AdWare.Adstart.i" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\hxzdrd.exe infected by "not-a-virus:AdWare.Adstart.i" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\hxzdrf.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\IEMenuExtension.exe infected by "not-a-virus:AdWare.ToolBar.Ucmore.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\iMeshV4.exe infected by "not-a-virus:AdWare.Gator.4104" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\info6_s.cab infected by "Trojan.Win32.Dialer.t" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\install007.exe infected by "Trojan.Win32.SecondThought.ao" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\install007[1].exe infected by "Trojan.Win32.SecondThought.ao" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\installer.exe infected by "Trojan-Dropper.Win32.Small.kz" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\internet.exe infected by "Trojan.Win32.Dialer.eb" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\javexulm.vxd infected by "not-a-virus:AdWare.BargainBuddy.q" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\lmf32v.dll infected by "not-a-virus:AdWare.Suggestor.g" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\mqexdlm.srg infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\msCMTsrvc.exe infected by "Trojan-Downloader.Win32.Presario" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\msg183.tmp10958536420259.exe infected by "not-a-virus:AdWare.Beginto.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\msg185.tmp10958536440259.exe infected by "not-a-virus:AdWare.Beginto.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\mxTarget(4).dll infected by "not-a-virus:AdWare.BiSpy.o" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\mxTarget(5).dll infected by "not-a-virus:AdWare.BiSpy.o" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\mzhma.exe infected by "Trojan-Downloader.Win32.Petrolin.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\n20050308.exe infected by "not-a-virus:AdWare.EZula.ah" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\newdevin.exe infected by "not-a-virus:AdWare.BookedSpace.c" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\NLNP!3.exe infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\NLNP13.dll infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\NLNP131.dll infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\nostalgia.dll infected by "not-a-virus:AdWare.BiSpy.m" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\nsdtmp09.dll infected by "not-a-virus:AdWare.MetaDirect.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\optimizer.exe infected by "Trojan-Downloader.Win32.IstBar.er" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\othb.exe infected by "not-a-virus:AdWare.PurityScan.w" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\PreUninstall.exe infected by "not-a-virus:AdWare.Suggestor.g" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\QDow.dll infected by "Trojan-Downloader.Win32.QDown.d" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\QNQAOHIS.exe infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\rundlg32.dll infected by "not-a-virus:AdWare.ToolBar.SBSoft.f" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\runsearch.exe infected by "not-a-virus:AdWare.BHO.MegaSearch.d" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\SaveInstCsSm.exe infected by "Trojan-Downloader.Win32.Small.kl" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\se.exe infected by "not-a-virus:AdWare.WindowEnhancer" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\setup_silent_26198.exe infected by "not-a-virus:AdWare.MDH.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\sideb.exe infected by "not-a-virus:AdWare.ToolBar.EliteBar.v" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\SSK_B5.EXE infected by "Trojan-Dropper.Win32.SurfSide.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\stcupdt.exe infected by "Trojan.Win32.SecondThought.bd" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\TBPSSvc[1].cab infected by "not-a-virus:AdWare.WebSearch.b" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\tvmupdater.exe infected by "not-a-virus:AdWare.TotalVelocity.u" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\unpack.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\vern16.exe infected by "Trojan-Dropper.Win32.Miewer.d" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\vmstmp.exe infected by "not-a-virus:AdWare.DelphinMediaViewer.c" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\WebRebates_Auto_InstallSilent.exe infected by "not-a-virus:AdWare.WebRebates.g" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\WinTS[1].cab infected by "Trojan-Downloader.Win32.Wintool.b" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\wiudc.dll infected by "not-a-virus:AdWare.Adstart.c" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\wiudcf.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\woinstall.exe infected by "not-a-virus:AdWare.EZula.ak" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\woinstall[1].exe infected by "not-a-virus:AdWare.EZula.ak" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\wrapperouter.exe infected by "not-a-virus:AdWare.VirtualBouncer.f" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\WrapperOuter1154041108.EXE infected by "not-a-virus:AdWare.VirtualBouncer.c" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\wtbgmtt.exe infected by "not-a-virus:AdWare.WinAD" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-1006\Dc1\wtvh.dll infected by "not-a-virus:AdWare.WildTangent.b" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc1\WSup.exe infected by "not-a-virus:AdWare.Wintol.t" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc1\WToolsA.exe infected by "not-a-virus:AdWare.Wintol.t" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc1\WToolsB.dll infected by "not-a-virus:AdWare.Wintol.t" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc2\common.dll infected by "not-a-virus:AdWare.WebSearch.o" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc2\PIB.exe infected by "not-a-virus:AdWare.WebSearch.n" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc2\TBPS.exe infected by "not-a-virus:AdWare.WebSearch.n" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc2\TBPSSvc.exe infected by "not-a-virus:AdWare.WebSearch.f" Virus. Action Taken: No Action Taken. File C:\RECYCLER\S-1-5-21-3697291689-4265909289-572454927-500\Dc2\toolbar.dll infected by "not-a-virus:AdWare.WebSearch.o" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001530.exe infected by "not-a-virus:AdWare.PurityScan.w" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001531.exe infected by "not-a-virus:AdWare.Gator.4104" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001532.dll infected by "not-a-virus:AdWare.ToolBar.EliteBar.u" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001533.exe infected by "Trojan-Downloader.Win32.Petrolin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001534.exe infected by "Trojan-Downloader.Win32.Small.kl" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001535.exe infected by "Trojan.Win32.SecondThought.bd" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001536.exe infected by "not-a-virus:AdWare.ClearSearch.q" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001537.exe infected by "not-a-virus:AdWare.BHO.MegaSearch.d" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001544.exe infected by "not-a-virus:AdWare.WebRebates.g" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001545.exe infected by "not-a-virus:AdWare.VirtualBouncer.f" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001546.dll infected by "not-a-virus:AdWare.ToolBar.EliteBar.v" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001548.exe infected by "not-a-virus:AdWare.ToolBar.Ucmore.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001549.exe infected by "Trojan.Win32.Dialer.eb" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001550.dll infected by "not-a-virus:AdWare.BiSpy.o" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001551.dll infected by "not-a-virus:AdWare.BiSpy.o" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001552.exe infected by "not-a-virus:AdWare.ToolBar.EliteBar.v" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001553.EXE infected by "Trojan-Dropper.Win32.SurfSide.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001554.dll infected by "not-a-virus:AdWare.Couponage.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001556.dll infected by "not-a-virus:AdWare.Couponage.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001557.dll infected by "not-a-virus:AdWare.PurityScan.ak" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001558.exe infected by "Trojan-Downloader.Win32.Apropo.d" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001559.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001560.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001561.exe infected by "not-a-virus:AdWare.BargainBuddy.q" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001562.dll infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001563.dll infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001564.exe infected by "not-a-virus:AdWare.EZula.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001565.dll infected by "not-a-virus:AdWare.Adstart.h" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001566.exe infected by "not-a-virus:AdWare.Adstart.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001567.exe infected by "not-a-virus:AdWare.Adstart.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001569.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001570.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001571.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001572.sys infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001573.sys infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001574.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001575.vxd infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001576.dll infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001577.vxd infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001578.dll infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001579.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001581.dll infected by "not-a-virus:AdWare.Adstart.i" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001582.exe infected by "not-a-virus:AdWare.Adstart.i" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001583.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001584.exe infected by "Trojan-Dropper.Win32.Small.kz" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001585.vxd infected by "not-a-virus:AdWare.BargainBuddy.q" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001586.dll infected by "not-a-virus:AdWare.Suggestor.g" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001587.srg infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001588.exe infected by "Trojan-Downloader.Win32.Presario" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001589.exe infected by "not-a-virus:AdWare.EZula.ah" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001590.exe infected by "not-a-virus:AdWare.BookedSpace.c" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001591.exe infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001593.dll infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001594.dll infected by "not-a-virus:AdWare.IGetNet" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001595.dll infected by "not-a-virus:AdWare.BiSpy.m" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001596.exe infected by "Trojan-Downloader.Win32.IstBar.er" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001597.exe infected by "not-a-virus:AdWare.Suggestor.g" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001598.exe infected by "Trojan-Downloader.Win32.Zlob.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001599.exe infected by "not-a-virus:AdWare.MDH.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001600.exe infected by "Trojan.Win32.Painwin.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001601.dll infected by "not-a-virus:AdWare.Adstart.c" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001602.exe infected by "not-a-virus:AdWare.Adstart.d" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001603.exe infected by "not-a-virus:AdWare.EZula.ak" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001604.exe infected by "not-a-virus:AdWare.WinAD" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{CD45504F-D983-486E-9C46-F5C3E4ADCBD7}\RP3\A0001605.dll infected by "not-a-virus:AdWare.WildTangent.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\bundles\sahagent-seedcorn1002.exe infected by "not-a-virus:AdWare.Sahat.h" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\SAHAgent_.exe infected by "not-a-virus:AdWare.ShopAtHome.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\SahHtml_.exe infected by "not-a-virus:AdWare.Sahat.i" Virus. Action Taken: No Action Taken. File C:\WINDOWS\NDNuninstall4_88.exe infected by "not-a-virus:AdWare.NewDotNet" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\Agent.dll infected by "not-a-virus:AdWare.Sahat.g" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\Cache\cxtpls_loader.exe infected by "not-a-virus:AdWare.Apropos.b" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\SHAgent.dll infected by "not-a-virus:AdWare.Sahat.g" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\012FGTU7\Toolbar3[1].cab tagged as not-a-virus:RiskWare.Tool.Exporun. No Action Taken.

Almost there. Repeat the Killbox fix on these files:

C:\WINDOWS\bundles\sahagent-seedcorn1002.exe
C:\WINDOWS\Downloaded Program Files\SAHAgent_.exe
C:\WINDOWS\Downloaded Program Files\SahHtml_.exe
C:\WINDOWS\NDNuninstall4_88.exe
C:\WINDOWS\system32\Agent.dll
C:\WINDOWS\system32\Cache\cxtpls_loader.exe
C:\WINDOWS\system32\SHAgent.dll
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\012FGTU7\Toolbar3[1].cab

Re- run System Security Suite that you downloaded earlier. Then follow this sequence again:

1. Right-click My Computer>Click Properties>Click the System Restore tab>Check the box next to 'Turn off System Restore on all drives'>Click Apply>Click OK.

2. Reboot.

3. Repeat the process but this time remove the check from the box.

Post a new HijackThis log when done.

That's it - you are clean How is it running now?