What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Annoying Pop ups,Bloodhound.32.EP & MediaAccK.exe

27 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16

Open Norton Antivirus and click reports

I tried to run Nortron Antivirus last week,,it asked for updating,later it failed to run and it did not do job successfully,i tried to unistall it but still I see it's in C:/Program Files.I think either some files missing as I don't find it's icon for running in it's folder.
Post #17
Until we get Norton working again, please download AVG7 from here. This is a free and highly recommended antivirus program. Install the program, check for updates and run a scan with it.


Post the new HijackThis log and mwavscan log when you are ready.
Post #18
Microworld Antivirus run log:

Object "ElitebarBHO Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "BrowserAid Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "adshooter Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "MediaMotor Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "BullsEye Network Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "cashback Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "AltNet Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "Roings Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "AdRotator Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "CWS.therealsearch Spyware/Adware" found in File System! Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "D:\WINDOWS\Downloaded Program Files\CONFLICT.4\installer_MARKETING32.exe". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "D:\WINDOWS\Downloaded Program Files\m67m.ocx". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\WINDOWS\BBStore\DSS\Dssagent.exe". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\Program Files\Netscape\Netscape\plugins\NPSWF32.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\WINDOWS\Downloaded Program Files\m67m.ocx". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "D:\WINDOWS\Downloaded Program Files\CONFLICT.4\installer_MARKETING32.exe". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{017C20C1-F86F-11D8-9B25-000ACD002AE3}" refers to invalid object "D:\WINDOWS\Helper101.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{25192826-28F2-11D5-BD16-004854626FBC}" refers to invalid object "C:\PROGRA~1\NEWTEC~1\NTICD-~1\FILECD\RESFIL~4.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{27395F85-0C0C-101B-A3C9-08002B2F49FB}" refers to invalid object "E:\NCB 10\42-Mobile Tools\SMS 2 SMS\PICCLP32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{29FF67FF-8050-480f-9F30-CC41635F2F9D}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}" refers to invalid object "C:\Program Files\Cheetah Burner\NCTAudioFile2.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6ED74AE3-8066-4385-AABA-243E033F75A3}" refers to invalid object "C:\Program Files\Cheetah Burner\NCTWMAFile2.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{6EDCD38E-8861-11D5-A3DD-00B0D0F3BAA7}" refers to invalid object "D:\PROGRA~1\Netscape\Netscape\MapiProxy.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{77829F14-D911-40FF-A2F0-D11DB8D6D0BC}" refers to invalid object "C:\Program Files\Cheetah Burner\NCTAudioFile2.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8298d101-f992-43b7-8eca-5052d885b995}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{83D4679F-B6D7-11D2-BF36-00C04FB90A03}" refers to invalid object "D:\PROGRA~1\MESSEN~1\rtcimsp.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A1B09066-C95C-4EF6-8DFD-3DD0AFE610B6}" refers to invalid object "D:\PROGRA~1\COMMON~1\AOL\SCREEN~1\YGPSCR~1.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A8FA2FDE-BF01-4DD9-AAFF-7BACFDCAE896}" refers to invalid object "C:\Program Files\Cheetah Burner\NCTWMAFile2.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{AA874A22-EB80-11D2-9E74-0010AD28CFA8}" refers to invalid object "D:\PROGRA~1\COMMON~1\SYMANT~1\LIVEAD~1\IraVcMsg.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{AAFA1E73-4842-4BEC-BC46-48C62E1C5C9C}" refers to invalid object "C:\Program Files\Cheetah Burner\NCTAudioInformation2.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{bada3c15-76d9-45de-87e4-69fff03e2445}" refers to invalid object "D:\WINDOWS\system32\pcduc.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{c366b2aa-e430-360c-6522-983f386f00aa}" refers to invalid object "D:\Program Files\FYI\kqpafwhjut.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{c477b0af-cd31-3100-622d-9a36306c07a0}" refers to invalid object "D:\Program Files\FYI\kqpafwhjut.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C8CE6FC1-CCF1-11D6-B8A5-000064657374}" refers to invalid object "D:\Program Files\Netscape\Netscape\PalmSyncProxy.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E13046F7-A5DF-4574-BD7A-6DC12EC10FF5}" refers to invalid object "D:\Program Files\AOL 8.0a\ebrowser.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F1F6A820-2355-11CF-9D53-00AA003C9CB6}" refers to invalid object "E:\NCB 10\42-Mobile Tools\SMS 2 SMS\PICCLP32.OCX". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{f612954d-3b0b-4c56-9563-227b7be624b4}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{f9559f75-e9f2-454f-b96c-20763860feaa}" refers to invalid object "D:\WINDOWS\system32\anaun.dll". Action Taken: No Action Taken.
Entry "HKCR\Alg.AlgSetup" refers to invalid object "{27D0BCCC-344D-4287-AF37-0C72C161C14C}". Action Taken: No Action Taken.
Entry "HKCR\Alg.AlgSetup.1" refers to invalid object "{27D0BCCC-344D-4287-AF37-0C72C161C14C}". Action Taken: No Action Taken.
Entry "HKCR\Ca.Cas" refers to invalid object "{B5F3970B-745E-46AC-B890-E08F69777D80}". Action Taken: No Action Taken.
Entry "HKCR\Ca.Cas.1" refers to invalid object "{B5F3970B-745E-46AC-B890-E08F69777D80}". Action Taken: No Action Taken.
Entry "HKCR\CfgWizDll.CfgComp.1" refers to invalid object "{63A17D3B-3121-EBD7-0E72-A512C267A1A5}". Action Taken: No Action Taken.
Entry "HKCR\Plenoptic.Plenoptic" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken.
Entry "HKCR\Plenoptic.Plenoptic.1" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken.
Entry "HKCR\VBRun.VBRunDLL" refers to invalid object "{197B8CA4-E215-46DD-8F33-E0544A80E5C4}". Action Taken: No Action Taken.
Entry "HKCR\VBRun.VBRunDLL.1" refers to invalid object "{197B8CA4-E215-46DD-8F33-E0544A80E5C4}". Action Taken: No Action Taken.
Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken.
Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr.1" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken.
File D:\WINDOWS\_MSRSTRT.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\WINDOWS\COMMAND\EBD\EBD.CAB tagged as not-a-virus:Tool.DOS.Restart. No Action Taken.
File C:\WINDOWS\TEMP\GL_3310.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\WINDOWS\TEMP\GL_D143.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\WINDOWS\TEMP\GL_E211.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\WINDOWS\TEMP\GL_3351.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\WINDOWS\TEMP\GL_8123.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\WINDOWS\TEMP\GL_E170.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\WINDOWS\TEMP\GL_A085.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\WINDOWS\TEMP\GL_5274.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\WINDOWS\TEMP\THI2152.TMP\trebates.exe tagged as "not-a-virus:AdWare.WebRebates.g". Action Taken: No Action Taken.
File C:\WINDOWS\TEMP\THI7732.TMP\trebates.cab tagged as "not-a-virus:AdWare.WebRebates.g". Action Taken: No Action Taken.
File C:\WINDOWS\mruninst.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\Program Files\Common Files\aolback\comp01.000 tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\Program Files\Online Services\AT&T\ATTSETUP.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\1BE24CBC.hta infected by "Trojan-Downloader.VBS.Wipup" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\5E062DF3.exe infected by "Trojan-Downloader.Win32.Lexbac.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\5E1D53DA.exe infected by "Trojan-Downloader.Win32.Lexup" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\0AC030BC.htm infected by "Exploit.JS.ActiveXComponent" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\10267C71.exe infected by "Trojan-Downloader.Win32.Lexbac.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\10332462.exe infected by "Trojan-Downloader.Win32.Lexup" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\4C0C56C2.exe infected by "Trojan-Downloader.Win32.Lexbac.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\4C1C28B0.exe infected by "Trojan-Downloader.Win32.Lexup" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\796361F7.exe tagged as "not-a-virus:AdWare.BetterInternet". Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\69582103.exe infected by "Trojan-Downloader.Win32.Lexbac.b" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\7A007733.exe infected by "Trojan-Downloader.Win32.Mendwar" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\6C844CDC.exe infected by "Trojan.Win32.Revop.c" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\7C785520.TMP infected by "Virus.VBS.Confi" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\7CA520EE.TMP infected by "Virus.VBS.Confi" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\07BB26BB.TMP infected by "Virus.VBS.Redlof.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\0A421FF3.TMP infected by "Virus.VBS.Redlof.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\0A5945DA.TMP infected by "Virus.VBS.Redlof.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\0A9D378F.TMP infected by "Virus.VBS.Redlof.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\0B092118.TMP infected by "Virus.VBS.Redlof.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\18C6159F.TMP infected by "Virus.VBS.Confi" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\19522304.TMP infected by "Virus.VBS.Confi" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\39EE25FB.TMP infected by "Virus.VBS.Redlof.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\3A0B1FDB.TMP infected by "Virus.VBS.Redlof.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\3A50118F.TMP infected by "Virus.VBS.Redlof.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\3AE61CEA.TMP infected by "Virus.VBS.Redlof.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\3AFA18D4.TMP infected by "Virus.VBS.Redlof.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\3CD036CF.TMP infected by "Virus.VBS.Redlof.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\3D142883.TMP infected by "Virus.VBS.Redlof.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\3D215075.TMP infected by "Virus.VBS.Redlof.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\72CB5E5D.TMP infected by "Virus.VBS.Confi" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\72D8064F.TMP infected by "Virus.VBS.Redlof.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\73B3035E.TMP infected by "Virus.VBS.Confi" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\73BC0153.TMP infected by "Virus.VBS.Redlof.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\74FC13F3.TMP infected by "Virus.VBS.Redlof.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\754105A7.TMP infected by "Virus.VBS.Redlof.a" Virus! Action Taken: No Action Taken.
File C:\Program Files\Norton AntiVirus\Quarantine\6AA875D1 infected by "Exploit.HTML.Mht" Virus! Action Taken: No Action Taken.
File C:\Program Files\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.01. No Action Taken.
File C:\Program Files\Real\RealOne Player\RealOne.exe tagged as not-a-virus:Tool.Win32.TPE.a. No Action Taken.
File C:\unzipped\Nailfix\Nailfix\Process.exe tagged as not-a-virus:Tool.Win32.Processor.20. No Action Taken.
File C:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006551.exe tagged as "not-a-virus:Porn-Dialer.Win32.PluginAccess.gen". Action Taken: No Action Taken.
File C:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006552.exe tagged as "not-a-virus:Porn-Dialer.Win32.PluginAccess.gen". Action Taken: No Action Taken.
File C:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006553.exe tagged as "not-a-virus:Porn-Dialer.Win32.PluginAccess.gen". Action Taken: No Action Taken.
File C:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006554.exe tagged as "not-a-virus:Porn-Dialer.Win32.PluginAccess.gen". Action Taken: No Action Taken.
File C:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006555.exe tagged as "not-a-virus:Porn-Dialer.Win32.Generic". Action Taken: No Action Taken.
File C:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006556.exe tagged as "not-a-virus:AdWare.SaveNow.ay". Action Taken: No Action Taken.
File C:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006557.exe tagged as not-a-virus:FalseAlarm.DrWeb.Backdoor.Theef.111. No Action Taken.
File C:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006558.exe tagged as "not-a-virus:Porn-Dialer.Win32.PluginAccess". Action Taken: No Action Taken.
File C:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006559.exe tagged as "not-a-virus:AdWare.WebRebates.g". Action Taken: No Action Taken.
File C:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006560.exe tagged as "not-a-virus:Porn-Dialer.Win32.Holistyc.gen". Action Taken: No Action Taken.
File D:\WIN98\WIN98_64.CAB tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File D:\WINDOWS\_MSRSTRT.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File D:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\QMem0612200516525732468.asw tagged as "not-a-virus:AdWare.WebSearch.ap". Action Taken: No Action Taken.
File D:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\QMem0612200516525734203.asw tagged as "not-a-virus:AdWare.WebSearch.an". Action Taken: No Action Taken.
File D:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\QMem0612200516525734250.asw infected by "Trojan-Clicker.Win32.Small.et" Virus! Action Taken: No Action Taken.
File D:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\QFle0612200518003688406.asw infected by "Trojan-Clicker.Win32.Small.et" Virus! Action Taken: No Action Taken.
File D:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\QFle0612200518003688437.asw tagged as "not-a-virus:AdWare.BargainBuddy.q". Action Taken: No Action Taken.
File D:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\QFle06142005231034423140.asw tagged as "not-a-virus:AdWare.BargainBuddy.q". Action Taken: No Action Taken.
File D:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\QMem06152005133922621984.asw tagged as "not-a-virus:AdWare.ReSearch.a". Action Taken: No Action Taken.
File D:\Program Files\Common Files\AOL\AOL Spyware Protection\Backup\QMem06152005133922622343.asw tagged as "not-a-virus:AdWare.ToolBar.SearchIt.d". Action Taken: No Action Taken.
File D:\Program Files\Common Files\aolback\comp01.000 tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File D:\Program Files\AOL 9.0\Jiti\Jiti_mm.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File D:\Program Files\AOL 9.0a\Jiti\Jiti_mm.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP1\A0000031.exe tagged as "not-a-virus:AdWare.WeirWeb.b". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP1\A0000032.exe tagged as "not-a-virus:AdWare.DelphinMedia.Viewer.f". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP3\A0000127.exe tagged as "not-a-virus:AdWare.WeirWeb.b". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP5\A0000375.exe tagged as "not-a-virus:AdWare.WeirWeb.b". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP5\A0000379.exe tagged as "not-a-virus:Dialer.Win32.PlayGames". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP5\A0000485.exe tagged as "not-a-virus:AdWare.BetterInternet". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000496.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000506.exe tagged as "not-a-virus:Dialer.Win32.PlayGames". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000508.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000513.exe tagged as "not-a-virus:AdWare.BetterInternet.c". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000525.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000529.exe tagged as "not-a-virus:AdWare.BetterInternet.c". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000531.exe tagged as "not-a-virus:Dialer.Win32.PlayGames". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000534.exe tagged as "not-a-virus:Dialer.Win32.PlayGames". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000543.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000550.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000560.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000563.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000566.dll infected by "Trojan-Downloader.Win32.Qoologic.p" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000567.cpl infected by "Trojan-Downloader.Win32.Qoologic.p" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000568.exe infected by "Trojan-Downloader.Win32.Qoologic.q" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000569.exe infected by "Trojan-Downloader.Win32.Qoologic.o" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000570.dll infected by "Trojan-Downloader.Win32.Qoologic.q" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000571.exe tagged as "not-a-virus:AdWare.WeirWeb.b". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000615.EXE infected by "Trojan-Downloader.Win32.Qoologic.o" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000616.DLL infected by "Trojan-Downloader.Win32.Qoologic.q" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000626.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000629.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000633.EXE infected by "Trojan-Downloader.Win32.Small.aly" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000686.EXE infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000687.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000777.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000779.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000802.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000803.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0000804.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0001818.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0001819.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP6\A0001821.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP7\A0001839.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP7\A0001840.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP7\A0001842.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP8\A0001872.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP8\A0001889.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP8\A0001890.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP10\A0002035.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP10\A0002036.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP10\A0002037.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP10\A0002051.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP10\A0002053.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP10\A0002132.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP10\A0002133.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP10\A0003132.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP10\A0003134.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP10\A0003169.dll tagged as "not-a-virus:AdWare.BookedSpace.e". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP10\A0003170.dll tagged as "not-a-virus:AdWare.SafeSurfing.j". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP10\A0003172.dll infected by "Trojan.Win32.StartPage.yq" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP10\A0003179.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003219.exe infected by "Trojan-Downloader.Win32.Small.aly" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003236.exe infected by "Trojan.Win32.Agent.ay" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003237.exe tagged as "not-a-virus:AdWare.DelphinMediaViewer.f". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003238.exe infected by "Trojan-Dropper.Win32.Small.wc" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003239.exe infected by "Trojan-Dropper.Win32.Small.qn" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003240.exe infected by "Trojan-Downloader.Win32.IstBar.gen" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003241.exe tagged as "not-a-virus:AdWare.BetterInternet". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003242.exe infected by "Trojan-Dropper.Win32.Small.qn" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003243.dll infected by "Trojan-Downloader.Win32.Qoologic.p" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003244.srg tagged as "not-a-virus:AdWare.BargainBuddy.q". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003245.dll tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.e". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003246.DLL tagged as "not-a-virus:AdWare.SafeSurfing.j". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003247.exe tagged as "not-a-virus:AdWare.SafeSurfing.i". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003248.exe tagged as "not-a-virus:Dialer.Win32.PlayGames". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003249.exe infected by "Trojan-Spy.Win32.VB.eh" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003250.exe infected by "Trojan-Dropper.Win32.Small.wc" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003251.exe infected by "Trojan-Spy.Win32.VB.eh" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003252.dll infected by "Trojan-Downloader.Win32.Braidupdate.d" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003253.exe tagged as "not-a-virus:AdWare.BetterInternet". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003254.exe tagged as "not-a-virus:AdWare.BetterInternet". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003263.exe infected by "Trojan-Downloader.Win32.Small.aly" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003273.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003289.exe infected by "Trojan.Win32.Favadd.o" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003290.exe infected by "Trojan-Downloader.Win32.Small.hs" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003291.dll infected by "Trojan-Clicker.Win32.Delf.r" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003292.exe tagged as "not-a-virus:AdWare.BetterInternet". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003293.exe tagged as "not-a-virus:AdWare.BookedSpace.e". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP12\A0003294.exe tagged as "not-a-virus:AdWare.EZula.ah". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP13\A0003480.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006543.exe tagged as "not-a-virus:AdWare.BetterInternet.c". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006544.cpl infected by "Trojan-Downloader.Win32.Qoologic.p" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006545.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006546.exe tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.e". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006547.exe tagged as "not-a-virus:AdWare.SafeSurfing.j". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006548.exe tagged as "not-a-virus:AdWare.WeirWeb.b". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006549.exe infected by "Trojan-Downloader.Win32.Delmed.a" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006550.exe tagged as "not-a-virus:AdWare.BookedSpace.e". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006561.exe infected by "Trojan-Downloader.Win32.Small.aal" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006562.exe infected by "Trojan-Downloader.Win32.Dyfuca.ei" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006563.exe infected by "Trojan-Dropper.Win32.VB.gg" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006564.exe infected by "Trojan-Downloader.Win32.Delmed.a" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006565.exe infected by "Trojan-Downloader.Win32.VB.id" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006566.exe tagged as "not-a-virus:AdWare.BookedSpace.e". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006567.exe tagged as "not-a-virus:AdWare.DelphinMedia.Viewer.f". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006568.dll tagged as "not-a-virus:AdWare.SmartPops.d". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006569.exe tagged as "not-a-virus:AdWare.SmartPops.c". Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006570.exe infected by "Trojan-Downloader.Win32.Dyfuca.ei" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0006573.dll infected by "Trojan-Downloader.Win32.Qoologic.p" Virus! Action Taken: No Action Taken.
File D:\System Volume Information\_restore{FBFBCE06-979D-4D44-A3EF-E11E42CAD461}\RP15\A0007584.dll tagged as "not-a-virus:AdWare.ReSearch.a". Action Taken: No Action Taken.
File D:\COMPROB\backups\backup-20050618-234529-621.dll tagged as "not-a-virus:AdWare.BookedSpace.e". Action Taken: No Action Taken.
File D:\COMPROB\backups\backup-20050618-234530-494.dll tagged as "not-a-virus:AdWare.SafeSurfing.j". Action Taken: No Action Taken.
File D:\COMPROB\backups\backup-20050618-234530-287.dll infected by "Trojan.Win32.StartPage.yq" Virus! Action Taken: No Action Taken.
File D:\COMPROB\Nailfix.zip tagged as not-a-virus:Tool.Win32.Processor.20. No Action Taken.
File D:\!Submit\cgyoeg.exe tagged as "not-a-virus:AdWare.BetterInternet.c". Action Taken: No Action Taken.
File D:\!Submit\redit.cpl infected by "Trojan-Downloader.Win32.Qoologic.p" Virus! Action Taken: No Action Taken.
File D:\!Submit\GSM3-0511.exe infected by "Trojan.Win32.Registrator.b" Virus! Action Taken: No Action Taken.
File D:\!Submit\rtneg5_venturahot_246765.exe tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.e". Action Taken: No Action Taken.
File D:\!Submit\InstallerV3.exe tagged as "not-a-virus:AdWare.SafeSurfing.j". Action Taken: No Action Taken.
File D:\!Submit\weirdontheweb_ventura.exe tagged as "not-a-virus:AdWare.WeirWeb.b". Action Taken: No Action Taken.
File D:\!Submit\L90112201.Stub.exe infected by "Trojan-Downloader.Win32.Delmed.a" Virus! Action Taken: No Action Taken.
File D:\!Submit\bsva-egihsg52.exe tagged as "not-a-virus:AdWare.BookedSpace.e". Action Taken: No Action Taken.
File D:\!Submit\dia71A2.exe tagged as "not-a-virus:Porn-Dialer.Win32.PluginAccess.gen". Action Taken: No Action Taken.
File D:\!Submit\diaA334.exe tagged as "not-a-virus:Porn-Dialer.Win32.PluginAccess.gen". Action Taken: No Action Taken.
File D:\!Submit\diaF1D5.exe tagged as "not-a-virus:Porn-Dialer.Win32.PluginAccess.gen". Action Taken: No Action Taken.
File D:\!Submit\dia125.exe tagged as "not-a-virus:Porn-Dialer.Win32.PluginAccess.gen". Action Taken: No Action Taken.
File D:\!Submit\dia3226.exe tagged as "not-a-virus:Porn-Dialer.Win32.Generic". Action Taken: No Action Taken.
File D:\!Submit\BI.cab tagged as "not-a-virus:AdWare.BiSpy.o". Action Taken: No Action Taken.
File D:\!Submit\whenu.exe tagged as "not-a-virus:AdWare.SaveNow.ay". Action Taken: No Action Taken.
File D:\!Submit\TNT-WinFax.Pro.10.0_CRK.exe tagged as not-a-virus:FalseAlarm.DrWeb.Backdoor.Theef.111. No Action Taken.
File D:\!Submit\diaD2D0.exe tagged as "not-a-virus:Porn-Dialer.Win32.PluginAccess". Action Taken: No Action Taken.
File D:\!Submit\btgrab.cab tagged as "not-a-virus:AdWare.BiSpy.t". Action Taken: No Action Taken.
File D:\!Submit\trebates.cab tagged as "not-a-virus:AdWare.WebRebates.g". Action Taken: No Action Taken.
File D:\!Submit\trebates.exe tagged as "not-a-virus:AdWare.WebRebates.g". Action Taken: No Action Taken.
File D:\!Submit\hol39877995.exe tagged as "not-a-virus:Porn-Dialer.Win32.Holistyc.gen". Action Taken: No Action Taken.
File D:\!Submit\pi1_60.exe infected by "Trojan-Downloader.Win32.Small.aal" Virus! Action Taken: No Action Taken.
File D:\!Submit\optimize8.exe infected by "Trojan-Downloader.Win32.Dyfuca.ei" Virus! Action Taken: No Action Taken.
File D:\!Submit\876004.exe infected by "Trojan-Dropper.Win32.VB.gg" Virus! Action Taken: No Action Taken.
File D:\!Submit\e121307.Stub.exe infected by "Trojan-Downloader.Win32.Delmed.a" Virus! Action Taken: No Action Taken.
File D:\!Submit\setupone.exe infected by "Trojan-Downloader.Win32.VB.id" Virus! Action Taken: No Action Taken.
File D:\!Submit\kvm_bsvb-eginwl52.exe tagged as "not-a-virus:AdWare.BookedSpace.e". Action Taken: No Action Taken.
File D:\!Submit\RemoveDisplayUtility.exe tagged as "not-a-virus:AdWare.DelphinMedia.Viewer.f". Action Taken: No Action Taken.
File D:\!Submit\kqpafwhjut.dll tagged as "not-a-virus:AdWare.SmartPops.d". Action Taken: No Action Taken.
File D:\!Submit\kqpafwhjut.exe tagged as "not-a-virus:AdWare.SmartPops.c". Action Taken: No Action Taken.
File D:\!Submit\optimize.exe infected by "Trojan-Downloader.Win32.Dyfuca.ei" Virus! Action Taken: No Action Taken.
Post #19
Logfile of HijackThis v1.99.1
Scan saved at 3:34:58 PM, on 6/23/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\PROGRA~1\COMMON~1\AOL\ACS\AOLACSD.EXE
D:\Program Files\ewido\security suite\ewidoctrl.exe
D:\Program Files\ewido\security suite\ewidoguard.exe
D:\Program Files\Norton Antivirus\navapsvc.exe
D:\Program Files\Norton Internet Security\NISUM.EXE
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Norton Internet Security\SymProxySvc.exe
D:\WINDOWS\system32\WFXSVC.EXE
D:\Program Files\Norton Internet Security\NISSERV.EXE
D:\Program Files\Symantec\WinFax\WFXMOD32.EXE
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\wscntfy.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\wuauclt.exe
D:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\WINDOWS\system32\wfxsnt40.exe
D:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
D:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-us\msnappau.exe
D:\Program Files\QuickTime\qttask.exe
D:\Program Files\Adobe\Acrobat 7.0\Distillr\AcroDist.exe
D:\WINDOWS\System32\igfxtray.exe
D:\WINDOWS\System32\hkcmd.exe
D:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
D:\Program Files\Norton Internet Security\IAMAPP.EXE
D:\PROGRA~1\NORTON~2\navapw32.exe
D:\Program Files\MSN Messenger\MsnMsgr.Exe
D:\Program Files\hotfoon4.exe
D:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Adobelm_Cleanup.0001
D:\Documents and Settings\All Users\Start Menu\Programs\Startup\ndti.exe
D:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
D:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
D:\Program Files\AOL Companion\companion.exe
C:\Program Files\WinZip\WZQKPICK.EXE
D:\COMPROB\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://groups-beta.google.com/group/24hoursupport.helpdesk
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files\google\googletoolbar1.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - D:\Program Files\Norton Antivirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar1.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - D:\Program Files\Norton Antivirus\NavShExt.dll
O4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [WinFaxAppPortStarter] wfxsnt40.exe
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "D:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [msnappau] "D:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-us\msnappau.exe"
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] D:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [IgfxTray] D:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] D:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [DownloadAccelerator] D:\PROGRA~1\DAP\DAP.EXE /STARTUP
O4 - HKLM\..\Run: [CallControl 4.5] D:\Program Files\FaxTalk Communicator\FTCtrl32.exe /autoload
O4 - HKLM\..\Run: [AOL Spyware Protection] "D:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe"
O4 - HKLM\..\Run: [iamapp] D:\Program Files\Norton Internet Security\IAMAPP.EXE
O4 - HKLM\..\Run: [NAV Agent] D:\PROGRA~1\NORTON~2\navapw32.exe
O4 - HKLM\..\Run: [KavSvc] D:\WINDOWS\system32\rkmpkk.exe reg_run
O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] D:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [Babylon Translator] D:\Program Files\Babylon\Babylon.exe
O4 - HKCU\..\Run: [HOTFOON2] D:\Program Files\hotfoon4.exe /h
O4 - Global Startup: AOL Companion.lnk = D:\Program Files\AOL Companion\companion.exe
O4 - Global Startup: AOL 9.0 Tray Icon.lnk = D:\Program Files\AOL 9.0a\aoltray.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Google Search - res://D:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://D:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://D:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://D:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://D:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://D:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - D:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - D:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - D:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - D:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Share in Hello - {B13B4423-2647-4cfc-A4B3-C7D56CB83487} - D:\Program Files\Hello\PicasaCapture.dll
O9 - Extra 'Tools' menuitem: Share in H&ello - {B13B4423-2647-4cfc-A4B3-C7D56CB83487} - D:\Program Files\Hello\PicasaCapture.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: D:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O20 - Winlogon Notify: igfxcui - D:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Adobe LM Service - Adobe Systems - D:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - D:\PROGRA~1\COMMON~1\AOL\ACS\AOLACSD.EXE
O23 - Service: AOL Spyware Protection Service (AOLService) - Unknown owner - D:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\\aolserv.exe
O23 - Service: ewido security suite control - ewido networks - D:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - D:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - D:\Program Files\Norton Antivirus\navapsvc.exe
O23 - Service: Norton Internet Security Service (NISSERV) - Symantec Corporation - D:\Program Files\Norton Internet Security\NISSERV.EXE
O23 - Service: Norton Internet Security Accounts Manager (NISUM) - Symantec Corporation - D:\Program Files\Norton Internet Security\NISUM.EXE
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - D:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Norton Internet Security Proxy Service (SymProxySvc) - Symantec Corporation - D:\Program Files\Norton Internet Security\SymProxySvc.exe
O23 - Service: WinFax PRO (wfxsvc) - Symantec Corporation - D:\WINDOWS\system32\WFXSVC.EXE
Post #20 last edited
Due to conflict of running of both Nortron AV and Bell Sympatico's Zeroknowlege made Freedom AV,my computer was unable to open internet pages,I called Bell who asked to take out 1 of system,so after unistalling Freedom I was able to open internet pages. I wonder why,MWAV still showing more than 200 viruses,while many lines/files come back in HJT log. Still I get couple of ads/pop ups with least browsing,but not so many,and i am not sure,how long I will be in rest.Tell me will I continue using Nortron or restore Freedom AV. I hope, still fixchecking required for last HJTL,please advise me. Thanking you in advance.
Post #21
Everything in that mwavscan log is either a backup made by the programs we used to help clean the computer, quarantined by Norton Antivirus or a malware scanner, or in System Restore which will be reset once the computer is completely clean.

Please download FindQoologic from here: http://forums.net-integration.net/index.ph…=post&id=134981

Save it to the desktop and run Find-Qoologic2.bat. This will generate a log file; please post the entire contents of the log file here for me to see.

If you receive an error message while running the program such as "C:\windows\system32\autoexec.nt the system file is not suitable for running ms-dos and microsoft windows applications. choose close to terminate the application…"
Go here and follow the instructions for your operating system, than run Find-Qoologic2.bat again.
Post #22
I have tried to run Find-Qoologic2.bat on desktop after downloading windows XPprofiles ,XPhomefiles,but failed to proceed running Qoologic2.bat. May be destination of these files are not correct.Tell me desired location for WindowsXPprofile or XPHomefiles. I don't find windows XP SP2 written in specified links.
Post #23
You need to make sure that you get the version of autoexec.nt that is for your version of Windows XP. Click Start and Right click on My Computer. Select Properties and on the General tab it will show which version you have.

If it is Windows XP Pro click here.

If it is Windows XP Home click here.

After the file is downloaded, double click it and it will place the autoexec.nt file in the correct location.

Now try running Find-Qoologic2.bat again.
Post #24 last edited
I have downloaded relevant file in desktop,later by double clicking W2KFiles,I saved 3 files in these two locations:
C:\WINNT\System32
D:\WINNT\System32
After running Find-Qoologic2.bat from C:\unzipped\Find_Qoologic2\Find-Qoologic\Find-Qoologic2.bat,I am getting the following black window titled:D:\Windows\System32\cmd.exe

Just wait until a text opens,please disregard the parameters message


Another window titled: 16 bit MS-DOS Subsystem

D:\Windows\System32\cmd.exe
D:\Windows\Ssytem32\Autoexec.nt
The System file is not suitable for running MS DOS and Microsoft Windows applications.Choose close to terminate the application.


Last window neither close nor ignore.
Post #25
This is not a direct response to your last post but something relevant to virus,I received the following e-mail on 17th Jun/2005 from Microsoft,will I trust source for downloading and after clicking file get follwing message:
Virus Scan Results


File name: Installer.exe
File size: 104kb
File type: application/x-msdownload
Scan result: Virus "W32.Swen.A@mm" found.
The file attached to this message was infected with a virus that we were unable to clean. You can not download this attachment.

Note: Not all viruses can be cleaned. Please contact the message sender and request that they send you a virus-free version of this attachment.

Complete E-mail Message:

From: "MS Corporation Internet Security Section" <[removed]> Add to Address Book
To: "Consumer" <[removed]>
Subject: Current Microsoft Update
Date: Fri, 17 Jun 2005 23:55:24 +0000

Microsoft Consumer

this is the latest version of security update, the "June 2005, Cumulative Patch" update which eliminates all known security vulnerabilities affecting MS Internet Explorer, MS Outlook and MS Outlook Express as well as three newly discovered vulnerabilities. Install now to protect your computer from these vulnerabilities, the most serious of which could allow an malicious user to run executable on your computer. This update includes the functionality of all previously released patches.


System requirements Windows 95/98/Me/2000/NT/XP
This update applies to MS Internet Explorer, version 4.01 and later
MS Outlook, version 8.00 and later
MS Outlook Express, version 4.01 and later
Recommendation Customers should install the patch at the earliest opportunity.
How to install Run attached file. Choose Yes on displayed dialog box.
How to use You don't need to do anything after installing this item.
If u wish I can edit /delete this reply at a later satge from here.
Post #26
Let's try this program instead.

Download rkfiles.zip from here.
UNZIP the contents to a permanent folder

Reboot in SAFE MODE !! Important !!
To get into the Safe mode as the computer is booting press and hold your "F8 Key". Use your arrow keys to move to "Safe Mode" and press your Enter key

Please set your system to show all files.
Click Start.
Open My Computer.
Select the Tools menu and click Folder Options.
Select the View Tab. Under the Hidden files and folders heading, select Show hidden files and folders.
Uncheck: Hide file extensions for known file types.
Uncheck the Hide protected operating system files (recommended) option.
Click Yes to confirm.
Click OK.

Doubleclick rkfiles.bat.
It will scan for a while, so please be patient.
Wait till the doswindow closes and reboot back to normal mode.

Post the contents of C:\log.txt in your next reply.


For the email you asked about, never trust an email claiming to contain updates for Microsoft. Microsoft does not send out notices such as these about Windows updates. This trick is done by worms to infect your computer. Only go to http://windowsupdate.microsoft.com/ to find available updates.
Post #27
During AOL routine Spyware scanning following discovered: After inserting 128 MB,168 Pin,PC100-222-620 (AZEN RAM)(taken out from another computer) alongside present Kingston KVR133x64C3/128: SearchForit BrowserAid BookedSapce Remanent IE Plugin
Post #28
Those did not come from the memory card from the other computer. They were already on your computer. Please post the requested log so I can continue cleaning your computer.
Post #29
I received popup message from Ewido:

The ewido security suite guard carshed,so automatic protection is not active.

Moreover every week 1 or 2 times my system suddenly shut down and restarting,what may cause this to happen or is this a sysmtom to a major impending attack !
Recently I have done an experiment of insering SDRAM,but problem of shutting down was present earlier than this experiment. (Ref:See my post in Other Computer Problems).
Post #30
Today again System shutdowns itself,yesterday Error Report shows that my system was recoverd from serious problem and one of possible cause may be overheating. So, it means System is crashing daily.Any reason?How to overcome it. Moreover today I get another Ewido error stating: "Active exception'isactiveguard'"

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI