Spyware causing grief

OK; I had to shorten this log because it was more than 100,000 characters. It was all the same, almost. They were all HKLM software, etc. I hope this helps in this manner. ——————————————————— ewido security suite - Scan report ——————————————————— + Created on: 1:16:54 PM, 7/13/2005 + Report-Checksum: ADEBB421 + Scan result: HKLM\SOFTWARE\AkSoft -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\.Support -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\.Support\AOL.EXE -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\l\n -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\l\o -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\l\p -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\l\q -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\l\r -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\l\s -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\l\t -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\l\u -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\l\v -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\l\w -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\l\x -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\l\y -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\l\z -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\l\[ -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\a -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\b -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\c -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\d -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\e -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\f -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\g -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\h -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\i -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\j -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\k -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\l -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\m -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\n -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\o -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\p -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\q -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\r -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\s -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\t -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\u -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\v -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\w -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\x -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\y -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\z -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\m\[ -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\a -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\b -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\c -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\d -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\e -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\f -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\g -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\h -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\i -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\j -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\k -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\l -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\m -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\n -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\o -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\p -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\q -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\r -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\s -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\t -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\u -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\v -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\w -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\x -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\y -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\z -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\n\[ -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\a -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\b -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\c -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\d -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\e -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\f -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\g -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\h -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\i -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\j -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\k -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\l -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\m -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\n -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\o -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\p -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\q -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\r -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\s -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\t -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\u -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\v -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\w -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\x -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\y -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\z -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\o\[ -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\p -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\p\a -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\p\b -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\p\c -> Spyware.AkSoft : Cleaned with backup HKLM\SOFTWARE\AkSoft\e\p\d -> Spyware.AkSoft : Cleaned with HKLM\SOFTWARE\AkSoft\g\i\e -> Spyware.AkSoft : Cleaned with HKLM\SYSTEM\CurrentControlSet\Services\WinToolsSvc\Enum -> Spyware.WebSearch : Cleaned with backup HKU\S-1-5-21-796845957-1897051121-839522115-1112\Software\LQ -> Dialer.Generic : Cleaned with backup HKU\S-1-5-21-796845957-1897051121-839522115-1112\Software\Mvu -> Spyware.Delfin : Cleaned with backup HKU\S-1-5-21-796845957-1897051121-839522115-1112\Software\Xhrmy -> Spyware.SecondThought : Cleaned with backup C:\Documents and Settings\Administrator.TMC\Cookies\[removed][1].txt -> Spyware.Cookie.Addynamix : Cleaned with backup C:\Documents and Settings\Administrator.TMC\Cookies\administrator@advertising[1].txt -> Spyware.Cookie.Advertising : Cleaned with backup C:\Documents and Settings\Administrator.TMC\Cookies\administrator@atdmt[2].txt -> Spyware.Cookie.Atdmt : Cleaned with backup C:\Documents and Settings\Administrator.TMC\Cookies\administrator@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup C:\Documents and Settings\Administrator.TMC\Cookies\administrator@edge.ru4[2].txt -> Spyware.Cookie.Ru4 : Cleaned with backup C:\Documents and Settings\Administrator.TMC\Cookies\[removed][1].txt -> Spyware.Cookie.Advertising : Cleaned with backup C:\Documents and Settings\Administrator.TMC\Cookies\administrator@trafficmp[2].txt -> Spyware.Cookie.Trafficmp : Cleaned with backup C:\Documents and Settings\drobinson\Local Settings\Temp\bw2.com -> TrojanDropper.Agent.pb : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@112.2o7[2].txt -> Spyware.Cookie.2o7 : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@2o7[2].txt -> Spyware.Cookie.2o7 : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\[removed][2].txt -> Spyware.Cookie.Specificclick : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\[removed][1].txt -> Spyware.Cookie.Bpath : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@adtech[2].txt -> Spyware.Cookie.Adtech : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@advertising[1].txt -> Spyware.Cookie.Advertising : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\[removed][2].txt -> Spyware.Cookie.Falkag : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@atdmt[2].txt -> Spyware.Cookie.Atdmt : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@bfast[2].txt -> Spyware.Cookie.Bfast : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@bluestreak[2].txt -> Spyware.Cookie.Bluestreak : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@clickagents[2].txt -> Spyware.Cookie.Clickagents : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\[removed][1].txt -> Spyware.Cookie.Coremetrics : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@edge.ru4[1].txt -> Spyware.Cookie.Ru4 : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\[removed][2].txt -> Spyware.Cookie.Hitbox : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\[removed][1].txt -> Spyware.Cookie.Hitbox : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\[removed][2].txt -> Spyware.Cookie.Hitbox : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@fastclick[2].txt -> Spyware.Cookie.Fastclick : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@hitbox[2].txt -> Spyware.Cookie.Hitbox : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@mediaplex[1].txt -> Spyware.Cookie.Mediaplex : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@overture[1].txt -> Spyware.Cookie.Overture : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\[removed][1].txt -> Spyware.Cookie.Overture : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@questionmarket[1].txt -> Spyware.Cookie.Questionmarket : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\[removed][2].txt -> Spyware.Cookie.Advertising : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@specificclick[1].txt -> Spyware.Cookie.Specificclick : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@tradedoubler[2].txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\jsmith@trafficmp[2].txt -> Spyware.Cookie.Trafficmp : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\[removed][1].txt -> Spyware.Cookie.Coremetrics : Cleaned with backup C:\Documents and Settings\jsmith\Cookies\[removed][1].txt -> Spyware.Cookie.Adserver : Cleaned with backup C:\Program Files\Click'N Design 3D\MyTemplates\CD Stomper® Pro 2-up (US Letter)\ls_cnd3d482.zip/start.exe -> TrojanDropper.Bridge : Cleaned with backup C:\Program Files\Common Files\System\Mapi\1033\NT\appsetup.exe -> TrojanDownloader.Small.aco : Cleaned with backup C:\Program Files\Common Files\System\Mapi\1033\NT\ezStub.exe -> Adware.eZula : Cleaned with backup C:\Program Files\Common Files\System\Mapi\1033\NT\InstallEx.exe -> Spyware.Couponage : Cleaned with backup C:\Program Files\Internet Explorer\ie6.exe -> Heuristic.Win32.Hijacker1 : Cleaned with backup C:\Utility\PDF opener\epdfrm21.zip/start.exe -> TrojanDropper.Bridge : Cleaned with backup C:\WINNT\Downloaded Program Files\CONFLICT.1\loader2.ocx -> TrojanDownloader.Agent.ex : Cleaned with backup C:\WINNT\Downloaded Program Files\CONFLICT.2\loader2.ocx -> TrojanDownloader.Agent.ex : Cleaned with backup C:\WINNT\Downloaded Program Files\CONFLICT.3\loader2.ocx -> TrojanDownloader.Agent.ex : Cleaned with backup C:\WINNT\Downloaded Program Files\CONFLICT.4\loader2.ocx -> TrojanDownloader.Agent.ex : Cleaned with backup C:\WINNT\Downloaded Program Files\CONFLICT.5\loader2.ocx -> TrojanDownloader.Agent.ex : Cleaned with backup C:\WINNT\Downloaded Program Files\desk2x.exe -> Heuristic.Win32.Dialer : Cleaned with backup C:\WINNT\Downloaded Program Files\loader2.ocx -> TrojanDownloader.Agent.ex : Cleaned with backup C:\WINNT\msxmidi.exe -> TrojanDownloader.Small.avt : Cleaned with backup C:\WINNT\system32\dolsp.dll -> TrojanDownloader.Agent.br : Cleaned with backup C:\WINNT\system32\latest.exe -> Trojan.Crypt.c : Cleaned with backup C:\WINNT\system32\nxnv.exe -> TrojanDownloader.Lastad.i : Cleaned with backup C:\WINNT\system32\nxnvndw301lib.dll -> TrojanDownloader.Lastad.h : Cleaned with backup ::Report End

That's not a log… IT'S THE ENTIRE TREE!!!!! And your Outlook (email)… How is it doing today?

The mail is good today. There was a changed number in the address. Funny how those things happen. Otherwise, everything else seems to be better. Do you think this is it, at least for now? Haven't seen the Party Poker pop-up all day…

I'd say you're free of malware. Be sure to look at my post about things to help from getting infected again. Doing the Qualsys browser check, and installing IE-Spyad are two things I highly recommend. GOD bless!!!! M68

Thank you very much, by the way. This is a fantastic service you people perform.

This topic is now closed.

If you need this topic reopened, please request this by sending an email to us at the following link
(Click for address)
Include your post user name and detail why you need it reopened with a valid link to your post.
Any bad links or emails that are not from the original poster will be deleted without response.
Any emails without the subject "Reopen" will be deleted without being looked at.

If this is not your thread please start a New Topic.