What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Hijack This log

56 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Hi there. Our computer has been running extremely slow lately and we believe it is because of spyware. We were wondering if you could help us out.

Here's our log:
Logfile of HijackThis v1.97.7
Scan saved at 1:08:39 PM, on 8/7/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\SK9910DM.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Norton Password Manager\AcctMgr.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Quik Touch\EzdMontr.exe
C:\Program Files\Iomega HotBurn Pro\Autolaunch.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
C:\WINDOWS\SM1BG.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MSN\MSNCoreFiles\msn6.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Program Files\Netscape\Netscape\Netscp.exe
C:\Documents and Settings\Juli\Desktop\HijackThis.exe

N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\prefs.js)
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [Hot Key Kbd 9910 Daemon] SK9910DM.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Ink Monitor] C:\Program Files\EPSON\Ink Monitor\InkMonitor.exe
O4 - HKLM\..\Run: [EzdMontr] C:\Program Files\Quik Touch\EzdMontr.exe install
O4 - HKLM\..\Run: [Drag'n'Drop_Autolaunch] "C:\Program Files\Iomega HotBurn Pro\Autolaunch.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [SM1BG] C:\WINDOWS\SM1BG.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O12 - Plugin for .xml: C:\Program Files\Netscape\Netscape Browser\PLUGINS\npTrident.dll
O16 - DPF: {3299935F-2C5A-499A-9908-95CFFF6EF8C1} (Quicksilver Class) - http://scpwob.ops.placeware.com/etc/place/…quicksilver.cab
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc.cab
O16 - DPF: {4B48D5DF-9021-45F7-A240-60304302A215} (Malicious Software Removal Tool) - http://download.microsoft.com/download/b/d…/WebCleaner.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1120150319530
O16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} (FujifilmUploader Class) - http://www.walgreensphotocenter.com/upload…ploadClient.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shock…ash/swflash.cab
O16 - DPF: {E6EB803E-DD89-11D3-80C4-0050DA2E09D0} (LightSurfUploadCtl Class) - http://prints.picturecenter.kodak.com/acti…loadControl.cab


Thank you very much in advance.
Post #3
ok, here's what we have now:
Logfile of HijackThis v1.99.1
Scan saved at 12:10:55 PM, on 8/8/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\SK9910DM.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Norton Password Manager\AcctMgr.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Quik Touch\EzdMontr.exe
C:\Program Files\Iomega HotBurn Pro\Autolaunch.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
C:\WINDOWS\SM1BG.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MSN\MSNCoreFiles\msn6.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Documents and Settings\Juli\Desktop\HijackThis.exe

N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [Hot Key Kbd 9910 Daemon] SK9910DM.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Ink Monitor] C:\Program Files\EPSON\Ink Monitor\InkMonitor.exe
O4 - HKLM\..\Run: [EzdMontr] C:\Program Files\Quik Touch\EzdMontr.exe install
O4 - HKLM\..\Run: [Drag'n'Drop_Autolaunch] "C:\Program Files\Iomega HotBurn Pro\Autolaunch.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [SM1BG] C:\WINDOWS\SM1BG.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .xml: C:\Program Files\Netscape\Netscape Browser\PLUGINS\npTrident.dll
O16 - DPF: {3299935F-2C5A-499A-9908-95CFFF6EF8C1} (Quicksilver Class) - http://scpwob.ops.placeware.com/etc/place/…quicksilver.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1120150319530
O16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} (FujifilmUploader Class) - http://www.walgreensphotocenter.com/upload…ploadClient.cab
O16 - DPF: {E6EB803E-DD89-11D3-80C4-0050DA2E09D0} (LightSurfUploadCtl Class) - http://prints.picturecenter.kodak.com/acti…loadControl.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

I hope that helps
Post #4
Please download the trial version of Ewido Security Suite here:
http://www.ewido.net/en/download/

Install it, and update the definitions to the newest files.

Next, please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.

Then please run Ewido, and run a full scan. Save the logfile from the scan.

Restart your computer in normal mode and please post a new HijackThis log, as well as the log from the Ewido scan.
Post #5
OK. Here is the result of the scan ——————————————————— ewido security suite - Scan report ——————————————————— + Created on: 1:35:27 AM, 8/9/2005 + Report-Checksum: 6A7F265D + Scan result: :mozilla.15:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.16:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.17:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.18:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.19:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.20:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.21:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.22:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.23:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.24:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.25:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.26:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.27:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.28:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.29:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.30:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.31:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.32:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.33:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.34:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.38:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.39:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.40:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.41:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.42:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.43:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.45:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.46:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.47:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.48:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.49:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.50:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.51:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.52:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.53:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.54:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.55:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.56:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.57:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.58:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.60:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Addynamix : Cleaned with backup :mozilla.62:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup :mozilla.63:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.70:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup :mozilla.85:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.86:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup :mozilla.88:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup :mozilla.89:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup :mozilla.90:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup :mozilla.91:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup :mozilla.92:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup :mozilla.93:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.99:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup :mozilla.100:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup :mozilla.101:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup :mozilla.102:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup :mozilla.105:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup :mozilla.106:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup :mozilla.107:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Centrport : Cleaned with backup :mozilla.108:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Centrport : Cleaned with backup :mozilla.109:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Centrport : Cleaned with backup :mozilla.117:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup :mozilla.118:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup :mozilla.123:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.125:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.126:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.128:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.145:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup :mozilla.148:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup :mozilla.156:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup :mozilla.157:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup :mozilla.161:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup :mozilla.162:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup :mozilla.163:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup :mozilla.164:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup :mozilla.171:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup :mozilla.172:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup :mozilla.175:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Linksynergy : Cleaned with backup :mozilla.176:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Linksynergy : Cleaned with backup :mozilla.177:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.179:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.182:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.183:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.184:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.186:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup :mozilla.189:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup :mozilla.196:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup :mozilla.204:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Bfast : Cleaned with backup :mozilla.221:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Coremetrics : Cleaned with backup :mozilla.222:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup :mozilla.223:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.225:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.226:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.227:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup :mozilla.236:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup :mozilla.238:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup :mozilla.239:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup :mozilla.268:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Realtracker : Cleaned with backup :mozilla.273:C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup :mozilla.17:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.18:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.19:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.21:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.22:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.23:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.24:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.25:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.26:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.27:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.28:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.29:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.30:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.31:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.32:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.33:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.34:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.35:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.36:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.37:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.38:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.41:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup :mozilla.53:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup :mozilla.54:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup :mozilla.63:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup :mozilla.64:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.65:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.66:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.67:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.68:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.69:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.70:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup :mozilla.83:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.84:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.90:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup :mozilla.92:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup :mozilla.93:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup :mozilla.94:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup :mozilla.101:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup :mozilla.102:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup :mozilla.117:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup :mozilla.118:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup :mozilla.119:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup :mozilla.120:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup :mozilla.124:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.139:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Realtracker : Cleaned with backup :mozilla.144:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup :mozilla.183:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup :mozilla.185:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.186:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.187:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.188:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.189:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup :mozilla.190:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup :mozilla.191:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup :mozilla.194:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup :mozilla.195:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup :mozilla.196:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup :mozilla.197:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup :mozilla.198:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup :mozilla.199:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup :mozilla.201:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup :mozilla.202:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup :mozilla.203:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup :mozilla.204:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup :mozilla.205:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup :mozilla.206:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup :mozilla.211:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Valuead : Cleaned with backup :mozilla.212:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Valuead : Cleaned with backup :mozilla.213:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Valuead : Cleaned with backup :mozilla.214:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Valuead : Cleaned with backup :mozilla.215:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Valuead : Cleaned with backup :mozilla.216:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup :mozilla.217:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup :mozilla.232:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Bluestreak : Cleaned with backup :mozilla.235:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup :mozilla.236:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.252:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup :mozilla.253:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup :mozilla.254:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup :mozilla.255:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup :mozilla.258:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup :mozilla.259:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup :mozilla.260:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup :mozilla.261:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup :mozilla.262:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup :mozilla.263:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup :mozilla.264:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup :mozilla.265:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup :mozilla.270:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Adjuggler : Cleaned with backup :mozilla.273:C:\Documents and Settings\Juli\Application Data\Netscape\NSB\Profiles\6oznljwp.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup C:\Documents and Settings\Juli\Cookies\juli@2o7[2].txt -> Spyware.Cookie.2o7 : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Specificclick : Cleaned with backup C:\Documents and Settings\Juli\Cookies\juli@burstnet[2].txt -> Spyware.Cookie.Burstnet : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Juli\Cookies\juli@ivwbox[1].txt -> Spyware.Cookie.Ivwbox : Cleaned with backup C:\Documents and Settings\Juli\Cookies\[removed][2].txt -> Spyware.Cookie.Liveperson : Cleaned with backup :mozilla.13:C:\Documents and Settings\Robert\Application Data\Mozilla\Profiles\default\lyr0t9fc.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.14:C:\Documents and Settings\Robert\Application Data\Mozilla\Profiles\default\lyr0t9fc.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup :mozilla.15:C:\Documents and Settings\Robert\Application Data\Mozilla\Profiles\default\lyr0t9fc.slt\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup :mozilla.17:C:\Documents and Settings\Robert\Application Data\Mozilla\Profiles\default\lyr0t9fc.slt\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup :mozilla.18:C:\Documents and Settings\Robert\Application Data\Mozilla\Profiles\default\lyr0t9fc.slt\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup :mozilla.19:C:\Documents and Settings\Robert\Application Data\Mozilla\Profiles\default\lyr0t9fc.slt\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup ::Report End Hope this helps -
Post #7
Logfile of HijackThis v1.99.1
Scan saved at 12:10:55 PM, on 8/8/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\SK9910DM.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Norton Password Manager\AcctMgr.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Quik Touch\EzdMontr.exe
C:\Program Files\Iomega HotBurn Pro\Autolaunch.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
C:\WINDOWS\SM1BG.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MSN\MSNCoreFiles\msn6.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Documents and Settings\Juli\Desktop\HijackThis.exe

N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [Hot Key Kbd 9910 Daemon] SK9910DM.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Ink Monitor] C:\Program Files\EPSON\Ink Monitor\InkMonitor.exe
O4 - HKLM\..\Run: [EzdMontr] C:\Program Files\Quik Touch\EzdMontr.exe install
O4 - HKLM\..\Run: [Drag'n'Drop_Autolaunch] "C:\Program Files\Iomega HotBurn Pro\Autolaunch.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [SM1BG] C:\WINDOWS\SM1BG.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .xml: C:\Program Files\Netscape\Netscape Browser\PLUGINS\npTrident.dll
O16 - DPF: {3299935F-2C5A-499A-9908-95CFFF6EF8C1} (Quicksilver Class) - http://scpwob.ops.placeware.com/etc/place/…quicksilver.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1120150319530
O16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} (FujifilmUploader Class) - http://www.walgreensphotocenter.com/upload…ploadClient.cab
O16 - DPF: {E6EB803E-DD89-11D3-80C4-0050DA2E09D0} (LightSurfUploadCtl Class) - http://prints.picturecenter.kodak.com/acti…loadControl.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe



Sorry; I'm not really sure what I'm doing! Hope this is right.
Post #9
Logfile of HijackThis v1.99.1
Scan saved at 11:24:53 AM, on 8/10/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\SK9910DM.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Norton Password Manager\AcctMgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Quik Touch\EzdMontr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\MICROS~3\Office10\OUTLOOK.EXE
C:\Program Files\Iomega HotBurn Pro\Autolaunch.exe
C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
C:\WINDOWS\SM1BG.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Juli\Desktop\HijackThis.exe

N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Juli\Application Data\Mozilla\Profiles\default\b7flcck4.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [Hot Key Kbd 9910 Daemon] SK9910DM.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Ink Monitor] C:\Program Files\EPSON\Ink Monitor\InkMonitor.exe
O4 - HKLM\..\Run: [EzdMontr] C:\Program Files\Quik Touch\EzdMontr.exe install
O4 - HKLM\..\Run: [Drag'n'Drop_Autolaunch] "C:\Program Files\Iomega HotBurn Pro\Autolaunch.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [SM1BG] C:\WINDOWS\SM1BG.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .xml: C:\Program Files\Netscape\Netscape Browser\PLUGINS\npTrident.dll
O16 - DPF: {3299935F-2C5A-499A-9908-95CFFF6EF8C1} (Quicksilver Class) - http://scpwob.ops.placeware.com/etc/place/…quicksilver.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1120150319530
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} (FujifilmUploader Class) - http://www.walgreensphotocenter.com/upload…ploadClient.cab
O16 - DPF: {E6EB803E-DD89-11D3-80C4-0050DA2E09D0} (LightSurfUploadCtl Class) - http://prints.picturecenter.kodak.com/acti…loadControl.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe


Hope this helps.
Post #12
Download MicroWorld virus scan here >>> Micro World http://www.mwti.net/antivirus/free_utilities.asp

To run the virus scan make sure you click the following

memory, registry, startup folders, system folders, services, drive (all drives will be added) then click on scan clean. When the scan is complete hilight all the files in the LOWER box. Then ctrl + c and paste them into the thread ctrl + v.

I warn you the scan will take a long time to run and will not fix anything just identifies bad files.
Post #13
Object "AltNet Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "iSearch Spyware/Adware" found in File System! Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\system32\MSXML3A.DLL". Action Taken: No Action Taken. Entry "HKCR\CLSID\{0DED49D5-A8B7-4d5d-97A1-12B0C195874D}" refers to invalid object "BdaPlgin.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}" refers to invalid object "fde.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{9EFBF860-5685-11D3-AA3D-00C04F4C5275}" refers to invalid object "cdooff.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{B0693766-5278-4ec6-B9E1-3CE40560EF5A}" refers to invalid object "CaPlgin.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{FD0A5AF3-B41D-11d2-9C95-00C04F7971E0}" refers to invalid object "BdaPlgin.ax". Action Taken: No Action Taken. Entry "HKCR\Alg.AlgSetup" refers to invalid object "{27D0BCCC-344D-4287-AF37-0C72C161C14C}". Action Taken: No Action Taken. Entry "HKCR\Alg.AlgSetup.1" refers to invalid object "{27D0BCCC-344D-4287-AF37-0C72C161C14C}". Action Taken: No Action Taken. Entry "HKCR\ComPlusMetaData.MsCorHost" refers to invalid object "{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}". Action Taken: No Action Taken. Entry "HKCR\ComPlusMetaData.MsCorHost.2" refers to invalid object "{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}". Action Taken: No Action Taken. Entry "HKCR\MailFileAtt" refers to invalid object "{00020D05-0000-0000-C000-000000000046}". Action Taken: No Action Taken. Entry "HKCR\mapifvbx.object" refers to invalid object "{41116C00-8B90-101B-96CD-00AA003B14FC}". Action Taken: No Action Taken. Entry "HKCR\mapifvbx.object.1" refers to invalid object "{41116C00-8B90-101B-96CD-00AA003B14FC}". Action Taken: No Action Taken. Entry "HKCR\Plenoptic.Plenoptic" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken. Entry "HKCR\Plenoptic.Plenoptic.1" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken. Entry "HKCR\RTCCore.RTCClient" refers to invalid object "{7a42ea29-a2b7-40c4-b091-f6f024aa89be}". Action Taken: No Action Taken. Entry "HKCR\RTCCore.RTCClient.1" refers to invalid object "{7a42ea29-a2b7-40c4-b091-f6f024aa89be}". Action Taken: No Action Taken. Entry "HKCR\RxSBDViewEx.SBDGroupCtrl" refers to invalid object "{7495CF57-E208-4DF0-A8C5-9E17ECC51490}". Action Taken: No Action Taken. Entry "HKCR\RxSBDViewEx.SBDGroupCtrl.1" refers to invalid object "{7495CF57-E208-4DF0-A8C5-9E17ECC51490}". Action Taken: No Action Taken. Entry "HKCR\SymWriter.pdb" refers to invalid object "{520DC67A-752E-11D3-8D56-00C04F680B2B}". Action Taken: No Action Taken. Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken. Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr.1" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken. Entry "HKCR\WMPShell.HWEventHandler" refers to invalid object "{9B186A8F-F520-4eeb-B553-118304AC46C5}". Action Taken: No Action Taken. Entry "HKCR\WMPShell.HWEventHandler.1" refers to invalid object "{9B186A8F-F520-4eeb-B553-118304AC46C5}". Action Taken: No Action Taken. File C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\706C0D24.htm infected by "Trojan-Downloader.JS.IstBar.b" Virus! Action Taken: No Action Taken. Thanks.
Post #15
Ad-Aware SE Build 1.06r1 Logfile Created on:Monday, August 15, 2005 10:34:58 AM Created with Ad-Aware SE Personal, free for private use. Using definitions file:SE1R61 10.08.2005 »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Definition File: ========================= Definitions File Loaded: Reference Number : SE1R60 04.08.2005 Internal build : 70 File location : C:\Program Files\Lavasoft\Ad-Aware SE Personal\defs.ref File size : 506981 Bytes Total size : 1528563 Bytes Signature data size : 1495861 Bytes Reference data size : 32190 Bytes Signatures total : 42593 CSI Fingerprints total : 1001 CSI data size : 35296 Bytes Target categories : 15 Target families : 728 8-15-2005 10:31:08 AM Performing WebUpdate… Installing Update… Definitions File Loaded: Reference Number : SE1R61 10.08.2005 Internal build : 71 File location : C:\Program Files\Lavasoft\Ad-Aware SE Personal\defs.ref File size : 508229 Bytes Total size : 1531791 Bytes Signature data size : 1498915 Bytes Reference data size : 32364 Bytes Signatures total : 42681 CSI Fingerprints total : 1003 CSI data size : 35408 Bytes Target categories : 15 Target families : 729 8-15-2005 10:31:15 AM Success Update successfully downloaded and installed. Memory + processor status: ========================== Number of processors : 1 Processor architecture : Intel Pentium IV Memory available:46 % Total physical memory:523568 kb Available physical memory:240488 kb Total page file size:1279452 kb Available on page file:1020904 kb Total virtual memory:2097024 kb Available virtual memory:2042500 kb OS:Microsoft Windows XP Home Edition Service Pack 2 (Build 2600) Ad-Aware SE Settings =========================== Set : Search for low-risk threats Set : Move deleted files to Recycle Bin Set : Safe mode (always request confirmation) Set : Don't log streams smaller than 0 Bytes Set : Scan active processes Set : Scan registry Set : Deep-scan registry Set : Scan my IE Favorites for banned URLs Set : Scan within archives Set : Scan my Hosts file Extended Ad-Aware SE Settings =========================== Set : Unload recognized processes & modules during scan Set : Scan registry for all users instead of current user only Set : Let Windows remove files in use at next reboot Set : Delete quarantined objects after restoring Set : Include basic Ad-Aware settings in log file Set : Include additional Ad-Aware settings in log file Set : Play sound at scan completion if scan locates critical objects 8-15-2005 10:34:58 AM - Scan started. (Full System Scan) Listing running processes »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» #:1 [smss.exe] FilePath : \SystemRoot\System32\ ProcessID : 652 ThreadCreationTime : 8-15-2005 3:19:10 PM BasePriority : Normal #:2 [csrss.exe] FilePath : \??\C:\WINDOWS\system32\ ProcessID : 756 ThreadCreationTime : 8-15-2005 3:19:14 PM BasePriority : Normal #:3 [winlogon.exe] FilePath : \??\C:\WINDOWS\system32\ ProcessID : 780 ThreadCreationTime : 8-15-2005 3:19:15 PM BasePriority : High #:4 [services.exe] FilePath : C:\WINDOWS\system32\ ProcessID : 828 ThreadCreationTime : 8-15-2005 3:19:15 PM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Services and Controller app InternalName : services.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : services.exe #:5 [lsass.exe] FilePath : C:\WINDOWS\system32\ ProcessID : 840 ThreadCreationTime : 8-15-2005 3:19:15 PM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : LSA Shell (Export Version) InternalName : lsass.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : lsass.exe #:6 [svchost.exe] FilePath : C:\WINDOWS\system32\ ProcessID : 1000 ThreadCreationTime : 8-15-2005 3:19:16 PM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:7 [svchost.exe] FilePath : C:\WINDOWS\system32\ ProcessID : 1068 ThreadCreationTime : 8-15-2005 3:19:16 PM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:8 [svchost.exe] FilePath : C:\WINDOWS\System32\ ProcessID : 1164 ThreadCreationTime : 8-15-2005 3:19:16 PM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:9 [svchost.exe] FilePath : C:\WINDOWS\System32\ ProcessID : 1228 ThreadCreationTime : 8-15-2005 3:19:16 PM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:10 [svchost.exe] FilePath : C:\WINDOWS\System32\ ProcessID : 1364 ThreadCreationTime : 8-15-2005 3:19:17 PM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:11 [ccproxy.exe] FilePath : C:\Program Files\Common Files\Symantec Shared\ ProcessID : 1476 ThreadCreationTime : 8-15-2005 3:19:17 PM BasePriority : Normal FileVersion : 103.0.4.3 ProductVersion : 103.0.4.3 ProductName : Client and Host Security Platform CompanyName : Symantec Corporation FileDescription : Symantec Network Proxy Service InternalName : ccProxy LegalCopyright : Copyright © 2000-2004 Symantec Corporation. All rights reserved. OriginalFilename : ccProxy.exe #:12 [ccsetmgr.exe] FilePath : C:\Program Files\Common Files\Symantec Shared\ ProcessID : 1492 ThreadCreationTime : 8-15-2005 3:19:17 PM BasePriority : Normal FileVersion : 103.0.4.3 ProductVersion : 103.0.4.3 ProductName : Client and Host Security Platform CompanyName : Symantec Corporation FileDescription : Symantec Settings Manager Service InternalName : ccSetMgr LegalCopyright : Copyright © 2000-2004 Symantec Corporation. All rights reserved. OriginalFilename : ccSetMgr.exe #:13 [issvc.exe] FilePath : C:\Program Files\Norton Internet Security\ ProcessID : 1504 ThreadCreationTime : 8-15-2005 3:19:17 PM BasePriority : Normal FileVersion : 8.0.2.5 ProductVersion : 8.0 ProductName : Norton Internet Security CompanyName : Symantec Corporation FileDescription : IS Service InternalName : ISSVC.exe LegalCopyright : Copyright © 2004 Symantec Corporation OriginalFilename : ISSVC.exe #:14 [sndsrvc.exe] FilePath : C:\Program Files\Common Files\Symantec Shared\ ProcessID : 1516 ThreadCreationTime : 8-15-2005 3:19:18 PM BasePriority : Normal FileVersion : 5.5.1.6 ProductVersion : 5.5 ProductName : Symantec Security Drivers CompanyName : Symantec Corporation FileDescription : Network Driver Service InternalName : SndSrvc LegalCopyright : Copyright 2002, 2003, 2004 Symantec Corporation OriginalFilename : SndSrvc.exe #:15 [spbbcsvc.exe] FilePath : C:\Program Files\Common Files\Symantec Shared\SPBBC\ ProcessID : 1548 ThreadCreationTime : 8-15-2005 3:19:18 PM BasePriority : Normal FileVersion : 1,0,1,47 ProductVersion : 1,0,1,47 ProductName : SPBBC CompanyName : Symantec Corporation FileDescription : SPBBC Service InternalName : SPBBCSvc LegalCopyright : Copyright © 2004 Symantec Corporation. All rights reserved. OriginalFilename : SPBBCSvc.exe #:16 [ccevtmgr.exe] FilePath : C:\Program Files\Common Files\Symantec Shared\ ProcessID : 1828 ThreadCreationTime : 8-15-2005 3:19:28 PM BasePriority : Normal FileVersion : 103.0.4.3 ProductVersion : 103.0.4.3 ProductName : Client and Host Security Platform CompanyName : Symantec Corporation FileDescription : Symantec Event Manager Service InternalName : ccEvtMgr LegalCopyright : Copyright © 2000-2004 Symantec Corporation. All rights reserved. OriginalFilename : ccEvtMgr.exe #:17 [spoolsv.exe] FilePath : C:\WINDOWS\system32\ ProcessID : 200 ThreadCreationTime : 8-15-2005 3:19:30 PM BasePriority : Normal FileVersion : 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519) ProductVersion : 5.1.2600.2696 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Spooler SubSystem App InternalName : spoolsv.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : spoolsv.exe #:18 [ewidoctrl.exe] FilePath : C:\Program Files\ewido\security suite\ ProcessID : 472 ThreadCreationTime : 8-15-2005 3:19:36 PM BasePriority : Normal FileVersion : 3, 0, 0, 1 ProductVersion : 3, 0, 0, 1 ProductName : ewido control CompanyName : ewido networks FileDescription : ewido control InternalName : ewido control LegalCopyright : Copyright © 2004 OriginalFilename : ewidoctrl.exe #:19 [ewidoguard.exe] FilePath : C:\Program Files\ewido\security suite\ ProcessID : 484 ThreadCreationTime : 8-15-2005 3:19:36 PM BasePriority : Normal FileVersion : 3, 0, 0, 1 ProductVersion : 3, 0, 0, 1 ProductName : guard CompanyName : ewido networks FileDescription : guard InternalName : guard LegalCopyright : Copyright © 2004 OriginalFilename : guard.exe #:20 [appservices.exe] FilePath : C:\PROGRA~1\Iomega\System32\ ProcessID : 512 ThreadCreationTime : 8-15-2005 3:19:36 PM BasePriority : Normal FileVersion : 2, 0, 4, 2 ProductVersion : 2, 0, 4, 2 ProductName : Iomega App Services CompanyName : Iomega Corporation FileDescription : AppServices InternalName : AppServices LegalCopyright : Copyright © 2003 OriginalFilename : AppService.exe Comments : Iomega App Services For Windows NT/2000/XP #:21 [navapsvc.exe] FilePath : C:\Program Files\Norton Internet Security\Norton AntiVirus\ ProcessID : 568 ThreadCreationTime : 8-15-2005 3:19:36 PM BasePriority : Normal FileVersion : 11.0.9.16 ProductVersion : 11.0.9 ProductName : Norton AntiVirus CompanyName : Symantec Corporation FileDescription : Norton AntiVirus Auto-Protect Service InternalName : NAVAPSVC LegalCopyright : Norton AntiVirus 2005 for Windows 98/ME/2000/XP Copyright © 2004 Symantec Corporation. All rights reserved. OriginalFilename : NAVAPSVC.EXE #:22 [nvsvc32.exe] FilePath : C:\WINDOWS\system32\ ProcessID : 600 ThreadCreationTime : 8-15-2005 3:19:36 PM BasePriority : Normal FileVersion : 6.14.10.4523 ProductVersion : 6.14.10.4523 ProductName : NVIDIA Driver Helper Service, Version 45.23 CompanyName : NVIDIA Corporation FileDescription : NVIDIA Driver Helper Service, Version 45.23 InternalName : NVSVC LegalCopyright : © NVIDIA Corporation. All rights reserved. OriginalFilename : nvsvc32.exe #:23 [svchost.exe] FilePath : C:\WINDOWS\System32\ ProcessID : 1028 ThreadCreationTime : 8-15-2005 3:19:40 PM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:24 [symlcsvc.exe] FilePath : C:\Program Files\Common Files\Symantec Shared\CCPD-LC\ ProcessID : 1132 ThreadCreationTime : 8-15-2005 3:19:41 PM BasePriority : Normal FileVersion : 1, 8, 54, 478 ProductVersion : 1, 8, 54, 478 ProductName : Symantec Core Component CompanyName : Symantec Corporation FileDescription : Symantec Core Component InternalName : symlcsvc LegalCopyright : Copyright © 2003 OriginalFilename : symlcsvc.exe #:25 [wdfmgr.exe] FilePath : C:\WINDOWS\system32\ ProcessID : 1220 ThreadCreationTime : 8-15-2005 3:19:41 PM BasePriority : Normal FileVersion : 5.2.3790.1230 built by: DNSRV(bld4act) ProductVersion : 5.2.3790.1230 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Windows User Mode Driver Manager InternalName : WdfMgr LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : WdfMgr.exe #:26 [alg.exe] FilePath : C:\WINDOWS\System32\ ProcessID : 108 ThreadCreationTime : 8-15-2005 3:19:56 PM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Application Layer Gateway Service InternalName : ALG.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : ALG.exe #:27 [explorer.exe] FilePath : C:\WINDOWS\ ProcessID : 3968 ThreadCreationTime : 8-15-2005 3:29:27 PM BasePriority : Normal FileVersion : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 6.00.2900.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Windows Explorer InternalName : explorer LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : EXPLORER.EXE #:28 [cthelper.exe] FilePath : C:\WINDOWS\system32\ ProcessID : 4036 ThreadCreationTime : 8-15-2005 3:29:31 PM BasePriority : Normal FileVersion : 1, 0, 0, 1 ProductVersion : 1, 0, 0, 1 ProductName : cthelper CompanyName : Creative Technology Ltd FileDescription : cthelper InternalName : cthelper LegalCopyright : Copyright © 2002 OriginalFilename : cthelper.exe #:29 [sk9910dm.exe] FilePath : C:\WINDOWS\system32\ ProcessID : 4064 ThreadCreationTime : 8-15-2005 3:29:33 PM BasePriority : Normal FileVersion : 1, 0, 9, 0 CompanyName : Silitek Corporation FileDescription : Daemon LegalCopyright : Copyright © Silitek Corp. 1999, 2000 #:30 [ccapp.exe] FilePath : C:\Program Files\Common Files\Symantec Shared\ ProcessID : 124 ThreadCreationTime : 8-15-2005 3:29:34 PM BasePriority : Normal FileVersion : 103.0.4.3 ProductVersion : 103.0.4.3 ProductName : Client and Host Security Platform CompanyName : Symantec Corporation FileDescription : Symantec User Session InternalName : ccApp LegalCopyright : Copyright © 2000-2004 Symantec Corporation. All rights reserved. OriginalFilename : ccApp.exe #:31 [gcasdtserv.exe] FilePath : C:\Program Files\Microsoft AntiSpyware\ ProcessID : 1456 ThreadCreationTime : 8-15-2005 3:29:41 PM BasePriority : Normal FileVersion : 1.00.0501 ProductVersion : 1.00.0501 ProductName : Microsoft AntiSpyware (Beta 1) CompanyName : Microsoft Corporation FileDescription : Microsoft AntiSpyware Data Service InternalName : gcasDtServ LegalCopyright : Copyright © 2004-2005 Microsoft Corporation. All rights reserved. LegalTrademarks : Microsoft® and Windows® are registered trademarks of Microsoft Corporation. SpyNet™ is a trademark of Microsoft Corporation. OriginalFilename : gcasDtServ.exe #:32 [acctmgr.exe] FilePath : C:\Program Files\Norton Password Manager\ ProcessID : 1396 ThreadCreationTime : 8-15-2005 3:29:42 PM BasePriority : Normal FileVersion : 2004.1.406 ProductVersion : 2004.1.406 ProductName : Norton Password Manager CompanyName : Symantec Corporation FileDescription : Password Manager Controller InternalName : AcctMgr LegalCopyright : Copyright © 2003-2004 Symantec Corporation OriginalFilename : AcctMgr.EXE #:33 [qttask.exe] FilePath : C:\Program Files\QuickTime\ ProcessID : 2684 ThreadCreationTime : 8-15-2005 3:30:05 PM BasePriority : Normal FileVersion : 6.5.1 ProductVersion : QuickTime 6.5.1 ProductName : QuickTime CompanyName : Apple Computer, Inc. InternalName : QuickTime Task LegalCopyright : © Apple Computer, Inc. 2001-2004 OriginalFilename : QTTask.exe #:34 [msmsgs.exe] FilePath : C:\Program Files\Messenger\ ProcessID : 3288 ThreadCreationTime : 8-15-2005 3:30:20 PM BasePriority : Normal FileVersion : 4.7.3001 ProductVersion : Version 4.7.3001 ProductName : Messenger CompanyName : Microsoft Corporation FileDescription : Windows Messenger InternalName : msmsgs LegalCopyright : Copyright © Microsoft Corporation 2004 LegalTrademarks : Microsoft® is a registered trademark of Microsoft Corporation in the U.S. and/or other countries. OriginalFilename : msmsgs.exe #:35 [autolaunch.exe] FilePath : C:\Program Files\Iomega HotBurn Pro\ ProcessID : 3836 ThreadCreationTime : 8-15-2005 3:30:29 PM BasePriority : Normal FileVersion : 1.8 ProductVersion : 1.8 ProductName : Iomega HotBurn CompanyName : Iomega Corporation FileDescription : Iomega HotBurn Auto Launch Program InternalName : AutoLaunch LegalCopyright : Copyright © 2001-2002 Iomega Corporation LegalTrademarks : HOTBURN OriginalFilename : Autolaunch.exe Comments : HotBurn AutoLaunch Program #:36 [ezdmontr.exe] FilePath : C:\Program Files\Quik Touch\ ProcessID : 3848 ThreadCreationTime : 8-15-2005 3:30:29 PM BasePriority : Normal FileVersion : 0.9.9.0 ProductVersion : 0.9.9.0 ProductName : Emuzed Record Monitor CompanyName : Emuzed, Inc. FileDescription : EzdMontr manages QuikTouch launch of DVD Capture/Burn Software InternalName : EzdMontr.exe LegalCopyright : Copyright © 2003 Emuzed, Inc. All rights reserved. OriginalFilename : EzdMontr.exe #:37 [drgtodsc.exe] FilePath : C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\ ProcessID : 3924 ThreadCreationTime : 8-15-2005 3:30:33 PM BasePriority : Normal FileVersion : 7.5.0.47 ProductVersion : 7.5.0.47 ProductName : Drag-to-Disc CompanyName : Sonic Solutions FileDescription : Drag To Disc Application InternalName : D2D LegalCopyright : Copyright © 1994-2005 Sonic Solutions LegalTrademarks : Copyright © 1994-2005 Sonic Solutions OriginalFilename : BurnCtrl.EXE #:38 [sm1bg.exe] FilePath : C:\WINDOWS\ ProcessID : 3872 ThreadCreationTime : 8-15-2005 3:30:34 PM BasePriority : Normal FileVersion : 6.01.1000.0 ProductVersion : 6.01.1000.0 ProductName : Cypress USB Mass Storage Adapter CompanyName : Cypress Semiconductor FileDescription : Cypress USB Mass Storage Driver Background Application InternalName : SM1BG.EXE LegalCopyright : Copyright © 1998-2003 Cypress Semiconductor OriginalFilename : SM1BG.EXE #:39 [realsched.exe] FilePath : C:\Program Files\Common Files\Real\Update_OB\ ProcessID : 316 ThreadCreationTime : 8-15-2005 3:30:36 PM BasePriority : Normal FileVersion : 0.1.0.3275 ProductVersion : 0.1.0.3275 ProductName : RealPlayer (32-bit) CompanyName : RealNetworks, Inc. FileDescription : RealNetworks Scheduler InternalName : schedapp LegalCopyright : Copyright © RealNetworks, Inc. 1995-2004 LegalTrademarks : RealAudio™ is a trademark of RealNetworks, Inc. OriginalFilename : realsched.exe #:40 [issch.exe] FilePath : C:\Program Files\Common Files\InstallShield\UpdateService\ ProcessID : 1812 ThreadCreationTime : 8-15-2005 3:30:38 PM BasePriority : Normal FileVersion : 3, 10, 100, 1155 ProductVersion : 3, 10 ProductName : InstallShield Update Service CompanyName : InstallShield Software Corporation FileDescription : InstallShield Update Service Scheduler InternalName : Scheduler LegalCopyright : Copyright © 1990-2004 InstallShield Software Corporation OriginalFilename : issch.exe #:41 [ituneshelper.exe] FilePath : C:\Program Files\iTunes\ ProcessID : 192 ThreadCreationTime : 8-15-2005 3:30:40 PM BasePriority : Normal FileVersion : 4.9.0.17 ProductVersion : 4.9.0.17 ProductName : iTunes CompanyName : Apple Computer, Inc. FileDescription : iTunesHelper Module InternalName : iTunesHelper LegalCopyright : © 2003-2005 Apple Computer, Inc. All Rights Reserved. OriginalFilename : iTunesHelper.exe #:42 [ipodservice.exe] FilePath : C:\Program Files\iPod\bin\ ProcessID : 1292 ThreadCreationTime : 8-15-2005 3:30:42 PM BasePriority : Normal FileVersion : 4.9.0.17 ProductVersion : 4.9.0.17 ProductName : iTunes CompanyName : Apple Computer, Inc. FileDescription : iPodService Module InternalName : iPodService LegalCopyright : © 2003-2005 Apple Computer, Inc. All Rights Reserved. OriginalFilename : iPodService.exe #:43 [wzqkpick.exe] FilePath : C:\Program Files\WinZip\ ProcessID : 624 ThreadCreationTime : 8-15-2005 3:30:45 PM BasePriority : Normal FileVersion : 1.0 (32-bit) ProductVersion : 9.0 (6028) ProductName : WinZip CompanyName : WinZip Computing, Inc. FileDescription : WinZip Executable InternalName : WZQKPICK.EXE LegalCopyright : Copyright © WinZip Computing, Inc. 1991-2004 - All Rights Reserved LegalTrademarks : WinZip is a registered trademark of WinZip Computing, Inc OriginalFilename : WZQKPICK.EXE Comments : StringFileInfo: U.S. English #:44 [ad-aware.exe] FilePath : C:\Program Files\Lavasoft\Ad-Aware SE Personal\ ProcessID : 2576 ThreadCreationTime : 8-15-2005 3:30:52 PM BasePriority : Normal FileVersion : 6.2.0.236 ProductVersion : SE 106 ProductName : Lavasoft Ad-Aware SE CompanyName : Lavasoft Sweden FileDescription : Ad-Aware SE Core application InternalName : Ad-Aware.exe LegalCopyright : Copyright © Lavasoft AB Sweden OriginalFilename : Ad-Aware.exe Comments : All Rights Reserved Memory scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 0 Started registry scan »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Registry Scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 0 Started deep registry scan »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Deep registry scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 0 Started Tracking Cookie scan »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Tracking Cookie Object Recognized! Type : IECache Entry Data : [removed][1].txt TAC Rating : 3 Category : Data Miner Comment : Hits:1 Value : Cookie:[removed]/ Expires : 8-14-2006 4:09:14 PM LastSync : Hits:1 UseCount : 0 Hits : 1 Tracking Cookie Object Recognized! Type : IECache Entry Data : juli@2o7[1].txt TAC Rating : 3 Category : Data Miner Comment : Hits:70 Value : Cookie:[removed]/ Expires : 8-14-2010 8:00:34 AM LastSync : Hits:70 UseCount : 0 Hits : 70 Tracking Cookie Object Recognized! Type : IECache Entry Data : juli@statcounter[2].txt TAC Rating : 3 Category : Data Miner Comment : Hits:5 Value : Cookie:[removed]/ Expires : 8-13-2010 1:18:42 PM LastSync : Hits:5 UseCount : 0 Hits : 5 Tracking Cookie Object Recognized! Type : IECache Entry Data : [removed][1].txt TAC Rating : 3 Category : Data Miner Comment : Hits:1 Value : Cookie:[removed]/ Expires : 8-19-2005 6:21:42 AM LastSync : Hits:1 UseCount : 0 Hits : 1 Tracking Cookie Object Recognized! Type : IECache Entry Data : juli@apmebf[1].txt TAC Rating : 3 Category : Data Miner Comment : Hits:2 Value : Cookie:[removed]/ Expires : 8-12-2010 8:38:44 AM LastSync : Hits:2 UseCount : 0 Hits : 2 Tracking Cookie Object Recognized! Type : IECache Entry Data : juli@realmedia[2].txt TAC Rating : 3 Category : Data Miner Comment : Hits:5 Value : Cookie:[removed]/ Expires : 12-31-2020 7:00:00 PM LastSync : Hits:5 UseCount : 0 Hits : 5 Tracking Cookie Object Recognized! Type : IECache Entry Data : juli@live365[1].txt TAC Rating : 3 Category : Data Miner Comment : Hits:1 Value : Cookie:[removed]/ Expires : 8-18-2010 10:54:42 AM LastSync : Hits:1 UseCount : 0 Hits : 1 Tracking Cookie Object Recognized! Type : IECache Entry Data : [removed][1].txt TAC Rating : 3 Category : Data Miner Comment : Hits:2 Value : Cookie:[removed]/ Expires : 12-30-2037 11:00:00 AM LastSync : Hits:2 UseCount : 0 Hits : 2 Tracking cookie scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 8 Objects found so far: 8 Deep scanning and examining files (C:) »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Disk Scan Result for C:\ »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 8 Deep scanning and examining files (D:) »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Disk Scan Result for D:\ »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 8 Scanning Hosts file…… Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts". »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Hosts file scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» 1 entries scanned. New critical objects:0 Objects found so far: 8 Performing conditional scans… »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Conditional scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 8 10:49:48 AM Scan Complete Summary Of This Scan »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Total scanning time:00:14:49.657 Objects scanned:181938 Objects identified:8 Objects ignored:0 New critical objects:8 Hope this helps. It's very slow, even doing things like opening a mail program. Thanks for all your help so far.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI