This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Log for review

30 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Kids computer is a complete mess. Receive pop ups even when we are not browsing mostly from Casino something or other. Running popup stopper in the background. Any help would be greatly appreciated !!!! :P


Logfile of HijackThis v1.99.0
Scan saved at 6:17:31 PM, on 8/12/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\IWP\NPFMNTOR.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\OPLIMIT\OCRAWARE.EXE
C:\OPLIMIT\OCRAWR32.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\CPQEADM.EXE
C:\COMPAQ\CPQINET\CPQINET.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\PCTVOICE.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\AQALOP.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\BTTNSERV.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\REBATE RETRIEVER\REBATERETRIEVER.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\EAUSBKBD.EXE
C:\WINDOWS\SYSTEM\ZPFUJJ.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE
C:\PROGRAM FILES\HP OFFICEJET SERIES 600\BIN\HPOSTART.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\PROGRAM FILES\HP OFFICEJET SERIES 600\BIN\HPOJVDIX.EXE
C:\WINDOWS\SYSTEM\HPOMLCH.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://dsl.sbc.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = websearch.drsnsrch.com/q.cgi?q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
F1 - win.ini: load=c:\oplimit\ocraware.exe
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: Accoona Search Assistant - {944864A5-3916-46E2-96A9-A2E84F3F1208} - C:\PROGRAM FILES\ACCOONA\ASEARCHASSIST.DLL
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Panicware BHO Class - {00000000-6C30-11D8-9363-000AE6309658} - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER ANTI-SPYWARE\PWIBHO.DLL
O2 - BHO: CeresObj Class - {00000049-8F91-4D9C-9573-F016E7626484} - C:\WINDOWS\CERES.DLL
O2 - BHO: Band Class - {00F1D395-4744-40f0-A611-980F61AE2C59} - C:\WINDOWS\DSR.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Pop-Up Stopper Anti-Spyware Toolbar - {E4CAA75E-9B5F-45EB-8E4E-8B743B44F171} - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER ANTI-SPYWARE\PWITB.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\Compaq\Easy Access Button Support\cpqeadm.exe
O4 - HKLM\..\Run: [EACLEAN] C:\Program Files\Compaq\Easy Access Button Support\eaclean.exe
O4 - HKLM\..\Run: [CPQInet] c:\compaq\CPQInet\CpqInet.exe
O4 - HKLM\..\Run: [PCTVOICE] pctvoice.exe
O4 - HKLM\..\Run: [autoupdate] rundll32 C:\WINDOWS\SYSTEM\DATADX.DLL,SHStart
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [winsync] C:\WINDOWS\aqalop.exe reg_run
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NAV CfgWiz] "C:\Program Files\Norton AntiVirus\CfgWiz.exe" /GUID {0D7956A2-5A08-4ec2-A72C-DF8495A66016} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [Rebate Retriever] C:\Program Files\Rebate Retriever\RebateRetriever.exe
O4 - HKLM\..\Run: [AUNPS2] RUNDLL32 AUNPS2.DLL,_Run@16
O4 - HKLM\..\Run: [zpfujj] c:\windows\system\zpfujj.exe
O4 - HKLM\..\Run: [Dinst] C:\WINDOWS\dinst.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [NPFMonitor] C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE"
O4 - Startup: pudc.exe
O4 - Startup: HP OfficeJet Series 600 StartUp.lnk = C:\Program Files\HP OfficeJet Series 600\bin\HPOstart.exe
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…415/mcfscan.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab33902.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid;=0x409
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/d…/ITDetector.cab
O16 - DPF: {4208FB4D-4E53-4F5A-BF7A-3E047DDB5281} (ActiveX Control) - http://www.icannnews.com/app/ST/ActiveX.ocx
O16 - DPF: {4EC8E993-32C1-47F5-A07A-5B0574655AD4} (WXcom Class) - http://us.dl1.yimg.com/download.yahoo.com/…ntr_current.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/…ntr_current.cab
Hi and welcome to the forum. :D

Step # 1

Please download and run CWShredder. Make sure that all browser windows are closed with the exception of Cwshredder and choose FIX.

http://www.majorgeeks.com/downloadget.php?…7fd6b3ff02edc90

REBOOT

Step #2

Please download and run Spybot 1.4 & AdAware SE Then follow the instructions in the link below to run.

Spybot & Adaware Tutorial

REBOOT

Step # 3

Then do a virus scan here >>> Trend Micro

Reboot and post a new HiJackThis log. You need to update you Hijackthis as there is a new version which you can download HERE
Okay after many trials and tribulations and pulling half my hair out :( , i was able to finally accomplish your list of instructions. A new log is posted below.


Logfile of HijackThis v1.99.1
Scan saved at 10:55:50 AM, on 8/14/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\IWP\NPFMNTOR.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\OPLIMIT\OCRAWARE.EXE
C:\OPLIMIT\OCRAWR32.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\CPQEADM.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\COMPAQ\CPQINET\CPQINET.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\BTTNSERV.EXE
C:\WINDOWS\PCTVOICE.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\EAUSBKBD.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE
C:\PROGRAM FILES\HP OFFICEJET SERIES 600\BIN\HPOSTART.EXE
C:\PROGRAM FILES\HP OFFICEJET SERIES 600\BIN\HPOJVDIX.EXE
C:\WINDOWS\SYSTEM\HPOMLCH.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://dsl.sbc.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = websearch.drsnsrch.com/q.cgi?q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
F1 - win.ini: load=c:\oplimit\ocraware.exe
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Accoona Search Assistant - {944864A5-3916-46E2-96A9-A2E84F3F1208} - C:\PROGRAM FILES\ACCOONA\ASEARCHASSIST.DLL
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Panicware BHO Class - {00000000-6C30-11D8-9363-000AE6309658} - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER ANTI-SPYWARE\PWIBHO.DLL
O2 - BHO: Band Class - {00F1D395-4744-40f0-A611-980F61AE2C59} - C:\WINDOWS\DSR.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Pop-Up Stopper Anti-Spyware Toolbar - {E4CAA75E-9B5F-45EB-8E4E-8B743B44F171} - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER ANTI-SPYWARE\PWITB.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\Compaq\Easy Access Button Support\cpqeadm.exe
O4 - HKLM\..\Run: [EACLEAN] C:\Program Files\Compaq\Easy Access Button Support\eaclean.exe
O4 - HKLM\..\Run: [CPQInet] c:\compaq\CPQInet\CpqInet.exe
O4 - HKLM\..\Run: [PCTVOICE] pctvoice.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NAV CfgWiz] "C:\Program Files\Norton AntiVirus\CfgWiz.exe" /GUID {0D7956A2-5A08-4ec2-A72C-DF8495A66016} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [NPFMonitor] C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE"
O4 - Startup: HP OfficeJet Series 600 StartUp.lnk = C:\Program Files\HP OfficeJet Series 600\bin\HPOstart.exe
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…415/mcfscan.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab33902.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid;=0x409
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/d…/ITDetector.cab
O16 - DPF: {4208FB4D-4E53-4F5A-BF7A-3E047DDB5281} (ActiveX Control) - http://www.icannnews.com/app/ST/ActiveX.ocx
O16 - DPF: {4EC8E993-32C1-47F5-A07A-5B0574655AD4} (WXcom Class) - http://us.dl1.yimg.com/download.yahoo.com/…ntr_current.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/…ntr_current.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
Please scan with hijackthis and put a check beside these lines and choose FIX

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = websearch.drsnsrch.com/q.cgi?q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - Default URLSearchHook is missing

O2 - BHO: Band Class - {00F1D395-4744-40f0-A611-980F61AE2C59} - C:\WINDOWS\DSR.DLL

Then reboot and post a new log please.
Did as asked and here is the new log.

Logfile of HijackThis v1.99.1
Scan saved at 5:00:06 PM, on 8/14/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\IWP\NPFMNTOR.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\OPLIMIT\OCRAWARE.EXE
C:\OPLIMIT\OCRAWR32.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\CPQEADM.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\BTTNSERV.EXE
C:\COMPAQ\CPQINET\CPQINET.EXE
C:\WINDOWS\PCTVOICE.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\EAUSBKBD.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE
C:\PROGRAM FILES\HP OFFICEJET SERIES 600\BIN\HPOSTART.EXE
C:\PROGRAM FILES\HP OFFICEJET SERIES 600\BIN\HPOJVDIX.EXE
C:\WINDOWS\SYSTEM\HPOMLCH.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://dsl.sbc.yahoo.com/
F1 - win.ini: load=c:\oplimit\ocraware.exe
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Panicware BHO Class - {00000000-6C30-11D8-9363-000AE6309658} - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER ANTI-SPYWARE\PWIBHO.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Pop-Up Stopper Anti-Spyware Toolbar - {E4CAA75E-9B5F-45EB-8E4E-8B743B44F171} - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER ANTI-SPYWARE\PWITB.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\Compaq\Easy Access Button Support\cpqeadm.exe
O4 - HKLM\..\Run: [EACLEAN] C:\Program Files\Compaq\Easy Access Button Support\eaclean.exe
O4 - HKLM\..\Run: [CPQInet] c:\compaq\CPQInet\CpqInet.exe
O4 - HKLM\..\Run: [PCTVOICE] pctvoice.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NAV CfgWiz] "C:\Program Files\Norton AntiVirus\CfgWiz.exe" /GUID {0D7956A2-5A08-4ec2-A72C-DF8495A66016} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [AUNPS2] RUNDLL32 AUNPS2.DLL,_Run@16
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [NPFMonitor] C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE"
O4 - Startup: HP OfficeJet Series 600 StartUp.lnk = C:\Program Files\HP OfficeJet Series 600\bin\HPOstart.exe
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…415/mcfscan.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab33902.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/d…/ITDetector.cab
O16 - DPF: {4208FB4D-4E53-4F5A-BF7A-3E047DDB5281} (ActiveX Control) - http://www.icannnews.com/app/ST/ActiveX.ocx
O16 - DPF: {4EC8E993-32C1-47F5-A07A-5B0574655AD4} (WXcom Class) - http://us.dl1.yimg.com/download.yahoo.com/…ntr_current.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/…ntr_current.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
Please download the trial version of Ewido Security Suite here:
http://www.ewido.net/en/download/

Install it, and update the definitions to the newest files.

Next, please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.

Then please run Ewido, and run a full scan. Save the logfile from the scan.

Restart your computer in normal mode and please post a new HijackThis log, as well as the log from the Ewido scan.
I attempted to install the ewido and then it informed me that i have to have windows 2000 and above. The kids computer is running ME unfortunately. Now what?? :(
Please download hoster from the link below.

http://www.funkytoad.com/download/hoster.zip

Open Hoster.exe.

Then click on "Restore Original Hosts"

Close program when complete.

REBOOT


I would like you to download and run Trojan Hunter. It is free for 30 days. Let it fix what it finds.

Download Trojan Hunter(trial version).
Next go Hereand download the latest update zip file.
Install Trojan Hunter and make a note of the full path to the folder where it is installed, by default this is
X:\program files\TrojanHunter 3.8 (X is the drive Trojan Hunter is installed on, usually C).
After installation unzip the update file you downloaded to the installation folder you took note of.
Say "Yes to All" when you are asked about replacing files.
You have to completely shut down Trojan Hunter for the new files to be used.
Double click the desktop icon to restart Trojan Hunter, click to continue evaluation.
Click the "Full Scan" button on the upper left.
okay, i told the trojan hunter to clean the files it found and this is the results after the cleaning. I will now reboot and post a new hijack this log in a separate reply: Removed registry key HKEY_CURRENT_USER\Software\Bundles Renamed file C:\WINDOWS\Desktop\New Folder\backups\backup-20041223-173316-288.dll to C:\WINDOWS\Desktop\New Folder\backups\backup-20041223-173316-288.dll.tcf Renamed file C:\WINDOWS\Desktop\New Folder\backups\backup-20041223-173316-783.dll to C:\WINDOWS\Desktop\New Folder\backups\backup-20041223-173316-783.dll.tcf Renamed file C:\WINDOWS\dsr.exe to C:\WINDOWS\dsr.exe.tcf Renamed file C:\WINDOWS\icont.exe to C:\WINDOWS\icont.exe.tcf Unable to rename file C:\WINDOWS\SYSTEM\AUNPS2.dll (Access is denied). Scheduling file to be renamed on reboot Renamed file C:\WINDOWS\SYSTEM\DSKTRF.DLL to C:\WINDOWS\SYSTEM\DSKTRF.DLL.tcf Renamed file C:\WINDOWS\SYSTEM\frmpif.exe to C:\WINDOWS\SYSTEM\frmpif.exe.tcf Renamed file C:\WINDOWS\SYSTEM\nsjxjf.exe to C:\WINDOWS\SYSTEM\nsjxjf.exe.tcf Renamed file C:\WINDOWS\Temporary Internet Files\Content.IE5\U76B6D6F\AppWrap[2].exe to C:\WINDOWS\Temporary Internet Files\Content.IE5\U76B6D6F\AppWrap[2].exe.tcf Renamed file C:\WINDOWS\unist2.exe to C:\WINDOWS\unist2.exe.tcf Trojan cleaning finished.
Here is the new log. I couldnt even shut down the computer off, i had to do the dreaded pull the plug.


Logfile of HijackThis v1.99.1
Scan saved at 7:50:14 PM, on 8/15/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\IWP\NPFMNTOR.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\OPLIMIT\OCRAWARE.EXE
C:\OPLIMIT\OCRAWR32.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\CPQEADM.EXE
C:\COMPAQ\CPQINET\CPQINET.EXE
C:\WINDOWS\PCTVOICE.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\BTTNSERV.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\EAUSBKBD.EXE
C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE
C:\PROGRAM FILES\HP OFFICEJET SERIES 600\BIN\HPOSTART.EXE
C:\PROGRAM FILES\HP OFFICEJET SERIES 600\BIN\HPOJVDIX.EXE
C:\WINDOWS\SYSTEM\HPOMLCH.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://dsl.sbc.yahoo.com/
F1 - win.ini: load=c:\oplimit\ocraware.exe
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Panicware BHO Class - {00000000-6C30-11D8-9363-000AE6309658} - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER ANTI-SPYWARE\PWIBHO.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Pop-Up Stopper Anti-Spyware Toolbar - {E4CAA75E-9B5F-45EB-8E4E-8B743B44F171} - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER ANTI-SPYWARE\PWITB.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\Compaq\Easy Access Button Support\cpqeadm.exe
O4 - HKLM\..\Run: [EACLEAN] C:\Program Files\Compaq\Easy Access Button Support\eaclean.exe
O4 - HKLM\..\Run: [CPQInet] c:\compaq\CPQInet\CpqInet.exe
O4 - HKLM\..\Run: [PCTVOICE] pctvoice.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NAV CfgWiz] "C:\Program Files\Norton AntiVirus\CfgWiz.exe" /GUID {0D7956A2-5A08-4ec2-A72C-DF8495A66016} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [AUNPS2] RUNDLL32 AUNPS2.DLL,_Run@16
O4 - HKLM\..\Run: [MSConfigReminder] C:\WINDOWS\SYSTEM\msconfig.exe /reminder
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [NPFMonitor] C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE"
O4 - Startup: HP OfficeJet Series 600 StartUp.lnk = C:\Program Files\HP OfficeJet Series 600\bin\HPOstart.exe
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…415/mcfscan.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab33902.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/d…/ITDetector.cab
O16 - DPF: {4208FB4D-4E53-4F5A-BF7A-3E047DDB5281} (ActiveX Control) - http://www.icannnews.com/app/ST/ActiveX.ocx
O16 - DPF: {4EC8E993-32C1-47F5-A07A-5B0574655AD4} (WXcom Class) - http://us.dl1.yimg.com/download.yahoo.com/…ntr_current.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/…ntr_current.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
:( Did ya forget about me?? The kids are attempting to use the computer and still being bogged down by those darn pop up windows. The log posted above is the latest one after I ran the requested scan. Just didnt want to get lost in the board……
Nope didnt forget about you, real life gets in the way sometimes.

Scan with nhijackthis and put a check beside this line and choose FIXC


O4 - HKLM\..\Run: [AUNPS2] RUNDLL32 AUNPS2.DLL,_Run@16

Download MicroWorld virus scan here >>> Micro World http://www.mwti.net/antivirus/free_utilities.asp

To run the virus scan make sure you click the following

memory, registry, startup folders, system folders, services, drive (all drives will be added) then click on scan clean. When the scan is complete hilight all the files in the LOWER box. Then ctrl + c and paste them into the thread ctrl + v.

I warn you the scan will take a long time to run and will not fix anything just identifies bad files.
Did as asked and scanned with microworld. Are you sitting down???? There are 336 files here. How the *%#$ did this happen?????????? File C:\WINDOWS\SYSTEM\DWRAW16.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SRIMGVW.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\D3DBCT.EXE infected by "Trojan-Spy.Win32.VB.eh" Virus! Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\D3DBCT.EXE infected by "Trojan-Spy.Win32.VB.eh" Virus! Action Taken: No Action Taken. File C:\PROGRA~1\E2G\IEBHOS.DLL tagged as "not-a-virus:AdWare.BHO.E2Give.c". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\D3DBCT.exe infected by "Trojan-Spy.Win32.VB.eh" Virus! Action Taken: No Action Taken. File C:\WINDOWS\Desktop\New Folder\backups\backup-20041223-173316-288.dll.tcf tagged as "not-a-virus:AdWare.Adstart.c". Action Taken: No Action Taken. File C:\WINDOWS\Desktop\New Folder\backups\backup-20041223-173316-783.dll.tcf tagged as "not-a-virus:AdWare.Adstart.i". Action Taken: No Action Taken. Object "E2Give Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "AltNet Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "Prutect Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "E2Give Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "E2Give Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "BTGrab Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "iSearch Spyware/Adware" found in File System! Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\ActiveX.ocx". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\Downloaded Program Files\ActiveX.ocx". Action Taken: No Action Taken. Entry "HKCR\CLSID\{700B1221-CAFF-11d1-B9DE-000000001B1B}" refers to invalid object "atippaxx.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{E62DCD80-C262-11d1-A419-006097923041}" refers to invalid object "atipdsxx.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{2EADFE65-C751-11D1-A636-0000E8DB1EA2}" refers to invalid object "atipdaxx.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{F2B8E361-D2E2-11D1-A41F-00609729B902}" refers to invalid object "atipuixx.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{EBB5845F-CA80-11CF-BD3C-008029E89281}" refers to invalid object "atitvo32.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{2FC765C5-AE47-11D1-9975-00805F8AC6B3}" refers to invalid object "BRPREF32.DLL". Action Taken: No Action Taken. Entry "HKCR\CLSID\{2FC765C6-AE47-11D1-9975-00805F8AC636}" refers to invalid object "BRPREF32.DLL". Action Taken: No Action Taken. Entry "HKCR\CLSID\{2FC765C7-AE47-11D1-9975-00805F8AC6B3}" refers to invalid object "BRPREF32.DLL". Action Taken: No Action Taken. Entry "HKCR\CLSID\{744C3DF0-DFAE-11D1-826B-00805F2AB103}" refers to invalid object "BRPREF32.DLL". Action Taken: No Action Taken. Entry "HKCR\CLSID\{2FC765CB-AE47-11D1-9975-00805F8AC63E}" refers to invalid object "MNPREF32.DLL". Action Taken: No Action Taken. Entry "HKCR\CLSID\{2FC765CC-AE47-11D1-9975-00805F8AC6B3}" refers to invalid object "MNPREF32.DLL". Action Taken: No Action Taken. Entry "HKCR\CLSID\{2FC765C8-AE47-11D1-9975-00805F8AC6B3}" refers to invalid object "EDPREF32.DLL". Action Taken: No Action Taken. Entry "HKCR\CLSID\{62845280-4FE2-11D1-8EAC-00805FD26FAA}" refers to invalid object "LIPREF32.DLL". Action Taken: No Action Taken. Entry "HKCR\CLSID\{99180163-DA16-101A-935C-444553540000}" refers to invalid object "recncl.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{BB7DF450-F119-11CD-8465-00AA00425D90}" refers to invalid object "C:\Program Files\Microsoft Office\Office\". Action Taken: No Action Taken. Entry "HKCR\CLSID\{3BFADCE2-1141-4B81-8878-49AF625F0FDC}" refers to invalid object "C:\WINDOWS\DOWNLO~1\ACTIVEX.OCX". Action Taken: No Action Taken. Entry "HKCR\CLSID\{4208FB4D-4E53-4F5A-BF7A-3E047DDB5281}" refers to invalid object "C:\WINDOWS\DOWNLO~1\ACTIVEX.OCX". Action Taken: No Action Taken. Entry "HKCR\CLSID\{364B6276-C6C1-40B6-A6D7-6C48871FD707}" refers to invalid object "C:\PROGRAM FILES\ACCOONA\ATOOLBAR.DLL". Action Taken: No Action Taken. Entry "HKCR\Plenoptic.Plenoptic.1" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken. Entry "HKCR\Plenoptic.Plenoptic" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken. Entry "HKCR\WMDMPDAExplorer.WMDMPDAExplorer.1" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken. Entry "HKCR\WMDMPDAExplorer.WMDMPDAExplorer" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken. Entry "HKCR\NetscapeMarkup" refers to invalid object "{61D8DE20-CA9A-11CE-9EA5-0080C82BE3B6}". Action Taken: No Action Taken. Entry "HKCR\mapifvbx.object" refers to invalid object "{41116C00-8B90-101B-96CD-00AA003B14FC}". Action Taken: No Action Taken. Entry "HKCR\mapifvbx.object.1" refers to invalid object "{41116C00-8B90-101B-96CD-00AA003B14FC}". Action Taken: No Action Taken. Entry "HKCR\MailFileAtt" refers to invalid object "{00020D05-0000-0000-C000-000000000046}". Action Taken: No Action Taken. Entry "HKCR\ActMsg.Session" refers to invalid object "{3FA7DEB3-6438-101B-ACC1-00AA00423326}". Action Taken: No Action Taken. Entry "HKCR\ComPlusMetaData.MsCorHost" refers to invalid object "{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}". Action Taken: No Action Taken. Entry "HKCR\ComPlusMetaData.MsCorHost.2" refers to invalid object "{727CDF4F-3BA0-11D3-8738-00C04F79ED0D}". Action Taken: No Action Taken. Entry "HKCR\SymWriter.pdb" refers to invalid object "{520DC67A-752E-11D3-8D56-00C04F680B2B}". Action Taken: No Action Taken. Entry "HKCR\Infotects.ITCDKey" refers to invalid object "{3F09379D-34EF-4A29-8336-20C7473ED3BA}". Action Taken: No Action Taken. Entry "HKCR\PhoneModelLib.AtlasModelNvIntfDualSystem.1" refers to invalid object "{0F0C30F262E36B31-EE0A-11d3-BF96-0008C78F17BD}". Action Taken: No Action Taken. File C:\WINDOWS\SG tagged as "not-a-virus:AdWare.UrlSpy.b". Action Taken: No Action Taken. File C:\WINDOWS\pi1_51.exe infected by "Trojan-Downloader.Win32.Small.aal" Virus! Action Taken: No Action Taken. File C:\WINDOWS\Osaka.exe tagged as "not-a-virus:AdWare.PurityScan.w". Action Taken: No Action Taken. File C:\WINDOWS\dsr.exe.tcf tagged as "not-a-virus:AdWare.ToolBar.ImiBar.h". Action Taken: No Action Taken. File C:\WINDOWS\icont.exe.tcf tagged as "not-a-virus:AdWare.AdURL.c". Action Taken: No Action Taken. File C:\WINDOWS\oeprfjog.exe tagged as "not-a-virus:AdWare.BookedSpace.e". Action Taken: No Action Taken. File C:\WINDOWS\InstallAPS.exe infected by "Trojan-Dropper.Win32.Agent.lu" Virus! Action Taken: No Action Taken. File C:\WINDOWS\btnetw3-254804.exe tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.i". Action Taken: No Action Taken. File C:\WINDOWS\dinst.exe infected by "Trojan-Downloader.Win32.Intexp.d" Virus! Action Taken: No Action Taken. File C:\WINDOWS\dsr.dll tagged as "not-a-virus:AdWare.ToolBar.ImiBar.h". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\NWTOS.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MMCN30.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ORBCTRAC.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SZSDETMG.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SRIMGVW.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\VDAJET32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CGSEQCHK.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\InstaFinder_inst245.exe tagged as "not-a-virus:AdWare.InstaFinder.a". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CVDIAL32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DNKTRF.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MHNSSPC.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CHSEQCHK.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\NKTOS.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CNMMCTRL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DQIME.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\hfowin01.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MXC30.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\NOTDI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MTANG.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DevX.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\IJ41_QC.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DONDI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mkvcr71.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SIELL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\EPABLE3.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SRTUPAPI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\PDTSCOM.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MVPRINT.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\IEGSHL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\haoctk16.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MWNSSPC.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DQTMSFT.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\LYRTREND.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\WGNASPI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SZTUP4.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RTR20.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\WU5INF32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\URBUI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MAWMDM.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SSNDMAIL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DKCVW_32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SWLSRV32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mUpi32.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\WKNETMGR.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\IHWDIAL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\PAXPERM.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\HFD.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\IGNPSTUB.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\cfral.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CXL3D.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SEORAGE.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CBSEQCHK.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MBJET35.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\HOINK.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DGIME.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DUTMSFT.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DTWAVE.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mQpi32x.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\EQSEC32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MYIQTZ32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\Mbeg16.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\QDDIT.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\NDTAPI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\WMADSS.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\dvvx_xx11.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SDOOLSS.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MDUNI11.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RKCHED32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RGCHED32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\PGWEROLD.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RAASMM.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SISTHUNK.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\HJD.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DYVMGR32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MOC42ENU.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ITWDIAL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\UWER.EXE tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SRRAPI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DLMSSOCN.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RKCHED20.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SPI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DRUSIC16.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\AHVPACK.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\STNCUI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\WLNMM.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CHMCTL32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MIEXCH40.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\OREPRO32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DISYNTH.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RTAPH.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\WSPLENC.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\IY1XDD.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DWRAW16.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MWR2C.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\IWNPSTUB.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SXTUPX32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\nzarch32.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\VVAME.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MOWSOCK.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\dcmasf.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\moident.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MFWSOSP.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\wgspdmoe.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CJL3D.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RPR20.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MZXDM.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\UYBMON.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CEL3D.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\WTWIZDLL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CZL3D.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mjmcids.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\srrmdll.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\csral.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CKUTOA.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\cnral.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RLAPH.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DQIMAN.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RQABASE.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MVLS31.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ITGUTIL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SLELL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\VYAME.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MCLS31.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SKNDMAIL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\AUNPS2~1.TCF infected by "Trojan-Clicker.Win32.Small.ez" Virus! Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\QFDWIPES.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\IDAGING.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DSKTRF.DLL.tcf tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.b". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\frmpif.exe.tcf tagged as "not-a-virus:AdWare.Adstart.d". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\nsjxjf.exe.tcf tagged as "not-a-virus:AdWare.Adstart.d". Action Taken: No Action Taken. File C:\WINDOWS\TEMP\b.com infected by "Trojan-Dropper.Win32.Agent.pb" Virus! Action Taken: No Action Taken. File C:\WINDOWS\TEMP\ei.exe infected by "Trojan-Downloader.Win32.Small.bgl" Virus! Action Taken: No Action Taken. File C:\WINDOWS\TEMPOR~1\CONTENT.IE5\IOMCCTMI\AppWrap[1].exe infected by "Trojan-Dropper.Win32.Agent.pb" Virus! Action Taken: No Action Taken. File C:\WINDOWS\TEMPOR~1\CONTENT.IE5\U76B6D6F\AppWrap[2].exe.tcf infected by "Trojan-Downloader.Win32.Small.ru" Virus! Action Taken: No Action Taken. File C:\WINDOWS\TEMPOR~1\CONTENT.IE5\0X6ROP2V\woinstall[1].exe tagged as "not-a-virus:AdWare.EZula.ak". Action Taken: No Action Taken. File C:\WINDOWS\TEMPOR~1\CONTENT.IE5\2T0V8N0H\AppWrap[1].exe infected by "Trojan-Dropper.Win32.Agent.pb" Virus! Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\NWTOS.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MMCN30.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ORBCTRAC.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SZSDETMG.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SRIMGVW.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\VDAJET32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CGSEQCHK.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\InstaFinder_inst245.exe tagged as "not-a-virus:AdWare.InstaFinder.a". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CVDIAL32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DNKTRF.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MHNSSPC.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CHSEQCHK.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\NKTOS.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CNMMCTRL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DQIME.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\hfowin01.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MXC30.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\NOTDI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MTANG.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DevX.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\IJ41_QC.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DONDI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mkvcr71.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SIELL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\EPABLE3.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SRTUPAPI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\PDTSCOM.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MVPRINT.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\IEGSHL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\haoctk16.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MWNSSPC.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DQTMSFT.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\LYRTREND.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\WGNASPI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SZTUP4.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RTR20.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\WU5INF32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\URBUI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MAWMDM.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SSNDMAIL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DKCVW_32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SWLSRV32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mUpi32.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\WKNETMGR.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\IHWDIAL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\PAXPERM.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\HFD.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\IGNPSTUB.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\cfral.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CXL3D.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SEORAGE.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CBSEQCHK.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MBJET35.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\HOINK.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DGIME.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DUTMSFT.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DTWAVE.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mQpi32x.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\EQSEC32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MYIQTZ32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\Mbeg16.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\QDDIT.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\NDTAPI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\WMADSS.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\dvvx_xx11.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SDOOLSS.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MDUNI11.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RKCHED32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RGCHED32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\PGWEROLD.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RAASMM.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SISTHUNK.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\HJD.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DYVMGR32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MOC42ENU.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ITWDIAL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\UWER.EXE tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SRRAPI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DLMSSOCN.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RKCHED20.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SPI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DRUSIC16.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\AHVPACK.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\STNCUI.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\WLNMM.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CHMCTL32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MIEXCH40.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\OREPRO32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DISYNTH.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RTAPH.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\WSPLENC.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\IY1XDD.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DWRAW16.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MWR2C.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\IWNPSTUB.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SXTUPX32.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\nzarch32.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\VVAME.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MOWSOCK.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\dcmasf.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\moident.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MFWSOSP.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\wgspdmoe.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CJL3D.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RPR20.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MZXDM.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\UYBMON.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CEL3D.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\WTWIZDLL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CZL3D.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mjmcids.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\srrmdll.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\csral.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\CKUTOA.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\cnral.dll tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RLAPH.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DQIMAN.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\RQABASE.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MVLS31.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ITGUTIL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SLELL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\VYAME.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\MCLS31.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\SKNDMAIL.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\AUNPS2~1.TCF infected by "Trojan-Clicker.Win32.Small.ez" Virus! Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\QFDWIPES.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\IDAGING.DLL tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\DSKTRF.DLL.tcf tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.b". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\frmpif.exe.tcf tagged as "not-a-virus:AdWare.Adstart.d". Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\nsjxjf.exe.tcf tagged as "not-a-virus:AdWare.Adstart.d". Action Taken: No Action Taken. File C:\WINDOWS\TEMP\b.com infected by "Trojan-Dropper.Win32.Agent.pb" Virus! Action Taken: No Action Taken. File C:\WINDOWS\TEMP\ei.exe infected by "Trojan-Downloader.Win32.Small.bgl" Virus! Action Taken: No Action Taken. File C:\WINDOWS\Desktop\New Folder\backups\backup-20041223-173316-288.dll.tcf tagged as "not-a-virus:AdWare.Adstart.c". Action Taken: No Action Taken. File C:\WINDOWS\Desktop\New Folder\backups\backup-20041223-173316-783.dll.tcf tagged as "not-a-virus:AdWare.Adstart.i". Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\instafin.dll infected by "Trojan.Win32.Delf.gh" Virus! Action Taken: No Action Taken. File C:\WINDOWS\Temporary Internet Files\Content.IE5\IOMCCTMI\AppWrap[1].exe infected by "Trojan-Dropper.Win32.Agent.pb" Virus! Action Taken: No Action Taken. File C:\WINDOWS\Temporary Internet Files\Content.IE5\U76B6D6F\AppWrap[2].exe.tcf infected by "Trojan-Downloader.Win32.Small.ru" Virus! Action Taken: No Action Taken. File C:\WINDOWS\Temporary Internet Files\Content.IE5\0X6ROP2V\woinstall[1].exe tagged as "not-a-virus:AdWare.EZula.ak". Action Taken: No Action Taken. File C:\WINDOWS\Temporary Internet Files\Content.IE5\2T0V8N0H\AppWrap[1].exe infected by "Trojan-Dropper.Win32.Agent.pb" Virus! Action Taken: No Action Taken. File C:\WINDOWS\All Users\Application Data\Spybot - Search & Destroy\Recovery\SecondThoughtSTCLoader.zip infected by "Password-protected-EXE" Virus! Action Taken: No Action Taken. File C:\WINDOWS\SG tagged as "not-a-virus:AdWare.UrlSpy.b". Action Taken: No Action Taken. File C:\WINDOWS\pi1_51.exe infected by "Trojan-Downloader.Win32.Small.aal" Virus! Action Taken: No Action Taken. File C:\WINDOWS\Osaka.exe tagged as "not-a-virus:AdWare.PurityScan.w". Action Taken: No Action Taken. File C:\WINDOWS\dsr.exe.tcf tagged as "not-a-virus:AdWare.ToolBar.ImiBar.h". Action Taken: No Action Taken. File C:\WINDOWS\icont.exe.tcf tagged as "not-a-virus:AdWare.AdURL.c". Action Taken: No Action Taken. File C:\WINDOWS\oeprfjog.exe tagged as "not-a-virus:AdWare.BookedSpace.e". Action Taken: No Action Taken. File C:\WINDOWS\InstallAPS.exe infected by "Trojan-Dropper.Win32.Agent.lu" Virus! Action Taken: No Action Taken. File C:\WINDOWS\btnetw3-254804.exe tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.i". Action Taken: No Action Taken. File C:\WINDOWS\dinst.exe infected by "Trojan-Downloader.Win32.Intexp.d" Virus! Action Taken: No Action Taken. File C:\WINDOWS\dsr.dll tagged as "not-a-virus:AdWare.ToolBar.ImiBar.h". Action Taken: No Action Taken. File C:\_RESTORE\TEMP\AEKRNL32.0 tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\_RESTORE\TEMP\ASCODC32.0 tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\_RESTORE\TEMP\SII_CI32.0 tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\_RESTORE\TEMP\MYEXCH40.0 tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\_RESTORE\TEMP\DNIMAN.0 tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\_RESTORE\TEMP\NOSWAN32.0 tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\_RESTORE\TEMP\WCADMOE.0 tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\_RESTORE\TEMP\COFVIEW.0 tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\_RESTORE\TEMP\HKOPCF01.0 tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\_RESTORE\TEMP\DIDPMESH.0 tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\_RESTORE\TEMP\WNV3IS.0 tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\_RESTORE\TEMP\RHCLTC1.0 tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\_RESTORE\TEMP\OOSLB400.0 tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\_RESTORE\TEMP\IUCDKEY.0 tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\Program Files\Common Files\SYSTEM\Mapi\1033\95\ezStub.exe tagged as "not-a-virus:AdWare.EZula.ar". Action Taken: No Action Taken. File C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\Quarantine\Quarantine - 07-09-2005 - 19-33-21.SBU tagged as "not-a-virus:AdWare.BetterInternet.d". Action Taken: No Action Taken. File C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\Quarantine\Quarantine - 07-10-2005 - 13-01-16.SBU tagged as "not-a-virus:AdWare.EZula.ak". Action Taken: No Action Taken. File C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\Quarantine\Quarantine - 07-12-2005 - 21-54-10.SBU tagged as "not-a-virus:AdWare.PurityScan.w". Action Taken: No Action Taken. File C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\Quarantine\Quarantine - 07-15-2005 - 16-25-18.SBU tagged as "not-a-virus:AdWare.PurityScan.w". Action Taken: No Action Taken. File C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\Quarantine\Quarantine - 07-17-2005 - 13-24-12.SBU tagged as "not-a-virus:AdWare.BookedSpace.e". Action Taken: No Action Taken. File C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\Quarantine\Quarantine - 07-17-2005 - 13-39-08.SBU tagged as "not-a-virus:AdWare.BookedSpace.e". Action Taken: No Action Taken. File C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\Quarantine\Quarantine - 07-17-2005 - 14-15-28.SBU tagged as "not-a-virus:AdWare.PurityScan.w". Action Taken: No Action Taken. File C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\Quarantine\Quarantine - 07-26-2005 - 17-31-49.SBU tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\Quarantine\Quarantine - 08-06-2005 - 18-35-59.SBU tagged as "not-a-virus:AdWare.Look2Me.ag". Action Taken: No Action Taken. File C:\Program Files\SurfAccuracy\SAccU.exe tagged as "not-a-virus:AdWare.SurfAccuracy.b". Action Taken: No Action Taken.
You have the latest version of VX2. Download L2mfix from one of these two locations:

http://www.atribune.org/downloads/l2mfix.exe
http://www.downloads.subratam.org/l2mfix.exe

Save the file to your desktop and double click l2mfix.exe. Click the Install button to extract the files and follow the prompts, then open the newly added l2mfix folder on your desktop. Double click l2mfix.bat and select option #1 for Run Find Log by typing 1 and then pressing enter. This will scan your computer and it may appear nothing is happening, then, after a minute or 2, notepad will open with a log. Copy the contents of that log and paste it into this thread.

IMPORTANT: Do NOT run option #2 OR any other files in the l2mfix folder until you are asked to do so!
Okay, I downloaded the file, installed it, and opened the new folder. The only icon I found that came close to l2mfix.bat was the MS-DOS batch file. I double clicked this and MS-DOS started but then notepad came up and gave me this message- "Not compatible with 9x or windows nt" :scratch:

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI