Spyware / Malware / Virus Removal

HELP! Teenagers + Internet = very slow computer

9 min read

Looking for the outcome? Ask AI

skigirl33

Post #16September 13, 2005, 5:47 AM UTC

WOW - Ewido cleaned 167 items. I had run all the other scans today and was getting the "congratulations!" message. Must be the safe mode. Anyway, my logs are posted below.

My internet connection is still timing out when trying to reach google. This is happening with both Mozilla and IE. I can ping it fine. Slow, slow, slow response when bringing up webpages.

Thanks for sticking with me on this.

———————————————————
ewido security suite - Scan report
———————————————————

+ Created on: 12:28:19 AM, 9/13/2005
+ Report-Checksum: 874F9F04

+ Scan result:

HKLM\SOFTWARE\Classes\Interface\{9603A736-05B9-4D78-BDD5-BDCB0914E522} -> Spyware.WurldMedia : Cleaned with backup
HKLM\SOFTWARE\Classes\PROTOCOLS\Name-Space Handler\res -> Spyware.WebSearch : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\STO -> Spyware.WebSearch : Cleaned with backup
:mozilla.20:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.21:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.22:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.23:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.24:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.25:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.26:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.27:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.28:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.29:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.30:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.31:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.32:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.33:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.34:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.35:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.36:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.37:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.38:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.39:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.42:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.43:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.69:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.77:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.78:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.79:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.84:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.88:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
:mozilla.89:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
:mozilla.92:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Valuead : Cleaned with backup
:mozilla.93:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Valuead : Cleaned with backup
:mozilla.94:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Valuead : Cleaned with backup
:mozilla.101:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.107:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.108:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.110:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.166:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.167:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.168:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.169:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Pro-market : Cleaned with backup
:mozilla.170:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Pro-market : Cleaned with backup
:mozilla.171:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Pro-market : Cleaned with backup
:mozilla.174:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.175:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.179:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.198:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.199:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.200:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.201:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.205:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.206:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.221:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.222:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.223:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.224:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.225:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.227:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.234:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Valuead : Cleaned with backup
:mozilla.235:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Valuead : Cleaned with backup
:mozilla.251:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.252:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.253:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.254:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.255:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.262:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.263:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.264:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.265:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.266:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.273:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.311:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Adjuggler : Cleaned with backup
:mozilla.314:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.315:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.316:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.317:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.320:C:\Documents and Settings\Bill\Application Data\Mozilla\Firefox\Profiles\ywbjv1hp.default\cookies.txt -> Spyware.Cookie.Adjuggler : Cleaned with backup
:mozilla.6:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.7:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.8:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.9:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.10:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.11:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.19:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.20:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.22:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
:mozilla.23:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
:mozilla.28:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.29:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.30:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.53:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.54:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.55:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.56:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.65:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.66:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.67:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.68:C:\Documents and Settings\Bill\Application Data\Mozilla\Profiles\default\zcgsvbgf.slt\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.8:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.12:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.13:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.14:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
:mozilla.15:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
:mozilla.20:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.21:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.22:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.23:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.24:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.25:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.26:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.27:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.28:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.29:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.30:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.33:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.34:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.36:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.41:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Lop : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Lop : Cleaned with backup
:mozilla.46:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.47:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Lop : Cleaned with backup
:mozilla.48:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Firefox\Profiles\w3s6de1h.default\cookies.txt -> Spyware.Cookie.Bluestreak : Cleaned with backup
:mozilla.20:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.21:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.22:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.23:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.24:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.25:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.26:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.27:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.30:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.36:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.37:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.38:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.39:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.40:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.43:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
:mozilla.51:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.52:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.53:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.55:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.58:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Clickhype : Cleaned with backup
:mozilla.59:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Paycounter : Cleaned with backup
:mozilla.60:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Bfast : Cleaned with backup
:mozilla.62:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.63:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.72:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.73:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.74:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.79:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.80:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Mozilla\Profiles\default\rpxa6ua6.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.9:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Netscape\NSB\Profiles\en84xat1.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.10:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Netscape\NSB\Profiles\en84xat1.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.11:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Netscape\NSB\Profiles\en84xat1.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.12:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Netscape\NSB\Profiles\en84xat1.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.13:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Netscape\NSB\Profiles\en84xat1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.14:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Netscape\NSB\Profiles\en84xat1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.15:C:\Documents and Settings\Nate.KAREN-DENCOMP\Application Data\Netscape\NSB\Profiles\en84xat1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
C:\USWINST\TOOLS\reboot95.exe -> Trojan.Reboot : Cleaned with backup
C:\WINDOWS\aac.exe -> Trojan.Imiserv.c : Cleaned with backup
C:\WINDOWS\exactoffer.exe -> Trojan.Imiserv.c : Cleaned with backup
C:\WINDOWS\inviteabi.exe -> Trojan.Imiserv.c : Cleaned with backup
C:\WINDOWS\tbdr.exe -> Trojan.Imiserv.c : Cleaned with backup

::Report End

Logfile of HijackThis v1.99.1
Scan saved at 12:34:15 AM, on 9/13/05
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Network ICE\BlackICE\blackd.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\Program Files\Canon\MultiPASS\mpservic.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\Karen\Desktop\hijackthisnewfolder\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS…er.cab31267.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} - http://security1.norton.com/SSC/SharedCont…bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab
O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} (DmiReader Class) - http://support.dell.com/us/en/systemprofiler/SysProfLcd.CAB
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security1.norton.com/SSC/SharedCont…c/bin/cabsa.cab
O16 - DPF: {DA758BB1-5F89-4465-975F-8D7179A4BCF3} (WheelofFortune Object) - http://messenger.zone.msn.com/binary/WoF.cab31267.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} - https://www-secure.symantec.com/techsupp/ac…/ActiveData.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2A8DF2E6-A5FA-4E49-A6AE-4F1F4F76C362}: NameServer = 10.6.2.100,10.8.6.200
O17 - HKLM\System\CCS\Services\Tcpip\..\{4004FEF9-F761-4D78-8E86-752CC9C12D4A}: Domain = qwest.net
O17 - HKLM\System\CCS\Services\Tcpip\..\{72B9CD7B-9EDC-48C7-A414-3B600AB217A9}: Domain = alltel.net
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = uswc.uswest.com,qwest.net,quintra.net
O23 - Service: BlackICE - Internet Security Systems, Inc. - C:\Program Files\Network ICE\BlackICE\blackd.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: Contivity VPN Service (ExtranetAccess) - Nortel Networks NA, Inc. - C:\Program Files\Qwest Virtual Remote Access\Extranet_serv.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: MPService - Canon Information Systems - C:\Program Files\Canon\MultiPASS\mpservic.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: RapApp - Internet Security Systems, Inc. - C:\Program Files\Network ICE\BlackICE\RapApp.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

skigirl33

Post #17September 13, 2005, 7:30 AM UTC

I should also add that when my browser is trying to get to google, it translates the name into an ip address and I see it down in the status bar. I just tried it again and got a page cannot be displayed error, but I know my connection is up. thx again

skigirl33

Post #18September 13, 2005, 7:11 PM UTC

More information on what is going on: When I use IE and try to connect to google (my homepage) I get a message in the status bar "connecting to 64.233.167.104". I looked up google's ip address and it is 216.239.57.99. So, there is some kind of hijack going on.

When I use Mozilla it just times out.

I am also timing out when going to other sites like lycos or yahoo.

Also, what is teatimer? I see it in my log but don't remember seeing it before.

I have attached a fresh HJT log below:

Logfile of HijackThis v1.99.1
Scan saved at 2:07:09 PM, on 9/13/05
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Network ICE\BlackICE\blackd.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\Program Files\Canon\MultiPASS\mpservic.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Common Files\Symantec Shared\NMain.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\Karen\Desktop\hijackthisnewfolder\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS…er.cab31267.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} - http://security1.norton.com/SSC/SharedCont…bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab
O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} (DmiReader Class) - http://support.dell.com/us/en/systemprofiler/SysProfLcd.CAB
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security1.norton.com/SSC/SharedCont…c/bin/cabsa.cab
O16 - DPF: {DA758BB1-5F89-4465-975F-8D7179A4BCF3} (WheelofFortune Object) - http://messenger.zone.msn.com/binary/WoF.cab31267.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} - https://www-secure.symantec.com/techsupp/ac…/ActiveData.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2A8DF2E6-A5FA-4E49-A6AE-4F1F4F76C362}: NameServer = 10.6.2.100,10.8.6.200
O17 - HKLM\System\CCS\Services\Tcpip\..\{4004FEF9-F761-4D78-8E86-752CC9C12D4A}: Domain = qwest.net
O17 - HKLM\System\CCS\Services\Tcpip\..\{72B9CD7B-9EDC-48C7-A414-3B600AB217A9}: Domain = alltel.net
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = uswc.uswest.com,qwest.net,quintra.net
O23 - Service: BlackICE - Internet Security Systems, Inc. - C:\Program Files\Network ICE\BlackICE\blackd.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: Contivity VPN Service (ExtranetAccess) - Nortel Networks NA, Inc. - C:\Program Files\Qwest Virtual Remote Access\Extranet_serv.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: MPService - Canon Information Systems - C:\Program Files\Canon\MultiPASS\mpservic.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: RapApp - Internet Security Systems, Inc. - C:\Program Files\Network ICE\BlackICE\RapApp.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

LDTate

Post #19September 13, 2005, 10:09 PM UTC

[removed]

Blacklist Status: Clear - Last blocked 2005-03-07 (history)
Cached Whois: Cached today
Whois History: 305 records stored
Oldest: 2004-04-02
Newest: 2005-09-13
Record Type: IP Address
IP Location: United States - California - Mountain View - Google Inc
Reverse IP: Web server hosts 8 websites (reverse ip tool requires free login)
Reverse DNS: not set

http://www.whois.sc/64.233.167.104

Also, what is teatimer? It's part of SpyBot. It's agood program.

Have you talked to you ISP?
If you have a cable modem / router, unplug the power from them and wait 5 mins and plug the power back in.

skigirl33

Post #20September 14, 2005, 4:50 AM UTC

I have a speedstream modem for my DSL connection and a linksys router. I am resetting both. My kids told me tonight that they can't get google to come in on their computers at home either, but they work at school. I also cannot reach it from my work laptop when using my home network, and I know that my work laptop is clean. So, that is 4 computers at my house unable to bring google up. Must be a network thing. Will try the router and modem reset and talk to my isp if that doesn't work. Everything else seems to be fine. Thanks for your help.

skigirl33

Post #21September 14, 2005, 10:49 AM UTC

I reset my modem and router and my computer is running at lightning speed. All seems to be well Thanks for your help!

LDTate

Post #22September 14, 2005, 12:02 PM UTC

I think we did this already, but it's my clean speech

Good Job

Log looks good

How is it running any issues?

Note: This will remove all previous Restore Points

Turn off System Restore:

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

Restart your computer, turn it back on.

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Remove the Check Turn off System Restore.
Click Apply, and then click OK.

Click Start> My Computer, select the Tools menu and then Folder Options, after the new window appears select the View tab…]
This time select the: Restore Defaults
Select: Apply, and click OK

If you dont have these three programs I would recommend that you get them. Spywareblaster, Spywareguard and IESPY AD. They will add 1000's of sites to your resticted zone and block some hijacks from happening. I also have a FREE FIREWALL and FREE ANTI VIRUS if you need one.

It is critical to have both a firewall and anti virus to protect your system.

Keep your system up to date and run Adaware & Spybot, once a week works, and hopefully you will be ok from here on. Both are available below.

Safe Surfing.

LDTate

Post #23September 16, 2005, 1:27 AM UTC

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

HELP! Teenagers + Internet = very slow computer

✨ Ask AI

Ask AI