Hi!
Here's the hijack this log:
Logfile of HijackThis v1.99.1
Scan saved at 11:25:56, on 16/02/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\acer\epm\epm-dm.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\Thomas\Desktop\Hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.co.uk/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=566…B_PVER}&ar=home
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/
O4 - HKLM\..\Run: [epm-dm] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=48835
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
*********
here's the ewido log
**********
———————————————————
ewido anti-malware - Scan report
———————————————————
+ Created on: 11:21:26, 16/02/2006
+ Report-Checksum: C697F457
+ Scan result:
HKU\S-1-5-21-4059465761-2746999957-1675712423-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A19EF336-01D4-48E6-926A-FE7E1C747AED} -> Adware.MWSearch : Cleaned with backup
HKU\S-1-5-21-4059465761-2746999957-1675712423-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DA7FF3F8-08BE-4CAC-BC00-94D91C6AE7F4} -> Adware.MWSearch : Cleaned with backup
HKU\S-1-5-21-4059465761-2746999957-1675712423-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F65B197F-8260-4D52-909A-F70118E646EB} -> Adware.MWSearch : Cleaned with backup
C:\WINDOWS\Temp\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned with backup
C:\WINDOWS\Temp\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned with backup
C:\WINDOWS\Temp\Cookies\[removed][2].txt -> TrackingCookie.Reliablestats : Cleaned with backup
C:\WINDOWS\Temp\Cookies\thomas@starware[2].txt -> TrackingCookie.Starware : Cleaned with backup
C:\WINDOWS\Temp\Cookies\thomas@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : Cleaned with backup
C:\WINDOWS\Temp\Cookies\thomas@zedo[2].txt -> TrackingCookie.Zedo : Cleaned with backup
C:\WINDOWS\Temp\Cookies\thomas@statcounter[2].txt -> TrackingCookie.Statcounter : Cleaned with backup
C:\WINDOWS\Temp\Cookies\thomas@paypopup[2].txt -> TrackingCookie.Paypopup : Cleaned with backup
C:\WINDOWS\Temp\Cookies\[removed][1].txt -> TrackingCookie.Addynamix : Cleaned with backup
C:\WINDOWS\Temp\Cookies\[removed][2].txt -> TrackingCookie.Myaffiliateprogram : Cleaned with backup
C:\WINDOWS\Temp\Cookies\thomas@overture[2].txt -> TrackingCookie.Overture : Cleaned with backup
C:\WINDOWS\Temp\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\WINDOWS\Temp\Cookies\[removed][1].txt -> TrackingCookie.Pointroll : Cleaned with backup
C:\WINDOWS\azesearch.bmp -> Adware.Azesearch : Cleaned with backup
C:\WINDOWS\winsysupd8.exe -> Hijacker.StartPage.ahg : Cleaned with backup
C:\WINDOWS\winsysban8.exe -> Hijacker.VB.lg : Cleaned with backup
C:\WINDOWS\gimmygames.exe -> Downloader.VB.wd : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\thomas@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\[removed][2].txt -> TrackingCookie.Falkag : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Starware : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\thomas@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\thomas@ivwbox[1].txt -> TrackingCookie.Ivwbox : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Falkag : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\thomas@gateway.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\thomas@overture[1].txt -> TrackingCookie.Overture : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\thomas@com[2].txt -> TrackingCookie.Com : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\thomas@starware[2].txt -> TrackingCookie.Starware : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\thomas@adtech[2].txt -> TrackingCookie.Adtech : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\thomas@microsofteup.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\thomas@microsoftwga.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\[removed][2].txt -> TrackingCookie.Reliablestats : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\thomas@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\thomas@2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\thomas@clickbank[2].txt -> TrackingCookie.Clickbank : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\[removed][2].txt -> TrackingCookie.Falkag : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\Cookies\thomas@falkag[2].txt -> TrackingCookie.Falkag : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\temp.frE4BF -> Adware.Look2Me : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\i14.tmp -> Adware.SurfSide : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\temp.fr282E -> Adware.CommAd : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temp\temp.fr0A54 -> Adware.AzSearch : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temporary Internet Files\Content.IE5\G1AZO92J\install[1].htm -> Not-A-Virus.Exploit.HTML.CodeBaseExec : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temporary Internet Files\Content.IE5\G1AZO92J\stub_113_4_0_4_0[1].exe -> Downloader.TSUpdate.o : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temporary Internet Files\Content.IE5\WT67016F\winsysban8[1].exe -> Hijacker.VB.lg : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temporary Internet Files\Content.IE5\WT67016F\bridge-c32[1].cab/MediaGatewayX.dll -> Adware.WinAD : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temporary Internet Files\Content.IE5\KD2B81UF\gimmygames[1].exe -> Downloader.VB.wd : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temporary Internet Files\Content.IE5\KD2B81UF\MediaGateway[1].exe -> Adware.WinAD : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temporary Internet Files\Content.IE5\SXURG9YV\drsmartload[1].exe -> Downloader.VB.wr : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temporary Internet Files\Content.IE5\SXURG9YV\ucmoreiex[1].exe/UCMTSAIE.DLL -> Adware.Ucmore : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temporary Internet Files\Content.IE5\SXURG9YV\ucmoreiex[1].exe/IUCMORE.DLL -> Adware.Ucmore : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temporary Internet Files\Content.IE5\1O8VX185\ysb_cracks[1].cab/YSBactivex.dll -> Downloader.IstBar : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temporary Internet Files\Content.IE5\MXBWTGN6\istdownload[1].exe -> Downloader.IstBar.or : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temporary Internet Files\Content.IE5\MXBWTGN6\winsysupd8[1].exe -> Hijacker.StartPage.ahg : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temporary Internet Files\Content.IE5\RJ9NNPWW\azesearch[1].cab/azesearch4.ocx -> Adware.AzSearch : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temporary Internet Files\Content.IE5\WTA7KTQ3\drdata[1].avi -> Dropper.Agent.aac : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temporary Internet Files\Content.IE5\WTA7KTQ3\Installer[1].exe -> Adware.Look2Me : Cleaned with backup
C:\Documents and Settings\Thomas\Local Settings\Temporary Internet Files\Content.IE5\K5YNWP6B\MTE3NDI6ODoxNg[1].exe -> Downloader.Small.buy : Cleaned with backup
C:\Documents and Settings\Thomas\Desktop\l2mfix\dlls\hr6005jme.dll -> Adware.Look2Me : Cleaned with backup
C:\Documents and Settings\Thomas\Desktop\l2mfix\dlls\j4n2le5o1h.dll -> Adware.Look2Me : Cleaned with backup
C:\Documents and Settings\Thomas\Desktop\l2mfix\dlls\kndhela2.dll -> Adware.Look2Me : Cleaned with backup
C:\Documents and Settings\Thomas\Desktop\l2mfix\backup.zip/dlls/hr6005jme.dll -> Adware.Look2Me : Cleaned with backup
C:\Documents and Settings\Thomas\Desktop\l2mfix\backup.zip/dlls/j4n2le5o1h.dll -> Adware.Look2Me : Cleaned with backup
C:\Documents and Settings\Thomas\Desktop\l2mfix\backup.zip/dlls/kndhela2.dll -> Adware.Look2Me : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\thomas@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\thomas@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\thomas@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\thomas@powellsbooks.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][1].txt -> TrackingCookie.Webtrendslive : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\thomas@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][1].txt -> TrackingCookie.Adjuggler : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][1].txt -> TrackingCookie.Falkag : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\thomas@com[2].txt -> TrackingCookie.Com : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][1].txt -> TrackingCookie.Euroclick : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][1].txt -> TrackingCookie.Reliablestats : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\thomas@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][1].txt -> TrackingCookie.Abcsearch : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\thomas@ivwbox[1].txt -> TrackingCookie.Ivwbox : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\thomas@112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][2].txt -> TrackingCookie.Specificclick : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][2].txt -> TrackingCookie.Liveperson : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\thomas@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\thomas@burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][2].txt -> TrackingCookie.Addynamix : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\thomas@122.2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][1].txt -> TrackingCookie.Com : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][2].txt -> TrackingCookie.Onestat : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\thomas@paypopup[2].txt -> TrackingCookie.Paypopup : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\thomas@statcounter[2].txt -> TrackingCookie.Statcounter : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][1].txt -> TrackingCookie.Falkag : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][2].txt -> TrackingCookie.Hitslink : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned with backup
C:\Documents and Settings\Thomas\Cookies\[removed][2].txt -> TrackingCookie.Myaffiliateprogram : Cleaned with backup
C:\Program Files\Common Files\ziru\zirul.exe -> Downloader.TSUpdate.p : Cleaned with backup
C:\Program Files\Common Files\ziru\zirup.exe -> Downloader.TSUpdate.f : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP22\A0003118.ocx -> Adware.AzSearch : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP22\A0003121.exe -> Adware.Maxifiles : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP22\A0003124.dll -> Adware.Softomate : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP22\A0003260.exe -> Downloader.TSUpdate.n : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP22\A0003261.exe -> Downloader.TSUpdate.l : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP22\A0003262.exe -> Dropper.Agent.aac : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP22\A0003263.exe -> Dropper.Agent.aac : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP22\A0003265.dll -> Adware.AzSearch : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP22\A0003269.exe -> Downloader.TSUpdate.o : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP22\A0003270.exe -> Downloader.Small.buy : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP22\A0003271.exe -> Adware.Look2Me : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP22\A0003272.exe/UCMTSAIE.DLL -> Adware.Ucmore : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP22\A0003272.exe/IUCMORE.DLL -> Adware.Ucmore : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP23\snapshot\MFEX-3.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP23\snapshot\MFEX-4.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP23\snapshot\MFEX-6.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP23\snapshot\MFEX-7.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP23\snapshot\MFEX-8.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP23\snapshot\MFEX-9.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP23\snapshot\MFEX-10.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP23\snapshot\MFEX-14.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP23\snapshot\MFEX-15.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP23\snapshot\MFEX-16.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP23\snapshot\MFEX-17.DAT -> Adware.AzSearch : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP23\snapshot\MFEX-18.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP23\snapshot\MFEX-19.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP23\snapshot\MFEX-20.DAT -> Adware.AzSearch : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP23\snapshot\MFEX-27.DAT -> Adware.AzSearch : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\snapshot\MFEX-3.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\snapshot\MFEX-4.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\snapshot\MFEX-6.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\snapshot\MFEX-7.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\snapshot\MFEX-8.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\snapshot\MFEX-9.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\snapshot\MFEX-10.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\snapshot\MFEX-14.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\snapshot\MFEX-15.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\snapshot\MFEX-16.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\snapshot\MFEX-17.DAT -> Adware.AzSearch : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\snapshot\MFEX-18.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\snapshot\MFEX-19.DAT -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\snapshot\MFEX-20.DAT -> Adware.AzSearch : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\snapshot\MFEX-27.DAT -> Adware.AzSearch : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\A0003274.exe -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\A0003276.exe -> Dropper.Small.qn : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\A0003281.dll -> Adware.Look2Me : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\A0003282.dll -> Adware.CommAd : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\A0003283.ocx -> Adware.AzSearch : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\A0003291.exe -> Not-A-Virus.Monitor.Win32.NetMon.a : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\A0003295.dll -> Adware.Look2Me : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP24\A0003302.dll -> Adware.Look2Me : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP25\A0003331.dll -> Adware.Look2Me : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP25\A0003338.dll -> Adware.Look2Me : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP25\A0003344.dll -> Adware.Look2Me : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP25\A0003349.dll -> Adware.Look2Me : Cleaned with backup
C:\System Volume Information\_restore{5048752E-8B9D-4D38-9746-740A3119D38F}\RP25\A0003350.dll -> Adware.Look2Me : Cleaned with backup
C:\drsmartload1.exe -> Downloader.VB.wr : Cleaned with backup
C:\gimmygames.exe -> Downloader.VB.wd : Cleaned with backup
::Report End
Thanks once again!!
tom
