Spyware / Malware / Virus Removal

PSGuard Desktop Hijacker

7 min read

Looking for the outcome? Ask AI

pflantzbaum Topic Starter

Post #1February 27, 2006, 2:12 AM UTC

I used Spyware Doctor to clear up my computer, and it got rid of PSGuard Desktop Hijacker, but my desktop background is still all white (even though the annoying spyware message is gone).

As suggested in the self-help section, I ran Spybot v 1.4 and Ad-aware SE Build 1.06, as well as ewido anti-malware.

Here is my ewido report:

———————————————————
ewido anti-malware - Scan report
———————————————————

+ Created on: 8:42:22 PM, 2/26/2006
+ Report-Checksum: A6A59BE4

+ Scan result:

C:\Documents and Settings\Bob\Cookies\bob@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Ignored
C:\Documents and Settings\Bob\Cookies\bob@2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Bob\Cookies\bob@advertising[2].txt -> TrackingCookie.Advertising : Cleaned with backup
C:\Documents and Settings\Bob\Cookies\bob@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup
C:\Documents and Settings\Bob\Cookies\bob@centrport[1].txt -> TrackingCookie.Centrport : Cleaned with backup
C:\Documents and Settings\Bob\Cookies\[removed][1].txt -> TrackingCookie.Bridgetrack : Cleaned with backup
C:\Documents and Settings\Bob\Cookies\bob@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup
C:\Documents and Settings\Bob\Cookies\bob@edge.ru4[2].txt -> TrackingCookie.Ru4 : Cleaned with backup
C:\Documents and Settings\Bob\Cookies\bob@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup
C:\Documents and Settings\Bob\Cookies\bob@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned with backup
C:\Documents and Settings\Bob\Cookies\bob@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned with backup
C:\Documents and Settings\Bob\Cookies\bob@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned with backup
C:\Documents and Settings\Bob\Cookies\[removed][1].txt -> TrackingCookie.Adserver : Cleaned with backup
C:\Documents and Settings\Bob\Cookies\bob@zedo[2].txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.16:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.31:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.32:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.33:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.34:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.37:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.38:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.39:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.40:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.41:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.42:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.43:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.45:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.46:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.47:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.48:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.49:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.50:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.51:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.52:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.53:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.54:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.55:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.56:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.57:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.58:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.83:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.101:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.102:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Revenue : Cleaned with backup
:mozilla.111:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.112:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.123:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.124:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned with backup
:mozilla.128:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.129:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.131:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.151:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.152:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.158:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.159:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.161:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.167:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.188:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.189:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.190:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.202:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.203:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.204:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.205:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.206:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.222:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned with backup
:mozilla.247:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.248:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Commission-junction : Cleaned with backup
:mozilla.249:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Commission-junction : Cleaned with backup
:mozilla.251:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.252:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.253:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.266:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.267:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.268:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.269:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.273:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
:mozilla.274:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
:mozilla.300:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.319:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.320:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.321:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Goclick : Cleaned with backup
:mozilla.322:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Goclick : Cleaned with backup
:mozilla.325:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.335:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.340:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.348:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned with backup
:mozilla.352:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.369:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.370:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.378:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.379:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.380:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.381:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.399:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Centrport : Cleaned with backup
:mozilla.400:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Centrport : Cleaned with backup
:mozilla.407:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.411:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.412:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.413:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.416:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.417:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.420:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Abcsearch : Cleaned with backup
:mozilla.421:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Abcsearch : Cleaned with backup
:mozilla.422:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.423:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.424:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.425:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.426:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.427:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.428:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.429:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.432:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.433:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.434:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.435:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.436:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.439:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.440:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.441:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.442:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.445:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.453:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.454:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.455:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.457:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.458:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.459:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.460:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.461:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.462:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.467:C:\Documents and Settings\Kate\Application Data\Mozilla\Firefox\Profiles\7euxqbhe.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@abcsearch[1].txt -> TrackingCookie.Abcsearch : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][1].txt -> TrackingCookie.Specificclick : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@adrevolver[2].txt -> TrackingCookie.Adrevolver : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][1].txt -> TrackingCookie.Addynamix : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][2].txt -> TrackingCookie.Pointroll : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@advertising[1].txt -> TrackingCookie.Advertising : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@burstnet[2].txt -> TrackingCookie.Burstnet : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][2].txt -> TrackingCookie.Goclick : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@centrport[2].txt -> TrackingCookie.Centrport : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][1].txt -> TrackingCookie.Bridgetrack : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@cnn.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@commission-junction[2].txt -> TrackingCookie.Commission-junction : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@cratebarrel.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][1].txt -> TrackingCookie.Coremetrics : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][2].txt -> TrackingCookie.Overture : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@doubleclick[2].txt -> TrackingCookie.Doubleclick : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@edge.ru4[1].txt -> TrackingCookie.Ru4 : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@marthastewart.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@mediaplex[2].txt -> TrackingCookie.Mediaplex : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@overture[1].txt -> TrackingCookie.Overture : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@polo.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@qksrv[2].txt -> TrackingCookie.Qksrv : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@revenue[1].txt -> TrackingCookie.Revenue : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][2].txt -> TrackingCookie.Liveperson : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@sonycorporate.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][2].txt -> TrackingCookie.Onestat : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@statcounter[2].txt -> TrackingCookie.Statcounter : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][2].txt -> TrackingCookie.Webtrendslive : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][1].txt -> TrackingCookie.Coremetrics : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@trafficmp[2].txt -> TrackingCookie.Trafficmp : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@valueclick[2].txt -> TrackingCookie.Valueclick : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@valueclick[3].txt -> TrackingCookie.Valueclick : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\[removed][2].txt -> TrackingCookie.Adserver : Cleaned with backup
C:\Documents and Settings\Kate\Cookies\kate@zedo[1].txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.6:C:\Documents and Settings\Matt\Application Data\Mozilla\Profiles\default\b9aohxcs.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.7:C:\Documents and Settings\Matt\Application Data\Mozilla\Profiles\default\b9aohxcs.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.10:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.11:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.12:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.13:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.15:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.16:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.17:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.18:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.19:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.20:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.21:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.22:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.23:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.24:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.25:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.26:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.27:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.28:C:\Documents and Settings\Matt\Application Data\Netscape\NSB\Profiles\c3p7p997.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
C:\Documents and Settings\Matt\Cookies\[removed][2].txt -> TrackingCookie.Specificclick : Cleaned with backup
C:\Documents and Settings\Matt\Cookies\matt@findwhat[1].txt -> TrackingCookie.Findwhat : Cleaned with backup
C:\Documents and Settings\Matt\Cookies\[removed][1].txt -> TrackingCookie.Masterstats : Cleaned with backup
C:\Documents and Settings\Matt\Cookies\matt@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned with backup
C:\Documents and Settings\Matt\Cookies\matt@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned with backup
C:\Documents and Settings\Matt\Cookies\matt@webstat[1].txt -> TrackingCookie.Web-stat : Cleaned with backup
C:\Documents and Settings\Matt\Cookies\[removed][1].txt -> TrackingCookie.Myaffiliateprogram : Cleaned with backup

::Report End

And here is my Hijack This log:

Logfile of HijackThis v1.99.1
Scan saved at 8:52:02 PM, on 2/26/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
D:\Prog Files\ewido anti-malware\ewidoctrl.exe
D:\Prog Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\Sony\Giga Pocket\shwserv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\HPZipm12.exe
D:\Prog Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCdb\VzFw.exe
C:\Program Files\Sony\Giga Pocket\RM_SV.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\VERIZO~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\progra~1\yahoo!\YCentral\YahooCentral.exe
C:\Program Files\Mercora\MercoraClient.exe
D:\Prog Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AWS\WeatherBug\Weather.exe
C:\WINDOWS\system32\wuauclt.exe
D:\PROGFI~1\SPYWAR~1\swdoctor.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Sony\Keyboard Closure Setup\KSWServ.exe
C:\Program Files\sony\usbsircs\usbsircs.exe
C:\Program Files\Sony\VAIO Action Setup\VAServ.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Verizon Online\bin\mpbtn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Matt\Desktop\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mail.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sony.com/vaiopeople
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.sony.com/vaiopeople
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Prog Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - D:\PROGFI~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - D:\PROGFI~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\System32\khooker.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [VAIO Update 2] "C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe" /Stationary
O4 - HKLM\..\Run: [VAIO Recovery] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\VERIZO~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [YCentral] c:\progra~1\yahoo!\YCentral\YahooCentral.exe
O4 - HKLM\..\Run: [Mercora] "C:\Program Files\Mercora\MercoraClient.exe" -startup
O4 - HKLM\..\Run: [iTunesHelper] "D:\Prog Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AlfaCleaner] C:\Program Files\AlfaCleaner\AlfaCleaner.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [ANONYMIZER_SPYWAREKILLER] C:\Program Files\SpyWare Killer\spywarekiller.exe /BOOT
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [Spyware Doctor] D:\PROGFI~1\SPYWAR~1\swdoctor.exe /Q
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Keyboard Closure Setup.lnk = ?
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Remocon Driver.lnk = ?
O4 - Global Startup: VAIO Action Setup (Server).lnk = ?
O4 - Global Startup: Verizon Online Support Center.lnk = C:\Program Files\Verizon Online\bin\matcli.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - D:\PROGFI~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {ED28050F-D713-43BA-A376-DCC5C35407D5} (MsnMusicAx Class) - https://music.msn.com/client/msnmusax3518.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - D:\Prog Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - D:\Prog Files\ewido anti-malware\ewidoguard.exe
O23 - Service: Giga Pocket Hardware Detector - Sony Corporation - C:\Program Files\Sony\Giga Pocket\shwserv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\PACSPT~1.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - D:\Prog Files\Spyware Doctor\sdhelp.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Sony TV Tuner Controller - Sony Corporation - C:\Program Files\Sony\Giga Pocket\halsv.exe
O23 - Service: Sony TV Tuner Manager - Sony Corporation - C:\Program Files\Sony\Giga Pocket\RM_SV.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: VAIO Entertainment Aggregation and Control Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe
O23 - Service: VAIO Entertainment File Import Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCdb\VzFw.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VCSW\VCSW.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-IntegratedServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\IntegratedServer\HTTP (file missing)
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Platform\VmGateway.exe" /Service=VAIOMediaPlatform-Mobile-Gateway /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Addons\Packages\Mobile\Gateway" /DisplayName="VAIO Media Gateway Server (file missing)
O23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Video\GPVSvr.exe" /Service=VAIOMediaPlatform-VideoServer-AppServer /DisplayName="VAIO Media Video Server (file missing)
O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-VideoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\VideoServer\HTTP (file missing)
O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\Platform\UPnPFramework.exe

Please let me know what you can do to help.

Thanks,
Matt

LDTate

Post #2March 6, 2006, 10:49 PM UTC

Hello pflantzbaum, welcome to the forum.

I suggest you do this:

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Clear "Hide file extensions for known file types."
Under the "Hidden files" folder, select "Show hidden files and folders."
Clear "Hide protected operating system files."
Click Apply, and then click OK.

Please do not delete anything unless instructed to.

1.Click Start > Settings > Control Panel.
2.Next, open Add/Remove Programs and remove if listed:
AlfaCleaner

Run hijackthis. Hit None of the above, Click Do a System Scan Only. Put a Check in the box on the left side on these:

O4 - HKLM\..\Run: [AlfaCleaner] C:\Program Files\AlfaCleaner\AlfaCleaner.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

Close ALL windows and browsers except HijackThis and click "Fix checked"

Open C:\Windows\Prefetch\ Delete ALL files in this folder.

In the Control Panel click Display > Desktop > Customize desktop > Website > Uncheck "Security Info" if present.

Do this also if these Temp Folders are part of your OS.

Also in safe mode navigate to the C:\Windows\Temp folder. Open the Temp folder and go to Edit > Select All then Edit > Delete to delete the entire contents of the Temp folder.

Next navigate to the C:\Documents and Settings\(EVERY LISTED PROFILE USER)\Local Settings\Temp folder. Open the Temp folder and go to Edit > Select All then Edit > Delete to delete the entire contents of the Temp folder.

Finally go to Control Panel > Internet Options. On the General tab under "Temporary Internet Files" Click "Delete Files". Put a check by "Delete Offline Content" and click OK. Click on the Programs tab then click the "Reset Web Settings" button. Click Apply then OK.

Empty the Recycle Bin

Reboot and "copy/paste" a new HijackThis log file into this thread.

Also please describe how your computer behaves at the moment.

pflantzbaum

Post #3March 6, 2006, 11:09 PM UTC

Hi, LDTate Thanks for your reply. My mother's computer is the one with the problem, and I won't be there again until the weekend – but I will follow your directions as soon as I can! Also, the only other problem I've noticed is that when I go to the Start menu and click on Log Off, I only get one choice: to log off. I used to have the choice to switch users also. Please let me know if there's anything further I should do to solve that. Thanks, Matt

LDTate

Post #4March 6, 2006, 11:13 PM UTC

used to have the choice to switch users also. Please let me know if there's anything further I should do to solve that.

My guess is it's only seeing one user. You can also try Spysweeper after doing what I posted first.

Download the trial version of Spy Sweeper from Here

Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it. If you receive alerts from your firewall, allow all activities for Spy Sweeper)

You will be prompted to check for updated definitions, please do so.
(This may take several minutes)

Click on Options > Sweep Options and check Sweep all Folders on Selected drives. Check Local Disc C. Under What to Sweep, check every box.

Click on Sweep and allow it to fully scan your system.If you are prompted to restart the computer, do so immediately. This is a necessary step to kill the infection!

When the sweep has finished, click Remove. Click Select All and then Next

From 'Results', select the Session Log tab. Click Save to File and save the log somewhere convenient.

Exit Spy Sweeper.

pflantzbaum

Post #5March 13, 2006, 1:44 AM UTC

LDTate,

I followed all your instructions in both of your replies. My background is still white and the log off option still doesn't give me the swap option. And it seems to be taking a long time for programs like HijackThis and Internet Explorer to start up.

Here is my latest HijackThis log file:

Logfile of HijackThis v1.99.1
Scan saved at 8:31:11 PM, on 3/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\VERIZO~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\progra~1\yahoo!\YCentral\YahooCentral.exe
C:\Program Files\Mercora\MercoraClient.exe
D:\Prog Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\AWS\WeatherBug\Weather.exe
D:\PROGFI~1\SPYWAR~1\swdoctor.exe
C:\Program Files\Messenger\msmsgs.exe
D:\Prog Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Sony\Keyboard Closure Setup\KSWServ.exe
C:\Program Files\sony\usbsircs\usbsircs.exe
C:\Program Files\Sony\VAIO Action Setup\VAServ.exe
C:\Program Files\Sony\Giga Pocket\shwserv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\HPZipm12.exe
D:\Prog Files\Spyware Doctor\sdhelp.exe
C:\Program Files\Verizon Online\bin\mpbtn.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCdb\VzFw.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Sony\Giga Pocket\RM_SV.exe
C:\WINDOWS\System32\alg.exe
C:\Documents and Settings\Matt\Desktop\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sony.com/vaiopeople
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sony.com/vaiopeople
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.sony.com/vaiopeople
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Prog Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - D:\PROGFI~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - D:\PROGFI~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\System32\khooker.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [VAIO Update 2] "C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe" /Stationary
O4 - HKLM\..\Run: [VAIO Recovery] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\VERIZO~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [YCentral] c:\progra~1\yahoo!\YCentral\YahooCentral.exe
O4 - HKLM\..\Run: [Mercora] "C:\Program Files\Mercora\MercoraClient.exe" -startup
O4 - HKLM\..\Run: [iTunesHelper] "D:\Prog Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [ANONYMIZER_SPYWAREKILLER] C:\Program Files\SpyWare Killer\spywarekiller.exe /BOOT
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [Spyware Doctor] D:\PROGFI~1\SPYWAR~1\swdoctor.exe /Q
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Keyboard Closure Setup.lnk = ?
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Remocon Driver.lnk = ?
O4 - Global Startup: VAIO Action Setup (Server).lnk = ?
O4 - Global Startup: Verizon Online Support Center.lnk = C:\Program Files\Verizon Online\bin\matcli.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - D:\PROGFI~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {ED28050F-D713-43BA-A376-DCC5C35407D5} (MsnMusicAx Class) - https://music.msn.com/client/msnmusax3518.cab
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - D:\Prog Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: Giga Pocket Hardware Detector - Sony Corporation - C:\Program Files\Sony\Giga Pocket\shwserv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\PACSPT~1.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - D:\Prog Files\Spyware Doctor\sdhelp.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Sony TV Tuner Controller - Sony Corporation - C:\Program Files\Sony\Giga Pocket\halsv.exe
O23 - Service: Sony TV Tuner Manager - Sony Corporation - C:\Program Files\Sony\Giga Pocket\RM_SV.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: VAIO Entertainment Aggregation and Control Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe
O23 - Service: VAIO Entertainment File Import Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCdb\VzFw.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VCSW\VCSW.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-IntegratedServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\IntegratedServer\HTTP (file missing)
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Platform\VmGateway.exe" /Service=VAIOMediaPlatform-Mobile-Gateway /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Addons\Packages\Mobile\Gateway" /DisplayName="VAIO Media Gateway Server (file missing)
O23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Video\GPVSvr.exe" /Service=VAIOMediaPlatform-VideoServer-AppServer /DisplayName="VAIO Media Video Server (file missing)
O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-VideoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\VideoServer\HTTP (file missing)
O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\Platform\UPnPFramework.exe

Appreciate your help so far,
Matt

pflantzbaum

Post #6March 13, 2006, 1:56 AM UTC

Forgot to post Spy Sweeper log: ******** 6:56 PM: | Start of Session, Sunday, March 12, 2006 | 6:56 PM: Spy Sweeper started 6:56 PM: Sweep initiated using definitions version 630 6:56 PM: Starting Memory Sweep 6:59 PM: Memory Sweep Complete, Elapsed Time: 00:03:31 6:59 PM: Starting Registry Sweep 7:00 PM: Registry Sweep Complete, Elapsed Time:00:00:19 7:00 PM: Starting Cookie Sweep 7:00 PM: Found Spy Cookie: 2o7.net cookie 7:00 PM: bob@2o7[1].txt (ID = 1957) 7:00 PM: Found Spy Cookie: atlas dmt cookie 7:00 PM: bob@atdmt[2].txt (ID = 2253) 7:00 PM: Found Spy Cookie: atwola cookie 7:00 PM: bob@atwola[2].txt (ID = 2255) 7:00 PM: Found Spy Cookie: bravenet cookie 7:00 PM: bob@bravenet[2].txt (ID = 2322) 7:00 PM: Found Spy Cookie: ru4 cookie 7:00 PM: bob@edge.ru4[2].txt (ID = 3269) 7:00 PM: bob@msnportal.112.2o7[1].txt (ID = 1958) 7:00 PM: Found Spy Cookie: tribalfusion cookie 7:00 PM: bob@tribalfusion[1].txt (ID = 3589) 7:00 PM: matt@2o7[1].txt (ID = 1957) 7:00 PM: Found Spy Cookie: about cookie 7:00 PM: matt@about[2].txt (ID = 2037) 7:00 PM: Found Spy Cookie: reunion cookie 7:00 PM: [removed][1].txt (ID = 3256) 7:00 PM: Found Spy Cookie: ask cookie 7:00 PM: matt@ask[1].txt (ID = 2245) 7:00 PM: matt@atwola[1].txt (ID = 2255) 7:00 PM: Found Spy Cookie: azjmp cookie 7:00 PM: matt@azjmp[2].txt (ID = 2270) 7:00 PM: Found Spy Cookie: a cookie 7:00 PM: matt@a[1].txt (ID = 2027) 7:00 PM: [removed][1].txt (ID = 2038) 7:00 PM: matt@edge.ru4[1].txt (ID = 3269) 7:00 PM: [removed][2].txt (ID = 2038) 7:00 PM: Found Spy Cookie: touchclarity cookie 7:00 PM: [removed][2].txt (ID = 3566) 7:00 PM: Found Spy Cookie: nextag cookie 7:00 PM: matt@nextag[2].txt (ID = 5014) 7:00 PM: Found Spy Cookie: pub cookie 7:00 PM: matt@pub[1].txt (ID = 3205) 7:00 PM: matt@reunion[1].txt (ID = 3255) 7:00 PM: Found Spy Cookie: tripod cookie 7:00 PM: matt@tripod[1].txt (ID = 3591) 7:00 PM: Found Spy Cookie: clickads cookie 7:00 PM: [removed][2].txt (ID = 4643) 7:00 PM: [removed][1].txt (ID = 3256) 7:00 PM: kate@about[1].txt (ID = 2037) 7:00 PM: [removed][1].txt (ID = 5015) 7:00 PM: Found Spy Cookie: go2net.com cookie 7:00 PM: kate@go2net[1].txt (ID = 2730) 7:00 PM: [removed][2].txt (ID = 2038) 7:00 PM: kate@nextag[2].txt (ID = 5014) 7:00 PM: kate@pub[1].txt (ID = 3205) 7:00 PM: Found Spy Cookie: adbureau cookie 7:00 PM: [removed][2].txt (ID = 2060) 7:00 PM: Cookie Sweep Complete, Elapsed Time: 00:00:05 7:00 PM: Starting File Sweep 7:00 PM: Found Adware: alfa cleaner 7:00 PM: c:\documents and settings\bob\application data\skinux\alfacleaner (ID = -2147458405) 7:00 PM: c:\documents and settings\bob\application data\alfacleaner (7 subtraces) (ID = -2147458406) 8:09 PM: File Sweep Complete, Elapsed Time: 01:08:56 8:09 PM: Full Sweep has completed. Elapsed time 00:23:13 8:09 PM: Traces Found: 40 8:19 PM: BHO Shield: found: – BHO installation allowed at user request 8:19 PM: Removal process initiated 8:19 PM: Quarantining All Traces: alfa cleaner 8:19 PM: Quarantining All Traces: 2o7.net cookie 8:19 PM: Quarantining All Traces: a cookie 8:19 PM: Quarantining All Traces: about cookie 8:19 PM: Quarantining All Traces: adbureau cookie 8:19 PM: Quarantining All Traces: ask cookie 8:19 PM: Quarantining All Traces: atlas dmt cookie 8:19 PM: Quarantining All Traces: atwola cookie 8:19 PM: Quarantining All Traces: azjmp cookie 8:19 PM: Quarantining All Traces: bravenet cookie 8:19 PM: Quarantining All Traces: clickads cookie 8:19 PM: Quarantining All Traces: go2net.com cookie 8:19 PM: Quarantining All Traces: nextag cookie 8:19 PM: Quarantining All Traces: pub cookie 8:19 PM: Quarantining All Traces: reunion cookie 8:19 PM: Quarantining All Traces: ru4 cookie 8:19 PM: Quarantining All Traces: touchclarity cookie 8:19 PM: Quarantining All Traces: tribalfusion cookie 8:19 PM: Quarantining All Traces: tripod cookie 8:19 PM: Removal process completed. Elapsed time 00:00:13 ******** 6:53 PM: | Start of Session, Sunday, March 12, 2006 | 6:53 PM: Spy Sweeper started 6:54 PM: Your spyware definitions have been updated. 6:56 PM: | End of Session, Sunday, March 12, 2006 | Programs don't seem slow at the moment, but I had to restart to be able to open the Spy Sweeper text file. Was having trouble before. Also, my Norton Anti-Virus is not on when I start up the computer. How do I turn it back on so it starts automatically? Thanks, Matt

LDTate

Post #7March 13, 2006, 9:51 PM UTC

We can try a few things and see what happens.

Click "Start", "Settings", and then click "Control Panel". Open the "Display" applet.
Click on "Desktop", "Customise Display…" and "Web".
In the box under "Web pages", select all the checkboxes and click "Delete".

#2Next, launch Notepad (Start>All Programs>Accessories), and copy/paste all the blue REGEDIT below to it
Save in: Desktop
File Name: fixme.reg
Save as Type: All files
Click: Save

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Desktop\General]
"WallpaperFileTime"=-
"WallpaperLocalFileTime"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoDispAppearancePage"=-
"Wallpaper"=-
"WallpaperStyle"=-
"NoDispBackgroundPage"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoActiveDesktopChanges"=-
"ForceActiveDesktopOn"=-

[HKEY_CURRENT_USER\Control Panel\Desktop]
"Wallpaper"=-
"WallpaperStyle"=-

[HKEY_CURRENT_USER\Control Panel\Colors]
"Background"="0 78 152"

On the desktop, doubleclick fix.reg and allow it to run. Let it merge.

pflantzbaum

Post #8March 17, 2006, 10:01 PM UTC

Thanks, LDTate I deleted a file from Customize Display, Web called "Desktop Uninstall" and my desktop picture came back! Should I still use that fixme.reg file? (I haven't done that yet.) Norton Anti-Virus is working ok again – the minor problem I was having must have been a temporary thing. Only other problem is that when I log off I don't get the option to switch users. Can you help me with that? Thanks, Matt

LDTate

Post #9March 17, 2006, 10:05 PM UTC

Should I still use that fixme.reg file? (I haven't done that yet.)

No, as long as your desktop is the way you want it.

Only other problem is that when I log off I don't get the option to switch users. Can you help me with that?

Only thing I can think of is to create another new user, reboot, then see if it gives you the option to switch.

LDTate

Post #10March 24, 2006, 2:42 AM UTC

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

PSGuard Desktop Hijacker

✨ Ask AI

Ask AI