6 replies to this topic

[sinister_designs]

The computer is behaving very erratically
I.e. it will just start opening windows and programs at random for about a minute or so then stop and help is greatly appreciated.

Regards
Jason

Logfile of HijackThis v1.99.1
Scan saved at 8:32:20 AM, on 24/05/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\CA\eTrust Vet Antivirus\CAVTray.exe
C:\Program Files\CA\eTrust Vet Antivirus\CAVRID.exe
C:\Program Files\WinFast\WFTVFM\WFWIZ.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\winvnc.exe
C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
C:\Program Files\Gizmo Project\mDNSResponder.exe
C:\Program Files\CA\eTrust Vet Antivirus\ISafe.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exe
C:\Program Files\PRTG Traffic Grapher\PRTG Traffic Grapher.exe
C:\Program Files\PRTG Traffic Grapher\PRTG Traffic Grapher.exe
C:\WINDOWS\System32\CNAC1RPK.EXE
C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
C:\WINDOWS\System32\UAService7.exe
C:\Program Files\CA\eTrust Vet Antivirus\VetMsg.exe
D:\hijackthis\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Outpost Firewall] C:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exe /waitservice
O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\CA\eTrust Vet Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\eTrust Vet Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFTVFM\WFWIZ.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
O4 - Global Startup: winvnc.exe
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: Trashcan - {072F3B8A-2DA2-40e2-B841-88899F240200} - C:\Program Files\Agnitum\Outpost Firewall\TRASH.EXE (HKCU)
O9 - Extra 'Tools' menuitem: Show Trashcan - {072F3B8A-2DA2-40e2-B841-88899F240200} - C:\Program Files\Agnitum\Outpost Firewall\TRASH.EXE (HKCU)
O16 - DPF: Yahoo! Canasta - http://download.game...nts/y/yt1_x.cab
O16 - DPF: Yahoo! Poker - http://download.game...nts/y/pt3_x.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6BACC375-13A4-4101-8599-53F9C0B0E40C}: NameServer = 192.168.1.1
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files\Gizmo Project\mDNSResponder.exe
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Vet Antivirus\ISafe.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum - C:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exe
O23 - Service: PRTG Service - Paessler Router Traffic Grapher (PRTGService) - Paessler AG - C:\Program Files\PRTG Traffic Grapher\PRTG Traffic Grapher.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\System32\UAService7.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Vet Antivirus\VetMsg.exe

[Susan528]

Hello sinister_designs and Welcome to TomCoyote,

Please do the following:



STEP 1.
======
SpySweeper

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Clear "Hide file extensions for known file types."
Under the "Hidden files" folder, select "Show hidden files and folders."
Clear "Hide protected operating system files."
Click Apply, and then click OK.


Please do not delete anything unless you are instructed to.


Download the trial version of Spy Sweeper from Here

• Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it. If you receive alerts from your firewall, allow all activities for Spy Sweeper) You will be prompted to check for updated definitions, please do so.
  (This may take several minutes)
• Click on Options > Sweep Options and check Sweep all Folders on Selected drives. Check Local Disc C. Under What to Sweep, check every box.
• Click on Sweep and allow it to fully scan your system.If you are prompted to restart the computer, do so immediately. This is a necessary step to kill the infection!
• When the sweep has finished, click Remove. Click Select All and then Next
• From 'Results', select the Session Log tab. Click Save to File and save the log somewhere convenient.
• Exit Spy Sweeper.

STEP 2.
======
Ewido Trojan Scanner
Please download, install, and update the NEW free version of Ewido trojan scanner:

• When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
• When you run ewido for the first time, you may get a warning "Database could not be found!". Click OK. We will fix this in a moment.
• From the main ewido screen, click on update in the left menu, then click the Start update button.
• After the update finishes (the status bar at the bottom will display "Update successful")
• Click on the Scanner button in the left menu, then click on Complete System Scan. This scan can take quite a while to run.
• If ewido finds anything, it will pop up a notification. Select "clean" and check the boxes "Perform action with all infections" and "Create encrypted backup" before clicking on OK.
• When the scan finishes, click on "Save Report". This will create a text file. Make sure you know where to find this file again.

Empty Recycle Bin
Reboot

Please post the results from SpySweeper, ewido and a new hijackthis log.

[sinister_designs]

log files as requested. hope this helps



Logfile of HijackThis v1.99.1
Scan saved at 2:13:46 PM, on 25/05/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\CA\eTrust Vet Antivirus\CAVTray.exe
C:\Program Files\CA\eTrust Vet Antivirus\CAVRID.exe
C:\Program Files\WinFast\WFTVFM\WFWIZ.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Gizmo Project\mDNSResponder.exe
C:\Program Files\CA\eTrust Vet Antivirus\ISafe.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Copernic Desktop Search\CopernicDesktopSearch.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\winvnc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exe
C:\Program Files\PRTG Traffic Grapher\PRTG Traffic Grapher.exe
C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
C:\Program Files\PRTG Traffic Grapher\PRTG Traffic Grapher.exe
C:\WINDOWS\System32\CNAC1RPK.EXE
C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\System32\UAService7.exe
C:\Program Files\CA\eTrust Vet Antivirus\VetMsg.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\hijackthis\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Copernic Desktop Search - {C5F7A735-70F1-477F-8C36-6FF3C736017B} - C:\Program Files\Copernic Desktop Search\CopernicDesktopSearchIntegration974.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Outpost Firewall] C:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exe /waitservice
O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\CA\eTrust Vet Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\eTrust Vet Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFTVFM\WFWIZ.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Copernic Desktop Search] "C:\Program Files\Copernic Desktop Search\CopernicDesktopSearch.exe" /tray
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
O4 - Global Startup: winvnc.exe
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: Trashcan - {072F3B8A-2DA2-40e2-B841-88899F240200} - C:\Program Files\Agnitum\Outpost Firewall\TRASH.EXE (HKCU)
O9 - Extra 'Tools' menuitem: Show Trashcan - {072F3B8A-2DA2-40e2-B841-88899F240200} - C:\Program Files\Agnitum\Outpost Firewall\TRASH.EXE (HKCU)
O16 - DPF: Yahoo! Canasta - http://download.game...nts/y/yt1_x.cab
O16 - DPF: Yahoo! Poker - http://download.game...nts/y/pt3_x.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewid...oOnlineScan.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6BACC375-13A4-4101-8599-53F9C0B0E40C}: NameServer = 192.168.1.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Bonjour Service - Apple Computer, Inc. - C:\Program Files\Gizmo Project\mDNSResponder.exe
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Vet Antivirus\ISafe.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum - C:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exe
O23 - Service: PRTG Service - Paessler Router Traffic Grapher (PRTGService) - Paessler AG - C:\Program Files\PRTG Traffic Grapher\PRTG Traffic Grapher.exe
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - SafeNet, Inc - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\System32\UAService7.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Vet Antivirus\VetMsg.exe



********
10:55 AM: | Start of Session, Thursday, 25 May 2006 |
10:55 AM: Spy Sweeper started
10:55 AM: Sweep initiated using definitions version 685
10:55 AM: Starting Memory Sweep
10:59 AM: Memory Sweep Complete, Elapsed Time: 00:03:22
10:59 AM: Starting Registry Sweep
10:59 AM: Registry Sweep Complete, Elapsed Time:00:00:10
10:59 AM: Starting Cookie Sweep
10:59 AM: Found Spy Cookie: atlas dmt cookie
10:59 AM: imex@atdmt[2].txt (ID = 2253)
10:59 AM: Found Spy Cookie: atwola cookie
10:59 AM: imex@atwola[1].txt (ID = 2255)
10:59 AM: Found Spy Cookie: screensavers.com cookie
10:59 AM: imex@i.screensavers[1].txt (ID = 3298)
10:59 AM: Found Spy Cookie: 2o7.net cookie
10:59 AM: imex@msnportal.112.2o7[1].txt (ID = 1958)
10:59 AM: imex@www.screensavers[2].txt (ID = 3298)
10:59 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
10:59 AM: Starting File Sweep
11:27 AM: File Sweep Complete, Elapsed Time: 00:28:21
11:27 AM: Full Sweep has completed. Elapsed time 00:31:59
11:27 AM: Traces Found: 5
1:03 PM: Removal process initiated
1:03 PM: Quarantining All Traces: 2o7.net cookie
1:03 PM: Quarantining All Traces: atlas dmt cookie
1:03 PM: Quarantining All Traces: atwola cookie
1:03 PM: Quarantining All Traces: screensavers.com cookie
1:03 PM: Removal process completed. Elapsed time 00:00:01
********
10:48 AM: | Start of Session, Thursday, 25 May 2006 |
10:48 AM: Spy Sweeper started
10:48 AM: Messenger service has been disabled.
10:48 AM: There is a problem reaching the server. The cause may be in your connection, or on the server. Please try again later.
10:48 AM: Updating spyware definitions
10:48 AM: There is a problem reaching the server. The cause may be in your connection, or on the server. Please try again later.
10:48 AM: Updating spyware definitions
10:54 AM: Your spyware definitions have been updated.
10:55 AM: | End of Session, Thursday, 25 May 2006 |



---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 1:55:07 PM, 25/05/2006
+ Report-Checksum: D5AEB2A9

+ Scan result:

:mozilla.16:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.17:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.18:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.19:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.27:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.28:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.29:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.30:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.32:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned with backup
:mozilla.41:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.43:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.44:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned with backup
:mozilla.45:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.48:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.63:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.64:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.65:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.74:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.76:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.77:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.78:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.79:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.80:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.90:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
:mozilla.96:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
:mozilla.107:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.108:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.109:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.110:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.111:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.112:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.114:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.115:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.116:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.117:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.118:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.127:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Myaffiliateprogram : Cleaned with backup
:mozilla.128:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup
:mozilla.131:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.132:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.133:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.134:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.135:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.136:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.137:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.138:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.139:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.140:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.141:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.142:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.143:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.144:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.145:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.146:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.147:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.148:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.149:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.150:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.151:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.152:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.153:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.154:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.155:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.156:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.157:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.158:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.159:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.160:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.161:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.162:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.163:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.179:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.181:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.182:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.183:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.196:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.197:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.205:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Spylog : Cleaned with backup
:mozilla.208:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.209:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.210:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.211:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.212:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.219:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.220:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.221:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.222:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.223:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.229:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.233:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.244:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.245:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.246:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.256:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.257:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.258:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.259:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.260:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.261:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.262:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.263:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.264:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.265:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.274:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.275:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.298:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.299:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.300:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.301:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.320:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.339:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.342:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hotlog : Cleaned with backup
:mozilla.347:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.348:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.357:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.368:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.382:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Revenue : Cleaned with backup
:mozilla.386:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.388:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.389:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.392:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.393:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.408:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.409:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.418:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.460:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.466:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned with backup
:mozilla.491:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned with backup
:mozilla.495:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.500:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Yadro : Cleaned with backup
:mozilla.502:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.503:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.504:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup
:mozilla.515:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.516:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.530:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.531:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.540:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.541:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.542:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.557:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.558:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.559:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.561:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.562:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.576:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup
:mozilla.577:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup
:mozilla.578:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup
:mozilla.579:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup
:mozilla.600:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.601:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.609:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.610:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.611:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.612:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.613:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.616:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Bfast : Cleaned with backup
:mozilla.618:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.624:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.625:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.637:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.638:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.652:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.653:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.654:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.655:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.656:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.662:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.663:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.665:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.667:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.676:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.677:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.678:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.679:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.683:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.684:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.685:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.686:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.691:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.692:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.696:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.697:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.715:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.716:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.733:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.740:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.750:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.760:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.761:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.762:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.763:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.764:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.798:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Adviva : Cleaned with backup
:mozilla.805:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.809:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.828:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.844:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.845:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.851:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.871:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.878:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.890:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.894:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.898:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.900:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.919:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.920:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.923:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.924:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.937:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned with backup
:mozilla.947:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.953:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.963:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.964:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.970:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.975:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.979:C:\Documents and Settings\imex\Application Data\Mozilla\Firefox\Profiles\cl8mzwxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\imex\Cookies\imex@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup


::Report End

[Susan528]

Your logs don't show anything significant. You had some cookies cleaned out.

How do you like this application? winvnc.exe
Are you accessing another pc from your pc?
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\winvnc.exe
O4 - Global Startup: winvnc.exe

Blacklight

Download Blacklight Beta from here:
http://www.f-secure....light/try.shtml

• Hit I accept. It will take you to download page.
• Download blbeta.exe and save it to the Desktop.
• Once saved... double click blbeta.exe to install the program.
• Click accept agreement and Click scan
  This app too may fire off a warning from antivirus. Let the driver load.
  Wait for it to finish.
• If it displays any items...don't do anything with them yet. Just hit exit (close)
• It will drop a log on Desktop that starts with fsbl....big number

Please post contents of log starts with fsbl....big number.

[sinister_designs]

Susan, I think I have solved the problem, it was a faulty mouse as I changed it and now none of these problems have returned. Thanks for your help regards

[Susan528]

Glad that you got the problem solved! Have a good week-end!


STEP 1.
======
DON’T BECOME OVERCONFIDENT WITH ANTIVIRUS APPLICATIONS INSTALLED!!!

http://forum.malware...39eba6ea0b5e8ee

Stay up to date on security patches and be extremely wary of clicking on links and attachments that arrive unbidden in instant messages and e-mail.

"The number one thing the majority of the malicious code we're seeing now does is disable or delete anti-virus and other security software," Dunham said. "In a lot of cases, once the user clicks on that attachment, it's already too late."

Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:

• Update your AntiVirus Software - It is imperative that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.
  
  
• Test your Firewall - Please test your firewall and make sure it is working properly.
  Test Firewall
  
  
• Visit Microsoft's Update Site Frequently - It is important that you visit Windows Updates regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.
  
  
• Install Spybot - Search and Destroy - Install and download Spybot - Search and Destroy with its TeaTimer option. This will provide realtime spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with program on a regular basis just as you would an antivirus software.
  A tutorial on installing & using this product can be found here:
  Using Spybot - Search & Destroy to remove Spyware , Malware, and Hijackers
  
  
• Install Ad-Aware - Install and download Ad-Aware. ou should also scan your computer with program on a regular basis just as you would an antivirus software in conjunction with Spybot.
  A tutorial on installing & using this product can be found here:
  Using Ad-aware to remove Spyware, Malware, & Hijackers from Your Computer
  
  
• Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.
  A tutorial on installing & using this product can be found here:
  Using SpywareBlaster to protect your computer from Spyware and Malware
  
  
• Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.
  
• More info on how to prevent malware you can also find here (By Tony Klein)
  and here: http://wiki.castleco...nt_Re-infection

Follow this list and your potential for being infected again will reduce dramatically.

Thank you for allowing me to assist you.

Susan

[Susan528]

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoy...showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php