What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Hijackthis.log from maax

57 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Logfile of HijackThis v1.99.1
Scan saved at 1:40:47 PM, on 8/5/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Dantz\Retrospect\retrorun.exe
C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\WDBtnMgr.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\wfxqhv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\zqskw.exe
C:\Program Files\Common Files\{445B6F9C-07D0-1033-0509-039810270001}\Update.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Microsoft Office\Office10\msoffice.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\hijackthis\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.compaq.com/1Q00CDT/0409/bl7.asp
R3 - URLSearchHook: (no name) - _{00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Ozbyq Class - {D623BC2F-A58D-4A75-A10D-CC244A702A35} - C:\WINDOWS\system32\xeymi.dll
O2 - BHO: (no name) - {E5E2A3E7-00FE-4D31-A030-A10799DDCA66} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: (no name) - {CBCC61FA-0221-4ccc-B409-CEE865CACA3A} - (no file)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [outlook] C:\Program Files\outlook\outlook.exe /auto
O4 - HKLM\..\Run: [winlog] winlog.exe
O4 - HKLM\..\Run: [defender] C:\\dfndrff_7.exe
O4 - HKLM\..\Run: [keyboard] C:\\kybrdff_7.exe
O4 - HKLM\..\Run: [k6mmN5IOU] "C:\WINDOWS\system32\wfxqhv.exe"
O4 - HKLM\..\Run: [ark8613e] RUNDLL32.EXE wd67b19c.dll,n 0028613c00000003d67b19c
O4 - HKLM\..\Run: [{B6-6F-F9-9C-ZN}] c:\windows\system32\dwdsregt.exe CORN003
O4 - HKLM\..\Run: [newname] C:\\nwnmff_7.exe
O4 - HKLM\..\Run: [sys011468430361] C:\WINDOWS\sys011468430361.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\RunServices: [winlog] winlog.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ofou] C:\Program Files\Common Files\ofou\ofoum.exe
O4 - HKCU\..\Run: [CAS2] "C:\Program Files\System Files\System.exe"
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - Startup: Z_Start.lnk = C:\WINDOWS\system32\ondsrego.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {4ABF810A-F11D-4169-9D5F-7D274F2270A1} - C:\WINDOWS\system32\dmonwv.dll (file missing)
O9 - Extra 'Tools' menuitem: Java - {4ABF810A-F11D-4169-9D5F-7D274F2270A1} - C:\WINDOWS\system32\dmonwv.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{D1FFE526-734B-40EB-BF4D-8666D4DC1639}: NameServer = 192.168.15.1
O18 - Filter: text/html - {B5F86455-BF18-4E12-965A-6642A0AC0549} - C:\WINDOWS\system32\xeymi.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPZipm12.exe
O23 - Service: Retrospect Launcher (RetroLauncher) - Dantz Development Corporation - C:\Program Files\Dantz\Retrospect\retrorun.exe
O23 - Service: Retrospect WD Service (RetroWDSvc) - Dantz Development Corporation - C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
Post #2
1. Please download ewido anti-spyware from HERE and save that file to your desktop.
This is a 30 day trial of the program
  • Once you have downloaded ewido anti-spyware, locate the icon on the desktop and double-click it to launch the set up program.
  • Once the setup is complete you will need run ewido and update the definition files.
  • On the main screen select the icon "Update" then select the "Update now" link.
    • Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
  • Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
  • Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
  • Under "Reports"
    • Select "Automatically generate report after every scan"
    • Un-Select "Only if threats were found"
Close ewido anti-spyware, Do Not run a scan just yet, we will shortly.

2. Please download Brute Force Uninstaller to your desktop.
  • Right click the BFU folder on your desktop, and choose Extract All
  • Click "Next"
  • In the box to choose where to extract the files to,
  • Click "Browse"
  • Click on the + sign next to "My Computer"
  • Click on "Local Disk (C:) or whatever your primary drive is
  • Click "Make New Folder"
  • Type in BFU
  • Click "Next", and Uncheck the "Show Extracted Files" box and then click "Finish".
3. RIGHT-CLICK HERE and choose "Save As" (in IE it's "Save Target As") in order to download Alcra PLUS Remover.
Save it in the same folder you made earlier (c:\BFU).

Do not do anything with these yet!

Reboot your computer into Safe Mode. You can do this by restarting your computer and continually tapping F8 until a menu appears. Highlight Safe Mode and hit enter.

4. Once in Safe Mode, Open Ewido:
  • Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
  • ewido will now begin the scanning process, be patient this may take a little time.
    Once the scan is complete do the following:
  • If you have any infections you will prompted, then select "Apply all actions"
  • Next select the "Reports" icon at the top.
  • Select the "Save report as" button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
  • Close ewido.
5. Then, please go to Start > My Computer and navigate to the C:\BFU folder.
  • Start the Brute Force Uninstaller by doubleclicking BFU.exe
  • Behind the scriptline to execute field click the folder icon [external image: Posted Image] and select alcanshorty.bfu
  • Press Execute and let the program do it’s job. (You ought to see a progress bar if you did this correctly.)
  • Wait for the complete script execution box to pop up and press OK.
  • Press exit to terminate the BFU program.
Reboot into normal windows and post the contents of Ewido text report that you saved and a new HiJackThis log.
Post #3
ewido anti-spyware - Scan Report + Created at:3:13:47 AM 8/6/2006 + Scan result: C:\Documents and Settings\Greg\Local Settings\Temp\18010.tmp -> Adware.180Solutions : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Local Settings\Temp\18039.tmp -> Adware.180Solutions : Cleaned with backup (quarantined). HKU\S-1-5-21-3649317469-3079422581-91575534-1007\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{56F1D444-11BF-4879-A12B-79CF0177F038} -> Adware.180Solutions : Cleaned with backup (quarantined). HKU\S-1-5-21-3649317469-3079422581-91575534-1007\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EA0D26BD-9029-431A-86E0-83152D67828A} -> Adware.180Solutions : Cleaned with backup (quarantined). C:\Old Harddrive from DP\docs & settings\My Downloads\kazaalite_202_b1.zip/kazaalite_202_b1.exe/TopSearch.dll -> Adware.Altnet : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Local Settings\Temp\C1C39.tmp/cvn0.exe -> Adware.SearchAssistant : Cleaned with backup (quarantined). C:\WINDOWS\system32\bez6n4r21.exe -> Adware.SearchAssistant : Cleaned with backup (quarantined). C:\WINDOWS\system32bez6n4r21.exe -> Adware.SearchAssistant : Cleaned with backup (quarantined). C:\WINDOWS\system32ghynf.exe -> Adware.SearchAssistant : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Local Settings\Temp\C1C39.tmp/zqskw.exe -> Adware.Suggestor : Cleaned with backup (quarantined). C:\WINDOWS\system32\iqqr.exe -> Adware.Suggestor : Cleaned with backup (quarantined). C:\WINDOWS\system32\n9nyb.exe -> Adware.Suggestor : Cleaned with backup (quarantined). C:\WINDOWS\system32\xeymi.dll -> Adware.Suggestor : Cleaned with backup (quarantined). C:\WINDOWS\system32\zqskw.exe -> Adware.Suggestor : Cleaned with backup (quarantined). C:\WINDOWS\system32n9nyb.exe -> Adware.Suggestor : Cleaned with backup (quarantined). C:\Old Harddrive from DP\docs & settings\My Documents\My Downloads\Ultimate Hack.exe -> Dropper.Small : Cleaned with backup (quarantined). C:\Old Harddrive from DP\docs & settings\more docs\My Downloads\Ultimate Hack.exe -> Dropper.Small : Cleaned with backup (quarantined). C:\dfndrff_7.exe -> Hijacker.VB.ly : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@heavycom.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@microsofteup.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@numarasoftware.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Local Settings\Temp\Cookies\greg@heavycom.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\gmaness@112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\gmaness@2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\gmaness@ehealthcaresolutions.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\gmaness@evergladesdirect.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\gmaness@marykay.122.2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\WINDOWS\Temp\Cookies\greg@heavycom.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@aavalue[2].txt -> TrackingCookie.Aavalue : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Aavalue : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Addynamix : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][1].txt -> TrackingCookie.Adjuggler : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@adrevolver[3].txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Adtrak : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@advertising[1].txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Bridgetrack : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][1].txt -> TrackingCookie.Burstbeacon : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@burstnet[2].txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\gmaness@burstnet[2].txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][1].txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Clickhype : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@com[1].txt -> TrackingCookie.Com : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\gmaness@com[2].txt -> TrackingCookie.Com : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Local Settings\Temp\Cookies\greg@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : Cleaned with backup (quarantined). C:\WINDOWS\Temp\Cookies\greg@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Enhance : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][1].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][1].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][1].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][1].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][1].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][1].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][1].txt -> TrackingCookie.Euroclick : Cleaned with backup (quarantined). C:\WINDOWS\Temp\Cookies\[removed][2].txt -> TrackingCookie.Euroclick : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Falkag : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Falkag : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][2].txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@mediaplex[2].txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Overture : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Realcastmedia : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@revenue[1].txt -> TrackingCookie.Revenue : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@edge.ru4[2].txt -> TrackingCookie.Ru4 : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Searchingbooth : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Searchingbooth : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Specificclick : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][1].txt -> TrackingCookie.Specificclick : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Local Settings\Temp\Cookies\[removed][2].txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@targetnet[1].txt -> TrackingCookie.Targetnet : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed]-banners[1].txt -> TrackingCookie.Top-banners : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@login.tracking101[1].txt -> TrackingCookie.Tracking101 : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Local Settings\Temp\Cookies\greg@login.tracking101[1].txt -> TrackingCookie.Tracking101 : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@trafficmp[1].txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Valuead : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Valuead : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@webstat[1].txt -> TrackingCookie.Web-stat : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][2].txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). C:\Documents and Settings\gmaness\Cookies\[removed][2].txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). C:\WINDOWS\Temp\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\[removed][1].txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Cookies\greg@zedo[1].txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\0-Day Apps Pack For 0802[www bubbas-world net].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\22 ebooks How To Excel In Job Interviews CV and Resume Writing zip.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\225 animated icons [www ultratorrent net].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\240x320 Mobile Animated Wallpapers.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\300 Animated Smileys [www ultratorrent net].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\667 Fantasy Art - HQ Pics - by Luis Royo (All His Works)[www yahaa org] rar.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\694 TUNING CAR WALLPAPERS (Hi Res)_posted by BoZu.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\899 disney paint and color gifs [www ultratorrent net].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\A FHM Lucy Becker Pictures.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\A Tribe Called Quest - Find A Way [MMV].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\ACDSee Pro Photo Manager v8 1 99.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\About CNET Networks.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Advanced search.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Air America Radio - The Al Franken Show 080206 [mp3].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Air America Radio - The Majority Report 080206 [mp3].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Air America Radio - The Randi Rhodes Show 080206 [mp3].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Alex Jones 2nd August 2006 (136min42 ).zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Alien vs Predator 2 + Primal Hunt.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\All RSS feeds.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\All Software.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Angelas Eyes S01E03 WS DSR XviD-CRiMSON [eztv].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\AnyDVD 6.0.4.5 + working key.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\AnyDVD 6.0.4.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\B N P Newspaper Special (July-06) - "Change Beyond Belief" .pdf.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Big Brother US S07E12 PDTV XviD-FQM [eztv].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\BitSpirit 3 2 0 109 exe.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Blade The Series S01E06 WS DSR XviD-ORENJi [eztv].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Browse categories.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\CNET Channel.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\CNET Download.com.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\CNET News.com.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\CNET Reviews.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\CNET Shopper.com.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\CPU Magazine September 2006 pdf flie.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Cars The Video Game.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Christina Aguilera - Back To Basics 2CD (2006).zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Christina Aguilera - Back to Basics[2CDs][2006][BADR1X].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Christina Aguilera Back To Basics (with f+b covers) a DHZ Inc Release.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Christina Aguilera-Back To Basics-2CD-2006-(HOT NEW ALBUM!!!!).zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Christina Aguilera-Back To Basics-2CD-2006-RNS.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Coldplay - Castles (2006) - Rock.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Color Impact 3 [ShareWarez.org].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Compare Prices.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Computer Networks Volume 50 Issue 7 2006 PDF eBook-DaVBookS.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Computer Networks Volume 50 Issue 8 2006 PDF eBook-DaVBookS.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Computer Networks Volume 50 Issue 9 2006 PDF eBook-DaVBookS.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Copyright policy.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Criss Angel Mindfreak S02E12 DSR XviD-OMiCRON [eztv].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Cucusoft MpegMovRmDivxAvi To DvdVcdSvcd Creator Pro 7.07 With Working Keygen Not Trial Version.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Cyberlink PowerDVD Deluxe v7 0 1813 Multilingual CORE.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\DERBEZDVD ISO.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\DVDFab Platinum 2.9.8.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Death Ride 2006 DVDRip XviD-VoMiT [www torrentfive com].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Demon Hunter UNRATED DVDRip XviD-FBR [www torrentfive com].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Demonoid com WINDOWS XP EXTREME LITE 1166332 9238 www Compartilhando org.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Densha De Go Pocket Toukaidousen Hen PSP JAP [solops2.com].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Derby Stallion P (JPN) (PSP).zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Dog Bites Man S01E08 DSR XviD-THOR [eztv].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Evangeline Lilly rar.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Every Extend Extra [JPN][PSP][www newpct com].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Fear Factor S06E16 Viewers Choice PDTV XviD-FQM [eztv].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Fotos Higuerote Playita Julio 2006 zip.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Free MP3s.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Goku Makaimura UMDRip (JPN) (PSP).zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Growlancer V Generations PS2 FULLDVD JAP [solops2.com].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Help Center.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\How to Answer the 64 toughest interview questions.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\How to advertise.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\IRC chat.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\International media.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\InuYasha - 157 - Destroy Naraku with the Adamant Barrage [C-W] (HQ).zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Israeli Atrocities zip.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\KATG 08-01-2006 Preshow.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Knights Of Prosperity S01E01 DVDSCR XviD-PREAiR [eztv].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Lady In The Water XViD TS-maVen [www torrentfive com].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Last Comic Standing S04E10 PDTV XviD-FQM [eztv].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Laurel & Hardy - Scram !.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Lynda com - Audition 2 0 Essential Training.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Minna no Nihongo 1 (Japanese Learning).zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Minna no Nihongo 2 (Japanese Learning).zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Mortal Komedy Episodes 1&2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\My Favorite Stand Up Comics.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\My Super Ex-Girlfriend [TS-Screener][2006][English+Subs Spanish][www newpct com].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\NDS ROMS 0401-0450.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Nero Premium v7 2 3 2b Incl Keygen NEWEST VERSION.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Nightmares And Dreamscapes From the Stories of Stephen King Part7 HDTV XviD-LOL [eztv].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Nightmares And Dreamscapes From the Stories of Stephen King Part8 HDTV XviD-LOL [eztv].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\PS2DVD - Super Monkey Ball Adventure [English] [WwW GamesTorrents CoM].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\PSP world series of poker Shadow_ml.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Partnership opportunities.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Peachez18 com Site-Rip Part 1 of 4.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Photoshop CS Essential Skills.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Pirates of the Caribbean Dead Mans Chest TS XviD OBSESSiON{www IPTorrents com}.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Powershot Pinball [PCCD][English][www newpct com].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Privacy policy.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Programming Microsoft Visual Basic 2005 The Language chm.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Project Runway S03E04 DSR XviD-ORENJi [eztv].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Rapidshare Account Generator v 8 90 1 -tested!.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Release 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Robert Plant - The Principle of Moments - 192Kbps Demons Eye - RockPop.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Rock Star Supernova S02E09 PDTV XVID-WSLR [eztv].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Santana - Santana(Luxury Edition)(2006)-www trackertomia com.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Search Cloud.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Shania Twain rar.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Show all of today →.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Soul Sex - Tantra for Two.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Speed 1994 DVDrip SWE avi.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Spyware Removal.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Submit Software.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Super Monkey Ball Adventure PS2 FULLDVD USA [solops2.com].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Super Monkey Ball Adventure USA PS2DVD-Start2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\TV Shows.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Terms of use.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\The Ant Bully 2006 CaM XviD-NOGRP [www torrentfive com].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\The Ant Bully 2006 iNTERNAL CAM HYdRO kvcd Jamgood(TUS Release).zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\The Colbert Report 08.02.06 (DSRip-CRiMSON)[VTV].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\The Fast And The Furious Tokyo Drift REAL TC XviD-ASTEROiDS [www torrentfive com].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\The Firebird eBook pdf.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\The Game The Black Wall Street Journal Vol.1_MixFiend.com_2006.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\The Hills S01E10 WS DSR XviD-OMiCRON [eztv].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\The Omen (2006) [www ultratorrent net].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\The Sentinel (2006) TS kvCD (NL Subs srt file).zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Today on CNET.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Top 100 One Hit Wonders -2002 [www ultratorrent net].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Tuning - Cars & Girls 2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\U-571 Official Screensaver 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\U-Broadcast 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\U-Robot Personal Edition 1.20a.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\U-Upload Cart 1.2.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\U-Upload Pro 1.5.4.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\U. S. Stampgazetteer 2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\U.S. Air Force Art of the Warbird 4.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\U.S. Chess Live 4.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\U.S. Robotics DataFax 33.656k Modem Driver (41098).zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\U.S. Robotics High-speed Modem Script 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\U.S. Robotics Modem INF File 1.5.2 Beta 4 (62998).zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\U.S. Robotics Modem Update Wizard U4E127 41498.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\U.S. Robotics Voice 33.656K Modem Driver (41098).zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\U.S.A. Screen Saver 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\U2 Paste 1.01.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\U4 Screen Magnifier 2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UB-92 Fill & Print 2.6.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UC Units Converter 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UCertify Network+ - N10-003, Exam Simulation 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UCon Integral Scientist Unit Conversions 1.41.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UControls GlassButton 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UD Agent 3.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UEFA Champions League 2004 - 2005 demo .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UEFA Euro 2004 Euro Center .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UEFA Euro 2004 Kit Raptor mod .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UEStudio '05 5.50.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UFO Aftermath v1.3 to v1.4 patch .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UFO Aftermath v1.4 patch .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UFO Aftershock demo .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UFO Alien Invasion technical demo .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UFO III 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UFO Invasion 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UFO Killer 1.01.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UFO Light 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UFO Sighting 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UFS Explorer 2.0.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UGZ IRC Script 5.91.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UHS (Universal Hint System) 4.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UI SPY 3.0.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UIFriend 2.0.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UK Radio Toolbar 4.5.102.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UK Speaking Clock 10.3.4.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UMS-Online 1.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UNA Usenet Automation 1.0.0.28.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UNAK-CMS 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UNIC 2.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UNITS32 2002.01.06.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UNIX Chmod Interpreter 1.0.4.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UNO Hearts Freeware 1.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UagEncryptionLibrary 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UberIcon 1.1 build 17.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UberNES 3.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UberSoldier demo .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ubercode 1.1.02.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UbiWorks 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UbiWorks SDK 1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ueditor 1.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ufasoft Common Lisp 3.2.7.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ugly Dockling 1.45.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ugly Multiclip 1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UglyBass Utilities 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ugolki 1.7.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Uimix 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Uke-4-U Starter 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ukiyo-e Screensaver 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulead Burn.Now 1.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulead CD & DVD PictureShow 4.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulead Cool 360 Viewer 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulead Cool 3D 3.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulead Cool 3D Production Studio 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulead DVD MovieFactory 5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulead DVD Workshop 2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulead GIF Animator 5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulead MediaStudio Pro 8.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulead Photo Explorer 8.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulead Photo Express 6.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulead PhotoImpact 11.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulead Pocket DV Show 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulead Pocket Slideshow 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulead SmartSaver Pro 3.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulead VideoStudio 10.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UliMessenger 1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulises-H 1.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulti-Planner 3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultim@te Race Pro demo .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultima Online Mondain's Legacy client .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultima Underworld (The Elder Scrolls III Morrowind) .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Audio Recorder 3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Avengers 2 DVDRip XviD MRDR{www IPTorrents com}.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Avengers 2 Rise of the Panther 2006 02 08 06 pass.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Baseball Online Batting Zone 1.03.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Bid Whist 1.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Business Plan Starter 3.0.21.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Car Desktop for Windows 3.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Car for Palm 2.8.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Card Party 1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Christmas Screensaver 3.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Conversion Tool 1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Date Calculator 2.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Desktop 7.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Dice Collection 1.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Dominoes 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate File Organizer 1.1.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Fruit Machine Pack 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Gin 5.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Hunt Challenge demo .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Internet Job Spider 6.8.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate JV Letter Generator by William R. Nabaza 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Jewel 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Mahjong 1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Mahjongg 10 .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Minesweeping 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Paint 2.88.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Paint Freeware Edition 2.88 build 1135.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Pen 1.4.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Pong3D 1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Popup Killer 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Property Analyzer 1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Sexy Models Screensaver 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Simpsons Trivia 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate SlotZone 10.6.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate SlotZone 10.8.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Software Database 2.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Sports Book Manager 2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Spyware-Adware Remover 6.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Startup Manager 1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Street Skater 1.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Su Doku 1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Talking Dictionary 3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate Video Poker 5.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimate ZIP Cracker 7.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltimateCalorieMeter 3.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultimaze 2.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultivaa jNote 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultra 2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultra ATA100 Configuration Utility .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultra AVI Converter 2.2.4.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultra Ad Killer 1.31.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultra Assault 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:&#
Post #4
C:\Documents and Settings\Greg\Complete\UltraBrowser 10.02.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraCompare Professional 4.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraConverter build number 1.9.34.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraDVD 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraEdit-32 12.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraISO Premium 8.0.0.1392.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraKaleidoscope 1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraKeyboard 3.65.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraLott 1.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraLott 12.0.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraLott Florida 1.1.7.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraLott OZ 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraMon 2.6.23.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraMon [64-bit] 2.6.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraMote Universal Remote Package 3.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraMouse 7.21.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraPlayer Media Player 2.112.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraSafe 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraSentry 2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraSwing GUI library 1.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UltraTagger 2.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralbum 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua 5.14.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua English Dictionary of Definitions 5.0.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua English Dictionary of Definitions 5.0.7.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua English Dictionary of Definitions 5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua French Dictionary 5.0.7.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua French Dictionary of Definitions 5.0.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua French Dictionary of Definitions 5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua French-English Dictionary 5.0.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua French-English Dictionary 5.14.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua French-English Dictionary 5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua German-English Dictionary 5.0.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua German-English Dictionary 5.0.7.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua German-English Dictionary 5.14.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua German-English Dictionary 5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua Italian-English Dictionary (Win) 5.0.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua Italian-English Dictionary 5.0.7.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua Italian-English Dictionary 5.14.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua Italian-English Dictionary 5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua Spanish-English Dictionary 5.0.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua Spanish-English Dictionary 5.0.7.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua Spanish-English Dictionary 5.14.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralingua Spanish-English Dictionary 5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultralott Powerball and Mega Millions 1.1.7.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultranation 1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultranium 3D 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultranium2 3.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultranium4 1.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultrasoft DataShield 1.4.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultrasoft Money 4.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultrasoft NotSync 3.1.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultratron 1.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ultrono Arena 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Ulysses CRM 4.5i.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Umail Campaign 3.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Umax MagicScan 4.x Updater for PowerMac G3 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Umax Magicscan Update 4.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Umax Scanner Utility 3.7.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UnBlocka Turbo+ 2.33.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UnCoverIt 2.0.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UnJpeg 1.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UnPacker 1.3.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UnPowerIt Now 1.06.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unc 1.6.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unc for Windows 1.6.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Uncle Julius and the Anywhere Machine 1.7.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UncleT's Joke Corner 2.10.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Uncover the Net Toolbar 3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Undead Assault 1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Undelete Now 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Undelete Professional Edition 5.0.114.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Undelete Server Edition 5.0.114.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Undelete for Floppy 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Under Water Screensaver 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UnderQuest 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Undercroft 1.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Undersea Life Screensaver 1.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Undersea Life Screensaver 1.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Underthesea3D 3.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Underwater Screensaver 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Underwater World Animated Desktop Wallpaper 1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Underwear (Female) Screensaver 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Undiscovered Trailer .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Undisker 1.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Undo Delete 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unerase for NTFS 2.7.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Uni Chat 0.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Uni Mensa 0.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Uni-Tagger 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UniBeam 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UniCipher 1.61.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UniCvt 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UniDraw Client 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UniScope 2.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UniSudoku 1.4.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UniTest System 4.10.6.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UniTrader 2006 2.2.6.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UniVerse 1.0.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unicals ® CC++ Identifier Renaming Tool 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unicator 1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unicode Image Maker 1.02.01.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unicorn XSLT Processor (Standard Edition) 1.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unicus TextBox Control 1.0.8.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unif PDF To HTML Converter 2.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unified IO 2.56.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unifier 2.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Uninstall Hack 1.59.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Uninstall Manager 2.50.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Uninstall Manager 4.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Uninstall Plus 3.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UninstallDummy 1.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UninstallerPro 2.47.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unios 2.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unipong .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unique Gift Maker Greeting Card Free Edition 2.5.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unique RAR File Library 0.4.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unison 1.7.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unit Calculator 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unit Conversion Tool (Pocket PC) 1.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unit Conversions 2000 2.6.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unit Converter 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unit Converter Pro 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unit Converter Pro 2.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unit Converter for Excel 2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unit Converter for PDA 1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unit Maestro 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unit Mate 2.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unit-to-Unit Converter 2.1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UnitConversion 1.3.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unite .NET 2.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unite 2.4.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\United Alerts - Manchester United Desktop Alerts 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\United Devices Agent 2.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Units Converter 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Units of measurement 2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unity 1.1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Biorhythms 2.02.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Boxing Manager 1.3.4.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal CAD Converter 3.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal CGIPHP Installer 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Calculator & Converter (UCC) 1.03.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Combat .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Combat patch 1.00.02 RC1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Combat patch 2.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Converter 1.23.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Converter 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Converter widget 1.0.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Desktop Ruler 2.8.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Document Converter 4.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Explorer 4.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal File Utility 1.0.2.48.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Flashcard 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Form 2.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal HTTP File Uploader ActiveX 6.28.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal IM History Decoder 1.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Internet Dialer 2.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Mail Drive 1.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Mechanism 2.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Messenger Plus 1.0.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Plug-and-Play Tester 2.05 build 32.4.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Reader IGT 5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Report 5.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Resource Scheduler 2.3 revision 2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Scientific Calculator 3.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Shield 4.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Simlock Remover 1.0.9.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Simlock Remover 1.09.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Soccer Manager 1.1b.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Table Browser 2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Tracking System 2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Translator_Chinese 1.5.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Translator_French 1.5.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Translator_German 1.5.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Translator_Japanese 1.5.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Unit Converter & Calculator 3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Watchdog 1.0 build 1.0.105.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal Wisdom Meditational Audio 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universal engine toolbar 2.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universe Image Creator 1.63.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universe Screensaver 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Universe Updater 5.0.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unix2DOS 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UnixDos 5.1a.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unleashed Screensaver .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unleashed Trailer .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UnleashedBytes Line Counter 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unlimited Menus 1.6.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unlimited Web Space 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\UnlimitedFTP 2.8.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unlocker 1.8.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unlogger 2.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Uno 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unofficial Pimp My Ride Screensaver 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unofficial Spiderman Solitaire 1.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unofficial Top Billboard Searchable Song eBook 1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal II The Awakening Crystal Element mod.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal II The Awakening Dedicated Server 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal II The Awakening XMP Community Bonus Pack .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal II The Awakening XMP full install .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal II The Awakening XMP multiplayer demo .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal II The Awakening XMP patch 7710.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal II The Awakening demo .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Media Server 4.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournamen 2004 TTM mutator .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournament - Unofficial Unreal4Ever mod demo .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournament 1.0.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournament 2003 - DC Carpark CTF map .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournament 2003 - 1-on-1 Contact 2K3 deathmatch map .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournament 2003 - 1-on-1 Intensity deathmatch map .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournament 2003 - 1-on-1 Sniper Forest deathmatch map .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournament 2003 - 10 Pillars deathmatch map .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournament 2003 - 2019 deathmatch map .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournament 2003 - 420 deathmatch map .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournament 2003 - 47 model for UT2003. .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournament 2003 - 666 Beneath the Sea map .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournament 2003 - 666 Hell map .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournament 2003 - A Dark Outlook map .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournament 2003 - A Morita mod .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournament 2003 - A-16 Platform map .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournament 2003 - Abandoned Crypt v2 deathmatch map .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Unreal Tournament 2003 - Abandoned Factory map .zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Upload a torrent.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Välkommen till Familjen 2005 DVDRip XviD avi.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\VA - Erotic Lounge 4-Bare Jewels-2CD-2005-MOD.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\VA - Ibiza Mix [2CD][2006][House][www newpct com].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\VA - Jamaica Beats [2006][Reggae][www newpct com].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\VA - Just Hits Vol 3 [2CD][2006][Pop][www newpct com].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\What Mobile - Cover Girl.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\Wizardry Gaiden Prisoners Of The Battles PS2 FULLCD JAP [solops2.com].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\X-Men 2 avi.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\You Me and Dupree TS XviD TFF.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\[App-ITA] SlySoft - Clone DVD2 v 2 8 9 9 AnyDVD v 6 0 4 5 [www dadotorrents com].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\[C1]Mushishi - 24[XviD][AD2B4A3A] avi.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\[C9][Innocent Venus][02][RMVB].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\[DmzJ][Keroro Gunsou Movie][GB][AVI].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\[DmzJ][Keroro Gunsou Movie][GB][RMVB].zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\[Dymy][AIR GEAR][17] rmvb.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\[F+F]Full Metal Alchemist - Live Action OVA avi.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\[Nipponsei] BLOOD+ OP4 Single - Raion [Jinn] zip.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\[Nipponsei] Mai-Otome BEST COLLECTION zip.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\[Nipponsei] xxxHOLiC ED2 Single - Kagerou [BUCK-TICK] zip.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\[PSP]Ultimate Ghosts'n Goblins [JAP][FULL][OK] [www ESPALPSP com] rar.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\[Q-R] Innocent Venus ep 02 (DivX6 22 640x360 120fps CBR) [07D2E77E] avi.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\[S^M] Witch Blade 18 RAW avi.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\[Shinsen-Subs] NIGHT HEAD GENESIS - 01 [103268BC] avi.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\[T-N]Powerpuff Girls Z - 05 [427E8B40] avi.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\[WtW] Digimon Savers 10 v2 [XviD][0509D803] avi.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\[Your-Mom] School Rumble 2nd - 17 [37DFACD6] avi.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\l'Equipe du 03 08 2006 pdf.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify C1D0-510 7.0.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - A+2003 Practice Test for Exam 220-301 - 224+ Question 7.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - A+2003 Practice Test for Exam 220-302 - 325+ Question 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - CIW Practice Test for Exam 1D0-420 - 153+ Questions 6.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - CIW Practice Test for Exam 1D0-425 - 265+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - CIW Practice Test for Exam 1D0-450 - 150+ Questions 6.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - CIW Practice Test for Exam 1D0-470 - 345+ Questions 8.02.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - CIW Practice Test for Exam 1D0-510 - 485+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - CIW Practice Test for Exam 1D0-520 - 250+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - I-Net+ Practice Test for Exam IK0-002 - 250+ Question 7.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - JCP Practice Test for Exam 310-025 - 232+ Questions 6.10.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - Linux+ Practice Test for Exam XK0-002 - 346+ Question 8.02.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCDST Practice Test for Exam 70-271 - 325+ Questions 8.02.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCDST Practice Test for Exam 70-272 - 238+ Questions 7.02.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCDST Practice Test for Exam 70-272 - 238+ Questions 8.03.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSA Practice Test for Exam N10-002 - 192+ Questions 6.10.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSA Practice Test for Exam SK0-001 - 160+ Questions 6.10.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSD Practice Test for Exam 70-305 - 320+ Questions 8.02.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSD Practice Test for Exam 70-310 - 330+ Questions 8.02.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSD Practice Test for Exam 70-315 - 315+ Questions 8.01.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSD Practice Test for Exam 70-316 - 305+ Questions 8.01.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSD Practice Test for Exam 70-320 - 325+ Questions 8.01.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSD.NET Practice Test for Exam 70-315 - 315+ Questio 8.01.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSD.NET Practice Test for Exam 70-316 - 255+ Questio 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSD.NET Practice Test for Exam 70-320 - 250+ Questio 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-210 - 410+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-214 - 102+ Questions 7.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-215 - 475+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-216 - 335+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-218 - 300+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-219 - 190+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-220 - 160+ Questions 6.09.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-221 - 195+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-223 - 93+ Questions 7.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-224 - 250+ Questions 6.12.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-227 - 200+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-228 - 306+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-229 - 306+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-270 - 294+ Questions 8.01.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-284 - 224+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-290 - 400+ Questions 8.05.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-291 - 400+ Questions 8.04.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-292 - 390+ Questions 8.05.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-293 - 335+ Questions 8.02.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-294 - 320+ Questions 8.02.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-296 - 360+ Questions 8.01.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-298 - 105+ Questions 8.02.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-299 - 290+ Questions 8.02.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE Practice Test for Exam 70-306 - 336+ Questions 8.02.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - MCSE-2003 Practice Test for Exam 70-298 - 90+ Questio 8.01.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - Network+2005 Practice Test for Exam N10-003 - 345+ Qu 8.01.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - OCP Practice Test for Exam 1Z0-001 - 300+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - OCP Practice Test for Exam 1Z0-007 - 280+ Questions 6.07.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - OCP Practice Test for Exam 1Z0-031 - 280+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - OCP Practice Test for Exam 1Z0-032 - 280+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - OCP Practice Test for Exam 1Z0-033 - 280+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - OCP Practice Test for Exam 1Z0-147 - 280+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - SCJP Practice Test for Exam 310-035 - 435+ Questions 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify - Security+ Practice Test for Exam SY0-101 - 253+ Quest 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify C1D0-450 7.0.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify C220-301 A + Core Hardware (2003) 7.0.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify C220-302 A + Operating System Technologies (2003) 7.0.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify CIK0-002 i-Net+PrepKit 7.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify CN10-002+PrepKit 6.10.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify MCDBA MCSD.NET - 70-229,Exam Simulation 8.0.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify O1Z0-147 Oracle9i Program with PLSQL 8.0.5.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify Prekit 70-305 Exam 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify Prekit 70-306 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify Prekit 70-310 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify Prekit [C1D0-470] CIW Professional 8.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify PrepKit For CIW Exam 1D0-420 6.00.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify PrepKit for Microsoft exam 70-028 6.09.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify PrepKit for Microsoft exam 70-029 6.08.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify Prepkit [CIK0-001] i-Net 6.11.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify S310-025 SUN Certified Programmer For JAVA 2 Platform 6.10.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify SCX310-035 Sun Certified Programmer for Java 2 Platform 7.02.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uCertify Server+PrepKit 6.10.05.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uGrabIt 1.0.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uICE 2.19.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uMark Lite 1.1.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uMark Professional 1.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\uMenu 1.03.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\ubSpawn 0.3.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Complete\www torrents-and-more to Powershot Pinball-CRIME.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Documents and Settings\Greg\Shared\PCDJ Red VRM 7.2.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined). C:\Program Files\outlook\p.zip/Setup.exe -> Worm.VB.dw : Cleaned with backup (quarantined).
Post #5
Logfile of HijackThis v1.99.1
Scan saved at 10:04:51 AM, on 8/6/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Dantz\Retrospect\retrorun.exe
C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\WDBtnMgr.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\Program Files\Common Files\{445B6F9C-07D0-1033-0509-039810270001}\Update.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\Program Files\Adobe\Acrobat 7.0\Acrobat\acrobat_sl.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Microsoft Office\Office10\msoffice.exe
C:\hijackthis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.compaq.com/1Q00CDT/0409/bl7.asp
R3 - URLSearchHook: (no name) - _{00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: (no name) - {CBCC61FA-0221-4ccc-B409-CEE865CACA3A} - (no file)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ark8613e] RUNDLL32.EXE wd67b19c.dll,n 0028613c00000003d67b19c
O4 - HKLM\..\Run: [{B6-6F-F9-9C-ZN}] c:\windows\system32\dwdsregt.exe CORN003
O4 - HKLM\..\Run: [sys011468430361] C:\WINDOWS\sys011468430361.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ofou] C:\Program Files\Common Files\ofou\ofoum.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {4ABF810A-F11D-4169-9D5F-7D274F2270A1} - C:\WINDOWS\system32\dmonwv.dll (file missing)
O9 - Extra 'Tools' menuitem: Java - {4ABF810A-F11D-4169-9D5F-7D274F2270A1} - C:\WINDOWS\system32\dmonwv.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{D1FFE526-734B-40EB-BF4D-8666D4DC1639}: NameServer = 192.168.15.1
O18 - Filter: text/html - {B5F86455-BF18-4E12-965A-6642A0AC0549} - (no file)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPZipm12.exe
O23 - Service: Retrospect Launcher (RetroLauncher) - Dantz Development Corporation - C:\Program Files\Dantz\Retrospect\retrorun.exe
O23 - Service: Retrospect WD Service (RetroWDSvc) - Dantz Development Corporation - C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
Post #6
Please download Qoofix by RubbeR DuckY from http://www.malwarebytes.org/Qoofix.zip
  • Unzip all files to a convenient location such as C:\Qoofix.
  • Go to the folder you unzipped all files and run Qoofix.exe.
  • Click Begin Removal and wait for the scan to finish.
  • If an infection has been found, select yes to restart your computer.
Finally post a new Hijack This log and the contents of the Qoofix logfile.
Post #7
Logfile of HijackThis v1.99.1
Scan saved at 4:39:35 PM, on 8/6/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Dantz\Retrospect\retrorun.exe
C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\WDBtnMgr.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\Program Files\Common Files\{445B6F9C-07D0-1033-0509-039810270001}\Update.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Microsoft Office\Office10\msoffice.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Qoofix\Qoofix.exe
C:\hijackthis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.compaq.com/1Q00CDT/0409/bl7.asp
R3 - URLSearchHook: (no name) - _{00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: (no name) - {CBCC61FA-0221-4ccc-B409-CEE865CACA3A} - (no file)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ark8613e] RUNDLL32.EXE wd67b19c.dll,n 0028613c00000003d67b19c
O4 - HKLM\..\Run: [{B6-6F-F9-9C-ZN}] c:\windows\system32\dwdsregt.exe CORN003
O4 - HKLM\..\Run: [sys011468430361] C:\WINDOWS\sys011468430361.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ofou] C:\Program Files\Common Files\ofou\ofoum.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{D1FFE526-734B-40EB-BF4D-8666D4DC1639}: NameServer = 192.168.15.1
O18 - Filter: text/html - {B5F86455-BF18-4E12-965A-6642A0AC0549} - (no file)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPZipm12.exe
O23 - Service: Retrospect Launcher (RetroLauncher) - Dantz Development Corporation - C:\Program Files\Dantz\Retrospect\retrorun.exe
O23 - Service: Retrospect WD Service (RetroWDSvc) - Dantz Development Corporation - C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
Post #8 last edited
Please make sure your PC is set to show all hidden files and folders go here for instructions on how to do this. http://pchowtos.co.uk/index.php?page=tutor…=view&id=34

Open Hijackthis and click scan. Then check mark the following entries

R3 - URLSearchHook: (no name) - _{00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
O3 - Toolbar: (no name) - {CBCC61FA-0221-4ccc-B409-CEE865CACA3A} - (no file)
O4 - HKLM\..\Run: [ark8613e] RUNDLL32.EXE wd67b19c.dll,n 0028613c00000003d67b19c
O4 - HKLM\..\Run: [{B6-6F-F9-9C-ZN}] c:\windows\system32\dwdsregt.exe CORN003
O4 - HKLM\..\Run: [sys011468430361] C:\WINDOWS\sys011468430361.exe
O4 - HKCU\..\Run: [ofou] C:\Program Files\Common Files\ofou\ofoum.exe
O18 - Filter: text/html - {B5F86455-BF18-4E12-965A-6642A0AC0549} - (no file)

Now close all open windows except Hijackthis and click fix checked

Reboot and delete the folders. (if present)

C:\Program Files\Common Files\ofou

Delete the files. (if present)

c:\windows\system32\wd67b19c.dll
c:\windows\system32\dwdsregt.exe
C:\WINDOWS\sys011468430361.exe

Then post a new Hijackthis log here in a reply.
Post #9
Logfile of HijackThis v1.99.1
Scan saved at 5:22:39 PM, on 8/6/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Dantz\Retrospect\retrorun.exe
C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\WDBtnMgr.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\Program Files\Common Files\{445B6F9C-07D0-1033-0509-039810270001}\Update.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Microsoft Office\Office10\msoffice.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\hijackthis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.compaq.com/1Q00CDT/0409/bl7.asp
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{D1FFE526-734B-40EB-BF4D-8666D4DC1639}: NameServer = 192.168.15.1
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPZipm12.exe
O23 - Service: Retrospect Launcher (RetroLauncher) - Dantz Development Corporation - C:\Program Files\Dantz\Retrospect\retrorun.exe
O23 - Service: Retrospect WD Service (RetroWDSvc) - Dantz Development Corporation - C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
Post #10
Download WindPFind

Extract WinPFind.zip to your c:\ folder.

Reboot your computer into Safe Mode

Then open c:\WinPFind and double-click on WinPFind.exe.
When the program is open, click on the Start Scan button to start scanning your computer. Be patient as this scan may take a while.
When it is done, it will show a log and tell you the scan is completed. Reboot your computer back to normal mode and and post the contents of c:\WinPFind\WinPFind.txt as a reply to this topic.
Post #11
WARNING: not all files found by this scanner are bad. Consult with a knowledgable person before proceeding. If you see a message in the titlebar saying "Not responding…" you can ignore it. Windows somethimes displays this message due to the high volume of disk I/O. As long as the hard disk light is flashing, the program is still working properly. »»»»»»»»»»»»»»»»» Windows OS and Versions »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Product Name: Microsoft Windows XP Current Build: Service Pack 2 Current Build Number: 2600 Internet Explorer Version: 6.0.2900.2180 »»»»»»»»»»»»»»»»» Checking Selected Standard Folders »»»»»»»»»»»»»»»»»»»» Checking %SystemDrive% folder… Checking %ProgramFilesDir% folder… Checking %WinDir% folder… Checking %System% folder… UPX! 8/3/2006 8:56:20 PM 61952 C:\WINDOWS\SYSTEM32\ark8613e.dll UPX! 5/31/2006 5:02:04 AM 624640 C:\WINDOWS\SYSTEM32\aswBoot.exe PEC2 7/21/2001 5:15:34 PM 41397 C:\WINDOWS\SYSTEM32\dfrg.msc PEC2 4/19/2006 4:09:20 PM 619156 C:\WINDOWS\SYSTEM32\DivX.dll PECompact2 4/19/2006 4:09:20 PM 619156 C:\WINDOWS\SYSTEM32\DivX.dll PTech 6/19/2006 4:19:42 PM 571184 C:\WINDOWS\SYSTEM32\LegitCheckControl.dll aspack 7/6/2006 9:21:46 PM 6757792 C:\WINDOWS\SYSTEM32\MRT.exe aspack 8/4/2004 1:56:38 AM 708096 C:\WINDOWS\SYSTEM32\ntdll.dll Umonitor 8/4/2004 1:56:46 AM 657920 C:\WINDOWS\SYSTEM32\rasdlg.dll winsync 7/21/2001 5:23:44 PM 1309184 C:\WINDOWS\SYSTEM32\wbdbase.deu PTech 6/19/2006 4:19:26 PM 304944 C:\WINDOWS\SYSTEM32\WgaTray.exe Checking %System%\Drivers folder and sub-folders… PTech 8/3/2004 11:41:38 PM 1309184 C:\WINDOWS\SYSTEM32\drivers\mtlstrm.sys Items found in C:\WINDOWS\SYSTEM32\drivers\etc\hosts Checking the Windows folder and sub-folders for system and hidden files within the last 60 days… 8/6/2006 5:47:28 PM S 2048 C:\WINDOWS\bootstat.dat 8/1/2006 3:35:42 PM RHS 116 C:\WINDOWS\PCGWIN32.LI3 8/3/2006 11:03:36 PM H 54156 C:\WINDOWS\QTFont.qfn 7/10/2006 11:45:22 PM HS 7168 C:\WINDOWS\Thumbs.db 8/3/2006 1:35:24 PM S 268 C:\WINDOWS\CSC\00000001 8/3/2006 1:07:30 PM S 64 C:\WINDOWS\CSC\00000002 8/3/2006 12:56:00 PM S 64 C:\WINDOWS\CSC\csc1.tmp 6/19/2006 4:20:58 PM S 7160 C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WgaNotify.cat 8/6/2006 5:47:14 PM H 8192 C:\WINDOWS\system32\config\default.LOG 8/6/2006 5:47:44 PM H 1024 C:\WINDOWS\system32\config\SAM.LOG 8/6/2006 5:47:30 PM H 16384 C:\WINDOWS\system32\config\SECURITY.LOG 8/6/2006 6:52:20 PM H 106496 C:\WINDOWS\system32\config\software.LOG 8/6/2006 5:47:38 PM H 954368 C:\WINDOWS\system32\config\system.LOG 7/15/2006 3:00:40 AM H 1024 C:\WINDOWS\system32\config\systemprofile\NTUSER.DAT.LOG 7/11/2006 10:40:00 AM HS 388 C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\User\4be38fa8-cae3-428e-9fed-0d9e5a985d41 7/11/2006 10:40:00 AM HS 24 C:\WINDOWS\system32\Microsoft\Protect\S-1-5-18\User\Preferred 8/6/2006 5:45:32 PM H 6 C:\WINDOWS\Tasks\SA.DAT Checking for CPL files… Microsoft Corporation 8/4/2004 1:56:58 AM 68608 C:\WINDOWS\SYSTEM32\access.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 549888 C:\WINDOWS\SYSTEM32\appwiz.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 110592 C:\WINDOWS\SYSTEM32\bthprops.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 135168 C:\WINDOWS\SYSTEM32\desk.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 80384 C:\WINDOWS\SYSTEM32\firewall.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 155136 C:\WINDOWS\SYSTEM32\hdwwiz.cpl Intel Corporation 1/23/2003 6:11:48 AM 94208 C:\WINDOWS\SYSTEM32\igfxcpl.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 358400 C:\WINDOWS\SYSTEM32\inetcpl.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 129536 C:\WINDOWS\SYSTEM32\intl.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 380416 C:\WINDOWS\SYSTEM32\irprops.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 68608 C:\WINDOWS\SYSTEM32\joy.cpl Sun Microsystems, Inc. 11/10/2005 2:03:50 PM 49265 C:\WINDOWS\SYSTEM32\jpicpl32.cpl Microsoft Corporation 8/18/2001 1:37:02 AM 187904 C:\WINDOWS\SYSTEM32\main.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 618496 C:\WINDOWS\SYSTEM32\mmsys.cpl Microsoft Corporation 8/18/2001 1:37:02 AM 35840 C:\WINDOWS\SYSTEM32\ncpa.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 25600 C:\WINDOWS\SYSTEM32\netsetup.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 257024 C:\WINDOWS\SYSTEM32\nusrmgr.cpl Microsoft Corporation 8/18/2001 1:37:02 AM 36864 C:\WINDOWS\SYSTEM32\nwc.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 32768 C:\WINDOWS\SYSTEM32\odbccp32.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 114688 C:\WINDOWS\SYSTEM32\powercfg.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 298496 C:\WINDOWS\SYSTEM32\sysdm.cpl Microsoft Corporation 8/18/2001 1:37:02 AM 28160 C:\WINDOWS\SYSTEM32\telephon.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 94208 C:\WINDOWS\SYSTEM32\timedate.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 148480 C:\WINDOWS\SYSTEM32\wscui.cpl Microsoft Corporation 5/26/2005 5:16:30 AM 174360 C:\WINDOWS\SYSTEM32\wuaucpl.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 68608 C:\WINDOWS\SYSTEM32\dllcache\access.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 155136 C:\WINDOWS\SYSTEM32\dllcache\hdwwiz.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 358400 C:\WINDOWS\SYSTEM32\dllcache\inetcpl.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 129536 C:\WINDOWS\SYSTEM32\dllcache\intl.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 68608 C:\WINDOWS\SYSTEM32\dllcache\joy.cpl Microsoft Corporation 8/18/2001 1:37:02 AM 35840 C:\WINDOWS\SYSTEM32\dllcache\ncpa.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 257024 C:\WINDOWS\SYSTEM32\dllcache\nusrmgr.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 32768 C:\WINDOWS\SYSTEM32\dllcache\odbccp32.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 155648 C:\WINDOWS\SYSTEM32\dllcache\sapi.cpl Microsoft Corporation 8/18/2001 1:37:02 AM 28160 C:\WINDOWS\SYSTEM32\dllcache\telephon.cpl Microsoft Corporation 8/4/2004 1:56:58 AM 94208 C:\WINDOWS\SYSTEM32\dllcache\timedate.cpl Microsoft Corporation 5/26/2005 5:16:30 AM 174360 C:\WINDOWS\SYSTEM32\dllcache\wuaucpl.cpl Intel Corporation 1/23/2003 6:11:48 AM 94208 C:\WINDOWS\SYSTEM32\ReinstallBackups\0004\DriverFiles\igfxcpl.cpl »»»»»»»»»»»»»»»»» Checking Selected Startup Folders »»»»»»»»»»»»»»»»»»»»» Checking files in %ALLUSERSPROFILE%\Startup folder… 8/6/2006 5:12:48 PM 2335 C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk 11/2/2002 7:35:32 PM HS 84 C:\Documents and Settings\All Users\Start Menu\Programs\Startup\desktop.ini 12/3/2004 4:35:16 PM 1730 C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk 12/25/2005 4:23:20 AM 1559 C:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk Checking files in %ALLUSERSPROFILE%\Application Data folder… 11/2/2002 11:22:58 AM HS 62 C:\Documents and Settings\All Users\Application Data\desktop.ini Checking files in %USERPROFILE%\Startup folder… 11/2/2002 7:35:32 PM HS 84 C:\Documents and Settings\Greg\Start Menu\Programs\Startup\desktop.ini Checking files in %USERPROFILE%\Application Data folder… 11/2/2002 11:22:56 AM HS 62 C:\Documents and Settings\Greg\Application Data\desktop.ini »»»»»»»»»»»»»»»»» Checking Selected Registry Keys »»»»»»»»»»»»»»»»»»»»»»» [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform] = [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] {6C689052-D078-48ED-9A39-D7FA65388CFF} = {7851D29D-2859-45F1-A95F-E16DC4EA591F} = {3D74E5BD-EE07-4B0E-ACFD-0F0AFA0170A7} = {4D5F2FFC-72C7-4D69-A562-A3CF8D558B04} = {2D5FB81D-ACC0-420B-A0AE-3303082268FE} = C:\WINDOWS\system32\uorcoina.dll [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] [HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers] HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Adobe.Acrobat.ContextMenu {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} = C:\Program Files\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.dll HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\avast {472083B0-C522-11CF-8763-00608CC02F24} = C:\Program Files\Alwil Software\Avast4\ashShell.dll HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\ewido anti-spyware {8934FCEF-F5B8-468f-951F-78A921CD3920} = C:\Program Files\ewido anti-spyware 4.0\context.dll HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Offline Files {750fdf0e-2a26-11d1-a3ea-080036587f03} = %SystemRoot%\System32\cscui.dll HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Open With {09799AFB-AD67-11d1-ABCD-00C04FC30936} = %SystemRoot%\system32\SHELL32.dll HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Open With EncryptionMenu {A470F8CF-A1E8-4f65-8335-227475AA5C46} = %SystemRoot%\system32\SHELL32.dll HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\WinZip {E0D79304-84BE-11CE-9641-444553540000} = C:\PROGRA~1\WINZIP\WZSHLSTB.DLL HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\{a2a9545d-a0c2-42b4-9708-a0b2badd77c8} Start Menu Pin = %SystemRoot%\system32\SHELL32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers] HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\avast {472083B0-C522-11CF-8763-00608CC02F24} = C:\Program Files\Alwil Software\Avast4\ashShell.dll HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\WinZip {E0D79304-84BE-11CE-9641-444553540000} = C:\PROGRA~1\WINZIP\WZSHLSTB.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers] HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\EncryptionMenu {A470F8CF-A1E8-4f65-8335-227475AA5C46} = %SystemRoot%\system32\SHELL32.dll HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\ewido anti-spyware {8934FCEF-F5B8-468f-951F-78A921CD3920} = C:\Program Files\ewido anti-spyware 4.0\context.dll HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\Offline Files {750fdf0e-2a26-11d1-a3ea-080036587f03} = %SystemRoot%\System32\cscui.dll HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\Sharing {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} = ntshrui.dll HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\WinZip {E0D79304-84BE-11CE-9641-444553540000} = C:\PROGRA~1\WINZIP\WZSHLSTB.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers] HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{0D2E74C4-3C34-11d2-A27E-00C04FC30871} = %SystemRoot%\system32\SHELL32.dll HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{24F14F01-7B1C-11d1-838f-0000F80461CF} = %SystemRoot%\system32\SHELL32.dll HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{24F14F02-7B1C-11d1-838f-0000F80461CF} = %SystemRoot%\system32\SHELL32.dll HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{66742402-F9B9-11D1-A202-0000F81FEDEE} = %SystemRoot%\system32\SHELL32.dll HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers\{F9DB5320-233E-11D1-9F84-707F02C10627} = C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{182EC0BE-5110-49C8-A062-BEB1D02A220B} Adobe PDF = C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{4528BBE0-4E08-11D5-AD55-00010333D0AD} = HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{4D5C8C25-D075-11d0-B416-00C04FB90376} &Tip of the Day = %SystemRoot%\System32\shdocvw.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar] {47833539-D0C5-4125-9FA8-0819E2EAAC93} = Adobe PDF : C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} MenuText = Sun Java Console : C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263} ButtonText = Research : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683} ButtonText = Messenger : C:\Program Files\Messenger\msmsgs.exe [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{32683183-48a0-441b-a342-7c2a440a9478} = HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{EFA24E64-B078-11D0-89E4-00C04FC9E26E} Explorer Band = %SystemRoot%\System32\shdocvw.dll [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser {01E04581-4EEE-11D0-BFE9-00AA005B4383} = &Address : %SystemRoot%\System32\browseui.dll {47833539-D0C5-4125-9FA8-0819E2EAAC93} = Adobe PDF : C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser {01E04581-4EEE-11D0-BFE9-00AA005B4383} = &Address : %SystemRoot%\System32\browseui.dll {0E5CBF21-D15F-11D0-8301-00AA005B4383} = &Links : %SystemRoot%\system32\SHELL32.dll {47833539-D0C5-4125-9FA8-0819E2EAAC93} = Adobe PDF : C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll {EF99BD32-C1FB-11D2-892F-0090271D4F88} = &Yahoo! Toolbar : [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] IgfxTray C:\WINDOWS\System32\igfxtray.exe HotKeysCmds C:\WINDOWS\System32\hkcmd.exe srmclean C:\Cpqs\Scom\srmclean.exe SunJavaUpdateSched C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe WD Button Manager WDBtnMgr.exe Acrobat Assistant 7.0 "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" QuickTime Task "C:\Program Files\QuickTime\qttask.exe" -atboottime avast! C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe !ewido "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents] IMAIL Installed = 1 MAPI Installed = 1 MSFS Installed = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] Yahoo! Pager "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet ctfmon.exe C:\WINDOWS\system32\ctfmon.exe PopUpStopperFreeEdition "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\load] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\run] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum {BDEADF00-C265-11D0-BCED-00A0C90AB50F} = C:\PROGRA~1\COMMON~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL {6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} = {0DF44EAA-FF21-4412-828E-260A8728E7F1} = HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Ratings HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system dontdisplaylastusername 0 legalnoticecaption legalnoticetext shutdownwithoutlogon 1 undockwithoutlogon 1 disablecad 0 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies] HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer NoDriveTypeAutoRun 145 HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run {445B6F9C-07D0-1033-0509-039810270001} "C:\Program Files\Common Files\{445B6F9C-07D0-1033-0509-039810270001}\Update.exe" mc-110-12-0000137 HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System DisableRegistryTools 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] PostBootReminder {7849596a-48ea-486e-8937-a2a3009f31a9} = %SystemRoot%\system32\SHELL32.dll CDBurn {fbeb8a05-beee-4442-804e-409d6c4515e9} = %SystemRoot%\system32\SHELL32.dll WebCheck {E6FB5E20-DE35-11CF-9C87-00AA005127ED} = %SystemRoot%\System32\webcheck.dll SysTray {35CEC8A3-2BE6-11D2-8773-92E220524153} = C:\WINDOWS\System32\stobject.dll UPnPMonitor {e57ce738-33e8-4c51-8354-bb4de9d215d1} = C:\WINDOWS\system32\upnpui.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] UserInit = C:\WINDOWS\system32\Userinit.exe, Shell = explorer.exe System = HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon = WgaLogon.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Your Image File Name Here without a path Debugger = ntsd -d [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] AppInit_DLLs »»»»»»»»»»»»»»»»»»»»»»»» Scan Complete »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» WinPFind v1.4.1 - Log file written to "WinPFind.Txt" in the WinPFind folder. Scan completed on 8/6/2006 7:37:44 PM
Post #12
Click start > run type regedit /e C:\run.txt "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run" click ok Go to C:\run_key.txt and copy and paste the log here in a reply.
Post #13
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] "{445B6F9C-07D0-1033-0509-039810270001}"="\"C:\\Program Files\\Common Files\\{445B6F9C-07D0-1033-0509-039810270001}\\Update.exe\" mc-110-12-0000137"
Post #14 last edited
Open Notepad copy and paste the following… Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] "{445B6F9C-07D0-1033-0509-039810270001}"=- Save it as fix.reg save as type all files to the dekstop then go to the dekstop double click it will ask to merge into the registery allow it to do so Reboot and delete the folders. (if present) C:\Program Files\Common Files\{445B6F9C-07D0-1033-0509-039810270001} Then post a new Hijackthis log here in a reply.
Post #15
Boot into safemode to do this keep tapping F8 on your keyboard while your PC is starting up you will get a menu select safemode. Delete the folders. (if present) C:\Program Files\Common Files\{445B6F9C-07D0-1033-0509-039810270001} Reboot and post a new Hijackthis log here in a reply.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI