What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

new

12 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Having problems with popups in IE, not in netscape. I have run adaware and spybot. Had a problem with DriveCleaner popups but found and deleted it. Hijack this log follows. Logfile of HijackThis v1.99.1 Scan saved at 2:38:37 PM, on 8/11/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\VTTimer.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe E:\Program Files\WinZip\WZQKPICK.EXE C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Netscape\Netscape Browser\netscape.exe C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\MICHAE~1\LOCALS~1\Temp\Rar$EX01.875\HijackThis.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [VTTimer] VTTimer.exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE O4 - HKLM\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe" O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ? O4 - Global Startup: WinZip Quick Pick.lnk = E:\Program Files\WinZip\WZQKPICK.EXE O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\Autodesk Architectural Desktop 3\InstBanr.ocx O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\Autodesk Architectural Desktop 3\InstFred.ocx O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\Autodesk Architectural Desktop 3\AcPreview.ocx O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
Post #2
Thanks for sending your information. We are sorry for the delay in responding. The volunteers here are swamped and unfortunately not all logs get answered as quickly as we'd like.

If you still need help with your problem, please run Hijack This again. Scan and copy the log, then post it here, in this topic . We do need to see a current logfile.

Please provide a description of the problem.

Please do not edit your Hijack This log. We need to see the entire logfile, with no revisions. If anything is disabled using MSCONFIG, please enable all, before scanning with Hijack This.

Please use the [external image: Posted Image] button to reply.
Post #3
I am getting popups in internet explorer. Can't seem to clear them. I also had drive cleaner pop ups. I thought that I had gotten rid of it, but they are back. Pop ups are frome casinos and games. not sure what to do adaware and spybot don't find them. Logfile of HijackThis v1.99.1 Scan saved at 9:25:11 PM, on 8/15/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\VTTimer.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe E:\Program Files\WinZip\WZQKPICK.EXE C:\Documents and Settings\michael zorn\Desktop\YPROXY.EXE C:\PROGRA~1\NETSCAPE\NETSCA~1\NETSCAPE.EXE C:\Program Files\Hijackthis\HijackThis.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [VTTimer] VTTimer.exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE O4 - HKLM\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe" O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ? O4 - Global Startup: WinZip Quick Pick.lnk = E:\Program Files\WinZip\WZQKPICK.EXE O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\Autodesk Architectural Desktop 3\InstBanr.ocx O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\Autodesk Architectural Desktop 3\InstFred.ocx O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\Autodesk Architectural Desktop 3\AcPreview.ocx O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
Post #4
Hi mzee:
I'm seeing a couple of serious problems.
You do not seem to be using an Anti-Virus, or a Firewall. Both are absoutely essential, for any PC that is ever connected to the Internet.

Below you will find a link to Zone Alarm, which has a good free firewall for personal use, another for kerio (free for personal use) and a link to sygate. Note that it is not recommended to run two firewalls simultaneously, not even along with the Microsoft XP firewall.
http://www.zonelabs.com/store/content/cata…sku_list_za.jsp
http://www.kerio.com/us/kpf_home.html
http://smb.sygate.com/products/spf_pro.htm

Then:
To disable the XP firewall: Control Panel > Internet Options > Connections > Settings > Properties > Advanced…. Remove the check mark from the "Internet Connection Firewall" box and click "OK." Now, install your new firewall, without any further delay and certainly before going back onto the Internet.

Here is a link for a free AVG ANTI-VIRUS:

http://free.grisoft.com/freeweb.php/doc/1/lng/us/tpl/v5

Next:
Since your Hijack This log looks to be clean, lets do a few online Virus scans and run a few programs, to see if anything can be found.

Please use the following links to run two, or more of these online Virus Scanners and let them fix whatever they find.

When using Trend Micro, be sure and put a check in the box by "Auto Clean" before you do the scan. If it finds anything that it cannot clean have it delete it or make a note of the file location, so you can delete it yourself.
TrendMicro HouseCall
http://www.kaspersky.com/virusscanner
http://www.kaspersky.co.uk/news.html?id=146100010
Bitdefender and let it delete everything it finds.
eTrust AntiVirus Web Scanner
Panda ActiveScan
Note any thing that can't be fixed.

Please reboot when finished.


Then, Please download and install Ad-Aware SE and Spybot S&D according to the following instructions. If you already have these programs, please make sure they are the latest version and have been updated today. Then run full systems scans as described below.

Install and how to use the NEW Ad-aware SE
http://www.bleepingcomputer.com/forums/ind…showtutorial=48

Reboot after using Ad-Aware SE.
Download the VX cleaner plug in for Adaware. Install it, then open Adaware & go to *add-ons* & run the plug-in. If anything is found, select *clean system* & when done, reboot & run Adaware & let it finish the clean-up. Reboot again.


Would you please download the Spybot S&D program from here Spybot S&D and install it.
  • Select Search for updates.
  • Then select all available updates that are displayed in the white box.
  • Select a download mirror nearest your location.
  • Then select Download updates .
  • Shut down and restart Spybot.
  • Select the Search and destroy icon and click on Check for Problems.
  • Delete/fix anything that spybot lists In RED.
.

Then, please REBOOT, to allow Spybot to finish working.

* Clean your Cache and Cookies in IE:
Close all instances of Outlook Express and Internet Explorer
Go to Control Panel > Internet Options > General tab
Click the "Delete Cookies" button
Next to it, Click the "Delete Files" button
When prompted, place a check in: "Delete all offline content", click OK


* Clean your Cache and Cookies in Firefox (In case you also have Firefox installed):
Go to Tools > Options.
Click Privacy in the menu on the left side of the Options window.
Click the Clear button located to the right of each option (History, Cookies, Cache).
Click OK to close the Options window
Alternatively, you can clear all information stored while browsing by clicking Clear All.
A confirmation dialog box will be shown before clearing the information.


* Clean other Temporary files + Recycle bin
Go to start > run and type: cleanmgr and click ok.
Let it scan your system for files to remove.
Make sure Temporary Files, Temporary Internet Files, and Recycle Bin are the only things checked.
Press OK to remove them.

Please Note: This is a new version of Ewido Anti-Malware. It has a new set of setup and running instructions. Please delete any other versions and use the setup and running directions below.
This may take several hours to finish, so be aware it will not be quick. It's best to wait until you have the time to spare for it to run completely through.

Download ewido anti-spyware from HERE and save that file to your desktop.
This is a 30 day trial of the program
  • Once you have downloaded ewido anti-spyware, locate the icon on the desktop and double-click it to launch the set up program.
  • Once the setup is complete you will need run ewido and update the definition files.
  • On the main screen select the icon "Update" then select the "Update now" link.
    • Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
  • Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
  • Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
  • Under "Reports"
    • Select "Automatically generate report after every scan"
    • Un-Select "Only if threats were found"

      • Close ewido anti-spyware, Do Not run a scan just yet, we will shortly.

    • Reboot your computer into SafeMode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight SafeMode then hit enter.
      • IMPORTANT: Do not open any other windows or programs while ewido is scanning, it may interfere with the scanning proccess:
    • Lauch ewido-anti-spyware by double-clicking the icon on your desktop.
    • Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
    • ewido will now begin the scanning process, be patient this may take a little time.
      • Once the scan is complete do the following:
    • If you have any infections you will prompted, then select "Apply all actions"
    • Next select the "Reports" icon at the top.
    • Select the "Save report as" button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
      • I suggest saving it to your desktop.

      Close ewido and reboot your system back into Normal Mode.

      Then please run Hijack This in NORMAL MODE. Scan and copy the log, then post it into this topic, along with the Ewido report.

      Please use the [external image: Posted Image] button to reply.
    Post #5
    Hi,
    Bit defender found winloader trojan, house call found spyware_trak_pwstealer,
    avg found dzr. ran both spybot and adaware with updates. Still getting some popups before ewido.ran ewido and found a ton of track9ng cookies. Not sure where we stand with popups in Ie. Currently using netscape. another question or maybe a fact. I am on a lan. When I installed zone alarm iam unable to access my shared files on server. I thought a firewall was installed on server, but not sure. It is a linux system and I don't know anything about it.

    here are the following reports.

    Logfile of HijackThis v1.99.1
    Scan saved at 9:12:48 PM, on 8/16/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    C:\Program Files\ewido anti-spyware 4.0\guard.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\VTTimer.exe
    C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
    C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
    C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
    C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\ewido anti-spyware 4.0\ewido.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
    E:\Program Files\WinZip\WZQKPICK.EXE
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Hijackthis\HijackThis.exe

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
    O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
    O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
    O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    O4 - HKLM\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
    O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
    O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
    O4 - Global Startup: WinZip Quick Pick.lnk = E:\Program Files\WinZip\WZQKPICK.EXE
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
    O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\Autodesk Architectural Desktop 3\InstBanr.ocx
    O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\Autodesk Architectural Desktop 3\InstFred.ocx
    O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\Autodesk Architectural Desktop 3\AcPreview.ocx
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

    ———————————————————
    ewido anti-spyware - Scan Report
    ———————————————————

    + Created at: 9:08:48 PM 8/16/2006

    + Scan result:



    :mozilla.124:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.150:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.22:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\8wsa35cm\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.23:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\8wsa35cm\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.24:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\8wsa35cm\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.25:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\8wsa35cm\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.269:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.40:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.45:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.46:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.47:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.48:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.49:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.50:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.51:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.52:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.54:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.55:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.56:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.57:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.58:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.59:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.60:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.61:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.61:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.628:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.62:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.62:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.64:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.652:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.65:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.65:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.66:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.66:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.67:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.67:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.68:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.68:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.69:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.69:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.70:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.70:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.71:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.71:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.72:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.72:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.73:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.73:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.74:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.74:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.75:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.75:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.76:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.76:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.77:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.77:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.78:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.78:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.79:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.79:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.80:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.80:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.81:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.81:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.82:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.83:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.84:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.85:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.86:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.86:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.87:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.88:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.89:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.90:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.91:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.92:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.93:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.94:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.956:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.95:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    C:\Documents and Settings\michael zorn\Cookies\michael zorn@2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    C:\Documents and Settings\michael zorn\Cookies\michael zorn@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    E:\Documents and Settings\mike\Cookies\mike@2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    E:\Documents and Settings\mike\Cookies\mike@cnn.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    E:\Documents and Settings\mike\Cookies\mike@msnportal.112.2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
    :mozilla.629:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.7search : Cleaned with backup (quarantined).
    :mozilla.630:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.7search : Cleaned with backup (quarantined).
    :mozilla.812:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup (quarantined).
    :mozilla.813:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup (quarantined).
    :mozilla.814:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup (quarantined).
    :mozilla.815:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup (quarantined).
    :mozilla.816:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup (quarantined).
    :mozilla.817:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup (quarantined).
    :mozilla.818:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup (quarantined).
    :mozilla.819:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup (quarantined).
    :mozilla.213:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
    :mozilla.214:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
    :mozilla.215:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
    C:\Documents and Settings\michael zorn\Cookies\michael [removed][1].txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined).
    :mozilla.10:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\8wsa35cm\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
    :mozilla.11:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\8wsa35cm\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
    :mozilla.20:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
    :mozilla.22:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
    :mozilla.23:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
    :mozilla.24:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
    :mozilla.25:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
    :mozilla.64:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
    :mozilla.6:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\8wsa35cm\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
    :mozilla.82:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
    :mozilla.83:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
    :mozilla.84:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
    :mozilla.85:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
    :mozilla.9:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\8wsa35cm\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
    C:\Documents and Settings\michael zorn\Cookies\michael zorn@advertising[2].txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
    :mozilla.198:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
    :mozilla.32:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
    C:\Documents and Settings\michael zorn\Cookies\michael zorn@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
    :mozilla.173:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Bfast : Cleaned with backup (quarantined).
    :mozilla.174:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned with backup (quarantined).
    :mozilla.868:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned with backup (quarantined).
    :mozilla.964:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup (quarantined).
    :mozilla.965:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup (quarantined).
    :mozilla.790:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned with backup (quarantined).
    :mozilla.232:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
    :mozilla.233:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
    :mozilla.234:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
    :mozilla.235:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
    :mozilla.603:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
    :mozilla.604:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
    :mozilla.605:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
    :mozilla.606:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
    :mozilla.607:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
    :mozilla.202:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Centrport : Cleaned with backup (quarantined).
    :mozilla.396:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Clickbank : Cleaned with backup (quarantined).
    :mozilla.203:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup (quarantined).
    :mozilla.204:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup (quarantined).
    :mozilla.210:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup (quarantined).
    :mozilla.390:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup (quarantined).
    E:\Documents and Settings\mike\Cookies\mike@com[2].txt -> TrackingCookie.Com : Cleaned with backup (quarantined).
    :mozilla.141:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Commission-junction : Cleaned with backup (quarantined).
    :mozilla.142:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Commission-junction : Cleaned with backup (quarantined).
    :mozilla.179:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Commission-junction : Cleaned with backup (quarantined).
    :mozilla.180:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Commission-junction : Cleaned with backup (quarantined).
    :mozilla.120:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned with backup (quarantined).
    :mozilla.168:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned with backup (quarantined).
    :mozilla.290:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned with backup (quarantined).
    :mozilla.691:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned with backup (quarantined).
    :mozilla.549:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Cqcounter : Cleaned with backup (quarantined).
    :mozilla.15:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\8wsa35cm\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined).
    :mozilla.28:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined).
    :mozilla.470:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined).
    :mozilla.57:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined).
    C:\Documents and Settings\michael zorn\Cookies\michael zorn@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined).
    :mozilla.199:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Enliven : Cleaned with backup (quarantined).
    :mozilla.621:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined).
    :mozilla.928:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined).
    :mozilla.929:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined).
    :mozilla.930:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined).
    :mozilla.931:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined).
    :mozilla.162:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Estat : Cleaned with backup (quarantined).
    :mozilla.175:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup (quarantined).
    :mozilla.176:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup (quarantined).
    :mozilla.181:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup (quarantined).
    :mozilla.183:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup (quarantined).
    :mozilla.775:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup (quarantined).
    :mozilla.776:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup (quarantined).
    :mozilla.777:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup (quarantined).
    :mozilla.240:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined).
    :mozilla.241:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined).
    :mozilla.242:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined).
    :mozilla.243:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined).
    :mozilla.244:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined).
    :mozilla.245:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined).
    :mozilla.38:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined).
    :mozilla.39:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined).
    :mozilla.40:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined).
    :mozilla.858:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Goclick : Cleaned with backup (quarantined).
    :mozilla.859:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Goclick : Cleaned with backup (quarantined).
    :mozilla.389:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined).
    :mozilla.475:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined).
    :mozilla.492:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined).
    :mozilla.499:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined).
    :mozilla.511:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined).
    :mozilla.665:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined).
    :mozilla.668:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined).
    :mozilla.755:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined).
    :mozilla.771:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined).
    :mozilla.772:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined).
    :mozilla.886:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined).
    :mozilla.927:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined).
    :mozilla.490:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
    :mozilla.491:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
    :mozilla.591:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
    :mozilla.900:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
    :mozilla.901:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
    :mozilla.794:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
    :mozilla.795:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
    :mozilla.796:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
    :mozilla.797:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
    :mozilla.624:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Hotlog : Cleaned with backup (quarantined).
    :mozilla.189:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined).
    :mozilla.190:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined).
    :mozilla.192:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined).
    :mozilla.461:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined).
    :mozilla.462:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined).
    :mozilla.463:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined).
    :mozilla.464:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined).
    :mozilla.495:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined).
    :mozilla.498:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined).
    :mozilla.504:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined).
    :mozilla.505:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined).
    :mozilla.765:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined).
    :mozilla.767:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined).
    :mozilla.945:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined).
    :mozilla.946:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined).
    :mozilla.553:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned with backup (quarantined).
    :mozilla.10:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined).
    :mozilla.11:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined).
    :mozilla.519:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined).
    :mozilla.520:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined).
    C:\Documents and Settings\michael zorn\Cookies\michael zorn@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined).
    :mozilla.137:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup (quarantined).
    :mozilla.138:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup (quarantined).
    :mozilla.139:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup (quarantined).
    :mozilla.140:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup (quarantined).
    :mozilla.97:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Paycounter : Cleaned with backup (quarantined).
    :mozilla.96:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
    :mozilla.97:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
    :mozilla.98:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
    :mozilla.99:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
    C:\Documents and Settings\michael zorn\Cookies\michael [removed][1].txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
    :mozilla.117:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup (quarantined).
    :mozilla.118:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup (quarantined).
    :mozilla.151:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup (quarantined).
    :mozilla.152:E:\Documents and Settings\mike\Application Data\Netscape\NSB\Profiles\d4j3daet.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup (quarantined).
    :mozilla.725:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup (quarantined).
    :mozilla.726:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup (quarantined).
    :mozilla.133:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup (quarantined).
    :mozilla.134:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup (quarantined).
    :mozilla.135:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup (quarantined).
    :mozilla.115:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined).
    :mozilla.116:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined).
    :mozilla.117:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined).
    :mozilla.118:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined).
    :mozilla.119:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined).
    :mozilla.120:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined).
    :mozilla.121:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined).
    :mozilla.122:C:\Documents and Settings\michael zorn\Application Data\Netscape\NSB\Profiles\c2iho8e1.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined).
    :mozilla.123:C:&#
    Post #6
    Hi mzee:
    Looks like there were some things Hijack This did not see. Glad to be rid of them. I know about as much as you about Linux, but if Zone Alarm is giving you those kind of problems, I would download Kerio and then Uninstall Zone Alarm, then install Kerio and see if it causes the same problems with your shared files on the server. If it does, contact someone on your lan, advise them of the problem and ask for their recommendation for a firewall. You do need a firewall on your PC, even if the server has one of its own.

    You can empty/delete Ewidos quarantine. No use letting those cookies hang around any longer.

    Updating Java
    • Download the latest version of Java Runtime Environment (JRE) 5.0 Update 08.
    • Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
    • Click the "Download" button to the right.
    • Check the box that says: "Accept License Agreement".
    • The page will refresh.
    • Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
    • Close any programs you may have running - especially your web browser.
    • Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
    • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
    • Click the Remove or Change/Remove button.
    • Repeat as many times as necessary to remove each Java versions.
    • Reboot your computer once all Java components are removed.
    • Then from your desktop double-click on jre-1_5_0_08-windowsi586-p.exe to install the newest version.
    Your Hijack This logfile looks to be clean.
    If there are no problems, please be sure to use the link to see TonyKlein's good advice (below). Those Protection programs offered free, are some of the best available.

    One of the best features of Windows XP is the System Restore option, however if Malware infects a computer with this operating system the Malware can be backed up in the System Restore folder. Therefore, clearing the restore points is necessary after a virus removal.

    To reset your restore points, please note that you will need to log into your computer with an account which has full administrator access. You will know if the account has administrator access because you will be able to see the System Restore tab. If the tab is missing, you are logged in under a limited account.

    (winXP)

    1. Turn off System Restore.
    On the Desktop, right-click My Computer.
    Click Properties.
    Click the System Restore tab.
    Check Turn off System Restore.
    Click Apply, and then click OK.

    2. Reboot.

    3. Turn ON System Restore.
    On the Desktop, right-click My Computer.
    Click Properties.
    Click the System Restore tab.
    UN-Check *Turn off System Restore*.
    Click Apply, and then click OK.

    * Clean your Cache and Cookies in IE:
    Close all instances of Outlook Express and Internet Explorer
    Go to Control Panel > Internet Options > General tab
    Click the "Delete Cookies" button
    Next to it, Click the "Delete Files" button
    When prompted, place a check in: "Delete all offline content", click OK

    * Clean your Cache and Cookies in Firefox (In case you also have Firefox installed):
    Go to Tools > Options.
    Click Privacy in the menu on the left side of the Options window.
    Click the Clear button located to the right of each option (History, Cookies, Cache).
    Click OK to close the Options window
    Alternatively, you can clear all information stored while browsing by clicking Clear All.
    A confirmation dialog box will be shown before clearing the information.

    * Clean other Temporary files + Recycle bin

    Go to start > run and type: cleanmgr and click ok.
    Let it scan your system for files to remove.
    Make sure Temporary Files, Temporary Internet Files, and Recycle Bin are the only things checked.
    Press OK to remove them.

    Also, see TonyKlein's good advice and highly recommended FREE PROTECTION PROGRAMS. A must for all PC users.
    http://forums.spywareinfo.com/index.php?showtopic=60955
    So how did I get infected in the first place?

    Safe surfing. :wavey:
    Post #9
    No, those popups do not ring a bell with me. Have you completed all in my previous post, including seeing Tony Kleins advice ? If not, please do. I especially recommend Spyware Blaster, but all those can be used at the same time with no problem and with very minimal system resources being used. If anyone needs those, you do. From what I've seen, you do not have a popup blocker installed. You'll find the Google Toolbar is highly recommended, which has a built in popup blocker. The Firefox browser is also highly recommended, which has a built in popup blocker. I use both the Google Toolbar and Firefox, as well as all those additional recommended programs, with no problems. Also, I would advise against using IE for anything, except for obtaining updates from Microsoft. Try that and see if it helps. :D
    Post #10
    still getting popups from same sites. gad network and winsoft. however changed cookie setting in security as you said and I can block them from adding cookies.. I did restart and have new restore date. added some of reccomended software. Will probably use netscape for most part. did download firefox for use if needed. Thanks for all the help and reccomendations. :wavey: :wavey:
    Post #11
    Hi mzee:
    Lets give this a try, since nothing is showing in your lase HJT logfile.

    You may want to print out these instructions for reference, since you will have to restart your computer during the fix.

    Please download AproposFix from here:
    http://swandog46.geekstogo.com/aproposfix.exe

    Save it to your desktop but do NOT run it yet.

    Then please reboot your computer in Safe Mode by doing the following:
    1) Restart your computer
    2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
    3) Instead of Windows loading as normal, a menu should appear
    4) Select the first option, to run Windows in Safe Mode.


    Once in Safe Mode, please double-click aproposfix.exe and unzip it to the desktop. Open the aproposfix folder on your desktop and run RunThis.bat. Follow the prompts.

    When the tool is finished, please reboot back into normal mode, and post a new HijackThis log, along with the entire contents of the log.txt file in the aproposfix folder.
    Post #13
    oops forgot to add logs. try again
    Logfile of HijackThis v1.99.1
    Scan saved at 7:24:20 PM, on 8/17/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    C:\Program Files\ewido anti-spyware 4.0\guard.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\VTTimer.exe
    C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
    C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
    C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
    C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\ewido anti-spyware 4.0\ewido.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
    E:\Program Files\WinZip\WZQKPICK.EXE
    C:\WINDOWS\system32\wuauclt.exe
    C:\PROGRA~1\NETSCAPE\NETSCA~1\NETSCAPE.EXE
    C:\Program Files\Hijackthis\HijackThis.exe

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
    O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
    O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
    O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    O4 - HKLM\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
    O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
    O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
    O4 - Global Startup: WinZip Quick Pick.lnk = E:\Program Files\WinZip\WZQKPICK.EXE
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
    O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\Autodesk Architectural Desktop 3\InstBanr.ocx
    O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\Autodesk Architectural Desktop 3\InstFred.ocx
    O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\Autodesk Architectural Desktop 3\AcPreview.ocx
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

    Log of AproposFix v1.1

    ************

    Running from directory:
    C:\Documents and Settings\michael zorn\Desktop\aproposfix

    ************



    Registry entries found:


    ************

    No service found!

    Removing hidden folder:
    No folder found!

    Deleting files:


    Backing up files:
    Done!

    Removing registry entries:

    REGEDIT4


    Done!

    Finished!
    Post #14
    Hi mzee: You have to actually download and use those programs and popup blockers for them to work. :P Also, your Sun Java is still behind on updates.
    Post #15
    back again,
    updated java,added spyblaster. However aproposfix doesn't take any time to run in safe mode. host does not seem to install. not sure what to do. i have included new hijack and aproposfix logs.

    Logfile of HijackThis v1.99.1
    Scan saved at 10:12:01 AM, on 8/18/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    C:\Program Files\ewido anti-spyware 4.0\guard.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\VTTimer.exe
    C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
    C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
    C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
    C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\ewido anti-spyware 4.0\ewido.exe
    C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
    E:\Program Files\WinZip\WZQKPICK.EXE
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Hijackthis\HijackThis.exe

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
    O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
    O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
    O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    O4 - HKLM\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\backWeb-8876480.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
    O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
    O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
    O4 - Global Startup: WinZip Quick Pick.lnk = E:\Program Files\WinZip\WZQKPICK.EXE
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
    O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\Autodesk Architectural Desktop 3\InstBanr.ocx
    O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\Autodesk Architectural Desktop 3\InstFred.ocx
    O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\Autodesk Architectural Desktop 3\AcPreview.ocx
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

    Log of AproposFix v1.1

    ************

    Running from directory:
    C:\Documents and Settings\michael zorn\Desktop\aproposfix

    ************



    Registry entries found:


    ************

    No service found!

    Removing hidden folder:
    No folder found!

    Deleting files:


    Backing up files:
    Done!

    Removing registry entries:

    REGEDIT4


    Done!

    Finished!

    Ask AI

    AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

    Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI