What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

AdAware Has Found Trojan

2 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
AdAware has repeatedly picked up what it calls a Win32.Trojan, and although I remove it, when I restart the computer and run the scan again, it's back. Every time.

Anyway, I have followed your instructions on posting logs here, and here are the results of my Ewido and Hijack This logs - I'd appreciate any help you can offer.

———————————————————
ewido anti-spyware - Scan Report
———————————————————

+ Created at: 9:02:32 PM 13/09/2006

+ Scan result:



:mozilla.542:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.774:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.775:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.776:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.777:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.778:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.779:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.780:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.781:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.782:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.783:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.784:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.785:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.786:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.787:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.788:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.789:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.790:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.791:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.792:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.793:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.794:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.795:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.796:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.797:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.798:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.799:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.800:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.801:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.802:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.803:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.804:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.805:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.830:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\JUSTIN\Cookies\justin@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
:mozilla.130:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.133:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.134:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.135:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.136:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.137:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.89:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.90:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.91:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.92:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.93:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.94:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.95:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.96:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
C:\Documents and Settings\JUSTIN\Cookies\justin@adbrite[2].txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.655:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adjuggler : No action taken.
:mozilla.656:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adjuggler : No action taken.
:mozilla.664:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adocean : No action taken.
:mozilla.665:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adocean : No action taken.
:mozilla.143:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.144:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.535:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adtech : No action taken.
:mozilla.537:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Adtech : No action taken.
:mozilla.351:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.352:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.353:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.354:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.355:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.356:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.284:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Atdmt : No action taken.
:mozilla.184:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.185:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.186:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
C:\Documents and Settings\JUSTIN\Cookies\justin@burstnet[2].txt -> TrackingCookie.Burstnet : No action taken.
C:\Documents and Settings\JUSTIN\Cookies\[removed][1].txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.222:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.223:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.224:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.225:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.226:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.227:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.228:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.229:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.230:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.231:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.154:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Clickhype : No action taken.
C:\Documents and Settings\JUSTIN\Cookies\[removed][2].txt -> TrackingCookie.Clickzs : No action taken.
:mozilla.659:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.660:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.325:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Cpvfeed : No action taken.
:mozilla.326:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Cpvfeed : No action taken.
:mozilla.327:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Cpvfeed : No action taken.
:mozilla.328:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Cpvfeed : No action taken.
:mozilla.209:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken.
:mozilla.155:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.156:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.157:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.214:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.216:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.217:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.218:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.219:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.187:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.188:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.189:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.190:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.191:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.192:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.193:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.194:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.195:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.277:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.278:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.279:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.280:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.281:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.282:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.283:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.635:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.636:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.681:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.682:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.692:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.31:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Hotlog : No action taken.
:mozilla.735:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.736:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.738:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.208:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Mediaplex : No action taken.
:mozilla.238:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.239:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.240:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.739:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.215:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Qksrv : No action taken.
:mozilla.220:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Qksrv : No action taken.
:mozilla.414:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.415:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.158:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Revenue : No action taken.
:mozilla.610:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.611:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.612:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.613:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.614:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.523:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.524:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.525:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.693:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Specificclick : No action taken.
:mozilla.694:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Specificclick : No action taken.
:mozilla.30:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Spylog : No action taken.
:mozilla.33:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.34:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.35:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.36:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.37:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.38:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.39:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.40:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.41:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.42:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.43:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.44:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.45:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.46:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.47:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.48:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.49:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.50:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.51:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.52:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.53:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.54:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.55:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.56:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.57:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.58:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.59:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.60:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.61:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.62:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.63:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.64:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.65:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.66:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.67:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.68:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.69:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.70:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.71:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.72:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.73:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.74:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.75:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.76:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.77:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.78:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.79:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.80:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.81:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.432:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.433:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.434:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.435:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.485:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
C:\Documents and Settings\JUSTIN\Cookies\justin@tacoda[1].txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.758:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Targetnet : No action taken.
:mozilla.451:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.603:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Trafic : No action taken.
:mozilla.21:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.647:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.648:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.649:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.650:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.651:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.652:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.716:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
:mozilla.717:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
:mozilla.718:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
:mozilla.270:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Weborama : No action taken.
:mozilla.536:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Webtrendslive : No action taken.
:mozilla.119:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.120:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.121:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.122:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.123:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.124:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.125:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
C:\Documents and Settings\JUSTIN\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.555:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.556:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.557:C:\Documents and Settings\JUSTIN\Application Data\Mozilla\Firefox\Profiles\g9smy1zu.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
HKU\S-1-5-21-1409082233-261478967-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E14DCE67-8FB7-4721-8149-179BAA4D792C} -> Trojan.Ciadoor.m : No action taken.
C:\WINDOWS\system32\~~BiFros.e.exe -> Trojan.Pakes : No action taken.


::Report end

Logfile of HijackThis v1.99.1
Scan saved at 9:04:10 PM, on 13/09/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\DOCUME~1\JUSTIN\LOCALS~1\Temp\Rar$EX00.359\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [UVS10 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1154847111921
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
Post #2
Welcome to the forum, It appears ewido found a lot of junk and you choose "No action taken" for all of it including the two trojans at the end of the scan???

1) HJT is in an unsafe TEMP folder, move it here: C:\HJT\HijackThis.exe. If you need more instructions, use these:
http://russelltexas.com/malware/createhjtfolder.htm
http://www.bleepingcomputer.com/forums/tutorial94.html

2) Run ewido again using the instructions I am posting and delete everything it locates unless you know it is not bad. Post the scan results, but edit out all cookies, just make sure you delete them.
Post a new HJT log along with the ewido scan results and let me know if that takes care of your problems.

First download ewido anti-spyware from HERE and save that file to your desktop.
This is a 30 day trial of the program
  • Once you have downloaded ewido anti-spyware, locate the icon on the desktop and double-click it to launch the set up program.
  • Once the setup is complete you will need run ewido and update the definition files.
  • On the main screen select the icon "Update" then select the "Update now" link.
    • Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
  • Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
  • Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
  • Under "Reports"
    • Select "Automatically generate report after every scan"
    • Un-Select "Only if threats were found"
Close ewido anti-spyware, Do Not run a scan just yet, we will shortly.
  • Reboot your computer into SafeMode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight SafeMode then hit enter.
    IMPORTANT: Do not open any other windows or programs while ewido is scanning, it may interfere with the scanning proccess:
  • Lauch ewido-anti-spyware by double-clicking the icon on your desktop.
  • Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
  • ewido will now begin the scanning process, be patient this may take a little time.
    Once the scan is complete do the following:
  • If you have any infections you will prompted, then select "Apply all actions"
  • Next select the "Reports" icon at the top.
  • Select the "Save report as" button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
  • Close ewido and reboot your system back into Normal Mode and post the results of the ewido report scan.
Please use the "Add Reply" button to add your information, do not quote or code.

Thanks

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI