I run smtfraudfix and here is the following report
»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""
»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32
»»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection
»»»»»»»»»»»»»»»»»»»»»»»» End
Report-Scan-20060922-170258
after wido full scan finished it found 47 spy/malware..!!! after finished scan and run option number 3 with smitfraudfix all problems Solved GREAT SUPPORT TOMCOYOTE THNX!!!
ewido anti-spyware - Scan Report
———————————————————
+ Created at: 17:02:58 22-9-2006
+ Scan result:
C:\Downloads\Setup.exe -> Adware.180Solutions : No action taken.
HKU\S-1-5-21-682003330-2000478354-2147005927-500\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{479FD0CF-5BE9-4C63-8CDA-B6D371C67BD5} -> Adware.Generic : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\00000402.asw -> Adware.Hotbar : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\00000404.asw -> Adware.Hotbar : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\00000408.asw -> Adware.Hotbar : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\0000040b.asw -> Adware.HotBar : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\0000040c.asw -> Adware.HotBar : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\0000040d.asw -> Adware.HotBar : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\0000040e.asw -> Adware.HotBar : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\0000040f.asw -> Adware.Hotbar : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\00000410.asw -> Adware.HotBar : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\00000411.asw -> Adware.HotBar : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\00000413.asw -> Adware.HotBar : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\00000414.asw -> Adware.HotBar : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\00000416.asw -> Adware.HotBar : No action taken.
C:\WINDOWS\system32\actskn45.ocx -> Downloader.IstBar : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\00000430.asw -> TrackingCookie.Adbrite : No action taken.
:mozilla.36:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Bluestreak : No action taken.
:mozilla.19:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.28:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.29:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\00000437.asw -> TrackingCookie.Casalemedia : No action taken.
:mozilla.61:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken.
:mozilla.20:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.21:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.22:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.23:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.24:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.25:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.26:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.55:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.56:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.57:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.60:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.66:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.65:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Ivwbox : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\00000433.asw -> TrackingCookie.Mediaplex : No action taken.
:mozilla.70:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.71:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.59:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.31:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.32:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\0000042e.asw -> TrackingCookie.Yadro : No action taken.
:mozilla.33:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.34:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.35:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\qhag4x82.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
C:\Program Files\Agnitum\Outpost Firewall\Plugins\AntiSpyware\quarantine\00000431.asw -> TrackingCookie.Yieldmanager : No action taken.
::Report end
THESE ALL ARE GONE WELL…
