WinAntiSpywarePro 2006 and CommandService

Please download VundoFix.exe to your desktop.

• Double-click VundoFix.exe to run it.
• Click the Scan for Vundo button.
• Once it's done scanning, click the Remove Vundo button.
• You will receive a prompt asking if you want to remove the files, click YES
• Once you click yes, your desktop will go blank as it starts removing Vundo.
• When completed, it will prompt that it will reboot your computer, click OK.
• Please post the contents of C:\vundofix.txt and a new HiJackThis log.

Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button." when VundoFix appears at reboot.

First download ewido anti-spyware from HERE and save that file to your desktop.
This is a 30 day trial of the program

• Once you have downloaded ewido anti-spyware, locate the icon on the desktop and double-click it to launch the set up program.
• Once the setup is complete you will need run ewido and update the definition files.
• On the main screen select the icon "Update" then select the "Update now" link.
  • Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
• Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
• Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
• Under "Reports"
  • Select "Automatically generate report after every scan"
  • Un-Select "Only if threats were found"

Close ewido anti-spyware, Do Not run a scan just yet, we will shortly.

• Reboot your computer into SafeMode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight SafeMode then hit enter.
  IMPORTANT: Do not open any other windows or programs while ewido is scanning, it may interfere with the scanning proccess:
• Lauch ewido-anti-spyware by double-clicking the icon on your desktop.
• Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
• ewido will now begin the scanning process, be patient this may take a little time.
  Once the scan is complete do the following:
• If you have any infections you will prompted, then select "Apply all actions"
• Next select the "Reports" icon at the top.
• Select the "Save report as" button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
• Close ewido and reboot your system back into Normal Mode and post the results of the ewido report scan.

Okay here's the results from ewido ——————————————————— ewido anti-spyware - Scan Report ——————————————————— + Created at: 1:34:03 PM 9/30/2006 + Scan result: C:\WINDOWS\thiselt.exe -> Adware.Agent : Cleaned with backup (quarantined). C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll -> Adware.Aws : Cleaned with backup (quarantined). C:\Program Files\ComcastToolbar\comcasttoolbar.dll_0_ -> Adware.BHO : Cleaned with backup (quarantined). C:\WINDOWS\em.ocx -> Adware.MediaMotor : Cleaned with backup (quarantined). C:\Program Files\iolo\System Mechanic 5\Undo\Manual\{BED07526-0D8F-498A-A7F7-C7D9384DAD92}\{5A74599A-D876-4CF1-AF9E-1ADCCA1120D3}.tmp/{5A74599A-D876-4CF1-AF9E-1ADCCA1120D3}.tmp/NNBar_VCSetup_876057.exe -> Adware.Mirar : Cleaned with backup (quarantined). C:\WINDOWS\SYSTEM32\WinNB58.dll -> Adware.Mirar : Cleaned with backup (quarantined). C:\WINDOWS\MirarSetup_876057.exe -> Adware.SaveNow : Cleaned with backup (quarantined). C:\Program Files\iolo\System Mechanic 5\Undo\Manual\{BED07526-0D8F-498A-A7F7-C7D9384DAD92}\{483EB10B-E480-483C-A27C-DC3E6DA29461}.tmp/{483EB10B-E480-483C-A27C-DC3E6DA29461}.tmp -> Adware.SurfSide : Cleaned with backup (quarantined). C:\WINDOWS\SYSTEM32\adrotate.dll -> Adware.TrafficSol : Cleaned with backup (quarantined). C:\VundoFix Backups\efccbcb.dll.bad -> Adware.Virtumionde : Cleaned with backup (quarantined). C:\Program Files\ComcastToolbar\uninstall.exe -> Adware.VMN : Cleaned with backup (quarantined). C:\WINDOWS\TIELT001.exe -> Adware.ZenoSearch : Cleaned with backup (quarantined). C:\WINDOWS\idlemg.exe -> Downloader.Small.buy : Cleaned with backup (quarantined). C:\WINDOWS\ac3_0002.exe -> Downloader.Small.cyh : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\FVII2Q07\popup[1].php -> Hijacker.Agent.a : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\FVII2Q07\popup[3].php -> Hijacker.Agent.a : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\ONHFMEJ5\popup[1].php -> Hijacker.Agent.a : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PQZPJZZC\popup[1].php -> Hijacker.Agent.a : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PQZPJZZC\popup[2].php -> Hijacker.Agent.a : Cleaned with backup (quarantined). C:\WINDOWS\qservice.exe -> Logger.ProAgent.21 : Cleaned with backup (quarantined). C:\WINDOWS\services.dll -> Logger.ProAgent.t : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Local Settings\Temp\aoxenwqr.dll -> Logger.VBStat.e : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Local Settings\Temp\glgjyptu.dll -> Logger.VBStat.e : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Local Settings\Temp\jhqeqcog.dll -> Logger.VBStat.e : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Local Settings\Temp\mbouumym.dll -> Logger.VBStat.e : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Local Settings\Temp\pneygida.dll -> Logger.VBStat.e : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Local Settings\Temp\wqhqlqoo.dll -> Logger.VBStat.e : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Local Settings\Temp\yqlekoyo.dll -> Logger.VBStat.e : Cleaned with backup (quarantined). C:\WINDOWS\Downloaded Program Files\UWA6P_0001_N91M1807NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.o : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Application Data\Opera\Opera\profile\cache4\opr00JG5.swf -> Not-A-Virus.Hoax.SWF.Alerter.a : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Application Data\Opera\Opera\profile\cache4\temporary_download\xp-cydoor-728.swf -> Not-A-Virus.Hoax.SWF.Alerter.a : Cleaned with backup (quarantined). :mozilla.250:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup (quarantined). :mozilla.151:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.153:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.155:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.156:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.157:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.158:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.159:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.230:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.283:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.365:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\administrator@highbeam.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\administrator@microsofteup.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\administrator@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\roychona\Cookies\roychona@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\roychona\Cookies\roychona@msnportal.112.2o7[3].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.254:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined). :mozilla.255:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\administrator@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\administrator@adjuggler[1].txt -> TrackingCookie.Adjuggler : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\[removed][2].txt -> TrackingCookie.Adjuggler : Cleaned with backup (quarantined). :mozilla.256:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Admarketplace : Cleaned with backup (quarantined). :mozilla.257:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Admarketplace : Cleaned with backup (quarantined). :mozilla.137:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.138:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.139:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.140:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.141:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.142:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.474:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.18:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.19:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.20:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.21:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.24:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.98:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined). :mozilla.150:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined). :mozilla.22:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.23:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.25:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.26:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.27:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.28:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.187:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\administrator@com[1].txt -> TrackingCookie.Com : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\administrator@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\administrator@cpvfeed[3].txt -> TrackingCookie.Cpvfeed : Cleaned with backup (quarantined). :mozilla.64:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\administrator@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). C:\Documents and Settings\roychona\Cookies\roychona@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Enhance : Cleaned with backup (quarantined). :mozilla.300:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). :mozilla.301:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). :mozilla.302:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). :mozilla.303:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). :mozilla.304:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). :mozilla.305:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). :mozilla.306:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). :mozilla.307:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). :mozilla.308:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). :mozilla.309:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). :mozilla.310:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). :mozilla.311:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). :mozilla.312:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). :mozilla.313:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). :mozilla.314:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). :mozilla.315:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined). :mozilla.282:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Falkag : Cleaned with backup (quarantined). :mozilla.89:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined). :mozilla.90:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined). :mozilla.91:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined). :mozilla.92:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined). :mozilla.93:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined). :mozilla.94:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined). :mozilla.501:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined). :mozilla.502:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined). :mozilla.503:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined). :mozilla.504:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined). :mozilla.505:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined). :mozilla.132:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined). :mozilla.133:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined). :mozilla.134:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined). :mozilla.135:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined). :mozilla.136:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined). :mozilla.182:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined). C:\Documents and Settings\roychona\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined). :mozilla.171:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined). :mozilla.149:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup (quarantined). :mozilla.374:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup (quarantined). :mozilla.267:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined). :mozilla.268:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined). :mozilla.269:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined). :mozilla.270:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined). :mozilla.271:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined). :mozilla.385:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup (quarantined). :mozilla.386:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\administrator@qksrv[2].txt -> TrackingCookie.Qksrv : Cleaned with backup (quarantined). :mozilla.388:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup (quarantined). :mozilla.389:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup (quarantined). :mozilla.390:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup (quarantined). :mozilla.232:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined). :mozilla.233:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined). :mozilla.234:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined). :mozilla.235:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined). :mozilla.241:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined). :mozilla.242:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined). :mozilla.243:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined). :mozilla.244:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined). :mozilla.145:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup (quarantined). :mozilla.146:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup (quarantined). :mozilla.147:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup (quarantined). :mozilla.148:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup (quarantined). :mozilla.191:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined). :mozilla.192:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined). :mozilla.193:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined). :mozilla.194:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined). :mozilla.195:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined). :mozilla.196:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined). :mozilla.211:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup (quarantined). :mozilla.212:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup (quarantined). :mozilla.213:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup (quarantined). :mozilla.214:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup (quarantined). :mozilla.215:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup (quarantined). :mozilla.216:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup (quarantined). :mozilla.217:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup (quarantined). :mozilla.218:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup (quarantined). :mozilla.219:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup (quarantined). :mozilla.220:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup (quarantined). :mozilla.223:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Sexlist : Cleaned with backup (quarantined). :mozilla.224:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Sexlist : Cleaned with backup (quarantined). :mozilla.221:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Sextracker : Cleaned with backup (quarantined). :mozilla.222:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Sextracker : Cleaned with backup (quarantined). :mozilla.258:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup (quarantined). :mozilla.259:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup (quarantined). :mozilla.260:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup (quarantined). :mozilla.261:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\[removed][2].txt -> TrackingCookie.Specificclick : Cleaned with backup (quarantined). :mozilla.407:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined). :mozilla.408:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined). :mozilla.417:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined). :mozilla.418:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined). :mozilla.419:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\administrator@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined). C:\Documents and Settings\roychona\Cookies\roychona@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined). :mozilla.472:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Tracking101 : Cleaned with backup (quarantined). :mozilla.49:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined). :mozilla.50:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined). :mozilla.51:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined). :mozilla.52:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined). :mozilla.53:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined). :mozilla.65:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined). :mozilla.73:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined). :mozilla.79:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\administrator@trafficmp[1].txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined). :mozilla.119:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined). :mozilla.120:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined). :mozilla.121:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined). :mozilla.40:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). :mozilla.41:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). :mozilla.42:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). :mozilla.43:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). :mozilla.44:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). :mozilla.45:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). :mozilla.46:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). :mozilla.47:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\[removed][2].txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\[removed][3].txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). C:\Documents and Settings\roychona\Cookies\[removed][2].txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). C:\Documents and Settings\roychona\Cookies\roychona@yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). :mozilla.448:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined). :mozilla.449:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined). :mozilla.450:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\zylr7b3s.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined). C:\Documents and Settings\Administrator\Cookies\administrator@zedo[1].txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined). C:\WINDOWS\TEMP\win15.tmp.exe -> Trojan.Pakes : Cleaned with backup (quarantined). ::Report end

Ok post a new Hiackthis log here in a reply.

Open HijackThis, click Config, click Misc Tools
Click "Open Uninstall Manager"
Click "Save List" (generates uninstall_list.txt)
Click Save, copy and paste the results in your next post.

Hi purebreed:

It appears that you have two helpers assisting you at the same time.
Myself and therock247uk.
If so, this is a total waste of our most precious resource, our helpers.

Please correct me, if I'm wrong.

If not, this topic will be closed.

http://forums.tomcoyote.org/index.php?show…c=70018&hl=
is closed.

/me cant view that topic…

/me sent to trashbin

Ah that explains it.

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php