What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Hijack this error

21 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
I was attempting to fix an entry in my Hijack this results and an error was generated. Here is the error:

Unexpected error occurred!
Error #52 (Bad file name or number) in Sub GetLongPath(?.exe).

Please send a report to [removed], mentioning what you were doing, and what version of Windows you have.

This message has been copied to your clipboard.



I was attempting to fix this entry: O4 - Global Startup: Digital Line Detect.lnk = ?

I have Norton Internet Security 2007, I was having slow load times and hanging with mozilla 2.0 and did a quick scan with Norton, but no virus so I thought I would run HJT and see if there was anything unusual. I don't think this entry is the culprit, it has actually been there for a while, but I just wasn't sure about it.


Here is the log file from the scan:

Logfile of HijackThis v1.99.1
Scan saved at 8:14:21 PM, on 2/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\Program Files\Norton Ghost\Agent\VProSvc.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Norton Ghost\Agent\GhostTray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkCalRem.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Norton Ghost 10.0] "C:\Program Files\Norton Ghost\Agent\GhostTray.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - Startup: wkcalrem.LNK = C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: MasterCook Web Import Bar - {E6EF5071-7647-4E85-9785-87B6CF5CB561} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.iowatelecom.net
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC…bin/AvSniff.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1162260799173
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {E473A65C-8087-49A3-AFFD-C5BC4A10669B} (Quantum Streaming IE Player Class) - http://cdn.xlontech.net/byu/sdk/06092001/qsp2ie06100103.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h cltCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: MSSQL$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe" -sMICROSOFTSMLBIZ (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SQLAgent$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlagent.EXE" -i MICROSOFTSMLBIZ (file missing)
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

Logfile of HijackThis v1.99.1
Scan saved at 8:14:21 PM, on 2/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\Program Files\Norton Ghost\Agent\VProSvc.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Norton Ghost\Agent\GhostTray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkCalRem.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Norton Ghost 10.0] "C:\Program Files\Norton Ghost\Agent\GhostTray.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - Startup: wkcalrem.LNK = C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: MasterCook Web Import Bar - {E6EF5071-7647-4E85-9785-87B6CF5CB561} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.iowatelecom.net
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC…bin/AvSniff.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1162260799173
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {E473A65C-8087-49A3-AFFD-C5BC4A10669B} (Quantum Streaming IE Player Class) - http://cdn.xlontech.net/byu/sdk/06092001/qsp2ie06100103.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h cltCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: MSSQL$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe" -sMICROSOFTSMLBIZ (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SQLAgent$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlagent.EXE" -i MICROSOFTSMLBIZ (file missing)
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe


Thanks!

P Meserole

With God all things are possible!
Post #2
Sorry for the delay :oops:
If you still need help and haven't posted at another forum.

Download and install AVG Anti-Spyware (ewido). Then scan and save the log from the scan.
Instructions and download link can be found here.

Then run this online scan. Save the report.

Rescan with hijackthis and post a new log with the results from AVG .
Also please describe how your computer behaves at the moment.
I will be emailed when you reply.
Post #3
Sorry it took so long to reply! Here are the reports you asked for. As for the performance of my computer…it has been running slowly when I launch a new program or open an email, yet system idle process in task manager is usually 75 percent or higher. No program is using up cpu time and their doesn't seem to be a logical reason for the slow performance. Anyway, here you go… ——————————————————— AVG Anti-Spyware - Scan Report ——————————————————— + Created at: 11:09:22 PM 3/4/2007 + Scan result: C:\Program Files\DIGStream\digstream.exe -> Not-A-Virus.Downloader.Win32.DigStream : No action taken. :mozilla.838:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.247realmedia : No action taken. :mozilla.14:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.15:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.16:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.17:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.18:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.19:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.20:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.21:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.22:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.23:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.24:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.25:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.26:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.27:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.28:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.29:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.30:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.31:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.32:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.33:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.34:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.35:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.36:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.37:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.38:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.39:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.40:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.41:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.42:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.43:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.44:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.45:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.46:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.47:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.48:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.49:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.50:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.51:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.51:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.52:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.53:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.54:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.54:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.55:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.56:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.57:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.58:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.59:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.606:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.60:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.618:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.61:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.62:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.63:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.64:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.650:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.708:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.740:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.820:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.839:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.882:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.919:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.2o7 : No action taken. C:\Documents and Settings\John Meserole\Cookies\john_meserole@112.2o7[1].txt -> TrackingCookie.2o7 : No action taken. C:\Documents and Settings\John Meserole\Cookies\john_meserole@2o7[2].txt -> TrackingCookie.2o7 : No action taken. C:\Documents and Settings\John Meserole\Cookies\john_meserole@cbs.112.2o7[1].txt -> TrackingCookie.2o7 : No action taken. C:\Documents and Settings\John Meserole\Cookies\john_meserole@cnn.122.2o7[1].txt -> TrackingCookie.2o7 : No action taken. C:\Documents and Settings\Teenager\Cookies\teenager@2o7[1].txt -> TrackingCookie.2o7 : No action taken. :mozilla.279:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.282:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.43:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.44:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.45:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.461:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.462:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.463:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.464:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.465:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.466:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.46:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.47:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.48:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.49:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.50:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.14:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.15:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.18:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.19:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.258:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.259:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.260:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.261:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.262:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Advertising : No action taken. C:\Documents and Settings\John Meserole\Cookies\john_meserole@advertising[1].txt -> TrackingCookie.Advertising : No action taken. :mozilla.148:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Atdmt : No action taken. :mozilla.21:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Atdmt : No action taken. C:\Documents and Settings\John Meserole\Cookies\john_meserole@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken. C:\Documents and Settings\Teenager\Cookies\teenager@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken. :mozilla.920:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Bfast : No action taken. :mozilla.921:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Bfast : No action taken. :mozilla.922:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Bfast : No action taken. :mozilla.889:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Bluestreak : No action taken. :mozilla.190:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Burstbeacon : No action taken. :mozilla.187:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Burstnet : No action taken. :mozilla.188:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Burstnet : No action taken. :mozilla.189:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Burstnet : No action taken. :mozilla.191:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Burstnet : No action taken. C:\Documents and Settings\John Meserole\Cookies\[removed][1].txt -> TrackingCookie.Burstnet : No action taken. :mozilla.81:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.82:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.83:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.84:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.85:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.86:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.87:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.88:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.89:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.90:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.91:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. C:\Documents and Settings\John Meserole\Cookies\john_meserole@clickbank[1].txt -> TrackingCookie.Clickbank : No action taken. :mozilla.299:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Com : No action taken. :mozilla.677:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Directnetadvertising : No action taken. :mozilla.678:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Directnetadvertising : No action taken. :mozilla.24:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken. :mozilla.74:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken. C:\Documents and Settings\John Meserole\Cookies\john_meserole@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken. C:\Documents and Settings\Kids\Cookies\kids@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken. :mozilla.638:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Euroclick : No action taken. :mozilla.639:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Euroclick : No action taken. :mozilla.640:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Euroclick : No action taken. :mozilla.641:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Euroclick : No action taken. :mozilla.287:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Falkag : No action taken. :mozilla.288:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Falkag : No action taken. :mozilla.289:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Falkag : No action taken. :mozilla.290:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Falkag : No action taken. :mozilla.576:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Falkag : No action taken. :mozilla.577:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Falkag : No action taken. :mozilla.578:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Falkag : No action taken. :mozilla.100:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Fastclick : No action taken. :mozilla.101:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Fastclick : No action taken. :mozilla.106:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Fastclick : No action taken. :mozilla.107:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Fastclick : No action taken. :mozilla.35:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Fastclick : No action taken. :mozilla.94:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Fastclick : No action taken. :mozilla.95:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Fastclick : No action taken. :mozilla.96:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Fastclick : No action taken. :mozilla.97:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Fastclick : No action taken. :mozilla.98:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Fastclick : No action taken. :mozilla.99:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Fastclick : No action taken. :mozilla.226:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.227:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.228:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.229:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.230:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.231:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.232:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.233:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.234:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.235:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.236:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.237:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.238:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.239:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.240:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.241:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.242:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.243:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.244:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.265:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.331:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.332:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.509:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.624:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.625:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.663:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.818:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.892:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.902:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.904:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. C:\Documents and Settings\John Meserole\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : No action taken. C:\Documents and Settings\John Meserole\Cookies\john_meserole@hitbox[1].txt -> TrackingCookie.Hitbox : No action taken. C:\Documents and Settings\Kids\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : No action taken. C:\Documents and Settings\Kids\Cookies\kids@hitbox[2].txt -> TrackingCookie.Hitbox : No action taken. :mozilla.845:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Information : No action taken. :mozilla.613:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Linksynergy : No action taken. :mozilla.614:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Linksynergy : No action taken. :mozilla.664:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Liveperson : No action taken. :mozilla.665:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Liveperson : No action taken. :mozilla.666:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Liveperson : No action taken. :mozilla.108:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Mediaplex : No action taken. :mozilla.109:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Mediaplex : No action taken. :mozilla.22:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Mediaplex : No action taken. :mozilla.612:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Myaffiliateprogram : No action taken. :mozilla.408:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Overture : No action taken. :mozilla.409:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Overture : No action taken. :mozilla.410:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Overture : No action taken. :mozilla.480:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Overture : No action taken. :mozilla.153:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Pointroll : No action taken. :mozilla.154:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Pointroll : No action taken. :mozilla.155:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Pointroll : No action taken. :mozilla.156:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Pointroll : No action taken. :mozilla.157:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Pointroll : No action taken. :mozilla.158:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Pointroll : No action taken. C:\Documents and Settings\John Meserole\Cookies\[removed][2].txt -> TrackingCookie.Pointroll : No action taken. :mozilla.182:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken. :mozilla.183:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken. :mozilla.184:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken. :mozilla.185:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken. C:\Documents and Settings\John Meserole\Cookies\john_meserole@questionmarket[1].txt -> TrackingCookie.Questionmarket : No action taken. :mozilla.929:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Real : No action taken. :mozilla.930:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Real : No action taken. C:\Documents and Settings\John Meserole\Cookies\john_meserole@real[2].txt -> TrackingCookie.Real : No action taken. C:\Documents and Settings\Kids\Cookies\kids@real[2].txt -> TrackingCookie.Real : No action taken. C:\Documents and Settings\Kids\Cookies\[removed][1].txt -> TrackingCookie.Real : No action taken. :mozilla.41:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Realmedia : No action taken. :mozilla.42:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Realmedia : No action taken. :mozilla.467:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Realmedia : No action taken. :mozilla.468:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Realmedia : No action taken. :mozilla.469:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Realmedia : No action taken. :mozilla.470:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Realmedia : No action taken. :mozilla.471:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Realmedia : No action taken. :mozilla.472:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Realmedia : No action taken. :mozilla.473:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Realmedia : No action taken. :mozilla.847:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Revenue : No action taken. :mozilla.300:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Revsci : No action taken. :mozilla.301:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Revsci : No action taken. :mozilla.302:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Revsci : No action taken. :mozilla.303:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Revsci : No action taken. :mozilla.304:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Revsci : No action taken. :mozilla.305:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Revsci : No action taken. :mozilla.306:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Revsci : No action taken. :mozilla.307:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Revsci : No action taken. :mozilla.308:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Revsci : No action taken. :mozilla.309:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Revsci : No action taken. :mozilla.310:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Revsci : No action taken. :mozilla.311:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Revsci : No action taken. :mozilla.313:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Revsci : No action taken. :mozilla.314:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Revsci : No action taken. :mozilla.315:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Revsci : No action taken. :mozilla.551:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Revsci : No action taken. :mozilla.768:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken. :mozilla.769:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken. :mozilla.770:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken. :mozilla.771:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken. :mozilla.772:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken. :mozilla.775:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken. :mozilla.334:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Specificclick : No action taken. :mozilla.335:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Specificclick : No action taken. :mozilla.336:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Specificclick : No action taken. :mozilla.337:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Specificclick : No action taken. :mozilla.338:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Specificclick : No action taken. :mozilla.339:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Specificclick : No action taken. :mozilla.340:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Specificclick : No action taken. C:\Documents and Settings\John Meserole\Cookies\[removed][1].txt -> TrackingCookie.Specificclick : No action taken. C:\Documents and Settings\John Meserole\Cookies\john_meserole@specificclick[1].txt -> TrackingCookie.Specificclick : No action taken. :mozilla.110:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.113:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.114:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.115:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.116:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.117:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.118:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.119:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.120:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.121:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.122:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.123:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.124:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.125:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.126:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.127:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.128:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.129:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.130:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.131:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.132:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.133:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.134:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.135:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.136:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.137:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.138:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.139:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.140:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.141:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.145:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Tacoda : No action taken. :mozilla.146:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Tacoda : No action taken. :mozilla.147:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Tacoda : No action taken. :mozilla.149:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Tacoda : No action taken. :mozilla.150:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Tacoda : No action taken. :mozilla.151:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Tacoda : No action taken. :mozilla.152:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Tacoda : No action taken. :mozilla.39:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Tacoda : No action taken. :mozilla.40:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Tacoda : No action taken. C:\Documents and Settings\John Meserole\Cookies\john_meserole@tacoda[1].txt -> TrackingCookie.Tacoda : No action taken. :mozilla.514:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.515:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.516:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.517:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.518:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.519:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.520:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.521:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.522:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.58:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.59:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
Post #4
second half of AVG report: Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.111:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken. :mozilla.112:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken. :mozilla.38:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken. C:\Documents and Settings\John Meserole\Cookies\john_meserole@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : No action taken. :mozilla.213:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Valueclick : No action taken. :mozilla.527:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Web-stat : No action taken. :mozilla.528:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Web-stat : No action taken. :mozilla.529:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Web-stat : No action taken. :mozilla.783:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Web-stat : No action taken. :mozilla.784:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Web-stat : No action taken. :mozilla.341:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Webtrendslive : No action taken. :mozilla.394:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken. :mozilla.395:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken. :mozilla.396:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken. :mozilla.397:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken. :mozilla.398:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken. :mozilla.399:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken. C:\Documents and Settings\John Meserole\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : No action taken. :mozilla.327:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Zedo : No action taken. :mozilla.328:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Zedo : No action taken. :mozilla.329:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Zedo : No action taken. :mozilla.330:C:\Documents and Settings\John Meserole\Application Data\Mozilla\Firefox\Profiles\acb8446r.default\cookies.txt -> TrackingCookie.Zedo : No action taken. :mozilla.57:C:\Documents and Settings\Teenager\Application Data\Mozilla\Firefox\Profiles\8piqg5gs.default\cookies.txt -> TrackingCookie.Zedo : No action taken. C:\Documents and Settings\John Meserole\Cookies\john_meserole@zedo[1].txt -> TrackingCookie.Zedo : No action taken. ::Report end Fsecure Scanning Report Sunday, March 04, 2007 23:19:45 - 08:42:56 Computer name: DELL1 Scanning type: Scan system for viruses, rootkits, spyware Target: C:\ D:\ Result: 13 malware found Possible Browser Hijack attempt (spyware) * System (Disinfected) Tracking Cookie (spyware) * System (Disinfected) * System * System * System * System * System * System * System * System * System * System W32/DLoader.AMSO (virus) * C:\PROGRAM FILES\DIGSTREAM\DIGSTREAM.EXE (Submitted) Statistics Scanned: * Files: 46096 * System: 5140 * Not scanned: 5 Actions: * Disinfected: 2 * Renamed: 0 * Deleted: 0 * None: 11 * Submitted: 1 Files not scanned: * C:\HIBERFIL.SYS * C:\PAGEFILE.SYS * C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT * C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCRST.DLL * C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3AD391678A806EC4D691E83AAA393B6F_24ADF822-76F7-4481-B30B-FF1B40F8687F Options Scanning engines: * F-Secure Libra: 2.4.2, 2007-03-02 * F-Secure AVP: 7.0.171, 2007-03-05 * F-Secure Orion: 1.2.37, 2007-03-05 * F-Secure Blacklight: 1.0.53, 0000-00-00 * F-Secure Draco: 1.0.35, 0260-02-44 * F-Secure Pegasus: 1.19.0, 2007-01-28 Scanning options: * Scan defined files: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ZIP XXX * Use Advanced heuristics
Post #5
here is the hijack this log:

Logfile of HijackThis v1.99.1
Scan saved at 8:50:56 AM, on 3/5/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\Program Files\Norton Ghost\Agent\VProSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Norton Ghost\Agent\GhostTray.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
c:\program files\common files\installshield\updateservice\isuspm.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\utilman.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.radioiowa.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Norton Ghost 10.0] "C:\Program Files\Norton Ghost\Agent\GhostTray.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: MasterCook Web Import Bar - {E6EF5071-7647-4E85-9785-87B6CF5CB561} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.iowatelecom.net
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC…bin/AvSniff.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1162260799173
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/jin…ows-i586-jc.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/4h/pla…0/Installer.exe
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://www.tikgames.com/real/games/goldfever/goldfever.cab
O16 - DPF: {E473A65C-8087-49A3-AFFD-C5BC4A10669B} (Quantum Streaming IE Player Class) - http://cdn.xlontech.net/byu/sdk/06092001/qsp2ie06100103.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)


O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h cltCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: MSSQL$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe" -sMICROSOFTSMLBIZ (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SQLAgent$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlagent.EXE" -i MICROSOFTSMLBIZ (file missing)
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
Post #6
Download SDFix and save it to your Desktop.

Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

Please then reboot your computer in Safe Mode by doing the following :
  • Restart your computer
  • After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
  • Instead of Windows loading as normal, the Advanced Options Menu should appear;
  • Select the first option, to run Windows in Safe Mode, then press Enter.
  • Choose your usual account.
  • Open the extracted SDFix folder and double click RunThis.bat to start the script.
  • Type Y to begin the cleanup process.
  • It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
  • Press any Key and it will restart the PC.
  • When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
  • Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt
    (Report.txt will also be copied to Clipboard ready for posting back on the forum).
  • Finally paste the contents of the Report.txt back on the forum with a new HijackThis log
Post #7
Logfile of HijackThis v1.99.1
Scan saved at 5:41:42 PM, on 3/6/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\Program Files\Norton Ghost\Agent\VProSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.radioiowa.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Norton Ghost 10.0] "C:\Program Files\Norton Ghost\Agent\GhostTray.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\npjpi150_11.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: MasterCook Web Import Bar - {E6EF5071-7647-4E85-9785-87B6CF5CB561} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://www.iowatelecom.net
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC…bin/AvSniff.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1162260799173
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5.0/jin…ows-i586-jc.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/4h/pla…0/Installer.exe
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://www.tikgames.com/real/games/goldfever/goldfever.cab
O16 - DPF: {E473A65C-8087-49A3-AFFD-C5BC4A10669B} (Quantum Streaming IE Player Class) - http://cdn.xlontech.net/byu/sdk/06092001/qsp2ie06100103.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h cltCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: MSSQL$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe" -sMICROSOFTSMLBIZ (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SQLAgent$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlagent.EXE" -i MICROSOFTSMLBIZ (file missing)
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

SDFix: Version 1.69

Run by [removed]
Microsoft Windows XP [Version 5.1.2600]

Running From: C:\SDFix\SDFix

Safe Mode:
Checking Services:





Restoring Windows Registry Entries
Restoring Default Hosts File


Rebooting…

Normal Mode:
Checking Files:

No Trojan Files Found…




ADS Check:

C:\WINDOWS\system32
No streams found.


Final Check:

Remaining Services:
——————



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe:*:Enabled:AOL"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe:*:Enabled:AOL"
"C:\\Program Files\\America Online 9.0\\waol.exe"="C:\\Program Files\\America Online 9.0\\waol.exe:*:Enabled:AOL"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\backWeb-8876480.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\backWeb-8876480.exe:*:Enabled:backWeb-8876480"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"="C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"="C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"


[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe:*:Enabled:AOL"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe:*:Enabled:AOL"
"C:\\Program Files\\America Online 9.0\\waol.exe"="C:\\Program Files\\America Online 9.0\\waol.exe:*:Enabled:AOL"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"


Remaining Files:
—————


Checking For Files with Hidden Attributes :

C:\WINDOWS\system32\933B3F7FB4.sys
C:\WINDOWS\system32\KGyGaAvL.sys
C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch1\lock.tmp
C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch2\lock.tmp
C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch3\lock.tmp
C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp
C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp

Add/Remove Programs List:

GemMaster Mystic
Tradewinds
Tradewinds
Diner Dash
Diner Dash
Polar Golfer
Polar Golfer
SCRABBLE
SCRABBLE
EA SPORTS online 2006
Bejeweled 2 Deluxe
Bejeweled 2 Deluxe
Adobe Shockwave Player
AV Music Morpher Gold
AVG Anti-Spyware 7.5
Otto
FATE
FATE
Conexant D850 56K V.9x DFVc Modem
Dell Digital Jukebox Driver
Dell Game Console
Dell Game Console
DQ DSL Modem
Uninstall Dual Mode Camera
Encyclopaedia Britannica CD Installer
ESPNMotion
EuroTalk Talk Now Plus!
HijackThis 1.99.1
HP Imaging Device Functions 6.1
HP Solution Center and Imaging Support Tools 6.1
Microsoft Internationalized Domain Names Mitigation APIs
Windows Internet Explorer 7
MasterCook Deluxe 9.1
Kaspersky Online Scanner
High Definition Audio Driver Package - KB835221
Update Rollup 2 for Windows XP Media Center Edition 2005
Windows XP Media Center Edition 2005 KB908246
Windows XP Media Center Edition 2005 KB925766
LiveReg (Symantec Corporation)
LiveUpdate 3.2 (Symantec Corporation)
Logitech Resource Center
Microsoft .NET Framework 1.1
Move Networks Player for Firefox
Mozilla Firefox (2.0.0.1)
Mozilla Firefox (2.0.0.2)
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft National Language Support Downlevel APIs
Minnesota Cuke
Intel® PRO Network Connections Drivers
RealArcade
RealPlayer
RegSupreme Pro 1.4
Macromedia Flash Player 8
Learn2 Player (Uninstall Only)
Norton Internet Security (Symantec Corporation)
The Mystery of Veggie Island
Viewpoint Media Player
WebCyberCoach 3.2 Dell
WildTangent Web Driver
Microsoft User-Mode Driver Framework Feature Pack 1.0
F300
Roxio RecordNow Data
MasterCook Deluxe 9.1
TrayApp
iLike
NASCAR SimRacing
Microsoft Plus! Photo Story 2 LE
Roxio DLA
Tiger Woods PGA TOUR 06
Status
Roxio MyDVD LE
CP_Package_Variety2
Destinations
SymNet
Sonic Update Manager
ScannerCopy
J2SE Runtime Environment 5.0 Update 11
Norton Ghost 10.0
Lyra Jukebox Applications
Unload
Norton Internet Security
ccCommon
URL Assistant
NetWaiting
BufferChm
Dell CinePlayer
iTunes
ELIcon
Norton Internet Security
Norton Confidential Browser Component
SolutionCenter
Clear Cache feature for Internet Explorer
QuickTime
CP_Package_Variety1
Dell Support 3.1
Logitech MouseWare 9.79
Dell Driver Reset Tool
Norton Internet Security
Sonic Activation Module
Debugging Tools for Windows
AOLIcon
eSupportQFolder
AiOSoftwareNPI
HP Photosmart Essential
Microsoft Works
Digital Content Portal
Microsoft Plus! Digital Media Edition Installer
F300Trb
Readme
Dell System Restore
Madden NFL 06
SPBBC 32bit
ArcSoft PhotoImpression 4
ProductContextNPI
Wal-Mart Music Downloads Store
Modem Helper
Norton AntiVirus
Intel® PROSet for Wired Connections
Intel® Graphics Media Accelerator Driver
Corel Photo Album 6
URGE
Logitech Desktop Messenger
Microsoft Office Small Business Edition 2003
Microsoft Windows Vista Upgrade Advisor
Sonic Encoders
Norton Protection Center
NBA LIVE 06
Apple Software Update
EducateU
DeviceManagementQFolder
Roxio RecordNow Audio
Adobe Reader 7.0.9
Documentation & Support Launcher
Roxio RecordNow Copy
Scrabble Complete
CP_Package_Variety3
Games, Music, & Photos Launcher
MSRedist
Microsoft Office Outlook 2003 with Business Contact Manager Update
DocProc
Symantec Technical Support Web Controls
Scan
AiO_Scan_CDA
Toolbox
Microsoft .NET Framework 1.1
NHL06
DellConnect
MCU
Norton Confidential Web Protection Component
Symantec Real Time Storage Protection Component
Personal Ancestral File 5
HPProductAssistant
Search Assist
Microsoft SQL Server Desktop Engine (MICROSOFTSMLBIZ)
Norton Internet Security
F300_Help
HP PSC & OfficeJet 6.1.A
Norton Internet Security
LDS Scriptures CD-ROM Standard Edition
Digital Line Detect
WebReg
HP Software Update
AppCore
AV
Fax_CDA
NewCopy_CDA

Finished
Post #8
Close all programs leaving only HijackThis running. Place a check against each of the following,
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O16 - DPF: {E473A65C-8087-49A3-AFFD-C5BC4A10669B} (Quantum Streaming IE Player Class) - http://cdn.xlontech.net/byu/sdk/06092001/qsp2ie06100103.cab
Click on Fix Checked when finished and exit HijackThis.
Post #9
I followed your instructions, two of the objects were gone when I reran the scan, these two were not: R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = I attempted to repair them twice, both times they were there again. What were the "files with hidden attributes" that were listed in the SDFix report? Are they common files? Thank you for your help! P Meserole With God all things are possible!
Post #10
KGyGaAvL.sys is automatically created every time you start Divx video system software.


I belive it is part of Divx C:\WINDOWS\system32\933B3F7FB4.sys


I would like to see a copy of the file in bold.

Click start / then my computer / local disk then follow the process tree.
Or using Windows Explorer, locate the first file you want to zip.
Right click on the file and select Send To and Compressed (zipped) Folder.
This makes a copy it does not delete it.
Please zip the file and upload it here
Or email it here

Please include a link to this thread.
Post #11
I can't find it in the system32 folder. :( I even did a search, nothing was found. Is that bad? :( P Meserole With God all things are possible!
Post #12 last edited
These files my have hidden atributes.
Click Here Should you need instructions for Showing hidden files and folders in Windows.
Click start / then my computer / local disk (c ) then follow the process tree.
Post #13
Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI