[Resolved] My Computer Is Running Slow And The Pop Ups Won't

Hello, I have a problem that I hope you can help me solve. I googled my problem and found only one site that pertained to the aweful situation that I have. I know that there are many more it was the way I worded it. Nontheless, I am here begging for help. So I will just tell you my delima. My computer is running very slow. I can barely log on. I initially thought that I had problems with add-ons but the problems keep coming. I keep getting a message telling me an exception occured and will give me the path of "c:\WINDOWS\system32\gzmrotate.dll Dll Verify. " I also am now getting a message saying error loading with the path "c:\WINDOWS\system\32\opapvwmlm.dll" I went in and cleaned out alot of stuff I didn't need. I also installed PC tools Registry Mechanic. Before I ran that I ran Ad-Ware SE, I did a full scan with Trend all to no avail. Then I ran PC Reg. Mech. I still have the same problem. I have since downloaded HiJack This and now I am here hoping you can fix my pop ups, the winantivirus that keeps trying to open a new browser but Trend won't allow it thank goodness along with others. I am afraid that I am going to not have a cpu if this persists and It's not a year old yet. Please Please help. If you need more detail just let me know. I don't kwow exactly what to do so I am not going to do anything with the HJT until advised. Thanks BAJF

Hi! Welcome to the WTT forums.
I would be glad to take a look at your log and help you with solving any malware problems. HijackThis logs can take a while to research.
Please be patient and I'd be grateful if you would note the following:

• I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
• The fixes are specific to your problem and should only be used for this issue on this machine.
• Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
• It's often worth reading through these instructions and printing them for ease of reference.
• If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
• Please reply to this thread. Do not start a new topic.

Click here to download HJTsetup.exe

• Save HJTsetup.exe to your desktop.
• Double click on the HJTsetup.exe icon on your desktop.
• By default it will install to C:\Program Files\Hijack This.
• Continue to click Next in the setup dialogue boxes until you get to the Select Additional Tasks dialogue.
• Put a check by Create a desktop icon then click Next again.
• Continue to follow the rest of the prompts from there.
• At the final dialogue box click Finish and it will launch Hijack This.
• Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
• Click Save to save the log file and then the log will open in notepad.
• Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
• Come back here to this thread and Paste the log in your next reply.
• DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

Please make a uninstall list using HijackThis
To access the Uninstall Manager you would do the following:

1. Start HijackThis
2. Click on the Config button
3. Click on the Misc Tools button
4. Click on the Open Uninstall Manager button.
5. Click on the Save list… button and specify where you would like to save this file. When you press Save button a notepad will open with the contents of that file. Simply copy and paste the contents of that notepad here in a reply

Hi

Could you post the uninstall list too.

Download and Run ComboFix

• Download this file from below:
  
  Here
  
• Disconnect from the Internet, than disable your anti-virus and any real-time anti-spyware monitors that are running.
• Then double click combofix.exe & follow the prompts.
• When finished, it shall produce a log for you. Post that log in your next reply with a new HijackThis log.

Note 1: Do not mouseclick combofix's window whilst it's running. That may cause it to stall
Note 2:Remember to re-enable your anti-virus and anti-spyware before reconnecting to the Internet.

Hi

Open Notepad and Copy/Paste the text in the codebox below into it:

File::
C:\WINDOWS\system32\sstqn.dll
C:\WINDOWS\system32\mljgg.dll
C:\WINDOWS\system32\xyhqlesa.exe
C:\WINDOWS\system32\mlljh.dll
C:\WINDOWS\system32\vtutr.dll
C:\WINDOWS\iun6002ev.exe
C:\\WINDOWS\\system32\\vtsqr


Folder::
C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent

Registry::
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"Authentication Packages"=hex(7):6d,73,76,31,5f,30,00,00

Save this as "CFScript"

[external image: Posted Image]


Refering to the picture above, drag CFScript into ComboFix.exe
Then post the resultant log with a new HijackThis log.

Please do an online scan with Kaspersky Online Scanner. You will be prompted to install an ActiveX component from Kaspersky, Click Yes.

• The program will launch and then start to download the latest definition files.
• Once the scanner is installed and the definitions downloaded, click Next.
• Now click on Scan Settings
• In the scan settings make sure that the following are selected:
  • Scan using the following Anti-Virus database:
    
    + Extended(If available otherwise Standard)
  • Scan Options:
    
    + Scan Archives
    + Scan Mail Bases
• Click OK
• Now under select a target to scan select My Computer
• The scan will take a while so be patient and let it run. Once the scan is complete it will display if your system has been infected.
• Now click on the Save as Text button
• Save the file to your desktop.
• Copy and paste that information in your next post.

ComboFix 07-09-14.1 - "You Know….Okay" 2007-09-14 18:25:04.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.203 [GMT -5:00] * Created a new restore point FILE:: C:\WINDOWS\system32\sstqn.dll C:\WINDOWS\system32\mljgg.dll C:\WINDOWS\system32\xyhqlesa.exe C:\WINDOWS\system32\mlljh.dll C:\WINDOWS\system32\vtutr.dll C:\WINDOWS\iun6002ev.exe C:\\WINDOWS\\system32\\vtsqr . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{158986B3-5AF5-7E54-5C71-E9D79DAEB2B5} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{169FEB0E-600F-9C43-37B2-0FB72234D00C} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{1CD9B343-072A-F93B-3CD9-51CA9444F3F2} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{2657F853-E796-6832-CD57-6884A41D376A} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{2DC394C9-5D40-EC1B-C479-6EDCADD20C65} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{2F065397-60A7-5EC3-ABD8-5201822C834D} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{3362F7AA-97CE-1963-2358-63DB7A28718D} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{3716A58B-91B4-BBC4-A744-B430C49B83A2} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{379E62E2-599B-C9C2-A0A9-31DFB6016D37} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{47C51931-69AE-3CF2-CF76-C4AA5D5D43CC} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{4C02913D-DFD8-D691-F255-9B14A3FA309F} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{4EFF5316-3B06-F3BB-B38D-2381DFF4C6BE} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{55247932-D5AF-6F09-06E2-05AC983A61BC} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{5DA0463F-EC2E-6F18-7A5E-C321FA530F61} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{71F7D28A-4EBF-DB40-A037-08CC4F17028A} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{8932C1F7-9B3B-6814-DD3B-92E644999265} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{994D0FDF-5F38-B097-673D-8F551C378F76} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{A1C47D0A-11AF-EDFD-8BBE-730558972100} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{A8AC8183-267F-1784-F1CF-4723A31A7126} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{BA6C55A5-C4C5-E1F5-B0CC-96E7BFC60822} C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia\data\{FABA08BA-EF73-E882-BC5F-1A0755BD1B7C} C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\GameData\gtd2.dat C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\GameData\support.dat C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\LicenseStores\WT58D8AB2-0002-4963-8BEF-C53407A55AB8.wtlic C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\LicenseStores\WT7548446-974e-4089-a0d2-e43ae418512b.wtlic C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\LicenseStores\WT\13E38CFC-81C8-11D9-8BDE-F66BAD1E3F3A.wtlic C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\LicenseStores\WT\4B39DF83-1063-4fcc-B1B4-0E116120D387.wtlic C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\LicenseStores\WT\5F7E059C-CAEF-43ad-9378-DD87D8B6B154.wtlic C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\LicenseStores\WT\6DEEEEDF-6404-4f02-AE07-4F4CB1A3D5F6.wtlic C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\LicenseStores\WT\6E19C296-7722-4e20-A653-2CEA4DCBF293.wtlic C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\LicenseStores\WT\81CB1406-81C8-11D9-8BDE-F66BAD1E3F3A.wtlic C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\LicenseStores\WT\D1FBFB02-8F56-11D9-8BDE-F66BAD1E3F3A.wtlic C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\LicenseStores\WT\F3B5F74E-D848-11D9-8BDE-F66BAD1E3F3A.wtlic C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\LicenseStores\WT\WT.sto C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\moregames.ico C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\oem-eula.dat C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\penguins\Cache\Resources\Levels\ScreenShots\list.txt C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\penguins\Cache\Resources\Levels\ScreenShots\Zone1_BounceBack.lvl.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\penguins\Cache\Resources\Levels\ScreenShots\Zone1_BounceBack.lvlsmall.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\penguins\Cache\Resources\Levels\ScreenShots\Zone1_LookoutBelow.lvl.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\penguins\Cache\Resources\Levels\ScreenShots\Zone1_LookoutBelow.lvlsmall.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\penguins\Cache\Resources\Levels\ScreenShots\Zone1_OverTheHill.lvl.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\penguins\Cache\Resources\Levels\ScreenShots\Zone1_OverTheHill.lvlsmall.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\penguins\Cache\Resources\Levels\ScreenShots\Zone1_TheBigBang.lvl.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\penguins\Cache\Resources\Levels\ScreenShots\Zone1_TheBigBang.lvlsmall.bmp C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\penguins\Cache\updates\updatelist.txt C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\penguins\Persistent\config.dat C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\penguins\Persistent\resources\profiles\profile0.dat C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Installers\installers.txt C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Installers\SetupGamesClient.exe C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Installers\SetupGamesClient.exe_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block1.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block1.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block10.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block10.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block11.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block11.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block12.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block12.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block13.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block13.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block14.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block14.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block15.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block15.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block16.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block16.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block17.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block17.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block18.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block18.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block19.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block19.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block2.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block2.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block20.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block20.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block21.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block21.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block22.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block22.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block23.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block23.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block24.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block24.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block25.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block25.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block26.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block26.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block27.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block27.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block28.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block28.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block29.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block29.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block3.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block3.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block4.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block4.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block5.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block5.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block6.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block6.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block7.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block7.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block8.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block8.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block9.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\block9.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\chrome.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\chrome.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\htdocs-img.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\htdocs-img.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\htdocs.tgz C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\htdocs.tgz_filedata C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game Console\Downloads\Updates\ProductManifest.xml C:\DOCUME~1\ALLUSE~1\APPLIC~1\WildTangent\TOSHIBA Game

I tried to do the online scan but when I said yes to Active X it starts me over and then I say yes to the Active X and it just keeps starting me over. I don't know what to do. My browser won't even open to a full page. I keep trying to maximize it but it won't. I am not happy with this stupid computer.

That's not your computer, it's Kaspersky. I thought that problem had been sorted now. Try this scanner instead. If you have a problem with this one, click out of it then try again, it usually works.

• Please go HERE to run PandaActiveScan…
  
  
• Once you are on the Panda site click the Scan your PC button
  
• A new window will open…click the Check Now button
  
• Enter your Country
  
• Enter your State/Province
  
• Enter your e-mail address and click send
  
• Select either Home User or Company
  
• Click the big Scan Now button
  
• If it wants to install an ActiveX component allow it
  
• It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
  
  
• When download is complete, click on My Computer to start the scan
  
• When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to your desktop.

Post the report in your next reply.

Incident Status Location Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\ComboFix\NirCmd.cfexe Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\ComboFix\nircmd.exe Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Administrator\Cookies\administrator@go[1].txt Spyware:Cookie/Systemdoctor Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.systemdoctor.com/] Spyware:Cookie/Reliablestats Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[stats1.reliablestats.com/] Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.atdmt.com/] Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.advertising.com/] Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.go.com/] Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.advertising.com/] Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.overture.com/] Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.fastclick.net/] Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.zedo.com/] Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.2o7.net/] Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.zedo.com/] Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.2o7.net/] Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.zedo.com/] Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.2o7.net/] Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.247realmedia.com/] Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.doubleclick.net/] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[ad.yieldmanager.com/] Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.casalemedia.com/] Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.trafficmp.com/] Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.tribalfusion.com/] Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.realmedia.com/] Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.adrevolver.com/] Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.tradedoubler.com/] Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.mediaplex.com/] Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.serving-sys.com/] Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.bs.serving-sys.com/] Spyware:Cookie/Searchportal Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.searchportal.information.com/] Spyware:Cookie/WUpd Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.revenue.net/] Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.statse.webtrendslive.com/] Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[statse.webtrendslive.com/] Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.ads.pointroll.com/] Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.ehg-dig.hitbox.com/] Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.statcounter.com/] Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.questionmarket.com/] Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.burstnet.com/] Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.xiti.com/] Spyware:Cookie/Yadro Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.yadro.ru/] Spyware:Cookie/Weborama Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.weborama.fr/] Spyware:Cookie/Mammamediasolutions Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.targetnet.com/] Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.statse.webtrendslive.com/S125318] Spyware:Cookie/Valueclick Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.valueclick.com/] Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.server.iad.liveperson.net/] Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.server.iad.liveperson.net/hc/34292599] Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.server.iad.liveperson.net/hc/LPneimanmarcus] Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.target.com/] Spyware:Cookie/Toplist Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.toplist.cz/] Spyware:Cookie/QkSrv Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.qksrv.net/] Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.phg.hitbox.com/] Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.perf.overture.com/] Spyware:Cookie/Mysearch Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.mysearch.com/] Spyware:Cookie/Linksynergy Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.linksynergy.com/] Spyware:Cookie/DomainSponsor Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.landing.domainsponsor.com/] Spyware:Cookie/Linksynergy Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.linksynergy.com/] Spyware:Cookie/Maxserving Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.maxserving.com/] Spyware:Cookie/Screensavers Not disinfected C:\Documents and Settings\Cassandra\Application Data\Mozilla\Firefox\Profiles\yogjwaa8.default\cookies.txt[.i.screensavers.com/] Spyware:Cookie/217.73.66.16 Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@217.73.66[2].txt Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Cassandra\Cookies\[removed][2].txt Spyware:Cookie/AdDynamix Not disinfected C:\Documents and Settings\Cassandra\Cookies\[removed][2].txt Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Cassandra\Cookies\[removed][1].txt Spyware:Cookie/Adserver Not disinfected C:\Documents and Settings\Cassandra\Cookies\[removed][2].txt Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@advertising[2].txt Spyware:Cookie/NewMedia Not disinfected C:\Documents and Settings\Cassandra\Cookies\[removed][1].txt Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@atdmt[2].txt Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Cassandra\Cookies\[removed]-sys[2].txt Spyware:Cookie/Ccbill Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@ccbill[1].txt Spyware:Cookie/Cd Freaks Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@cdfreaks[2].txt Spyware:Cookie/Cd Freaks Not disinfected C:\Documents and Settings\Cassandra\Cookies\[removed][1].txt Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@doubleclick[1].txt Spyware:Cookie/Enhance Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@enhance[2].txt Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@fastclick[1].txt Spyware:Cookie/DriveCleaner Not disinfected C:\Documents and Settings\Cassandra\Cookies\[removed][2].txt Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@gostats[2].txt Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Cassandra\Cookies\[removed][2].txt Spyware:Cookie/Servlet Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@livehelper[1].txt Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@mediaplex[1].txt Spyware:Cookie/Mysearch Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@mysearch[2].txt Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@questionmarket[2].txt Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@realmedia[2].txt Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@serving-sys[1].txt Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@statcounter[2].txt Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@target[1].txt Spyware:Cookie/Toplist Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@toplist[1].txt Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@tradedoubler[1].txt Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@trafficmp[1].txt Spyware:Cookie/Winantivirus Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@winantivirus[1].txt Spyware:Cookie/Winantivirus Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@winantivirus[2].txt Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\Cassandra\Cookies\[removed][2].txt Spyware:Cookie/myaffiliateprogram Not disinfected C:\Documents and Settings\Cassandra\Cookies\[removed][1].txt Spyware:Cookie/Winantivirus Not disinfected C:\Documents and Settings\Cassandra\Cookies\[removed][1].txt Spyware:Cookie/Cgi-bin Not disinfected C:\Documents and Settings\Cassandra\Cookies\[removed][2].txt Spyware:Cookie/Cgi-bin Not disinfected C:\Documents and Settings\Cassandra\Cookies\[removed][1].txt Spyware:Cookie/Cgi-bin Not disinfected C:\Documents and Settings\Cassandra\Cookies\[removed][1].txt Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@xiti[1].txt Spyware:Cookie/Yadro Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@yadro[1].txt Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Cassandra\Cookies\cassandra@zedo[1].txt Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\Documents and Settings\Cassandra\Desktop\ComboFix.exe[nircmd.exe] Virus:Trj/Downloader.QDR Disinfected C:\Documents and Settings\Cassandra\Local Settings\Temp\Setup(1).exe Spyware:Spyware/Virtumonde Not disinfected C:\Documents and Settings\Cassandra\Local Settings\Temporary Internet Files\Content.IE5\LB5VNVYY\jaun_20070726[1] Virus:Generic Trojan Disinfected C:\Documents and Settings\Cassandra\Shared\Popcap & Gamehouse 31 games + cracks\Popcap & Gamehouse\Dynomite 2.01\eatdy201ck.exe Potentially unwanted tool:Application/PRScheduler Not disinfected C:\Documents and Settings\Cassandra\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe Spyware:Cookie/Gaytrafficbroker Not disinfected C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\ydeadc2u.default\cookies.txt[gaytrafficbroker.com/] Spyware:Cookie/cs.sexcounter Not disinfected C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\ydeadc2u.default\cookies.txt[.cs.sexcounter.com/] Spyware:Cookie/Sextracker Not disinfected C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\ydeadc2u.default\cookies.txt[counter7.sextracker.com/] Spyware:Cookie/Sextracker Not disinfected C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\ydeadc2u.default\cookies.txt[.sextracker.com/] Spyware:Cookie/cs.sexcounter Not disinfected C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\ydeadc2u.default\cookies.txt[.cs.sexcounter.com/] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Guest\Cookies\[removed][2].txt Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\jfnbsnzb\Cookies\jfnbsnzb@atwola[1].txt Spyware:Cookie/Azjmp Not disinfected C:\Documents and Settings\jfnbsnzb\Cookies\jfnbsnzb@azjmp[1].txt Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\jfnbsnzb\Cookies\jfnbsnzb@burstnet[2].txt Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\jfnbsnzb\Cookies\[removed][2].txt Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\jfnbsnzb\Cookies\jfnbsnzb@fastclick[2].txt Spyware:Cookie/Go Not disinfected C:\Documents and Settings\jfnbsnzb\Cookies\jfnbsnzb@go[1].txt Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\jfnbsnzb\Cookies\[removed][2].txt Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you [removed] Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@247realmedia[2].txt Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@2o7[1].txt Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\[removed][1].txt Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\[removed][3].txt Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\[removed][5].txt Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\[removed][7].txt Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\[removed][8].txt Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@adrevolver[1].txt Spyware:Cookie/AdDynamix Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\[removed][1].txt Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\[removed][2].txt Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@advertising[1].txt Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@atdmt[2].txt Spyware:Cookie/Bluestreak Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@bluestreak[2].txt Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\[removed]-sys[1].txt Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@casalemedia[1].txt Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@com[1].txt Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@doubleclick[1].txt Spyware:Cookie/Go Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@go[2].txt Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@mediaplex[1].txt Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\[removed][1].txt Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@questionmarket[2].txt Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@realmedia[2].txt Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@serving-sys[2].txt Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\[removed][2].txt Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@trafficmp[2].txt Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@tribalfusion[1].txt Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\[removed][1].txt Spyware:Cookie/myaffiliateprogram Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\[removed][1].txt Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@zedo[2].txt Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\You Know….Okay\Cookies\you_know….okay@zedo[3].txt Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\Documents and Settings\You Know….Okay\Desktop\ComboFix.exe[nircmd.exe] Spyware:Cookie/Winantivirus Not disinfected C:\qoobox\Quarantine\C\WINDOWS\retadpu880.exe.vir Spyware:Spyware/Virtumonde Not disinfected C:\qoobox\Quarantine\C\WINDOWS\system32\cbxvvtq.dll.vir Spyware:Spyware/Virtumonde Not disinfected C:\qoobox\Quarantine\C\WINDOWS\system32\efccday.dll.vir Spyware:Spyware/Virtumonde Not disinfected C:\qoobox\Quarantine\C\WINDOWS\system32\efccyab.dll.vir Spyware:Spyware/Virtumonde Not disinfected C:\qoobox\Quarantine\C\WINDOWS\system32\fcccdcc.dll.vir Spyware:Spyware/Virtumonde Not disinfected C:\qoobox\Quarantine\C\WINDOWS\system32\ufacskea.dll.vir Virus:Trj/Downloader.OZB Disinfected C:\qoobox\Quarantine\C\WINDOWS\system32\xyhqlesa.exe.vir Spyware:Spyware/Virtumonde Not disinfected C:\qoobox\Quarantine\catchme2007-09-14_145924.93.zip[iifcday.dll] Spyware:Spyware/Virtumonde Not disinfected C:\qoobox\Quarantine\catchme2007-09-14_145924.93.zip[vapuiglj.dll] Virus:Trj/Downloader.MDW Disinfected C:\WINDOWS\Downloaded Program Files\popcaploader.dll Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\WINDOWS\NirCmd.exe

Hi

Delete the Combofix icon from your Desktop.

Navigate to and delete the following folders (if they are present):

Folders:
C:\Qoobox
C:\Combofix

Download ATF (Atribune Temp File) Cleaner by Atribune to your desktop.

Double-click ATF Cleaner.exe to open it.

Under Main choose:
Windows Temp
Current User Temp
All Users Temp
Cookies
Temporary Internet Files
Prefetch
Java Cache
*The other boxes are optional*
Then click the Empty Selected button.

Firefox:
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.

Opera:
Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.

Click Exit on the Main menu to close the program.

*Note* If you do not have Firefox or Opera, those options will be greyed out.

Delete the older versions of Java and download the newest.
Please follow these steps to remove older version Java components.

• Close any programmes you may have running, ESPECIALLY your web browser
• Click Start > Control Panel.
• Click Add/Remove Programs.
• Check any item with Java Runtime Environment (JRE or J2SE) in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove all versions of Java.
• Reboot your computer once all Java components are removed.

Then download the latest version of Java Runtime Environment (JRE) (4th one down the list), which is JRE6u2, and click Yes at the page warning, then accept the Licence Agreement before downloading the Offline file.


Then post a new HijackThis log, please.

I forgot to download the runtime before the HJT. Do I need to install then run HJT again?

No. Just so long as you have done it, for the good of your computer. Ill just check the log over now.