Dave Posted August 5, 2007 ID:7133 Share Posted August 5, 2007 Can't get rid of this annoying AVSystemCare and pop ups despite trying to follow some of the advice is other, similar, topics.Have attached latest HJT and happy to take any actions to clear as it sounds like there could be a few variants of this or it manifests in different placesLogfile of Trend Micro HijackThis v2.0.2Scan saved at 19:04:42, on 05/08/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16473)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exec:\program files\common files\logitech\lvmvfm\LVPrcSrv.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exeC:\PROGRA~1\McAfee\MSC\mcmscsvc.exec:\program files\common files\mcafee\mna\mcnasvc.exeC:\PROGRA~1\McAfee\VIRUSS~1\mcods.exeC:\PROGRA~1\McAfee\MSC\mcpromgr.exec:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exec:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exeC:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exeC:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exeC:\Program Files\McAfee\MPF\MPFSrv.exeC:\PROGRA~1\McAfee\MPS\mps.exeC:\Program Files\McAfee\MSK\MskSrver.exeC:\WINDOWS\system32\nvsvc32.exeC:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exeC:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Sony\vaio entertainment\VzTaskScheduler.exeC:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exeC:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exeC:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exeC:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exeC:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzRs\VzRs.exeC:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEc:\PROGRA~1\mcafee.com\agent\mcagent.exeC:\Program Files\sony\vaio update 2\VAIOUpdt.exeC:\Program Files\Sony\VAIO Zone Remote Commander\AvRmtCtr.exeC:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exeC:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exeC:\Program Files\HP CD-DVD\Umbrella\DVDTray.exeC:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exeC:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exeC:\Program Files\Logitech\QuickCam10\QuickCam10.exeC:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exeC:\Program Files\Roxio\Media Experience\DMXLauncher.exeC:\Program Files\McAfee\MSK\MskAgent.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Windows Defender\MSASCui.exeC:\Program Files\McAfee\MPS\mpsevh.exeC:\Program Files\QuickTime\qttask.exeC:\WINDOWS\kdx\KHost.exeC:\Program Files\Google\Google Talk\googletalk.exeC:\PROGRA~1\Sony\SONICS~1\SsAAD.exeC:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Logitech\QuickCam10\COCIManager.exeC:\Program Files\iPod\bin\iPodService.exec:\program files\mcafee\msc\mcuimgr.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Documents and Settings\David\My Documents\HiJackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.skybroadband.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://edit.europe.yahoo.com/config/login?...t.yahoo.com/%3fR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/customi...fo/bt_side.htmlR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.red.clientapps.yahoo.com/customi...arch.yahoo.com/R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.vaio-link.com/vu.asp?l=en&u=m&h=0809R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer Provided By Sky BroadbandR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhostR3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dllO2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dllO2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dllO2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dllO2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dllO3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dllO4 - HKLM\..\Run: [HKSERV.EXE] C:\Program Files\Sony\HotKey Utility\HKserv.exeO4 - HKLM\..\Run: [VAIO Update 2] "C:\Program Files\sony\vaio update 2\VAIOUpdt.exe" /StationaryO4 - HKLM\..\Run: [VZRemoteCommander] C:\Program Files\Sony\VAIO Zone Remote Commander\AvRmtCtr.exeO4 - HKLM\..\Run: [PDService.exe] C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exeO4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exeO4 - HKLM\..\Run: [DVDBitSet] "C:\Program Files\HP CD-DVD\Umbrella\DVDBitSet.exe" /NOUIO4 - HKLM\..\Run: [DVDTray] "C:\Program Files\HP CD-DVD\Umbrella\DVDTray.exe"O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe"O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hideO4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe"O4 - HKLM\..\Run: [DMXLauncher] "C:\Program Files\Roxio\Media Experience\DMXLauncher.exe"O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exeO4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hideO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKCU\..\Run: [kdx] C:\WINDOWS\kdx\KHost.exe -allO4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostartO4 - HKCU\..\Run: [ssAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exeO4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/...arch.jhtml?p=ZCO8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.htmlO8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.htmlO8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.htmlO8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.htmlO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dllO9 - Extra button: Sky - {08E730A4-FB02-45BD-A900-01E4AD8016F6} - http://www.skybroadband.com (file missing)O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLLO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.sony-europe.com/O15 - Trusted Zone: *.line6.netO15 - Trusted Zone: *.sony-europe.comO15 - Trusted Zone: *.sonystyle-europe.comO15 - Trusted Zone: *.vaio-link.comO16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/puzzlepirates/miniclipGameLoader.dllO16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cabO16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} - http://static.zangocash.com/cab/Zango/ie/bridge-c18.cabO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cabO16 - DPF: {AE9DCB17-F804-11D2-A44A-0020182C1446} - file://F:\Resources\IntraLaunch.CABO18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeO23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exeO23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exeO23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeO23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exeO23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exeO23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: KService - Kontiki Inc. - C:\Program Files\KService\KService.exeO23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exeO23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\Logitech\SrvLnch\SrvLnch.exeO23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exeO23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exeO23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exeO23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exeO23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exeO23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exeO23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exeO23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exeO23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exeO23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exeO23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exeO23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exeO23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exeO23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exeO23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exeO23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exeO23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exeO23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exeO23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exeO23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exeO23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exeO23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exeO23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exeO23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exeO23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exeO23 - Service: VAIO Entertainment Aggregation and Control Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzRs\VzRs.exeO23 - Service: VAIO Entertainment Task Scheduler - Sony Corporation - C:\Program Files\Sony\vaio entertainment\VzTaskScheduler.exeO23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exeO23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exeO23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exeO23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exeO23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exeO23 - Service: VAIO Cooporated Initialisation (VCI) - Sony Corporation - C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exeO23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exeO23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exeO23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe--End of file - 18788 bytes Link to post Share on other sites More sharing options...
JeanInMontana Posted August 5, 2007 ID:7135 Share Posted August 5, 2007 Hi there, and welcome to Malwarebytes. Please let me know what you did from other logs. That is a dangerous thing to do as each fix is specific to the system in question. I need to know what fixes you have already tried please.Please set your system to show all files and folders:Click Start.Open My Computer.Select the Tools menu and click Folder Options.Select the View Tab.Under the Hidden files and folders heading select Show hidden files and folders.Uncheck the Hide protected operating system files (recommended) option.Click Yes to confirm.Click OK.The following explains how to remove items from your computer that are malware. Go to Add/Remove programs and uninstall Mywebsearch toolbar. Close all programs leaving only HijackThis running. Place a check next to each of the following, making sure you get them all and not any others by mistake:R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/customi...fo/bt_side.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.red.clientapps.yahoo.com/customi...arch.yahoo.com/O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/...arch.jhtml?p=ZCO16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/puzzlepirates/miniclipGameLoader.dllO16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} - http://static.zangocash.com/cab/Zango/ie/bridge-c18.cabClick on Fix Checked when finished and exit HijackThis.Using Windows explorer go to C:\Program Files and look for any folders with MyWebSearch also. Delete anything you find. Do the same for any files connected to Zango and PuzzlePirates.Please get these programs, update and run a complete scan removing all items found.Spybot Search & Destroy be sure to immunize with this program also.AVG AntiSpywareThen go here and run a scan PandaActive ScanPost the logs from the Panda and AVG scans please, along with a log from HJT.I will analyze the logs and give you further instructions. Be patient and persistent. These things can take time and many procedures.You will finish the AVG scan first so feel free to post that log then move on to the Panda scan etc. Link to post Share on other sites More sharing options...
Dave Posted August 6, 2007 Author ID:7223 Share Posted August 6, 2007 JeanThanks for reply. I ran spybot and panda before but to no avail so will start again with your plan Link to post Share on other sites More sharing options...
Dave Posted August 6, 2007 Author ID:7226 Share Posted August 6, 2007 Hi JeanHere is the AVG scan---------------------------------------------------------AVG Anti-Spyware - Scan Report--------------------------------------------------------- + Created at: 22:54:27 06/08/2007 + Scan result: HKU\S-1-5-21-2040763978-534807910-3968438529-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2EEB4FA-B6D6-41B9-9CFA-ABA87F862BCB} -> Adware.Generic : Ignored.C:\System Volume Information\_restore{562648CC-34F7-4C74-AC42-6FBFFB01D4D8}\RP811\A0393528.exe -> Downloader.Small : Ignored.C:\System Volume Information\_restore{562648CC-34F7-4C74-AC42-6FBFFB01D4D8}\RP811\A0393529.exe -> Downloader.Small : Ignored.:mozilla.49:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.247realmedia : Ignored.:mozilla.121:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.2o7 : Ignored.:mozilla.13:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.2o7 : Ignored.:mozilla.14:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.2o7 : Ignored.:mozilla.50:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.2o7 : Ignored.:mozilla.6:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.2o7 : Ignored.:mozilla.7:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.2o7 : Ignored.C:\Documents and Settings\David\Cookies\david@2o7[3].txt -> TrackingCookie.2o7 : Ignored.C:\Documents and Settings\David\Cookies\david@digitalclarity.112.2o7[1].txt -> TrackingCookie.2o7 : Ignored.C:\Documents and Settings\David\Cookies\david@partygaming.122.2o7[2].txt -> TrackingCookie.2o7 : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@wpni.112.2o7[1].txt -> TrackingCookie.2o7 : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@aavalue[1].txt -> TrackingCookie.Aavalue : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@freemusicconnection.aavalue[2].txt -> TrackingCookie.Aavalue : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@aavalue[2].txt -> TrackingCookie.Aavalue : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@eztracks.aavalue[2].txt -> TrackingCookie.Aavalue : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@getmusicfree.aavalue[2].txt -> TrackingCookie.Aavalue : Ignored.:mozilla.53:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Adbrite : Ignored.:mozilla.54:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Adbrite : Ignored.C:\Documents and Settings\David\Cookies\david@3.adbrite[1].txt -> TrackingCookie.Adbrite : Ignored.C:\Documents and Settings\David\Cookies\david@3.adbrite[3].txt -> TrackingCookie.Adbrite : Ignored.C:\Documents and Settings\David\Cookies\david@4.adbrite[2].txt -> TrackingCookie.Adbrite : Ignored.C:\Documents and Settings\David\Cookies\david@adbrite[2].txt -> TrackingCookie.Adbrite : Ignored.C:\Documents and Settings\David\Cookies\david@adbrite[3].txt -> TrackingCookie.Adbrite : Ignored.C:\Documents and Settings\David\Cookies\david@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Ignored.C:\Documents and Settings\David\Cookies\david@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@adbrite[2].txt -> TrackingCookie.Adbrite : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Ignored.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@adbrite[2].txt -> TrackingCookie.Adbrite : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@adbrite[2].txt -> TrackingCookie.Adbrite : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@ads.adbrite[3].txt -> TrackingCookie.Adbrite : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@ads.addynamix[1].txt -> TrackingCookie.Addynamix : Ignored.C:\Documents and Settings\David\Cookies\david@rotator.adjuggler[1].txt -> TrackingCookie.Adjuggler : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@rotator.adjuggler[2].txt -> TrackingCookie.Adjuggler : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@rotator.adjuggler[1].txt -> TrackingCookie.Adjuggler : Ignored.:mozilla.92:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.:mozilla.93:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.:mozilla.94:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.:mozilla.95:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.:mozilla.96:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@adrevolver[3].txt -> TrackingCookie.Adrevolver : Ignored.:mozilla.55:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Adtech : Ignored.:mozilla.56:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Adtech : Ignored.:mozilla.71:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Adtech : Ignored.:mozilla.74:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Adtech : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@adtech[2].txt -> TrackingCookie.Adtech : Ignored.:mozilla.23:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Advertising : Ignored.:mozilla.24:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Advertising : Ignored.:mozilla.26:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Advertising : Ignored.:mozilla.27:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Advertising : Ignored.:mozilla.85:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Advertising : Ignored.:mozilla.86:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Advertising : Ignored.:mozilla.22:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Atdmt : Ignored.:mozilla.40:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Atdmt : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@www.burstbeacon[1].txt -> TrackingCookie.Burstbeacon : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@www.burstbeacon[2].txt -> TrackingCookie.Burstbeacon : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@www.burstbeacon[2].txt -> TrackingCookie.Burstbeacon : Ignored.:mozilla.107:C:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\222004xb.default\cookies.txt -> TrackingCookie.Burstnet : Ignored.:mozilla.22:C:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\222004xb.default\cookies.txt -> TrackingCookie.Burstnet : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@www.burstnet[3].txt -> TrackingCookie.Burstnet : Ignored.:mozilla.53:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Clickbank : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@ad1.clickhype[1].txt -> TrackingCookie.Clickhype : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@cz3.clickzs[2].txt -> TrackingCookie.Clickzs : Ignored.C:\Documents and Settings\David\Cookies\david@ads.cnn[1].txt -> TrackingCookie.Cnn : Ignored.C:\Documents and Settings\Saul\Cookies\saul@ads.cnn[2].txt -> TrackingCookie.Cnn : Ignored.C:\Documents and Settings\David\Cookies\david@com[1].txt -> TrackingCookie.Com : Ignored.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@abcnews.com[2].txt -> TrackingCookie.Com : Ignored.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@com[1].txt -> TrackingCookie.Com : Ignored.:mozilla.25:C:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\222004xb.default\cookies.txt -> TrackingCookie.Connextra : Ignored.:mozilla.26:C:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\222004xb.default\cookies.txt -> TrackingCookie.Connextra : Ignored.C:\Documents and Settings\David\Cookies\david@connextra[5].txt -> TrackingCookie.Connextra : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@connextra[1].txt -> TrackingCookie.Connextra : Ignored.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@connextra[1].txt -> TrackingCookie.Connextra : Ignored.C:\Documents and Settings\Saul\Cookies\saul@connextra[2].txt -> TrackingCookie.Connextra : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@connextra[4].txt -> TrackingCookie.Connextra : Ignored.C:\Documents and Settings\David\Cookies\david@bilbo.counted[1].txt -> TrackingCookie.Counted : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@bilbo.counted[2].txt -> TrackingCookie.Counted : Ignored.C:\Documents and Settings\David\Cookies\david@dealtime[1].txt -> TrackingCookie.Dealtime : Ignored.C:\Documents and Settings\David\Cookies\david@stat.dealtime[1].txt -> TrackingCookie.Dealtime : Ignored.C:\Documents and Settings\David\Cookies\david@stat.dealtime[3].txt -> TrackingCookie.Dealtime : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@dealtime[1].txt -> TrackingCookie.Dealtime : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@stat.dealtime[2].txt -> TrackingCookie.Dealtime : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@stat.dealtime[3].txt -> TrackingCookie.Dealtime : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@stat.dealtime[2].txt -> TrackingCookie.Dealtime : Ignored.:mozilla.15:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Doubleclick : Ignored.:mozilla.40:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Doubleclick : Ignored.:mozilla.121:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.:mozilla.122:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.:mozilla.123:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.:mozilla.124:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Esomniture : Ignored.C:\Documents and Settings\David\Cookies\david@e-2dj6wbmywpcjsco.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Ignored.C:\Documents and Settings\David\Cookies\david@estat[1].txt -> TrackingCookie.Estat : Ignored.:mozilla.33:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Euroclick : Ignored.:mozilla.35:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Euroclick : Ignored.:mozilla.36:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Euroclick : Ignored.:mozilla.37:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Euroclick : Ignored.:mozilla.38:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Euroclick : Ignored.:mozilla.39:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Euroclick : Ignored.C:\Documents and Settings\David\Cookies\david@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Ignored.C:\Documents and Settings\David\Cookies\david@adopt.euroclick[3].txt -> TrackingCookie.Euroclick : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Ignored.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@fastclick[3].txt -> TrackingCookie.Fastclick : Ignored.:mozilla.116:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Hitslink : Ignored.:mozilla.106:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Imrworldwide : Ignored.:mozilla.107:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Imrworldwide : Ignored.:mozilla.150:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Imrworldwide : Ignored.:mozilla.151:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Imrworldwide : Ignored.C:\Documents and Settings\David\Cookies\david@intelli-direct[1].txt -> TrackingCookie.Intelli-direct : Ignored.C:\Documents and Settings\David\Cookies\david@intelli-direct[2].txt -> TrackingCookie.Intelli-direct : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@intelli-direct[1].txt -> TrackingCookie.Intelli-direct : Ignored.C:\Documents and Settings\David\Cookies\david@www.intelli-tracker[1].txt -> TrackingCookie.Intelli-tracker : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@www.intelli-tracker[1].txt -> TrackingCookie.Intelli-tracker : Ignored.C:\Documents and Settings\David\Cookies\david@ivwbox[1].txt -> TrackingCookie.Ivwbox : Ignored.C:\Documents and Settings\David\Cookies\david@search.live[2].txt -> TrackingCookie.Live : Ignored.:mozilla.199:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Liveperson : Ignored.:mozilla.200:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Liveperson : Ignored.:mozilla.201:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Liveperson : Ignored.C:\Documents and Settings\David\Cookies\david@sales.liveperson[1].txt -> TrackingCookie.Liveperson : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@server.lon.liveperson[1].txt -> TrackingCookie.Liveperson : Ignored.:mozilla.193:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Masterstats : Ignored.C:\Documents and Settings\David\Cookies\david@image.masterstats[1].txt -> TrackingCookie.Masterstats : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@image.masterstats[1].txt -> TrackingCookie.Masterstats : Ignored.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@image.masterstats[1].txt -> TrackingCookie.Masterstats : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@image.masterstats[1].txt -> TrackingCookie.Masterstats : Ignored.:mozilla.18:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Mediaplex : Ignored.:mozilla.19:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Mediaplex : Ignored.C:\Documents and Settings\David\Cookies\david@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Ignored.C:\Documents and Settings\David\Cookies\david@stat.onestat[2].txt -> TrackingCookie.Onestat : Ignored.C:\Documents and Settings\David\Cookies\david@stat.onestat[3].txt -> TrackingCookie.Onestat : Ignored.:mozilla.120:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Overture : Ignored.C:\Documents and Settings\David\Cookies\david@overture[2].txt -> TrackingCookie.Overture : Ignored.C:\Documents and Settings\David\Cookies\david@perf.overture[2].txt -> TrackingCookie.Overture : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@overture[1].txt -> TrackingCookie.Overture : Ignored.:mozilla.113:C:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\222004xb.default\cookies.txt -> TrackingCookie.Paypal : Ignored.:mozilla.8:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Paypal : Ignored.C:\Documents and Settings\David\Cookies\david@www.paypal[1].txt -> TrackingCookie.Paypal : Ignored.C:\Documents and Settings\David\Cookies\david@www.paypal[3].txt -> TrackingCookie.Paypal : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@www.paypal[1].txt -> TrackingCookie.Paypal : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@www.paypal[1].txt -> TrackingCookie.Paypal : Ignored.:mozilla.108:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Pointroll : Ignored.:mozilla.109:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Pointroll : Ignored.:mozilla.110:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Pointroll : Ignored.:mozilla.111:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Pointroll : Ignored.C:\Documents and Settings\David\Cookies\david@qksrv[2].txt -> TrackingCookie.Qksrv : Ignored.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@qksrv[2].txt -> TrackingCookie.Qksrv : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@qksrv[2].txt -> TrackingCookie.Qksrv : Ignored.C:\Documents and Settings\David\Cookies\david@ads-205.quarterserver[1].txt -> TrackingCookie.Quarterserver : Ignored.:mozilla.106:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Questionmarket : Ignored.:mozilla.107:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Questionmarket : Ignored.:mozilla.31:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Questionmarket : Ignored.:mozilla.32:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Questionmarket : Ignored.:mozilla.134:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Realmedia : Ignored.:mozilla.135:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Realmedia : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@web4.realtracker[1].txt -> TrackingCookie.Realtracker : Ignored.:mozilla.136:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Revsci : Ignored.:mozilla.137:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Revsci : Ignored.:mozilla.138:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Revsci : Ignored.:mozilla.139:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Revsci : Ignored.:mozilla.140:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Revsci : Ignored.:mozilla.141:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Revsci : Ignored.:mozilla.142:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Revsci : Ignored.:mozilla.182:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Revsci : Ignored.C:\Documents and Settings\David\Cookies\david@revsci[1].txt -> TrackingCookie.Revsci : Ignored.C:\Documents and Settings\David\Cookies\david@revsci[2].txt -> TrackingCookie.Revsci : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@revsci[1].txt -> TrackingCookie.Revsci : Ignored.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@revsci[2].txt -> TrackingCookie.Revsci : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@revsci[1].txt -> TrackingCookie.Revsci : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@revsci[3].txt -> TrackingCookie.Revsci : Ignored.:mozilla.145:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Serving-sys : Ignored.:mozilla.146:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Serving-sys : Ignored.:mozilla.147:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Serving-sys : Ignored.:mozilla.148:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Serving-sys : Ignored.:mozilla.149:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Serving-sys : Ignored.:mozilla.60:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Serving-sys : Ignored.C:\Documents and Settings\David\Cookies\david@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignored.C:\Documents and Settings\David\Cookies\david@serving-sys[2].txt -> TrackingCookie.Serving-sys : Ignored.:mozilla.64:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.:mozilla.65:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Sexcounter : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Ignored.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Ignored.:mozilla.49:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.:mozilla.50:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@statcounter[1].txt -> TrackingCookie.Statcounter : Ignored.C:\Documents and Settings\David\Cookies\david@anad.tacoda[1].txt -> TrackingCookie.Tacoda : Ignored.C:\Documents and Settings\David\Cookies\david@anat.tacoda[1].txt -> TrackingCookie.Tacoda : Ignored.C:\Documents and Settings\David\Cookies\david@tacoda[1].txt -> TrackingCookie.Tacoda : Ignored.C:\Documents and Settings\David\Cookies\david@tacoda[2].txt -> TrackingCookie.Tacoda : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@anad.tacoda[2].txt -> TrackingCookie.Tacoda : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@tacoda[2].txt -> TrackingCookie.Tacoda : Ignored.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@tacoda[1].txt -> TrackingCookie.Tacoda : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@tacoda[2].txt -> TrackingCookie.Tacoda : Ignored.C:\Documents and Settings\David\Cookies\david@login.tracking101[1].txt -> TrackingCookie.Tracking101 : Ignored.C:\Documents and Settings\David\Cookies\david@login.tracking101[2].txt -> TrackingCookie.Tracking101 : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@login.tracking101[2].txt -> TrackingCookie.Tracking101 : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@login.tracking101[3].txt -> TrackingCookie.Tracking101 : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@login.tracking101[1].txt -> TrackingCookie.Tracking101 : Ignored.:mozilla.98:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Ignored.C:\Documents and Settings\David\Cookies\david@trafic[1].txt -> TrackingCookie.Trafic : Ignored.:mozilla.164:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Tribalfusion : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@tribalfusion[3].txt -> TrackingCookie.Tribalfusion : Ignored.C:\Documents and Settings\David\Cookies\david@reduxads.valuead[2].txt -> TrackingCookie.Valuead : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@reduxads.valuead[2].txt -> TrackingCookie.Valuead : Ignored.C:\Documents and Settings\David\Cookies\david@web-stat[1].txt -> TrackingCookie.Web-stat : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@web-stat[2].txt -> TrackingCookie.Web-stat : Ignored.C:\Documents and Settings\David\Cookies\david@weborama[2].txt -> TrackingCookie.Weborama : Ignored.C:\Documents and Settings\David\Cookies\david@m.webtrends[2].txt -> TrackingCookie.Webtrends : Ignored.C:\Documents and Settings\Joshua\Cookies\joshua@m.webtrends[1].txt -> TrackingCookie.Webtrends : Ignored.C:\Documents and Settings\Saul\Cookies\saul@m.webtrends[2].txt -> TrackingCookie.Webtrends : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@m.webtrends[1].txt -> TrackingCookie.Webtrends : Ignored.:mozilla.39:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Webtrendslive : Ignored.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Ignored.:mozilla.177:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.:mozilla.178:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Ignored.:mozilla.100:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Zedo : Ignored.:mozilla.99:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Zedo : Ignored.C:\Documents and Settings\Zoe\Cookies\zoe@zedo[2].txt -> TrackingCookie.Zedo : Ignored.C:\WINDOWS\system32\1024 -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld158A.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld1F75.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld2C73.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld33BC.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld3583.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld3A4.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld3DC3.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld40E9.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld41A6.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld53A2.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld5438.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld5E13.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld6634.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld690C.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld6A94.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld7C32.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld7F39.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld8BD7.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld8E66.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld9063.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ld92C6.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ldA464.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ldA77B.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ldB44.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ldB864.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ldB932.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ldBA14.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ldBA9A.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ldC5B2.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ldCD13.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ldCF11.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ldDBE.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ldE0C8.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ldE2E3.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ldE5DA.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ldEE04.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ldF712.tmp -> Trojan.Small : Ignored.C:\WINDOWS\system32\1024\ldF762.tmp -> Trojan.Small : Ignored.::Report end Link to post Share on other sites More sharing options...
JeanInMontana Posted August 6, 2007 ID:7228 Share Posted August 6, 2007 We must have had a miscommunication Dave. Everything in your log was ignored. You should run the scan again and fix all the infections. The log shows a trojan and many tracking cookies. Panda may remove the Trojan but it will not remove the cookies. Link to post Share on other sites More sharing options...
Dave Posted August 7, 2007 Author ID:7268 Share Posted August 7, 2007 JeanHere is the treated AVG log and PAnda to follow---------------------------------------------------------AVG Anti-Spyware - Scan Report--------------------------------------------------------- + Created at: 20:12:58 07/08/2007 + Scan result: HKU\S-1-5-21-2040763978-534807910-3968438529-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C2EEB4FA-B6D6-41B9-9CFA-ABA87F862BCB} -> Adware.Generic : Cleaned with backup (quarantined).C:\System Volume Information\_restore{562648CC-34F7-4C74-AC42-6FBFFB01D4D8}\RP811\A0393528.exe -> Downloader.Small : Cleaned with backup (quarantined).C:\System Volume Information\_restore{562648CC-34F7-4C74-AC42-6FBFFB01D4D8}\RP811\A0393529.exe -> Downloader.Small : Cleaned with backup (quarantined).:mozilla.49:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.:mozilla.121:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.:mozilla.13:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.:mozilla.14:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.:mozilla.50:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.:mozilla.6:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.:mozilla.7:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.C:\Documents and Settings\David\Cookies\david@2o7[3].txt -> TrackingCookie.2o7 : Cleaned.C:\Documents and Settings\David\Cookies\david@digitalclarity.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.C:\Documents and Settings\David\Cookies\david@pandasoftware.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.C:\Documents and Settings\David\Cookies\david@partygaming.122.2o7[2].txt -> TrackingCookie.2o7 : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@wpni.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@aavalue[1].txt -> TrackingCookie.Aavalue : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@freemusicconnection.aavalue[2].txt -> TrackingCookie.Aavalue : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@aavalue[2].txt -> TrackingCookie.Aavalue : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@eztracks.aavalue[2].txt -> TrackingCookie.Aavalue : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@getmusicfree.aavalue[2].txt -> TrackingCookie.Aavalue : Cleaned.:mozilla.53:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.:mozilla.54:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.C:\Documents and Settings\David\Cookies\david@3.adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned.C:\Documents and Settings\David\Cookies\david@3.adbrite[3].txt -> TrackingCookie.Adbrite : Cleaned.C:\Documents and Settings\David\Cookies\david@4.adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.C:\Documents and Settings\David\Cookies\david@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.C:\Documents and Settings\David\Cookies\david@adbrite[3].txt -> TrackingCookie.Adbrite : Cleaned.C:\Documents and Settings\David\Cookies\david@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned.C:\Documents and Settings\David\Cookies\david@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@ads.adbrite[3].txt -> TrackingCookie.Adbrite : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@ads.addynamix[1].txt -> TrackingCookie.Addynamix : Cleaned.C:\Documents and Settings\David\Cookies\david@rotator.adjuggler[1].txt -> TrackingCookie.Adjuggler : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@rotator.adjuggler[2].txt -> TrackingCookie.Adjuggler : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@rotator.adjuggler[1].txt -> TrackingCookie.Adjuggler : Cleaned.:mozilla.92:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.:mozilla.93:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.:mozilla.94:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.:mozilla.95:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.:mozilla.96:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@adrevolver[3].txt -> TrackingCookie.Adrevolver : Cleaned.:mozilla.55:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.:mozilla.56:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.:mozilla.71:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.:mozilla.74:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.:mozilla.23:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.:mozilla.24:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.:mozilla.26:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.:mozilla.27:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.:mozilla.85:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.:mozilla.86:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.:mozilla.22:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.:mozilla.40:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@www.burstbeacon[1].txt -> TrackingCookie.Burstbeacon : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@www.burstbeacon[2].txt -> TrackingCookie.Burstbeacon : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@www.burstbeacon[2].txt -> TrackingCookie.Burstbeacon : Cleaned.:mozilla.107:C:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\222004xb.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.:mozilla.22:C:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\222004xb.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@www.burstnet[3].txt -> TrackingCookie.Burstnet : Cleaned.:mozilla.53:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Clickbank : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@ad1.clickhype[1].txt -> TrackingCookie.Clickhype : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@cz3.clickzs[2].txt -> TrackingCookie.Clickzs : Cleaned.C:\Documents and Settings\David\Cookies\david@ads.cnn[1].txt -> TrackingCookie.Cnn : Cleaned.C:\Documents and Settings\Saul\Cookies\saul@ads.cnn[2].txt -> TrackingCookie.Cnn : Cleaned.C:\Documents and Settings\David\Cookies\david@com[1].txt -> TrackingCookie.Com : Cleaned.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@abcnews.com[2].txt -> TrackingCookie.Com : Cleaned.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@com[1].txt -> TrackingCookie.Com : Cleaned.:mozilla.25:C:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\222004xb.default\cookies.txt -> TrackingCookie.Connextra : Cleaned.:mozilla.26:C:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\222004xb.default\cookies.txt -> TrackingCookie.Connextra : Cleaned.C:\Documents and Settings\David\Cookies\david@connextra[5].txt -> TrackingCookie.Connextra : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@connextra[1].txt -> TrackingCookie.Connextra : Cleaned.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@connextra[1].txt -> TrackingCookie.Connextra : Cleaned.C:\Documents and Settings\Saul\Cookies\saul@connextra[2].txt -> TrackingCookie.Connextra : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@connextra[4].txt -> TrackingCookie.Connextra : Cleaned.C:\Documents and Settings\David\Cookies\david@bilbo.counted[1].txt -> TrackingCookie.Counted : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@bilbo.counted[2].txt -> TrackingCookie.Counted : Cleaned.C:\Documents and Settings\David\Cookies\david@dealtime[1].txt -> TrackingCookie.Dealtime : Cleaned.C:\Documents and Settings\David\Cookies\david@stat.dealtime[1].txt -> TrackingCookie.Dealtime : Cleaned.C:\Documents and Settings\David\Cookies\david@stat.dealtime[3].txt -> TrackingCookie.Dealtime : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@dealtime[1].txt -> TrackingCookie.Dealtime : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@stat.dealtime[2].txt -> TrackingCookie.Dealtime : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@stat.dealtime[3].txt -> TrackingCookie.Dealtime : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@stat.dealtime[2].txt -> TrackingCookie.Dealtime : Cleaned.:mozilla.15:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.:mozilla.40:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.:mozilla.121:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.:mozilla.122:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.:mozilla.123:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.:mozilla.124:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.C:\Documents and Settings\David\Cookies\david@e-2dj6wbmywpcjsco.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned.C:\Documents and Settings\David\Cookies\david@estat[1].txt -> TrackingCookie.Estat : Cleaned.:mozilla.33:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.:mozilla.35:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.:mozilla.36:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.:mozilla.37:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.:mozilla.38:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.:mozilla.39:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.C:\Documents and Settings\David\Cookies\david@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Cleaned.C:\Documents and Settings\David\Cookies\david@adopt.euroclick[3].txt -> TrackingCookie.Euroclick : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Cleaned.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@fastclick[3].txt -> TrackingCookie.Fastclick : Cleaned.:mozilla.116:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned.:mozilla.106:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.:mozilla.107:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.:mozilla.150:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.:mozilla.151:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.C:\Documents and Settings\David\Cookies\david@intelli-direct[1].txt -> TrackingCookie.Intelli-direct : Cleaned.C:\Documents and Settings\David\Cookies\david@intelli-direct[2].txt -> TrackingCookie.Intelli-direct : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@intelli-direct[1].txt -> TrackingCookie.Intelli-direct : Cleaned.C:\Documents and Settings\David\Cookies\david@www.intelli-tracker[1].txt -> TrackingCookie.Intelli-tracker : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@www.intelli-tracker[1].txt -> TrackingCookie.Intelli-tracker : Cleaned.C:\Documents and Settings\David\Cookies\david@ivwbox[1].txt -> TrackingCookie.Ivwbox : Cleaned.C:\Documents and Settings\David\Cookies\david@search.live[2].txt -> TrackingCookie.Live : Cleaned.:mozilla.199:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.:mozilla.200:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.:mozilla.201:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.C:\Documents and Settings\David\Cookies\david@sales.liveperson[1].txt -> TrackingCookie.Liveperson : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@server.lon.liveperson[1].txt -> TrackingCookie.Liveperson : Cleaned.:mozilla.193:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.C:\Documents and Settings\David\Cookies\david@image.masterstats[1].txt -> TrackingCookie.Masterstats : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@image.masterstats[1].txt -> TrackingCookie.Masterstats : Cleaned.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@image.masterstats[1].txt -> TrackingCookie.Masterstats : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@image.masterstats[1].txt -> TrackingCookie.Masterstats : Cleaned.:mozilla.18:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.:mozilla.19:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.C:\Documents and Settings\David\Cookies\david@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Cleaned.C:\Documents and Settings\David\Cookies\david@stat.onestat[2].txt -> TrackingCookie.Onestat : Cleaned.C:\Documents and Settings\David\Cookies\david@stat.onestat[3].txt -> TrackingCookie.Onestat : Cleaned.:mozilla.120:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Overture : Cleaned.C:\Documents and Settings\David\Cookies\david@overture[2].txt -> TrackingCookie.Overture : Cleaned.C:\Documents and Settings\David\Cookies\david@perf.overture[2].txt -> TrackingCookie.Overture : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@overture[1].txt -> TrackingCookie.Overture : Cleaned.:mozilla.113:C:\Documents and Settings\David\Application Data\Mozilla\Firefox\Profiles\222004xb.default\cookies.txt -> TrackingCookie.Paypal : Cleaned.:mozilla.8:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Paypal : Cleaned.C:\Documents and Settings\David\Cookies\david@www.paypal[1].txt -> TrackingCookie.Paypal : Cleaned.C:\Documents and Settings\David\Cookies\david@www.paypal[3].txt -> TrackingCookie.Paypal : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@www.paypal[1].txt -> TrackingCookie.Paypal : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@www.paypal[1].txt -> TrackingCookie.Paypal : Cleaned.:mozilla.108:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.:mozilla.109:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.:mozilla.110:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.:mozilla.111:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.C:\Documents and Settings\David\Cookies\david@qksrv[2].txt -> TrackingCookie.Qksrv : Cleaned.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@qksrv[2].txt -> TrackingCookie.Qksrv : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@qksrv[2].txt -> TrackingCookie.Qksrv : Cleaned.C:\Documents and Settings\David\Cookies\david@ads-205.quarterserver[1].txt -> TrackingCookie.Quarterserver : Cleaned.:mozilla.106:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.:mozilla.107:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.:mozilla.31:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.:mozilla.32:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.:mozilla.134:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.:mozilla.135:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@web4.realtracker[1].txt -> TrackingCookie.Realtracker : Cleaned.:mozilla.136:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.:mozilla.137:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.:mozilla.138:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.:mozilla.139:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.:mozilla.140:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.:mozilla.141:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.:mozilla.142:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.:mozilla.182:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.C:\Documents and Settings\David\Cookies\david@revsci[1].txt -> TrackingCookie.Revsci : Cleaned.C:\Documents and Settings\David\Cookies\david@revsci[2].txt -> TrackingCookie.Revsci : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@revsci[1].txt -> TrackingCookie.Revsci : Cleaned.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@revsci[2].txt -> TrackingCookie.Revsci : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@revsci[1].txt -> TrackingCookie.Revsci : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@revsci[3].txt -> TrackingCookie.Revsci : Cleaned.:mozilla.145:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.:mozilla.146:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.:mozilla.147:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.:mozilla.148:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.:mozilla.149:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.:mozilla.60:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.C:\Documents and Settings\David\Cookies\david@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned.C:\Documents and Settings\David\Cookies\david@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned.:mozilla.64:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.:mozilla.65:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Cleaned.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Cleaned.:mozilla.49:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.:mozilla.50:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned.C:\Documents and Settings\David\Cookies\david@anad.tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned.C:\Documents and Settings\David\Cookies\david@anat.tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned.C:\Documents and Settings\David\Cookies\david@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned.C:\Documents and Settings\David\Cookies\david@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@anad.tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned.C:\Documents and Settings\David\Cookies\david@login.tracking101[1].txt -> TrackingCookie.Tracking101 : Cleaned.C:\Documents and Settings\David\Cookies\david@login.tracking101[2].txt -> TrackingCookie.Tracking101 : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@login.tracking101[2].txt -> TrackingCookie.Tracking101 : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@login.tracking101[3].txt -> TrackingCookie.Tracking101 : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@login.tracking101[1].txt -> TrackingCookie.Tracking101 : Cleaned.:mozilla.98:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned.C:\Documents and Settings\David\Cookies\david@trafic[1].txt -> TrackingCookie.Trafic : Cleaned.:mozilla.164:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@tribalfusion[3].txt -> TrackingCookie.Tribalfusion : Cleaned.C:\Documents and Settings\David\Cookies\david@reduxads.valuead[2].txt -> TrackingCookie.Valuead : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@reduxads.valuead[2].txt -> TrackingCookie.Valuead : Cleaned.C:\Documents and Settings\David\Cookies\david@web-stat[1].txt -> TrackingCookie.Web-stat : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@web-stat[2].txt -> TrackingCookie.Web-stat : Cleaned.C:\Documents and Settings\David\Cookies\david@weborama[2].txt -> TrackingCookie.Weborama : Cleaned.C:\Documents and Settings\David\Cookies\david@m.webtrends[2].txt -> TrackingCookie.Webtrends : Cleaned.C:\Documents and Settings\Joshua\Cookies\joshua@m.webtrends[1].txt -> TrackingCookie.Webtrends : Cleaned.C:\Documents and Settings\Saul\Cookies\saul@m.webtrends[2].txt -> TrackingCookie.Webtrends : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@m.webtrends[1].txt -> TrackingCookie.Webtrends : Cleaned.:mozilla.39:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Cleaned.:mozilla.177:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.:mozilla.178:C:\Documents and Settings\Joshua\Application Data\Mozilla\Firefox\Profiles\no9x61t9.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned.:mozilla.100:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.:mozilla.99:C:\Documents and Settings\Zoe\Application Data\Mozilla\Firefox\Profiles\69i3sosb.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.C:\Documents and Settings\Zoe\Cookies\zoe@zedo[2].txt -> TrackingCookie.Zedo : Cleaned.C:\WINDOWS\system32\1024 -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld158A.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld1F75.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld2C73.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld33BC.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld3583.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld3A4.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld3DC3.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld40E9.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld41A6.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld53A2.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld5438.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld5E13.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld6634.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld690C.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld6A94.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld7C32.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld7F39.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld8BD7.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld8E66.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld9063.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ld92C6.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ldA464.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ldA77B.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ldB44.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ldB864.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ldB932.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ldBA14.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ldBA9A.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ldC5B2.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ldCD13.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ldCF11.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ldDBE.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ldE0C8.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ldE2E3.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ldE5DA.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ldEE04.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ldF712.tmp -> Trojan.Small : Cleaned with backup (quarantined).C:\WINDOWS\system32\1024\ldF762.tmp -> Trojan.Small : Cleaned with backup (quarantined).::Report end Link to post Share on other sites More sharing options...
JeanInMontana Posted August 7, 2007 ID:7270 Share Posted August 7, 2007 Good job. Remember a new HJT log after you remove everything Panda finds and the Panda log. Also please let me know if your noticing any improvements. Link to post Share on other sites More sharing options...
Dave Posted August 8, 2007 Author ID:7309 Share Posted August 8, 2007 Panda logIncident Status Location Potentially unwanted tool:application/mediapipe Not disinfected c:\program files\License_Manager Potentially unwanted tool:application/mywebsearch Not disinfected hkey_classes_root\clsid\{147A976E-EEE1-4377-8EA7-4716E4CDD239} Spyware:Cookie/Hbmediapro Not disinfected C:\Documents and Settings\David\Cookies\david@adopt.hbmediapro[2].txt Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\David\Cookies\david@ads.pointroll[2].txt Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\David\Cookies\david@adtech[3].txt Spyware:Cookie/NewMedia Not disinfected C:\Documents and Settings\David\Cookies\david@anm.co[1].txt Spyware:Cookie/Azjmp Not disinfected C:\Documents and Settings\David\Cookies\david@azjmp[1].txt Spyware:Cookie/bravenetA Not disinfected C:\Documents and Settings\David\Cookies\david@bravenet[2].txt Spyware:Cookie/Ccbill Not disinfected C:\Documents and Settings\David\Cookies\david@ccbill[1].txt Spyware:Cookie/Entrepreneur Not disinfected C:\Documents and Settings\David\Cookies\david@entrepreneur[1].txt Spyware:Cookie/Go Not disinfected C:\Documents and Settings\David\Cookies\david@go[1].txt Spyware:Cookie/Go Not disinfected C:\Documents and Settings\David\Cookies\david@go[2].txt Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\David\Cookies\david@terra.com[1].txt Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\David\Cookies\david@tribalfusion[2].txt Spyware:Cookie/Tucows Not disinfected C:\Documents and Settings\David\Cookies\david@tucows[1].txt Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\David\Cookies\david@uol.com[1].txt Spyware:Cookie/ademails Not disinfected C:\Documents and Settings\David\Cookies\david@www.ademails[1].txt Spyware:Cookie/Cgi-bin Not disinfected C:\Documents and Settings\David\Cookies\david@www6.addfreestats[1].txt Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\David\Cookies\david@xiti[1].txt Potentially unwanted tool:Application/Processor Not disinfected C:\Documents and Settings\David\Local Settings\Temporary Internet Files\Content.IE5\YR2LA3BU\SmitfraudFix[1]\SmitfraudFix\Process.exe Potentially unwanted tool:Application/SuperFast Not disinfected C:\Documents and Settings\David\Local Settings\Temporary Internet Files\Content.IE5\YR2LA3BU\SmitfraudFix[1]\SmitfraudFix\restart.exe Virus:X97M/Jini.A Disinfected C:\Documents and Settings\David\My Documents\Daves Stuff From Evesham C\Excel\Core Menu Rollout Value.xls Virus:X97M/Jini.A Disinfected C:\Documents and Settings\David\My Documents\Daves Stuff From Evesham C\Excel\octsc.xls Virus:X97M/Jini.A Disinfected C:\Documents and Settings\David\My Documents\Daves Stuff From Evesham C\Excel\octsctotal.xls Virus:X97M/Jini.A Disinfected C:\Documents and Settings\David\My Documents\Daves Stuff From Evesham C\Excel\SepSC.xls Spyware:Cookie/888 Not disinfected C:\Documents and Settings\Joshua\Cookies\joshua@888[1].txt Spyware:Cookie/Hbmediapro Not disinfected C:\Documents and Settings\Joshua\Cookies\joshua@adopt.hbmediapro[2].txt Spyware:Cookie/Azjmp Not disinfected C:\Documents and Settings\Joshua\Cookies\joshua@azjmp[1].txt Spyware:Cookie/Cassava Not disinfected C:\Documents and Settings\Joshua\Cookies\joshua@cassava[1].txt Spyware:Cookie/Ccbill Not disinfected C:\Documents and Settings\Joshua\Cookies\joshua@ccbill[1].txt Spyware:Cookie/Screensavers Not disinfected C:\Documents and Settings\Joshua\Cookies\joshua@i.screensavers[2].txt Spyware:Cookie/AspinallsOnlineCasino Not disinfected C:\Documents and Settings\Joshua\Cookies\joshua@pacificpoker[1].txt Spyware:Cookie/Toplist Not disinfected C:\Documents and Settings\Joshua\Cookies\joshua@toplist[1].txt Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Joshua\Cookies\joshua@xiti[1].txt Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@apmebf[2].txt Spyware:Cookie/Ccbill Not disinfected C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@ccbill[2].txt Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Joshua\Local Settings\Temp\Cookies\joshua@go[1].txt Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Saul\Cookies\saul@go[2].txt Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@2o7[1].txt Spyware:Cookie/Hbmediapro Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@adopt.hbmediapro[2].txt Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@ads.pointroll[2].txt Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@adtech[3].txt Spyware:Cookie/NewMedia Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@anm.co[1].txt Spyware:Cookie/Azjmp Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@azjmp[1].txt Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@com[1].txt Spyware:Cookie/cs.sexcounter Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@cs.sexcounter[2].txt Spyware:Cookie/Findwhat Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@findwhat[1].txt Spyware:Cookie/FortuneCity Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@fortunecity[1].txt Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@gostats[1].txt Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@go[1].txt Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@go[2].txt Spyware:Cookie/Screensavers Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@i.screensavers[1].txt Spyware:Cookie/Servlet Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@livehelper[1].txt Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@overture[2].txt Spyware:Cookie/AspinallsOnlineCasino Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@pacificpoker[1].txt Spyware:Cookie/QkSrv Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@qksrv[2].txt Spyware:Cookie/onestat.com Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@stat.onestat[1].txt Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@target[1].txt Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@www.burstbeacon[2].txt Spyware:Cookie/Cgi-bin Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@www3.addfreestats[2].txt Spyware:Cookie/Cgi-bin Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@www5.addfreestats[1].txt Spyware:Cookie/Xmts Not disinfected C:\Documents and Settings\Vicky\Cookies\vicky@xmts[2].txt Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Zoe\Cookies\zoe@apmebf[2].txt Spyware:Cookie/Azjmp Not disinfected C:\Documents and Settings\Zoe\Cookies\zoe@azjmp[1].txt Spyware:Cookie/Cgi-bin Not disinfected C:\Documents and Settings\Zoe\Cookies\zoe@cgi-bin[3].txt Spyware:Cookie/DriveCleaner Not disinfected C:\Documents and Settings\Zoe\Cookies\zoe@drivecleaner[2].txt Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Zoe\Cookies\zoe@go[1].txt Spyware:Cookie/888 Not disinfected C:\Documents and Settings\Zoe\Cookies\zoe@int.sitestat[1].txt Spyware:Cookie/Cassava Not disinfected C:\Documents and Settings\Zoe\Cookies\zoe@int.sitestat[2].txt Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Zoe\Cookies\zoe@media.adrevolver[1].txt Spyware:Cookie/DriveCleaner Not disinfected C:\Documents and Settings\Zoe\Cookies\zoe@www.drivecleaner[1].txt Spyware:Cookie/Cgi-bin Not disinfected C:\Documents and Settings\Zoe\Cookies\zoe@www2.addfreestats[2].txt Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Zoe\Cookies\zoe@xiti[1].txt Potentially unwanted tool:Application/MyWebSearch Not disinfected C:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll Potentially unwanted tool:Application/MyWebSearch Not disinfected C:\Program Files\MSN Messenger\msimg32.dll Potentially unwanted tool:Application/MyWebSearch Not disinfected C:\Program Files\MSN Messenger\riched20.dll Link to post Share on other sites More sharing options...
Dave Posted August 8, 2007 Author ID:7310 Share Posted August 8, 2007 Jean.....wnen you say remove everything in the panda log is that just find and delete then run HJT?Dave Link to post Share on other sites More sharing options...
JeanInMontana Posted August 8, 2007 ID:7311 Share Posted August 8, 2007 Yes and no Dave. I mean allow Panda to remove what it will, and as in the case of MyWebSearch get rid of that plug in. That is a bad item. Did you immunize when you ran Spybot Search and Destroy? You should, it will help prevent somethings from getting on your system.I suggest you get this program and get rid of all the junk http://www.ccleaner.com/download/When did you use SmitFraud fix? Files\Content.IE5\YR2LA3BU\SmitfraudFix[1]\SmitfraudFix\Process.exe Link to post Share on other sites More sharing options...
Dave Posted August 8, 2007 Author ID:7313 Share Posted August 8, 2007 Hi JeanI need to subscribe panda then to immunize? Yes I did immunize using S&D but can do again?Smitfraud fix was the other thing i tried from a prevous log.Cant find some of the locations in the panda report....reg key, smitfraud and cookies for VickyHere is the latest HJT anywayLogfile of Trend Micro HijackThis v2.0.2Scan saved at 06:02:31, on 08/08/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16473)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exec:\program files\common files\logitech\lvmvfm\LVPrcSrv.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeC:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exeC:\PROGRA~1\McAfee\MSC\mcmscsvc.exec:\program files\common files\mcafee\mna\mcnasvc.exeC:\PROGRA~1\McAfee\VIRUSS~1\mcods.exeC:\PROGRA~1\McAfee\MSC\mcpromgr.exec:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exec:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exeC:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exeC:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exeC:\Program Files\McAfee\MPF\MPFSrv.exeC:\PROGRA~1\McAfee\MPS\mps.exeC:\Program Files\McAfee\MSK\MskSrver.exeC:\WINDOWS\system32\nvsvc32.exeC:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exeC:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Sony\vaio entertainment\VzTaskScheduler.exeC:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exeC:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exeC:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exeC:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exeC:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzRs\VzRs.exeC:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\iPod\bin\iPodService.exeC:\WINDOWS\Explorer.EXEC:\Program Files\McAfee\MPS\mpsevh.exec:\PROGRA~1\mcafee.com\agent\mcagent.exeC:\Program Files\sony\vaio update 2\VAIOUpdt.exeC:\Program Files\Sony\VAIO Zone Remote Commander\AvRmtCtr.exeC:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exeC:\Program Files\HP CD-DVD\Umbrella\DVDTray.exeC:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exeC:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exeC:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exeC:\Program Files\Roxio\Media Experience\DMXLauncher.exeC:\Program Files\McAfee\MSK\MskAgent.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Windows Defender\MSASCui.exeC:\WINDOWS\kdx\KHost.exeC:\PROGRA~1\Sony\SONICS~1\SsAAD.exeC:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeC:\WINDOWS\system32\ctfmon.exec:\program files\mcafee\msc\mcuimgr.exeC:\Documents and Settings\David\My Documents\HiJackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.skybroadband.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://edit.europe.yahoo.com/config/login?...t.yahoo.com/%3fR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.vaio-link.com/vu.asp?l=en&u=m&h=0809R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer Provided By Sky BroadbandR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhostR3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dllO2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dllO2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dllO2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dllO2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dllO3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dllO4 - HKLM\..\Run: [HKSERV.EXE] C:\Program Files\Sony\HotKey Utility\HKserv.exeO4 - HKLM\..\Run: [VAIO Update 2] "C:\Program Files\sony\vaio update 2\VAIOUpdt.exe" /StationaryO4 - HKLM\..\Run: [VZRemoteCommander] C:\Program Files\Sony\VAIO Zone Remote Commander\AvRmtCtr.exeO4 - HKLM\..\Run: [PDService.exe] C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exeO4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exeO4 - HKLM\..\Run: [DVDBitSet] "C:\Program Files\HP CD-DVD\Umbrella\DVDBitSet.exe" /NOUIO4 - HKLM\..\Run: [DVDTray] "C:\Program Files\HP CD-DVD\Umbrella\DVDTray.exe"O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe"O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hideO4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe"O4 - HKLM\..\Run: [DMXLauncher] "C:\Program Files\Roxio\Media Experience\DMXLauncher.exe"O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exeO4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hideO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimizedO4 - HKCU\..\Run: [kdx] C:\WINDOWS\kdx\KHost.exe -allO4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostartO4 - HKCU\..\Run: [ssAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exeO4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKUS\S-1-5-21-2040763978-534807910-3968438529-1006\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (User 'Vicky')O4 - HKUS\S-1-5-21-2040763978-534807910-3968438529-1006\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot (User 'Vicky')O4 - HKUS\S-1-5-21-2040763978-534807910-3968438529-1006\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Vicky')O4 - HKUS\S-1-5-21-2040763978-534807910-3968438529-1006\..\Run: [kdx] C:\WINDOWS\kdx\KHost.exe -all (User 'Vicky')O4 - HKUS\S-1-5-21-2040763978-534807910-3968438529-1006\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet (User 'Vicky')O4 - HKUS\S-1-5-21-2040763978-534807910-3968438529-1006\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Vicky')O4 - HKUS\S-1-5-21-2040763978-534807910-3968438529-1006\..\Run: [AOL Fast Start] "C:\Program Files\America Online 9.0\AOL.EXE" -b (User 'Vicky')O4 - HKUS\S-1-5-21-2040763978-534807910-3968438529-1006\..\Run: [ssAAD.exe] C:\PROGRA~1\sony\SONICS~1\SsAAD.exe (User 'Vicky')O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.htmlO8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.htmlO8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.htmlO8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.htmlO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dllO9 - Extra button: Sky - {08E730A4-FB02-45BD-A900-01E4AD8016F6} - http://www.skybroadband.com (file missing)O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLLO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.sony-europe.com/O15 - Trusted Zone: *.line6.netO15 - Trusted Zone: *.sony-europe.comO15 - Trusted Zone: *.sonystyle-europe.comO15 - Trusted Zone: *.vaio-link.comO16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cabO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cabO16 - DPF: {AE9DCB17-F804-11D2-A44A-0020182C1446} - file://F:\Resources\IntraLaunch.CABO18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeO23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exeO23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exeO23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeO23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeO23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exeO23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exeO23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: KService - Kontiki Inc. - C:\Program Files\KService\KService.exeO23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exeO23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\Logitech\SrvLnch\SrvLnch.exeO23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exeO23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exeO23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exeO23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exeO23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exeO23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exeO23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exeO23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exeO23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exeO23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exeO23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exeO23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exeO23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exeO23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exeO23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exeO23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exeO23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exeO23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exeO23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exeO23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exeO23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exeO23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exeO23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exeO23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exeO23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exeO23 - Service: VAIO Entertainment Aggregation and Control Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzRs\VzRs.exeO23 - Service: VAIO Entertainment Task Scheduler - Sony Corporation - C:\Program Files\Sony\vaio entertainment\VzTaskScheduler.exeO23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exeO23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exeO23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exeO23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exeO23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exeO23 - Service: VAIO Cooporated Initialisation (VCI) - Sony Corporation - C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exeO23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exeO23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exeO23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe--End of file - 19235 bytes Link to post Share on other sites More sharing options...
JeanInMontana Posted August 8, 2007 ID:7326 Share Posted August 8, 2007 Hi, no you don't immunize with Panda. Sorry if I confused you. Did you remove the initial items I listed in HJT, using HJT? They are still in your log. You run a scan only and put a check next to each item, then click fix.Do this please then reboot and show me a new log. Link to post Share on other sites More sharing options...
Dave Posted August 9, 2007 Author ID:7404 Share Posted August 9, 2007 Hi JeanI did remov the original HJT entries as you askedhere is the latest HJT scanLogfile of Trend Micro HijackThis v2.0.2Scan saved at 21:08:38, on 09/08/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16473)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exec:\program files\common files\logitech\lvmvfm\LVPrcSrv.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeC:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exeC:\PROGRA~1\McAfee\MSC\mcmscsvc.exec:\program files\common files\mcafee\mna\mcnasvc.exeC:\PROGRA~1\McAfee\VIRUSS~1\mcods.exeC:\PROGRA~1\McAfee\MSC\mcpromgr.exec:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exec:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exeC:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exeC:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exeC:\Program Files\McAfee\MPF\MPFSrv.exeC:\PROGRA~1\McAfee\MPS\mps.exeC:\Program Files\McAfee\MSK\MskSrver.exeC:\WINDOWS\system32\nvsvc32.exeC:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exeC:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Sony\vaio entertainment\VzTaskScheduler.exeC:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exeC:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exeC:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exeC:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exeC:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzRs\VzRs.exeC:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exeC:\Program Files\iPod\bin\iPodService.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEc:\PROGRA~1\mcafee.com\agent\mcagent.exeC:\Program Files\McAfee\MPS\mpsevh.exeC:\Program Files\sony\vaio update 2\VAIOUpdt.exeC:\Program Files\Sony\VAIO Zone Remote Commander\AvRmtCtr.exeC:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exeC:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exeC:\Program Files\HP CD-DVD\Umbrella\DVDTray.exeC:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exeC:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exeC:\Program Files\Logitech\QuickCam10\QuickCam10.exeC:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exeC:\Program Files\Roxio\Media Experience\DMXLauncher.exeC:\Program Files\McAfee\MSK\MskAgent.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Windows Defender\MSASCui.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\Logitech\QuickCam10\COCIManager.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exeC:\WINDOWS\kdx\KHost.exeC:\Program Files\Google\Google Talk\googletalk.exeC:\PROGRA~1\Sony\SONICS~1\SsAAD.exeC:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeC:\WINDOWS\system32\ctfmon.exec:\program files\mcafee\msc\mcuimgr.exeC:\Documents and Settings\David\My Documents\HiJackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.skybroadband.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://edit.europe.yahoo.com/config/login?...t.yahoo.com/%3fR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.vaio-link.com/vu.asp?l=en&u=m&h=0809R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer Provided By Sky BroadbandR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhostR3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dllO2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dllO2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dllO2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dllO2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dllO2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dllO2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dllO3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dllO3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dllO4 - HKLM\..\Run: [HKSERV.EXE] C:\Program Files\Sony\HotKey Utility\HKserv.exeO4 - HKLM\..\Run: [VAIO Update 2] "C:\Program Files\sony\vaio update 2\VAIOUpdt.exe" /StationaryO4 - HKLM\..\Run: [VZRemoteCommander] C:\Program Files\Sony\VAIO Zone Remote Commander\AvRmtCtr.exeO4 - HKLM\..\Run: [PDService.exe] C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exeO4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exeO4 - HKLM\..\Run: [DVDBitSet] "C:\Program Files\HP CD-DVD\Umbrella\DVDBitSet.exe" /NOUIO4 - HKLM\..\Run: [DVDTray] "C:\Program Files\HP CD-DVD\Umbrella\DVDTray.exe"O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe"O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hideO4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe"O4 - HKLM\..\Run: [DMXLauncher] "C:\Program Files\Roxio\Media Experience\DMXLauncher.exe"O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exeO4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hideO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimizedO4 - HKCU\..\Run: [kdx] C:\WINDOWS\kdx\KHost.exe -allO4 - HKCU\..\Run: [googletalk] "C:\Program Files\Google\Google Talk\googletalk.exe" /autostartO4 - HKCU\..\Run: [ssAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exeO4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKUS\S-1-5-21-2040763978-534807910-3968438529-1006\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (User 'Vicky')O4 - HKUS\S-1-5-21-2040763978-534807910-3968438529-1006\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot (User 'Vicky')O4 - HKUS\S-1-5-21-2040763978-534807910-3968438529-1006\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Vicky')O4 - HKUS\S-1-5-21-2040763978-534807910-3968438529-1006\..\Run: [kdx] C:\WINDOWS\kdx\KHost.exe -all (User 'Vicky')O4 - HKUS\S-1-5-21-2040763978-534807910-3968438529-1006\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet (User 'Vicky')O4 - HKUS\S-1-5-21-2040763978-534807910-3968438529-1006\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Vicky')O4 - HKUS\S-1-5-21-2040763978-534807910-3968438529-1006\..\Run: [AOL Fast Start] "C:\Program Files\America Online 9.0\AOL.EXE" -b (User 'Vicky')O4 - HKUS\S-1-5-21-2040763978-534807910-3968438529-1006\..\Run: [ssAAD.exe] C:\PROGRA~1\sony\SONICS~1\SsAAD.exe (User 'Vicky')O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.htmlO8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.htmlO8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.htmlO8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.htmlO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dllO9 - Extra button: Sky - {08E730A4-FB02-45BD-A900-01E4AD8016F6} - http://www.skybroadband.com (file missing)O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLLO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.sony-europe.com/O15 - Trusted Zone: *.line6.netO15 - Trusted Zone: *.sony-europe.comO15 - Trusted Zone: *.sonystyle-europe.comO15 - Trusted Zone: *.vaio-link.comO16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cabO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cabO16 - DPF: {AE9DCB17-F804-11D2-A44A-0020182C1446} - file://F:\Resources\IntraLaunch.CABO18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO23 - Service: McAfee Application Installer Cleanup (0158111186648264) (0158111186648264mcinstcleanup) - Unknown owner - C:\WINDOWS\TEMP15811~1.EXE (file missing)O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeO23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exeO23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exeO23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeO23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeO23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exeO23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exeO23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: KService - Kontiki Inc. - C:\Program Files\KService\KService.exeO23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exeO23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\Logitech\SrvLnch\SrvLnch.exeO23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exeO23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exeO23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exeO23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exeO23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exeO23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exeO23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exeO23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exeO23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exeO23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exeO23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exeO23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exeO23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exeO23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exeO23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exeO23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exeO23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exeO23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exeO23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exeO23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exeO23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exeO23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exeO23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exeO23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exeO23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exeO23 - Service: VAIO Entertainment Aggregation and Control Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzRs\VzRs.exeO23 - Service: VAIO Entertainment Task Scheduler - Sony Corporation - C:\Program Files\Sony\vaio entertainment\VzTaskScheduler.exeO23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exeO23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exeO23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exeO23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exeO23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exeO23 - Service: VAIO Cooporated Initialisation (VCI) - Sony Corporation - C:\Program Files\Sony\VAIO Cooperated Initialisation\VCI_SVC.exeO23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exeO23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exeO23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe--End of file - 20014 bytes Link to post Share on other sites More sharing options...
JeanInMontana Posted August 9, 2007 ID:7407 Share Posted August 9, 2007 So your still getting the popup? Let's run thishttp://download.bleepingcomputer.com/sUBs/ComboFix.exe2. Double click combofix.exe & follow the prompts.3. When finished, it shall produce a log for you. Post that log in your next replyNote:Do not mouseclick combofix's window while it's running. That may cause it to stallComboFix will create a folder called QooBox in C: (C:\QooBox). It will contain any folders that were quarantined. When you are done you can delete this folder - QooBox. Link to post Share on other sites More sharing options...
Dave Posted August 10, 2007 Author ID:7435 Share Posted August 10, 2007 JeanRan ComboFix but can't find the log.....any ideasAlso when Combofix does the reboot I get the blue screen with the error kernel_stack_inpage_error and have to on/off....which seems to work but does this stop the log displaying?There was a link quarantinedFiles to delete:C:\DOCUME~1\Zoe\APPLIC~1\FunWebProducts\Dave Link to post Share on other sites More sharing options...
Dave Posted August 10, 2007 Author ID:7436 Share Posted August 10, 2007 There is a file called ComboFix but all it says isComboFix 07-08-09.3 - "David" 2007-08-10 8:19:39.2 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.108 [GMT 1:00] Link to post Share on other sites More sharing options...
JeanInMontana Posted August 10, 2007 ID:7440 Share Posted August 10, 2007 Good morning Dave. The combo fix log should be on C:\ anything FunWeb is bad, get rid of it. Someone, Zoe in this case, must have installed a game or screensaver from them?? That is most likely the source of your trouble. Let me know if you can't find the log and what symptoms you still have. Link to post Share on other sites More sharing options...
Dave Posted August 10, 2007 Author ID:7466 Share Posted August 10, 2007 Hi JeanSince running Combo Fix I havent had any AVS or pop upsDave Link to post Share on other sites More sharing options...
JeanInMontana Posted August 11, 2007 ID:7468 Share Posted August 11, 2007 It probably took out the culprit. If you feel your infection free we can call this a victory for Dave! If not, I need to see that CF log and a new HJT log. Only you know how your PC runs. Although after removing these infections you probably need to do some basic maintenance, disk error check and defrag in that order. You are also running a version of the Adobe Reader that is outdated and a security risk. You should update to version 8.We also need to clear all System Restore points, as they will also be infected and if you need one you will reinfect your self.Go to Start>Control Panel>System. Click on the System Restore tab and put a check in Turn off System Restore. Then click OK. Now go to Start>Help and Support > Undo Changes to Your System or System Restore depending on the make of your PC. Click on what ever will open the System Restore box. You will see two options, Choose Create a System Restore Point. Give it a name like Clean Restore Point and today's date. Now if you need to use it you have it. Many of these infections can be avoided with an added layer of prevention. All reccommended programs are free and easy on system resources. You should install them as part of your protection arsenol. Keep Spybot Search & Destroy and always immunize when you update. You will also need at least one other scanning program AVG is good and there are several other excellent programs with free and paid versions. Read the overviews of what each program below does so you have an understanding of their importance and how to use.A firewall and antivirus are also essential. The Windows firewall in XP is not sufficient.Preform Windows Updates monthly on the second Tuesday or use automatic updates, and use your scanners weekly at the least. Always update before you scan.SpywareBlaster from Javacool SoftwareWinPatrol by BillPStudios SiteHound by FireTrustRogueRemoverhpHostsFor an excellent list of reliable free firewalls and antivirus programs see here . Link to post Share on other sites More sharing options...
JeanInMontana Posted August 15, 2007 ID:7678 Share Posted August 15, 2007 Because these issues are resolved the topic will be closed.The advice in this thread is specific to this machine. Using any instructions from here on your machine can cause complete ruination. Start your own thread and get help for your system. Link to post Share on other sites More sharing options...
Recommended Posts