FAKE critical alert / yellow triangle AVsystemcare?!

[Gorimi]

Hello everyone,

Recently I have had popups recommending me to download AVSYSTEMCARE in order for my computer to be safe. Now I searched around and noticed that this announcement is a spyware that can be very malicious. I didnt download it, but often my homepage is changed, I have a yellow triangle on the bottom left bar which, if clicked, open more pages about this fake program, and whenever I try to type or work popups about it happen. I would really enjoy help, as I have ran many antispyre and tools, and nothing removed it!

Here is the HJT log

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 12:45:18 AM, on 10/28/2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe

C:\Program Files\McAfee.com\VSO\mcvsshld.exe

C:\Program Files\McAfee.com\VSO\oasclnt.exe

c:\program files\mcafee.com\agent\mcagent.exe

c:\progra~1\mcafee.com\vso\mcvsescn.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe

C:\Program Files\Sunbelt Software\CounterSpy\SBCSTray.exe

C:\WINDOWS\system32\accwize.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

c:\program files\mcafee.com\agent\mcdetect.exe

c:\PROGRA~1\mcafee.com\vso\mcshield.exe

c:\PROGRA~1\mcafee.com\agent\mctskshd.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Sunbelt Software\CounterSpy\SBCSSvc.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\RegCleaner\RegCleanr.exe

C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

c:\progra~1\mcafee.com\vso\mcvsftsn.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\MSN Messenger\usnsvc.exe

C:\Program Files\internet explorer\iexplore.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = C:\WINDOWS\system32\spywarewarning.mht

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll

O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll

O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"

O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask

O4 - HKLM\..\Run: [VirusScan Online] "C:\Program Files\McAfee.com\VSO\mcvsshld.exe"

O4 - HKLM\..\Run: [OASClnt] "C:\Program Files\McAfee.com\VSO\oasclnt.exe"

O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe

O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe

O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [spyHunter] "C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter.exe"

O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [sBCSTray] "C:\Program Files\Sunbelt Software\CounterSpy\SBCSTray.exe"

O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/m...01/mcinsctl.cab

O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab

O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab

O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

O23 - Service: Windows Audio AudioSrvsrservice (AudioSrvsrservice) - Unknown owner - C:\WINDOWS\system32\accwize.exe

O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe

O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe

O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe

O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: Sunbelt CounterSpy Antispyware (SBCSSvc) - Sunbelt Software - C:\Program Files\Sunbelt Software\CounterSpy\SBCSSvc.exe

--

End of file - 5670 bytes

Thanks in advance, I am really out of ideas.

[Gimpguy2000]

First, get rid of these...

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = C:\WINDOWS\system32\spywarewarning.mht

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch

See if that solves your issue. If not...which I suspect....

Next, restart, boot to safe mode with F8 key, and try using whatever security software you have to clean. Only needed apps will be loaded in safe mode which makes it easier to deal with.

Take a look here as well for removal instructions...

http://siri.geekstogo.com/SmitfraudFix.php

Paul

[Gorimi]

Hello Paul, first of all, thanks for giving some of your time to my issue.

I did remove the first 4 entry from the HJT log, and I rebooted in Safe mode and ran Smith Fraud fix. After, I ran XoftspySE AND Spyhunter scans (both full paid versions that I bought exactly to fix this issue). I also ran Ad adware.

Sadly, the popups and fake alert icons are still there.

here is the SF log

SmitFraudFix v2.242

Scan done at 0:40:10.15, Sun 10/28/2007

Run from C:\Documents and Settings\Alex\Desktop\SmitfraudFix

OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT

The filesystem type is NTFS

Fix run in normal mode

[Gorimi]

I ran a PANDA Security scan while waiting for replies, here are the results

Incident Status Location

Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Alex\Cookies\alex@doubleclick[1].txt

Spyware:Cookie/Comclick Not disinfected C:\Documents and Settings\Alex\Cookies\alex@fl01.ct2.comclick[1].txt

Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Alex\Cookies\alex@xiti[1].txt

Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\Documents and Settings\Alex\Desktop\ComboFix.exe[nircmd.exe]

Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\Documents and Settings\Alex\Desktop\ComboFix.exe[nircmd.cfexe]

Potentially unwanted tool:Application/Processor Not disinfected C:\Documents and Settings\Alex\Desktop\SmitfraudFix\Process.exe

Virus:Trj/Rebooter.J Disinfected C:\Documents and Settings\Alex\Desktop\SmitfraudFix\Reboot.exe

Potentially unwanted tool:Application/SuperFast Not disinfected C:\Documents and Settings\Alex\Desktop\SmitfraudFix\restart.exe

Potentially unwanted tool:Application/Processor Not disinfected C:\Documents and Settings\Alex\Desktop\SmitfraudFix.zip[smitfraudFix/Process.exe]

Virus:Trj/Rebooter.J Disinfected C:\Documents and Settings\Alex\Desktop\SmitfraudFix.zip[smitfraudFix/Reboot.exe]

Potentially unwanted tool:Application/SuperFast Not disinfected C:\Documents and Settings\Alex\Desktop\SmitfraudFix.zip[smitfraudFix/restart.exe]

Adware:Adware/VirusAlarma Not disinfected C:\Documents and Settings\Alex\Local Settings\Temporary Internet Files\Content.IE5\94RZ3YO9\wbk1D.tmp

Virus:Generic Malware Not disinfected C:\Documents and Settings\Alex\My Documents\installdrivecleanerstart.cab[uDC6_0001_D22M1709NetInstaller.exe]

Potentially unwanted tool:Application/Processor Not disinfected C:\Documents and Settings\Alex\My Documents\SDFix.exe[sDFix\apps\Process.exe]

Potentially unwanted tool:Application/Processor Not disinfected C:\Documents and Settings\Alex\My Documents\SmitfraudFix\Process.exe

Virus:Trj/Rebooter.J Disinfected C:\Documents and Settings\Alex\My Documents\SmitfraudFix\Reboot.exe

Potentially unwanted tool:Application/SuperFast Not disinfected C:\Documents and Settings\Alex\My Documents\SmitfraudFix\restart.exe

Potentially unwanted tool:Application/Processor Not disinfected C:\Documents and Settings\Alex\My Documents\SmitfraudFix.zip[smitfraudFix/Process.exe]

Virus:Trj/Rebooter.J Disinfected C:\Documents and Settings\Alex\My Documents\SmitfraudFix.zip[smitfraudFix/Reboot.exe]

Potentially unwanted tool:Application/SuperFast Not disinfected C:\Documents and Settings\Alex\My Documents\SmitfraudFix.zip[smitfraudFix/restart.exe]

Virus:Generic Malware Not disinfected C:\Documents and Settings\Alex\My Documents\spynomore.exe[snmIeGuard.dll]

Virus:Generic Malware Not disinfected C:\Documents and Settings\Alex\My Documents\spynomore.exe[sNM.exe]

Virus:Generic Malware Disinfected C:\Documents and Settings\Alex\My Documents\UDC6_0001_D22M1709NetInstaller.exe

Spyware:Cookie/RealMedia Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@247realmedia[1].txt.dat[Documents and Settings/Alex/Cookies/alex@247realmedia[1].txt]

Spyware:Cookie/2o7 Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@2o7[1].txt.dat[Documents and Settings/Alex/Cookies/alex@2o7[1].txt]

Spyware:Cookie/2o7 Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@2o7[2].txt.dat[Documents and Settings/Alex/Cookies/alex@2o7[2].txt]

Spyware:Cookie/YieldManager Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@ad.yieldmanager[1].txt.dat[Documents and Settings/Alex/Cookies/alex@ad.yieldmanager[1].txt]

Spyware:Cookie/YieldManager Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@ad.yieldmanager[2].txt.dat[Documents and Settings/Alex/Cookies/alex@ad.yieldmanager[2].txt]

Spyware:Cookie/PointRoll Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@ads.pointroll[1].txt.dat[Documents and Settings/Alex/Cookies/alex@ads.pointroll[1].txt]

Spyware:Cookie/Adtech Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@adtech[1].txt.dat[Documents and Settings/Alex/Cookies/alex@adtech[1].txt]

Spyware:Cookie/adultfriendfinder Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@adultfriendfinder[1].txt.dat[Documents and Settings/Alex/Cookies/alex@adultfriendfinder[1].txt]

Spyware:Cookie/adultfriendfinder Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@adultfriendfinder[2].txt.dat[Documents and Settings/Alex/Cookies/alex@adultfriendfinder[2].txt]

Spyware:Cookie/Advertising Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@advertising[1].txt.dat[Documents and Settings/Alex/Cookies/alex@advertising[1].txt]

Spyware:Cookie/Advertising Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@advertising[2].txt.dat[Documents and Settings/Alex/Cookies/alex@advertising[2].txt]

Spyware:Cookie/Atlas DMT Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@atdmt[2].txt.dat[Documents and Settings/Alex/Cookies/alex@atdmt[2].txt]

Spyware:Cookie/Atwola Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@atwola[1].txt.dat[Documents and Settings/Alex/Cookies/alex@atwola[1].txt]

Spyware:Cookie/Atwola Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@atwola[2].txt.dat[Documents and Settings/Alex/Cookies/alex@atwola[2].txt]

Spyware:Cookie/Bluestreak Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@bluestreak[1].txt.dat[Documents and Settings/Alex/Cookies/alex@bluestreak[1].txt]

Spyware:Cookie/Bluestreak Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@bluestreak[2].txt.dat[Documents and Settings/Alex/Cookies/alex@bluestreak[2].txt]

Spyware:Cookie/Serving-sys Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@bs.serving-sys[1].txt.dat[Documents and Settings/Alex/Cookies/alex@bs.serving-sys[1].txt]

Spyware:Cookie/Casalemedia Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@casalemedia[1].txt.dat[Documents and Settings/Alex/Cookies/alex@casalemedia[1].txt]

Spyware:Cookie/Casalemedia Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@casalemedia[2].txt.dat[Documents and Settings/Alex/Cookies/alex@casalemedia[2].txt]

Spyware:Cookie/Sextracker Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@counter1.sextracker[1].txt.dat[Documents and Settings/Alex/Cookies/alex@counter1.sextracker[1].txt]

Spyware:Cookie/Sextracker Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@counter1.sextracker[2].txt.dat[Documents and Settings/Alex/Cookies/alex@counter1.sextracker[2].txt]

Spyware:Cookie/Sextracker Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@counter10.sextracker[1].txt.dat[Documents and Settings/Alex/Cookies/alex@counter10.sextracker[1].txt]

Spyware:Cookie/Sextracker Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@counter10.sextracker[2].txt.dat[Documents and Settings/Alex/Cookies/alex@counter10.sextracker[2].txt]

Spyware:Cookie/Sextracker Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@counter12.sextracker[1].txt.dat[Documents and Settings/Alex/Cookies/alex@counter12.sextracker[1].txt]

Spyware:Cookie/Sextracker Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@counter15.sextracker[1].txt.dat[Documents and Settings/Alex/Cookies/alex@counter15.sextracker[1].txt]

Spyware:Cookie/Sextracker Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@counter2.sextracker[1].txt.dat[Documents and Settings/Alex/Cookies/alex@counter2.sextracker[1].txt]

Spyware:Cookie/Sextracker Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@counter3.sextracker[1].txt.dat[Documents and Settings/Alex/Cookies/alex@counter3.sextracker[1].txt]

Spyware:Cookie/Sextracker Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@counter4.sextracker[1].txt.dat[Documents and Settings/Alex/Cookies/alex@counter4.sextracker[1].txt]

Spyware:Cookie/Sextracker Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@counter8.sextracker[1].txt.dat[Documents and Settings/Alex/Cookies/alex@counter8.sextracker[1].txt]

Spyware:Cookie/Sextracker Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@counter8.sextracker[2].txt.dat[Documents and Settings/Alex/Cookies/alex@counter8.sextracker[2].txt]

Spyware:Cookie/Sextracker Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@counter9.sextracker[1].txt.dat[Documents and Settings/Alex/Cookies/alex@counter9.sextracker[1].txt]

Spyware:Cookie/Doubleclick Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@doubleclick[1].txt.dat[Documents and Settings/Alex/Cookies/alex@doubleclick[1].txt]

Spyware:Cookie/FastClick Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@fastclick[1].txt.dat[Documents and Settings/Alex/Cookies/alex@fastclick[1].txt]

Spyware:Cookie/FastClick Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@fastclick[2].txt.dat[Documents and Settings/Alex/Cookies/alex@fastclick[2].txt]

Spyware:Cookie/Mediaplex Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@mediaplex[1].txt.dat[Documents and Settings/Alex/Cookies/alex@mediaplex[1].txt]

Spyware:Cookie/QuestionMarket Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@questionmarket[1].txt.dat[Documents and Settings/Alex/Cookies/alex@questionmarket[1].txt]

Spyware:Cookie/Searchportal Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@searchportal.information[1].txt.dat[Documents and Settings/Alex/Cookies/alex@searchportal.information[1].txt]

Spyware:Cookie/Searchportal Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@searchportal.information[2].txt.dat[Documents and Settings/Alex/Cookies/alex@searchportal.information[2].txt]

Spyware:Cookie/Serving-sys Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@serving-sys[1].txt.dat[Documents and Settings/Alex/Cookies/alex@serving-sys[1].txt]

Spyware:Cookie/Serving-sys Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@serving-sys[2].txt.dat[Documents and Settings/Alex/Cookies/alex@serving-sys[2].txt]

Spyware:Cookie/SexList Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@sexlist[1].txt.dat[Documents and Settings/Alex/Cookies/alex@sexlist[1].txt]

Spyware:Cookie/Sextracker Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@sextracker[1].txt.dat[Documents and Settings/Alex/Cookies/alex@sextracker[1].txt]

Spyware:Cookie/Sextracker Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@sextracker[2].txt.dat[Documents and Settings/Alex/Cookies/alex@sextracker[2].txt]

Spyware:Cookie/Smartadserver Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@smartadserver[2].txt.dat[Documents and Settings/Alex/Cookies/alex@smartadserver[2].txt]

Spyware:Cookie/Statcounter Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@statcounter[1].txt.dat[Documents and Settings/Alex/Cookies/alex@statcounter[1].txt]

Spyware:Cookie/Statcounter Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@statcounter[2].txt.dat[Documents and Settings/Alex/Cookies/alex@statcounter[2].txt]

Spyware:Cookie/WebtrendsLive Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@statse.webtrendslive[1].txt.dat[Documents and Settings/Alex/Cookies/alex@statse.webtrendslive[1].txt]

Spyware:Cookie/WebtrendsLive Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@statse.webtrendslive[2].txt.dat[Documents and Settings/Alex/Cookies/alex@statse.webtrendslive[2].txt]

Spyware:Cookie/Tradedoubler Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@tradedoubler[2].txt.dat[Documents and Settings/Alex/Cookies/alex@tradedoubler[2].txt]

Spyware:Cookie/Tribalfusion Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@tribalfusion[2].txt.dat[Documents and Settings/Alex/Cookies/alex@tribalfusion[2].txt]

Spyware:Cookie/WebPower Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@webpower[1].txt.dat[Documents and Settings/Alex/Cookies/alex@webpower[1].txt]

Spyware:Cookie/Xiti Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@xiti[1].txt.dat[Documents and Settings/Alex/Cookies/alex@xiti[1].txt]

Spyware:Cookie/XXXCounter Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@xxxcounter[1].txt.dat[Documents and Settings/Alex/Cookies/alex@xxxcounter[1].txt]

Spyware:Cookie/Yadro Not disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\alex@yadro[2].txt.dat[Documents and Settings/Alex/Cookies/alex@yadro[2].txt]

Virus:Trj/Clicker.ADZ Disinfected C:\Program Files\Enigma Software Group\SpyHunter\Backup\mssadv.exe.dat[Program Files/Microsoft Security Adviser/mssadv.exe]

Potentially unwanted tool:Application/Processor Not disinfected C:\SDFix\apps\Process.exe

Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\WINDOWS\NirCmd.exe

Potentially unwanted tool:Application/Processor Not disinfected C:\WINDOWS\system32\Process.exe

Adware:Adware/VirusAlarma Not disinfected C:\WINDOWS\system32\spywarewarning.mht[file://E:\killer\0\spywaredetect3UP1\myPaga\homepage\s_detect.htm]

[JeanInMontana]

Hi Gorimi and welcome to Malwarebytes. I see you also have Combofix on your system. Have you ran a scan with this? If so please post the log. What are your symptoms now?