Strange computer problems- possibly spyware.

Advertise at AfterDawn.com

Link to us!

Private messages

Compose a private message

List of all updated threads

Threads without replies

Search messages

Sunday 24.11.2024 / 11:36

Search AfterDawn Forums:

afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > strange computer problems- possibly spyware.

Browse by topic

Forums

Start a new thread

Strange computer problems- possibly spyware.

Jump to:

Posted

Message

andy2000

Suspended due to non-functional email address

27. April 2006 @ 17:06

Link to this message

Hi. Ive noticed recently that my computers been doing some weird things. For example-
Whenever I dial up the internet the computer freezes about 10 seconds after connection had been made. I reeboot and the internet works fine. This had happened every time, the net works the second time never the first.

-The computer screen often turns itself off at certain times when I'm typing or playing. The speakers stil work, the tower is still on but the screen is off and wont come back on until I restart the computer by turing it off at the wall, which can't be a good thing to do 3 times a day.

-The mouse I'm using now isnt too good but when I plug the good one in, the computer automatically looses power but as soon as I disconnect the mouse the computer comes back on.

Most of these things I think would be spyware or viruses. I've run numerous checks with many programs and they all say Im clean. Is there anything I can do to stop this?

[ + quote]

Speak while your angry and you'll make the best speech you'll ever regret...

Forum Rules - http://forums.afterdawn.com/thread_view.cfm/2487
For all your antivirus needs- http://www.download.com

andy2000

Suspended due to non-functional email address

27. April 2006 @ 17:26

Link to this message

Logfile of HijackThis v1.99.1
Scan saved at 11:17:18 AM, on 4/28/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\cisvc.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\TOSHIBA\gigabeat room 3.0\TosGbWatcher.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\cidaemon.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\HJT\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.optusnet.com.au
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.searchforit.com/searchbar
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchforit.com/searchbar
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by OptusNet
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SafeGuard Protect PCShield - {564FFB73-9EEF-4969-92FA-5FC4A92E2C2A} - C:\WINDOWS\System32\sfg.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [PCShield] regsvr32 /s "C:\WINDOWS\System32\sfg.dll"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [xdbrmwb] c:\windows\system32\lbbzaw.exe
O4 - HKLM\..\Run: [YMDCApp] YMDCApp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [TosGbWatcher] "C:\Program Files\TOSHIBA\gigabeat room 3.0\TosGbWatcher.exe"
O4 - HKLM\..\Run: [sunasDTServ] C:\Program Files\Sunbelt Software\CounterSpy Client\sunasDTServ.exe
O4 - HKLM\..\Run: [sunasServ] C:\Program Files\Sunbelt Software\CounterSpy Client\sunasServ.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [PCShield] regsvr32 /s "C:\WINDOWS\System32\sfg.dll"
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [SYSfit] C:\WINDOWS\SYSfit.exe
O4 - HKCU\..\Run: [MallTycoonSetup.exe] C:\DOCUME~1\User\Desktop\MALLTY~1.EXE /r
O4 - HKCU\..\Run: [Spyware-Cop] "C:\PROGRA~1\SPYWAR~1\Spyware-Cop.exe" /s
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxmk294YYAU
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.optusnet.com.au
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCent...
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/cl...
O16 - DPF: {8C875948-9C60-4381-9248-0DF180542D53} - http://installs.hotbar.com/installs/hbtools/programs/hbtools.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{FD1A1914-4464-4676-A665-B5B0F63FAB3A}: NameServer = 203.2.75.132 198.142.0.51
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: MCPClient - C:\PROGRA~1\COMMON~1\Stardock\mcpstub.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

[ + quote]

-kemisti-

AfterDawn Addict

27. April 2006 @ 23:33

Link to this message

Hi andy2000

You really have some bad guys on your computer

Uninstall via add/remove programs (control panel):

MyWebSearch
Spyware-Cop or SpywareKilla

Open HjT, click do a system scan only, checkmark these and press fix checked:

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.searchforit.com/searchbar
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchforit.com/searchbar
O2 - BHO: SafeGuard Protect PCShield - {564FFB73-9EEF-4969-92FA-5FC4A92E2C2A} - C:\WINDOWS\System32\sfg.dll
O4 - HKLM\..\Run: [PCShield] regsvr32 /s "C:\WINDOWS\System32\sfg.dll"
O4 - HKLM\..\Run: [xdbrmwb] c:\windows\system32\lbbzaw.exe
O4 - HKCU\..\Run: [PCShield] regsvr32 /s "C:\WINDOWS\System32\sfg.dll"
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [SYSfit] C:\WINDOWS\SYSfit.exe
O4 - HKCU\..\Run: [Spyware-Cop] "C:\PROGRA~1\SPYWAR~1\Spyware-Cop.exe" /s
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxmk294YYAU
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCent...
O16 - DPF: {8C875948-9C60-4381-9248-0DF180542D53} - http://installs.hotbar.com/installs/hbtools/programs/hbtools.cab

Please download ewido anti malware it is a free version of the program -> http://www.ewido.net/en/download/

1. Install ewido security suite
2. When installing, under "Additional Options" uncheck..
* Install background guard
* Install scan via context menu
3. Launch ewido, there should be an icon on your desktop, double-click it.
4. The program will now open to the main screen.
5. When you run ewido for the first time, you may get a warning "Database could not be found!". Click OK. We will fix this in a moment.
6. You will need to update ewido to the latest definition files.
* On the left hand side of the main screen click update.
* Then click on Start Update.
7. The update will start and a progress bar will show the updates being installed.
(the status bar at the bottom will display ("Update successful")

If you are having problems with the updater, you can use this link to manually update ewido.
ewido manual updates -> http://www.ewido.net/en/download/updates/

Once the updates are installed do the following:

Reboot your computer in SafeMode by doing the following:

1. Restart your computer
2. After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3. Instead of Windows loading as normal, a menu should appear
4. Select the first option, to run Windows in Safe Mode.

Delete if found:

C:\WINDOWS\System32\sfg.dll
c:\windows\system32\lbbzaw.exe
C:\PROGRA~1\MYWEBS~1
C:\WINDOWS\SYSfit.exe
C:\PROGRA~1\SPYWAR~1
C:\WINDOWS\web\related.htm

Then launch ewido:

* Click on scanner
* Click on Complete System Scan and the scan will begin.
* You will be prompted to clean the first infection.
* Select "Perform action on all infections", then proceed.
* Once the scan has completed, there will be a button located on the bottom of the screen named Save report
* Click Save report.
* Save the report .txt file to your desktop or a location where you can find it easily.

Close ewido security suite.

Reboot back to normal mode

Send a fresh HjT log and ewido report.

[ + quote]

andy2000

Suspended due to non-functional email address

28. April 2006 @ 00:53

Link to this message

Thanks so much. Will do then get back to you with the updated reports, sorry might take a while, got a lot of stuff going on.
Thanks heaps again, didnt know there were that many bad things on my computer.

Andrew

[ + quote]

andy2000

Suspended due to non-functional email address

29. April 2006 @ 02:04

Link to this message

Hey again. Ive done the things you said to but I think I may have missed something on the HjT list. Just tell me if I have. Ive also got the Ewido report.

Logfile of HijackThis v1.99.1
Scan saved at 8:01:03 PM, on 4/29/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\cisvc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\TOSHIBA\gigabeat room 3.0\TosGbWatcher.exe
C:\Program Files\Sunbelt Software\CounterSpy Client\sunasDTServ.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Sunbelt Software\CounterSpy Client\CounterSpy.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\HJT\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.optusnet.com.au
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.searchforit.com/searchbar
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by OptusNet
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SafeGuard Protect PCShield - {564FFB73-9EEF-4969-92FA-5FC4A92E2C2A} - C:\WINDOWS\System32\sfg.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [TosGbWatcher] "C:\Program Files\TOSHIBA\gigabeat room 3.0\TosGbWatcher.exe"
O4 - HKLM\..\Run: [sunasDTServ] C:\Program Files\Sunbelt Software\CounterSpy Client\sunasDTServ.exe
O4 - HKLM\..\Run: [sunasServ] C:\Program Files\Sunbelt Software\CounterSpy Client\sunasServ.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.optusnet.com.au
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/cl...
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{FD1A1914-4464-4676-A665-B5B0F63FAB3A}: NameServer = 203.2.75.132 198.142.0.51
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: MCPClient - C:\PROGRA~1\COMMON~1\Stardock\mcpstub.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 7:55:38 PM, 4/29/2006
+ Report-Checksum: 6B45AF4D

+ Scan result:

HKU\S-1-5-21-583907252-1644491937-682003330-1003\Software\Softomate -> Adware.CoolWebSearch : Cleaned with backup
:mozilla.18:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.19:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.20:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.29:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.30:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.33:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.34:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.35:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.36:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.37:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.38:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.39:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.40:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.41:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.42:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.43:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.44:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.45:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.46:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.47:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.48:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.49:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.50:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.51:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.52:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.53:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.67:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.68:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.69:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.70:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.82:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
:mozilla.84:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.85:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.86:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.87:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.88:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.89:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.90:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.91:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.100:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.104:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.105:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.106:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.107:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.182:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.183:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.188:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.189:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.191:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.192:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.194:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Revenue : Cleaned with backup
:mozilla.199:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.200:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.209:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.212:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.213:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.245:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.251:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.252:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.253:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.254:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.255:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.260:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.261:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.262:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.267:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Realtracker : Cleaned with backup
:mozilla.268:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Realtracker : Cleaned with backup
:mozilla.271:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.274:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.283:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.284:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.286:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.291:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.292:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.295:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Yadro : Cleaned with backup
:mozilla.296:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Targetnet : Cleaned with backup
:mozilla.297:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.6:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.7:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.8:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.9:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.18:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.19:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.29:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.42:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.43:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.44:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.45:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.49:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.50:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.51:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.52:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.53:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.57:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup
:mozilla.58:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup
:mozilla.59:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup
:mozilla.60:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup
:mozilla.61:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup
:mozilla.62:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup
:mozilla.63:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup
:mozilla.64:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup
:mozilla.65:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup
:mozilla.66:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup
:mozilla.74:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
:mozilla.75:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.76:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.80:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.83:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.84:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.85:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.86:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Masterstats : Cleaned with backup
:mozilla.87:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.88:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.89:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.90:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.91:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.92:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
C:\Documents and Settings\User\Cookies\user@2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\User\Cookies\user@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\User\Cookies\user@atdmt[1].txt -> TrackingCookie.Atdmt : Cleaned with backup
C:\Documents and Settings\User\Cookies\user@casalemedia[1].txt -> TrackingCookie.Casalemedia : Cleaned with backup
C:\Documents and Settings\User\Cookies\user@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup
C:\Documents and Settings\User\Cookies\user@e-2dj6wfl4woajklo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\User\Cookies\user@e-2dj6wjliwlazecp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\User\Cookies\user@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned with backup
C:\Documents and Settings\User\Cookies\user@maxis.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\User\Cookies\user@media.fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned with backup
C:\Documents and Settings\User\Cookies\user@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\User\Cookies\user@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned with backup
C:\Documents and Settings\User\Cookies\user@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned with backup
C:\Documents and Settings\User\Cookies\user@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned with backup
C:\Documents and Settings\User\Cookies\user@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned with backup
C:\Documents and Settings\User\Desktop\Andrew's Folder\Other\Travis\DOLLZ!\Setup.exe -> Adware.180Solutions : Cleaned with backup
C:\Documents and Settings\User\Local Settings\Temp\Cookies\user@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned with backup
C:\Documents and Settings\User\Local Settings\Temp\Cookies\user@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned with backup
C:\WINDOWS\system\YMDCApp.exe -> Trojan.Agent.ei : Cleaned with backup

::Report End

[ + quote]

-kemisti-

AfterDawn Addict

29. April 2006 @ 03:38

Link to this message

One leftover:

Fix this with HjT:

O2 - BHO: SafeGuard Protect PCShield - {564FFB73-9EEF-4969-92FA-5FC4A92E2C2A} - C:\WINDOWS\System32\sfg.dll

Delete:

C:\WINDOWS\System32\sfg.dll

Reboot and send a fresh HjT log

I recommend you to use spywareblaster in order to prevent bad cookies coming -> http://www.javacoolsoftware.com/spywareblaster.html

Also, antivirus would be nice to have :)
AVG, avast and antivir are free antiviruses.

[ + quote]

andy2000

Suspended due to non-functional email address

29. April 2006 @ 22:25

Link to this message

Haha. Thanks heaps, most problems have stopped but the computer does still turn itself off without warning from time to time, might be time for a new moniter ;)

[ + quote]

-kemisti-

AfterDawn Addict

30. April 2006 @ 00:58

Link to this message

Nice to hear. Well, I can't help for that issue :/ New monitor or checking monitor's shutdown options might be a good idea :)

[ + quote]

Start a new thread

afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > strange computer problems- possibly spyware.


		User name	Password

		Not registered yet? Register here. Lost your password? Click here.