Mobile/PDA About Us Advertise here
User User name Password  
  Not registered yet? Register here.
Lost your password? Click here. 		 
  Home   News   Guides   Downloads   Glossary   Hardware   Profiles   Forums   v4  
 Advertise at AfterDawn.com     Link to us!     Private messages     Compose a private message     List of all updated threads     Threads without replies     Search messages
Tuesday 4.3.2025 / 09:06
Search AfterDawn Forums:        In English   Suomeksi   På svenska
afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > regedit,cmd, virus and spyware programs, and firefox problems. please help
Show topics
 
Forums
Forums
Regedit,cmd, virus and spyware programs, and firefox problems. please help
  Jump to:
 
Posted Message
bbiagllla
Member
_ 		18. April 2009 @ 16:20 _ Link to this message    Send private message to this user   
Hello all,
I am Currently fighting a huge problem on my computer and im losing the battle. MY computer is running really really slow.

1) when i type cmd, regedit, or even command in my run box it makes my task bar dissapear for a second or two and it never opens.

2) None of my antivirus or spyware programs can or will update. i have to do them all manually. i can go to antivirus and spy ware sites without this thing blocking that.

3) Firefox crashes alot randomly. i have had firefox for many years and never once gotten a pop up until now. its not really a pop up per say. i type in say google.com and it will faster than i can see go to google.com and also instantly go to another page i never typed. like ads. i hit the back button in my browser and bam there is google.com. it doesnt do it everytime either its random.

4) My online games keep crashing due to memory errors. not sure if its due to this but they never have until now.

5) I am getting a generic host proces for win 32 services error on startup everytime. Here is the info on that.
C:\DOCUME~1\Owner\LOCALS~1\Temp\WER5767.dir00\svchost.exe.mdmp
C:\DOCUME~1\Owner\LOCALS~1\Temp\WER5767.dir00\appcompat.txt

szAppName : svchost.exe szAppVer : 5.1.2600.5512 szModName : unknown
szModVer : 0.0.0.0 offset : 10001e39

I have tried everything imaginable and nothing can find something. i have tried malwarebytes, SD, ad aware, avg, stinger, counterspy, a-sqyuared, cccleaner, superanitspyware, spybot S & D, registry booster, sys clean, and hijack this. Nothing can be found. Any suggestions, tips, or solutions? id appreciate it alot.


update:
A-squared found alot of stuff as did superantispyware. However after running them in safe mode and quarantining the bads. it still is not fixed. here is my hijack this log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:55:42 AM, on 4/19/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sunbelt Software\CounterSpy\SBAMSvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearshare.com/sidebar.html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customiz...//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sbc.yahoo.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customiz.../search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customiz...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - G:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [WinPatrol] G:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [Launch LCDMon] G:\Program Files\Logitech\G-series Software\LCDMon.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [SBAMTray] C:\Program Files\Sunbelt Software\CounterSpy\SBAMTray.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [CurseClient] G:\Program Files\Curse\CurseClient.exe -silent
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] G:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: 2WireSetup.lnk = C:\Program Files\2Wire\WebWorks.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: SetPointII.lnk = ?
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\WINDOWS\system32\shdocvw.dll (HKCU)
O16 - DPF: Yahoo! Dominoes - http://download.games.yahoo.com/games/clients/y/dot4_x.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5...b?1106352626076
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupd...b?1180917515156
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} - http://www.nick.com/common/groove/gx/GrooveAX27.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.com/download.yahoo.co...utocomplete.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: c:\windows\system32\puzatuwi.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\SYSTEM32\ati2sgag.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: MSSQLServerADHelper - Unknown owner - C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe (file missing)
O23 - Service: CounterSpy Antispyware (SBAMSvc) - Sunbelt Software - C:\Program Files\Sunbelt Software\CounterSpy\SBAMSvc.exe
O23 - Service: STOPzilla Service (szserver) - Unknown owner - (no file)
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

--
End of file - 9050 bytes


HERE IS WHAT A-SQUARED FOUND:

a-squared Free - Version 4.0
Last update: 4/18/2009 2:39:17 PM

Scan settings:

Objects: Memory, Traces, Cookies, C:\, G:\
Scan archives: On
Heuristics: Off
ADS Scan: On

Scan start: 4/18/2009 3:09:54 PM

Value: HKEY_CLASSES_ROOT\CLSID\{183261F8-780B-4506-BE91-434C01DD010A}\InprocServer32 --> ThreadingModel detected: Trace.Registry.Remotely Anywhere Server Edition!A2
Value: HKEY_CLASSES_ROOT\CLSID\{43534152-0000-0010-8000-00AA00389B71}\InprocServer32 --> ThreadingModel detected: Trace.Registry.Remotely Anywhere Server Edition!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{183261F8-780B-4506-BE91-434C01DD010A}\InprocServer32 --> ThreadingModel detected: Trace.Registry.Remotely Anywhere Server Edition!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{43534152-0000-0010-8000-00AA00389B71}\InprocServer32 --> ThreadingModel detected: Trace.Registry.Remotely Anywhere Server Edition!A2
Value: HKEY_USERS\.DEFAULT\Software\Viewpoint\Content Debugger --> Viewpoint Manager detected: Trace.Registry.Viewpoint Media Toolbar!A2
Value: HKEY_USERS\S-1-5-18\Software\Viewpoint\Content Debugger --> Viewpoint Manager detected: Trace.Registry.Viewpoint Media Toolbar!A2
Value: HKEY_USERS\.DEFAULT\Software\Viewpoint\Content Debugger --> Viewpoint Manager Installer detected: Trace.Registry.Viewpoint Media Toolbar!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\Viewpoint\Content Debugger --> Viewpoint Manager Installer detected: Trace.Registry.Viewpoint Media Toolbar!A2
Value: HKEY_USERS\S-1-5-18\Software\Viewpoint\Content Debugger --> Viewpoint Manager Installer detected: Trace.Registry.Viewpoint Media Toolbar!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station23 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station23 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station23 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station23 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station24 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station24 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station24 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station24 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station24 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station24 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station24 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station3 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station3 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station3 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station3 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station3 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station3 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station3 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station4 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station4 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station4 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station4 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station4 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station4 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station4 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station5 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station5 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station5 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station5 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station5 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station5 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station5 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station6 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station6 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station6 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station6 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station6 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station6 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station6 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station7 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station7 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station7 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station7 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station7 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station7 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station7 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station8 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station8 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station8 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station8 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station8 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station8 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station8 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station9 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station9 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station9 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station9 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station9 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station9 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station9 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Warning --> TVNetwork detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Warning --> UserWarningIcon detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Warning --> UserWarningURL detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Warning --> WarningIcon detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Warning --> WarningInterval detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Warning --> WarningURL detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Cam --> CamURL detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Command --> GetCompactDataURL detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Command --> GetDataURL detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Command --> GetDesignURL detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Command --> GetDesignURLASP detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Command --> GetForecastURL detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Command --> GetStationURL detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Command --> GetWarningURL detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\CurrentStation --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\CurrentStation --> CurrentStation detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\CurrentStation --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\CurrentStation --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\CurrentStation --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\CurrentStation --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\CurrentStation --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\CurrentStation --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> AdDormantFreshInterval detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> AdFreshInterval detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> AffiliateClick detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> AffiliateLogo detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> AffiliateLogoSize detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ArrowB detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ArrowG detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ArrowR detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> BackgroundImage detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> BackSize detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> BottomADURL detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> BottomBranding detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> BottomBrandingClick detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> BottomBrandSize detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ConditionB detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ConditionG detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ConditionR detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ConditionShadowB detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ConditionShadowDepth detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ConditionShadowG detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ConditionShadowR detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> DataB detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> DataG detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> DataR detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> DataShadownB detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> DataShadownDepth detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> DataShadownG detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> DataShadownR detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> DesignInterval detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> FillerB detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> FillerG detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> FillerR detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> LA detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> LastPopupID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> LastSoundID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> PMClicks detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ShowTd detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> TdInterval detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> TdURL detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> TimeToDormant detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> TopADURL detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> TopBranding detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> TopBrandingClick detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> TopBrandSize detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> Interval detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> Sunrise detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> Sunset detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> TodayCondition detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> TodayHi detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> TodayLo detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> TodayTitle detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> TomorrowCondition detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> TomorrowHi detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> TomorrowLo detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> TomorrowTitle detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkName0 detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkName1 detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkName2 detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkName3 detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkName4 detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkURL0 detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkURL1 detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkURL2 detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkURL3 detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkURL4 detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CoolURL detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CustomLinkNum detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> FiveDayURL detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> NationalURL detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> RadarURL detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Options --> CheckInstance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Setup --> StationNum detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Setup --> UNIT detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Setup --> x detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Setup --> y detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Setup --> ZIPCode detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station0 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station0 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station0 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station0 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station0 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station0 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station0 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station1 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station1 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station1 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station1 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station1 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station1 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station1 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station10 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station10 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station10 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station10 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station10 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station10 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station10 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station11 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station11 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station11 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station11 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station11 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station11 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station11 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station12 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station12 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station12 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station12 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station12 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station12 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station12 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station13 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station13 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station13 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station13 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station13 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station13 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station13 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station14 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station14 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station14 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station14 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station14 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station14 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station14 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station15 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station15 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station15 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station15 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station15 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station15 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station15 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station16 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station16 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station16 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station16 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station16 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station16 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station16 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station17 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station17 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station17 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station17 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station17 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station17 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station17 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station18 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station18 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station18 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station18 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station18 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station18 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station18 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station19 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station19 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station19 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station19 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station19 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station19 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station19 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station2 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station2 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station2 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station2 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station2 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station2 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station2 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station20 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station20 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station20 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station20 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station20 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station20 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station20 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station21 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station21 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station21 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station21 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station21 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station21 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station21 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station22 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station22 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station22 --> NationalLink detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station22 --> StationCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station22 --> StationID detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station22 --> StationName detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station22 --> ZIPCityState detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station23 --> ConnectionType detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station23 --> Distance detected: Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station23 --> NationalLink detected: Trace.Registry.WeatherBug!A2
c:\documents and settings\all users\start menu\programs\bittorrent detected: Trace.Directory.Bittorrent 5.0!A2
c:\documents and settings\all users\start menu\programs\bittorrent\bittorrent.lnk detected: Trace.File.Bittorrent 5.0!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Bittorrent --> Order detected: Trace.Registry.Bittorrent 5.0!A2
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\teqq08ca.default\cookies.sqlite:1240081240400125 detected: Trace.TrackingCookie.humanclick!A2
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\teqq08ca.default\cookies.sqlite:1240081240400127 detected: Trace.TrackingCookie.humanclick!A2
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\teqq08ca.default\cookies.sqlite:1240081240509500 detected: Trace.TrackingCookie.humanclick!A2
C:\Documents and Settings\Owner\My Documents\Downloads\Slipknot - All Hope Is Gone (2008)\14. Vermilion Pt.2(Bloodstone Mix) (Bonus track ).mp3 detected: Trojan.Wimad!IK
C:\hp\bin\AUTOPLAY.EXE detected: Virus.Win32.Trojan!IK
C:\Program Files\2Wire\sst\VNC\MotVNC.exe detected: Riskware.RemoteAdmin.Win32.WinVNC-based!IK
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP172\A0027884.exe detected: Riskware.RemoteAdmin.Win32.WinVNC-based!IK
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP200\A0036462.exe detected: Riskware.AdWare.Win32.Accoona.a!IK
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP208\A0037204.DLL detected: AdWare.Win32.MyQuickSearchSearchAssistant!IK
C:\WINDOWS\xusx.qgr detected: Trojan-PWS.Delf!IK
C:\WINDOWS\xusx.qgrx detected: Trojan-PWS.Delf!IK
C:\WINDOWS\xusx.qgrxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx detected: Trojan-PWS.Delf!IK
G:\Program Files\BearShare\Installer\BSInstall5.2.5.1.exe detected: Riskware.AdWare.Win32.180Solutions.ao!IK

Scanned

Files: 218530
Traces: 672995
Cookies: 262
Processes: 66

Found

Files: 10
Traces: 285
Cookies: 3
Processes: 0
Registry keys: 0

Scan end: 4/18/2009 11:16:57 PM
Scan time: 8:07:03

G:\Program Files\BearShare\Installer\BSInstall5.2.5.1.exe Quarantined Riskware.AdWare.Win32.180Solutions.ao!IK
C:\WINDOWS\xusx.qgr Quarantined Trojan-PWS.Delf!IK
C:\WINDOWS\xusx.qgrx Quarantined Trojan-PWS.Delf!IK
C:\WINDOWS\xusx.qgrxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx Quarantined Trojan-PWS.Delf!IK
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP208\A0037204.DLL Quarantined AdWare.Win32.MyQuickSearchSearchAssistant!IK
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP200\A0036462.exe Quarantined Riskware.AdWare.Win32.Accoona.a!IK
C:\Program Files\2Wire\sst\VNC\MotVNC.exe Quarantined Riskware.RemoteAdmin.Win32.WinVNC-based!IK
C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP172\A0027884.exe Quarantined Riskware.RemoteAdmin.Win32.WinVNC-based!IK
C:\hp\bin\AUTOPLAY.EXE Quarantined Virus.Win32.Trojan!IK
C:\Documents and Settings\Owner\My Documents\Downloads\Slipknot - All Hope Is Gone (2008)\14. Vermilion Pt.2(Bloodstone Mix) (Bonus track ).mp3 Quarantined Trojan.Wimad!IK
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\teqq08ca.default\cookies.sqlite:1240081240400125 Quarantined Trace.TrackingCookie.humanclick!A2
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\teqq08ca.default\cookies.sqlite:1240081240400127 Quarantined Trace.TrackingCookie.humanclick!A2
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\teqq08ca.default\cookies.sqlite:1240081240509500 Quarantined Trace.TrackingCookie.humanclick!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Bittorrent --> Order Quarantined Trace.Registry.Bittorrent 5.0!A2
c:\documents and settings\all users\start menu\programs\bittorrent\bittorrent.lnk Quarantined Trace.File.Bittorrent 5.0!A2
c:\documents and settings\all users\start menu\programs\bittorrent Quarantined Trace.Directory.Bittorrent 5.0!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station23 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station23 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station23 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station23 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station24 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station24 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station24 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station24 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station24 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station24 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station24 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station3 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station3 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station3 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station3 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station3 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station3 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station3 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station4 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station4 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station4 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station4 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station4 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station4 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station4 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station5 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station5 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station5 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station5 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station5 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station5 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station5 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station6 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station6 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station6 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station6 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station6 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station6 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station6 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station7 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station7 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station7 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station7 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station7 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station7 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station7 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station8 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station8 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station8 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station8 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station8 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station8 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station8 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station9 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station9 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station9 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station9 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station9 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station9 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station9 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Warning --> TVNetwork Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Warning --> UserWarningIcon Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Warning --> UserWarningURL Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Warning --> WarningIcon Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Warning --> WarningInterval Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Warning --> WarningURL Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Cam --> CamURL Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Command --> GetCompactDataURL Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Command --> GetDataURL Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Command --> GetDesignURL Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Command --> GetDesignURLASP Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Command --> GetForecastURL Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Command --> GetStationURL Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Command --> GetWarningURL Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\CurrentStation --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\CurrentStation --> CurrentStation Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\CurrentStation --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\CurrentStation --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\CurrentStation --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\CurrentStation --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\CurrentStation --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\CurrentStation --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> AdDormantFreshInterval Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> AdFreshInterval Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> AffiliateClick Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> AffiliateLogo Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> AffiliateLogoSize Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ArrowB Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ArrowG Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ArrowR Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> BackgroundImage Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> BackSize Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> BottomADURL Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> BottomBranding Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> BottomBrandingClick Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> BottomBrandSize Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ConditionB Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ConditionG Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ConditionR Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ConditionShadowB Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ConditionShadowDepth Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ConditionShadowG Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ConditionShadowR Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> DataB Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> DataG Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> DataR Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> DataShadownB Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> DataShadownDepth Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> DataShadownG Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> DataShadownR Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> DesignInterval Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> FillerB Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> FillerG Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> FillerR Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> LA Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> LastPopupID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> LastSoundID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> PMClicks Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> ShowTd Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> TdInterval Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> TdURL Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> TimeToDormant Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> TopADURL Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> TopBranding Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> TopBrandingClick Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Design --> TopBrandSize Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> Interval Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> Sunrise Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> Sunset Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> TodayCondition Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> TodayHi Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> TodayLo Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> TodayTitle Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> TomorrowCondition Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> TomorrowHi Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> TomorrowLo Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Forecast --> TomorrowTitle Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkName0 Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkName1 Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkName2 Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkName3 Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkName4 Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkURL0 Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkURL1 Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkURL2 Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkURL3 Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CLinkURL4 Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CoolURL Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> CustomLinkNum Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> FiveDayURL Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> NationalURL Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Links --> RadarURL Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Options --> CheckInstance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Setup --> StationNum Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Setup --> UNIT Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Setup --> x Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Setup --> y Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Setup --> ZIPCode Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station0 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station0 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station0 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station0 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station0 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station0 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station0 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station1 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station1 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station1 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station1 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station1 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station1 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station1 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station10 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station10 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station10 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station10 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station10 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station10 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station10 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station11 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station11 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station11 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station11 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station11 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station11 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station11 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station12 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station12 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station12 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station12 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station12 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station12 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station12 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station13 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station13 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station13 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station13 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station13 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station13 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station13 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station14 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station14 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station14 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station14 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station14 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station14 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station14 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station15 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station15 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station15 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station15 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station15 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station15 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station15 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station16 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station16 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station16 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station16 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station16 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station16 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station16 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station17 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station17 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station17 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station17 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station17 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station17 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station17 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station18 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station18 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station18 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station18 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station18 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station18 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station18 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station19 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station19 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station19 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station19 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station19 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station19 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station19 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station2 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station2 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station2 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station2 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station2 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station2 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station2 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station20 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station20 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station20 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station20 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station20 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station20 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station20 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station21 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station21 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station21 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station21 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station21 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station21 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station21 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station22 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station22 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station22 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station22 --> StationCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station22 --> StationID Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station22 --> StationName Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station22 --> ZIPCityState Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station23 --> ConnectionType Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station23 --> Distance Quarantined Trace.Registry.WeatherBug!A2
Value: HKEY_USERS\S-1-5-21-1981001023-460486182-3293823761-1003\Software\AWS\Weather\Station23 --> NationalLink Quarantined Trace.Registry.WeatherBug!A2

Quarantined

Files: 10
Traces: 285
Cookies: 3
[ + quote]

This message has been edited since posting. Last time this message was edited on 19. April 2009 @ 13:23
ddp
Moderator
_ 		18. April 2009 @ 22:23 _ Link to this message    Send private message to this user   
moved to correct forum
[ + quote]
bbiagllla
Member
_ 		19. April 2009 @ 13:48 _ Link to this message    Send private message to this user   
good news is i don't have to worry about the viruses for now. Bad news is i try to system restore and when it restarted i get a master record boot error.

*** i fixed the boot issue. had to restore the mbr's via xp cd.

here is the log from my malwarebytes. No other attempt has found anything. tried 6 times.

Malwarebytes' Anti-Malware 1.36
Database version: 1945
Windows 5.1.2600 Service Pack 3

4/14/2009 8:07:04 PM
mbam-log-2009-04-14 (20-07-04).txt

Scan type: Full Scan (C:\|G:\|)
Objects scanned: 174603
Time elapsed: 2 hour(s), 58 minute(s), 24 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 20
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx.1 (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{04a38f6b-006f-4247-ba4c-02a139d5531c} (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2763e333-b168-41a0-a112-d35f96f410c0} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{2b96d5cc-c5b5-49a5-a69d-cc0a30f9028c} (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{3c2d2a1e-031f-4397-9614-87c932a848e0} (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{621feacd-8857-43a6-ae26-451d670d5370} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{2b96d5cc-c5b5-49a5-a69d-cc0a30f9028c} (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2eff3cf7-99c1-4c29-bc2b-68e057e22340} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.shellviewcontrol (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.shellviewcontrol.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
[ + quote]

This message has been edited since posting. Last time this message was edited on 19. April 2009 @ 15:11
Advertisement
_ 		__
 
_
bbiagllla
Member
_ 		25. April 2009 @ 16:11 _ Link to this message    Send private message to this user   
hmm thanks for the help. i got it fixed.
[ + quote]
afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > regedit,cmd, virus and spyware programs, and firefox problems. please help
 

Digital video: AfterDawn.com | AfterDawn Forums
Music: MP3Lizard.com
Gaming: Blasteroids.com | Blasteroids Forums | Compare game prices
Software: Software downloads
Blogs: User profile pages
RSS feeds: AfterDawn.com News | Software updates | AfterDawn Forums
International: AfterDawn in Finnish | AfterDawn in Swedish | AfterDawn in Norwegian | download.fi
Navigate: Search | Site map
About us: About AfterDawn Ltd | Advertise on our sites | Rules, Restrictions, Legal disclaimer & Privacy policy
Contact us: Send feedback | Contact our media sales team
 
  © 1999-2025 by AfterDawn Ltd.

  IDG TechNetwork