Problems after removing TopText

[Weezy45356]

My son-in-law was given the task of cleaning up his family's computer. One of his biggest problems was TopText. He found a post here in the forums with exactly his same problem and was advised to download and run Ewido. Since doing this however, there is now a message on startup ""the feature you are trying to use is on a CD-ROM or other removable disk that is not available. Insert the 'Scan' disk and click ok"

What Scan disk is it talking about. This popup was not here before he ran Ewido. If he clicks cancel he gets an error message that says: "Error 1706. No valid source could be found for product Scan. The Windows Installer cannot continue." Click ok, and the cycle repeats itself with the popup saying "Please wait while Windows configures Scan."

Not knowing where this came from, he uninstalled Ewido and ran Adaware, Spybot and RegCleaner. He still has the problem with the error messages (but the computer runs much faster). Can you help?

[tashi]

Hello.

and was advised to download and run Ewido. Does your son-in-law have a topic here, or did he follow advice particularly given to another member.

Either way, if possible please post a hjt log here so someone can take a look as soon as available.

Before you post a log, and who will advise you. (http://forums.spybot.info/showthread.php?t=288)

Regards, :)

[Weezy45356]

My son-in-law does not have a topic here, but he did follow the advice given in another post describing exactly the same problem he had. Actions in the last paragraph were my suggestion to him.

He doesn't have HiJack, but this is the Ewido log:

---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 5:10:45 PM, 3/18/2006
+ Report-Checksum: DCFB0696

+ Scan result:

C:\Downloads\FamilyFeudSetup-dm[1].exe -> Adware.Trymedia : Ignored
HKLM\SOFTWARE\Altnet -> Adware.Altnet : Error during cleaning
HKLM\SOFTWARE\Altnet\Dashboard -> Adware.Altnet : Error during cleaning
HKLM\SOFTWARE\Altnet\Dashboard\Settings -> Adware.Altnet : Error during cleaning
HKLM\SOFTWARE\Classes\CLSID\{00000001-C003-4A2F-9142-7CB1D78DE6C1} -> Adware.InternetOptimizer : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{01EB5130-FC0C-4d75-B9CE-4801B1B854F5} -> Adware.Begin2Search : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{392BAF48-A26A-45B5-9263-97128E429268} -> Adware.AdBlaster : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\ins -> Adware.WebRebates : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00000001-C003-4A2F-9142-7CB1D78DE6C1} -> Adware.InternetOptimizer : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01EB5130-FC0C-4d75-B9CE-4801B1B854F5} -> Adware.Begin2Search : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{279A1B41-6CAC-4ABF-B39C-72C8E489F685} -> Adware.AdBlaster : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FBD2EBD0-E6DF-456E-B300-A4D10A90C683} -> Trojan.VB.aft : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\aurora -> Adware.BetterInternet : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\INSTAFINK -> Adware.InstaFinder : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\INSTAFINK\Reports -> Adware.InstaFinder : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\INSTAFINK\Reports\38543 -> Adware.InstaFinder : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\INSTAFINK\Reports\38544 -> Adware.InstaFinder : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\INSTAFINK\Reports\38545 -> Adware.InstaFinder : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\INSTAFINK\Reports\38546 -> Adware.InstaFinder : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\INSTAFINK\Reports\38547 -> Adware.InstaFinder : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\INSTAFINK\Reports\38548 -> Adware.InstaFinder : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\INSTAFINK\Reports\38549 -> Adware.InstaFinder : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\INSTAFINK\Reports\38550 -> Adware.InstaFinder : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\INSTAFINK\Reports\38578 -> Adware.InstaFinder : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\INSTAFINK\Reports\38579 -> Adware.InstaFinder : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\INSTAFINK\Reports\38580 -> Adware.InstaFinder : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\INSTAFINK\Reports\38581 -> Adware.InstaFinder : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\INSTAFINK\Stat -> Adware.InstaFinder : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_0 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_0\Level_0 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_0\Level_0\Seqn_1053 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_0\Level_0\Seqn_1068 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_0\Level_0\Seqn_1074 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_1 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_1\Level_0 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_1\Level_0\Seqn_4492 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_1\Level_0\Seqn_4543 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_2 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_2\Level_0 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_2\Level_0\Seqn_1053 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_2\Level_0\Seqn_1068 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_2\Level_0\Seqn_1074 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_3 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_3\Level_0 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_3\Level_0\Seqn_1053 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_3\Level_0\Seqn_1068 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_3\Level_0\Seqn_1074 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_4 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_4\Level_0 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_4\Level_0\Seqn_4483 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Loct_4\Level_0\Seqn_4534 -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Services -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Services\Queue -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Kazaa\Promotions\Cydoor\Adwr_329\Services\Status -> Adware.Cydoor : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000001-C003-4A2F-9142-7CB1D78DE6C1} -> Adware.InternetOptimizer : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00F1D395-4744-40F0-A611-980F61AE2C59} -> Adware.DrSearch : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01EB5130-FC0C-4D75-B9CE-4801B1B854F5} -> Adware.Begin2Search : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1ADBCCE8-CF84-441E-9B38-AFC7A19C06A4} -> Adware.ActivShopper : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{279A1B41-6CAC-4ABF-B39C-72C8E489F685} -> Adware.AdBlaster : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{39C78B50-7E98-4AA0-B007-D83114EA6E0F} -> Adware.Generic : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3D782BB3-F2A5-11D3-BF4C-000000000000} -> Adware.ActivShopper : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E7BD74F-2B8D-469E-8DBC-A42EB79CB428} -> Adware.Generic : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{55BE9F0D-6CAF-4C3E-B125-5A13A8C9D0EC} -> Adware.Generic : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8B6DA27E-7F64-4694-8F8F-DC87AB8C6B22} -> Adware.LinkMaker : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95C60327-8E17-44D6-98EB-7EB70CC606DD} -> Adware.SafeSurfing : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9ADE0443-2AB2-4B23-A3F8-AC520773DE12} -> Adware.Begin2Search : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FBD2EBD0-E6DF-456E-B300-A4D10A90C683} -> Trojan.VB.aft : Cleaned with backup
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\sac -> Adware.180Solutions : Cleaned with backup
[1628] C:\WINDOWS\system32\rvmeoex.exe -> Trojan.Agent.ay : Cleaned with backup
[1728] C:\WINDOWS\system32\sms_msn.exe -> Adware.AdBlaster : Cleaned with backup
[1860] C:\WINDOWS\system32\rågedit.exe -> Adware.PurityScan : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@abetterinternet[2].txt -> TrackingCookie.Abetterinternet : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@abetterinternet[3].txt -> TrackingCookie.Abetterinternet : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@adopt.specificclick[2].txt -> TrackingCookie.Specificclick : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@ads.realcastmedia[2].txt -> TrackingCookie.Realcastmedia : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@advertising[2].txt -> TrackingCookie.Advertising : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@affiliates.x10[1].txt -> TrackingCookie.X10 : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@bestoffersnetworks[2].txt -> TrackingCookie.Bestoffersnetworks : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@c.enhance[2].txt -> TrackingCookie.Enhance : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@click2begin[1].txt -> TrackingCookie.Click2begin : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@cliks[2].txt -> TrackingCookie.Cliks : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@clubmom.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@e-2dj6wfliojajcep.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@h.starware[1].txt -> TrackingCookie.Starware : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@hypertracker[2].txt -> TrackingCookie.Hypertracker : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@ivwbox[1].txt -> TrackingCookie.Ivwbox : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@kmpads[2].txt -> TrackingCookie.Kmpads : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@need2find[2].txt -> TrackingCookie.Need2find : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@rotator.adjuggler[2].txt -> TrackingCookie.Adjuggler : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@sales.liveperson[1].txt -> TrackingCookie.Liveperson : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@server3.web-stat[2].txt -> TrackingCookie.Web-stat : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@shopathomeselect[1].txt -> TrackingCookie.Shopathomeselect : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@starware[2].txt -> TrackingCookie.Starware : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@ugl.adtrak[2].txt -> TrackingCookie.Adtrak : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@webstat[1].txt -> TrackingCookie.Web-stat : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@www.burstbeacon[1].txt -> TrackingCookie.Burstbeacon : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@www.epilot[1].txt -> TrackingCookie.Epilot : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@www.starware[1].txt -> TrackingCookie.Starware : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@www4.click2begin[1].txt -> TrackingCookie.Click2begin : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@www6.click2begin[1].txt -> TrackingCookie.Click2begin : Cleaned with backup
C:\Documents and Settings\Meredith\Cookies\meredith@yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Meredith\Local Settings\Temp\180sainstallernu.exe/clientax.dll -> Adware.180Solutions : Cleaned with backup
C:\Documents and Settings\Meredith\Local Settings\Temp\180sainstallernu.exe/clientax.dll -> Adware.180Solutions : Cleaned with backup
C:\Documents and Settings\Meredith\Local Settings\Temp\180sainstallernusac.exe/clientax.dll -> Adware.180Solutions : Cleaned with backup
C:\Documents and Settings\Meredith\Local Settings\Temp\180sainstallernusac.exe/clientax.dll -> Adware.180Solutions : Cleaned with backup
C:\Documents and Settings\Meredith\Local Settings\Temp\adwsetup_upd.exe -> Dropper.Agent.abb : Cleaned with backup
C:\Documents and Settings\Meredith\Local Settings\Temp\asmfiles.cab/asm.exe -> Adware.Altnet : Cleaned with backup
C:\Documents and Settings\Meredith\Local Settings\Temp\asmfiles.cab/asmps.dll -> Adware.Altnet : Cleaned with backup
C:\Documents and Settings\Meredith\Local Settings\Temp\Cookies\meredith@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Meredith\Local Settings\Temp\Del1A.tmp -> Adware.180Solutions : Cleaned with backup
C:\Documents and Settings\Meredith\Local Settings\Temp\Del22.tmp -> Adware.180Solutions : Cleaned with backup
C:\Documents and Settings\Meredith\Local Settings\Temp\Del30B.tmp -> Downloader.Small.asf : Cleaned with backup
C:\Documents and Settings\Meredith\Local Settings\Temp\DelE.tmp -> Downloader.Small.asf : Cleaned with backup
C:\Documents and Settings\Meredith\Local Settings\Temp\res30C.tmp -> Adware.180Solutions : Cleaned with backup
C:\Documents and Settings\Meredith\Local Settings\Temp\__unin__.exe -> Adware.Altnet : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@ad.yieldmanager[4].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@adopt.specificclick[2].txt -> TrackingCookie.Specificclick : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@ads.realcastmedia[1].txt -> TrackingCookie.Realcastmedia : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@ads1.revenue[1].txt -> TrackingCookie.Revenue : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@anat.tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@burstnet[2].txt -> TrackingCookie.Burstnet : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@c.enhance[2].txt -> TrackingCookie.Enhance : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@c.goclick[1].txt -> TrackingCookie.Goclick : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@cj[2].txt -> TrackingCookie.Cj : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@com[1].txt -> TrackingCookie.Com : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@cratebarrel.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@data1.perf.overture[2].txt -> TrackingCookie.Overture : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@data2.perf.overture[2].txt -> TrackingCookie.Overture : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@data3.perf.overture[1].txt -> TrackingCookie.Overture : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@e-2dj6wflickazigq.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@e-2dj6wgk4gmc5wfq.stats.esomniture[2].txt -> TrackingCookie.Esomniture :

[Weezy45356]

Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@e-2dj6wgkocpdjclp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@e-2dj6whkiencpoep.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@e-2dj6wjmygicpilo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@epilot[2].txt -> TrackingCookie.Epilot : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@h.starware[2].txt -> TrackingCookie.Starware : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@highbeam.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@hypertracker[2].txt -> TrackingCookie.Hypertracker : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@ilead.itrack[1].txt -> TrackingCookie.Itrack : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@kmpads[1].txt -> TrackingCookie.Kmpads : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@maxis.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@meijer.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@microsofteup.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@paypopup[1].txt -> TrackingCookie.Paypopup : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@pch.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@sales.liveperson[1].txt -> TrackingCookie.Liveperson : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@snagajob.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@web-stat[2].txt -> TrackingCookie.Web-stat : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@www.burstbeacon[1].txt -> TrackingCookie.Burstbeacon : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@www.click2begin[2].txt -> TrackingCookie.Click2begin : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@www.myaffiliateprogram[2].txt -> TrackingCookie.Myaffiliateprogram : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@www2.click2begin[2].txt -> TrackingCookie.Click2begin : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@www3.click2begin[2].txt -> TrackingCookie.Click2begin : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@www4.click2begin[1].txt -> TrackingCookie.Click2begin : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@www5.click2begin[2].txt -> TrackingCookie.Click2begin : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@www6.click2begin[1].txt -> TrackingCookie.Click2begin : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@yadro[1].txt -> TrackingCookie.Yadro : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\180sainstaller.exe/clientax.dll -> Adware.180Solutions : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\180sainstaller.exe/clientax.dll -> Adware.180Solutions : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\180sainstallernu.exe/clientax.dll -> Adware.180Solutions : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\180sainstallernu.exe/clientax.dll -> Adware.180Solutions : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\BMK\aurareco.exe -> Adware.BetterInternet : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@adopt.specificclick[2].txt -> TrackingCookie.Specificclick : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@adtrak[1].txt -> TrackingCookie.Adtrak : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@c.enhance[1].txt -> TrackingCookie.Enhance : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@campaigns.top-banners[2].txt -> TrackingCookie.Top-banners : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@com[2].txt -> TrackingCookie.Com : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@hypertracker[1].txt -> TrackingCookie.Hypertracker : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@interchangecorporation.122.2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@kmpads[2].txt -> TrackingCookie.Kmpads : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@media.top-banners[1].txt -> TrackingCookie.Top-banners : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@need2find[2].txt -> TrackingCookie.Need2find : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@paypopup[2].txt -> TrackingCookie.Paypopup : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@www.burstbeacon[1].txt -> TrackingCookie.Burstbeacon : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@www.epilot[2].txt -> TrackingCookie.Epilot : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@www.myaffiliateprogram[1].txt -> TrackingCookie.Myaffiliateprogram : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@www.web-stat[2].txt -> TrackingCookie.Web-stat : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Cookies\valli@yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Del171.tmp -> Downloader.Small.asf : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Del1B.tmp -> Downloader.Small.asf : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Del27.tmp -> Downloader.Small.asf : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Del42.tmp -> Downloader.Small.asf : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\i14.tmp -> Adware.SurfSide : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\i1E9.tmp -> Adware.SurfSide : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\i1F.tmp -> Adware.SurfSide : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\ICD10.tmp\installer_PIVOTAL_4_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\ICD11.tmp\installer_PIVOTAL_4_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\ICD12.tmp\installer_PIVOTAL_4_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\ICD13.tmp\installer_MARKETING11.exe -> Downloader.Adload.a : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\ICD14.tmp\installer_PIVOTAL_5_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\ICD15.tmp\installer_PIVOTAL_5_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\ICD16.tmp\installer_MARKETING32.exe -> Downloader.Adload.a : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\ICD17.tmp\installer_MARKETING32.exe -> Downloader.Adload.a : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\ICD2.tmp\installer_MARKETING32.exe -> Downloader.Adload.a : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\ICD21.tmp\installer_MARKETING32.exe -> Downloader.Adload.a : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\ICD8.tmp\installer_MARKETING37.exe -> Downloader.Adload.a : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\ICD9.tmp\installer_MARKETING37.exe -> Downloader.Adload.a : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\install.exe -> Downloader.Agent.aaf : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\labpengs.tmp -> Adware.SafeSurfing : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\mndcntas.tmp -> Adware.SafeSurfing : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\RelatedSetup.exe -> Downloader.Small.bmx : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\res1C.tmp -> Adware.180Solutions : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\res22.tmp -> Adware.180Solutions : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\res28.tmp -> Adware.180Solutions : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\resC457.tmp -> Adware.180Solutions : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\s2cg.7.exe -> Dropper.Agent.abb : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\SSK3_B5 Seedcorn 4.exe -> Dropper.Small.qn : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\SSK3_B5.exe -> Dropper.Small.qn : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Temporary Internet Files\Content.IE5\05MP4Q79\kw[1].exe -> Adware.EliteBar : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Temporary Internet Files\Content.IE5\0PWMZZDY\installer_MARKETING32[1].cab/installer_MARKETING32.exe -> Downloader.Adload.a : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Temporary Internet Files\Content.IE5\66RBGUS1\installer_MARKETING37[1].cab/installer_MARKETING37.exe -> Downloader.Adload.a : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Temporary Internet Files\Content.IE5\KVKFQUWQ\installer_VENDARE[1].cab/installer_VENDARE.exe -> Downloader.Adload.a : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Temporary Internet Files\Content.IE5\RBV076OH\installer_MARKETING11[1].cab/installer_MARKETING11.exe -> Downloader.Adload.a : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Temporary Internet Files\Content.IE5\W2E5Y7RE\Installer[1].exe -> Adware.Look2Me : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\Temporary Internet Files\Content.IE5\XWB0UVJY\topr1150_up[1].gif -> Adware.WebRebates : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temp\zxinst12.exe -> Downloader.Agent.tq : Cleaned with backup
C:\Documents and Settings\Valli\Local Settings\Temporary Internet Files\Content.IE5\ESOAQR0Y\mediaview[1].cab/elite.ocx -> Adware.MediaMotor : Cleaned with backup
C:\Program Files\Common Files\krur\krura.exe -> Downloader.TSUpdate.l : Cleaned with backup
C:\Program Files\Common Files\krur\krurl.exe -> Downloader.TSUpdate.p : Cleaned with backup
C:\Program Files\Common Files\krur\krurp.exe -> Downloader.TSUpdate.f : Cleaned with backup
C:\Program Files\Common Files\nlupomol\ltalpban\sqrmdbeu.exe -> Adware.Gator : Cleaned with backup
C:\Program Files\Common Files\nlupomol\nsfltostnl\ffrodarqd.exe -> Adware.Gator : Cleaned with backup
C:\Program Files\Common Files\WinSoftware\PCheck.dll -> Adware.Winfixer : Cleaned with backup
C:\Program Files\DealBar\BarLcher.dll -> Adware.ActivShopper : Cleaned with backup
C:\Program Files\FCAdvice\FCAdvice.dll -> Adware.CASClient : Cleaned with backup
C:\Program Files\Vzcwxik\Xoqnk.exe -> Trojan.Small.cy : Cleaned with backup
C:\Program Files\Yazzle Sudoku\Sudoku.exe -> Dropper.VB.kk : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.0 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.1 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.10 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.11 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.12 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.13 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.14 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.15 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.16 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.17 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.18 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.19 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.2 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.20 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.21 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.22 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.23 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.24 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.25 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.26 -> Trojan.Stervis.e : Cleaned with backup

[Weezy45356]

C:\QUARANTINE\svcproc.exe.Vir.27 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.28 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.29 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.3 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.30 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.31 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.32 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.33 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.34 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.35 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.36 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.37 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.38 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.39 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.4 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.40 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.41 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.42 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.43 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.44 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.45 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.46 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.47 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.5 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.6 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.7 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.8 -> Trojan.Stervis.e : Cleaned with backup
C:\QUARANTINE\svcproc.exe.Vir.9 -> Trojan.Stervis.e : Cleaned with backup
C:\WINDOWS\876057.exe -> Adware.Mirar : Cleaned with backup
C:\WINDOWS\9020.exe/eee2.exe -> Adware.MediaMotor : Cleaned with backup
C:\WINDOWS\dinst.exe -> Adware.BetterInternet : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\installer_MARKETING11.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\installer_MARKETING32.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\installer_MARKETING37.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\installer_PIVOTAL_4_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\installer_PIVOTAL_5_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UWFX5NetInstaller.exe -> Not-A-Virus.Downloader.Win32.Agent.c : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\website.ocx -> Downloader.Agent.ex : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.10\installer_MARKETING32.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.11\installer_MARKETING32.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.2\installer_MARKETING32.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.2\installer_MARKETING37.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.2\installer_PIVOTAL_4_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.2\installer_PIVOTAL_5_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.3\installer_MARKETING32.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.3\installer_MARKETING37.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.3\installer_PIVOTAL_4_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.3\installer_PIVOTAL_5_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.4\installer_MARKETING32.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.4\installer_MARKETING37.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.4\installer_PIVOTAL_4_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.4\installer_PIVOTAL_5_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.5\installer_MARKETING32.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.5\installer_MARKETING37.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.5\installer_PIVOTAL_5_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.6\installer_MARKETING32.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.6\installer_MARKETING37.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.6\installer_PIVOTAL_5_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.7\installer_MARKETING32.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.7\installer_MARKETING37.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.7\installer_PIVOTAL_5_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.8\installer_MARKETING32.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.8\installer_PIVOTAL_5_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\CONFLICT.9\installer_MARKETING32.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\installer_MARKETING11.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\installer_MARKETING32.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\installer_MARKETING37.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\installer_PIVOTAL_2_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\installer_PIVOTAL_4_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\installer_PIVOTAL_5_DB.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\installer_VENDARE.exe -> Downloader.Adload.a : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\UWFX5NetInstaller.exe -> Not-A-Virus.Downloader.Win32.Agent.c : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\website.ocx -> Downloader.Agent.ex : Cleaned with backup
C:\WINDOWS\htwfdr.exe -> Downloader.Small.bmx : Cleaned with backup
C:\WINDOWS\inst_FI002.exe -> Adware.ZenoSearch : Cleaned with backup
C:\WINDOWS\invitessk.exe -> Trojan.Imiserv.c : Cleaned with backup
C:\WINDOWS\justin.exe -> Adware.EZula : Cleaned with backup
C:\WINDOWS\JUSTIN2.exe -> Adware.EZula : Cleaned with backup
C:\WINDOWS\Nail.exe -> Adware.BetterInternet : Cleaned with backup
C:\WINDOWS\offerssk.exe -> Adware.SurfSide : Cleaned with backup
C:\WINDOWS\SSK3_B5.exe -> Dropper.Small.qn : Cleaned with backup
C:\WINDOWS\stub_110_4_0_4_0.exe -> Downloader.TSUpdate.o : Cleaned with backup
C:\WINDOWS\system\sngsh35.dll -> Adware.AdBlaster : Cleaned with backup
C:\WINDOWS\system\UpdInst.exe -> Adware.Look2Me : Cleaned with backup
C:\WINDOWS\system32\0E0E10151216181.exe -> Trojan.VB.aft : Cleaned with backup
C:\WINDOWS\system32\adsetup.exe -> Dropper.Agent.abb : Cleaned with backup
C:\WINDOWS\system32\b2search.exe -> Adware.EZula : Cleaned with backup
C:\WINDOWS\system32\cxdxregt.exe -> Downloader.Agent.tq : Cleaned with backup
C:\WINDOWS\system32\DrPMon.dll -> Adware.BetterInternet : Cleaned with backup
C:\WINDOWS\system32\dwdsregt.exe -> Adware.ZenoSearch : Cleaned with backup
C:\WINDOWS\system32\fihmspkd.exe -> Adware.Suggestor : Cleaned with backup
C:\WINDOWS\system32\htzslq.dll -> Adware.PurityScan : Cleaned with backup
C:\WINDOWS\system32\irismon.dll -> Adware.SafeSurfing : Cleaned with backup
C:\WINDOWS\system32\irssyncd.exe -> Adware.SafeSurfing : Cleaned with backup
C:\WINDOWS\system32\jpdsed.exe -> Logger.VB.eh : Cleaned with backup
C:\WINDOWS\system32\jpdsregr.exe -> Adware.ZenoSearch : Cleaned with backup
C:\WINDOWS\system32\kmdevtaw.exe -> Adware.ZenoSearch : Cleaned with backup
C:\WINDOWS\system32\lanbrup.exe -> Adware.SafeSurfing : Cleaned with backup
C:\WINDOWS\system32\lsoda.dll -> Adware.Suggestor : Cleaned with backup
C:\WINDOWS\system32\ngsh35.dll -> Adware.AdBlaster : Cleaned with backup
C:\WINDOWS\system32\nsa1C.dll -> Adware.EZula : Cleaned with backup
C:\WINDOWS\system32\nsd89.dll -> Adware.EZula : Cleaned with backup
C:\WINDOWS\system32\nsf72D.dll -> Adware.EZula : Cleaned with backup
C:\WINDOWS\system32\nsk730.dll -> Adware.EZula : Cleaned with backup
C:\WINDOWS\system32\nsk928.dll -> Adware.EZula : Cleaned with backup
C:\WINDOWS\system32\nsl6E2.dll -> Adware.EZula : Cleaned with backup
C:\WINDOWS\system32\nslC3.dll -> Adware.EZula : Cleaned with backup
C:\WINDOWS\system32\nsn6E3.dll -> Adware.EZula : Cleaned with backup
C:\WINDOWS\system32\nso74.dll -> Adware.EZula : Cleaned with backup
C:\WINDOWS\system32\nsq6A4.dll -> Adware.EZula : Cleaned with backup
C:\WINDOWS\system32\nsq766.dll -> Adware.EZula : Cleaned with backup
C:\WINDOWS\system32\nstB0.dll -> Adware.EZula : Cleaned with backup
C:\WINDOWS\system32\oudxregw.exe -> Downloader.Agent.tq : Cleaned with backup
C:\WINDOWS\system32\qjdsregq.exe -> Adware.ZenoSearch : Cleaned with backup
C:\WINDOWS\system32\qsyswy2d.exe -> Adware.ZenoSearch : Cleaned with backup
C:\WINDOWS\system32\qsyswy6d.exe -> Adware.ZenoSearch : Cleaned with backup
C:\WINDOWS\system32\qsyswyuz.exe -> Adware.ZenoSearch : Cleaned with backup
C:\WINDOWS\system32\rågedit.exe -> Adware.PurityScan : Cleaned with backup
C:\WINDOWS\system32\sms_msn.exe -> Adware.AdBlaster : Cleaned with backup
C:\WINDOWS\system32\uuucrdjj.dll -> Adware.PurityScan : Cleaned with backup
C:\WINDOWS\system32\ventura-hot_246765.exe -> Adware.HotSearchBar : Cleaned with backup
C:\WINDOWS\system32\WinNB57.dll -> Adware.Mirar : Cleaned with backup
C:\WINDOWS\system32\wirelanb.dll -> Adware.SafeSurfing : Cleaned with backup
C:\WINDOWS\system32\{8110581C-FEA4-47AC-ADBC-DE958DD0F354}.dll -> Trojan.VB.aft : Cleaned with backup
C:\WINDOWS\tcpip32.exe -> Downloader.Small.fg : Cleaned with backup
C:\WINDOWS\tct101.dll -> Downloader.Dyfuca.eg : Cleaned with backup
C:\WINDOWS\whCC-GIANT.exe/WhAgent.exe -> Adware.WebHancer : Cleaned with backup
C:\WINDOWS\ZIFI002.exe -> Adware.ZenoSearch : Cleaned with backup


::Report End

Thanks so much for your help!

[firewolf08]

I downloaded and ran Ewido yesterday afternoon, and for the most part, it has made my computer faster and got rid of a bunch of crap. But after I ran it and when my computer starts up I get this message:

"the feature you are trying to use is on a CD-ROM or other removable disk that is not available. Insert the 'Scan' disk and click ok"

What "Scan" disk is it talking about? This popup was not here before I ran Ewido. If I click cancel I get an error message that says:

"Error 1706. No valid source could be found for product Scan. The Windows Installer cannot continue." I click ok, but the cycle repeats itself by the popup saying "Please wait while Windows configures Scan."

To try to get rid of this I have actually deleted Ewido. I have ran Ad-aware and Spybot. I have also gone in and deleted the files the in "Prefetch" folder. Since that did not get rid of it I updated my Adaware and Spybot, re-downloaded Ewido, and I ran all 3 of those programs in my Safe Mode. I also downloaded a program called CCleaner and ran that before I ran the 3 others in my Safe Mode. My latest Ewido scan report looks like this:

ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 9:38:24 AM, 3/19/2006
+ Report-Checksum: 2ED224C1

+ Scan result:

HKLM\SOFTWARE\Altnet -> Adware.Altnet : Error during cleaning
HKLM\SOFTWARE\Altnet\Dashboard -> Adware.Altnet : Error during cleaning
HKLM\SOFTWARE\Altnet\Dashboard\Settings -> Adware.Altnet : Error during cleaning
HKU\S-1-5-21-823518204-1275210071-839522115-1004\Software\aurora -> Adware.BetterInternet : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@ad.yieldmanager[3].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@adopt.specificclick[2].txt -> TrackingCookie.Specificclick : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@burstnet[2].txt -> TrackingCookie.Burstnet : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@com[1].txt -> TrackingCookie.Com : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@e-2dj6wflickazigq.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@e-2dj6wjlyspc5ifq.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Valli\Cookies\valli@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Downloads\FamilyFeudSetup-dm[1].exe -> Adware.Trymedia : Cleaned with backup
C:\QUARANTINE\A0372358.exe.Vir -> Adware.BetterInternet : Cleaned with backup
C:\QUARANTINE\A0372376.exe.Vir -> Adware.BetterInternet : Cleaned with backup
C:\QUARANTINE\A0372377.exe.Vir -> Adware.BetterInternet : Cleaned with backup
C:\QUARANTINE\thin-138-1-x-x.exe.Vir -> Adware.BetterInternet : Cleaned with backup
C:\QUARANTINE\thin-143-1-x-x.exe.Vir -> Adware.BetterInternet : Cleaned with backup
C:\QUARANTINE\thin-94-1-x-x.exe.Vir -> Adware.BetterInternet : Cleaned with backup
C:\QUARANTINE\thin-94-1-x-x.exe.Vir.0 -> Adware.BetterInternet : Cleaned with backup
C:\WINDOWS\Nail.exe -> Adware.BetterInternet : Cleaned with backup

::Report End

Does anyone know what I have to do to get that message from popping up? It was not there before I downloaded Ewido for the first time. The only way to get rid of it is to press Ctrl+Alt+Del and go into Task Manager and end it that way. But I know that doesn't really take care of it. What should I do? I'm getting frustrated with it.

[Weezy45356]

My son-in-law has now posted for himself under "firewolf08" ... http://forums.spybot.info/showthread.php?t=3086 with a more recent post. You can direct your questions and advice to him if you like.

Thanks for your help.

[firewolf08]

I just now downloaded HijackThis and here is the logfiles that i have. I know that this may be helpful to someone who might want to help me. Thanks!
Here it is:

Logfile of HijackThis v1.99.1
Scan saved at 10:48:38 AM, on 3/19/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\NoAds\NoAds.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\system32\srdevkag.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://access.wright.edu/
R3 - URLSearchHook: (no name) - {02EE5B04-F144-47BB-83FB-A60BD91B74A9} - (no file)
R3 - URLSearchHook: (no name) - {B1422B31-98A2-940F-D05E-BE3ECA2427B0} - (no file)
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O2 - BHO: (no name) - {396F192D-AEEB-A116-9B08-DE98B015F1EB} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - (no file)
O2 - BHO: (no name) - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - (no file)
O2 - BHO: RieMon Class - {70F6A776-579A-4C95-BA88-134253907752} - C:\WINDOWS\system32\irsmqqux.dll
O2 - BHO: BMG3.LongTooth - {8110581C-FEA4-47AC-ADBC-DE958DD0F354} - C:\WINDOWS\system32\{8110581C-FEA4-47AC-ADBC-DE958DD0F354}.dll (file missing)
O2 - BHO: (no name) - {8EA23D66-E057-4D62-A8C0-86961B453F07} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {B1422B31-98A2-940F-D05E-BE3ECA2427B0} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [BrowserUpdateSched] C:\WINDOWS\system32\srdevkag.exe DO0605
O4 - HKCU\..\Run: [CAS Client] "C:\Program Files\Cas\Client\casclient.exe"
O4 - HKCU\..\Run: [WinFixer 2005] "C:\Program Files\WinFixer 2005\WFX5.exe" /min
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [NoAds] "C:\Program Files\NoAds\NoAds.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Startup: Zeno.lnk = C:\WINDOWS\system32\srdevkag.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Search - http://ka.bar.need2find.com/KA/menusearch.html?p=KA
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {9E248641-0E24-4DDB-9A1F-705087832AD6} - (no file)
O9 - Extra 'Tools' menuitem: Java - {9E248641-0E24-4DDB-9A1F-705087832AD6} - (no file)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O15 - Trusted Zone: http://click.getmirar.com (HKLM)
O15 - Trusted Zone: http://click.mirarsearch.com (HKLM)
O15 - Trusted Zone: http://redirect.mirarsearch.com (HKLM)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: Runner.dll
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

Any suggestions for me to fix the Error 1706 problem? Thanks!

[Weezy45356]

Problem solved. Somehow interferences with the scanner occurred. He uninstalled and reinstalled it.

Thanks.

CLOSED Before you post a log, and who will advise you. (http://forums.spybot.info/showthread.php?t=288)