antiquecollector
2009-06-23, 20:24
Spybot found this and can't remove it. I don't know how to remove it. I did a hijackthis log and it is as follows:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:18:27 PM, on 6/23/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16850)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\CSHelper.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\wanmpsvc.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Common Files\AOL\1102880411\ee\AOLSoftware.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Plaxo\3.19.0.16\PlaxoHelper_en.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\America Online 9.0\aoltray.exe
C:\Program Files\CallWave\IAM.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\WiFiConnector\NintendoWFCReg.exe
C:\Program Files\Verizon Online\Support Center\bin\mpbtn.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\WINDOWS\system32\wscntfy.exe
c:\program files\common files\aol\1102880411\ee\services\antiSpywareApp\ver2_0_32_1\AOLSP Scheduler.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/mywaybiz
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer powered by Verizon Broadband
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1102880411\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [PlaxoUpdate] C:\Program Files\Plaxo\3.19.0.16\PlaxoHelper_en.exe -a
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PlaxoSysTray] C:\Program Files\Plaxo\3.19.0.16\PlaxoSysTray.exe
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: Broadband Support Center.lnk = C:\Program Files\Verizon Online\Support Center\bin\matcli.exe
O4 - Global Startup: CallWave.lnk = C:\Program Files\CallWave\IAM.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Run Nintendo Wi-Fi USB Connector Registration Tool.lnk = C:\Program Files\WiFiConnector\NintendoWFCReg.exe
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZSzeb029COUS_ZNxdm824CRUS
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: 6th Street Omaha Poker by pogo - http://game1.pogo.com/applet-6.6.4.21/omaha/omaha-en_US.cab
O16 - DPF: Aces Up! by pogo - http://game1.pogo.com/applet-6.9.0.61/aces/aces-en_US.cab
O16 - DPF: Ali Baba Slots TM by pogo - http://game1.pogo.com/applet-6.8.3.35/slots/alibaba-en_US.cab
O16 - DPF: Backgammon by pogo - http://game1.pogo.com/applet-6.6.5.22/backgammon/backgammon-en_US.cab
O16 - DPF: Blackjack by pogo - http://game1.pogo.com/applet-6.8.4.51/blackjack/blackjack-en_US.cab
O16 - DPF: Blackjack Carnival by pogo - http://game1.pogo.com/applet-6.8.1.38/vbjack2/vbjack2-en_US.cab
O16 - DPF: Blooop by pogo - http://game1.pogo.com/applet-6.9.4.41/cascade/cascade-en_US.cab
O16 - DPF: Bowling by pogo - http://game1.pogo.com/applet-6.8.2.23/bowling/bowling-en_US.cab
O16 - DPF: Canasta by pogo - http://game1.pogo.com/applet-6.9.0.61/canasta/canasta-en_US.cab
O16 - DPF: Checkers by pogo - http://game1.pogo.com/applet-6.9.4.34/checkers2/checkers-en_US.cab
O16 - DPF: Chess by pogo - http://game1.pogo.com/applet-6.8.0.32/chess2/chess2-en_US.cab
O16 - DPF: Dice City Roller by pogo - http://game1.pogo.com/applet-6.9.2.40/ytz/ytz-en_US.cab
O16 - DPF: Dice Derby by pogo - http://game1.pogo.com/applet-6.6.2.21/checkeredflag/checkeredflag-en_US.cab
O16 - DPF: Dominoes by pogo - http://game1.pogo.com/applet-6.9.1.38/domino/domino-en_US.cab
O16 - DPF: Euchre by pogo - http://game1.pogo.com/applet-6.7.2.24/euchre/euchre-en_US.cab
O16 - DPF: First Class Solitaire by pogo - http://game1.pogo.com/applet-6.9.3.39/firstclass2/firstclass2-en_US.cab
O16 - DPF: Fortune Bingo by pogo - http://game1.pogo.com/applet-6.9.3.29/superbingo/superbingo-en_US.cab
O16 - DPF: Greenback Bayou by pogo - http://game1.pogo.com/applet-6.5.0.45/greenback/greenback-ob-assets.cab
O16 - DPF: Hangman Hijinks by pogo - http://game1.pogo.com/applet-6.9.3.39/hangman/hangman-en_US.cab
O16 - DPF: Harvest Mania by pogo - http://game1.pogo.com/applet-6.8.2.23/harvest/harvest-en_US.cab
O16 - DPF: Hearts by pogo - http://game1.pogo.com/applet-6.9.2.33/hearts/hearts-en_US.cab
O16 - DPF: High Stakes Poker by pogo - http://game1.pogo.com/applet-6.8.4.51/drawpoker/drawpoker-en_US.cab
O16 - DPF: High Stakes Pool by pogo - http://game1.pogo.com/applet-6.7.3.23/pool2/pool-en_US.cab
O16 - DPF: Hog Heaven Slots by pogo - http://game1.pogo.com/applet-6.9.1.38/fancy/fancy-en_US.cab
O16 - DPF: Jungle Gin by pogo - http://game1.pogo.com/applet-6.9.0.43/gin2/gin2-en_US.cab
O16 - DPF: Lost Temple Poker by pogo - http://game1.pogo.com/applet-6.7.5.28/mhpoker/mhpoker-en_US.cab
O16 - DPF: Lottso by pogo - http://game1.pogo.com/applet-6.8.4.51/lottso/lottso-en_US.cab
O16 - DPF: Mah Jong Garden by pogo - http://game1.pogo.com/applet-6.9.4.34/mahjong2/mahjong2-en_US.cab
O16 - DPF: Multiline Slots by pogo - http://game1.pogo.com/applet-6.7.1.33/mlslots/mlslots-en_US.cab
O16 - DPF: Pai Gow by pogo - http://game1.pogo.com/applet-6.9.0.43/paigow/paigow-en_US.cab
O16 - DPF: Payday FreeCell by pogo - http://game1.pogo.com/applet-6.9.0.43/freecell/freecell-en_US.cab
O16 - DPF: Payday Freecell Solitaire by pogo - http://game1.pogo.com/applet-6.9.4.41/freecell2/freecell2-en_US.cab
O16 - DPF: Penguin Blocks by pogo - http://game1.pogo.com/applet-6.8.0.25/penguins/penguins-en_US.cab
O16 - DPF: Perfect Pair Solitaire by pogo - http://game1.pogo.com/applet-6.9.1.32/waterwheel/waterwheel-en_US.cab
O16 - DPF: Phlinx by pogo - http://game1.pogo.com/applet-6.8.3.22/flinger/flinger-en_US.cab
O16 - DPF: Pinochle by pogo - http://game1.pogo.com/applet-6.6.3.34/pinochle/pinochle-en_US.cab
O16 - DPF: Pop Fu by pogo - http://game1.pogo.com/applet-6.9.3.49/popfu/popfu-en_US.cab
O16 - DPF: PoppaZoppa by pogo - http://game1.pogo.com/applet-6.9.1.32/poppazoppa/poppazoppa-en_US.cab
O16 - DPF: Poppit by pogo - http://game1.pogo.com/applet-6.9.4.34/poppit2/poppit2-en_US.cab
O16 - DPF: Quick Quack by pogo - http://game1.pogo.com/applet-6.7.4.35/hotstreak/hotstreak-en_US.cab
O16 - DPF: QWERTY by pogo - http://game1.pogo.com/applet-6.9.2.33/squares/squares-en_US.cab
O16 - DPF: Ride The Tide by pogo - http://game1.pogo.com/applet-6.5.3.44/ride/ride-en_US.cab
O16 - DPF: SciFi Slots by pogo - http://game1.pogo.com/applet-6.9.4.34/slots/scifi-en_US.cab
O16 - DPF: Showbiz Slots 2 by pogo - http://game1.pogo.com/applet-6.9.4.34/slots/showbiz2-en_US.cab
O16 - DPF: Showbiz Slots by pogo - http://game1.pogo.com/applet-6.8.2.23/slots/showbiz-en_US.cab
O16 - DPF: Shuffle Bump by pogo - http://game1.pogo.com/applet-6.8.3.22/puck/puck-en_US.cab
O16 - DPF: Spades 2 by pogo - http://game1.pogo.com/applet-6.7.1.23/spades2/spades2-en_US.cab
O16 - DPF: Spades by pogo - http://game1.pogo.com/applet-6.5.3.37/spades/spades-en_US.cab
O16 - DPF: Spider Solitaire by pogo - http://game1.pogo.com/applet-6.9.2.40/spider/spider-en_US.cab
O16 - DPF: Squelchies by pogo - http://game1.pogo.com/applet-6.9.0.43/squelchies/squelchies-en_US.cab
O16 - DPF: Stax by pogo - http://game1.pogo.com/applet-6.9.2.33/stax/stax-en_US.cab
O16 - DPF: Stellar Sweeper by pogo - http://game1.pogo.com/applet-6.9.3.39/sweeper/sweeper-en_US.cab
O16 - DPF: Swashbucks by pogo - http://game1.pogo.com/applet-6.9.3.29/piratesgold/piratesgold-en_US.cab
O16 - DPF: Sweet Tooth TM by pogo - http://game1.pogo.com/applet-6.8.4.51/sweettooth/sweettooth-en_US.cab
O16 - DPF: Texas Hold'em Poker by pogo - http://game1.pogo.com/applet-6.9.2.40/holdem/holdem-en_US.cab
O16 - DPF: Tri-Peaks by pogo - http://game1.pogo.com/applet-6.9.4.41/peaks/peaks-en_US.cab
O16 - DPF: Tumble Bees by pogo - http://game1.pogo.com/applet-6.9.1.32/jumbee/jumbee-en_US.cab
O16 - DPF: Turbo 21 v2 by pogo - http://game1.pogo.com/applet-8.0.0.20/turbo22/turbo22-en_US.cab
O16 - DPF: Video Poker by pogo - http://game1.pogo.com/applet-6.9.2.40/videopoker2/videopoker-en_US.cab
O16 - DPF: Wonderland Memories by pogo - http://game1.pogo.com/applet-6.7.2.24/memories/memories-en_US.cab
O16 - DPF: Word Craft by pogo - http://game1.pogo.com/applet-6.9.4.34/babble/babble-en_US.cab
O16 - DPF: Word Whomp by pogo - http://game1.pogo.com/applet-6.6.2.21/wordwhomp2/whomp2-en_US.cab
O16 - DPF: Word Whomp Whackdown by pogo - http://game1.pogo.com/applet-6.9.3.29/whackdown/whackdown-en_US.cab
O16 - DPF: WordJong by pogo - http://game1.pogo.com/applet-6.8.0.25/wordjong/wordjong-en_US.cab
O16 - DPF: World Class Solitaire by pogo - http://game1.pogo.com/applet-6.9.3.29/worldclass/worldclass-en_US.cab
O16 - DPF: {106E49CF-797A-11D2-81A2-00E02C015623} (AlternaTIFF ActiveX) - http://www.alternatiff.com/install/00/alttiff.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=48835
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} - http://a19.g.akamai.net/7/19/7125/4058/ftp.coupons.com/r3302/Coupons.cab
O16 - DPF: {A922B6AB-3B87-11D3-B3C2-0008C7DA6CB9} (InetDownload Class) - https://media.pineconeresearch.com/ActiveX/downloadcontrol.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Filter hijack: text/html - {dfa96717-de3b-4a4c-b223-a0762f024ab5} - C:\WINDOWS\system32\mst122.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: CopySafe Helper Service (CSHelper) - Unknown owner - C:\WINDOWS\system32\CSHelper.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
--
End of file - 16408 bytes
antiquecollector
2009-06-26, 16:36
Hi Shaba. I seem to have a couple logs from the last scan, I'm not sure which one you need. Here they are:
23.06.2009 11:14:37 - ##### check started #####
23.06.2009 11:14:38 - ### Version: 1.6.2
23.06.2009 11:14:38 - ### Date: 6/23/2009 11:14:38 AM
23.06.2009 11:14:43 - ##### checking bots #####
23.06.2009 11:15:09 - found: CouponBar Class ID
23.06.2009 11:15:09 - found: CouponBar Class ID
23.06.2009 11:15:09 - found: CouponBar Class ID
23.06.2009 11:15:09 - found: CouponBar Class ID
23.06.2009 11:15:09 - found: CouponBar Root class
23.06.2009 11:15:09 - found: CouponBar Class ID
23.06.2009 11:15:09 - found: CouponBar Interface
23.06.2009 11:15:09 - found: CouponBar Interface
23.06.2009 11:15:09 - found: CouponBar Interface
23.06.2009 11:15:10 - found: CouponBar Interface
23.06.2009 11:15:10 - found: CouponBar Root class
23.06.2009 11:15:10 - found: CouponBar Root class
23.06.2009 11:15:10 - found: CouponBar Class ID
23.06.2009 11:15:10 - found: CouponBar Browser helper object
23.06.2009 11:15:10 - found: CouponBar Root class
23.06.2009 11:15:10 - found: CouponBar Root class
23.06.2009 11:15:10 - found: CouponBar Class ID
23.06.2009 11:15:10 - found: CouponBar Root class
23.06.2009 11:15:10 - found: CouponBar Root class
23.06.2009 11:15:10 - found: CouponBar Type library
23.06.2009 11:15:10 - found: CouponBar Type library
23.06.2009 11:15:10 - found: CouponBar Settings
23.06.2009 11:15:10 - found: CouponBar Settings
23.06.2009 11:15:10 - found: CouponBar Uninstall settings
23.06.2009 11:15:10 - found: CouponBar Settings
23.06.2009 11:15:10 - found: CouponBar Text file
23.06.2009 11:22:42 - found: SearchPixieBar Settings
23.06.2009 11:44:27 - found: Microsoft.Windows.Security.InternetExplorer Settings
23.06.2009 11:44:27 - found: Microsoft.WindowsSecurityCenter.AntiVirusOverride Settings
23.06.2009 11:45:37 - found: CommonName Class ID
23.06.2009 12:17:35 - found: Win32.KillAV-KQ Settings
23.06.2009 12:17:36 - found: Win32.KillAV-KQ Class ID
23.06.2009 12:17:36 - found: Win32.KillAV-KQ Root class
23.06.2009 12:17:36 - found: Win32.KillAV-KQ Root class
23.06.2009 12:17:36 - found: Win32.KillAV-KQ Class ID
23.06.2009 12:17:36 - found: Win32.KillAV-KQ Browser helper object
23.06.2009 12:17:36 - found: Win32.KillAV-KQ Type library
23.06.2009 13:42:08 - found: AdRevolver Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:08 - found: FastClick Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:08 - found: MediaPlex Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:08 - found: CoreMetrics Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:08 - found: WebTrends live Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:08 - found: Statcounter Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:08 - found: AdRevolver Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:08 - found: LinkSynergy Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:08 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:08 - found: BurstMedia Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:09 - found: BFast Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:09 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:09 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:09 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:09 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:09 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:09 - found: Zedo Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:09 - found: BlueStreak Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:09 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:09 - found: AdRevolver Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:09 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:09 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:09 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:09 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitsLink Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: CoreMetrics Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: DoubleClick Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: CoreMetrics Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: AdRevolver Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: WebTrends live Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: Tradedoubler Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: Commission Junction Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:10 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitsLink Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: Clickbank Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:11 - found: AdRevolver Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: DoubleClick Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: Zedo Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: HitBox Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: DoubleClick Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: BurstMedia Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:12 - found: CPXinteractive Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:13 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:13 - found: DoubleClick Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:13 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:13 - found: DoubleClick Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:13 - found: DoubleClick Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:13 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:13 - found: Zedo Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:13 - found: DirectTrack Tracking cookie (Internet Explorer: Janet Jennings)
23.06.2009 13:42:13 - found: AdRevolver Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: AdRevolver Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: MediaPlex Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: MediaPlex Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: BurstMedia Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: BurstMedia Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: DoubleClick Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: DoubleClick Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: HitBox Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: HitBox Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: HitBox Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: MediaPlex Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: MediaPlex Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: FastClick Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: FastClick Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: FastClick Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: FastClick Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: MediaPlex Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: Statcounter Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: Zedo Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: Zedo Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: HitsLink Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: AdRevolver Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: WebTrends live Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: BurstMedia Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:13 - found: BurstMedia Tracking cookie (Firefox: Janet Jennings (ProfileName))
23.06.2009 13:42:17 - ##### check finished ####
And the other log (from the same scan):
--- Report generated: 2009-06-23 13:42 ---
CouponBar: [SBI $73FB1190] Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{5BED3930-2E9E-76D8-BACC-80DF2188D455}
CouponBar: [SBI $AFB7D670] Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{62960D20-6D0D-1AB4-4BF1-95B0B5B8783A}
CouponBar: [SBI $EFE6495E] Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
CouponBar: [SBI $CB95FB49] Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{A85A5E6A-DE2C-4F4E-99DC-F469DF5A0EEC}
CouponBar: [SBI $51FE8B2E] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cpbrkpie.Coupon6Ctrl.1
CouponBar: [SBI $51FE8B2E] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
CouponBar: [SBI $2085718C] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{0D700D4A-F8C1-8888-C5BA-CB09D464A4E8}
CouponBar: [SBI $60F93919] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{6D69B86A-B94C-59EE-BCB8-5F5DF46B2BE8}
CouponBar: [SBI $7A5ACBCB] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{6E780F0B-BCD6-40CB-B2DB-7AF47AB4D4A4}
CouponBar: [SBI $7B15781E] Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{A138BE8B-F051-4802-9A3F-A750A6D862D4}
CouponBar: [SBI $79DD9442] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolBand.TTB000000
CouponBar: [SBI $79DD9442] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolBand.TTB000000.1
CouponBar: [SBI $79DD9442] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{62960D20-6D0D-1AB4-4BF1-95B0B5B8783A}
CouponBar: [SBI $79DD9442] Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{62960D20-6D0D-1AB4-4BF1-95B0B5B8783A}
CouponBar: [SBI $D8EB624C] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TTB000001.IEToolbar
CouponBar: [SBI $D8EB624C] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TTB000001.IEToolbar.1
CouponBar: [SBI $D8EB624C] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5BED3930-2E9E-76D8-BACC-80DF2188D455}
CouponBar: [SBI $095C9854] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TTB000001.TTB000001
CouponBar: [SBI $095C9854] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TTB000001.TTB000001.1
CouponBar: [SBI $E3788A7B] Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{87255C51-CD7D-4506-B9AD-97606DAF53F3}
CouponBar: [SBI $2B36E459] Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{9BA983B1-0C05-2DAF-9D1D-7E160077CAF4}
CouponBar: [SBI $5E6E3641] Settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-320522354-3583955949-1473644045-1007\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5BED3930-2E9E-76D8-BACC-80DF2188D455}
CouponBar: [SBI $8222F1A1] Settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-320522354-3583955949-1473644045-1007\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{62960D20-6D0D-1AB4-4BF1-95B0B5B8783A}
CouponBar: [SBI $DDB87C81] Uninstall settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TTB000001.TTB000001Toolbar
CouponBar: [SBI $0508B240] Settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-320522354-3583955949-1473644045-1007\Software\TTB000001
CouponBar: [SBI $21E5E98F] Text file (File, nothing done)
C:\WINDOWS\CBVersion.txt
Properties.size=7
Properties.md5=F9157709FAA7D67E6E2A76ECC5EB9C20
Properties.filedate=1121098274
Properties.filedatetext=2005-07-11 11:11:14
SearchPixieBar: [SBI $B4D617E4] Settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-320522354-3583955949-1473644045-1007\Software\BestToolbars\IEToolbar
Microsoft.Windows.Security.InternetExplorer: [SBI $A3433CBF] Settings (Registry change, nothing done)
HKEY_USERS\S-1-5-21-320522354-3583955949-1473644045-1007\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe
Microsoft.WindowsSecurityCenter.AntiVirusOverride: [SBI $3604910C] Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride
CommonName: [SBI $A5CE4ECE] Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{00000000-0000-0000-0000-000000000000}
Win32.KillAV-KQ: [SBI $A4722992] Settings (Registry key, nothing done)
HKEY_CLASSES_ROOT\AppID\{A0E1054B-01EE-4D57-A059-4D99F339709F}
Win32.KillAV-KQ: [SBI $1AF416DB] Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{AFD4AD01-58C1-47DB-A404-FBE00A6C5486}
Win32.KillAV-KQ: [SBI $F0C3DEFD] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\main.BHO
Win32.KillAV-KQ: [SBI $F0C3DEFD] Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\main.BHO.1
Win32.KillAV-KQ: [SBI $F0C3DEFD] Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFD4AD01-58C1-47DB-A404-FBE00A6C5486}
Win32.KillAV-KQ: [SBI $F0C3DEFD] Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AFD4AD01-58C1-47DB-A404-FBE00A6C5486}
Win32.KillAV-KQ: [SBI $5B084AE7] Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{8E3C68CD-F500-4A2A-8CB9-132BB38C3573}
AdRevolver: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
FastClick: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
MediaPlex: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
CoreMetrics: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
WebTrends live: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
Statcounter: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
AdRevolver: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
LinkSynergy: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
BurstMedia: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
BFast: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
Zedo: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
BlueStreak: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
AdRevolver: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitsLink: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
CoreMetrics: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DoubleClick: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
CoreMetrics: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
AdRevolver: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
WebTrends live: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
Tradedoubler: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
Commission Junction: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitsLink: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
Clickbank: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
AdRevolver: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DoubleClick: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
Zedo: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DoubleClick: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
BurstMedia: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
CPXinteractive: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DoubleClick: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DoubleClick: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DoubleClick: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
Zedo: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
DirectTrack: Tracking cookie (Internet Explorer: Janet Jennings) (Cookie, nothing done)
AdRevolver: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
AdRevolver: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
MediaPlex: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
MediaPlex: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
BurstMedia: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
BurstMedia: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
DoubleClick: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
DoubleClick: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
HitBox: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
HitBox: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
HitBox: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
MediaPlex: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
MediaPlex: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
FastClick: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
FastClick: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
FastClick: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
FastClick: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
MediaPlex: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
Statcounter: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
Zedo: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
Zedo: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
HitsLink: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
AdRevolver: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
WebTrends live: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
BurstMedia: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
BurstMedia: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, nothing done)
--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---
2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-01-26 TeaTimer.exe (1.6.4.26)
2009-06-23 unins000.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-01-26 advcheck.dll (1.6.2.15)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2009-05-19 Includes\Adware.sbi (*)
2009-06-02 Includes\AdwareC.sbi (*)
2009-01-22 Includes\Cookies.sbi (*)
2009-05-19 Includes\Dialer.sbi (*)
2009-06-02 Includes\DialerC.sbi (*)
2009-01-22 Includes\HeavyDuty.sbi (*)
2009-05-26 Includes\Hijackers.sbi (*)
2009-06-09 Includes\HijackersC.sbi (*)
2009-06-16 Includes\Keyloggers.sbi (*)
2009-06-16 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2009-06-10 Includes\Malware.sbi (*)
2009-06-16 Includes\MalwareC.sbi (*)
2009-03-25 Includes\PUPS.sbi (*)
2009-06-17 Includes\PUPSC.sbi (*)
2009-01-22 Includes\Revision.sbi (*)
2009-01-13 Includes\Security.sbi (*)
2009-06-02 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2009-04-07 Includes\Spyware.sbi (*)
2009-06-02 Includes\SpywareC.sbi (*)
2009-06-08 Includes\Tracks.uti
2009-06-17 Includes\Trojans.sbi (*)
2009-06-17 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll
antiquecollector
2009-06-26, 22:58
Okay. Here's the results. It didn't show up on the list of problems but I'm not sure that means it's not still there? It said before that it couldn't fix it.
--- Search result list ---
WebTrends live: Tracking cookie (Firefox: Janet Jennings (ProfileName)) (Cookie, fixed)
--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---
2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-01-26 TeaTimer.exe (1.6.4.26)
2009-06-23 unins000.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-01-26 advcheck.dll (1.6.2.15)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2009-05-19 Includes\Adware.sbi (*)
2009-06-02 Includes\AdwareC.sbi (*)
2009-01-22 Includes\Cookies.sbi (*)
2009-05-19 Includes\Dialer.sbi (*)
2009-06-02 Includes\DialerC.sbi (*)
2009-01-22 Includes\HeavyDuty.sbi (*)
2009-05-26 Includes\Hijackers.sbi (*)
2009-06-09 Includes\HijackersC.sbi (*)
2009-06-16 Includes\Keyloggers.sbi (*)
2009-06-16 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2009-06-10 Includes\Malware.sbi (*)
2009-06-16 Includes\MalwareC.sbi (*)
2009-03-25 Includes\PUPS.sbi (*)
2009-06-17 Includes\PUPSC.sbi (*)
2009-01-22 Includes\Revision.sbi (*)
2009-01-13 Includes\Security.sbi (*)
2009-06-02 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2009-04-07 Includes\Spyware.sbi (*)
2009-06-02 Includes\SpywareC.sbi (*)
2009-06-08 Includes\Tracks.uti
2009-06-17 Includes\Trojans.sbi (*)
2009-06-17 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll
--- System information ---
Windows XP (Build: 2600) Service Pack 2 (5.1.2600)
/ .NETFramework / 1.1: Microsoft .NET Framework 1.1 Hotfix (KB928366)
/ .NETFramework / 1.1: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
/ MSXML4SP2: FIX: ASP stops responding when calling Response.Redirect to another server using msxml4 sp2
/ MSXML4SP2: Security update for MSXML4 SP2 (KB936181)
/ MSXML4SP2: Security update for MSXML4 SP2 (KB954430)
/ Step By Step Interactive Training / SP2: Security Update for Step By Step Interactive Training (KB898458)
/ Step By Step Interactive Training / SP2: Security Update for Step By Step Interactive Training (KB923723)
/ Windows / SP1: Microsoft Internationalized Domain Names Mitigation APIs
/ Windows / SP1: Microsoft National Language Support Downlevel APIs
/ Windows Media Player: Security Update for Windows Media Player (KB952069)
/ Windows Media Player 6.4: Security Update for Windows Media Player 6.4 (KB925398)
/ Windows Media Player 9: Security Update for Windows Media Player 9 (KB917734)
/ Windows Media Player 9: Security Update for Windows Media Player 9 (KB936782)
/ Windows XP: Security Update for Windows XP (KB923689)
/ Windows XP: Security Update for Windows XP (KB941569)
/ Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB928090)
/ Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB929969)
/ Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB931768)
/ Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB933566)
/ Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB937143)
/ Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB938127)
/ Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB939653)
/ Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB942615)
/ Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB944533)
/ Windows XP / SP0: Hotfix for Windows Internet Explorer 7 (KB947864)
/ Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB950759)
/ Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB953838)
/ Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB956390)
/ Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB958215)
/ Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB960714)
/ Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB961260)
/ Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB963027)
/ Windows XP / SP0: Security Update for Windows Internet Explorer 7 (KB969897)
/ Windows XP / SP2: Windows XP Service Pack 2
/ Windows XP / SP3: Windows XP Hotfix - KB834707
/ Windows XP / SP3: Windows XP Hotfix - KB867282
/ Windows XP / SP3: Windows XP Hotfix - KB873333
/ Windows XP / SP3: Windows XP Hotfix - KB873339
/ Windows XP / SP3: Security Update for Windows XP (KB883939)
/ Windows XP / SP3: Windows XP Hotfix - KB885250
/ Windows XP / SP3: Windows XP Hotfix - KB885835
/ Windows XP / SP3: Windows XP Hotfix - KB885836
/ Windows XP / SP3: Windows XP Hotfix - KB886185
/ Windows XP / SP3: Windows XP Hotfix - KB887472
/ Windows XP / SP3: Windows XP Hotfix - KB887742
/ Windows XP / SP3: Windows XP Hotfix - KB888113
/ Windows XP / SP3: Windows XP Hotfix - KB888302
/ Windows XP / SP3: Security Update for Windows XP (KB890046)
/ Windows XP / SP3: Windows XP Hotfix - KB890047
/ Windows XP / SP3: Windows XP Hotfix - KB890175
/ Windows XP / SP3: Windows XP Hotfix - KB890859
/ Windows XP / SP3: Windows XP Hotfix - KB890923
/ Windows XP / SP3: Windows XP Hotfix - KB891781
/ Windows XP / SP3: Security Update for Windows XP (KB893066)
/ Windows XP / SP3: Windows XP Hotfix - KB893086
/ Windows XP / SP3: Security Update for Windows XP (KB893756)
/ Windows XP / SP3: Windows Installer 3.1 (KB893803)
/ Windows XP / SP3: Windows Installer 3.1 (KB893803)
/ Windows XP / SP3: Update for Windows XP (KB894391)
/ Windows XP / SP3: Security Update for Windows XP (KB896358)
/ Windows XP / SP3: Security Update for Windows XP (KB896422)
/ Windows XP / SP3: Security Update for Windows XP (KB896423)
/ Windows XP / SP3: Security Update for Windows XP (KB896424)
/ Windows XP / SP3: Security Update for Windows XP (KB896428)
/ Windows XP / SP3: Security Update for Windows XP (KB896688)
/ Windows XP / SP3: Update for Windows XP (KB896727)
/ Windows XP / SP3: Update for Windows XP (KB898461)
/ Windows XP / SP3: Security Update for Windows XP (KB899587)
/ Windows XP / SP3: Security Update for Windows XP (KB899588)
/ Windows XP / SP3: Security Update for Windows XP (KB899591)
/ Windows XP / SP3: Update for Windows XP (KB900485)
/ Windows XP / SP3: Security Update for Windows XP (KB900725)
/ Windows XP / SP3: Security Update for Windows XP (KB901017)
/ Windows XP / SP3: Security Update for Windows XP (KB901214)
/ Windows XP / SP3: Security Update for Windows XP (KB902400)
/ Windows XP / SP3: Security Update for Windows XP (KB903235)
/ Windows XP / SP3: Security Update for Windows XP (KB904706)
/ Windows XP / SP3: Update for Windows XP (KB904942)
/ Windows XP / SP3: Security Update for Windows XP (KB905414)
/ Windows XP / SP3: Security Update for Windows XP (KB905749)
/ Windows XP / SP3: Security Update for Windows XP (KB905915)
/ Windows XP / SP3: Security Update for Windows XP (KB908519)
/ Windows XP / SP3: Security Update for Windows XP (KB908531)
/ Windows XP / SP3: Update for Windows XP (KB910437)
/ Windows XP / SP3: Security Update for Windows XP (KB911280)
/ Windows XP / SP3: Security Update for Windows XP (KB911562)
/ Windows XP / SP3: Security Update for Windows XP (KB911567)
/ Windows XP / SP3: Security Update for Windows XP (KB911927)
/ Windows XP / SP3: Security Update for Windows XP (KB912812)
/ Windows XP / SP3: Security Update for Windows XP (KB912919)
/ Windows XP / SP3: Security Update for Windows XP (KB913446)
/ Windows XP / SP3: Security Update for Windows XP (KB913580)
/ Windows XP / SP3: Security Update for Windows XP (KB914388)
/ Windows XP / SP3: Security Update for Windows XP (KB914389)
/ Windows XP / SP3: Hotfix for Windows XP (KB914440)
/ Windows XP / SP3: Hotfix for Windows XP (KB915865)
/ Windows XP / SP3: Security Update for Windows XP (KB916281)
/ Windows XP / SP3: Update for Windows XP (KB916595)
/ Windows XP / SP3: Security Update for Windows XP (KB917159)
/ Windows XP / SP3: Security Update for Windows XP (KB917344)
/ Windows XP / SP3: Security Update for Windows XP (KB917422)
/ Windows XP / SP3: Security Update for Windows XP (KB917953)
/ Windows XP / SP3: Security Update for Windows XP (KB918118)
/ Windows XP / SP3: Security Update for Windows XP (KB918439)
/ Windows XP / SP3: Security Update for Windows XP (KB918899)
/ Windows XP / SP3: Security Update for Windows XP (KB919007)
/ Windows XP / SP3: Security Update for Windows XP (KB920213)
/ Windows XP / SP3: Security Update for Windows XP (KB920214)
/ Windows XP / SP3: Security Update for Windows XP (KB920670)
/ Windows XP / SP3: Security Update for Windows XP (KB920683)
/ Windows XP / SP3: Security Update for Windows XP (KB920685)
/ Windows XP / SP3: Update for Windows XP (KB920872)
/ Windows XP / SP3: Security Update for Windows XP (KB921398)
/ Windows XP / SP3: Security Update for Windows XP (KB921503)
/ Windows XP / SP3: Security Update for Windows XP (KB921883)
/ Windows XP / SP3: Update for Windows XP (KB922582)
/ Windows XP / SP3: Security Update for Windows XP (KB922616)
/ Windows XP / SP3: Security Update for Windows XP (KB922760)
/ Windows XP / SP3: Security Update for Windows XP (KB922819)
/ Windows XP / SP3: Security Update for Windows XP (KB923191)
/ Windows XP / SP3: Security Update for Windows XP (KB923414)
/ Windows XP / SP3: Security Update for Windows XP (KB923694)
/ Windows XP / SP3: Security Update for Windows XP (KB923980)
/ Windows XP / SP3: Security Update for Windows XP (KB924191)
/ Windows XP / SP3: Security Update for Windows XP (KB924270)
/ Windows XP / SP3: Security Update for Windows XP (KB924496)
/ Windows XP / SP3: Security Update for Windows XP (KB924667)
/ Windows XP / SP3: Security Update for Windows XP (KB925454)
/ Windows XP / SP3: Security Update for Windows XP (KB925486)
/ Windows XP / SP3: Security Update for Windows XP (KB925902)
/ Windows XP / SP3: Security Update for Windows XP (KB926255)
/ Windows XP / SP3: Security Update for Windows XP (KB926436)
/ Windows XP / SP3: Security Update for Windows XP (KB927779)
/ Windows XP / SP3: Security Update for Windows XP (KB927802)
/ Windows XP / SP3: Update for Windows XP (KB927891)
/ Windows XP / SP3: Security Update for Windows XP (KB928255)
/ Windows XP / SP3: Security Update for Windows XP (KB928843)
/ Windows XP / SP3: Security Update for Windows XP (KB929123)
/ Windows XP / SP3: Update for Windows XP (KB929338)
/ Windows XP / SP3: Security Update for Windows XP (KB930178)
/ Windows XP / SP3: Update for Windows XP (KB930916)
/ Windows XP / SP3: Security Update for Windows XP (KB931261)
/ Windows XP / SP3: Security Update for Windows XP (KB931784)
/ Windows XP / SP3: Update for Windows XP (KB931836)
/ Windows XP / SP3: Security Update for Windows XP (KB932168)
/ Windows XP / SP3: Update for Windows XP (KB932823-v3)
/ Windows XP / SP3: Update for Windows XP (KB933360)
/ Windows XP / SP3: Security Update for Windows XP (KB933729)
/ Windows XP / SP3: Security Update for Windows XP (KB935839)
/ Windows XP / SP3: Security Update for Windows XP (KB935840)
/ Windows XP / SP3: Security Update for Windows XP (KB936021)
/ Windows XP / SP3: Update for Windows XP (KB936357)
/ Windows XP / SP3: Update for Windows XP (KB938828)
/ Windows XP / SP3: Security Update for Windows XP (KB938829)
/ Windows XP / SP3: Security Update for Windows XP (KB941202)
/ Windows XP / SP3: Security Update for Windows XP (KB941568)
/ Windows XP / SP3: Security Update for Windows XP (KB941644)
/ Windows XP / SP3: Security Update for Windows XP (KB941693)
/ Windows XP / SP3: Update for Windows XP (KB942763)
/ Windows XP / SP3: Security Update for Windows XP (KB943055)
/ Windows XP / SP3: Security Update for Windows XP (KB943460)
/ Windows XP / SP3: Security Update for Windows XP (KB943485)
/ Windows XP / SP3: Security Update for Windows XP (KB944653)
/ Windows XP / SP3: Security Update for Windows XP (KB945553)
/ Windows XP / SP3: Security Update for Windows XP (KB946026)
/ Windows XP / SP3: Security Update for Windows XP (KB948590)
/ Windows XP / SP3: Security Update for Windows XP (KB948881)
/ Windows XP / SP3: Security Update for Windows XP (KB950749)
/ Windows XP / SP4: Security Update for Windows XP (KB923561)
/ Windows XP / SP4: Security Update for Windows XP (KB938464)
/ Windows XP / SP4: Security Update for Windows XP (KB946648)
/ Windows XP / SP4: Security Update for Windows XP (KB950760)
/ Windows XP / SP4: Security Update for Windows XP (KB950762)
/ Windows XP / SP4: Security Update for Windows XP (KB950974)
/ Windows XP / SP4: Security Update for Windows XP (KB951066)
/ Windows XP / SP4: Update for Windows XP (KB951072-v2)
/ Windows XP / SP4: Security Update for Windows XP (KB951376)
/ Windows XP / SP4: Security Update for Windows XP (KB951376-v2)
/ Windows XP / SP4: Security Update for Windows XP (KB951698)
/ Windows XP / SP4: Security Update for Windows XP (KB951748)
/ Windows XP / SP4: Security Update for Windows XP (KB952004)
/ Windows XP / SP4: Hotfix for Windows XP (KB952287)
/ Windows XP / SP4: Security Update for Windows XP (KB952954)
/ Windows XP / SP4: Security Update for Windows XP (KB953839)
/ Windows XP / SP4: Security Update for Windows XP (KB954211)
/ Windows XP / SP4: Security Update for Windows XP (KB954600)
/ Windows XP / SP4: Security Update for Windows XP (KB955069)
/ Windows XP / SP4: Update for Windows XP (KB955839)
/ Windows XP / SP4: Security Update for Windows XP (KB956391)
/ Windows XP / SP4: Security Update for Windows XP (KB956572)
/ Windows XP / SP4: Security Update for Windows XP (KB956802)
/ Windows XP / SP4: Security Update for Windows XP (KB956803)
/ Windows XP / SP4: Security Update for Windows XP (KB956841)
/ Windows XP / SP4: Security Update for Windows XP (KB957095)
/ Windows XP / SP4: Security Update for Windows XP (KB957097)
/ Windows XP / SP4: Security Update for Windows XP (KB958644)
/ Windows XP / SP4: Security Update for Windows XP (KB958687)
/ Windows XP / SP4: Security Update for Windows XP (KB958690)
/ Windows XP / SP4: Security Update for Windows XP (KB959426)
/ Windows XP / SP4: Security Update for Windows XP (KB960225)
/ Windows XP / SP4: Security Update for Windows XP (KB960715)
/ Windows XP / SP4: Security Update for Windows XP (KB960803)
/ Windows XP / SP4: Security Update for Windows XP (KB961373)
/ Windows XP / SP4: Security Update for Windows XP (KB961501)
/ Windows XP / SP4: Update for Windows XP (KB967715)
/ Windows XP / SP4: Security Update for Windows XP (KB968537)
/ Windows XP / SP4: Security Update for Windows XP (KB969898)
/ Windows XP / SP4: Security Update for Windows XP (KB970238)
--- Startup entries list ---
Located: HK_LM:Run,
command:
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
Located: HK_LM:Run, Adobe Reader Speed Launcher
command: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
file: C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
size: 40048
MD5: 66D4456C920E21BD2188F8CC33680DF5
Located: HK_LM:Run, AOLDialer
command: C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
file: C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
size: 71216
MD5: B9B78F0D9AEBCA8F717680FBABBB5FF4
Located: HK_LM:Run, AVG8_TRAY
command: C:\PROGRA~1\AVG\AVG8\avgtray.exe
file: C:\PROGRA~1\AVG\AVG8\avgtray.exe
size: 1948440
MD5: 2588B441E5B22691E0610CF710865441
Located: HK_LM:Run, dla
command: C:\WINDOWS\system32\dla\tfswctrl.exe
file: C:\WINDOWS\system32\dla\tfswctrl.exe
size: 122933
MD5: 55877AB1F65A512FD317B640D9353DC5
Located: HK_LM:Run, DVDLauncher
command: "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
file: C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
size: 53248
MD5: 6A66B6A314F6EF30CD1CF82A17DAAD52
Located: HK_LM:Run, HostManager
command: C:\Program Files\Common Files\AOL\1102880411\ee\AOLSoftware.exe
file: C:\Program Files\Common Files\AOL\1102880411\ee\AOLSoftware.exe
size: 50736
MD5: C482C535CBFEFE722EC1EB7F11F680A3
Located: HK_LM:Run, HotKeysCmds
command: C:\WINDOWS\system32\hkcmd.exe
file: C:\WINDOWS\system32\hkcmd.exe
size: 126976
MD5: E4CF942A4AEA9D27C87F190F65E7D0F6
Located: HK_LM:Run, HP Component Manager
command: "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
file: C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
size: 241664
MD5: B75B654EE1DA99876461B24597AE3FF3
Located: HK_LM:Run, HP Software Update
command: "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
file: C:\Program Files\HP\HP Software Update\HPWuSchd.exe
size: 49152
MD5: 4FEA5B94C6A96860620A62E4A19BD07D
Located: HK_LM:Run, IgfxTray
command: C:\WINDOWS\system32\igfxtray.exe
file: C:\WINDOWS\system32\igfxtray.exe
size: 155648
MD5: 093D3EE722542BA2E7AD929AA3CA6ABC
Located: HK_LM:Run, IntelMeM
command: C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
file: C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
size: 221184
MD5: BC02E491E88492B02363CE1B384FF7A7
Located: HK_LM:Run, KernelFaultCheck
command: %systemroot%\system32\dumprep 0 -k
file: C:\WINDOWS\system32\dumprep 0 -k
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
Located: HK_LM:Run, mmtask
command: c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
file: c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
size: 53248
MD5: 7BB1F7AC7EEA100496C02BFC94317652
Located: HK_LM:Run, Motive SmartBridge
command: C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
file: C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
size: 385024
MD5: 144F76F8F1C2D985B25DD59D9BD775C7
Located: HK_LM:Run, QuickTime Task
command: "C:\Program Files\QuickTime\qttask.exe" -atboottime
file: C:\Program Files\QuickTime\qttask.exe
size: 282624
MD5: 383145864F6543C97A7E1B78505D2F1C
Located: HK_LM:Run, SunJavaUpdateSched
command: "C:\Program Files\Java\jre6\bin\jusched.exe"
file: C:\Program Files\Java\jre6\bin\jusched.exe
size: 148888
MD5: A2D390F1F2408B94EF34BFE3A00C29D3
Located: HK_LM:Run, TkBellExe
command: "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
file: C:\Program Files\Common Files\Real\Update_OB\realsched.exe
size: 180269
MD5: B8E684DF9A97497EDD2F87444A6307FB
Located: HK_LM:Run, UpdateManager
command: "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
file: C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
size: 110592
MD5: 22FD4E58D69969A9165721C797D54931
Located: HK_CU:Run, Aim6
where: S-1-5-21-320522354-3583955949-1473644045-1007...
command:
file:
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
Located: HK_CU:Run, ctfmon.exe
where: S-1-5-21-320522354-3583955949-1473644045-1007...
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 24232996A38C0B0CF151C2140AE29FC8
Located: HK_CU:Run, PlaxoSysTray
where: S-1-5-21-320522354-3583955949-1473644045-1007...
command: C:\Program Files\Plaxo\3.19.0.16\PlaxoSysTray.exe
file: C:\Program Files\Plaxo\3.19.0.16\PlaxoSysTray.exe
size: 20480
MD5: 37D516E5F2903A12447897729D8BF4C7
Located: HK_CU:Run, PlaxoUpdate
where: S-1-5-21-320522354-3583955949-1473644045-1007...
command: C:\Program Files\Plaxo\3.19.0.16\PlaxoHelper_en.exe -a
file: C:\Program Files\Plaxo\3.19.0.16\PlaxoHelper_en.exe
size: 371271
MD5: C0A6A6019275102F0FD8C982DCF63FF5
Located: Startup (common), America Online 9.0 Tray Icon.lnk
where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\Program Files\America Online 9.0\aoltray.exe
file: C:\Program Files\America Online 9.0\aoltray.exe
size: 36954
MD5: 5F1272F5C6DE24CEA4F736859A9A55D1
Located: Startup (common), Broadband Support Center.lnk
where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\Program Files\Verizon Online\Support Center\bin\matcli.exe
file: C:\Program Files\Verizon Online\Support Center\bin\matcli.exe
size: 217088
MD5: 96610108433EC2F885672AB0F32A0466
Located: Startup (common), CallWave.lnk
where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\Program Files\CallWave\IAM.exe
file: C:\Program Files\CallWave\IAM.exe
size: 1940544
MD5: B20B055D6E20D8792A0BE198290AAE27
Located: Startup (common), HP Digital Imaging Monitor.lnk
where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
file: C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
size: 237568
MD5: DA6B945E561B1D1DA67663BB45B4B868
Located: Startup (common), Run Nintendo Wi-Fi USB Connector Registration Tool.lnk
where: C:\Documents and Settings\All Users\Start Menu\Programs\Startup...
command: C:\Program Files\WiFiConnector\NintendoWFCReg.exe
file: C:\Program Files\WiFiConnector\NintendoWFCReg.exe
size: 1073152
MD5: D7C790E71496E3EFC58247231F914784
Located: Startup (user), ERUNT AutoBackup.lnk
where: C:\Documents and Settings\Janet Jennings\Start Menu\Programs\Startup...
command: C:\Program Files\ERUNT\AUTOBACK.EXE
file: C:\Program Files\ERUNT\AUTOBACK.EXE
size: 38912
MD5: E00DE20F0F6BED5CD2160247DDC9443B
Located: Startup (user), OpenOffice.org 2.0.lnk
where: C:\Documents and Settings\Janet Jennings\Start Menu\Programs\Startup...
command: C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
file: C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
Located: Startup (user), OpenOffice.org 3.0.lnk
where: C:\Documents and Settings\Janet Jennings\Start Menu\Programs\Startup...
command: C:\Program Files\OpenOffice.org 3\program\quickstart.exe
file: C:\Program Files\OpenOffice.org 3\program\quickstart.exe
size: 384000
MD5: 9C8D9866C818AC54B71BE86B3193A1A3
Located: WinLogon, avgrsstarter
command: avgrsstx.dll
file: avgrsstx.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
Located: WinLogon, crypt32chain
command: crypt32.dll
file: crypt32.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
Located: WinLogon, cryptnet
command: cryptnet.dll
file: cryptnet.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
Located: WinLogon, cscdll
command: cscdll.dll
file: cscdll.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
Located: WinLogon, igfxcui
command: igfxsrvc.dll
file: igfxsrvc.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
Located: WinLogon, ScCertProp
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
Located: WinLogon, Schedule
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
Located: WinLogon, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
Located: WinLogon, SensLogn
command: WlNotify.dll
file: WlNotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
Located: WinLogon, termsrv
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
Located: WinLogon, WgaLogon
command: WgaLogon.dll
file: WgaLogon.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
Located: WinLogon, wlballoon
command: wlnotify.dll
file: wlnotify.dll
size: 0
MD5: D41D8CD98F00B204E9800998ECF8427E
Warning: if the file is actually larger than 0 bytes,
the checksum could not be properly calculated!
--- Browser helper object list ---
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (Adobe PDF Reader Link Helper)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Adobe PDF Reader Link Helper
description: Adobe Acrobat reader
classification: Legitimate
known filename: AcroIEhelper.ocx<br>AcroIEhelper.dll
info link: http://www.adobe.com/products/acrobat/readstep2.html
info source: TonyKlein
Path: C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\
Long name: AcroIEHelper.dll
Short name: ACROIE~1.DLL
Date (created): 10/22/2006 11:08:42 PM
Date (last access): 6/26/2009 3:08:58 PM
Date (last write): 10/22/2006 11:08:42 PM
Filesize: 62080
Attributes: archive
MD5: C11F6A1F61481E24BE3FDC06EA6F7D2A
CRC32: E388508F
Version: 8.0.0.456
{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} (WormRadar.com IESiteBlocker.NavFilter)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name: WormRadar.com IESiteBlocker.NavFilter
CLSID name: AVG Safe Search
Path: C:\Program Files\AVG\AVG8\
Long name: avgssie.dll
Short name:
Date (created): 6/26/2009 6:43:12 AM
Date (last access): 6/26/2009 2:34:42 PM
Date (last write): 6/26/2009 6:43:12 AM
Filesize: 1107224
Attributes: archive
MD5: 0E973A31F29162137959DBD4B07D38C9
CRC32: 03627923
Version: 8.5.0.310
{5CA3D70E-1895-11CF-8E15-001234567890} (DriveLetterAccess)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: DriveLetterAccess
description: Hewlett-Packard's DLA software
classification: Unknown
known filename: tfswshx.dll
info link:
info source: TonyKlein
Path: C:\WINDOWS\system32\dla\
Long name: tfswshx.dll
Short name:
Date (created): 10/9/2004 9:31:36 AM
Date (last access): 6/26/2009 2:08:26 PM
Date (last write): 3/15/2004 1:04:00 AM
Filesize: 118836
Attributes: archive
MD5: 3A79721C9ACC30CBA57266854C20238B
CRC32: 6FCEA787
Version: 1.4.7.1
{A3BC75A2-1F87-4686-AA43-5347D756017C} (AVG Security Toolbar BHO)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: AVG Security Toolbar BHO
Path: C:\Program Files\AVG\AVG8\Toolbar\
Long name: IEToolbar.dll
Short name: IETOOL~1.DLL
Date (created): 6/26/2009 6:46:54 AM
Date (last access): 6/26/2009 2:18:54 PM
Date (last write): 6/14/2009 4:07:58 PM
Filesize: 1004800
Attributes: archive
MD5: 33C6E577E8C9B1FACD451E12D5A27BDD
CRC32: 943234A1
Version: 2.506.14.1
{AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Google Toolbar Helper
description: Google toolbar
classification: Open for discussion
known filename: googletoolbar.dll<br>googletoolbar*.dll<br>(* = number)<br>googletoolbar_en_*.**-big.dll<br>Googletoolbar_en_*.*.**-deleon.dll
info link: http://toolbar.google.com/
info source: TonyKlein
Path: c:\program files\google\
Long name: GoogleToolbar1.dll
Short name: GOOGLE~2.DLL
Date (created): 11/13/2007 1:36:34 PM
Date (last access): 6/26/2009 2:08:32 PM
Date (last write): 11/13/2007 1:36:34 PM
Filesize: 2554944
Attributes: readonly archive
MD5: C898A8FC22C86857A58147351A534D5C
CRC32: 45F483F8
Version: 4.0.1602.1060
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Google Toolbar Notifier BHO
Path: C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\
Long name: swg.dll
Short name:
Date (created): 3/24/2009 3:01:46 PM
Date (last access): 6/26/2009 2:08:38 PM
Date (last write): 3/24/2009 3:01:46 PM
Filesize: 668656
Attributes: archive
MD5: D1585B06DED161E13B905DC4FFBF7F12
CRC32: 88D5BAA5
Version: 5.1.1309.3572
{DBC80044-A445-435b-BC74-9C25C1C588A9} (Java(tm) Plug-In 2 SSV Helper)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name:
CLSID name: Java(tm) Plug-In 2 SSV Helper
Path: C:\Program Files\Java\jre6\bin\
Long name: jp2ssv.dll
Short name:
Date (created): 1/18/2009 1:14:32 AM
Date (last access): 6/26/2009 3:36:12 PM
Date (last write): 3/9/2009 5:18:50 AM
Filesize: 35840
Attributes: archive
MD5: 96A225C7F5346A9E81FC3DFA89A900C0
CRC32: BAD5D2EF
Version: 6.0.130.3
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} (JQSIEStartDetectorImpl)
location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
BHO name: JQSIEStartDetectorImpl
CLSID name: JQSIEStartDetectorImpl Class
Path: C:\Program Files\Java\jre6\lib\deploy\jqs\ie\
Long name: jqs_plugin.dll
Short name: JQS_PL~1.DLL
Date (created): 1/18/2009 1:14:44 AM
Date (last access): 6/26/2009 3:09:00 PM
Date (last write): 3/9/2009 5:18:52 AM
Filesize: 73728
Attributes: archive
MD5: 53F8B53918C839F76367B7E612B742B1
CRC32: 735F7F91
Version: 6.0.130.3
--- ActiveX list ---
6th Street Omaha Poker by pogo (6th Street Omaha Poker by pogo)
DPF name: 6th Street Omaha Poker by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.6.4.21/omaha/omaha-en_US.cab
Aces Up! by pogo (Aces Up! by pogo)
DPF name: Aces Up! by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.0.61/aces/aces-en_US.cab
Ali Baba Slots TM by pogo (Ali Baba Slots TM by pogo)
DPF name: Ali Baba Slots TM by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.8.3.35/slots/alibaba-en_US.cab
Backgammon by pogo (Backgammon by pogo)
DPF name: Backgammon by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.6.5.22/backgammon/backgammon-en_US.cab
Blackjack by pogo (Blackjack by pogo)
DPF name: Blackjack by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.8.4.51/blackjack/blackjack-en_US.cab
Blackjack Carnival by pogo (Blackjack Carnival by pogo)
DPF name: Blackjack Carnival by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.8.1.38/vbjack2/vbjack2-en_US.cab
Blooop by pogo (Blooop by pogo)
DPF name: Blooop by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.4.41/cascade/cascade-en_US.cab
Bowling by pogo (Bowling by pogo)
DPF name: Bowling by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.8.2.23/bowling/bowling-en_US.cab
Canasta by pogo (Canasta by pogo)
DPF name: Canasta by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.0.61/canasta/canasta-en_US.cab
Checkers by pogo (Checkers by pogo)
DPF name: Checkers by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.4.34/checkers2/checkers-en_US.cab
Chess by pogo (Chess by pogo)
DPF name: Chess by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.8.0.32/chess2/chess2-en_US.cab
Dice City Roller by pogo (Dice City Roller by pogo)
DPF name: Dice City Roller by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.2.40/ytz/ytz-en_US.cab
Dice Derby by pogo (Dice Derby by pogo)
DPF name: Dice Derby by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.6.2.21/checkeredflag/checkeredflag-en_US.cab
Dominoes by pogo (Dominoes by pogo)
DPF name: Dominoes by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.1.38/domino/domino-en_US.cab
Euchre by pogo (Euchre by pogo)
DPF name: Euchre by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.7.2.24/euchre/euchre-en_US.cab
First Class Solitaire by pogo (First Class Solitaire by pogo)
DPF name: First Class Solitaire by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.3.39/firstclass2/firstclass2-en_US.cab
Fortune Bingo by pogo (Fortune Bingo by pogo)
DPF name: Fortune Bingo by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.3.29/superbingo/superbingo-en_US.cab
Greenback Bayou by pogo (Greenback Bayou by pogo)
DPF name: Greenback Bayou by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.5.0.45/greenback/greenback-ob-assets.cab
Hangman Hijinks by pogo (Hangman Hijinks by pogo)
DPF name: Hangman Hijinks by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.3.39/hangman/hangman-en_US.cab
Harvest Mania by pogo (Harvest Mania by pogo)
DPF name: Harvest Mania by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.8.2.23/harvest/harvest-en_US.cab
Hearts by pogo (Hearts by pogo)
DPF name: Hearts by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.2.33/hearts/hearts-en_US.cab
High Stakes Poker by pogo (High Stakes Poker by pogo)
DPF name: High Stakes Poker by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.8.4.51/drawpoker/drawpoker-en_US.cab
High Stakes Pool by pogo (High Stakes Pool by pogo)
DPF name: High Stakes Pool by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.7.3.23/pool2/pool-en_US.cab
Hog Heaven Slots by pogo (Hog Heaven Slots by pogo)
DPF name: Hog Heaven Slots by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.1.38/fancy/fancy-en_US.cab
Jungle Gin by pogo (Jungle Gin by pogo)
DPF name: Jungle Gin by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.0.43/gin2/gin2-en_US.cab
Lost Temple Poker by pogo (Lost Temple Poker by pogo)
DPF name: Lost Temple Poker by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.7.5.28/mhpoker/mhpoker-en_US.cab
Lottso by pogo (Lottso by pogo)
DPF name: Lottso by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.8.4.51/lottso/lottso-en_US.cab
Mah Jong Garden by pogo (Mah Jong Garden by pogo)
DPF name: Mah Jong Garden by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.4.34/mahjong2/mahjong2-en_US.cab
Microsoft XML Parser for Java (Microsoft XML Parser for Java)
DPF name: Microsoft XML Parser for Java
CLSID name:
Installer:
Codebase: file://C:\WINDOWS\Java\classes\xmldso.cab
description:
classification: Legitimate
known filename: %WINDIR%\Java\classes\xmldso.cab
info link:
info source: Patrick M. Kolla
Multiline Slots by pogo (Multiline Slots by pogo)
DPF name: Multiline Slots by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.7.1.33/mlslots/mlslots-en_US.cab
Pai Gow by pogo (Pai Gow by pogo)
DPF name: Pai Gow by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.0.43/paigow/paigow-en_US.cab
Payday FreeCell by pogo (Payday FreeCell by pogo)
DPF name: Payday FreeCell by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.0.43/freecell/freecell-en_US.cab
Payday Freecell Solitaire by pogo (Payday Freecell Solitaire by pogo)
DPF name: Payday Freecell Solitaire by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.4.41/freecell2/freecell2-en_US.cab
Penguin Blocks by pogo (Penguin Blocks by pogo)
DPF name: Penguin Blocks by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.8.0.25/penguins/penguins-en_US.cab
Perfect Pair Solitaire by pogo (Perfect Pair Solitaire by pogo)
DPF name: Perfect Pair Solitaire by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.1.32/waterwheel/waterwheel-en_US.cab
Phlinx by pogo (Phlinx by pogo)
DPF name: Phlinx by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.8.3.22/flinger/flinger-en_US.cab
Pinochle by pogo (Pinochle by pogo)
DPF name: Pinochle by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.6.3.34/pinochle/pinochle-en_US.cab
Pop Fu by pogo (Pop Fu by pogo)
DPF name: Pop Fu by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.3.49/popfu/popfu-en_US.cab
PoppaZoppa by pogo (PoppaZoppa by pogo)
DPF name: PoppaZoppa by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.1.32/poppazoppa/poppazoppa-en_US.cab
Poppit by pogo (Poppit by pogo)
DPF name: Poppit by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.4.34/poppit2/poppit2-en_US.cab
Quick Quack by pogo (Quick Quack by pogo)
DPF name: Quick Quack by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.7.4.35/hotstreak/hotstreak-en_US.cab
QWERTY by pogo (QWERTY by pogo)
DPF name: QWERTY by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.2.33/squares/squares-en_US.cab
Ride The Tide by pogo (Ride The Tide by pogo)
DPF name: Ride The Tide by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.5.3.44/ride/ride-en_US.cab
SciFi Slots by pogo (SciFi Slots by pogo)
DPF name: SciFi Slots by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.4.34/slots/scifi-en_US.cab
Showbiz Slots 2 by pogo (Showbiz Slots 2 by pogo)
DPF name: Showbiz Slots 2 by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.4.34/slots/showbiz2-en_US.cab
Showbiz Slots by pogo (Showbiz Slots by pogo)
DPF name: Showbiz Slots by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.8.2.23/slots/showbiz-en_US.cab
Shuffle Bump by pogo (Shuffle Bump by pogo)
DPF name: Shuffle Bump by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.8.3.22/puck/puck-en_US.cab
Spades 2 by pogo (Spades 2 by pogo)
DPF name: Spades 2 by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.7.1.23/spades2/spades2-en_US.cab
Spades by pogo (Spades by pogo)
DPF name: Spades by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.5.3.37/spades/spades-en_US.cab
Spider Solitaire by pogo (Spider Solitaire by pogo)
DPF name: Spider Solitaire by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.2.40/spider/spider-en_US.cab
Squelchies by pogo (Squelchies by pogo)
DPF name: Squelchies by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.0.43/squelchies/squelchies-en_US.cab
Stax by pogo (Stax by pogo)
DPF name: Stax by pogo
CLSID name:
Installer:
Codebase: http://game1.pogo.com/applet-6.9.2.33/stax/stax-en_US.cab