Cannot connect to Amazon.com
My issue is the same as another user. Found here: http://forums.spybot.info/archive/index.php/t-9855.html
I cannot connect to Amazon.com on my computer. I can reach every other site I try and my other computer on the same router can access Amazon.com.
Netscape gives error: "Redirection limit for this URL exceeded. Unable to load requested page. This may be caused by cokkies that are blocked" and IE7.0 just shows, "Internet Explorer cannot display the website."
Here is my HJT log:
Logfile of HijackThis v1.99.1
Scan saved at 7:26:58 PM, on 2/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv4.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\ehome\ehtray.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Multimedia Card Reader\shwicon2k.exe
C:\WINDOWS\ehome\ehmsas.exe
C:\PROGRA~1\Lexmark\PHOTOC~1\LXBLKsk.exe
C:\Program Files\Lexmark\Lexmark Photo Center\MemoryCardManager.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\System32\hphmon05.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\InfoMyCa.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\MUSICM~1\MUSICM~1\MMDiag.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\AOL\1155313205\ee\AOLSoftware.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mim.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Microsoft Broadband Networking\MSBNTray.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\Program Files\Netscape\Netscape Browser\netscape.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\temp\hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.randyxboy.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [AutoTKit] C:\hp\bin\AUTOTKIT.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
O4 - HKLM\..\Run: [LXBLKsk] C:\PROGRA~1\Lexmark\PHOTOC~1\LXBLKsk.exe
O4 - HKLM\..\Run: [MemoryCardManager] C:\Program Files\Lexmark\Lexmark Photo Center\MemoryCardManager.exe -startup
O4 - HKLM\..\Run: [zzzHPSETUP] E:\Setup.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{D946675D-1D6C-4dc8-9E0D-B4B8EAA30EAA}\hphupd05.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [OifBxd] C:\WINDOWS\jvqfx.exe
O4 - HKLM\..\Run: [WUSB54Gv4] C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\InvokeSvc3.exe
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1155313205\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [Pure Networks Port Magic] "C:\PROGRA~1\PURENE~1\PORTMA~1\PortAOL.exe" -Run
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe"
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\HP\Digital Imaging\bin\backupnotify.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [actxy.exe] C:\Documents and Settings\Administrator\Application Data\System Restore\actxy.exe
O4 - Global Startup: DataViz Inc Messenger.lnk = C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe
O4 - Global Startup: HOTSYNCSHORTCUTNAME.lnk = C:\Palm\Hotsync.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Broadband Networking.lnk = ?
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Gmail Image Viewer - C:\Program Files\Gmail Image Viewer\gmailimageviewer.html
O8 - Extra context menu item: Ima&ges liées - C:\Program Files\IEimageS\IEimageS.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: SWF To Video Scout - {C72B2095-91A8-439F-93E8-BDA1363DCD8B} - C:\Program Files\SWF To Video Scout\flashextract.exe
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Images liées - {D8980DE8-9D4C-4fb0-8FB4-95B1FA4125AD} - C:\Program Files\IEimageS\IEimageS.htm
O9 - Extra 'Tools' menuitem: Ima&ges liées - {D8980DE8-9D4C-4fb0-8FB4-95B1FA4125AD} - C:\Program Files\IEimageS\IEimageS.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\neoteris\secure application manager\gapsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\neoteris\secure application manager\gapsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\neoteris\secure application manager\gapsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\neoteris\secure application manager\gapsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\neoteris\secure application manager\gapsp.dll
O15 - Trusted Zone: http://www.amazon.com
O15 - Trusted Zone: http://*.windowsupdate.microsoft.com
O15 - Trusted Zone: www.randyxboy.com
O15 - Trusted Zone: http://*.windowsupdate.com
O16 - DPF: {13EC55CF-D993-475B-9ACA-F4A384957956} (Controller Class) - https://www.windowsonecare.com/insta...SSWebAgent.CAB
O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) - http://h20270.www2.hp.com/ediags/gmn...taller_gmn.cab
O16 - DPF: {26098EA2-C95D-48EA-89B4-63C5A63BD42F} - http://www.pacimedia.com/install/pcs_0031.exe
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photos.walmart.com/WalmartActivia.cab
O16 - DPF: {4AD73894-A895-4FC2-B233-299867E08753} - http://apps.deskwizz.com/ax/adwerkz.cab
O16 - DPF: {4CC35DAD-40EA-4640-ACC2-A1A3B6FB3E06} (NeoterisSetup Control) - https://ac4.anthem.com/dana-cached/s...terisSetup.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - https://scan.safety.live.com/resourc...scbase3401.cab
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.ofoto.com/downloads/BUM/B...1/axofupld.cab
O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} - http://yax-download.yazzle.net/Yazzl...cab?refid=1162
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/40...2/cpbrkpie.cab
O16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} (FujifilmUploader Class) - http://photo.walmart.com/photo/uploa...loadClient.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yaho...tocomplete.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/game...ploader_v6.cab
O16 - DPF: {E292EFB0-EE32-11D1-8C74-0000C0B0E2E9} (RptViewerAX Class) - http://webi.corp.anthem.com/wi/ActiveX/RptViewerEN.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0AF8C2CE-1EC6-4CF0-9E3B-98BB3F39FD23}: NameServer = 85.255.113.204,85.255.112.216
O17 - HKLM\System\CCS\Services\Tcpip\..\{2EABA827-265A-4AE5-B4C1-22B2EEFBA918}: NameServer = 85.255.113.204,85.255.112.216
O17 - HKLM\System\CCS\Services\Tcpip\..\{5F1476F1-9B0B-4B98-BF0E-0300D4F07FF6}: NameServer = 85.255.113.204,85.255.112.216
O17 - HKLM\System\CCS\Services\Tcpip\..\{602CFACC-2E71-48BC-A6EC-10E37EA70524}: NameServer = 85.255.113.204,85.255.112.216
O17 - HKLM\System\CCS\Services\Tcpip\..\{78278AD7-F97B-4792-9543-75640D560611}: NameServer = 85.255.113.204,85.255.112.216
O17 - HKLM\System\CCS\Services\Tcpip\..\{D4AF70DB-B6E9-4AFE-AA73-4ABB46EC7860}: NameServer = 85.255.113.204,85.255.112.216
O17 - HKLM\System\CCS\Services\Tcpip\..\{DFC751CC-85E5-47EC-AE22-B06784B69F27}: NameServer = 85.255.113.204,85.255.112.216
O17 - HKLM\System\CCS\Services\Tcpip\..\{E8A141C7-3939-4BA3-9BCF-CB94210372F8}: NameServer = 85.255.113.204,85.255.112.216
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: WUSB54Gv4SVC - Unknown owner - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe" "WUSB54Gv4.exe (file missing)
I downloaded Fixware and ran it. Here is my fixware report:
Fixwareout
Last edited 1/30/2007
Post this report in the forums please
...
Prerun check
»»»»» HKLM run and Winlogon System values
»»»»» System restarted
Reg Entries that were deleted
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls "repiwoh"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls "ypszr"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls "daolnwodi"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls "putesprpgd"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls "lavinraCputeS"
...
Random Runs removed from HKLM
...
C:\WINDOWS\System32\setupcarnival.exe Deleted
»»»»» Misc files.
»»»»» Checking for older varients.
»»»»» Postrun check
»»»»» HKLM run
»»»»» Winlogon System value
"System"=""
»»»»»
PLEASE NOTE, There CAN be LEGITIMATE FILES LISTED IN THIS SECTION.
This WILL/CAN also list Legit Files, Submit them at Virustotal
Search five digit cs, dm kd and jb files.
»»»»»
»»»»» Current runs
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\\WINDOWS\\ehome\\ehtray.exe"
"hpsysdrv"="c:\\windows\\system\\hpsysdrv.exe"
"HotKeysCmds"="C:\\WINDOWS\\System32\\hkcmd.exe"
"CamMonitor"="c:\\Program Files\\HP\\Digital Imaging\\Unload\\hpqcmon.exe"
"AutoTKit"="C:\\hp\\bin\\AUTOTKIT.EXE"
"Recguard"="C:\\WINDOWS\\SMINST\\RECGUARD.EXE"
"ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"
"Sunkist2k"="C:\\Program Files\\Multimedia Card Reader\\shwicon2k.exe"
"LXBLKsk"="C:\\PROGRA~1\\Lexmark\\PHOTOC~1\\LXBLKsk.exe"
"MemoryCardManager"="C:\\Program Files\\Lexmark\\Lexmark Photo Center\\MemoryCardManager.exe -startup"
"zzzHPSETUP"="E:\\Setup.exe"
"HPDJ Taskbar Utility"="C:\\WINDOWS\\System32\\spool\\drivers\\w32x86\\3\\hpztsb09.exe"
"HPHUPD05"="C:\\Program Files\\Hewlett-Packard\\{D946675D-1D6C-4dc8-9E0D-B4B8EAA30EAA}\\hphupd05.exe"
"HP Component Manager"="\"C:\\Program Files\\HP\\hpcoretech\\hpcmpmgr.exe\""
"HPHmon05"="C:\\WINDOWS\\System32\\hphmon05.exe"
"AOLDialer"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"
"AlcxMonitor"="ALCXMNTR.EXE"
"OifBxd"="C:\\WINDOWS\\jvqfx.exe"
"WUSB54Gv4"="C:\\Program Files\\Linksys Wireless-G USB Wireless Network Monitor\\InvokeSvc3.exe"
"MimBoot"="C:\\PROGRA~1\\MUSICM~1\\MUSICM~1\\mimboot.exe"
"UserFaultCheck"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,65,\
6d,33,32,5c,64,75,6d,70,72,65,70,20,30,20,2d,75,00
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_10\\bin\\jusched.exe\""
"AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgcc.exe /STARTUP"
"HP Software Update"="C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe"
"HostManager"="C:\\Program Files\\Common Files\\AOL\\1155313205\\ee\\AOLSoftware.exe"
"Pure Networks Port Magic"="\"C:\\PROGRA~1\\PURENE~1\\PORTMA~1\\PortAOL.exe\" -Run"
"KernelFaultCheck"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,\
65,6d,33,32,5c,64,75,6d,70,72,65,70,20,30,20,2d,6b,00
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"eTrustPPAP"="\"C:\\Program Files\\CA\\eTrust Internet Security Suite\\eTrust PestPatrol Anti-Spyware\\PPActiveDetection.exe\""
"KBD"="C:\\HP\\KBD\\KBD.EXE"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"BackupNotify"="c:\\Program Files\\HP\\Digital Imaging\\bin\\backupnotify.exe"
"Yahoo! Pager"="\"C:\\PROGRA~1\\Yahoo!\\MESSEN~1\\YAHOOM~1.EXE\" -quiet"
"actxy.exe"="C:\\Documents and Settings\\Administrator\\Application Data\\System Restore\\actxy.exe"
"Aim6"=""
Hosts file was reset, If you use a custom hosts file please replace it
AVG Anti-Spyware Report - Part 1
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------
+ Created at: 7:12:40 AM 2/13/2007
+ Scan result:
C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll -> Adware.Aws : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{38619354-A30C-4AA1-999E-C6E4474B633E}\RP156\A0030255.exe -> Adware.Casino : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{38619354-A30C-4AA1-999E-C6E4474B633E}\RP156\A0030342.ocx -> Adware.Coupons : Cleaned with backup (quarantined).
C:\Program Files\Picasa\pinstall.dll -> Adware.LookMe : Cleaned with backup (quarantined).
C:\Program Files\NetPumper\ZM\NP_0031_1.exe -> Adware.Lop : Cleaned with backup (quarantined).
C:\Program Files\NetPumper\ZM\minime.exe -> Adware.Lop : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{38619354-A30C-4AA1-999E-C6E4474B633E}\RP144\A0023831.exe -> Adware.VB : Cleaned with backup (quarantined).
C:\Program Files\Yahoo!\Messenger\ycomp.dll -> Adware.Yahoo : Cleaned with backup (quarantined).
C:\Documents and Settings\Default User\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\arch10213.jar-71d8e3fb-6af5ccf1.zip/Colors.class -> Downloader.OpenStream.b : Cleaned with backup (quarantined).
C:\temp\hijackthis\backups\backup-20060415-075447-755.dll -> Downloader.Zlob.ly : Cleaned with backup (quarantined).
C:\download\programs\fff-crack.exe -> Logger.Banker.zn : Cleaned with backup (quarantined).
C:\Documents and Settings\Default User\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-5157872c-6fb457b8.zip/Gummy.class -> Not-A-Virus.Exploit.ByteVerify : Cleaned with backup (quarantined).
C:\download\programs\vcr\StreamBox VCR 1.0 Beta 3.1 Stealth Mulder Fix\fr_svcr1b31smf_crack.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Cleaned with backup (quarantined).
C:\download\programs\vcr\StreamBoxVCR1.0Beta3.1StealthMulderFix.zip/StreamBox VCR 1.0 Beta 3.1 Stealth Mulder Fix/fr_svcr1b31smf_crack.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Cleaned with backup (quarantined).
C:\download\programs\vcr\fr_svcr1b31_crack.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Cleaned with backup (quarantined).
C:\download\programs\vcr\fr_svcr1b31_crack.zip/fr_svcr1b31_crack.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Cleaned with backup (quarantined).
C:\Documents and Settings\Default User\Cookies\administrator@abetterinternet[2].txt -> TrackingCookie.Abetterinternet : Cleaned.
:mozilla.181:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Admarketplace : Cleaned.
:mozilla.106:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.107:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.108:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.109:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.136:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.137:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.138:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.139:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.140:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.141:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.142:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.143:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.144:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.145:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.146:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.147:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.148:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.149:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.150:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.151:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.152:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.153:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.154:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.155:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.156:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.157:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.158:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.159:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.160:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.161:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.162:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.163:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.164:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.165:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.166:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.167:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.168:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.169:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.170:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.171:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.172:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.74:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.75:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
C:\Documents and Settings\Default User\Cookies\administrator@www.burstbeacon[1].txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.115:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.116:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.117:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.118:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.217:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Clickagents : Cleaned.
:mozilla.218:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Clickagents : Cleaned.
:mozilla.219:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Clickagents : Cleaned.
:mozilla.220:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Clickagents : Cleaned.
:mozilla.221:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Clickagents : Cleaned.
:mozilla.222:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Clickagents : Cleaned.
C:\Documents and Settings\Default User\Cookies\administrator@cz3.clickzs[1].txt -> TrackingCookie.Clickzs : Cleaned.
C:\Documents and Settings\Default User\Cookies\administrator@cz7.clickzs[2].txt -> TrackingCookie.Clickzs : Cleaned.
C:\Documents and Settings\Default User\Cookies\administrator@com[1].txt -> TrackingCookie.Com : Cleaned.
C:\Documents and Settings\Default User\Cookies\administrator@download.com[1].txt -> TrackingCookie.Com : Cleaned.
:mozilla.63:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.79:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.80:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.81:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.82:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.100:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.101:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.102:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.103:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.104:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.105:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.206:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.207:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.208:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.203:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Hypertracker : Cleaned.
C:\Documents and Settings\Default User\Cookies\administrator@linkbuddies[1].txt -> TrackingCookie.Linkbuddies : Cleaned.
C:\Documents and Settings\Default User\Cookies\administrator@image.masterstats[1].txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.198:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt ->
AVG Anti-Spyware Report - Part 2
TrackingCookie.Mediaplex : Cleaned.
:mozilla.31:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.32:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.33:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.34:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.35:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.36:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.37:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.38:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.39:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.40:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.41:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.42:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.43:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.44:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.45:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.46:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.47:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.48:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.49:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.50:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.51:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.52:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.53:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.54:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.55:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.56:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.57:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.58:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned.
:mozilla.18:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Realcastmedia : Cleaned.
:mozilla.19:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Realcastmedia : Cleaned.
:mozilla.20:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Realcastmedia : Cleaned.
:mozilla.21:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Realcastmedia : Cleaned.
:mozilla.22:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Realcastmedia : Cleaned.
:mozilla.23:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Realcastmedia : Cleaned.
C:\Documents and Settings\Default User\Cookies\administrator@www.realcastmedia[2].txt -> TrackingCookie.Realcastmedia : Cleaned.
:mozilla.76:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.77:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.78:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.229:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.230:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.231:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
C:\Documents and Settings\Default User\Cookies\administrator@specificpop[1].txt -> TrackingCookie.Specificpop : Cleaned.
:mozilla.96:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.70:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned.
:mozilla.71:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned.
:mozilla.72:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned.
:mozilla.73:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned.
:mozilla.11:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.12:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.13:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.14:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.15:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.182:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.183:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.184:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.185:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.186:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.187:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.188:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.189:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.190:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.191:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.192:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.92:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.93:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
C:\Documents and Settings\Default User\Cookies\administrator@server1.web-stat[1].txt -> TrackingCookie.Web-stat : Cleaned.
C:\Documents and Settings\Default User\Cookies\administrator@yadro[2].txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.16:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.17:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.28:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.29:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.30:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.65:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.66:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.67:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.68:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.69:C:\Documents and Settings\Administrator\Application Data\Netscape\NSAE\Profiles\2yedyyv7.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
C:\Documents and Settings\Default User\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\arch10213.jar-71d8e3fb-6af5ccf1.zip/RunString.class -> Trojan.ClassLoader.d : Cleaned with backup (quarantined).
C:\Documents and Settings\Default User\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\arch27063.jar-7c0151ae-472918c8.zip/RunString.class -> Trojan.ClassLoader.d : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{38619354-A30C-4AA1-999E-C6E4474B633E}\RP143\A0023755.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{38619354-A30C-4AA1-999E-C6E4474B633E}\RP156\A0030341.exe -> Trojan.Small : Cleaned with backup (quarantined).
::Report end
Kaspersky Online Scanner Report
I have removed all the lines showing "Object is locked" and items from Norton Antivirus Quarantine to conserve space. There were a number items and not sure what to do next with them.
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Wednesday, February 14, 2007 7:35:20 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 13/02/2007
Kaspersky Anti-Virus database records: 267388
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - Folders:
C:\
Scan Statistics:
Total number of scanned objects: 815198
Number of viruses found: 30
Number of infected objects: 1467 / 0
Number of suspicious objects: 6
Duration of the scan process: 10:58:19
Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\DGWJHH8X\prompt[1].php Infected: Exploit.HTML.CodeBaseExec skipped
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\DGWJHH8X\prompt[1].php Infected: Exploit.HTML.CodeBaseExec skipped
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\YNA12GDO\stasxx[1].htm Infected: Exploit.HTML.Mht skipped
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\YNA12GDO\stasxx[1].htm Infected: Exploit.HTML.Mht skipped
C:\download\programs\netpumper-1.24-NP_0016-setup.exe/data0079 Infected: not-a-virus:AdWare.Win32.Lop.ai skipped
C:\System Volume Information\_restore{38619354-A30C-4AA1-999E-C6E4474B633E}\RP135\A0020014.exe/data0079 Infected: not-a-virus:AdWare.Win32.Lop.ai skipped
C:\System Volume Information\_restore{38619354-A30C-4AA1-999E-C6E4474B633E}\RP156\A0030345.exe Infected: not-a-virus:AdWare.Win32.Lop.ai skipped
C:\System Volume Information\_restore{38619354-A30C-4AA1-999E-C6E4474B633E}\RP156\A0030346.exe Infected: not-a-virus:AdWare.Win32.Lop.ai skipped
C:\Documents and Settings\All Users\Application Data\InterDumbExtraAtom\Poke Htm.bk! Infected: not-a-virus:AdWare.Win32.Lop.bb skipped
C:\Documents and Settings\All Users\Application Data\InterDumbExtraAtom\ticksetup.exe Infected: not-a-virus:AdWare.Win32.Lop.bb skipped
C:\hp\bin\KillWind.exe Infected: not-a-virus:RiskTool.Win32.PsKill.p skipped
C:\download\programs\SmitfraudFix.zip/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\download\programs\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\WINDOWS\wfo.exe/stream Infected: Trojan.Win32.Pakes skipped
C:\WINDOWS\wfo.exe/stream/data0001 Infected: Trojan.Win32.Pakes skipped
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\ATC3P44Z\shellscript_loader[1].js Infected: Trojan-Downloader.JS.Small.d skipped
C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\9F7VT1OQ\shellscript[1].js Infected: Trojan-Downloader.VBS.Psyme.e skipped
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\9F7VT1OQ\shellscript[1].js Infected: Trojan-Downloader.VBS.Psyme.e skipped
C:\WINDOWS\system32\dfcpr.dll Infected: Trojan-Spy.Win32.Mxsender.e skipped
C:\download\programs\netpumper-1.24-NP_0016-setup.exe Inno: infected - 1 skipped
C:\System Volume Information\_restore{38619354-A30C-4AA1-999E-C6E4474B633E}\RP135\A0020014.exe Inno: infected - 1 skipped
C:\WINDOWS\wfo.exe NSIS: infected - 2 skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinFixer.zip/UWFX5_0001_LP1014NetInstaller.exe Suspicious: Password-protected-EXE skipped
C:\download\programs\SmitfraudFix.zip ZIP: infected - 1 skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WinFixer.zip ZIP: suspicious - 1 skipped
Scan process completed.