Jump to content


Photo

Slow computer loaded with spyware


  • This topic is locked This topic is locked
5 replies to this topic

#1 bobhearn11

bobhearn11

    Member

  • Full Member
  • Pip
  • 34 posts

Posted 03 June 2007 - 09:09 AM

I posted this under another name, but I found my old login name. I have been asked to help out with a slow computer that has problems with spyware. The computer needs more RAM and I have some on order, and I have run HiJackThis, AVG anti-spyware, and AdAware. BroadcastPC 2.0 keeps popping up. I would appreciate some help and advice. I have posted before and received great assistance. Thanks in advance. :D

Logfile of HijackThis v1.99.1
Scan saved at 3:49:07 PM, on 6/2/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
C:\Program Files\Belkin\Belkin Wireless Network Utility\WLanCfgG.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\fxssvc.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\dllhost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HiJackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://education.dellnet.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.jmu.edu/jmuweb/students/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://education.dellnet.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunServices: [ICQ Messenger] ICQLite.exe
O4 - HKLM\..\RunOnce: [tvs_re] c:\Program Files\Common Files\Java\tvs_re_inst.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O12 - Plugin for .mpg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O12 - Plugin for .tif: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin5.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photos.walmar...martActivia.cab
O20 - AppInit_DLLs: mad.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Belkin 54g Wireless USB Network Adapter (Belkin 54g Wireless USB Network Adapter Service) - Unknown owner - C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe

AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 11:04:03 PM 6/1/2007

+ Scan result:



HKLM\SOFTWARE\msbb -> Adware.180Solutions : Cleaned.
HKU\S-1-5-21-2820011160-1007240461-2958199250-1006\Software\msbb -> Adware.180Solutions : Cleaned.
C:\Program Files\InetGet2\webhost2.exe -> Adware.Agent : Cleaned.
HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE -> Adware.Altnet : Cleaned.
C:\WINDOWS\SYSTEM32\angelex.exe -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\bbchk.exe -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\exdl.exe -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\exul.exe -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\javex80.vxd/C:/Program Files/NaviSearch/bin/nls.exe -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\javexulm.vxd -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\mbbi8016.dll -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\mqexdlm.srg -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\msbe.dll -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\mscb.dll -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\netut80ex.vxd/C:/WINDOWS/System32/bbchk.exe -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\netut80ex.vxd/C:/WINDOWS/System32/exdl.exe -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\netut80ex.vxd/C:/WINDOWS/System32/exul.exe -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\netut80ex.vxd/C:/WINDOWS/System32/javexulm.vxd -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\netut80ex.vxd/C:/WINDOWS/System32/mqexdlm.srg -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\netut80ex.vxd/C:/WINDOWS/System32/msbe.dll -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\netut80ex.vxd/C:/WINDOWS/System32/mscb.dll -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\netut80ex.vxd/C:/WINDOWS/System32/nvms.dll -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\nvms.dll -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\psis80ex.ax/C:/Program Files/CashBack/bin/cb.exe -> Adware.BargainBuddy : Cleaned.
C:\WINDOWS\SYSTEM32\psis80ex.ax/C:/Program Files/CashBack/bin/flash.exe -> Adware.BargainBuddy : Cleaned.
HKLM\SOFTWARE\Bargains -> Adware.BargainBuddy : Cleaned.
HKLM\SOFTWARE\Classes\ADP.UrlCatcher -> Adware.BargainBuddy : Cleaned.
HKLM\SOFTWARE\Classes\ADP.UrlCatcher.1 -> Adware.BargainBuddy : Cleaned.
HKLM\SOFTWARE\Classes\ADP.UrlCatcher\CLSID -> Adware.BargainBuddy : Cleaned.
HKLM\SOFTWARE\eXactUtil -> Adware.BargainBuddy : Cleaned.
HKLM\SYSTEM\CurrentControlSet\Services\ISEXEng -> Adware.BargainBuddy : Cleaned.
HKLM\SYSTEM\CurrentControlSet\Services\ISEXEng\Enum -> Adware.BargainBuddy : Cleaned.
HKLM\SYSTEM\CurrentControlSet\Services\ISEXEng\Security -> Adware.BargainBuddy : Cleaned.
HKLM\SOFTWARE\Dbi -> Adware.BetterInternet : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082689.dll -> Adware.BiSpy : Cleaned.
C:\WINDOWS\SYSTEM32\bS_L.dll/bi.dll -> Adware.BiSpy : Cleaned.
C:\WINDOWS\SYSTEM32\bS_L.dll/preInsBI.exe -> Adware.BiSpy : Cleaned.
C:\Program Files\Common Files\Java\xclean.exe -> Adware.Broadcap : Cleaned.
C:\Program Files\tvs\__delete_on_reboot__b_p_c_v_2_._p_l_u_g_i_n_s_._d_l_l_ -> Adware.Broadcap : Cleaned.
C:\Program Files\tvs\__delete_on_reboot__t_v_s_v_2_._d_l_l_ -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP614\A0077957.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP614\A0077964.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP617\A0078005.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP617\A0078012.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP619\A0079005.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP619\A0079012.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP619\A0079028.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP619\A0079035.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP623\A0079106.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP623\A0079113.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP627\A0079175.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP627\A0079182.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP631\A0079271.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP635\A0079375.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP636\A0080365.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP636\A0080372.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP639\A0080403.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP639\A0080410.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP640\A0080422.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP640\A0080429.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP640\A0080447.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP642\A0080485.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP643\A0080503.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP643\A0080519.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP643\A0080536.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP654\A0080645.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP663\A0081638.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP664\A0081668.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP664\A0081675.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP664\A0082665.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP664\A0082672.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0083666.dll -> Adware.Broadcap : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0083674.dll -> Adware.Broadcap : Cleaned.
C:\Program Files\Bcpc -> Adware.BroadcastPC : Cleaned.
C:\Program Files\Bcpc\bcpc.exe -> Adware.BroadcastPC : Cleaned.
C:\Program Files\Bcpc\bcpc_c.exe -> Adware.BroadcastPC : Cleaned.
C:\Program Files\Bcpc\bcre_inst.exe -> Adware.BroadcastPC : Cleaned.
HKLM\SOFTWARE\BCPC -> Adware.BroadCastPC : Cleaned.
HKLM\SOFTWARE\BCPC\28.exe -> Adware.BroadCastPC : Cleaned.
HKLM\SOFTWARE\BCPC\90.zip -> Adware.BroadCastPC : Cleaned.
HKLM\SOFTWARE\DInstaller2 -> Adware.BroadCastPC : Cleaned.
HKU\S-1-5-21-2820011160-1007240461-2958199250-1006\Software\BTB -> Adware.CoolWebSearch : Cleaned.
HKU\S-1-5-21-2820011160-1007240461-2958199250-1006\Software\BTB\IEToolbar -> Adware.CoolWebSearch : Cleaned.
HKU\S-1-5-21-2820011160-1007240461-2958199250-1006\Software\BTB\IEToolbar\Historysearch -> Adware.CoolWebSearch : Cleaned.
HKU\S-1-5-21-2820011160-1007240461-2958199250-1006\Software\BTB\IEToolbar\tb_items -> Adware.CoolWebSearch : Cleaned.
HKU\S-1-5-21-2820011160-1007240461-2958199250-1006\Software\BTB\SiteAllow -> Adware.CoolWebSearch : Cleaned.
HKU\S-1-5-21-2820011160-1007240461-2958199250-1006\Software\Softomate -> Adware.CoolWebSearch : Cleaned.
HKU\S-1-5-21-2820011160-1007240461-2958199250-1006\Software\Softomate\BAToolbar -> Adware.CoolWebSearch : Cleaned.
C:\Program Files\Common Files\Java\ftkcpy.cfg -> Adware.FlashEnhancer : Cleaned.
C:\Program Files\Ftk\f.bak -> Adware.FlashEnhancer : Cleaned.
C:\Program Files\Ftk\ftk.dll -> Adware.FlashEnhancer : Cleaned.
HKLM\SOFTWARE\Classes\CLSID\{D7E588AB-A5D9-4422-B313-22A3470F9700} -> Adware.FlashEnhancer : Cleaned.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0AD937E7-2F37-4873-A05E-548A67EF1D0E} -> Adware.FlashEnhancer : Cleaned.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D7E588AB-A5D9-4422-B313-22A3470F9700} -> Adware.FlashEnhancer : Cleaned.
HKU\S-1-5-21-2820011160-1007240461-2958199250-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0AD937E7-2F37-4873-A05E-548A67EF1D0E} -> Adware.FlashEnhancer : Cleaned.
HKU\S-1-5-21-2820011160-1007240461-2958199250-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D7E588AB-A5D9-4422-B313-22A3470F9700} -> Adware.FlashEnhancer : Cleaned.
C:\Program Files\Common Files\Java\Xcpy1.cfg -> Adware.FlashTrack : Cleaned.
HKLM\SOFTWARE\Classes\UnawareObj.UnawareObj -> Adware.FlashTrack : Cleaned.
HKLM\SOFTWARE\Classes\UnawareObj.UnawareObj.1 -> Adware.FlashTrack : Cleaned.
HKLM\SOFTWARE\Classes\UnawareObj.UnawareObj\CurVer -> Adware.FlashTrack : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082686.exe -> Adware.Gator : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082687.exe -> Adware.Gator : Cleaned.
C:\Program Files\411Ferret\toolbar.dll -> Adware.ISearch : Cleaned.
C:\Program Files\Common Files\Download\freeprodtb.exe -> Adware.Maxifiles : Cleaned.
C:\Program Files\Common Files\Download\mc-110-12-0000166.exe -> Adware.Maxifiles : Cleaned.
C:\Program Files\Common Files\InetGet\mc-110-12-0000166.exe -> Adware.Maxifiles : Cleaned.
C:\Program Files\Common Files\Windows\mc-110-12-0000166.exe -> Adware.Maxifiles : Cleaned.
C:\Program Files\Common Files\Windows\services32.exe -> Adware.Maxifiles : Cleaned.
C:\WINDOWS\SYSTEM32\mc-110-12-0000166.exe -> Adware.Maxifiles : Cleaned.
C:\WINDOWS\unstall.exe -> Adware.MediaMotor : Cleaned.
C:\Program Files\LimeShop\System\Code\bf.class -> Adware.MoeMoney : Cleaned.
C:\Program Files\LimeShop\System\Code\bs.class -> Adware.MoeMoney : Cleaned.
HKLM\SOFTWARE\Classes\CB.UrlCatcher -> Adware.NaviSearch : Cleaned.
HKLM\SOFTWARE\Classes\CB.UrlCatcher.1 -> Adware.NaviSearch : Cleaned.
HKLM\SOFTWARE\Classes\CB.UrlCatcher\CLSID -> Adware.NaviSearch : Cleaned.
HKLM\SOFTWARE\Classes\NLS.UrlCatcher -> Adware.NaviSearch : Cleaned.
HKLM\SOFTWARE\Classes\NLS.UrlCatcher.1 -> Adware.NaviSearch : Cleaned.
HKLM\SOFTWARE\Classes\NLS.UrlCatcher\CLSID -> Adware.NaviSearch : Cleaned.
C:\WINDOWS\SYSTEM32\P2P Networking v123.cpl -> Adware.P2PNet : Cleaned.
C:\WINDOWS\SYSTEM32\P2P Networking -> Adware.P2PNetworking : Cleaned.
C:\WINDOWS\SYSTEM32\P2P Networking\Cache -> Adware.P2PNetworking : Cleaned.
C:\WINDOWS\SYSTEM32\P2P Networking\Cache\Database -> Adware.P2PNetworking : Cleaned.
C:\WINDOWS\SYSTEM32\P2P Networking\MARSHAL.DLL -> Adware.P2PNetworking : Cleaned.
C:\WINDOWS\SYSTEM32\P2P Networking\P2P Networking.eng -> Adware.P2PNetworking : Cleaned.
C:\WINDOWS\SYSTEM32\P2P Networking\P2P Networking.exe -> Adware.P2PNetworking : Cleaned.
C:\Program Files\LimeShop\Popup.exe -> Adware.Rebates : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082709.dll -> Adware.ShopAtHome : Cleaned.
C:\Program Files\SearchLocate\sidebar.dll -> Adware.Sidesearch : Cleaned.
C:\Program Files\Common Files\ifmq\ifmqd\ifmqc.dll -> Adware.TargetServer : Cleaned.
C:\Program Files\LimeShop\LimeShop.exe -> Adware.TopMoxie : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0083660.dll -> Adware.TotalVelocity : Cleaned.
C:\WINDOWS\SYSTEM32\BO2802040113.dll -> Adware.VirtualBouncer : Cleaned.
C:\Program Files\whInstall -> Adware.Webhancer : Cleaned.
C:\Program Files\whInstall\Sporder.dll -> Adware.Webhancer : Cleaned.
C:\Program Files\whInstall\Webhdll.dll -> Adware.Webhancer : Cleaned.
C:\Program Files\whInstall\WhAgent.exe -> Adware.Webhancer : Cleaned.
C:\Program Files\whInstall\WhSurvey.exe -> Adware.Webhancer : Cleaned.
C:\Program Files\whInstall\license.txt -> Adware.Webhancer : Cleaned.
C:\Program Files\whInstall\readme.txt -> Adware.Webhancer : Cleaned.
C:\Program Files\whInstall\whAgent.inf -> Adware.Webhancer : Cleaned.
C:\Program Files\whInstall\whAgent.ini -> Adware.Webhancer : Cleaned.
C:\Program Files\whInstall\whInstaller.exe -> Adware.Webhancer : Cleaned.
C:\Program Files\whInstall\whInstaller.ini -> Adware.Webhancer : Cleaned.
C:\Program Files\whInstall\whiehlpr.dll -> Adware.Webhancer : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082703.exe -> Backdoor.IRCBot.ie : Cleaned.
C:\WINDOWS\SYSTEM32\worda\dlcl.edp -> Backdoor.Zapchast : Cleaned.
C:\WINDOWS\SYSTEM32\msexreg.exe -> Dialer.Small : Cleaned.
C:\WINDOWS\SYSTEM32\netut80ex.vxd/C:/WINDOWS/System32/msexreg.exe -> Dialer.Small : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082688.dll -> Downloader.Adroar : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082702.dll -> Downloader.Agent.b : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082684.cfg -> Downloader.RVP.e : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082685.cfg -> Downloader.RVP.e : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082694.exe -> Downloader.Small.aak : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082683.exe -> Downloader.TSUpdate.f : Cleaned.
C:\Program Files\Common Files\ifmq\ifmqd\vocabulary -> Downloader.TSUpdate.j : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082680.exe -> Downloader.TSUpdate.l : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082682.exe -> Downloader.TSUpdate.n : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082681.exe -> Downloader.TSUpdate.p : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082695.ocx -> Downloader.VB.db : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082696.ocx -> Downloader.VB.ez : Cleaned.
C:\WINDOWS\ast_4_mm.exe -> Downloader.Wiser : Cleaned.
C:\WINDOWS\wast2.exe -> Downloader.Wiser : Cleaned.
C:\Program Files\Common Files\Java\ftkclean.exe -> Dropper.Starter.g : Cleaned.
C:\Program Files\Ftk\ftkclean.exe -> Dropper.Starter.g : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082693.exe -> Hijacker.VB.ek : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082699.dll -> Logger.Briss.c : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082698.exe -> Logger.VB.eh : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082700.exe -> Logger.VB.eh : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082701.exe -> Logger.VB.eh : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082705.exe -> Logger.VB.eh : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082706.exe -> Logger.VB.eh : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082708.exe -> Logger.VB.eh : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082710.exe -> Logger.VB.eh : Cleaned.
C:\WINDOWS\SYSTEM32\worda\few.exe -> Not-A-Virus.NetTool.Win32.Sniffer.b : Cleaned.
C:\WINDOWS\SYSTEM32\worda\cl4ss.exe -> Not-A-Virus.PSWTool.Win32.PassView.162 : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082707.sys -> Rootkit.Agent.l : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@2o7[2].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@cnn.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@livenation.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@ads.addynamix[1].txt -> TrackingCookie.Addynamix : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@adrevolver[1].txt -> TrackingCookie.Adrevolver : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@advertising[2].txt -> TrackingCookie.Advertising : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@www.burstbeacon[1].txt -> TrackingCookie.Burstbeacon : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@www.burstnet[2].txt -> TrackingCookie.Burstnet : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@ads.cnn[1].txt -> TrackingCookie.Cnn : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@com[1].txt -> TrackingCookie.Com : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@twci.coremetrics[1].txt -> TrackingCookie.Coremetrics : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@ehg-comcast.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@sales.liveperson[1].txt -> TrackingCookie.Liveperson : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@mediaplex[2].txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@overture[1].txt -> TrackingCookie.Overture : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@realmedia[2].txt -> TrackingCookie.Realmedia : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@revsci[1].txt -> TrackingCookie.Revsci : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@anad.tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@trafficmp[1].txt -> TrackingCookie.Trafficmp : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\Michele Ambrogi\Cookies\michele ambrogi@zedo[1].txt -> TrackingCookie.Zedo : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082711.dll -> Trojan.Goldid : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082704.dll -> Trojan.Golid : Cleaned.
C:\xz.bat -> Trojan.KillProc.a : Cleaned.
C:\Program Files\Common Files\Java\breg.exe -> Trojan.Small.an : Cleaned.
C:\Program Files\Common Files\Java\Ftkcpy.exe -> Trojan.Starter.g : Cleaned.
C:\Program Files\Ftk\Ftkcpy_inst.exe -> Trojan.Starter.g : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082690.exe -> Trojan.VB.kz : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082691.exe -> Trojan.VB.kz : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082697.exe -> Trojan.VB.kz : Cleaned.
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP665\A0082692.exe -> Trojan.Zapchast : Cleaned.


::Report end


Ad-Aware SE Build 1.06r1
Logfile Created on:Saturday, June 02, 2007 2:06:58 PM
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R173 29.05.2007
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

References detected during the scan:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
AdPlus-SurferBar(TAC index:6):2 total references
Adware.Director(TAC index:3):9 total references
Adware.Freeprod Toolbar(TAC index:3):26 total references
Adware.Maxifiles(TAC index:5):2 total references
Adware.MDH(TAC index:5):2 total references
Adware.P2PNetworking(TAC index:3):18 total references
Alexa(TAC index:5):1 total references
AltnetBDE(TAC index:4):5 total references
BargainBuddy(TAC index:8):17 total references
BroadCastPC(TAC index:7):16 total references
ExactSearchBar(TAC index:5):1 total references
FlashenhancerBHO(TAC index:7):8 total references
FlashTrack(TAC index:7):4 total references
MediaMotor(TAC index:8):8 total references
MRU List(TAC index:0):39 total references
Other(TAC index:5):3 total references
Roings(TAC index:8):6 total references
SahAgent(TAC index:9):4 total references
Softomate Toolbar(TAC index:9):17 total references
Targetsaver(TAC index:8):4 total references
TopMoxie(TAC index:3):1 total references
Tracking Cookie(TAC index:3):38 total references
TVMedia(TAC index:5):1 total references
WebHancer(TAC index:9):6 total references
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Ad-Aware SE Settings
===========================
Set : Search for negligible risk entries
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan my Hosts file

Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Include alternate data stream details in log file
Set : Play sound at scan completion if scan locates critical objects


6-2-2007 2:06:58 PM - Scan started. (Full System Scan)

MRU List Object Recognized!
Location: : C:\Documents and Settings\Michele Ambrogi\Application Data\microsoft\office\recent
Description : list of recently opened documents using microsoft office


MRU List Object Recognized!
Location: : C:\Documents and Settings\Michele Ambrogi\recent
Description : list of recently opened documents


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\adobe\acrobat reader\6.0\avgeneral\crecentfiles
Description : list of recently used files in adobe reader


MRU List Object Recognized!
Location: : software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use microsoft direct3d


MRU List Object Recognized!
Location: : software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use microsoft direct X


MRU List Object Recognized!
Location: : software\microsoft\directdraw\mostrecentapplication
Description : most recent application to use microsoft directdraw


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\internet explorer
Description : last download directory used in microsoft internet explorer


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\internet explorer\typedurls
Description : list of recently entered addresses in microsoft internet explorer


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\mediaplayer\medialibraryui
Description : last selected node in the microsoft windows media player media library


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\mediaplayer\player\recentfilelist
Description : list of recently used files in microsoft windows media player


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\mediaplayer\player\settings
Description : last open directory used in jasc paint shop pro


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\mediaplayer\preferences
Description : last playlist index loaded in microsoft windows media player


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\mediaplayer\preferences
Description : last playlist loaded in microsoft windows media player


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\mediaplayer\preferences
Description : last search path used in microsoft windows media player


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\microsoft management console\recent file list
Description : list of recent snap-ins used in the microsoft management console


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\office\10.0\clip organizer\search\last query
Description : last query in microsoft clip organizer


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\office\10.0\common\general
Description : list of recently used symbols in microsoft office


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\office\10.0\common\open find\microsoft powerpoint\settings\insert picture\file name mru
Description : list of recent pictured inserted in microsoft powerpoint


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\office\10.0\common\open find\microsoft powerpoint\settings\save as\file name mru
Description : list of recent documents saved by microsoft powerpoint


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\office\10.0\common\open find\microsoft word\settings\open\file name mru
Description : list of recent documents opened by microsoft word


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\office\10.0\common\open find\microsoft word\settings\save as\file name mru
Description : list of recent documents saved by microsoft word


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\office\10.0\excel\recent files
Description : list of recent files used by microsoft excel


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\office\10.0\powerpoint\recent file list
Description : list of recent files used by microsoft powerpoint


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\office\10.0\powerpoint\recent templates
Description : list of recent templates used by microsoft powerpoint


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\office\10.0\powerpoint\recent typeface list
Description : list of recently used typefaces in microsoft powerpoint


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\office\10.0\powerpoint\recenttemplatelist
Description : list of recent templates used by microsoft powerpoint


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\search assistant\acmru
Description : list of recent search terms used with the search assistant


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\windows\currentversion\applets\paint\recent file list
Description : list of files recently opened using microsoft paint


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\windows\currentversion\applets\regedit
Description : last key accessed using the microsoft registry editor


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\windows\currentversion\applets\wordpad\recent file list
Description : list of recent files opened using wordpad


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru
Description : list of recent programs opened


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru
Description : list of recently saved files, stored according to file extension


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\windows\currentversion\explorer\recentdocs
Description : list of recent documents opened


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\realnetworks\realplayer\6.0\preferences
Description : list of recent skins in realplayer


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\realnetworks\realplayer\6.0\preferences
Description : list of recent clips in realplayer


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\realnetworks\realplayer\6.0\preferences
Description : last login time in realplayer


MRU List Object Recognized!
Location: : .DEFAULT\software\microsoft\windows media\wmsdk\general
Description : windows media sdk


MRU List Object Recognized!
Location: : S-1-5-18\software\microsoft\windows media\wmsdk\general
Description : windows media sdk


MRU List Object Recognized!
Location: : S-1-5-21-2820011160-1007240461-2958199250-1006\software\microsoft\windows media\wmsdk\general
Description : windows media sdk


Listing running processes
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ProcessID : 404
ThreadCreationTime : 6-2-2007 6:43:40 PM
BasePriority : Normal


#:2 [csrss.exe]
FilePath : \??\C:\WINDOWS\system32\
ProcessID : 628
ThreadCreationTime : 6-2-2007 6:43:42 PM
BasePriority : Normal


#:3 [winlogon.exe]
FilePath : \??\C:\WINDOWS\system32\
ProcessID : 652
ThreadCreationTime : 6-2-2007 6:43:43 PM
BasePriority : High


#:4 [services.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 696
ThreadCreationTime : 6-2-2007 6:43:46 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Services and Controller app
InternalName : services.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : services.exe

#:5 [lsass.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 708
ThreadCreationTime : 6-2-2007 6:43:46 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : lsass.exe

#:6 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 848
ThreadCreationTime : 6-2-2007 6:43:49 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:7 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 956
ThreadCreationTime : 6-2-2007 6:43:51 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:8 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1056
ThreadCreationTime : 6-2-2007 6:43:51 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:9 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1132
ThreadCreationTime : 6-2-2007 6:43:52 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:10 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 1212
ThreadCreationTime : 6-2-2007 6:43:52 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:11 [lexbces.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1432
ThreadCreationTime : 6-2-2007 6:43:56 PM
BasePriority : Normal
FileVersion : 8.14
ProductVersion : 8.14
ProductName : MarkVision for Windows (32 bit)
CompanyName : Lexmark International, Inc.
FileDescription : LexBce Service
InternalName : LexBce Service
LegalCopyright : © 1993 - 2003 Lexmark International, Inc.
OriginalFilename : LexBceS.exe

#:12 [lexpps.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1468
ThreadCreationTime : 6-2-2007 6:43:57 PM
BasePriority : Normal
FileVersion : 8.14
ProductVersion : 8.14
ProductName : MarkVision for Windows (32 bit)
CompanyName : Lexmark International, Inc.
FileDescription : LEXPPS.EXE
InternalName : LEXPPS
LegalCopyright : © 1993 - 2003 Lexmark International, Inc.
OriginalFilename : LEXPPS.EXE
Comments : MarkVision for Windows '95 New P2P Server (32-bit)

#:13 [spoolsv.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1464
ThreadCreationTime : 6-2-2007 6:43:57 PM
BasePriority : Normal
FileVersion : 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)
ProductVersion : 5.1.2600.2696
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : spoolsv.exe

#:14 [guard.exe]
FilePath : C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\
ProcessID : 1688
ThreadCreationTime : 6-2-2007 6:44:05 PM
BasePriority : Normal
FileVersion : 7, 5, 0, 47
ProductVersion : 7, 5, 0, 47
ProductName : AVG Anti-Spyware
CompanyName : Anti-Malware Development a.s.
FileDescription : AVG Anti-Spyware guard
InternalName : AVG Anti-Spyware guard
LegalCopyright : Copyright © 2006 Anti-Malware Development a.s.
OriginalFilename : guard.exe

#:15 [avgamsvr.exe]
FilePath : C:\PROGRA~1\Grisoft\AVG7\
ProcessID : 1816
ThreadCreationTime : 6-2-2007 6:44:07 PM
BasePriority : Normal
FileVersion : 7.5.0.453
ProductVersion : 7.5.0.453
ProductName : AVG Anti-Virus system
CompanyName : GRISOFT, s.r.o.
FileDescription : AVG Alert Manager
InternalName : avgamsvr
LegalCopyright : Copyright © 2007 GRISOFT, s.r.o.
OriginalFilename : avgamsvr.EXE

#:16 [explorer.exe]
FilePath : C:\WINDOWS\
ProcessID : 1848
ThreadCreationTime : 6-2-2007 6:44:08 PM
BasePriority : Normal
FileVersion : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 6.00.2900.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Windows Explorer
InternalName : explorer
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : EXPLORER.EXE

#:17 [avgupsvc.exe]
FilePath : C:\PROGRA~1\Grisoft\AVG7\
ProcessID : 1868
ThreadCreationTime : 6-2-2007 6:44:10 PM
BasePriority : Normal
FileVersion : 7.5.0.420
ProductVersion : 7.5.0.420
ProductName : AVG 7.5 Anti-Virus System
CompanyName : GRISOFT, s.r.o.
FileDescription : AVG Update Service
InternalName : avgupsvc
LegalCopyright : Copyright © 2006 GRISOFT, s.r.o.
OriginalFilename : avgupdsvc.EXE

#:18 [avgemc.exe]
FilePath : C:\PROGRA~1\Grisoft\AVG7\
ProcessID : 1904
ThreadCreationTime : 6-2-2007 6:44:12 PM
BasePriority : Normal
FileVersion : 7.5.0.460
ProductVersion : 7.5.0.460
ProductName : AVG Anti-Virus system
CompanyName : GRISOFT, s.r.o.
FileDescription : AVG E-Mail Scanner
InternalName : avgemc
LegalCopyright : Copyright © 2007 GRISOFT, s.r.o.
OriginalFilename : avgemc.exe

#:19 [wlservice.exe]
FilePath : C:\Program Files\Belkin\Belkin Wireless Network Utility\
ProcessID : 1932
ThreadCreationTime : 6-2-2007 6:44:16 PM
BasePriority : Normal


#:20 [wlancfgg.exe]
FilePath : C:\Program Files\Belkin\Belkin Wireless Network Utility\
ProcessID : 1964
ThreadCreationTime : 6-2-2007 6:44:18 PM
BasePriority : Normal
FileVersion : 1, 0, 3, 5
ProductVersion : 1, 0, 3, 5
ProductName : Wireless Monitor Application
FileDescription : Wireless Monitor Application
InternalName : WLanCfg
LegalCopyright : Copyright © 2002.08
OriginalFilename : WLanCfg.EXE

#:21 [defwatch.exe]
FilePath : C:\PROGRA~1\SYMANT~1\SYMANT~1\
ProcessID : 1972
ThreadCreationTime : 6-2-2007 6:44:18 PM
BasePriority : Normal
FileVersion : 8.1.0.825
ProductVersion : 8.1.0.825
ProductName : Norton AntiVirus
CompanyName : Symantec Corporation
FileDescription : Virus Definition Daemon
InternalName : DefWatch
LegalCopyright : Copyright © 1998 Symantec Corporation
OriginalFilename : DefWatch.exe

#:22 [rtvscan.exe]
FilePath : C:\PROGRA~1\SYMANT~1\SYMANT~1\
ProcessID : 2036
ThreadCreationTime : 6-2-2007 6:44:19 PM
BasePriority : Normal
FileVersion : 8.1.0.825
ProductVersion : 8.1.0.825
ProductName : Symantec AntiVirus
CompanyName : Symantec Corporation
FileDescription : Symantec AntiVirus
LegalCopyright : Copyright © Symantec Corporation 1991-2003

#:23 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ProcessID : 108
ThreadCreationTime : 6-2-2007 6:44:26 PM
BasePriority : Normal
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : svchost.exe

#:24 [calmain.exe]
FilePath : C:\Program Files\Canon\CAL\
ProcessID : 1020
ThreadCreationTime : 6-2-2007 6:44:43 PM
BasePriority : Normal
FileVersion : 8, 1, 0, 14
ProductVersion : 8, 1, 0, 14
CompanyName : Canon Inc.
FileDescription : Canon Camera Access Library 8
LegalCopyright : Copyright © Canon Inc.
OriginalFilename : CALMAIN.exe

#:25 [fxssvc.exe]
FilePath : C:\WINDOWS\system32\
ProcessID : 1840
ThreadCreationTime : 6-2-2007 6:44:55 PM
BasePriority : Normal
FileVersion : 5.2.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.2.2600.2180
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Fax Service
InternalName : FXSSVC.EXE
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : FXSSVC.EXE

#:26 [vptray.exe]
FilePath : C:\PROGRA~1\SYMANT~1\SYMANT~1\
ProcessID : 1832
ThreadCreationTime : 6-2-2007 6:45:09 PM
BasePriority : Normal
FileVersion : 8.1.0.825
ProductVersion : 8.1.0.825
ProductName : Symantec AntiVirus
CompanyName : Symantec Corporation
FileDescription : Symantec AntiVirus
LegalCopyright : Copyright © Symantec Corporation 1991-2003

#:27 [tvs_b.exe]
FilePath : C:\program files\tvs\
ProcessID : 1092
ThreadCreationTime : 6-2-2007 6:45:15 PM
BasePriority : Normal


BroadCastPC Object Recognized!
Type : Process
Data : tvs_b.exe
TAC Rating : 7
Category : Data Miner
Comment :
Object : C:\program files\tvs\


"C:\program files\tvs\tvs_b.exe"Process terminated successfully
"C:\program files\tvs\tvs_b.exe"Process terminated successfully

#:28 [avgcc.exe]
FilePath : C:\PROGRA~1\Grisoft\AVG7\
ProcessID : 320
ThreadCreationTime : 6-2-2007 6:45:17 PM
BasePriority : Normal
FileVersion : 7.5.0.460
ProductVersion : 7.5.0.460
ProductName : AVG Anti-Virus system
CompanyName : GRISOFT, s.r.o.
FileDescription : AVG Control Center
InternalName : AvgCC
LegalCopyright : Copyright © 2007 GRISOFT, s.r.o.
OriginalFilename : AvgCC.EXE

#:29 [avgas.exe]
FilePath : C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\
ProcessID : 1772

#2 SWI Support Robot

SWI Support Robot

    Helper robot

  • SWI Bot
  • PipPipPipPipPip
  • 23,523 posts

Posted 06 June 2007 - 06:30 AM

Welcome to SWI. We apologize for the delay; our helpers have been very busy.
If you have not received help after 3 days, please CLICK HERE, and post a link to your log and the date it was originally posted.

Thank you for your patience.

[this is an automated reply]
This is an automated message. It does not count as help.

#3 nasdaq

nasdaq

    Forum Deity

  • Global Moderator
  • PipPipPipPipPip
  • 49,092 posts

Posted 09 June 2007 - 09:40 AM

Hello,

Print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.

Please set your system to show all files;
To delete the files/folders in the next steps, you may need to show hidden Files/Folders: How to.
At the end of the fix you can return the files to hidden status if you want..

Close all programs leaving only HijackThis running. Place a check against each of the following, making sure you get them all and not any others by mistake:

O4 - HKLM\..\RunOnce: [tvs_re] c:\Program Files\Common Files\Java\tvs_re_inst.exe
O20 - AppInit_DLLs: mad.dll


Click on Fix Checked when finished and exit HijackThis.

Delete these files in bold if found.

c:\Program Files\Common Files\Java\tvs_re_inst.exe < Delete the Java folder if not created by the owner.

Locate and delete this file.
mad.dll

Restart the computer normally to complete the fix.

Take a look at this page created by miekiemoes, one of the Global Moderators here, on slow systems, and some things you can try to do to try to improve it:
http://users.telenet...owcomputer.html
Pay attention to Item 2. More than one protection software running.

Submit a fresh HijackThis log.
nasdaq

Favorite tools: [ SpywareBlaster ] [ Spybot ] [ AdAware ] [ HijackThis ]
[ Housecall online virus scan ] [ Bitdefender online virus scan ]
[ AVG antivirus ] [ Sunbelt Personal Firewall ] [ ZoneAlarm firewall ]

My help is free, but if we have helped you in anyway,please considerDonating ,
see this topic for details.
We need members like you.

========
Shouldn't water be worth more than diamonds?
Adam Smith Glasgow, 1760

#4 bobhearn11

bobhearn11

    Member

  • Full Member
  • Pip
  • 34 posts

Posted 09 June 2007 - 06:23 PM

nasdaq, thanks. Two things:

1) When I ran the HijackThis, I did not find: O4 - HKLM\..\RunOnce: [tvs_re] c:\Program Files\Common Files\Java\tvs_re_inst.exe; nor did I find this .exe file.

2) I checked the O20 - AppInit_DLLs: mad.dll , but I did not find the mad.dll file.

I had already added 512 MB of RAM, and the computer is acting just fine. The latest HijackThis log is attached:

Logfile of HijackThis v1.99.1
Scan saved at 6:16:24 PM, on 6/9/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
C:\Program Files\Belkin\Belkin Wireless Network Utility\WLanCfgG.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wuauclt.exe
C:\HiJackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://education.dellnet.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.jmu.edu/jmuweb/students/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://education.dellnet.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunServices: [ICQ Messenger] ICQLite.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O12 - Plugin for .mpg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O12 - Plugin for .tif: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin5.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photos.walmar...martActivia.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Belkin 54g Wireless USB Network Adapter (Belkin 54g Wireless USB Network Adapter Service) - Unknown owner - C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

#5 nasdaq

nasdaq

    Forum Deity

  • Global Moderator
  • PipPipPipPipPip
  • 49,092 posts

Posted 10 June 2007 - 07:39 AM

Nice Work your log is clean.

Please read this Prevention page with lots of info and tips how to prevent this in the future.

http://users.telenet.be/bluepatchy/miekiemoes/prevention.html


nasdaq

Favorite tools: [ SpywareBlaster ] [ Spybot ] [ AdAware ] [ HijackThis ]
[ Housecall online virus scan ] [ Bitdefender online virus scan ]
[ AVG antivirus ] [ Sunbelt Personal Firewall ] [ ZoneAlarm firewall ]

My help is free, but if we have helped you in anyway,please considerDonating ,
see this topic for details.
We need members like you.

========
Shouldn't water be worth more than diamonds?
Adam Smith Glasgow, 1760

#6 nasdaq

nasdaq

    Forum Deity

  • Global Moderator
  • PipPipPipPipPip
  • 49,092 posts

Posted 21 June 2007 - 09:06 AM

Glad we could help. :)

If you need this topic reopened, please tell the moderating team by replying here with the address of the thread. This applies only to the original topic starter. Everyone else please begin a New Topic.
nasdaq

Favorite tools: [ SpywareBlaster ] [ Spybot ] [ AdAware ] [ HijackThis ]
[ Housecall online virus scan ] [ Bitdefender online virus scan ]
[ AVG antivirus ] [ Sunbelt Personal Firewall ] [ ZoneAlarm firewall ]

My help is free, but if we have helped you in anyway,please considerDonating ,
see this topic for details.
We need members like you.

========
Shouldn't water be worth more than diamonds?
Adam Smith Glasgow, 1760




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button