My pc is acting very slow and usage is at 100%. I have did solo antin virus,ad-aware,and spysweeper they all have found things but none of them have. fix this problem. The usage is at 100% even when pc is idle There are 36 processes running

Please post a Hijack This log so that the files associated with the virus/spyware/hijacker can be identified. Please download HJTsetup.exe from this link http://www.thespykiller.co.uk/files/HJTsetup.exe to your desktop. Doubleclick on the HJTsetup.exe icon on your desktop. By default it will install to C:\Program Files\Hijack This. Continue to click "next" in the setup dialogue boxes until you get to the "Select Addition Tasks" dialogue. Put a check by "Create a desktop icon" then click "Next" again. Continue to follow the rest of the prompts from there. At the final dialogue box click "Finish" and it will launch Hijack This. Click on the "Do a system scan and save a logfile" button. It will scan and the log should open in notepad. Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log and post it in this thread. Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly. Please download SmitFraudFix from this link http://siri.urz.free.fr/Fix/Smitfra... Then extract the contents to your desktop. !!!! Only run option #1 as runing the other options on an uninfected computer will damage the desktop.!!!! Open the "SmitfraudFix" folder and double-click "smitfraudfix.cmd" Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present). Please copy/paste the content of that report into your next reply. Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.

Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\WgaTray.exe C:\WINDOWS\Explorer.exe C:\WINDOWS\Fonts\updater.exe C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOWS\winservicehost.exe C:\WINDOWS\winservicehost.exe C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe C:\WINDOWS\svshost.exe C:\WINDOWS\system\services.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\svshost.exe C:\WINDOWS\system\services.exe C:\WINDOWS\system\csrss.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe" O4 - HKLM\..\Run: [SoloSentry] C:\PROGRA~1\SRNMIC~1\SOLOSENT.exe O4 - HKLM\..\Run: [SoloSysCheck] C:\PROGRA~1\SRNMIC~1\SYSCHECK.COM O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [WIN MS NT Process Services] "C:\WINDOWS\system\csrss.exe" O4 - HKLM\..\Run: [WIN MS NT Process Host Service] "C:\WINDOWS\winservicehost.exe" O4 - HKLM\..\Run: [Microsoft Windows Process Services] "C:\WINDOWS\svshost.exe" O4 - HKLM\..\Run: [Microsoft Win32 Process Host Service] "C:\WINDOWS\svshost.exe" O4 - HKLM\..\Run: [lsass] C:\WINDOWS\Fonts\updater.exe O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray O4 - HKLM\..\RunOnce: [lsass] "C:\WINDOWS\Fonts\updater.exe" /RunOnce O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [AIM] "C:\Program Files\AIM\aim.exe" -cnetwait.odl O4 - HKCU\..\Run: [Microsoft Windows Process Services] "C:\WINDOWS\system\services.exe" O4 - HKCU\..\Run: [Microsoft Win32 Process Host Service] "C:\WINDOWS\svshost.exe" O4 - HKCU\..\Run: [WIN MS NT Process Services] "C:\WINDOWS\system\csrss.exe" O4 - HKCU\..\Run: [WIN MS NT Process Host Service] "C:\WINDOWS\winservicehost.exe" O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: microsoftupdater.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/i... O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by102fd.bay102.hotmail.msn.c... O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll O20 - Winlogon Notify: WB - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll (file missing) O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

Please download ATF-Cleaner to your desktop from this link http://www.atribune.org/content/view/19/2/ We will need it later in safe mode Download and install AVG Anti-Spyware We will need this later in safe mode Be sure to update AVG Anti- Spyware Download Killbox to your desktop from this link Killbox by Option^Explicit. If you already have "Killbox" update to this newer version. We will need it later in safe mode Empty the restore folder. Go to start>control panel>system>system restore tab>check the box beside "turn off system restore>apply (takes a minute)>ok. Go back and uncheck the box to turn system restore back on>apply>ok. Next, please reboot your computer in Safe Mode by doing the following : Restart your computer After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually; Instead of Windows loading as normal, a menu with options should appear; Select the first option, to run Windows in Safe Mode, then press "Enter". Choose your usual account. Run Hijack This from safe mode, close all windows except Hijack This, place a check to the left of the following items and press "fix checked": O4 - HKLM\..\Run: [WIN MS NT Process Services] "C:\WINDOWS\system\csrss.exe" O4 - HKLM\..\Run: [WIN MS NT Process Host Service] "C:\WINDOWS\winservicehost.exe" O4 - HKLM\..\Run: [Microsoft Windows Process Services] "C:\WINDOWS\svshost.exe" O4 - HKLM\..\Run: [Microsoft Win32 Process Host Service] "C:\WINDOWS\svshost.exe" O4 - HKLM\..\Run: [lsass] C:\WINDOWS\Fonts\updater.exe O4 - HKLM\..\RunOnce: [lsass] "C:\WINDOWS\Fonts\updater.exe" /RunOnce O4 - HKCU\..\Run: [Microsoft Windows Process Services] "C:\WINDOWS\system\services.exe" O4 - HKCU\..\Run: [Microsoft Win32 Process Host Service] "C:\WINDOWS\svshost.exe" O4 - HKCU\..\Run: [WIN MS NT Process Services] "C:\WINDOWS\system\csrss.exe" O4 - HKCU\..\Run: [WIN MS NT Process Host Service] "C:\WINDOWS\winservicehost.exe" O4 - Startup: microsoftupdater.exe Exit Hijack This but remain in safe mode. Run Killbox from safe mode. Please double-click Killbox.exe to run it. Select: Delete on Reboot then Click on the All Files button. Please copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy): C:\WINDOWS\system\csrss.exe C:\WINDOWS\winservicehost.exe C:\WINDOWS\svshost.exe C:\WINDOWS\Fonts\updater.exe C:\WINDOWS\system\services.exe Return to Killbox, go to the File menu, and choose Paste from Clipboard. Click the red-and-white Delete File button. Click Yes at the Delete on Reboot prompt. Click OK at any PendingFileRenameOperations prompt (and please let us know if you receive this message!). If your computer does not restart automatically, please restart it manually. Run ATF-Cleaner from safe mode.Double-click ATF-Cleaner.exe to run the program. Under Main choose: Select All Click the Empty Selected button. In Safe Mode, run AVG Anti-spyware and click on the Scanner tab at the top. Click the "Settings" tab and then change the recommended action to Quarantine and click Automatically generate report after every scan. Click back to the "Scan" tab and then click on Complete System Scan. This scan can take quite a while to run, so be prepared. AVG Anti-Spyware will list any infections found on the left hand side. When the scan has finished, it will automatically set the recommended action. Click the Apply all actions button. AVG Anti-Spyware will display "All actions have been applied" on the right hand side. Click on "Save Report", then "Save Report As". This will create a text file. Make sure you know where to find this file again (like on the Desktop). Post the AVG-Antispyware repot and a new Hijack This log. Your java is out of date. Download the latest version of http://java.sun.com/javase/downloads/index.jsp Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications". Click the "Download" button to the right. Check the box that says: "Accept License Agreement". The page will refresh. Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop. Close any programs you may have running - especially your web browser. Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java. Check any item with Java Runtime Environment (JRE or J2SE) in the name. It should have the "coffee cup" icon next to it. Click the Remove or Change/Remove button. Repeat as many times as necessary to remove each Java versions. Reboot your computer once all Java components are removed . Then from your desktop double-click on jre-1_6_0-windowsi586-p.exe to install the newest version. You did not post the "smitfraud" scan as suggested in response #1, please post the results of that scan.

AVG Anti-Spyware - Scan Report + Created at: 11:32:34 AM 2/19/2007 + Scan result: C:\Program Files\Common Files\Real\WeatherBug\MiniBugTransporter.dll -> Adware.Minibug : Cleaned. C:\Program Files\themexp\Themexp.org File\VVSNInst.exe -> Adware.SaveNow : Cleaned. :mozilla.177:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.178:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.179:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.294:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.41:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.51:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.52:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.53:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.80:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.81:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.82:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.84:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.86:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.95:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.96:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.97:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.98:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.40:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned. :mozilla.22:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.23:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.24:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.25:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.26:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.33:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.34:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.35:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.36:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.90:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.91:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.92:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.93:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.94:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.14:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Atdmt : Cleaned. :mozilla.18:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned. :mozilla.21:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned. :mozilla.15:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Burstbeacon : Cleaned. :mozilla.86:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned. :mozilla.16:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Burstnet : Cleaned. :mozilla.17:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Burstnet : Cleaned. :mozilla.18:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Burstnet : Cleaned. :mozilla.19:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Burstnet : Cleaned. :mozilla.20:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Burstnet : Cleaned. :mozilla.25:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Burstnet : Cleaned. :mozilla.81:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned. :mozilla.82:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned. :mozilla.83:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned. :mozilla.84:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned. :mozilla.85:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned. :mozilla.133:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.134:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.135:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.136:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.137:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.138:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.139:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.56:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.57:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.58:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.59:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.60:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.61:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.244:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Com : Cleaned. :mozilla.13:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Doubleclick : Cleaned. :mozilla.13:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned. :mozilla.18:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned. :mozilla.19:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned. :mozilla.20:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned. :mozilla.11:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.12:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.13:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.14:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.15:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.16:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.16:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.17:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.42:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.43:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.44:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.46:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.147:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.148:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.149:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.157:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.38:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Information : Cleaned. :mozilla.39:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned. :mozilla.48:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Mediaplex : Cleaned. :mozilla.88:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned. :mozilla.308:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Overture : Cleaned. :mozilla.83:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Overture : Cleaned. :mozilla.167:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned. :mozilla.168:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned. :mozilla.169:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned. :mozilla.170:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned. :mozilla.160:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned. :mozilla.161:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned. :mozilla.162:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned. :mozilla.163:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned. :mozilla.20:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned. :mozilla.97:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Questionmarket : Cleaned. :mozilla.98:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Questionmarket : Cleaned. :mozilla.99:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Questionmarket : Cleaned. :mozilla.158:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned. :mozilla.159:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned. :mozilla.37:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Revenue : Cleaned. :mozilla.278:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned. :mozilla.279:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned. :mozilla.280:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned. :mozilla.281:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned. :mozilla.112:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.113:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.114:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.115:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.116:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.117:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.143:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.144:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.145:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.146:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.147:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.150:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.21:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.22:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.23:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.24:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.25:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.271:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned. :mozilla.272:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned. :mozilla.273:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned. :mozilla.274:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned. :mozilla.232:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.200:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned. :mozilla.201:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned. :mozilla.202:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned. :mozilla.203:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned. :mozilla.204:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned. :mozilla.205:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned. :mozilla.206:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned. :mozilla.33:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Tribalfusion : Cleaned. :mozilla.87:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned. :mozilla.89:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned. :mozilla.105:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.106:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.107:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.108:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.109:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.110:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.111:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.130:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.131:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.132:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.26:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.27:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.28:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.29:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.30:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.31:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.32:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\lkkcuhlw.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.164:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Zedo : Cleaned. :mozilla.165:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Zedo : Cleaned. :mozilla.166:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\4y41gj94.default\cookies.txt -> TrackingCookie.Zedo : Cleaned. ::Report end

Logfile of HijackThis v1.99.1 Scan saved at 11:34:16 AM, on 2/19/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\WINDOWS\Explorer.exe C:\WINDOWS\system32\WgaTray.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\FlashFXP\flashfxp.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe" O4 - HKLM\..\Run: [SoloSentry] C:\PROGRA~1\SRNMIC~1\SOLOSENT.exe O4 - HKLM\..\Run: [SoloSysCheck] C:\PROGRA~1\SRNMIC~1\SYSCHECK.COM O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [AIM] "C:\Program Files\AIM\aim.exe" -cnetwait.odl O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/i... O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by102fd.bay102.hotmail.msn.c... O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll O20 - Winlogon Notify: WB - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll (file missing) O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

SmitFraudFix v2.142 Scan done at 11:39:42.06, Mon 02/19/2007 Run from G:\STOPPPPPPPPPP!\SmitfraudFix\SmitfraudFix OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT The filesystem type is NTFS Fix run in safe mode »»»»»»»»»»»»»»»»»»»»»»»» hosts »»»»»»»»»»»»»»»»»»»»»»»» C:\ »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32 »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrator »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrator\Application Data »»»»»»»»»»»»»»»»»»»»»»»» Start Menu »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ADMINI~1\FAVORI~1 »»»»»»»»»»»»»»»»»»»»»»»» Desktop »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="My Current Home Page" »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs !!!Attention, following keys are not inevitably infected!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="wbsys.dll" »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System !!!Attention, following keys are not inevitably infected!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "System"="" »»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32-huy32