Here ya' go: Notice: Got the same Registry Error: "Cannot Import creg.dat. Error accessing Registry" *********************************** ComboFix 07-11-08.1 - Denco 11/12/2007 20:43:20.2 - NTFSx86 Microsoft Windows 2000 Professional 5.0.2195.4.1252.1.1033.18.655 [GMT -5:00] Running from: C:\Documents and Settings\Dennis\Desktop\ComboFix.exe . ((((((((((((((((((((((((( Files Created from 2007-10-13 to 2007-11-13 ))))))))))))))))))))))))))))))) . 2007-11-12 20:43 16,384 --a----t- C:\WINNT\system32\Perflib_Perfdata_4d0.dat 2007-11-11 23:31 51,200 --a------ C:\WINNT\NirCmd.exe 2007-11-11 20:44 <DIR> d-------- C:\Program Files\Trend Micro 2007-11-11 20:35 2,770 --a------ C:\WINNT\system32\tmp.reg 2007-11-11 20:32 289,144 --a------ C:\WINNT\system32\VCCLSID.exe 2007-11-11 20:32 288,417 --a------ C:\WINNT\system32\SrchSTS.exe 2007-11-11 20:32 53,248 --a------ C:\WINNT\system32\Process.exe 2007-11-11 20:32 51,200 --a------ C:\WINNT\system32\dumphive.exe 2007-11-11 20:32 25,600 --a------ C:\WINNT\system32\WS2Fix.exe 2007-11-08 20:19 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\SPAMfighter 2007-11-08 20:19 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\Grisoft 2007-11-06 02:01 41,472 --a------ C:\WINNT\system32\levro.exe 2007-11-05 14:02 <DIR> d-------- C:\Documents and Settings\Momco\Application Data\Grisoft 2007-11-04 19:59 <DIR> d-------- C:\Documents and Settings\Dennis\Application Data\Grisoft 2007-11-04 19:59 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft 2007-11-04 19:59 10,872 --a------ C:\WINNT\system32\drivers\AvgAsCln.sys 2007-11-03 16:06 <DIR> d-------- C:\Program Files\Common Files\Application 2007-11-03 16:06 <DIR> d-------- C:\Program Files\Common Files\Ankiro 2007-11-03 16:05 <DIR> d-------- C:\Program Files\SPAMfighter . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-13 01:30 --------- d-----w C:\Documents and Settings\Dennis\Application Data\ComcastToolbar 2007-11-12 06:14 --------- d-----w C:\Program Files\American Airlines DealFinder 2007-11-12 06:13 --------- d-----w C:\Program Files\Pelstar 2007-11-12 06:12 --------- d-----w C:\Documents and Settings\Dennis\Application Data\OfficeUpdate12 2007-11-12 04:42 --------- d-----w C:\Program Files\Common Files\Symantec Shared 2007-11-12 03:17 --------- d-----w C:\Documents and Settings\Dennis\Application Data\ZoomBrowser EX 2007-11-12 03:11 --------- d---a-w C:\Documents and Settings\All Users\Application Data\ZoomBrowser 2007-11-09 05:21 --------- d-----w C:\Program Files\Java 2007-11-09 05:01 --------- d-----w C:\Documents and Settings\Administrator\Application Data\COMCASTTOOLBAR 2007-11-04 17:30 --------- d-----w C:\Program Files\ComcastToolbar 2007-11-04 04:28 --------- d-----w C:\Program Files\Common Files\Scanner 2007-11-03 16:42 805 ----a-w C:\WINNT\system32\drivers\SYMEVENT.INF 2007-11-03 16:42 60,800 ----a-w C:\WINNT\system32\S32EVNT1.DLL 2007-11-03 16:42 123,952 ----a-w C:\WINNT\system32\drivers\SYMEVENT.SYS 2007-11-03 16:42 10,740 ----a-w C:\WINNT\system32\drivers\SYMEVENT.CAT 2007-11-03 16:42 --------- d-----w C:\Program Files\Symantec 2007-11-03 16:40 --------- d-----w C:\Program Files\Norton AntiVirus 2007-10-16 17:54 --------- d-----w C:\Documents and Settings\Momco\Application Data\COMCASTTOOLBAR 2007-10-13 20:39 --------- d-----w C:\Documents and Settings\Dennis\Application Data\AdobeUM 2007-10-01 19:49 98,184 ----a-w C:\WINNT\system32\drivers\symfw.sys 2007-10-01 19:49 542,088 ----a-w C:\WINNT\system32\SymNeti.dll 2007-10-01 19:49 31,624 ----a-w C:\WINNT\system32\drivers\symids.sys 2007-10-01 19:49 28,040 ----a-w C:\WINNT\system32\drivers\symndis.sys 2007-10-01 19:49 23,944 ----a-w C:\WINNT\system32\drivers\symredrv.sys 2007-10-01 19:49 189,320 ----a-w C:\WINNT\system32\drivers\symtdi.sys 2007-10-01 19:49 161,160 ----a-w C:\WINNT\system32\SymRedir.dll 2007-10-01 19:48 12,680 ----a-w C:\WINNT\system32\drivers\symdns.sys 2007-09-26 05:23 --------- d-----w C:\Program Files\PartyGaming 2007-08-19 21:55 91,136 ----a-w C:\WINNT\system32\MSOERT2.DLL 2007-08-19 21:55 596,992 ----a-w C:\WINNT\system32\INETCOMM.DLL 2007-08-19 21:55 47,616 ----a-w C:\WINNT\system32\INETRES.DLL 2007-08-19 21:55 229,376 ----a-w C:\WINNT\system32\MSOEACCT.DLL 2007-08-19 21:52 44,032 ----a-w C:\WINNT\system32\MSIDENT.DLL 2007-08-17 06:48 448,272 ----a-w C:\WINNT\system32\oieng400.dll 2007-08-17 06:48 39,184 ----a-w C:\WINNT\system32\jpeg2x32.dll 2007-08-17 06:48 33,552 ----a-w C:\WINNT\system32\tifflt.dll 2004-03-28 08:14 271 ---h--w C:\Program Files\desktop.ini 2004-03-28 08:14 21,952 ---h--w C:\Program Files\folder.htt 2003-07-14 12:00 32,528 ----a-w C:\WINNT\inf\wbfirdma.sys . ((((((((((((((((((((((((((((( snapshot@Sun 2007-11-11_23.40.05.85 ))))))))))))))))))))))))))))))))))))))))) . - 2005-09-09 02:36:32 1,997,664 ----a-w C:\WINNT\system32\MRT.exe + 2007-09-28 03:19:40 18,089,592 ----a-w C:\WINNT\system32\MRT.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SoundMan"="SOUNDMAN.EXE" [08/15/03 02:34a C:\WINNT\SOUNDMAN.EXE] "WinPoET"="C:\Program Files\VerizonDSL\WinPoET\WinPPPoverEthernet.exe" [08/11/00 12:48p] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [09/25/07 01:11a] "Synchronization Manager"="mobsync.exe" [07/14/03 07:00a C:\WINNT\system32\mobsync.exe] "PDUiP6310DMon"="C:\Program Files\Canon\Memory Card Utility\iP6310D\PDUiP6310DMon.exe" [03/16/06 02:47p] "CanonMyPrinter"="C:\Program Files\Canon\MyPrinter\BJMyPrt.exe" [03/21/06 08:30p] "tgcmd"="C:\Program Files\Support.com\bin\tgcmd.exe" [06/02/06 02:09p] "ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [01/22/07 09:19p] "SPAMfighter Agent"="C:\Program Files\SPAMfighter\SFAgent.exe" [10/25/07 03:29p] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [06/11/07 04:25a] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Uniblue SpeedUpMyPC"="" [] C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ Snsicon.lnk - C:\Program Files\Second Nature\Snsicon.exe [2005-11-21 16:11:38] R2 CVPNDRV;Cisco Systems IPsec Driver;\??\C:\WINNT\system32\Drivers\CVPNDRV.sys R2 SPAMfighter Update Service;SPAMfighter Update Service;"C:\Program Files\SPAMfighter\sfus.exe" R3 FW1;SecuRemote Miniport;C:\WINNT\system32\DRIVERS\fw.sys R3 usbhub20;USB 2.0 Root Hub Support;C:\WINNT\system32\DRIVERS\usbhub20.sys R3 WrKPoET2000;WrKPoET2000;\??\C:\Program Files\VerizonDSL\WinPoET\WrKPoET2000.sys R3 WRSWanDD;iVasion PoET Adapter;C:\WINNT\system32\DRIVERS\WrKPoETNic2000.sys S2 HPW5ECP;HPW5ECP;C:\WINNT\system32\drivers\HPW5ECP.SYS S2 InverseLaunchIPI_BAIS;Visual IP InSight Client (VerizonDSL);C:\Program Files\VerizonDSL\IPInsight\LaunchIPI.exe S3 SetupNTGLM7X;SetupNTGLM7X;\??\D:\NTGLM7X.sys S3 viafilter;VIA USB Filter;C:\WINNT\system32\Drivers\viausb.sys . Contents of the 'Scheduled Tasks' folder "2007-05-01 23:00:02 C:\WINNT\Tasks\Norton AntiVirus - Run Full System Scan - Denco.job" - C:\PROGRA~1\NORTON~1\Navw32.exe "2007-05-05 00:23:44 C:\WINNT\Tasks\Uniblue SpeedUpMyPC Nag.job" - C:\Program Files\Uniblue\SpeedUpMyPC\SpeedUpMyPC.exe "2007-05-05 00:23:41 C:\WINNT\Tasks\Uniblue SpeedUpMyPC.job" - C:\Program Files\Uniblue\SpeedUpMyPC\SpeedUpMyPC.exe . ************************************************************************** catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-12 20:45:49 Windows 5.0.2195 Service Pack 4 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 11/12/2007 20:46:32 C:\ComboFix2.txt ... 11/11/07 11:41p . --- E O F --- ************************************ Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 8:47:32 PM, on 11/12/2007 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Boot mode: Normal Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe C:\WINNT\system32\svchost.exe C:\Program Files\VerizonDSL\IPInsight\ARUpld32.exe C:\Program Files\VerizonDSL\IPInsight\ARMon32a.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\Program Files\SPAMfighter\sfus.exe C:\WINNT\system32\stisvc.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\Program Files\VerizonDSL\WinPoET\WrOS.exe C:\WINNT\system32\mspmspsv.exe C:\WINNT\system32\svchost.exe C:\WINNT\SOUNDMAN.exe C:\Program Files\VerizonDSL\WinPoET\WinPPPoverEthernet.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\Canon\Memory Card Utility\iP6310D\PDUiP6310DMon.exe C:\Program Files\Canon\MyPrinter\BJMyPrt.exe C:\Program Files\Support.com\bin\tgcmd.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\SPAMfighter\SFAgent.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Second Nature\Snsicon.exe C:\WINNT\system32\msiexec.exe C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.exe C:\WINNT\explorer.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~1\COMCAS~1.DLL O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.exe O4 - HKLM\..\Run: [WinPoET] "C:\Program Files\VerizonDSL\WinPoET\WinPPPoverEthernet.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [PDUiP6310DMon] C:\Program Files\Canon\Memory Card Utility\iP6310D\PDUiP6310DMon.exe O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon O4 - HKLM\..\Run: [tgcmd] C:\Program Files\Support.com\bin\tgcmd.exe /server /startmonitor /deaf O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program Files\SPAMfighter\SFAgent.exe" update delay 60 O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - Global Startup: Snsicon.lnk = C:\Program Files\Second Nature\Snsicon.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O15 - Trusted Zone: http://*.msn.com O15 - Trusted Zone: http://*.turbotax.com O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?lin... O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/... O16 - DPF: {3B66AEF9-989C-4979-9785-667C62305CC1} - http://moneycentral.msn.com/cabs/we... O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/act... O16 - DPF: {562F499D-186B-42E7-B112-23D82883D542} - http://moneycentral.msn.com/cabs/pm... O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/... O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/download... O16 - DPF: {963BE66B-121D-4E6C-BF9F-1A774D9A2E41} - http://moneycentral.msn.com/cabs/pm... O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: FwSRService - Unknown owner - C:\Program Files\CheckPoint\SecuRemote\bin\fwsrservice.exe O23 - Service: Visual IP InSight Client (VerizonDSL) (InverseLaunchIPI_BAIS) - Visual Networks - C:\Program Files\VerizonDSL\IPInsight\LaunchIPI.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.exe O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.exe O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files\SPAMfighter\sfus.exe O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: WinPPPoverEthernet - iVasion, a Routerware Company - C:\Program Files\VerizonDSL\WinPoET\WrOS.exe -- End of file - 8978 bytes

0

Looks better. Run Hijack This> click "open the misc. tool section"> click "open uninstall manager"> click "save list"> click "save"> click "yes"> post that log please. Run this free online scan from Kaspersky http://kaspersky.com/kos/english/kavwebscan.html Click Accept When the updates are finished downloading, click Next, Scan Settings Under Scan using the following antivirus database:, select extended Make sure the Scan Archives and Scan Mail Bases options are selected as well. Click OK Click My Computer and wait for the scan to finish Click Save Report As. Under Save as type:, select Text file. Save this log to your Desktop and post a copy of it here.

0

This system is running much better. Here are the logs you requested: *********************************** Adensoft Audio/Data CD Burner 2.92 Adobe Acrobat 6.0.1 Standard Adobe Acrobat and Reader 6.0.3 Update Adobe Acrobat and Reader 6.0.4 Update Adobe Acrobat and Reader 6.0.5 Update Adobe Acrobat and Reader 6.0.6 Update Adobe Atmosphere Player for Acrobat and Adobe Reader Adobe Flash Player 9 ActiveX Avery DesignPro Avery® Wizard 2.1 forMicrosoft® Word 2000 AVG Anti-Spyware 7.5 Canon Camera Support Core Library Canon Camera TWAIN Driver 6.7 Canon Camera Window DC_DV 5 for ZoomBrowser EX Canon Camera Window DC_DV 6 for ZoomBrowser EX Canon Camera Window MC 6 for ZoomBrowser EX Canon G.726 WMP-Decoder Canon iP6310D Canon iP6310D Memory Card Utility Canon iP6310D User Registration Canon MovieEdit Task for ZoomBrowser EX Canon My Printer Canon RAW Image Task for ZoomBrowser EX Canon RemoteCapture Task for ZoomBrowser EX Canon Utilities Easy-PhotoPrint Canon Utilities EOS Utility Canon Utilities PhotoStitch Canon Utilities ZoomBrowser EX ccCommon Check Point SecuRemote 4.1 SP-4 Comcast High-Speed Internet Install Wizard Comcast Toolbar Compatibility Pack for the 2007 Office system Cookie Washer (AOL) DesignPro 5.0 Sign Edition Desktop Doctor Easy-WebPrint Finet Citrix ICA Client HijackThis 2.0.2 Intellisync for Verizon iobi Internet Worm Protection iVasion WinPoET Version 2.0 J2SE Runtime Environment 5.0 Update 6 Java 2 Runtime Environment, SE v1.4.2_04 Java(TM) 6 Update 3 Kaspersky Online Scanner KM400/KN400 Display Driver and Utilities LiveUpdate 3.0 (Symantec Corporation) Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft Office Professional Edition 2003 Microsoft Visual C++ 2005 Redistributable Microsoft Windows Journal Viewer Microsoft XML Parser and SDK MNL ACE Software MNL ACE Software Updates MNL ACE VUL Software MSN Money Investment Toolbox MSXML 4.0 SP2 (KB925672) MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 Parser and SDK NAVShortcut Norton AntiVirus 2006 Norton AntiVirus 2006 (Symantec Corporation) Norton AntiVirus Help Norton AntiVirus Parent MSI Norton AntiVirus SYMLT MSI Norton Protection Center Norton WMI Update PartyPoker QuickBooks Pro 2007 QuickBooks Product Listing Service S3 S3Display S3 S3Gamma2 S3 S3Info2 S3 S3Overlay Second Nature - Glimmer Train Stories Second Nature - Once Upon a Christmas Second Nature - Our America Second Nature - Sunrise - Sunset Second Nature - Wooden Boats by Benjamin Mendlowitz Security Update for CAPICOM (KB931906) Security Update for CAPICOM (KB931906) Security Update for Windows 2000 (KB904706) Security Update for Windows 2000 (KB923689) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows Media Player 9 (KB911565) Security Update for Windows Media Player 9 (KB917734) Security Update for Windows Media Player 9 (KB936782) SPAMfighter SPBBC SupportSoft Assisted Service Symantec Symantec KB-DocID:2003093015493306 Symantec Technical Support Web Controls TurboTax ItsDeductible 2006 TurboTax Premier 2005 TurboTax Premier Investments 2006 Uniblue RegistryBooster2 Uniblue SpeedUpMyPC Uniblue System Tweaker Update Rollup 1 for Windows 2000 SP4 Visual IP InSight 4.3 (VerizonDSL) VPN Client WexTech AnswerWorks Windows 2000 Hotfix - KB833407 Windows 2000 Hotfix - KB834707 Windows 2000 Hotfix - KB842773 Windows 2000 Hotfix - KB867282 Windows 2000 Hotfix - KB883939 Windows 2000 Hotfix - KB889293 Windows 2000 Hotfix - KB890046 Windows 2000 Hotfix - KB890923 Windows 2000 Hotfix - KB893756 Windows 2000 Hotfix - KB894320 Windows 2000 Hotfix - KB896358 Windows 2000 Hotfix - KB896422 Windows 2000 Hotfix - KB896423 Windows 2000 Hotfix - KB896424 Windows 2000 Hotfix - KB896688 Windows 2000 Hotfix - KB896727 Windows 2000 Hotfix - KB897715 Windows 2000 Hotfix - KB899587 Windows 2000 Hotfix - KB899588 Windows 2000 Hotfix - KB899589 Windows 2000 Hotfix - KB900725 Windows 2000 Hotfix - KB901017 Windows 2000 Hotfix - KB901214 Windows 2000 Hotfix - KB902400 Windows 2000 Hotfix - KB905414 Windows 2000 Hotfix - KB905495 Windows 2000 Hotfix - KB905749 Windows 2000 Hotfix - KB905915 Windows 2000 Hotfix - KB908519 Windows 2000 Hotfix - KB908523 Windows 2000 Hotfix - KB908531 Windows 2000 Hotfix - KB911280 Windows 2000 Hotfix - KB911567 Windows 2000 Hotfix - KB912812 Windows 2000 Hotfix - KB912919 Windows 2000 Hotfix - KB913580 Windows 2000 Hotfix - KB914388 Windows 2000 Hotfix - KB914389 Windows 2000 Hotfix - KB916281 Windows 2000 Hotfix - KB917008 Windows 2000 Hotfix - KB917159 Windows 2000 Hotfix - KB917422 Windows 2000 Hotfix - KB917537 Windows 2000 Hotfix - KB917736 Windows 2000 Hotfix - KB917953 Windows 2000 Hotfix - KB918118 Windows 2000 Hotfix - KB918899 Windows 2000 Hotfix - KB920213 Windows 2000 Hotfix - KB920670 Windows 2000 Hotfix - KB920683 Windows 2000 Hotfix - KB920685 Windows 2000 Hotfix - KB920958 Windows 2000 Hotfix - KB921398 Windows 2000 Hotfix - KB921503 Windows 2000 Hotfix - KB921883 Windows 2000 Hotfix - KB922582 Windows 2000 Hotfix - KB922616 Windows 2000 Hotfix - KB922760 Windows 2000 Hotfix - KB923191 Windows 2000 Hotfix - KB923414 Windows 2000 Hotfix - KB923694 Windows 2000 Hotfix - KB923810 Windows 2000 Hotfix - KB923980 Windows 2000 Hotfix - KB924191 Windows 2000 Hotfix - KB924270 Windows 2000 Hotfix - KB924667 Windows 2000 Hotfix - KB925454 Windows 2000 Hotfix - KB925486 Windows 2000 Hotfix - KB925902 Windows 2000 Hotfix - KB926122 Windows 2000 Hotfix - KB926436 Windows 2000 Hotfix - KB927891 Windows 2000 Hotfix - KB928090 Windows 2000 Hotfix - KB928843 Windows 2000 Hotfix - KB929969 Windows 2000 Hotfix - KB930178 Windows 2000 Hotfix - KB931768 Windows 2000 Hotfix - KB931784 Windows 2000 Hotfix - KB932168 Windows 2000 Hotfix - KB933566 Windows 2000 Hotfix - KB933729 Windows 2000 Hotfix - KB935839 Windows 2000 Hotfix - KB935840 Windows 2000 Hotfix - KB936021 Windows 2000 Hotfix - KB937143 Windows 2000 Hotfix - KB938127 Windows 2000 Hotfix - KB938827 Windows 2000 Hotfix - KB938829 Windows 2000 Hotfix - KB939653 Windows 2000 Hotfix - KB941202 Windows 2000 Hotfix (SP5) Q818043 Windows Genuine Advantage v1.3.0254.0 Windows Media Player 9 Hotfix [See KB885492 for more information] Windows Media Player Hotfix [See Q828026 for more information] Windows Media Player system update (9 Series) WinZip *************************** KASPERSKY ONLINE SCANNER REPORT Tuesday, November 13, 2007 9:44:54 AM Operating System: Microsoft Windows 2000 Professional, Service Pack 4 (Build 2195) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 13/11/2007 Kaspersky Anti-Virus database records: 457371 Scan Settings Scan using the following antivirus database extended Scan Archives true Scan Mail Bases true Scan Target My Computer A:\ C:\ D:\ Scan Statistics Total number of scanned objects 40830 Number of viruses found 23 Number of infected objects 109 Number of suspicious objects 0 Duration of the scan process 01:10:05 Infected Object Name Virus Name Last Action C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\HPPAppActivity.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\HPPHomePageActivity.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\2007-11-12_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\02914753.dll Infected: Backdoor.Win32.Small.cls skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\057C1CAF.exe Infected: Trojan.Win32.Qhost.ue skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0E1A1513.tmp Infected: Trojan.Java.ClassLoader.k skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\12FD473A.htm Infected: Exploit.HTML.Agent.j skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1A9812FF.dat Infected: not-virus:Hoax.Win32.Renos.lq skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1A9F66F8.exe Infected: Trojan.Win32.Qhost.pw skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1AB6507A.exe Infected: Trojan.Win32.Qhost.ue skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1DA545A5.dat Infected: not-virus:Hoax.Win32.Renos.lq skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1DA86FA1.exe Infected: Trojan.Win32.Qhost.pw skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1E9D5C00.tmp/MagicApplet.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1E9D5C00.tmp/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1E9D5C00.tmp ZIP: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1E9D5C00.tmp CryptFF: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\207D5661.htm Infected: Trojan-Downloader.VBS.Agent.u skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\215C4455.tmp Infected: Trojan.Java.ClassLoader.k skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23222A9D.dat Infected: Backdoor.Win32.Small.cbo skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23265499.dll Infected: Backdoor.Win32.Small.cls skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23C3343E.tmp Infected: Trojan.Java.ClassLoader.k skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\270040F3.tmp/MagicApplet.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\270040F3.tmp/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\270040F3.tmp ZIP: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\270040F3.tmp CryptFF: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\27295B8F.tmp/MagicApplet.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\27295B8F.tmp/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\27295B8F.tmp ZIP: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\27295B8F.tmp CryptFF: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\27432B72.tmp/MagicApplet.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\27432B72.tmp/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\27432B72.tmp ZIP: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\27432B72.tmp CryptFF: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\29837E77.exe Infected: Trojan.Win32.Qhost.ue skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2A673B21.txt Infected: Trojan.Win32.Agent.ali skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2E9B5AFF.cla Infected: Trojan.Java.ClassLoader.i skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2FC01C2F.tmp Infected: Trojan.Java.ClassLoader.i skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2FC4462B.tmp Infected: Trojan.Java.ClassLoader.k skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\390D25CB.tmp/MagicApplet.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\390D25CB.tmp/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\390D25CB.tmp ZIP: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\390D25CB.tmp CryptFF: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\3CD64A13.dat Infected: Backdoor.Win32.Small.cbo skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\422F7076.exe Infected: Trojan.Win32.Qhost.ue skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\459735F4.htm Infected: Trojan-Downloader.VBS.Agent.u skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\459E09EC.htm Infected: Trojan-Downloader.JS.Agent.fq skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\45F34D8F.tmp/MagicApplet.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\45F34D8F.tmp/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\45F34D8F.tmp ZIP: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\45F34D8F.tmp CryptFF: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\46EF13E2.htm Infected: Trojan-Downloader.VBS.Agent.u skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\46FC3BD4.htm Infected: Trojan-Downloader.JS.Agent.fq skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\47625165.tmp/MagicApplet.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\47625165.tmp/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\47625165.tmp ZIP: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\47625165.tmp CryptFF: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\487465AB.tmp/MagicApplet.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\487465AB.tmp/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\487465AB.tmp ZIP: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\487465AB.tmp CryptFF: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4E9852EC.tmp/MagicApplet.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4E9852EC.tmp/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4E9852EC.tmp ZIP: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4E9852EC.tmp CryptFF: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4F9F275C.tmp/MagicApplet.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4F9F275C.tmp/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4F9F275C.tmp ZIP: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4F9F275C.tmp CryptFF: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\52FB0D1D.exe Infected: Trojan.Win32.Qhost.ue skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\537C2FAE.exe Infected: Trojan.Win32.Qhost.ue skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\53A41462.exe Infected: Trojan.Win32.Qhost.ue skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\54381B29.exe Infected: Trojan.Win32.Qhost.ue skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\60967AE8.dll Infected: Trojan-Downloader.Win32.Agent.bxx skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\619D2DCC.htm Infected: Trojan-Downloader.VBS.Agent.u skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\61A62BC1.htm Infected: Trojan-Downloader.JS.Agent.fq skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\63334214.exe Infected: Trojan.Win32.Qhost.ue skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\68965F35.tmp Infected: Trojan.Java.ClassLoader.i skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\69B13376.tmp Infected: Trojan.Java.ClassLoader.k skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\714239C3.tmp/MagicApplet.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\714239C3.tmp/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\714239C3.tmp ZIP: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\714239C3.tmp CryptFF: infected - 2 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78C063C7.htm Infected: Trojan-Downloader.VBS.Agent.u skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78DE5DA7.htm Infected: Trojan-Downloader.JS.Agent.fq skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78E85B9C.zip/BaaaaBaa.class Infected: Trojan.Java.ClassLoader.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78E85B9C.zip/VaaaaaaaBaa.class Infected: Trojan.Java.ClassLoader.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78E85B9C.zip/Baaaaa.class Infected: Trojan.Java.ClassLoader.ao skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78E85B9C.zip ZIP: infected - 3 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\78E85B9C.zip CryptFF: infected - 3 skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\794708B0.exe Infected: Trojan.Win32.Qhost.ue skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\79C027DE.exe Infected: Trojan.Win32.Qhost.ue skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\79D07DFA.htm Infected: Trojan-Downloader.VBS.Agent.u skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\79D427F7.htm Infected: Trojan-Downloader.JS.Agent.fq skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7AA72F03.php Infected: Trojan-Downloader.JS.IESlice.l skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7C810723.exe Infected: Trojan.Win32.Qhost.ue skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7DAB2665.tmp Infected: Trojan.Java.ClassLoader.i skipped C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\7DAE5061.tmp Infected: Trojan.Java.ClassLoader.k skipped C:\Documents and Settings\Default User\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Default User\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Dennis\Application Data\Microsoft\Templates\Normal.dot Object is locked skipped C:\Documents and Settings\Dennis\Application Data\SPAMfighter\Logs\Agent.log.txt Object is locked skipped C:\Documents and Settings\Dennis\Application Data\Symantec\PendingAlertsQueue.log Object is locked skipped C:\Documents and Settings\Dennis\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Dennis\Desktop\SmitfraudFix.zip/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\Documents and Settings\Dennis\Desktop\SmitfraudFix.zip ZIP: infected - 1 skipped C:\Documents and Settings\Dennis\Desktop\SmitfraudFix[1]\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\Documents and Settings\Dennis\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Dennis\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Dennis\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Dennis\Local Settings\History\History.IE5\MSHist012007111220071113\index.dat Object is locked skipped C:\Documents and Settings\Dennis\Local Settings\History\History.IE5\MSHist012007111320071114\index.dat Object is locked skipped C:\Documents and Settings\Dennis\Local Settings\Temp\~DF3E32.tmp Object is locked skipped C:\Documents and Settings\Dennis\Local Settings\Temp\~DF860D.tmp Object is locked skipped C:\Documents and Settings\Dennis\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Dennis\Local Settings\Temporary Internet Files\Content.Word\~WRS0000.tmp Object is locked skipped C:\Documents and Settings\Dennis\NTUSER.DAT Object is locked skipped C:\Documents and Settings\Dennis\ntuser.dat.LOG Object is locked skipped C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll Object is locked skipped C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsys.dll Object is locked skipped C:\Program Files\Common Files\Symantec Shared\eengine\EPERSIST.DAT Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SNDALRT.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SNDCON.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SNDDBG.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SNDFW.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SNDIDS.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SNDSYS.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBConfig.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBDebug.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBDetect.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBNotify.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBRefr.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetCfg.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetCfg2.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetDev.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetLoc.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetUsr.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSMNot.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSMReg.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSMRSt.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBStHash.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBStMSI.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBValid.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPPolicy.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPStart.log Object is locked skipped C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPStop.log Object is locked skipped C:\Program Files\Microsoft Office\OFFICE11\STARTUP\A20MSW00.DOT Object is locked skipped C:\Program Files\Norton AntiVirus\AVApp.log Object is locked skipped C:\Program Files\Norton AntiVirus\AVError.log Object is locked skipped C:\Program Files\Norton AntiVirus\AVVirus.log Object is locked skipped C:\Program Files\Norton AntiVirus\Savrt\0021NAV~.TMP Object is locked skipped C:\qoobox\Quarantine\C\Documents and Settings\Administrator\Start Menu\Programs\Startup\infos.exe.vir Object is locked skipped C:\qoobox\Quarantine\C\Documents and Settings\Momco\Start Menu\Programs\Startup\infos.exe.vir Object is locked skipped C:\qoobox\Quarantine\C\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL.vir Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\qoobox\Quarantine\C\Program Files\MyWebSearch\bar\1.bin\f3htmlmu.del.vir Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\qoobox\Quarantine\C\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR.vir Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\qoobox\Quarantine\C\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.exe.vir Infected: not-a-virus:AdTool.Win32.MyWebSearch.a skipped C:\qoobox\Quarantine\C\Program Files\MyWebSearch\bar\1.bin\M3HTML.DLL.vir Infected: not-a-virus:AdTool.Win32.MyWebSearch.f skipped C:\qoobox\Quarantine\C\Program Files\MyWebSearch\bar\1.bin\m3outlcn.del.vir Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\qoobox\Quarantine\C\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL.vir Infected: not-a-virus:AdTool.Win32.MyWebSearch.l skipped C:\qoobox\Quarantine\C\Program Files\MyWebSearch\bar\1.bin\mwsbar.del.vir Infected: not-a-virus:AdTool.Win32.MyWebSearch.s skipped C:\qoobox\Quarantine\C\Program Files\MyWebSearch\bar\1.bin\mwsoestb.del.vir Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\qoobox\Quarantine\C\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL.vir Infected: not-a-virus:AdTool.Win32.MyWebSearch.i skipped C:\qoobox\Quarantine\C\WINNT\system32\f3PSSavr.scr.vir Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped C:\WINNT\CSC\00000001 Object is locked skipped C:\WINNT\Debug\PASSWD.LOG Object is locked skipped C:\WINNT\SchedLgU.Txt Object is locked skipped C:\WINNT\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINNT\Sti_Trace.log Object is locked skipped C:\WINNT\system32\config\AppEvent.Evt Object is locked skipped C:\WINNT\system32\config\default Object is locked skipped C:\WINNT\system32\config\default.LOG Object is locked skipped C:\WINNT\system32\config\SAM Object is locked skipped C:\WINNT\system32\config\SAM.LOG Object is locked skipped C:\WINNT\system32\config\SecEvent.Evt Object is locked skipped C:\WINNT\system32\config\SECURITY Object is locked skipped C:\WINNT\system32\config\SECURITY.LOG Object is locked skipped C:\WINNT\system32\config\software Object is locked skipped C:\WINNT\system32\config\software.LOG Object is locked skipped C:\WINNT\system32\config\SysEvent.Evt Object is locked skipped C:\WINNT\system32\config\system Object is locked skipped C:\WINNT\system32\config\SYSTEM.ALT Object is locked skipped C:\WINNT\system32\drivers\etc\2.hosts Infected: Trojan.Win32.Qhost.my skipped C:\WINNT\system32\fwlog.txt Object is locked skipped C:\WINNT\system32\ias\dnary.ldb Object is locked skipped C:\WINNT\system32\ias\ias.ldb Object is locked skipped C:\WINNT\system32\ias\ias.mdb Object is locked skipped C:\WINNT\system32\Perflib_Perfdata_4d0.dat Object is locked skipped C:\WINNT\Temp\JET84DA.tmp Object is locked skipped C:\WINNT\Temp\JETB6D7.tmp Object is locked skipped C:\WINNT\WindowsUpdate.log Object is locked skipped Scan process completed.

0

Go to start> control panel> add/remove programs and uninstall these programs: J2SE Runtime Environment 5.0 Update 6 Java 2 Runtime Environment, SE v1.4.2_04 PartyPoker Navigate to delete the contents of this folder: C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine (not the folder itself) Navigate to and delete this folder C:\qoobox How is the computer operating?

0

The system is running like new. You are the BEST! Had a little trouble deleting the Quarantined files. Couldn't do them directly, had to do so through the Norton AV program. All set. May I ask you another question? My office computer (MS Xp) suddenly lost its Printers File. Cannot activate it from the Start Menu. Cannot open it through Control Panel. Shut down the system fine last Thursday and when initialized Friday morning I could not print. Is this probably a Xp problem or a virus problem?

0

Glad we could help. I can't be sure but it sounds like a corrupt file. 1. Turn off the printer. 2. Then go to Control Panel> Administrative Tools> Services> scroll down to "Print Spooler" and right click it> click stop> apply> ok. 3. Navigate to C:\WINDOWS\system32\spool\PRINTERS and delete the files in the PRINTER folder (not the PRINTERS folder)as they a most likely corrupt. 4. Now turn your printer back. 5. Then go to Control Panel> Administrative Tools> Services> scroll down to "Print Spooler" and right click it> click start> apply> ok. 6. Restrat the computer.

0