Ever since catching the coolweb virus three years ago, or maybe two... closer to three, I've had Spybot S&D on my computer. Off an on I have either Zone Alarm of McAfee running. Lately my computer seems to be... so slow. Its like its running 98% of its ability before I do anything and just opening a browser takes (could take forever) many minutes until I do a CTRL+ALT+DEL or try to spur the computer on. I try to play Star Wars Galaxies online and recently its been very very sluggish. I run System Mechanic 6 which has its own spyware remover and defragmenter it runs. I'm just not sure what to do. I'm finding small spywares here and there. McAfee popped a window about a trojan that changed something but was fixed earlier but its still slow. I don't know what to do anymore.

Please post a Hijack This log so that the files associated with the virus/spyware/hijacker can be identified. Please download HJTsetup.exe from this link http://www.thespykiller.co.uk/files/HJTsetup.exe to your desktop. Doubleclick on the HJTsetup.exe icon on your desktop. By default it will install to C:\Program Files\Hijack This. Continue to click "next" in the setup dialogue boxes until you get to the "Select Addition Tasks" dialogue. Put a check by "Create a desktop icon" then click "Next" again. Continue to follow the rest of the prompts from there. At the final dialogue box click "Finish" and it will launch Hijack This. Click on the "Do a system scan and save a logfile" button. It will scan and the log should open in notepad. Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log and post it in this thread. Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly.

I thought you'd never ask =) Logfile of HijackThis v1.99.1 Scan saved at 8:43:50 PM, on 8/14/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.exe c:\program files\mcafee.com\agent\mcdetect.exe c:\PROGRA~1\mcafee.com\vso\mcshield.exe c:\PROGRA~1\mcafee.com\agent\mctskshd.exe C:\PROGRA~1\VERIZO~1\HELPSU~1\VERIZO~1.exe C:\WINDOWS\system32\CTHELPER.exe C:\Program Files\McAfee.com\VSO\oasclnt.exe C:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Common Files\Verizon Online\ConnMgr\cmisrv.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.exe C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe c:\program files\mcafee.com\vso\mcvsshld.exe c:\progra~1\mcafee.com\vso\mcvsescn.exe C:\Program Files\Common Files\Verizon Online\AppMgr\vzOpenUIServer.exe C:\Documents and Settings\Steve\Desktop\hijackthis\HijackThis.exe C:\Program Files\Common Files\MotiveBrowser\MotiveBrowser.exe C:\WINDOWS\system32\UAService7.exe C:\WINDOWS\system32\imapi.exe C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://wapp.verizon.net/bookmarks/bmredir.asp?region=all&bw=dsl&cd=7.0MSN&bm=ms_home R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/sbcydsl/*http://www.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Verizon Online R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1 O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Verizon Broadband Toolbar - {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - C:\PROGRA~1\COMMON~1\VERIZO~1\SFP\vzbb.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O3 - Toolbar: Verizon Broadband Toolbar - {4E7BD74F-2B8D-469E-D0FC-E57AF4D5FA7D} - C:\PROGRA~1\COMMON~1\VERIZO~1\SFP\vzbb.dll O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll O4 - HKLM\..\Run: [A Verizon App] C:\PROGRA~1\VERIZO~1\HELPSU~1\VERIZO~1.exe O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.exe C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.exe C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.exe O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemydsl.verizon.net/sdcCommon/download/tgctlcm.cab O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab40641.cab O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (ZPA_TexasHoldem Object) - http://zone.msn.com/bingame/zpagames/zpa_txhe.cab43895.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab O16 - DPF: {FE5B9F54-7764-4C01-89F0-4862601EE954} (DigWebHelper Class) - http://photos.msn.com/resources/neutral/controls/DigWebX2.cab?10,0,910,0 O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe

Please download ATF-Cleaner to your desktop from this link http://www.atribune.org/content/view/19/2/ We will need it later in safe mode Download and install Ewido Security Suite We will need this later in safe mode Be sure to update Ewido Next, please reboot your computer in Safe Mode by doing the following : Restart your computer After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually; Instead of Windows loading as normal, a menu with options should appear; Select the first option, to run Windows in Safe Mode, then press "Enter". Choose your usual account. Run Hijack This from safe mode, close all windows except Hijack This, place a check to the left of the following items and press "fix checked": R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/sbcydsl/*http://www.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = Exit Hijack This but remain in safe mode Run Ewido from safe mode and let it delete all that it finds. Run ATF-Cleaner from safe mode.Double-click ATF-Cleaner.exe to run the program. Under Main choose: Select All Click the Empty Selected button. Reboot into mormal mode. Run this free online scan from Panda When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to the desktop, then copy/paste into the text editor and post it.

Interesting. Still slow x_X . I also got an email saying jabuck would ruin my computer but the person spelled "at least" as "leest" so, no worries there. In any case it seems the remaining spyware is in the System Mechanic folder? I don't know. Before when I ran the ewido it found 162 spywares and adwares that Spybot, Spysweeper, and McAfee failed to find. I think they were also in the System Mechanics 6 folder... hmm... Here is the Panda log you requested. It looks jumbled a bit because of the forum restraints. Incident Status Location Spyware:Cookie/Com.com Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{145AF73D-D193-4BA0-879C-001706402B94}\{D5EECBF6-94B1-499E-B7CB-6BFABD6224B4}.txt[{D5EECBF6-94B1-499E-B7CB-6BFABD6224B4}.txt][.com.com/] Spyware:Cookie/Atlas DMT Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{145AF73D-D193-4BA0-879C-001706402B94}\{D5EECBF6-94B1-499E-B7CB-6BFABD6224B4}.txt[{D5EECBF6-94B1-499E-B7CB-6BFABD6224B4}.txt][.atdmt.com/] Spyware:Cookie/Overture Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{145AF73D-D193-4BA0-879C-001706402B94}\{D5EECBF6-94B1-499E-B7CB-6BFABD6224B4}.txt[{D5EECBF6-94B1-499E-B7CB-6BFABD6224B4}.txt][.perf.overture.com/] Spyware:Cookie/Tucows Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{145AF73D-D193-4BA0-879C-001706402B94}\{D5EECBF6-94B1-499E-B7CB-6BFABD6224B4}.txt[{D5EECBF6-94B1-499E-B7CB-6BFABD6224B4}.txt][.tucows.com/] Spyware:Cookie/Enhance Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{145AF73D-D193-4BA0-879C-001706402B94}\{D5EECBF6-94B1-499E-B7CB-6BFABD6224B4}.txt[{D5EECBF6-94B1-499E-B7CB-6BFABD6224B4}.txt][c.enhance.com/] Spyware:Cookie/GoClick Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{145AF73D-D193-4BA0-879C-001706402B94}\{D5EECBF6-94B1-499E-B7CB-6BFABD6224B4}.txt[{D5EECBF6-94B1-499E-B7CB-6BFABD6224B4}.txt][c.goclick.com/] Spyware:Cookie/YieldManager Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{145AF73D-D193-4BA0-879C-001706402B94}\{D5EECBF6-94B1-499E-B7CB-6BFABD6224B4}.txt[{D5EECBF6-94B1-499E-B7CB-6BFABD6224B4}.txt][ad.yieldmanager.com/] Spyware:Cookie/Com.com Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{22332F0A-436B-4A7E-BF8C-59843ECE9A50}\{6883ED23-6659-421C-90CA-0916CD4C4564}.txt[{6883ED23-6659-421C-90CA-0916CD4C4564}.txt][.com.com/] Spyware:Cookie/YieldManager Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{22332F0A-436B-4A7E-BF8C-59843ECE9A50}\{6883ED23-6659-421C-90CA-0916CD4C4564}.txt[{6883ED23-6659-421C-90CA-0916CD4C4564}.txt][ad.yieldmanager.com/] Spyware:Cookie/Overture Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{26295218-E004-49B1-890D-DA0265E132C6}\{62313096-2A5E-4FA2-AFC4-16B21EEFC865}.txt[{62313096-2A5E-4FA2-AFC4-16B21EEFC865}.txt][.overture.com/] Spyware:Cookie/Overture Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{26295218-E004-49B1-890D-DA0265E132C6}\{62313096-2A5E-4FA2-AFC4-16B21EEFC865}.txt[{62313096-2A5E-4FA2-AFC4-16B21EEFC865}.txt][.perf.overture.com/] Spyware:Cookie/Com.com Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{26295218-E004-49B1-890D-DA0265E132C6}\{62313096-2A5E-4FA2-AFC4-16B21EEFC865}.txt[{62313096-2A5E-4FA2-AFC4-16B21EEFC865}.txt][.com.com/] Spyware:Cookie/YieldManager Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{26295218-E004-49B1-890D-DA0265E132C6}\{62313096-2A5E-4FA2-AFC4-16B21EEFC865}.txt[{62313096-2A5E-4FA2-AFC4-16B21EEFC865}.txt][ad.yieldmanager.com/] Spyware:Cookie/2o7 Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{3E08C3C6-486D-4540-AFCE-8A01DD52B971}\{0E238291-F51B-4C6E-874B-8600759BA9C5}.txt[{0E238291-F51B-4C6E-874B-8600759BA9C5}.txt][.2o7.net/] Spyware:Cookie/YieldManager Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{3E08C3C6-486D-4540-AFCE-8A01DD52B971}\{0E238291-F51B-4C6E-874B-8600759BA9C5}.txt[{0E238291-F51B-4C6E-874B-8600759BA9C5}.txt][ad.yieldmanager.com/] Spyware:Cookie/Tickle Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{3E08C3C6-486D-4540-AFCE-8A01DD52B971}\{0E238291-F51B-4C6E-874B-8600759BA9C5}.txt[{0E238291-F51B-4C6E-874B-8600759BA9C5}.txt][.tickle.com/] Spyware:Cookie/Target Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{617CEDC5-0CCF-4D1B-92C6-46FCF29A4D8D}\{F110C488-A23F-47A3-BA6B-A654CFA8FE75}.txt[{F110C488-A23F-47A3-BA6B-A654CFA8FE75}.txt] Spyware:Cookie/Atlas DMT Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{67A11409-39F3-4E85-AE40-5EF034D3ED14}\{860C94AF-FBC3-49B9-9CFE-55EC2CE93715}.txt[{860C94AF-FBC3-49B9-9CFE-55EC2CE93715}.txt][.atdmt.com/] Spyware:Cookie/Overture Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{67A11409-39F3-4E85-AE40-5EF034D3ED14}\{860C94AF-FBC3-49B9-9CFE-55EC2CE93715}.txt[{860C94AF-FBC3-49B9-9CFE-55EC2CE93715}.txt][.overture.com/] Spyware:Cookie/YieldManager Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{67A11409-39F3-4E85-AE40-5EF034D3ED14}\{860C94AF-FBC3-49B9-9CFE-55EC2CE93715}.txt[{860C94AF-FBC3-49B9-9CFE-55EC2CE93715}.txt][ad.yieldmanager.com/] Spyware:Cookie/Azjmp Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{67A11409-39F3-4E85-AE40-5EF034D3ED14}\{860C94AF-FBC3-49B9-9CFE-55EC2CE93715}.txt[{860C94AF-FBC3-49B9-9CFE-55EC2CE93715}.txt][.azjmp.com/] Spyware:Cookie/Hitbox Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{67A11409-39F3-4E85-AE40-5EF034D3ED14}\{860C94AF-FBC3-49B9-9CFE-55EC2CE93715}.txt[{860C94AF-FBC3-49B9-9CFE-55EC2CE93715}.txt][.hitbox.com/] Spyware:Cookie/Apmebf Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{67A11409-39F3-4E85-AE40-5EF034D3ED14}\{860C94AF-FBC3-49B9-9CFE-55EC2CE93715}.txt[{860C94AF-FBC3-49B9-9CFE-55EC2CE93715}.txt][.apmebf.com/] Spyware:Cookie/Overture Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{67A11409-39F3-4E85-AE40-5EF034D3ED14}\{860C94AF-FBC3-49B9-9CFE-55EC2CE93715}.txt[{860C94AF-FBC3-49B9-9CFE-55EC2CE93715}.txt][.perf.overture.com/] Spyware:Cookie/QkSrv Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{67A11409-39F3-4E85-AE40-5EF034D3ED14}\{860C94AF-FBC3-49B9-9CFE-55EC2CE93715}.txt[{860C94AF-FBC3-49B9-9CFE-55EC2CE93715}.txt][.qksrv.net/] Spyware:Cookie/YieldManager Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{7522EF85-2526-4D9C-934F-318332B1264A}\{92F42A4A-D4AF-4AEA-B870-08604DD95D3B}.txt[{92F42A4A-D4AF-4AEA-B870-08604DD95D3B}.txt][ad.yieldmanager.com/] Spyware:Cookie/Advertising Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{7522EF85-2526-4D9C-934F-318332B1264A}\{92F42A4A-D4AF-4AEA-B870-08604DD95D3B}.txt[{92F42A4A-D4AF-4AEA-B870-08604DD95D3B}.txt][.advertising.com/] Spyware:Cookie/Com.com Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{7522EF85-2526-4D9C-934F-318332B1264A}\{92F42A4A-D4AF-4AEA-B870-08604DD95D3B}.txt[{92F42A4A-D4AF-4AEA-B870-08604DD95D3B}.txt][.com.com/] Spyware:Cookie/Overture Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{7522EF85-2526-4D9C-934F-318332B1264A}\{92F42A4A-D4AF-4AEA-B870-08604DD95D3B}.txt[{92F42A4A-D4AF-4AEA-B870-08604DD95D3B}.txt][.perf.overture.com/] Spyware:Cookie/2o7 Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{7522EF85-2526-4D9C-934F-318332B1264A}\{92F42A4A-D4AF-4AEA-B870-08604DD95D3B}.txt[{92F42A4A-D4AF-4AEA-B870-08604DD95D3B}.txt][.2o7.net/] Spyware:Cookie/Go Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{7522EF85-2526-4D9C-934F-318332B1264A}\{92F42A4A-D4AF-4AEA-B870-08604DD95D3B}.txt[{92F42A4A-D4AF-4AEA-B870-08604DD95D3B}.txt][.go.com/] Spyware:Cookie/Atlas DMT Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{A0EFC308-2840-4920-A651-02B077EBB974}\{4D58F3D5-B321-40B3-8955-B8FBEE3D39A7}.txt[{4D58F3D5-B321-40B3-8955-B8FBEE3D39A7}.txt][.atdmt.com/] Spyware:Cookie/YieldManager Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{A0EFC308-2840-4920-A651-02B077EBB974}\{4D58F3D5-B321-40B3-8955-B8FBEE3D39A7}.txt[{4D58F3D5-B321-40B3-8955-B8FBEE3D39A7}.txt][ad.yieldmanager.com/] Spyware:Cookie/SpyLog Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{A0EFC308-2840-4920-A651-02B077EBB974}\{4D58F3D5-B321-40B3-8955-B8FBEE3D39A7}.txt[{4D58F3D5-B321-40B3-8955-B8FBEE3D39A7}.txt][.spylog.com/] Spyware:Cookie/Com.com Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{A0EFC308-2840-4920-A651-02B077EBB974}\{4D58F3D5-B321-40B3-8955-B8FBEE3D39A7}.txt[{4D58F3D5-B321-40B3-8955-B8FBEE3D39A7}.txt][.com.com/] Spyware:Cookie/2o7 Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{A128CEC2-15AA-4369-8031-95F587AC8B70}\{36DA2CCF-CECF-4CD6-B56A-484807ED6BD4}.txt[{36DA2CCF-CECF-4CD6-B56A-484807ED6BD4}.txt][.2o7.net/] Spyware:Cookie/Apmebf Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{A128CEC2-15AA-4369-8031-95F587AC8B70}\{36DA2CCF-CECF-4CD6-B56A-484807ED6BD4}.txt[{36DA2CCF-CECF-4CD6-B56A-484807ED6BD4}.txt][.apmebf.com/] Spyware:Cookie/Atwola Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{A128CEC2-15AA-4369-8031-95F587AC8B70}\{36DA2CCF-CECF-4CD6-B56A-484807ED6BD4}.txt[{36DA2CCF-CECF-4CD6-B56A-484807ED6BD4}.txt][.atwola.com/] Spyware:Cookie/Com.com Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{A128CEC2-15AA-4369-8031-95F587AC8B70}\{36DA2CCF-CECF-4CD6-B56A-484807ED6BD4}.txt[{36DA2CCF-CECF-4CD6-B56A-484807ED6BD4}.txt][.com.com/] Spyware:Cookie/Overture Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{A128CEC2-15AA-4369-8031-95F587AC8B70}\{36DA2CCF-CECF-4CD6-B56A-484807ED6BD4}.txt[{36DA2CCF-CECF-4CD6-B56A-484807ED6BD4}.txt][.perf.overture.com/] Spyware:Cookie/QkSrv Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{A128CEC2-15AA-4369-8031-95F587AC8B70}\{36DA2CCF-CECF-4CD6-B56A-484807ED6BD4}.txt[{36DA2CCF-CECF-4CD6-B56A-484807ED6BD4}.txt][.qksrv.net/] Spyware:Cookie/YieldManager Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{A128CEC2-15AA-4369-8031-95F587AC8B70}\{36DA2CCF-CECF-4CD6-B56A-484807ED6BD4}.txt[{36DA2CCF-CECF-4CD6-B56A-484807ED6BD4}.txt][ad.yieldmanager.com/] Spyware:Cookie/Searchportal Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{A128CEC2-15AA-4369-8031-95F587AC8B70}\{36DA2CCF-CECF-4CD6-B56A-484807ED6BD4}.txt[{36DA2CCF-CECF-4CD6-B56A-484807ED6BD4}.txt][searchportal.information.com/] Spyware:Cookie/Atlas DMT Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{A8218C71-42E8-45D4-B810-24296690C327}\{67C8443D-3C29-4D30-97AB-1D022DEBAF0E}.txt[{67C8443D-3C29-4D30-97AB-1D022DEBAF0E}.txt][.atdmt.com/] Spyware:Cookie/Com.com Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{A8218C71-42E8-45D4-B810-24296690C327}\{67C8443D-3C29-4D30-97AB-1D022DEBAF0E}.txt[{67C8443D-3C29-4D30-97AB-1D022DEBAF0E}.txt][.com.com/] Spyware:Cookie/YieldManager Not disinfected C:\Program Files\iolo\System Mechanic 6\Undo\Manual\{A8218C71-42E8-45D4-B810-24296690C327}\{67C8443D-3C29-4D30-97AB-1D022DEBAF0E}.txt[{67C8443D-3C29-4D30-97AB-1D022DEBAF0E}.txt][ad.yieldmanager.com/]

I just went in and deleted the contents of that folder. If needed I could probably get them back, but for now it seemed the best thing to do. *shrug*

That wonderful person spends a lot of time emailing everyone I try to help to tell them I'm going to blow up their computer(lots and lots of lol) and apparently spends little or no time trying to help other, strange isn't it. They don't know how easy it is to find them. It would be great if you (or any one else who has experienced this) would save their email address and give to Justin Weber the owner of the Computing.net forum. Just start a new thread and in the subject line write "Justin Weber need help", he will respond within a day usually and help you get the info to him , and thank you for reporting that misconduct. On deleting the files, best thing to do as they we mostly cookies. Run Hijack This again,click the "open misc tools section" button> click the "open uninstall manager" button> click save list> save> yes> copy that and paste it into your next post> Please download SilentRunners from this link http://www.silentrunners.org/Silent%20Runners.zip. Unzip it to the desktop and double-click on it. If you get any kind of warning message about scripts, please choose to allow the script to run. When the scan is finished, it will create a logfile on the desktop. Please post the entire contents of this logfile in a reply to this post.. Unzip it to the desktop and double-click on it. If you get any kind of warning message about scripts, please choose to allow the script to run. When the scan is finished, it will create a logfile on the desktop. Please post the entire contents of this logfile in a reply to this post. This could be a newer version of coolweb and if it is it may take a little work to file it.