Trojan Agent- Zlob

Computing.Net > Forums > Security and Virus > Trojan Agent- Zlob

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Trojan Agent- Zlob

Name: Mattdraco
Date: February 14, 2007 at 17:52:25 Pacific
OS: Windows XP Home V.2002
CPU/Ram: 2.13GHz Intel Celeron/1.5

Comment:

My webroot spy sweeper detects that I now have the trojan: zlob on my computer. I think that I got it when I tried downloading what I thought was a codec that I needed when some video I was trying to play opened up in wma. Please help! (Thank you for your time)

Sponsored Link

Ads by Google

Response Number 1

Name: Mattdraco
Date: February 14, 2007 at 17:56:03 Pacific

Reply:

I just want to say that I can post a HJT log if you want me to instead of having you to type out to me where to get it and everything

Response Number 2

Name: jabuck
Date: February 14, 2007 at 19:03:12 Pacific

Reply:

Please post yout Hijack This log.
Please download SmitFraudFix from this link http://siri.urz.free.fr/Fix/Smitfra... Then extract the contents to your desktop.
!!!! Only run option #1 as runing the other options on an uninfected computer will damage the desktop.!!!!
Open the "SmitfraudFix" folder and double-click "smitfraudfix.cmd"
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.
Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.

Response Number 3

Name: Mattdraco
Date: February 14, 2007 at 19:04:56 Pacific

Reply:

Logfile of HijackThis v1.99.1
Scan saved at 10:04:30 PM, on 2/14/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\SOUNDMAN.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://wow.allakhazam.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?Lin...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?Lin...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?Lin...
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?Lin...
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install
O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Bodog Poker - {F47C1DB5-ED21-4dc1-853E-D1495792D4C5} - C:\Program Files\Bodog Poker\BPGame.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Poker.com - {6FDD5236-C9F0-49ef-935D-385F5E21991A} - C:\Program Files\Poker.com\Poker.exe (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windows...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramewo...
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://zone.msn.com/bingame/popcapl...
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

Response Number 4

Name: Mattdraco
Date: February 14, 2007 at 19:09:18 Pacific

Reply:

SmitFraudFix v2.142
Scan done at 22:08:01.33, Wed 02/14/2007
Run from C:\Documents and Settings\Matt\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode
»»»»»»»»»»»»»»»»»»»»»»»» hosts

»»»»»»»»»»»»»»»»»»»»»»»» C:\

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Matt

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Matt\Application Data

»»»»»»»»»»»»»»»»»»»»»»»» Start Menu

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Matt\FAVORI~1

»»»»»»»»»»»»»»»»»»»»»»»» Desktop

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files
C:\Program Files\AntiVermeans\ FOUND !
C:\Program Files\Video ActiveX Object\ FOUND !
»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys

»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32-huy32

»»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection

»»»»»»»»»»»»»»»»»»»»»»»» End

Response Number 5

Name: jabuck
Date: February 14, 2007 at 19:17:48 Pacific

Reply:

Next, please reboot your computer in Safe Mode by doing the following :
Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, a menu with options should appear;
Select the first option, to run Windows in Safe Mode, then press "Enter".
Choose your usual account.
Once in Safe Mode, open the "SmitfraudFix" folder again and double-click "smitfraudfix.cmd"
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.
You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing " Y " and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.
The tool will now check if "wininet.dll " is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing "Y" and press "Enter".
The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.
A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply.
The report can also be found at the root of the system drive, usually at C:\rapport.txt
Also post back with a new Hijack This log.Please download ComboFix to the desktop from this link:
http://download.bleepingcomputer.com/sUBs/combofix.exe
Double-click combofix.exe
Follow the prompts.
(Don't click on the window while the program is running, it may cause your system to hang.)
Please post the combofix.txt log.

trojan.vundo.h trojan.zlob.h trojan.vundo trojan.hiloti trojan.agent trojan Trojan Agent Winlogonhook how to remove trojan agent tdss	trojan agent tdss Trojan.Agent/Gen-NameThief[Smart] Trojan.Agent.H
See More

Response Number 6

Name: Mattdraco
Date: February 15, 2007 at 03:31:59 Pacific

Reply:

SmitFraudFix v2.142
Scan done at 6:18:24.00, Thu 02/15/2007
Run from C:\Documents and Settings\Matt\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» Killing process

»»»»»»»»»»»»»»»»»»»»»»»» hosts
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix
GenericRenosFix by S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files
C:\Program Files\AntiVermeans\ Deleted
C:\Program Files\Video ActiveX Object\ Deleted
»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» End
Logfile of HijackThis v1.99.1
Scan saved at 6:29:42 AM, on 2/15/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\SOUNDMAN.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://wow.allakhazam.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?Lin...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?Lin...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?Lin...
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?Lin...
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install
O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Bodog Poker - {F47C1DB5-ED21-4dc1-853E-D1495792D4C5} - C:\Program Files\Bodog Poker\BPGame.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Poker.com - {6FDD5236-C9F0-49ef-935D-385F5E21991A} - C:\Program Files\Poker.com\Poker.exe (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windows...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramewo...
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://zone.msn.com/bingame/popcapl...
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
***Also, please note: The author discovered a rootkit infection that will intefere with ComboFix's running.
This was the exact text that popped up when I opened combofix.

Response Number 7

Name: Abnormal
Date: February 15, 2007 at 07:33:52 Pacific

Reply:

Info related to the warning.
http://www.dslreports.com/forum/rem...
Wait for jabuck later this evening.

Response Number 8

Name: jabuck
Date: February 15, 2007 at 15:18:25 Pacific

Reply:

looks like Combofix is down for a little while.
Please download ATF-Cleaner to your desktop from this link
http://www.atribune.org/content/view/19/2/ We will need it later in safe mode
Download and install AVG Anti-Spyware We will need this later in safe mode
Be sure to update AVG Anti- Spyware
Empty the restore folder. Go to start>control panel>system>system restore tab>check the box beside "turn off system restore>apply (takes a minute)>ok. Go back and uncheck the box to turn system restore back on>apply>ok.
Next, please reboot your computer in Safe Mode by doing the following :
Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, a menu with options should appear;
Select the first option, to run Windows in Safe Mode, then press "Enter".
Choose your usual account.
Run Hijack This from safe mode, close all windows except Hijack This, place a check to the left of the following items and press "fix checked":
O9 - Extra button: Bodog Poker - {F47C1DB5-ED21-4dc1-853E-D1495792D4C5} - C:\Program Files\Bodog Poker\BPGame.exe (file missing)
O9 - Extra button: Poker.com - {6FDD5236-C9F0-49ef-935D-385F5E21991A} - C:\Program Files\Poker.com\Poker.exe (HKCU)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://zone.msn.com/bingame/popcapl...
Exit Hijack this but remain in safe mode.
Run ATF-Cleaner from safe mode.Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

In Safe Mode, run AVG Anti-spyware and click on the Scanner tab at the top. Click the "Settings" tab and then change the recommended action to Quarantine and click Automatically generate report after every scan. Click back to the "Scan" tab and then click on Complete System Scan. This scan can take quite a while to run, so be prepared.
AVG Anti-Spyware will list any infections found on the left hand side. When the scan has finished, it will automatically set the recommended action. Click the Apply all actions button. AVG Anti-Spyware will display "All actions have been applied" on the right hand side.
Click on "Save Report", then "Save Report As". This will create a text file. Make sure you know where to find this file again (like on the Desktop).
Post the AVG-AntiSpyware repot please.

Response Number 9

Name: Mattdraco
Date: February 16, 2007 at 19:35:42 Pacific

Reply:

AVG Anti-Spyware - Scan Report

+ Created at: 2:42:02 PM 2/16/2007
+ Scan result:
C:\Documents and Settings\Matt\Desktop\NetInstallPokerRoom.exe -> Adware.MediaTicket : Cleaned.
C:\Program Files\PokerRoom.com\Uninstall.exe -> Adware.MediaTicket : Cleaned.
:mozilla.545:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.546:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.547:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.22:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.32:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.33:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.34:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.35:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.36:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.37:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.38:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.39:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.40:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.41:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.42:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.43:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.44:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.58:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.59:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.601:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.60:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.612:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.61:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.62:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.63:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.64:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.65:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.66:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.67:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.68:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.69:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.70:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.72:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.73:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.74:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.757:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.75:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.76:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.77:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.79:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.80:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.81:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.82:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.83:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.849:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.85:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.86:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.936:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.139:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.140:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.141:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.142:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.143:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.488:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Addynamix : Cleaned.
:mozilla.279:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.280:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.281:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.284:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.286:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.287:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.290:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.291:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.87:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.88:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.89:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.90:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.91:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.23:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.446:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.491:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.208:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.113:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.114:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.115:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.116:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.117:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.118:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.354:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.358:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.359:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.360:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.361:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.362:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.363:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.364:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.238:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned.
:mozilla.239:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned.
:mozilla.389:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.390:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.391:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.206:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
:mozilla.71:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.109:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.110:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.111:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.112:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.240:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.101:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.102:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.103:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.104:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.105:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.92:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.97:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.338:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.591:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.324:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.325:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.326:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.330:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.331:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.332:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.553:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.609:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.748:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.763:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.764:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.785:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.833:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.864:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.904:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.321:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Hotlog : Cleaned.
:mozilla.382:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.385:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.386:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.122:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.123:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.650:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.651:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.204:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.205:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.935:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.166:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.167:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.168:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.169:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.170:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.489:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
:mozilla.490:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
:mozilla.216:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.217:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.218:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.252:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.253:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.440:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.441:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.442:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.443:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.444:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.445:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.158:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.159:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.160:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.161:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.162:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.163:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.165:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.542:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.543:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.544:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.300:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Spylog : Cleaned.
:mozilla.301:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.302:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.303:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.304:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.305:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.306:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.307:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.308:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.309:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.310:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.311:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.312:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.313:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.314:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.144:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.145:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.146:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.147:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.148:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.151:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.152:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.388:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.228:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.229:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.230:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.231:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.232:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.233:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.234:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.235:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.236:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.129:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.133:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.792:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.8:C:\Documents and Settings\Matt\Application Data\Mozilla\Profiles\default\fhgge2tl.slt\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.299:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.100:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.106:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.107:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.108:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.93:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.94:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.95:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.96:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.98:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.99:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.249:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.250:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.251:C:\Documents and Settings\Matt\Application Data\Mozilla\Firefox\Profiles\sevt6w2d.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.

::Report end

Response Number 10

Name: jabuck
Date: February 16, 2007 at 19:45:34 Pacific

Reply:

Is your computer running better.
You need to udate your java as it is out of date. Download the latest version of http://java.sun.com/javase/downloads/index.jsp
Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
Click the "Download" button to the right.
Check the box that says: "Accept License Agreement". The page will refresh.
Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
Close any programs you may have running - especially your web browser.
Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java. Check any item with Java Runtime Environment (JRE or J2SE) in the name. It should have the "coffee cup" icon next to it.
Click the Remove or Change/Remove button. Repeat as many times as necessary to remove each Java versions.
Reboot your computer once all Java components are removed
. Then from your desktop double-click on jre-1_6_0-windowsi586-p.exe to install the newest version.
You should consider adding "Spywareblaster" to your arsenol of antispyware tools, just do a google search for spywareblaster, download it,install it, and update it. Its free and runs in the background, so you don't actually run it, and re-writes malicious script before it can install on your computer. Look for updates weekly as there is no auto-update on the free version.

Sponsored Link

Ads by Google

changed email address

AIM myspace virus - macs

Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.

Go to Security and Virus Forum Home

Sponsored links

Ads by Google

Results for: Trojan Agent- Zlob

trojan-agent-tdss, safe mode only

Summary

www.computing.net/answers/security/trojanagenttdss-safe-mode-only/23812.html

Trojan agent Winlogonhook need help

Summary

www.computing.net/answers/security/trojan-agent-winlogonhook-need-help/19321.html

Trojan agent Winlogonhook!

Summary

www.computing.net/answers/security/trojan-agent-winlogonhook/18073.html

From the Geek Dictionary
repair - computer moniter blinking and gettihg dim

Ask a Question!

Weekly Poll
What do you think of the new preview of Chrome OS?

Poll Finishes In 2 Days.
Discuss in The Lounge
Poll History

Recent Posts
Video Playing

Paste work-around

CPU Speeds

rolling screen

how can i run geexbox mplayer in debug mode ?

All Awaiting Reply

Tom's News
New Final Fantasy XIII Trailer is 5 Minutes Long

TV Market to Launch Cross-Platform App Store

Used ATM Machines for Sale on Craigslist

Rival Publishers Collaborate on iTunes-type Store

Guy Quits Job With Error Message

More Tom's Guide News

Data Recovery

Manufacturer List | About Us | Advertising Info | Contact Us
The information on Computing.Net is the opinions of its users. Such opinions may not be accurate and they are to be used at your own risk. Computing.Net cannot verify the validity of the statements made on this site. Computing.Net and Computing.Net LLC hereby disclaim all responsibility and liability for the content of Computing.Net and its accuracy.
PLEASE READ THE FULL DISCLAIMER AND LEGAL TERMS BY CLICKING HERE