Okay, starting with the MBAM log.
Malwarebytes' Anti-Malware 1.42
Database version: 3300
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180
1/26/2010 1:02:21 AM
mbam-log-2010-01-26 (01-02-21).txt
Scan type: Full Scan (C:\|D:\|)
Objects scanned: 400700
Time elapsed: 2 hour(s), 58 minute(s), 21 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 131
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Application Data\Microsoft\dtsc\6253.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\syswcc32.exe (Adware.WebHancer) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\bbbti.exe (Trojan.Proxy) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00F11631C.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00F1198C2.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00F11A94D.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00F125106.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00F134EC2A.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00F1A40738.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00F2577F02.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00F2D7F702.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00F429123.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00F42A622.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00F458184.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00F45D35D.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00F486B6D.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00F48C8FE.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00F64C0F.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00F7CA349.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00FB0EFD6.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00FBA8DD.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00FC1979.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00FC282E.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00FC3974.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00FC669F.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\mmonHJ.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\msiexec.exe (Trojan.Clicker) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00FE51E4.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\_A00FF8E6C.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\37E3A92V\kbg105613[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\G9MVOXU3\kb65666[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\Program Files\ISM\ism.exe (Adware.SearchAid) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\acmiiliu.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\acrstgkn.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\apxpwg.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\bcahyb.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\bhmthgta.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\btbhnncv.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\ceublivx.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\cnojtusv.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\cytjgdjc.exe (Trojan.LowZones) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\dccyxa.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\dhptge.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\digxauqv.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\dqshlwji.exe (Trojan.LowZones) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\dslujf.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\duhapqnr.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\dwgitgcb.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\eldbkdyc.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\eqoefvhu.exe (Trojan.LowZones) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\exktbdtj.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\gasdtrso.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\ghphawlg.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\gkugvt.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\gnwgakmu.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\gsbjwlhk.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\hpwxfkfd.exe (Trojan.LowZones) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\hwulvgxx.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\ivfxxksl.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\jlaihded.exe (Trojan.LowZones) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\jmxjppng.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\jsichpnn.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\kcnxknal.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\kftapktr.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\lcboapad.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\ldjmkvwm.exe (Trojan.LowZones) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\lefteg.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\mngbvs.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\ndgvakfg.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\ndngevle.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\nvbpnhtg.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\oihkggec.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\oiqqvfvi.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\ouabbmbs.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\oxxnpjrb.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\psbwkist.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\rjxioxtd.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\rsfecpql.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\rucknbtf.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\sedfnbcd.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\ssckopct.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\tdllaehv.dll (Rogue.Installer) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\tskckm.dll (Rogue.Installer) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\ucrygeio.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\uolfikuf.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\vtutftjh.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\yskyiaga.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\wmeyewol.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\wyvxbpix.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\wznkad.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\lhrofncx.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\ljwzed.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\xwdlxdcu.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\ydmpcnxk.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\yofgamve.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\yrqevskx.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\yrtthxkh.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\xciqnart.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\xcvmqxuk.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\ytqmjoer.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\vntiho06\vntiho061083.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Application Data\Microsoft\dtsc\30977.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\mmonHJ.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\msiexec.exe (Trojan.Clicker) -> Quarantined and deleted successfully.
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\bbbti.exe (Trojan.Proxy) -> Quarantined and deleted successfully.
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\65GXYPWJ\mmonHJ[1].exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\65GXYPWJ\kb713501[1] (Trojan.LowZones) -> Quarantined and deleted successfully.
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\EZQJMB6X\msiexec[1].exe (Trojan.Clicker) -> Quarantined and deleted successfully.
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\SF3RIOHX\tor[1].exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\VB333K9T\ie[1].exe (Trojan.Clicker) -> Quarantined and deleted successfully.
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\VB333K9T\bbbti[1].exe (Trojan.Proxy) -> Quarantined and deleted successfully.
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Local Settings\Temp\e.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\NAUSIBLM\load[1].php (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 09-03-16 0139AM\WINDOWS\system32\pamuyomi.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 09-03-16 0139AM\WINDOWS\system32\yigekote.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 09-03-16 0139AM\WINDOWS\system32\zasiyugi.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\System\lsass.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Local Settings\Temp\service.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\My Backup -- 09-11-28 0551AM\WINDOWS\system32\drivers\eciujhfch.sys (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{593F298F-B7D6-4A3D-A260-6D7E68E3F587}\RP5\A0001690.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{593F298F-B7D6-4A3D-A260-6D7E68E3F587}\RP5\A0001691.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{593F298F-B7D6-4A3D-A260-6D7E68E3F587}\RP5\A0001692.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{593F298F-B7D6-4A3D-A260-6D7E68E3F587}\RP5\A0001706.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{593F298F-B7D6-4A3D-A260-6D7E68E3F587}\RP5\A0001707.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{593F298F-B7D6-4A3D-A260-6D7E68E3F587}\RP52\A0007981.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{593F298F-B7D6-4A3D-A260-6D7E68E3F587}\RP7\A0001815.exe (Rogue.AdvancedVirusRemover) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{593F298F-B7D6-4A3D-A260-6D7E68E3F587}\RP7\A0001828.exe (Rogue.AdvancedVirusRemover) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{593F298F-B7D6-4A3D-A260-6D7E68E3F587}\RP7\A0003034.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{593F298F-B7D6-4A3D-A260-6D7E68E3F587}\RP7\A0003035.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{593F298F-B7D6-4A3D-A260-6D7E68E3F587}\RP7\A0003044.exe (Rogue.AdvancedVirusRemover) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{593F298F-B7D6-4A3D-A260-6D7E68E3F587}\RP7\A0003045.exe (Rogue.AdvancedVirusRemover) -> Quarantined and deleted successfully.
The SAS log:
SUPERAntiSpyware Scan Log
http://www.superantispyware.comGenerated 01/26/2010 at 02:13 AM
Application Version : 4.33.1000
Core Rules Database Version : 4517
Trace Rules Database Version: 2329
Scan type : Quick Scan
Total Scan Time : 00:58:46
Memory items scanned : 434
Memory threats detected : 0
Registry items scanned : 425
Registry threats detected : 0
File items scanned : 50835
File threats detected : 261
Adware.Tracking Cookie
C:\Documents and Settings\Owner\Cookies\owner@doubleclick[2].txt
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@atdmt[1].txt
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@questionmarket[2].txt
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@ad.yieldmanager[2].txt
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@tribalfusion[1].txt
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@serving-sys[1].txt
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@2o7[1].txt
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@mediaplex[1].txt
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@doubleclick[1].txt
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@ads.pointroll[1].txt
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@buzznet.112.2o7[1].txt
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@specificclick[2].txt
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@bs.serving-sys[2].txt
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@adopt.specificclick[2].txt
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@apmebf[1].txt
.specificclick.net [ C:\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\voff37u6.slt\cookies.txt ]
cdn4.specificclick.net [ C:\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\voff37u6.slt\cookies.txt ]
.specificclick.net [ C:\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\voff37u6.slt\cookies.txt ]
.specificclick.net [ C:\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\voff37u6.slt\cookies.txt ]
.doubleclick.net [ C:\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\voff37u6.slt\cookies.txt ]
.specificclick.net [ C:\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\voff37u6.slt\cookies.txt ]
.specificclick.net [ C:\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\voff37u6.slt\cookies.txt ]
.specificclick.net [ C:\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\voff37u6.slt\cookies.txt ]
.specificclick.net [ C:\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\voff37u6.slt\cookies.txt ]
.specificmedia.com [ C:\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\voff37u6.slt\cookies.txt ]
.advertising.com [ C:\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\voff37u6.slt\cookies.txt ]
.advertising.com [ C:\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\voff37u6.slt\cookies.txt ]
.advertising.com [ C:\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\voff37u6.slt\cookies.txt ]
.advertising.com [ C:\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\voff37u6.slt\cookies.txt ]
statse.webtrendslive.com [ C:\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\voff37u6.slt\cookies.txt ]
.advertising.com [ C:\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\voff37u6.slt\cookies.txt ]
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@2o7[2].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@casalemedia[1].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@statse.webtrendslive[1].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@sixapart.adbureau[1].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@ehg-globalgamingleague.hitbox[2].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@dmtracker[1].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@tribalfusion[1].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@overture[1].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@ads.gamesbannernet[1].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@ad.yieldmanager[1].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@fastclick[1].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@hitbox[2].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@interclick[2].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@cdn.atwola[1].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@atdmt[2].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@media.adrevolver[2].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@statcounter[2].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@cracked[2].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@specificclick[2].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@adrevolver[2].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@adrevolver[1].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@server.cpmstar[1].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@zedo[1].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@revsci[2].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@advertising[1].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@adopt.specificclick[1].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@trafficmp[1].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@apmebf[1].txt
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@atwola[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@questionmarket[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@adserver.adtechus[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@clickarrows[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@yieldmanager[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@ad.yieldmanager[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@c7.zedo[2].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@network.realmedia[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@realmedia[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@media6degrees[2].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@ads.xapads[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@interclick[2].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@mediaplex[2].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@insightexpressai[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@linksynergy[2].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@ad.iconadserver[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@admarketplace[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@iacas.adbureau[2].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@doubleclick[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@tds.checkclick-go[2].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@a1.interclick[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@ads.lucidmedia[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@adecn[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@bridge1.admarketplace[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@atdmt[2].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@imrworldwide[2].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@media.adrevolver[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@statcounter[2].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@m1.webstats.motigo[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@ads.ad4game[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@ads.quixsurf[3].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@adrevolver[2].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@adopt.euroclick[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@revsci[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@chitika[2].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@zedo[2].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@advertising[2].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@247realmedia[2].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@ads.quixsurf[2].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@trafficmp[1].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@tds.myclicknowgo[2].txt
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Cookies\owner@eas.apm.emediate[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\LocalService\Cookies\owner@statse.webtrendslive[2].txt
.doubleclick.net [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
.atdmt.com [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
.atdmt.com [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
.tribalfusion.com [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
.specificclick.net [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
.specificclick.net [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
.specificclick.net [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
.specificclick.net [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
.specificclick.net [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
.specificclick.net [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
.specificclick.net [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
cdn4.specificclick.net [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
.specificclick.net [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
.specificclick.net [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
cdn4.specificclick.net [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
.specificmedia.com [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
.advertising.com [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
.advertising.com [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
.advertising.com [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
.advertising.com [ C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\MozillaControl\profiles\MozillaControl\9rvhz5i6.slt\cookies.txt ]
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@statse.webtrendslive[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@questionmarket[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@cdn4.specificclick[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@ad.yieldmanager[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@data.coremetrics[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@mediaplex[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@login.tracking101[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@serving-sys[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@2o7[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@homestore.122.2o7[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@doubleclick[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@admarketplace[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@roiservice[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@a1.interclick[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@bestbuy.122.2o7[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@pointroll[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@ads.pointroll[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@dr.findlinks[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@interclick[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@adserve.brandgivewaycentre[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@p2track.sl2host[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@clickthrough.kanoodle[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@bridge2.admarketplace[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@atdmt[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@revsci[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@theclickcheck[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@statcounter[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@myroitracking[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@enhance[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@specificclick[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@tacoda[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@specificmedia[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@
www.burstnet[1].txt C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@at.atwola[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@invitemedia[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@serving.adsrevenue.clicksor[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@ads.undertone[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@bs.serving-sys[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@burstnet[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@zedo[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@advertising[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@tracking.realtor[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@content.yieldmanager[1].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@apmebf[2].txt
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Cookies\owner@mediatraffic[2].txt
Adware.ClickSpring/Yazzle
C:\MY BACKUP -- 08-08-25 0344AM\PROGRAM FILES\COMMON FILES\YAZZLE1552OINADMIN.EXE
C:\MY BACKUP -- 08-08-25 0344AM\PROGRAM FILES\COMMON FILES\YAZZLE1552OINUNINSTALLER.EXE
C:\MY BACKUP -- 08-05-25 0149AM\PROGRAM FILES\COMMON FILES\YAZZLE1552OINADMIN.EXE
C:\MY BACKUP -- 08-05-25 0149AM\PROGRAM FILES\COMMON FILES\YAZZLE1552OINUNINSTALLER.EXE
Adware.AdSponsor/ISM
C:\MY BACKUP -- 08-08-25 0344AM\PROGRAM FILES\QDRMODULE\QDRMODULE16.EXE
Adware.webHancer
C:\MY BACKUP -- 08-08-25 0344AM\PROGRAM FILES\WEBHANCER\PROGRAMS\WEBHDLL.DLL
C:\MY BACKUP -- 08-08-25 0344AM\PROGRAM FILES\WEBHANCER\PROGRAMS\WHAGENT.EXE
C:\MY BACKUP -- 08-08-25 0344AM\PROGRAM FILES\WEBHANCER\PROGRAMS\WHIEHLPR.DLL
C:\MY BACKUP -- 08-08-25 0344AM\PROGRAM FILES\WEBHANCER\PROGRAMS\WHINSTALLER.EXE
C:\MY BACKUP -- 08-05-25 0149AM\PROGRAM FILES\WEBHANCER\PROGRAMS\WEBHDLL(2).DLL
C:\MY BACKUP -- 08-05-25 0149AM\PROGRAM FILES\WEBHANCER\PROGRAMS\WEBHDLL.DLL
C:\MY BACKUP -- 08-05-25 0149AM\PROGRAM FILES\WEBHANCER\PROGRAMS\WHAGENT.EXE
C:\MY BACKUP -- 08-05-25 0149AM\PROGRAM FILES\WEBHANCER\PROGRAMS\WHIEHLPR.DLL
C:\MY BACKUP -- 08-05-25 0149AM\PROGRAM FILES\WEBHANCER\PROGRAMS\WHINSTALLER.EXE
Trojan.Vundo-Variant/Small
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\BGUWWISS.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\BOAJSRUV.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\FELVJTKQ.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\GXTRQXWI.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\HRGQTWXU.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\KIPFGUMY.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\LCEUUVNR.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\LCQUPSNW.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\LDAYUBPB.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\MJRNQKCI.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\NTWSXOVT.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\PFVVJXFX.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\PMHKBDYG.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\QOAIXATN.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\RSSVDMKR.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\SLQPFTHX.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\TSOORBUN.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\WMHVOOCL.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\XQMABFYX.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\XXYYYWPI.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\YDWCGOUO.DLL
Adware.Vundo/Variant-0219X
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\BMFKLWSG.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\BRRYJORP.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\DVKDRIBS.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\KYFRBIRF.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\MROXEXUS.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\NSECMFCG.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\OMWNNNKS.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\QAIHOXBS.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\QLFYEYPC.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\QMLQMPXT.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\SNQKEPQK.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\SQNVAMLS.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\VGUOPNDI.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\XBJYMVIT.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\YYLRLFVC.DLL
Trojan.Vundo-Variant/Small-GEN
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\EFCCBYOG.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\OPNFNRSW.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\QOMGECVP.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\RQRKEWQG.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\WVUNGEXO.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\YAYYXOIA.DLL
Trojan.Unknown Origin
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\EPINSH.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\LILOCARG.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\MZGPEG.DLL
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\VTHMUVXS.DLL
Trojan.Unclassified/C00-WL/B
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C006FBDE.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C0081065.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C001BB0C.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C0032324.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C004D9F4.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C00544F0.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C0054888.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C005B7CE.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C0060502.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C0070900.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C0070DC1.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C0078C39.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C0087886.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C00884E9.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C0089A21.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C008B2A1.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C00A74F0.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C00A98BA.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C00C6400.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C00DB2E4.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C00DC54E.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C00EE71D.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C00F450.DAT
C:\MY BACKUP -- 08-08-25 0344AM\WINDOWS\SYSTEM32\__C00FB2D8.DAT
Adware.Vundo/Variant-MSFake
C:\MY BACKUP -- 08-05-25 0149AM\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\TEMP\B3NEW.EXE
C:\MY BACKUP -- 09-03-16 0139AM\WINDOWS\SYSTEM32\KMSVC32.DLL
Adware.Vundo/Variant-Helper
C:\MY BACKUP -- 09-03-16 0139AM\RECYCLER\S-1-5-21-1272799353-1076206456-1011316653-1006\DC29.DLL
Adware.Vundo/Variant-86K
C:\MY BACKUP -- 09-03-16 0139AM\WINDOWS\SYSTEM32\FOMASOPI.DLL
Adware.Vundo/Variant-EC
C:\MY BACKUP -- 09-03-16 0139AM\WINDOWS\SYSTEM32\JONOTAMA.DLL
Adware.Vundo Variant
C:\MY BACKUP -- 09-03-16 0139AM\WINDOWS\SYSTEM32\MST122.DLL
Adware.Vundo/Variant-F13
C:\MY BACKUP -- 09-03-16 0139AM\WINDOWS\SYSTEM32\UANYRP.DLL
Adware.Vundo/Variant-81K
C:\MY BACKUP -- 09-03-16 0139AM\WINDOWS\SYSTEM32\VOZIZOWU.DLL
Trojan.Agent/Gen-MSFake
C:\MY BACKUP -- 09-11-28 0551AM\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\TEMP\YTASFWEPYLBGFUXT.TMP
Adware.Vundo/Variant-WinMM
C:\_OTM\MOVEDFILES\12052009_130009\C_WINDOWS\SYSTEM32\BOZOYIPO.DLL
And the ESET log:
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6211
# api_version=3.0.2
# EOSSerial=9722ba532f3f384684c3ca2cf1c24b93
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2010-01-26 10:29:37
# local_time=2010-01-26 05:29:37 (-0500, Eastern Standard Time)
# country="United States"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# compatibility_mode=512 16777215 100 0 4443240 4443240 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=277194
# found=85
# cleaned=85
# scan_time=10322
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\removalfile.bat Win32/Adware.Virtumonde application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temp\s_loader.exe probably a variant of Win32/PSW.Sinowal trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\05O98FUZ\s_loader[1].exe probably a variant of Win32/PSW.Sinowal trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\ANYN2TQV\index[1] a variant of Win32/Kryptik.AB trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\ANYN2TQV\kb456456[1] probably a variant of Win32/Adware.Virtumonde application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\PLTBYY3A\kb516107[1] a variant of Win32/Adware.Virtumonde.NCK application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\RSC0DTJ6\index[1].pdf PDF/Exploit.Gen trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\RSC0DTJ6\query[1] a variant of Win32/Adware.Virtumonde.NCK application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-05-25 0149AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\VB333K9T\CAO9494B.htm Win32/Adware.MalwareAlarm application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Application Data\Microsoft\Windows\lsass.exe probably a variant of Win32/Agent trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\removalfile.bat Win32/Adware.Virtumonde application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temp\s_loader.exe probably a variant of Win32/PSW.Sinowal trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\01234527\kb456456[1] a variant of Win32/Adware.Virtumonde.NCB application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\4J13IM75\kb767887[1] Win32/Adware.SuperJuan application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\G9MVOXU3\kb671231[1] Win32/Adware.AdMedia application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\000060.exe a variant of Win32/Adware.ISM application (deleted - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\000080.exe a variant of Win32/TrojanDownloader.Small.IAW trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\000090.exe probably a variant of Win32/Genetik trojan (deleted - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\agvpdihl.dll Win32/Adware.Virtumonde.NAP application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\anxsjwjm.dll a variant of Win32/Adware.Virtumonde.NAP application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\bhtufa.dll Win32/BHO.NFH trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\bmqrvbhr.dll a variant of Win32/Adware.Virtumonde.NAP application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\cxkhyxvb.dll a variant of Win32/Adware.Virtumonde.NAP application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\dgjblvmw.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\eqlquhvm.dll Win32/Adware.SuperJuan application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\fribrfyk.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\ftmwmmih.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\gjbroq.dll Win32/Adware.SuperJuan application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\gkxiar.dll Win32/BHO.NFH trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\hmhkwe.dll a variant of Win32/Adware.Virtumonde.NAP application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\hoeblvym.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\hqtloljk.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\hyslfg.dll a variant of Win32/Adware.Virtumonde.NAP application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\hyybcsjm.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\ieksxyab.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\imiyjywv.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\iPWyyyxx.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\iPWyyyxx.ini2 Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\irylga.dll a variant of Win32/Adware.Virtumonde.NAP application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\isynvgxb.dll a variant of Win32/Adware.Virtumonde.NAP application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\iyvkupwj.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\jmjtmsrt.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\kiwulo.dll Win32/Adware.Virtumonde.NAP application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\kjycrgwy.dll a variant of Win32/Adware.Virtumonde.NAP application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\lmccftxg.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\lmehejco.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\mqdcnu.dll a variant of Win32/Adware.Virtumonde.NAP application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\mvvymvfu.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\mwgpcwqn.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\nfrpgpyj.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\ofxcxqfi.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\oypouuwe.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\pjaathgt.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\pkekaxth.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\projyrrb.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\qbqbpl.dll a variant of Win32/Adware.Virtumonde.NAP application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\qiruqyhc.dll Win32/BHO.NFH trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\qsyfhjtc.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\siyskyjc.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\tmdjeomq.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\ufxqvxeq.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\ugdrbx.dll Win32/BHO.NFH trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\uxwtqgrh.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\vfwprksh.dll Win32/Adware.Virtumonde.NAP application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\vswrbjou.dll Win32/BHO.NFH trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\wowqqnul.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\wsrnfnpo.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\xgideima.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\xiwrhxac.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\xpndjuiu.dll Win32/BHO.NFH trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 08-08-25 0344AM\WINDOWS\system32\zojqkb.dll Win32/Adware.Virtumonde.NAP application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\RXAA9NPW\AntiVirusInstaller[1].exe probably a variant of Win32/TrojanDownloader.Agent trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\VOJXZPFM\1733[1].pdf JS/Exploit.Pdfka.NCY trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\VOJXZPFM\update[1].exe Win32/Spy.Ambler trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\WY9C8MMI\i[2].js HTML/Iframe.B.Gen virus (deleted - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 09-03-16 0139AM\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\ZLKQ6M4P\652[1].pdf JS/Exploit.Pdfka.NCY trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 09-03-16 0139AM\WINDOWS\services.exe a variant of Win32/Injector.DO trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 09-03-16 0139AM\WINDOWS\system32\a.exe a variant of Win32/Injector.DO trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 09-03-16 0139AM\WINDOWS\system32\uwozizov.ini Win32/Adware.Virtumonde.NEO application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 09-03-16 0139AM\WINDOWS\system32\drivers\etc\hosts Win32/Qhost trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 09-11-28 0551AM\Documents and Settings\Owner\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Client.class-3453216-524c87d6.class a variant of Java/TrojanDownloader.Agent.NAA trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\My Backup -- 09-11-28 0551AM\WINDOWS\system32\drivers\atapi.sys Win32/Olmarik.RF virus (deleted - quarantined) 00000000000000000000000000000000 C
C:\Qoobox\Quarantine\C\WINDOWS\system32\smss32.exe.vir a variant of Win32/Kryptik.BZY trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\Qoobox\Quarantine\C\WINDOWS\system32\warning.html.vir Win32/TrojanDownloader.FakeAlert.AED virus (deleted - quarantined) 00000000000000000000000000000000 C
C:\Qoobox\Quarantine\C\WINDOWS\system32\winlogon32.exe.vir a variant of Win32/Kryptik.BZY trojan (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
Things seem to be moving along much better. My browser is faster. My desktop and theme were restored, as well as use of my task manager and all media files, my caculator, etc.