New HJ scan w/panda active scan log file.

Stan-MStan-M
edited June 2006 in Spyware & Virus Removal
after doing a hj scan and getting finished with a panda active scan i seen the bolded portion of the log file that has a restart.exe
i do not know what this goes to or if it is a dangerous file or not.
thanks for any help.

Logfile of HijackThis v1.99.1
Scan saved at 12:54:11 PM, on 6/3/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5346.0005)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exe
C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Multimedia\RemCtrl\ATIRW.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\IDM Computer Solutions\UltraEdit-32\uedit32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\HiJackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/comcast.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=55245&clcid={SUB_CLCID}
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O3 - Toolbar: ImageShack Toolbar - {6932D140-ABC4-4073-A44C-D4A541665E35} - C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [D-Link RangeBooster G WDA-2320] C:\Program Files\D-Link\RangeBooster G WDA-2320\AirPlusCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 8\Drag to Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKCU\..\Run: [ATI Remote Control] C:\Program Files\ATI Multimedia\RemCtrl\ATIRW.exe
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Reboot.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download web site with Free Download Manager - file://C:\Program Files\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll,-115 - {BB8A8834-A0A1-4d70-A21A-72FF89AA737A} - C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll
O9 - Extra 'Tools' menuitem: ImageShack Toolbar - {BB8A8834-A0A1-4d70-A21A-72FF89AA737A} - C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://toolbar.imageshack.us
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1144716790744
O16 - DPF: {6932D140-ABC4-4073-A44C-D4A541665E35} (ImageShack Toolbar) - http://toolbar.imageshack.us/toolbar/ImageShackToolbar.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: LiveShare P2P Server (RoxLiveShare) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxLiveShare.exe
O23 - Service: RoxMediaDB - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exe
O23 - Service: RoxUpnpRenderer (RoxUPnPRenderer) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCom\RoxUpnpRenderer.exe
O23 - Service: RoxUpnpServer - Sonic Solutions - C:\Program Files\Roxio\Easy Media Creator 8\Digital Home\RoxUpnpServer.exe
O23 - Service: Roxio Hard Drive Watcher (RoxWatch) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Pro Business 2007\Win32\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Pro Business 2007\RpcSandraSrv.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: X10 Device Network Service (x10nets) - Unknown owner - C:\PROGRA~1\ATIMUL~1\RemCtrl\x10nets.exe (file missing)



Incident Status Location

Spyware:Cookie/myaffiliateprogram Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[www.myaffiliateprogram.com/]
Spyware:Cookie/myaffiliateprogram Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.www.myaffiliateprogram.com/]
Spyware:Cookie/HotLog Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.hotlog.ru/]
Spyware:Cookie/Yadro Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.yadro.ru/]
Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.overture.com/]
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.casalemedia.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.ad.yieldmanager.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.casalemedia.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.ad.yieldmanager.com/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.trafficmp.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.trafficmp.com/]
Spyware:Cookie/Falkag Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.as-us.falkag.net/]
Spyware:Cookie/Entrepreneur Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.entrepreneur.com/]
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.247realmedia.com/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.2o7.net/]
Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.ehg-ati.hitbox.com/]
Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.hitbox.com/]
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[statse.webtrendslive.com/]
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.realmedia.com/]
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.tribalfusion.com/]
Spyware:Cookie/WebPower Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.webpower.com/]
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.questionmarket.com/]
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.ads.pointroll.com/]
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.mediaplex.com/]
Spyware:Cookie/QkSrv Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.qksrv.net/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.apmebf.com/]
Spyware:Cookie/QkSrv Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.qksrv.net/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.apmebf.com/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.microsofteup.112.2o7.net/]
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.tradedoubler.com/]
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.statcounter.com/]
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.adrevolver.com/]
Spyware:Cookie/WUpd Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.revenue.net/]
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.belnk.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.bs.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/cs.sexcounter Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.cs.sexcounter.com/]
Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.burstnet.com/]
Spyware:Cookie/SexList Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.sexlist.com/]
Spyware:Cookie/DomainSponsor Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[landing.domainsponsor.com/]
Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.zedo.com/]
Spyware:Cookie/Entrepreneur Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[entrepreneur.com/]
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.atwola.com/]
Spyware:Cookie/Falkag Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.as-eu.falkag.net/]
Spyware:Cookie/Falkag Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.as1.falkag.de/]
Spyware:Cookie/Falkag Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[sel.as-eu.falkag.net/]
Spyware:Cookie/Peel Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.peel.com/]
Spyware:Cookie/Findwhat Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.findwhat.com/]
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.target.com/]
Spyware:Cookie/Maxserving Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.maxserving.com/]
Spyware:Cookie/Valueclick Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.valueclick.com/]
Spyware:Cookie/Hbmediapro Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.adopt.hbmediapro.com/]
Spyware:Cookie/SpyLog Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.spylog.com/]
Spyware:Cookie/Toplist Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.toplist.cz/]
Spyware:Cookie/Hitslink Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[counter.hitslink.com/]
Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.perf.overture.com/]
Spyware:Cookie/bravenetA Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.bravenet.com/]
Spyware:Cookie/Adserver Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.z1.adserver.com/]
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Stan\Application Data\Mozilla\Firefox\Profiles\lnmmpbld.default\cookies.txt[.com.com/]
Potentially unwanted tool:Application/Restart Not disinfected C:\WINDOWS\system32\Tools\Restart.exe
Spyware:Cookie/MediaTickets Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[.kinghost.com/]
Spyware:Cookie/Adrevolver Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[.adrevolver.com/]
Spyware:Cookie/RealMedia Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[.realmedia.com/]
Spyware:Cookie/Casalemedia Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[.casalemedia.com/]
Spyware:Cookie/YieldManager Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/Yadro Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[.yadro.ru/]
Spyware:Cookie/BannerBank Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[ad10.bannerbank.ru/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[server.iad.liveperson.net/hc/79635536]
Spyware:Cookie/Server.iad.Liveperson Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[server.iad.liveperson.net/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[server.iad.liveperson.net/hc/79635536]
Spyware:Cookie/bravenetA Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[.bravenet.com/]
Spyware:Cookie/cs.sexcounter Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[.cs.sexcounter.com/]
Spyware:Cookie/Statcounter Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[.statcounter.com/]
Spyware:Cookie/onestat.com Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[stat.onestat.com/]
Spyware:Cookie/Zedo Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[.zedo.com/]
Spyware:Cookie/Searchportal Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[searchportal.information.com/]
Spyware:Cookie/Weborama Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[.weborama.fr/]
Spyware:Cookie/Xiti Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[.xiti.com/]
Spyware:Cookie/Belnk Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[.belnk.com/]
Spyware:Cookie/Com.com Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[.terra.com.br/]
Spyware:Cookie/WebPower Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[.webpower.com/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[server.iad.liveperson.net/hc/43682891]
Spyware:Cookie/Apmebf Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[.apmebf.com/]
Spyware:Cookie/did-it Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[.did-it.com/]
Spyware:Cookie/Serving-sys Not disinfected E:\Documents and Settings\Stan M\Application Data\Mozilla\Firefox\Profiles\9jkwkhlo.default\cookies.txt[.serving-sys.com/]
Adware:Adware/CWS.Searchmeup Not disinfected E:\Documents and Settings\Stan M\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-cb66fa7-51f6ac60.zip[GetAccess.class]
Adware:Adware/CWS.Searchmeup Not disinfected E:\Documents and Settings\Stan M\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-cb66fa7-51f6ac60.zip[Installer.class]
Virus:Exploit/ByteVerify Disinfected E:\Documents and Settings\Stan M\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-cb66fa7-51f6ac60.zip[NewSecurityClassLoader.class]
Virus:Exploit/ByteVerify Disinfected E:\Documents and Settings\Stan M\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-cb66fa7-51f6ac60.zip[NewURLClassLoader.class]
Adware:Adware/IST.ISTBar Not disinfected E:\Documents and Settings\Stan M\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\javainstaller.jar-5aa0b436-1ebdee97.zip[javainstaller/InstallerApplet.class]
Spyware:Cookie/YieldManager Not disinfected E:\Documents and Settings\Stan M\Cookies\stan [email]m@ad.yieldmanager[1].txt[/email]
Spyware:Cookie/Com.com Not disinfected E:\Documents and Settings\Stan M\Cookies\stan [email]m@com[2].txt[/email]
Spyware:Cookie/cs.sexcounter Not disinfected E:\Documents and Settings\Stan M\Cookies\stan [email]m@cs.sexcounter[2].txt[/email]
Spyware:Cookie/Toplist Not disinfected E:\Documents and Settings\Stan M\Cookies\stan [email]m@toplist[1].txt[/email]
Spyware:Cookie/WebPower Not disinfected E:\Documents and Settings\Stan M\Cookies\stan [email]m@webpower[1].txt[/email]
Spyware:Cookie/Yadro Not disinfected E:\Documents and Settings\Stan M\Cookies\stan [email]m@yadro[2].txt[/email]

Comments

  • chiazchiaz
    edited June 2006
    Hi, I'll be helping you with your log. Please wait while I review your logs.
  • chiazchiaz
    edited June 2006
    Please download ATF Cleaner by Atribune.
      Double-click
    ATF-Cleaner.exe to run the program.
    Under Main choose: Select All
    Click the Empty Selected button.
    If you use Firefox browser
      Click
    Firefox at the top and choose: Select All
    Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
    If you use Opera browser
      Click
    Opera at the top and choose: Select All
    Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
    Click Exit on the Main menu to close the program.
    For Technical Support, double-click the e-mail address located at the bottom of each menu.



    Then go to http://virusscan.jotti.org , click on Browse, and upload the following file for analysis:
    C:\WINDOWS\system32\Tools\Restart.exe
    Then click Submit. Allow the file to be scanned, and then please copy and paste the results here for me to see.
Sign In or Register to comment.