Problem?

smudgersmudger
edited March 2007 in Spyware & Virus Removal
Could someone please have a look at this for me? I think I may have a virus but I'm not sure! Cheers!

Logfile of HijackThis v1.99.1
Scan saved at 13:00:20, on 10/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
C:\Program Files\Microsoft Office\Office\MSOFFICE.EXE
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\Microsoft Office\Office\excel.exe
C:\Program Files\HijackThis\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Symantec Shared\AdBlocking\NSMdtr.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.co.uk/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.skybroadband.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.co.uk/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.co.uk/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.skybroadband.com/
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AOL 9.0 Tray Icon.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: Microsoft Office Shortcut Bar.lnk = C:\Program Files\Microsoft Office\Office\MSOFFICE.EXE
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Filter: application/x-internet-signup - {A173B69A-1F9B-4823-9FDA-412F641E65D6} - C:\Program Files\Tiscali\Tiscali Internet\dlls\tiscalifilter.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

Comments

  • TroganTrogan London, UK
    edited March 2007
    Hi smudger

    Nothing serious in the log. A few things that need to be uninstalled, but we'll do that later.

    However, you are running TWO anti-virus programs (Norton and AVG) and that is not a good idea. Multiple anti-virus programs will conflict with each other and cause all sorts of problem. Please uninstall one through Add/Remove programs.

    Next, I need to see another log from HijackThis.
    • Run Hijackthis.
    • Click on Open the Misc Tools section.
    • Next click on Open uninstall manager.
    • Press the Save list button.
    • Save the file to your desktop, with the default name of uninstall_list
    • Copy & Paste the entire contents of that file in your in your next post.
    Also, do an online scan with Panda ActiveScan

    - Once you are on the Panda site, click the Scan your PC button
    - A new window will open...click the Check Now button
    - Enter your Country
    - Enter your State/Province
    - Enter your e-mail address and click send
    - Select either Home User or Company
    - Click the big Scan Now button
    - If it wants to install an ActiveX component allow it
    - It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
    - When download is complete, click on Local Disks to start the scan
    - When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.

    Post the contents of the Panda scan report, along with a new uninstall list
  • smudgersmudger
    edited March 2007
    Many thanks for your help! Sorry its taken me so long to reply...here are the scans you asked for.

    Adobe Flash Player 9
    Adobe Reader 7.0.9
    AOL Coach Version 1.0(Build:20040201.2 uk)
    AOL Connectivity Services
    AOL Spyware Protection
    AOL UK (Choose which version to remove)
    AOL You've Got Pictures Screensaver
    Apple Software Update
    ARTEuro
    CC_ccProxyExt
    ccCommon
    ccPxyCore
    Dell Driver Reset Tool
    Dell Media Experience
    Dell Picture Studio v3.0
    Dell Support 5.0.0 (630)
    Google Earth
    Google Toolbar for Internet Explorer
    Google Toolbar for Internet Explorer
    HijackThis 1.99.1
    HP Customer Participation Program 7.0
    HP Document Viewer 7.0
    HP Imaging Device Functions 7.0
    HP Photosmart Premier Software 6.5
    HP Photosmart, Officejet and Deskjet 7.0.A
    HP Solution Center 7.0
    HP Update
    ImageMixer VCD/DVD2 for OLYMPUS
    Intel(R) Extreme Graphics 2 Driver
    Intel(R) PRO Network Adapters and Drivers
    Intel(R) PROSet for Wired Connections
    Internet Explorer Default Page
    iTunes
    Jasc Paint Shop Photo Album 5
    Jasc Paint Shop Pro Studio, Dell Editon
    Java 2 Runtime Environment, SE v1.4.2_03
    Learn2 Player (Uninstall Only)
    LiveReg (Symantec Corporation)
    LiveUpdate 3.0 (Symantec Corporation)
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Hotfix (KB886903)
    Microsoft Office 97, Professional Edition
    Microsoft Works 7.0
    Mozilla Firefox (1.0.6)
    MSRedist
    MSXML 4.0 SP2 (KB927978)
    MyWay Search Assistant
    Norton AntiSpam
    Norton AntiSpam
    Norton AntiVirus 2005
    Norton Internet Security
    Norton Internet Security
    Norton Internet Security
    Norton Internet Security
    Norton Internet Security
    Norton Internet Security
    Norton Internet Security
    Norton Internet Security
    Norton Internet Security
    Norton Internet Security 2005 (Symantec Corporation)
    Norton Security Center
    Norton WMI Update
    Norton WMI Update
    OCR Software by I.R.I.S 7.0
    OLYMPUS Master
    PowerDVD 5.5
    QuickTime
    RealPlayer Basic
    Security Update for Step By Step Interactive Training (KB923723)
    Security Update for Windows Media Player (KB911564)
    Security Update for Windows Media Player 6.4 (KB925398)
    Security Update for Windows Media Player 9 (KB917734)
    Security Update for Windows XP (KB893756)
    Security Update for Windows XP (KB896358)
    Security Update for Windows XP (KB896423)
    Security Update for Windows XP (KB896424)
    Security Update for Windows XP (KB896428)
    Security Update for Windows XP (KB899587)
    Security Update for Windows XP (KB899591)
    Security Update for Windows XP (KB900725)
    Security Update for Windows XP (KB901017)
    Security Update for Windows XP (KB902400)
    Security Update for Windows XP (KB904706)
    Security Update for Windows XP (KB905414)
    Security Update for Windows XP (KB905749)
    Security Update for Windows XP (KB908519)
    Security Update for Windows XP (KB911562)
    Security Update for Windows XP (KB911927)
    Security Update for Windows XP (KB912919)
    Security Update for Windows XP (KB913580)
    Security Update for Windows XP (KB914388)
    Security Update for Windows XP (KB914389)
    Security Update for Windows XP (KB917344)
    Security Update for Windows XP (KB917422)
    Security Update for Windows XP (KB917953)
    Security Update for Windows XP (KB918118)
    Security Update for Windows XP (KB918439)
    Security Update for Windows XP (KB919007)
    Security Update for Windows XP (KB920213)
    Security Update for Windows XP (KB920670)
    Security Update for Windows XP (KB920683)
    Security Update for Windows XP (KB920685)
    Security Update for Windows XP (KB922819)
    Security Update for Windows XP (KB923191)
    Security Update for Windows XP (KB923414)
    Security Update for Windows XP (KB923689)
    Security Update for Windows XP (KB923694)
    Security Update for Windows XP (KB923980)
    Security Update for Windows XP (KB924191)
    Security Update for Windows XP (KB924270)
    Security Update for Windows XP (KB924496)
    Security Update for Windows XP (KB924667)
    Security Update for Windows XP (KB926255)
    Security Update for Windows XP (KB926436)
    Security Update for Windows XP (KB927779)
    Security Update for Windows XP (KB927802)
    Security Update for Windows XP (KB928090)
    Security Update for Windows XP (KB928255)
    Security Update for Windows XP (KB928843)
    Security Update for Windows XP (KB929969)
    Sonic DLA
    Sonic RecordNow Audio
    Sonic RecordNow Copy
    Sonic RecordNow Data
    Sonic Update Manager
    SPBBC
    Symantec Script Blocking Installer
    SymNet
    Tiscali Internet
    Update for Windows XP (KB894391)
    Update for Windows XP (KB898461)
    Update for Windows XP (KB900485)
    Update for Windows XP (KB908531)
    Update for Windows XP (KB910437)
    Update for Windows XP (KB911280)
    Update for Windows XP (KB916595)
    Update for Windows XP (KB920872)
    Update for Windows XP (KB922582)
    Update for Windows XP (KB931836)
    Viewpoint Media Player
    Wanadoo Europe Installer
    Windows Installer 3.1 (KB893803)
    Windows XP Hotfix - KB885836
    Windows XP Hotfix - KB886185
    Windows XP Hotfix - KB888302
    Windows XP Hotfix - KB890859


    Incident Status Location
    Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Celia\Cookies\celia@advertising[2].txt
    Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Celia\Cookies\celia@atdmt[1].txt
    Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Jude\Cookies\jude@2o7[2].txt
    Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Jude\Cookies\jude@ad.yieldmanager[2].txt
    Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Jude\Cookies\jude@adrevolver[1].txt
    Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Jude\Cookies\jude@adrevolver[3].txt
    Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Jude\Cookies\jude@advertising[2].txt
    Spyware:Cookie/Adviva Not disinfected C:\Documents and Settings\Jude\Cookies\jude@adviva[2].txt
    Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Jude\Cookies\jude@apmebf[2].txt
    Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Jude\Cookies\jude@atdmt[2].txt
    Spyware:Cookie/Bluestreak Not disinfected C:\Documents and Settings\Jude\Cookies\jude@bluestreak[1].txt
    Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Jude\Cookies\jude@bs.serving-sys[1].txt
    Spyware:Cookie/cs.sexcounter Not disinfected C:\Documents and Settings\Jude\Cookies\jude@cs.sexcounter[2].txt
    Spyware:Cookie/Coremetrics Not disinfected C:\Documents and Settings\Jude\Cookies\jude@data.coremetrics[1].txt
    Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Jude\Cookies\jude@doubleclick[1].txt
    Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Jude\Cookies\jude@fastclick[2].txt
    Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\Jude\Cookies\jude@gostats[2].txt
    Spyware:Cookie/Maxserving Not disinfected C:\Documents and Settings\Jude\Cookies\jude@maxserving[2].txt
    Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Jude\Cookies\jude@mediaplex[1].txt
    Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Jude\Cookies\jude@overture[1].txt
    Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Jude\Cookies\jude@questionmarket[2].txt
    Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Jude\Cookies\jude@serving-sys[1].txt
    Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Jude\Cookies\jude@statcounter[1].txt
    Spyware:Cookie/Reliablestats Not disinfected C:\Documents and Settings\Jude\Cookies\jude@stats1.reliablestats[2].txt
    Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Jude\Cookies\jude@statse.webtrendslive[1].txt
    Spyware:Cookie/Systemdoctor Not disinfected C:\Documents and Settings\Jude\Cookies\jude@systemdoctor[1].txt
    Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Jude\Cookies\jude@tradedoubler[1].txt
    Spyware:Cookie/Systemdoctor Not disinfected C:\Documents and Settings\Jude\Cookies\jude@www.systemdoctor[1].txt
    Spyware:Cookie/Yadro Not disinfected C:\Documents and Settings\Jude\Cookies\jude@yadro[1].txt
    Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Jude\Cookies\jude@zedo[2].txt
    Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Nick\Cookies\nick@112.2o7[1].txt
    Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Nick\Cookies\nick@247realmedia[1].txt
    Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Nick\Cookies\nick@2o7[2].txt
    Spyware:Cookie/888 Not disinfected C:\Documents and Settings\Nick\Cookies\nick@888[1].txt
    Spyware:Cookie/888 Not disinfected C:\Documents and Settings\Nick\Cookies\nick@888[2].txt
    Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Nick\Cookies\nick@ad.yieldmanager[2].txt
    Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Nick\Cookies\nick@adrevolver[1].txt
    Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Nick\Cookies\nick@adrevolver[3].txt
    Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Nick\Cookies\nick@adtech[2].txt
    Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Nick\Cookies\nick@advertising[2].txt
    Spyware:Cookie/Adviva Not disinfected C:\Documents and Settings\Nick\Cookies\nick@adviva[2].txt
    Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Nick\Cookies\nick@apmebf[1].txt
    Spyware:Cookie/Falkag Not disinfected C:\Documents and Settings\Nick\Cookies\nick@as1.falkag[1].txt
    Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Nick\Cookies\nick@atdmt[2].txt
    Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Nick\Cookies\nick@bs.serving-sys[2].txt
    Spyware:Cookie/Cassava Not disinfected C:\Documents and Settings\Nick\Cookies\nick@cassava[1].txt
    Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Nick\Cookies\nick@com[1].txt
    Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Nick\Cookies\nick@doubleclick[2].txt
    Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\Nick\Cookies\nick@gostats[1].txt
    Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Nick\Cookies\nick@mediaplex[1].txt
    Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Nick\Cookies\nick@overture[2].txt
    Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Nick\Cookies\nick@questionmarket[1].txt
    Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Nick\Cookies\nick@serving-sys[1].txt
    Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Nick\Cookies\nick@statcounter[1].txt
    Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Nick\Cookies\nick@statse.webtrendslive[2].txt
    Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Nick\Cookies\nick@tradedoubler[1].txt
    Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Nick\Cookies\nick@tribalfusion[1].txt
    Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Nick\Cookies\nick@xiti[1].txt
    Potentially unwanted tool:Application/MyWay Not disinfected C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
  • smudgersmudger
    edited March 2007
    Many thanks for your help! Sorry its taken me so long to reply...here are the scans you asked for.

    Adobe Flash Player 9
    Adobe Reader 7.0.9
    AOL Coach Version 1.0(Build:20040201.2 uk)
    AOL Connectivity Services
    AOL Spyware Protection
    AOL UK (Choose which version to remove)
    AOL You've Got Pictures Screensaver
    Apple Software Update
    ARTEuro
    CC_ccProxyExt
    ccCommon
    ccPxyCore
    Dell Driver Reset Tool
    Dell Media Experience
    Dell Picture Studio v3.0
    Dell Support 5.0.0 (630)
    Google Earth
    Google Toolbar for Internet Explorer
    Google Toolbar for Internet Explorer
    HijackThis 1.99.1
    HP Customer Participation Program 7.0
    HP Document Viewer 7.0
    HP Imaging Device Functions 7.0
    HP Photosmart Premier Software 6.5
    HP Photosmart, Officejet and Deskjet 7.0.A
    HP Solution Center 7.0
    HP Update
    ImageMixer VCD/DVD2 for OLYMPUS
    Intel(R) Extreme Graphics 2 Driver
    Intel(R) PRO Network Adapters and Drivers
    Intel(R) PROSet for Wired Connections
    Internet Explorer Default Page
    iTunes
    Jasc Paint Shop Photo Album 5
    Jasc Paint Shop Pro Studio, Dell Editon
    Java 2 Runtime Environment, SE v1.4.2_03
    Learn2 Player (Uninstall Only)
    LiveReg (Symantec Corporation)
    LiveUpdate 3.0 (Symantec Corporation)
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Hotfix (KB886903)
    Microsoft Office 97, Professional Edition
    Microsoft Works 7.0
    Mozilla Firefox (1.0.6)
    MSRedist
    MSXML 4.0 SP2 (KB927978)
    MyWay Search Assistant
    Norton AntiSpam
    Norton AntiSpam
    Norton AntiVirus 2005
    Norton Internet Security
    Norton Internet Security
    Norton Internet Security
    Norton Internet Security
    Norton Internet Security
    Norton Internet Security
    Norton Internet Security
    Norton Internet Security
    Norton Internet Security
    Norton Internet Security 2005 (Symantec Corporation)
    Norton Security Center
    Norton WMI Update
    Norton WMI Update
    OCR Software by I.R.I.S 7.0
    OLYMPUS Master
    PowerDVD 5.5
    QuickTime
    RealPlayer Basic
    Security Update for Step By Step Interactive Training (KB923723)
    Security Update for Windows Media Player (KB911564)
    Security Update for Windows Media Player 6.4 (KB925398)
    Security Update for Windows Media Player 9 (KB917734)
    Security Update for Windows XP (KB893756)
    Security Update for Windows XP (KB896358)
    Security Update for Windows XP (KB896423)
    Security Update for Windows XP (KB896424)
    Security Update for Windows XP (KB896428)
    Security Update for Windows XP (KB899587)
    Security Update for Windows XP (KB899591)
    Security Update for Windows XP (KB900725)
    Security Update for Windows XP (KB901017)
    Security Update for Windows XP (KB902400)
    Security Update for Windows XP (KB904706)
    Security Update for Windows XP (KB905414)
    Security Update for Windows XP (KB905749)
    Security Update for Windows XP (KB908519)
    Security Update for Windows XP (KB911562)
    Security Update for Windows XP (KB911927)
    Security Update for Windows XP (KB912919)
    Security Update for Windows XP (KB913580)
    Security Update for Windows XP (KB914388)
    Security Update for Windows XP (KB914389)
    Security Update for Windows XP (KB917344)
    Security Update for Windows XP (KB917422)
    Security Update for Windows XP (KB917953)
    Security Update for Windows XP (KB918118)
    Security Update for Windows XP (KB918439)
    Security Update for Windows XP (KB919007)
    Security Update for Windows XP (KB920213)
    Security Update for Windows XP (KB920670)
    Security Update for Windows XP (KB920683)
    Security Update for Windows XP (KB920685)
    Security Update for Windows XP (KB922819)
    Security Update for Windows XP (KB923191)
    Security Update for Windows XP (KB923414)
    Security Update for Windows XP (KB923689)
    Security Update for Windows XP (KB923694)
    Security Update for Windows XP (KB923980)
    Security Update for Windows XP (KB924191)
    Security Update for Windows XP (KB924270)
    Security Update for Windows XP (KB924496)
    Security Update for Windows XP (KB924667)
    Security Update for Windows XP (KB926255)
    Security Update for Windows XP (KB926436)
    Security Update for Windows XP (KB927779)
    Security Update for Windows XP (KB927802)
    Security Update for Windows XP (KB928090)
    Security Update for Windows XP (KB928255)
    Security Update for Windows XP (KB928843)
    Security Update for Windows XP (KB929969)
    Sonic DLA
    Sonic RecordNow Audio
    Sonic RecordNow Copy
    Sonic RecordNow Data
    Sonic Update Manager
    SPBBC
    Symantec Script Blocking Installer
    SymNet
    Tiscali Internet
    Update for Windows XP (KB894391)
    Update for Windows XP (KB898461)
    Update for Windows XP (KB900485)
    Update for Windows XP (KB908531)
    Update for Windows XP (KB910437)
    Update for Windows XP (KB911280)
    Update for Windows XP (KB916595)
    Update for Windows XP (KB920872)
    Update for Windows XP (KB922582)
    Update for Windows XP (KB931836)
    Viewpoint Media Player
    Wanadoo Europe Installer
    Windows Installer 3.1 (KB893803)
    Windows XP Hotfix - KB885836
    Windows XP Hotfix - KB886185
    Windows XP Hotfix - KB888302
    Windows XP Hotfix - KB890859


    Incident Status Location
    Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Celia\Cookies\celia@advertising[2].txt
    Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Celia\Cookies\celia@atdmt[1].txt
    Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Jude\Cookies\jude@2o7[2].txt
    Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Jude\Cookies\jude@ad.yieldmanager[2].txt
    Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Jude\Cookies\jude@adrevolver[1].txt
    Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Jude\Cookies\jude@adrevolver[3].txt
    Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Jude\Cookies\jude@advertising[2].txt
    Spyware:Cookie/Adviva Not disinfected C:\Documents and Settings\Jude\Cookies\jude@adviva[2].txt
    Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Jude\Cookies\jude@apmebf[2].txt
    Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Jude\Cookies\jude@atdmt[2].txt
    Spyware:Cookie/Bluestreak Not disinfected C:\Documents and Settings\Jude\Cookies\jude@bluestreak[1].txt
    Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Jude\Cookies\jude@bs.serving-sys[1].txt
    Spyware:Cookie/cs.sexcounter Not disinfected C:\Documents and Settings\Jude\Cookies\jude@cs.sexcounter[2].txt
    Spyware:Cookie/Coremetrics Not disinfected C:\Documents and Settings\Jude\Cookies\jude@data.coremetrics[1].txt
    Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Jude\Cookies\jude@doubleclick[1].txt
    Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Jude\Cookies\jude@fastclick[2].txt
    Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\Jude\Cookies\jude@gostats[2].txt
    Spyware:Cookie/Maxserving Not disinfected C:\Documents and Settings\Jude\Cookies\jude@maxserving[2].txt
    Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Jude\Cookies\jude@mediaplex[1].txt
    Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Jude\Cookies\jude@overture[1].txt
    Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Jude\Cookies\jude@questionmarket[2].txt
    Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Jude\Cookies\jude@serving-sys[1].txt
    Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Jude\Cookies\jude@statcounter[1].txt
    Spyware:Cookie/Reliablestats Not disinfected C:\Documents and Settings\Jude\Cookies\jude@stats1.reliablestats[2].txt
    Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Jude\Cookies\jude@statse.webtrendslive[1].txt
    Spyware:Cookie/Systemdoctor Not disinfected C:\Documents and Settings\Jude\Cookies\jude@systemdoctor[1].txt
    Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Jude\Cookies\jude@tradedoubler[1].txt
    Spyware:Cookie/Systemdoctor Not disinfected C:\Documents and Settings\Jude\Cookies\jude@www.systemdoctor[1].txt
    Spyware:Cookie/Yadro Not disinfected C:\Documents and Settings\Jude\Cookies\jude@yadro[1].txt
    Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Jude\Cookies\jude@zedo[2].txt
    Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Nick\Cookies\nick@112.2o7[1].txt
    Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Nick\Cookies\nick@247realmedia[1].txt
    Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Nick\Cookies\nick@2o7[2].txt
    Spyware:Cookie/888 Not disinfected C:\Documents and Settings\Nick\Cookies\nick@888[1].txt
    Spyware:Cookie/888 Not disinfected C:\Documents and Settings\Nick\Cookies\nick@888[2].txt
    Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Nick\Cookies\nick@ad.yieldmanager[2].txt
    Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Nick\Cookies\nick@adrevolver[1].txt
    Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Nick\Cookies\nick@adrevolver[3].txt
    Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Nick\Cookies\nick@adtech[2].txt
    Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Nick\Cookies\nick@advertising[2].txt
    Spyware:Cookie/Adviva Not disinfected C:\Documents and Settings\Nick\Cookies\nick@adviva[2].txt
    Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Nick\Cookies\nick@apmebf[1].txt
    Spyware:Cookie/Falkag Not disinfected C:\Documents and Settings\Nick\Cookies\nick@as1.falkag[1].txt
    Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Nick\Cookies\nick@atdmt[2].txt
    Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Nick\Cookies\nick@bs.serving-sys[2].txt
    Spyware:Cookie/Cassava Not disinfected C:\Documents and Settings\Nick\Cookies\nick@cassava[1].txt
    Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Nick\Cookies\nick@com[1].txt
    Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Nick\Cookies\nick@doubleclick[2].txt
    Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\Nick\Cookies\nick@gostats[1].txt
    Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Nick\Cookies\nick@mediaplex[1].txt
    Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Nick\Cookies\nick@overture[2].txt
    Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Nick\Cookies\nick@questionmarket[1].txt
    Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Nick\Cookies\nick@serving-sys[1].txt
    Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Nick\Cookies\nick@statcounter[1].txt
    Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Nick\Cookies\nick@statse.webtrendslive[2].txt
    Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Nick\Cookies\nick@tradedoubler[1].txt
    Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Nick\Cookies\nick@tribalfusion[1].txt
    Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Nick\Cookies\nick@xiti[1].txt
    Potentially unwanted tool:Application/MyWay Not disinfected C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
  • TroganTrogan London, UK
    edited March 2007
    Hi Smudger,

    Please do the following...

    1. Click Start > Run > type in appwiz.cpl and hit enter. From the list uninstall the following, if present:

    MyWay Search Assistant

    Then, find and delete the following Folder

    C:\Program Files\MyWaySA <-- This folder

    2. Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update to the latest version...

    Updating Java:
    • Download the latest version of Java Runtime Environment (JRE) 6 .
    • Click the "Download" button to the right.
    • Check the box that says: "Accept License Agreement."
    • The page will refresh.
    • Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
    • Close any programs you may have running - especially your web browser.
    • Go to Start > Control Panel double-click on Add/Remove programs and remove the following...
      • Java 2 Runtime Environment, SE v1.4.2_03
    • Reboot your computer once all Java components are removed.
    • Then from your desktop double-click on jre-6-windows-i586.exe to install the newest version.

    Apart from that, everything looks good. Anymore problems?
  • smudgersmudger
    edited March 2007
    No more problems!


    Thank you from one red to another!
  • TroganTrogan London, UK
    edited March 2007
    You're welcome! :)

    This topic is now closed. If you wish it reopened, please send a Private Message (PM) to one of the Spyware Mods with a link to your thread.

    Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required.

    If you are not the user who started this thread, you must start a new Thread instead :)

    Would you also be interested to join Short-Media (Team #93) with the Folding@Home Project? More information available here
This discussion has been closed.