Skip to main content
Start a Conversation

Unsolved

This post is more than 5 years old

tstewart38301

16 Posts

1004

July 25th, 2006 23:00

Look2Me adware help needed....Hijackthis included here

 
 
I cannnot restore my system any earlier thatn july 16 2006. I have a look2me-adware somewhere on here and McAfee will not delete it permantly. Any and all advice is greatly appreciated.

Message Edited by tstewart38301 on 07-30-200601:55 PM

1972vet

3.3K Posts

July 26th, 2006 13:00

First, open Notepad. Click the Format option from the top menu bar. Make sure Word Wrap has a check mark next to it. Then close Notepad.
Next, go back to the HijackThis log that you saved. Copy and paste it into Notepad.
Save that copy to your Desktop. Copy and paste that log back here in this thread.
Thanks!

1972vet

3.3K Posts

July 28th, 2006 00:00

Did you by mistake save two copies of the hjt log? Perhaps.
Just run HijackThis again and save a new log. Post that log here in this thread. Make sure though before you run HijackThis that you've checked Notepad to see that there is a check mark in the Word Wrap option.

tstewart38301

16 Posts

July 28th, 2006 00:00

i tried it again but the forum will no let me post more that 20000 characters...what am I doing wrong?
 

1972vet

3.3K Posts

July 28th, 2006 02:00

I've managed to piece your log together line by line. It appears you have more problems than just l2me. I see a Qoologic infection as well.

Please Move HijackThis! To A Permanent Folder

When you installed HijackThis, it installed to a temporary folder. Creating a permanent folder will ensure that HijackThis is not accidentally deleted when we clean out these directories.

1. Click on "My Computer -> C:". Under the File menu, please click "New -> Folder"
2. Rename the new folder (for example, type "HJT" without the quotes) and move the HijackThis.exe file into the new directory.

Please follow the steps to remove older version Java components
1. Close any open programs you may have running, especially your web
browser
2. Click Start > Control Panel
* Depending on your OS or configuration, you may have to click Start
>Settings > Control Panel
3. Open Add or Remove Programs
* If you have Windows 98 or Windows 2000, open Add/Remove
Programs
4. Click once on any item listing Java Runtime Environment in the name
* Not every version of Java will begin with "Java" so be sure to read
each entry in the list
5. Click the Remove or Change/Remove button
6. Follow steps 4 and 5 as many times as necessary to remove all
versions of Java. ** If you are asked to reboot at any point during the uninstallations, please do so. Then go back to Add/Remove and continue with the removals.
7. Next, navigate to and delete:
  • C:\Program Files\ Java =this folder if found

8. Then go to this page and click the link to download the Windows (Offline Installation) package: Save it, do not run it.

When the download is complete, close the browser and install it.

You can download the latest version of Java here.

Please download Look2Me-Destroyer.exe to your desktop.
  • * Close all windows before continuing.
    * Double-click Look2Me-Destroyer.exe to run it.
    * Put a check next to Run this program as a task.
    * You will receive a message saying Look2Me-Destroyer will close and re-open in approximately 1 minute. Click OK
    * When Look2Me-Destroyer re-opens, click the Scan for L2M button, your desktop icons will disappear, this is normal.
    * Once it's done scanning, click the Remove L2M button.
    * You will receive a Done Scanning message, click OK.
    * When completed, you will receive this message: Done removing infected files! Look2Me-Destroyer will now shutdown your computer, click OK.
    * Your computer will then shutdown.
    * Turn your computer back on.

If you receive a runtime error '339' please download MSWINSCK.OCX from the link below and place it in your C:\Windows\System32 Directory.
http://www.ascentive.com/support/new/images/lib/MSWINSCK.OCX

Then you click the Remove L2M button and wait for it to give you a message when you click ok on it it should shut itself down.

Please download Qoofix 1.00
Unzip to a convenient location such as C:\Qoofix.
Navigate to the folder you unzipped the files to and double click on the file named Qoofix.exe.
Finally, select Begin Removal and the removal process will commence.
A reboot will be necessary when the process complete.

Download
Brute Force Uninstaller to your desktop.
  • Right click the file on your Desktop, and choose Extract
  • All.
  • Click Next.
  • In the box to choose where to extract the files to:
  • Click Browse.
  • Click on the + sign next to My Computer
  • Click on Local Disk C: or whatever your primary drive is.
  • Click Make New Folder
  • Type in BFU
  • Click Next, and uncheck the Show Extracted Files box
  • and then click Finish.
Download side
kickFix.bat (rightclick on that link and
choose save as)
  • Place sidekickFix.bat in your C:\BFU - folder.
  • (Important!)
  • Close all browsers and explorer folders.
  • Double-click on sidekickFix.bat
  • Click Yes and follow the prompts, when prompted to restart
  • the PC please do so.

Next, please download Ewido anti-spyware to your desktop.
This is a 30 day free trial. At the end of the 30-day trial period the full version features (active guard, automatic updates...) will be deactivated and the program will become a feature-limited freeware version...You can still keep it and use it for "On Demand" scanning.
  • Double click the icon on the desktop to launch the set up program.
  • Select Change state to inactivate "Resident Shield" and "Automatic Updates". Right click on ewido in the system tray and uncheck "Start with Windows".
  • Once the setup is complete you will need to update the definition files.
  • On the main screen select the icon Update then select the Update now link.
  • Next select the Start Update button, the update will start and a progress bar will show the updates being installed.
  • Once the update has completed select the Scanner icon at the top of the screen, then select the Settings tab.
  • Once in the Settings screen click on Recommended actions and then select Quarantine.
  • Under Reports
  • Select Automatically generate report after every scan
  • Un-Select Only if threats were found

Close ewido anti-spyware.

Please boot into Safe mode:

Restart the computer and immediately begin tapping the F8 key (or F5 on some Dell machines).
Use the arrow keys to highlight Safe Mode and press the Enter key. Once in safe mode, continue with the instructions below:

  • Launch ewido anti-spyware by double-clicking the icon on your desktop.
  • Select the Scanner icon at the top, then the Scan tab then click on Complete System Scan.
  • ewido will now begin the scanning process, be patient this may take some time.
  • When prompted of an infection, please select Apply all actions

Once the scan is complete do the following:
  • Next select the Reports icon at the top.
  • Select the Save report as button in the lower left hand of the screen and save it to your Desktop.
Now close ewido anti-spyware.

Next, please run HijackThis again and check the box next to the following entries if they still exist:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.com
R3 - URLSearchHook: (no name) - _{02EE5B04-F144-47BB-83FB-A60BD91B74A9} - (no file)
R3 - URLSearchHook: (no name) - {02EE5B04-F144-47BB-83FB-A60BD91B74A9} - (no file)
F2 - REG:system.ini: Shell=Explorer.exe, C:\WINDOWS\system32\rhotu.exe F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,dcvxglm.exe
O3 - Toolbar: Search - {E97891D6-7337-92CA-7863-38263CB0F6BF} - C:\WINDOWS\syyssism.dll (file missing)
O4 - HKLM\..\Run: 0E120E1414101.exe
O4 - HKLM\..\Run: RUNDLL32.EXE w610570c.dll,I2 0000046c0610570c
O4 - HKCU\..\Run: C:\Program Files\Common Files\VCClient\VCClient.exe
O4 - HKCU\..\Run: C:\Program Files\Common Files\VCClient\VCMain.exe
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O18 - Filter: text/html - {2F6E85DC-8D2D-4896-8A4F-7DF8A7B1749D} - C:\PROGRA~1\Jalmp\jalmp.dll
O20 - Winlogon Notify: URL - C:\WINDOWS\system32\jt4s07h7e.dll
O23 - Service: Windows Overlay Components - Unknown owner - C:\WINDOWS\vxekxid.exe (file missing)

Now, close all windows except for HijackThis then click Fix Checked.

Locate and delete the following files/folders indicated in Bold text if they are still present:
C:\WINDOWS\system32\ rhotu.exe
C:\WINDOWS\system32\ dcvxglm.exe
C:\WINDOWS\system32\ 0E120E1414101.exe
C:\WINDOWS\system32\ w610570c.dll
C:\WINDOWS\system32\ wbe0aa85.dll
C:\PROGRA~1\Jalmp\ jalmp.dll
C:\WINDOWS\system32\ jt4s07h7e.dll
C:\WINDOWS\ vxekxid.exe

Reboot the computer and post back a new HijackThis log along with the log from your Ewido scan. Thanks!

tstewart38301

16 Posts

July 30th, 2006 02:00

next section....sorry its so long:
 
O4 - HKLM\..\Run: [w0ec37bd.dll] RUNDLL32.EXE w0ec37bd.dll,I2 0000046c00ec37bd
O4 - HKLM\..\Run: [w0011e8f.dll] RUNDLL32.EXE w0011e8f.dll,I2 0000046c00011e8f
O4 - HKLM\..\Run: [w060f2aa.dll] RUNDLL32.EXE w060f2aa.dll,I2 0000046c0060f2aa
O4 - HKLM\..\Run: [w072aacc.dll] RUNDLL32.EXE w072aacc.dll,I2 0000046c0072aacc
O4 - HKLM\..\Run: [w21e2416.dll] RUNDLL32.EXE w21e2416.dll,I2 0000046c021e2416
O4 - HKLM\..\Run: [w0016925.dll] RUNDLL32.EXE w0016925.dll,I2 0000046c00016925
O4 - HKLM\..\Run: [w00a3334.dll] RUNDLL32.EXE w00a3334.dll,I2 0000046c000a3334
O4 - HKLM\..\Run: [w03182ce.dll] RUNDLL32.EXE w03182ce.dll,I2 0000046c003182ce
O4 - HKLM\..\Run: [w0b554b7.dll] RUNDLL32.EXE w0b554b7.dll,I2 0000046c00b554b7
O4 - HKLM\..\Run: [w443675a.dll] RUNDLL32.EXE w443675a.dll,I2 0000046c0443675a
O4 - HKLM\..\Run: [w5865bdd.dll] RUNDLL32.EXE w5865bdd.dll,I2 0000046c05865bdd
O4 - HKLM\..\Run: [w635cc86.dll] RUNDLL32.EXE w635cc86.dll,I2 0000046c0635cc86
O4 - HKLM\..\Run: [w073e494.dll] RUNDLL32.EXE w073e494.dll,I2 0000046c0073e494
O4 - HKLM\..\Run: [w3d87695.dll] RUNDLL32.EXE w3d87695.dll,I2 0000046c03d87695
O4 - HKLM\..\Run: [w5bee6d7.dll] RUNDLL32.EXE w5bee6d7.dll,I2 0000046c05bee6d7
O4 - HKLM\..\Run: [w0010e24.dll] RUNDLL32.EXE w0010e24.dll,I2 0000046c00010e24
O4 - HKLM\..\Run: [w0112807.dll] RUNDLL32.EXE w0112807.dll,I2 0000046c00112807
O4 - HKLM\..\Run: [w0201244.dll] RUNDLL32.EXE w0201244.dll,I2 0000046c00201244
O4 - HKLM\..\Run: [w068cae7.dll] RUNDLL32.EXE w068cae7.dll,I2 0000046c0068cae7
O4 - HKLM\..\Run: [w4fa7d0b.dll] RUNDLL32.EXE w4fa7d0b.dll,I2 0000046c04fa7d0b
O4 - HKLM\..\Run: [w00123ee.dll] RUNDLL32.EXE w00123ee.dll,I2 0000046c000123ee
O4 - HKLM\..\Run: [w0b579d3.dll] RUNDLL32.EXE w0b579d3.dll,I2 0000046c00b579d3
O4 - HKLM\..\Run: [w1aa9e2c.dll] RUNDLL32.EXE w1aa9e2c.dll,I2 0000046c01aa9e2c
O4 - HKLM\..\Run: [w23e307e.dll] RUNDLL32.EXE w23e307e.dll,I2 0000046c023e307e
O4 - HKLM\..\Run: [w0119e6f.dll] RUNDLL32.EXE w0119e6f.dll,I2 0000046c00119e6f
O4 - HKLM\..\Run: [w0016963.dll] RUNDLL32.EXE w0016963.dll,I2 0000046c00016963
O4 - HKLM\..\Run: [w0135826.dll] RUNDLL32.EXE w0135826.dll,I2 0000046c00135826
O4 - HKLM\..\Run: [w0d1e40e.dll] RUNDLL32.EXE w0d1e40e.dll,I2 0000046c00d1e40e
O4 - HKLM\..\Run: [w1746000.dll] RUNDLL32.EXE w1746000.dll,I2 0000046c01746000
O4 - HKLM\..\Run: [w1dbe633.dll] RUNDLL32.EXE w1dbe633.dll,I2 0000046c01dbe633
O4 - HKLM\..\Run: [w0012f67.dll] RUNDLL32.EXE w0012f67.dll,I2 0000046c00012f67
O4 - HKLM\..\Run: [w08ae37b.dll] RUNDLL32.EXE w08ae37b.dll,I2 0000046c008ae37b
O4 - HKLM\..\Run: [w1ab0784.dll] RUNDLL32.EXE w1ab0784.dll,I2 0000046c01ab0784
O4 - HKLM\..\Run: [w392fc15.dll] RUNDLL32.EXE w392fc15.dll,I2 0000046c0392fc15
O4 - HKLM\..\Run: [w424adc0.dll] RUNDLL32.EXE w424adc0.dll,I2 0000046c0424adc0
O4 - HKLM\..\Run: [w5ab00d9.dll] RUNDLL32.EXE w5ab00d9.dll,I2 0000046c05ab00d9
O4 - HKLM\..\Run: [w8a753f6.dll] RUNDLL32.EXE w8a753f6.dll,I2 0000046c08a753f6
O4 - HKLM\..\Run: [w0029ddc.dll] RUNDLL32.EXE w0029ddc.dll,I2 0000046c00029ddc
O4 - HKLM\..\Run: [w0a9f130.dll] RUNDLL32.EXE w0a9f130.dll,I2 0000046c00a9f130
O4 - HKLM\..\Run: [w11a4087.dll] RUNDLL32.EXE w11a4087.dll,I2 0000046c011a4087
O4 - HKLM\..\Run: [w0799648.dll] RUNDLL32.EXE w0799648.dll,I2 0000046c00799648
O4 - HKLM\..\Run: [w0b92815.dll] RUNDLL32.EXE w0b92815.dll,I2 0000046c00b92815
O4 - HKLM\..\Run: [w0ba63c2.dll] RUNDLL32.EXE w0ba63c2.dll,I2 0000046c00ba63c2
O4 - HKLM\..\Run: [w00145ce.dll] RUNDLL32.EXE w00145ce.dll,I2 0000046c000145ce
O4 - HKLM\..\Run: [w12b495e.dll] RUNDLL32.EXE w12b495e.dll,I2 0000046c012b495e
O4 - HKLM\..\Run: [w144ce35.dll] RUNDLL32.EXE w144ce35.dll,I2 0000046c0144ce35
O4 - HKLM\..\Run: [w4016e21.dll] RUNDLL32.EXE w4016e21.dll,I2 0000046c04016e21
O4 - HKLM\..\Run: [w49046fa.dll] RUNDLL32.EXE w49046fa.dll,I2 0000046c049046fa
O4 - HKLM\..\Run: [w020f1d6.dll] RUNDLL32.EXE w020f1d6.dll,I2 0000046c0020f1d6
O4 - HKLM\..\Run: [w001ddf7.dll] RUNDLL32.EXE w001ddf7.dll,I2 0000046c0001ddf7
O4 - HKLM\..\Run: [w180f3da.dll] RUNDLL32.EXE w180f3da.dll,I2 0000046c0180f3da
O4 - HKLM\..\Run: [w1c8d509.dll] RUNDLL32.EXE w1c8d509.dll,I2 0000046c01c8d509
O4 - HKLM\..\Run: [w2b94ff6.dll] RUNDLL32.EXE w2b94ff6.dll,I2 0000046c02b94ff6
O4 - HKLM\..\Run: [w000fc90.dll] RUNDLL32.EXE w000fc90.dll,I2 0000046c0000fc90
O4 - HKLM\..\Run: [w0a5db98.dll] RUNDLL32.EXE w0a5db98.dll,I2 0000046c00a5db98
O4 - HKLM\..\Run: [w00131f8.dll] RUNDLL32.EXE w00131f8.dll,I2 0000046c000131f8
O4 - HKLM\..\Run: [w0014abf.dll] RUNDLL32.EXE w0014abf.dll,I2 0000046c00014abf
O4 - HKLM\..\Run: [w03e96b4.dll] RUNDLL32.EXE w03e96b4.dll,I2 0000046c003e96b4
O4 - HKLM\..\Run: [w1003d59.dll] RUNDLL32.EXE w1003d59.dll,I2 0000046c01003d59
O4 - HKLM\..\Run: [w5c67a0d.dll] RUNDLL32.EXE w5c67a0d.dll,I2 0000046c05c67a0d
O4 - HKLM\..\Run: [w624df84.dll] RUNDLL32.EXE w624df84.dll,I2 0000046c0624df84
O4 - HKLM\..\Run: [w7621217.dll] RUNDLL32.EXE w7621217.dll,I2 0000046c07621217
O4 - HKLM\..\Run: [w765df1d.dll] RUNDLL32.EXE w765df1d.dll,I2 0000046c0765df1d
O4 - HKLM\..\Run: [w98b8b7c.dll] RUNDLL32.EXE w98b8b7c.dll,I2 0000046c098b8b7c
O4 - HKLM\..\Run: [w0018623.dll] RUNDLL32.EXE w0018623.dll,I2 0000046c00018623
O4 - HKLM\..\Run: [w29caa19.dll] RUNDLL32.EXE w29caa19.dll,I2 0000046c029caa19
O4 - HKLM\..\Run: [w0012f29.dll] RUNDLL32.EXE w0012f29.dll,I2 0000046c00012f29
O4 - HKLM\..\Run: [w163b7a8.dll] RUNDLL32.EXE w163b7a8.dll,I2 0000046c0163b7a8
O4 - HKLM\..\Run: [w4adb160.dll] RUNDLL32.EXE w4adb160.dll,I2 0000046c04adb160
O4 - HKLM\..\Run: [w63319ba.dll] RUNDLL32.EXE w63319ba.dll,I2 0000046c063319ba
O4 - HKLM\..\Run: [w014e09a.dll] RUNDLL32.EXE w014e09a.dll,I2 0000046c0014e09a
O4 - HKLM\..\Run: [w0dc8936.dll] RUNDLL32.EXE w0dc8936.dll,I2 0000046c00dc8936
O4 - HKLM\..\Run: [w1d647f7.dll] RUNDLL32.EXE w1d647f7.dll,I2 0000046c01d647f7
O4 - HKLM\..\Run: [w22fe242.dll] RUNDLL32.EXE w22fe242.dll,I2 0000046c022fe242
O4 - HKLM\..\Run: [w00104ae.dll] RUNDLL32.EXE w00104ae.dll,I2 0000046c000104ae
O4 - HKLM\..\Run: [w01c047c.dll] RUNDLL32.EXE w01c047c.dll,I2 0000046c001c047c
O4 - HKLM\..\Run: [w183528a.dll] RUNDLL32.EXE w183528a.dll,I2 0000046c0183528a
O4 - HKLM\..\Run: [w21b5ecb.dll] RUNDLL32.EXE w21b5ecb.dll,I2 0000046c021b5ecb
O4 - HKLM\..\Run: [w000f9d1.dll] RUNDLL32.EXE w000f9d1.dll,I2 0000046c0000f9d1
O4 - HKLM\..\Run: [w0197e9c.dll] RUNDLL32.EXE w0197e9c.dll,I2 0000046c00197e9c
O4 - HKLM\..\Run: [w0b41f44.dll] RUNDLL32.EXE w0b41f44.dll,I2 0000046c00b41f44
O4 - HKLM\..\Run: [w2732408.dll] RUNDLL32.EXE w2732408.dll,I2 0000046c02732408
O4 - HKLM\..\Run: [w00bf0d2.dll] RUNDLL32.EXE w00bf0d2.dll,I2 0000046c000bf0d2
O4 - HKLM\..\Run: [w05fb3b1.dll] RUNDLL32.EXE w05fb3b1.dll,I2 0000046c005fb3b1
O4 - HKLM\..\Run: [w001247b.dll] RUNDLL32.EXE w001247b.dll,I2 0000046c0001247b
O4 - HKLM\..\Run: [w212733a.dll] RUNDLL32.EXE w212733a.dll,I2 0000046c0212733a
O4 - HKLM\..\Run: [w001294d.dll] RUNDLL32.EXE w001294d.dll,I2 0000046c0001294d
O4 - HKLM\..\Run: [w0ef832f.dll] RUNDLL32.EXE w0ef832f.dll,I2 0000046c00ef832f
O4 - HKLM\..\Run: [w1dfe6db.dll] RUNDLL32.EXE w1dfe6db.dll,I2 0000046c01dfe6db
O4 - HKLM\..\Run: [w2a22aab.dll] RUNDLL32.EXE w2a22aab.dll,I2 0000046c02a22aab
O4 - HKLM\..\Run: [w2a24c7b.dll] RUNDLL32.EXE w2a24c7b.dll,I2 0000046c02a24c7b
O4 - HKLM\..\Run: [w2303c97.dll] RUNDLL32.EXE w2303c97.dll,I2 0000046c02303c97
O4 - HKLM\..\Run: [w3e3d98f.dll] RUNDLL32.EXE w3e3d98f.dll,I2 0000046c03e3d98f
O4 - HKLM\..\Run: [w6d48c0d.dll] RUNDLL32.EXE w6d48c0d.dll,I2 0000046c06d48c0d
O4 - HKLM\..\Run: [w328f90b.dll] RUNDLL32.EXE w328f90b.dll,I2 0000046c0328f90b
O4 - HKLM\..\Run: [w4064eba.dll] RUNDLL32.EXE w4064eba.dll,I2 0000046c04064eba
O4 - HKLM\..\Run: [w4ebf2a1.dll] RUNDLL32.EXE w4ebf2a1.dll,I2 0000046c04ebf2a1
O4 - HKLM\..\Run: [w626a9b5.dll] RUNDLL32.EXE w626a9b5.dll,I2 0000046c0626a9b5
O4 - HKLM\..\Run: [w68936d5.dll] RUNDLL32.EXE w68936d5.dll,I2 0000046c068936d5
O4 - HKLM\..\Run: [w862891f.dll] RUNDLL32.EXE w862891f.dll,I2 0000046c0862891f
O4 - HKLM\..\Run: [w8f3ea87.dll] RUNDLL32.EXE w8f3ea87.dll,I2 0000046c08f3ea87
O4 - HKLM\..\Run: [wa85eb7e.dll] RUNDLL32.EXE wa85eb7e.dll,I2 0000046c0a85eb7e
O4 - HKLM\..\Run: [wac0d279.dll] RUNDLL32.EXE wac0d279.dll,I2 0000046c0ac0d279
O4 - HKLM\..\Run: [w00104ec.dll] RUNDLL32.EXE w00104ec.dll,I2 0000046c000104ec
O4 - HKLM\..\Run: [w280d95f.dll] RUNDLL32.EXE w280d95f.dll,I2 0000046c0280d95f
O4 - HKLM\..\Run: [w0010347.dll] RUNDLL32.EXE w0010347.dll,I2 0000046c00010347
O4 - HKLM\..\Run: [w00a7771.dll] RUNDLL32.EXE w00a7771.dll,I2 0000046c000a7771
O4 - HKLM\..\Run: [w01d00ed.dll] RUNDLL32.EXE w01d00ed.dll,I2 0000046c001d00ed
O4 - HKLM\..\Run: [w0ef9530.dll] RUNDLL32.EXE w0ef9530.dll,I2 0000046c00ef9530
O4 - HKLM\..\Run: [w153d6d7.dll] RUNDLL32.EXE w153d6d7.dll,I2 0000046c0153d6d7
O4 - HKLM\..\Run: [w1a86727.dll] RUNDLL32.EXE w1a86727.dll,I2 0000046c01a86727
O4 - HKLM\..\Run: [w60e974b.dll] RUNDLL32.EXE w60e974b.dll,I2 0000046c060e974b
O4 - HKLM\..\Run: [w9da0dff.dll] RUNDLL32.EXE w9da0dff.dll,I2 0000046c09da0dff
O4 - HKLM\..\Run: [w0014699.dll] RUNDLL32.EXE w0014699.dll,I2 0000046c00014699
O4 - HKLM\..\Run: [w01ee2fb.dll] RUNDLL32.EXE w01ee2fb.dll,I2 0000046c001ee2fb
O4 - HKLM\..\Run: [w05682ba.dll] RUNDLL32.EXE w05682ba.dll,I2 0000046c005682ba
O4 - HKLM\..\Run: [w001daab.dll] RUNDLL32.EXE w001daab.dll,I2 0000046c0001daab
O4 - HKLM\..\Run: [w04af218.dll] RUNDLL32.EXE w04af218.dll,I2 0000046c004af218
O4 - HKLM\..\Run: [w1403e4c.dll] RUNDLL32.EXE w1403e4c.dll,I2 0000046c01403e4c
O4 - HKLM\..\Run: [w174a892.dll] RUNDLL32.EXE w174a892.dll,I2 0000046c0174a892
O4 - HKLM\..\Run: [w11fce0a.dll] RUNDLL32.EXE w11fce0a.dll,I2 0000046c011fce0a
O4 - HKLM\..\Run: [w15d5533.dll] RUNDLL32.EXE w15d5533.dll,I2 0000046c015d5533
O4 - HKLM\..\Run: [w182b475.dll] RUNDLL32.EXE w182b475.dll,I2 0000046c0182b475
O4 - HKLM\..\Run: [w0aec67e.dll] RUNDLL32.EXE w0aec67e.dll,I2 0000046c00aec67e
O4 - HKLM\..\Run: [w0f18846.dll] RUNDLL32.EXE w0f18846.dll,I2 0000046c00f18846
O4 - HKLM\..\Run: [w2343a71.dll] RUNDLL32.EXE w2343a71.dll,I2 0000046c02343a71

tstewart38301

16 Posts

July 30th, 2006 02:00

last section.... anything else i can do?:

 

O4 - HKLM\..\Run: [w34d5e10.dll] RUNDLL32.EXE w34d5e10.dll,I2 0000046c034d5e10
O4 - HKLM\..\Run: [w3ccd3f2.dll] RUNDLL32.EXE w3ccd3f2.dll,I2 0000046c03ccd3f2
O4 - HKLM\..\Run: [w125f0d7.dll] RUNDLL32.EXE w125f0d7.dll,I2 0000046c0125f0d7
O4 - HKLM\..\Run: [w000ee96.dll] RUNDLL32.EXE w000ee96.dll,I2 0000046c0000ee96
O4 - HKLM\..\Run: [w2135b86.dll] RUNDLL32.EXE w2135b86.dll,I2 0000046c02135b86
O4 - HKLM\..\Run: [w00635a9.dll] RUNDLL32.EXE w00635a9.dll,I2 0000046c000635a9
O4 - HKLM\..\Run: [w00430a1.dll] RUNDLL32.EXE w00430a1.dll,I2 0000046c000430a1
O4 - HKLM\..\Run: [w03b2655.dll] RUNDLL32.EXE w03b2655.dll,I2 0000046c003b2655
O4 - HKLM\..\Run: [w2b129b8.dll] RUNDLL32.EXE w2b129b8.dll,I2 0000046c02b129b8
O4 - HKLM\..\Run: [w343f109.dll] RUNDLL32.EXE w343f109.dll,I2 0000046c0343f109
O4 - HKLM\..\Run: [w363a203.dll] RUNDLL32.EXE w363a203.dll,I2 0000046c0363a203
O4 - HKLM\..\Run: [w365c408.dll] RUNDLL32.EXE w365c408.dll,I2 0000046c0365c408
O4 - HKLM\..\Run: [w4453eaa.dll] RUNDLL32.EXE w4453eaa.dll,I2 0000046c04453eaa
O4 - HKLM\..\Run: [w7dd31ee.dll] RUNDLL32.EXE w7dd31ee.dll,I2 0000046c07dd31ee
O4 - HKLM\..\Run: [wa42c32c.dll] RUNDLL32.EXE wa42c32c.dll,I2 0000046c0a42c32c
O4 - HKLM\..\Run: [wab5dd6b.dll] RUNDLL32.EXE wab5dd6b.dll,I2 0000046c0ab5dd6b
O4 - HKLM\..\Run: [w019f0de.dll] RUNDLL32.EXE w019f0de.dll,I2 0000046c0019f0de
O4 - HKLM\..\Run: [w139b728.dll] RUNDLL32.EXE w139b728.dll,I2 0000046c0139b728
O4 - HKLM\..\Run: [w27cbbf7.dll] RUNDLL32.EXE w27cbbf7.dll,I2 0000046c027cbbf7
O4 - HKLM\..\Run: [w00107da.dll] RUNDLL32.EXE w00107da.dll,I2 0000046c000107da
O4 - HKLM\..\Run: [w0011085.dll] RUNDLL32.EXE w0011085.dll,I2 0000046c00011085
O4 - HKLM\..\Run: [w069facc.dll] RUNDLL32.EXE w069facc.dll,I2 0000046c0069facc
O4 - HKLM\..\Run: [w0d11ee9.dll] RUNDLL32.EXE w0d11ee9.dll,I2 0000046c00d11ee9
O4 - HKLM\..\Run: [w14d0377.dll] RUNDLL32.EXE w14d0377.dll,I2 0000046c014d0377
O4 - HKLM\..\Run: [w1c4b1e4.dll] RUNDLL32.EXE w1c4b1e4.dll,I2 0000046c01c4b1e4
O4 - HKLM\..\Run: [w0016e26.dll] RUNDLL32.EXE w0016e26.dll,I2 0000046c00016e26
O4 - HKLM\..\Run: [w00148ac.dll] RUNDLL32.EXE w00148ac.dll,I2 0000046c000148ac
O4 - HKLM\..\Run: [w02d48b6.dll] RUNDLL32.EXE w02d48b6.dll,I2 0000046c002d48b6
O4 - HKLM\..\Run: [w085168e.dll] RUNDLL32.EXE w085168e.dll,I2 0000046c0085168e
O4 - HKLM\..\Run: [w330974d.dll] RUNDLL32.EXE w330974d.dll,I2 0000046c0330974d
O4 - HKLM\..\Run: [w3dcf3e0.dll] RUNDLL32.EXE w3dcf3e0.dll,I2 0000046c03dcf3e0
O4 - HKLM\..\Run: [w3f7b721.dll] RUNDLL32.EXE w3f7b721.dll,I2 0000046c03f7b721
O4 - HKLM\..\Run: [w42475b8.dll] RUNDLL32.EXE w42475b8.dll,I2 0000046c042475b8
O4 - HKLM\..\Run: [w4ca9416.dll] RUNDLL32.EXE w4ca9416.dll,I2 0000046c04ca9416
O4 - HKLM\..\Run: [w5346ac1.dll] RUNDLL32.EXE w5346ac1.dll,I2 0000046c05346ac1
O4 - HKLM\..\Run: [w55f62e0.dll] RUNDLL32.EXE w55f62e0.dll,I2 0000046c055f62e0
O4 - HKLM\..\Run: [w00137a5.dll] RUNDLL32.EXE w00137a5.dll,I2 0000046c000137a5
O4 - HKLM\..\Run: [w00303f9.dll] RUNDLL32.EXE w00303f9.dll,I2 0000046c000303f9
O4 - HKLM\..\Run: [w0cc6f05.dll] RUNDLL32.EXE w0cc6f05.dll,I2 0000046c00cc6f05
O4 - HKLM\..\Run: [w2016a53.dll] RUNDLL32.EXE w2016a53.dll,I2 0000046c02016a53
O4 - HKLM\..\Run: [w21c7c80.dll] RUNDLL32.EXE w21c7c80.dll,I2 0000046c021c7c80
O4 - HKLM\..\Run: [w24b28dd.dll] RUNDLL32.EXE w24b28dd.dll,I2 0000046c024b28dd
O4 - HKLM\..\Run: [w2579dd4.dll] RUNDLL32.EXE w2579dd4.dll,I2 0000046c02579dd4
O4 - HKLM\..\Run: [w00282c2.dll] RUNDLL32.EXE w00282c2.dll,I2 0000046c000282c2
O4 - HKLM\..\Run: [w00beff8.dll] RUNDLL32.EXE w00beff8.dll,I2 0000046c000beff8
O4 - HKLM\..\Run: [w10ac110.dll] RUNDLL32.EXE w10ac110.dll,I2 0000046c010ac110
O4 - HKLM\..\Run: [w18e8a0f.dll] RUNDLL32.EXE w18e8a0f.dll,I2 0000046c018e8a0f
O4 - HKLM\..\Run: [w300264d.dll] RUNDLL32.EXE w300264d.dll,I2 0000046c0300264d
O4 - HKLM\..\Run: [w0012b02.dll] RUNDLL32.EXE w0012b02.dll,I2 0000046c00012b02
O4 - HKLM\..\Run: [w099f6ac.dll] RUNDLL32.EXE w099f6ac.dll,I2 0000046c0099f6ac
O4 - HKLM\..\Run: [w10d65a3.dll] RUNDLL32.EXE w10d65a3.dll,I2 0000046c010d65a3
O4 - HKLM\..\Run: [w128d5ce.dll] RUNDLL32.EXE w128d5ce.dll,I2 0000046c0128d5ce
O4 - HKLM\..\Run: [w16a9b16.dll] RUNDLL32.EXE w16a9b16.dll,I2 0000046c016a9b16
O4 - HKLM\..\Run: [w1dfa454.dll] RUNDLL32.EXE w1dfa454.dll,I2 0000046c01dfa454
O4 - HKLM\..\Run: [w29709cb.dll] RUNDLL32.EXE w29709cb.dll,I2 0000046c029709cb
O4 - HKLM\..\Run: [w4e334d6.dll] RUNDLL32.EXE w4e334d6.dll,I2 0000046c04e334d6
O4 - HKLM\..\Run: [w5886356.dll] RUNDLL32.EXE w5886356.dll,I2 0000046c05886356
O4 - HKLM\..\Run: [w5c3f47b.dll] RUNDLL32.EXE w5c3f47b.dll,I2 0000046c05c3f47b
O4 - HKLM\..\Run: [w5e6ed5d.dll] RUNDLL32.EXE w5e6ed5d.dll,I2 0000046c05e6ed5d
O4 - HKLM\..\Run: [w6b3dcec.dll] RUNDLL32.EXE w6b3dcec.dll,I2 0000046c06b3dcec
O4 - HKLM\..\Run: [w70c70e3.dll] RUNDLL32.EXE w70c70e3.dll,I2 0000046c070c70e3
O4 - HKLM\..\Run: [w7452f61.dll] RUNDLL32.EXE w7452f61.dll,I2 0000046c07452f61
O4 - HKLM\..\Run: [w79f0473.dll] RUNDLL32.EXE w79f0473.dll,I2 0000046c079f0473
O4 - HKLM\..\Run: [w7d209ca.dll] RUNDLL32.EXE w7d209ca.dll,I2 0000046c07d209ca
O4 - HKLM\..\Run: [w04b320f.dll] RUNDLL32.EXE w04b320f.dll,I2 0000046c004b320f
O4 - HKLM\..\Run: [w0af52c0.dll] RUNDLL32.EXE w0af52c0.dll,I2 0000046c00af52c0
O4 - HKLM\..\Run: [w0012620.dll] RUNDLL32.EXE w0012620.dll,I2 0000046c00012620
O4 - HKLM\..\Run: [w00afa2e.dll] RUNDLL32.EXE w00afa2e.dll,I2 0000046c000afa2e
O4 - HKLM\..\Run: [w118b719.dll] RUNDLL32.EXE w118b719.dll,I2 0000046c0118b719
O4 - HKLM\..\Run: [w1cf8abf.dll] RUNDLL32.EXE w1cf8abf.dll,I2 0000046c01cf8abf
O4 - HKLM\..\Run: [w25b2229.dll] RUNDLL32.EXE w25b2229.dll,I2 0000046c025b2229
O4 - HKLM\..\Run: [w0027f96.dll] RUNDLL32.EXE w0027f96.dll,I2 0000046c00027f96
O4 - HKLM\..\Run: [w0105d16.dll] RUNDLL32.EXE w0105d16.dll,I2 0000046c00105d16
O4 - HKLM\..\Run: [w01f2c97.dll] RUNDLL32.EXE w01f2c97.dll,I2 0000046c001f2c97
O4 - HKLM\..\Run: [w0d65255.dll] RUNDLL32.EXE w0d65255.dll,I2 0000046c00d65255
O4 - HKLM\..\Run: [w17d62d3.dll] RUNDLL32.EXE w17d62d3.dll,I2 0000046c017d62d3
O4 - HKLM\..\Run: [w17f773c.dll] RUNDLL32.EXE w17f773c.dll,I2 0000046c017f773c
O4 - HKLM\..\Run: [w1cc7ee6.dll] RUNDLL32.EXE w1cc7ee6.dll,I2 0000046c01cc7ee6
O4 - HKLM\..\Run: [w25d1b97.dll] RUNDLL32.EXE w25d1b97.dll,I2 0000046c025d1b97
O4 - HKLM\..\Run: [w2e8b478.dll] RUNDLL32.EXE w2e8b478.dll,I2 0000046c02e8b478
O4 - HKLM\..\Run: [w7805672.dll] RUNDLL32.EXE w7805672.dll,I2 0000046c07805672
O4 - HKLM\..\Run: [w000f695.dll] RUNDLL32.EXE w000f695.dll,I2 0000046c0000f695
O4 - HKLM\..\Run: [w00155db.dll] RUNDLL32.EXE w00155db.dll,I2 0000046c000155db
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [c:_program files_wordperfe3a] C:\Program Files\WordPerfect Office 12\Programs\CorUpd.exe /Watch /r="SOFTWARE\Corel\WordPerfect Suite\12"
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digimax Viewer 1.0.lnk = ?
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} (InstallShield Setup Player 2K2) - http://www.songtouch.com/install/network/install.exe
O16 - DPF: {78AEEDE8-7345-4FB5-A8FE-4BFF16EF25FC} (McAfee Virtual Technician Control Class) - http://us-download.mcafee.com/products/protected/mvt/mvt.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe

 

tstewart38301

16 Posts

July 30th, 2006 02:00

next section:
 
O4 - HKLM\..\Run: [w021f3c5.dll] RUNDLL32.EXE w021f3c5.dll,I2 0000046c0021f3c5
O4 - HKLM\..\Run: [w051da48.dll] RUNDLL32.EXE w051da48.dll,I2 0000046c0051da48
O4 - HKLM\..\Run: [w0ed45e1.dll] RUNDLL32.EXE w0ed45e1.dll,I2 0000046c00ed45e1
O4 - HKLM\..\Run: [w1683968.dll] RUNDLL32.EXE w1683968.dll,I2 0000046c01683968
O4 - HKLM\..\Run: [w2505796.dll] RUNDLL32.EXE w2505796.dll,I2 0000046c02505796
O4 - HKLM\..\Run: [w5c820a8.dll] RUNDLL32.EXE w5c820a8.dll,I2 0000046c05c820a8
O4 - HKLM\..\Run: [w000f32a.dll] RUNDLL32.EXE w000f32a.dll,I2 0000046c0000f32a
O4 - HKLM\..\Run: [w2d5c6b4.dll] RUNDLL32.EXE w2d5c6b4.dll,I2 0000046c02d5c6b4
O4 - HKLM\..\Run: [w53af09d.dll] RUNDLL32.EXE w53af09d.dll,I2 0000046c053af09d
O4 - HKLM\..\Run: [w20b979c.dll] RUNDLL32.EXE w20b979c.dll,I2 0000046c020b979c
O4 - HKLM\..\Run: [w0015c15.dll] RUNDLL32.EXE w0015c15.dll,I2 0000046c00015c15
O4 - HKLM\..\Run: [w04d7eaf.dll] RUNDLL32.EXE w04d7eaf.dll,I2 0000046c004d7eaf
O4 - HKLM\..\Run: [w001361e.dll] RUNDLL32.EXE w001361e.dll,I2 0000046c0001361e
O4 - HKLM\..\Run: [w016457a.dll] RUNDLL32.EXE w016457a.dll,I2 0000046c0016457a
O4 - HKLM\..\Run: [w00113b2.dll] RUNDLL32.EXE w00113b2.dll,I2 0000046c000113b2
O4 - HKLM\..\Run: [w011853a.dll] RUNDLL32.EXE w011853a.dll,I2 0000046c0011853a
O4 - HKLM\..\Run: [w136df6f.dll] RUNDLL32.EXE w136df6f.dll,I2 0000046c0136df6f
O4 - HKLM\..\Run: [w1d265e3.dll] RUNDLL32.EXE w1d265e3.dll,I2 0000046c01d265e3
O4 - HKLM\..\Run: [w21e498f.dll] RUNDLL32.EXE w21e498f.dll,I2 0000046c021e498f
O4 - HKLM\..\Run: [w28b2740.dll] RUNDLL32.EXE w28b2740.dll,I2 0000046c028b2740
O4 - HKLM\..\Run: [w2f3fe6c.dll] RUNDLL32.EXE w2f3fe6c.dll,I2 0000046c02f3fe6c
O4 - HKLM\..\Run: [w5576817.dll] RUNDLL32.EXE w5576817.dll,I2 0000046c05576817
O4 - HKLM\..\Run: [w5f3ab53.dll] RUNDLL32.EXE w5f3ab53.dll,I2 0000046c05f3ab53
O4 - HKLM\..\Run: [w0f19537.dll] RUNDLL32.EXE w0f19537.dll,I2 0000046c00f19537
O4 - HKLM\..\Run: [w00d12fc.dll] RUNDLL32.EXE w00d12fc.dll,I2 0000046c000d12fc
O4 - HKLM\..\Run: [w1b7a13a.dll] RUNDLL32.EXE w1b7a13a.dll,I2 0000046c01b7a13a
O4 - HKLM\..\Run: [w212c32e.dll] RUNDLL32.EXE w212c32e.dll,I2 0000046c0212c32e
O4 - HKLM\..\Run: [w2e97d85.dll] RUNDLL32.EXE w2e97d85.dll,I2 0000046c02e97d85
O4 - HKLM\..\Run: [w00c9a03.dll] RUNDLL32.EXE w00c9a03.dll,I2 0000046c000c9a03
O4 - HKLM\..\Run: [w02133f0.dll] RUNDLL32.EXE w02133f0.dll,I2 0000046c002133f0
O4 - HKLM\..\Run: [w02f557e.dll] RUNDLL32.EXE w02f557e.dll,I2 0000046c002f557e
O4 - HKLM\..\Run: [w0add0a4.dll] RUNDLL32.EXE w0add0a4.dll,I2 0000046c00add0a4
O4 - HKLM\..\Run: [w1139d7e.dll] RUNDLL32.EXE w1139d7e.dll,I2 0000046c01139d7e
O4 - HKLM\..\Run: [w1cad5bb.dll] RUNDLL32.EXE w1cad5bb.dll,I2 0000046c01cad5bb
O4 - HKLM\..\Run: [w0016be4.dll] RUNDLL32.EXE w0016be4.dll,I2 0000046c00016be4
O4 - HKLM\..\Run: [w08c427e.dll] RUNDLL32.EXE w08c427e.dll,I2 0000046c008c427e
O4 - HKLM\..\Run: [w032774f.dll] RUNDLL32.EXE w032774f.dll,I2 0000046c0032774f
O4 - HKLM\..\Run: [w0436ffa.dll] RUNDLL32.EXE w0436ffa.dll,I2 0000046c00436ffa
O4 - HKLM\..\Run: [w0d45c9f.dll] RUNDLL32.EXE w0d45c9f.dll,I2 0000046c00d45c9f
O4 - HKLM\..\Run: [w000f944.dll] RUNDLL32.EXE w000f944.dll,I2 0000046c0000f944
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [w001198e.dll] RUNDLL32.EXE w001198e.dll,I2 0000046c0001198e
O4 - HKLM\..\Run: [w01d4142.dll] RUNDLL32.EXE w01d4142.dll,I2 0000046c001d4142
O4 - HKLM\..\Run: [w1f64730.dll] RUNDLL32.EXE w1f64730.dll,I2 0000046c01f64730
O4 - HKLM\..\Run: [w32b86ab.dll] RUNDLL32.EXE w32b86ab.dll,I2 0000046c032b86ab
O4 - HKLM\..\Run: [w37aa128.dll] RUNDLL32.EXE w37aa128.dll,I2 0000046c037aa128
O4 - HKLM\..\Run: [w04352dd.dll] RUNDLL32.EXE w04352dd.dll,I2 0000046c004352dd
O4 - HKLM\..\Run: [w0e418f1.dll] RUNDLL32.EXE w0e418f1.dll,I2 0000046c00e418f1
O4 - HKLM\..\Run: [w0e9a3f3.dll] RUNDLL32.EXE w0e9a3f3.dll,I2 0000046c00e9a3f3
O4 - HKLM\..\Run: [w12c5f05.dll] RUNDLL32.EXE w12c5f05.dll,I2 0000046c012c5f05
O4 - HKLM\..\Run: [w2c52dfc.dll] RUNDLL32.EXE w2c52dfc.dll,I2 0000046c02c52dfc
O4 - HKLM\..\Run: [w152739d.dll] RUNDLL32.EXE w152739d.dll,I2 0000046c0152739d
O4 - HKLM\..\Run: [w0012594.dll] RUNDLL32.EXE w0012594.dll,I2 0000046c00012594
O4 - HKLM\..\Run: [w09fea99.dll] RUNDLL32.EXE w09fea99.dll,I2 0000046c009fea99
O4 - HKLM\..\Run: [w1768c18.dll] RUNDLL32.EXE w1768c18.dll,I2 0000046c01768c18
O4 - HKLM\..\Run: [w1839417.dll] RUNDLL32.EXE w1839417.dll,I2 0000046c01839417
O4 - HKLM\..\Run: [w23f7fd1.dll] RUNDLL32.EXE w23f7fd1.dll,I2 0000046c023f7fd1
O4 - HKLM\..\Run: [w2d609d8.dll] RUNDLL32.EXE w2d609d8.dll,I2 0000046c02d609d8
O4 - HKLM\..\Run: [w36744cc.dll] RUNDLL32.EXE w36744cc.dll,I2 0000046c036744cc
O4 - HKLM\..\Run: [w007944e.dll] RUNDLL32.EXE w007944e.dll,I2 0000046c0007944e
O4 - HKLM\..\Run: [w01179a2.dll] RUNDLL32.EXE w01179a2.dll,I2 0000046c001179a2
O4 - HKLM\..\Run: [w025aab3.dll] RUNDLL32.EXE w025aab3.dll,I2 0000046c0025aab3
O4 - HKLM\..\Run: [w0c1695d.dll] RUNDLL32.EXE w0c1695d.dll,I2 0000046c00c1695d
O4 - HKLM\..\Run: [w0fdd61d.dll] RUNDLL32.EXE w0fdd61d.dll,I2 0000046c00fdd61d
O4 - HKLM\..\Run: [w196580c.dll] RUNDLL32.EXE w196580c.dll,I2 0000046c0196580c
O4 - HKLM\..\Run: [w1ad115e.dll] RUNDLL32.EXE w1ad115e.dll,I2 0000046c01ad115e
O4 - HKLM\..\Run: [w2275309.dll] RUNDLL32.EXE w2275309.dll,I2 0000046c02275309
O4 - HKLM\..\Run: [w46f514b.dll] RUNDLL32.EXE w46f514b.dll,I2 0000046c046f514b
O4 - HKLM\..\Run: [w4db69c8.dll] RUNDLL32.EXE w4db69c8.dll,I2 0000046c04db69c8
O4 - HKLM\..\Run: [w4e97136.dll] RUNDLL32.EXE w4e97136.dll,I2 0000046c04e97136
O4 - HKLM\..\Run: [w5751be9.dll] RUNDLL32.EXE w5751be9.dll,I2 0000046c05751be9
O4 - HKLM\..\Run: [w6817666.dll] RUNDLL32.EXE w6817666.dll,I2 0000046c06817666
O4 - HKLM\..\Run: [w7a0f48b.dll] RUNDLL32.EXE w7a0f48b.dll,I2 0000046c07a0f48b
O4 - HKLM\..\Run: [w9a74bea.dll] RUNDLL32.EXE w9a74bea.dll,I2 0000046c09a74bea
O4 - HKLM\..\Run: [wa3d0c19.dll] RUNDLL32.EXE wa3d0c19.dll,I2 0000046c0a3d0c19
O4 - HKLM\..\Run: [wa772c58.dll] RUNDLL32.EXE wa772c58.dll,I2 0000046c0a772c58
O4 - HKLM\..\Run: [wbd4f237.dll] RUNDLL32.EXE wbd4f237.dll,I2 0000046c0bd4f237
O4 - HKLM\..\Run: [wc78c6a5.dll] RUNDLL32.EXE wc78c6a5.dll,I2 0000046c0c78c6a5
O4 - HKLM\..\Run: [wd64fa1d.dll] RUNDLL32.EXE wd64fa1d.dll,I2 0000046c0d64fa1d
O4 - HKLM\..\Run: [w0013b1f.dll] RUNDLL32.EXE w0013b1f.dll,I2 0000046c00013b1f
O4 - HKLM\..\Run: [w0a80c62.dll] RUNDLL32.EXE w0a80c62.dll,I2 0000046c00a80c62
O4 - HKLM\..\Run: [w0e784eb.dll] RUNDLL32.EXE w0e784eb.dll,I2 0000046c00e784eb
O4 - HKLM\..\Run: [w1240562.dll] RUNDLL32.EXE w1240562.dll,I2 0000046c01240562
O4 - HKLM\..\Run: [w2096f6d.dll] RUNDLL32.EXE w2096f6d.dll,I2 0000046c02096f6d
O4 - HKLM\..\Run: [w32591b5.dll] RUNDLL32.EXE w32591b5.dll,I2 0000046c032591b5
O4 - HKLM\..\Run: [w0012c99.dll] RUNDLL32.EXE w0012c99.dll,I2 0000046c00012c99
O4 - HKLM\..\Run: [w0011dd3.dll] RUNDLL32.EXE w0011dd3.dll,I2 0000046c00011dd3
O4 - HKLM\..\Run: [w05d2f68.dll] RUNDLL32.EXE w05d2f68.dll,I2 0000046c005d2f68
O4 - HKLM\..\Run: [w12be3d9.dll] RUNDLL32.EXE w12be3d9.dll,I2 0000046c012be3d9
O4 - HKLM\..\Run: [w1b55d64.dll] RUNDLL32.EXE w1b55d64.dll,I2 0000046c01b55d64
O4 - HKLM\..\Run: [w1d1b05e.dll] RUNDLL32.EXE w1d1b05e.dll,I2 0000046c01d1b05e
O4 - HKLM\..\Run: [w125c13b.dll] RUNDLL32.EXE w125c13b.dll,I2 0000046c0125c13b
O4 - HKLM\..\Run: [w0013572.dll] RUNDLL32.EXE w0013572.dll,I2 0000046c00013572
O4 - HKLM\..\Run: [w0dcbb72.dll] RUNDLL32.EXE w0dcbb72.dll,I2 0000046c00dcbb72
O4 - HKLM\..\Run: [w0017cbc.dll] RUNDLL32.EXE w0017cbc.dll,I2 0000046c00017cbc
O4 - HKLM\..\Run: [w01c40f8.dll] RUNDLL32.EXE w01c40f8.dll,I2 0000046c001c40f8
O4 - HKLM\..\Run: [w02ef1a3.dll] RUNDLL32.EXE w02ef1a3.dll,I2 0000046c002ef1a3
O4 - HKLM\..\Run: [w0808d1e.dll] RUNDLL32.EXE w0808d1e.dll,I2 0000046c00808d1e
O4 - HKLM\..\Run: [w0e51071.dll] RUNDLL32.EXE w0e51071.dll,I2 0000046c00e51071
O4 - HKLM\..\Run: [w01217b6.dll] RUNDLL32.EXE w01217b6.dll,I2 0000046c001217b6
O4 - HKLM\..\Run: [w0245ce6.dll] RUNDLL32.EXE w0245ce6.dll,I2 0000046c00245ce6
O4 - HKLM\..\Run: [w059bab4.dll] RUNDLL32.EXE w059bab4.dll,I2 0000046c0059bab4
O4 - HKLM\..\Run: [w095bb9a.dll] RUNDLL32.EXE w095bb9a.dll,I2 0000046c0095bb9a
O4 - HKLM\..\Run: [w28d09fa.dll] RUNDLL32.EXE w28d09fa.dll,I2 0000046c028d09fa
O4 - HKLM\..\Run: [w49b171b.dll] RUNDLL32.EXE w49b171b.dll,I2 0000046c049b171b
O4 - HKLM\..\Run: [w6de2052.dll] RUNDLL32.EXE w6de2052.dll,I2 0000046c06de2052
O4 - HKLM\..\Run: [w0012e3f.dll] RUNDLL32.EXE w0012e3f.dll,I2 0000046c00012e3f
O4 - HKLM\..\Run: [w123890e.dll] RUNDLL32.EXE w123890e.dll,I2 0000046c0123890e
O4 - HKLM\..\Run: [w0011911.dll] RUNDLL32.EXE w0011911.dll,I2 0000046c00011911
O4 - HKLM\..\Run: [w3ae14ab.dll] RUNDLL32.EXE w3ae14ab.dll,I2 0000046c03ae14ab
O4 - HKLM\..\Run: [w0011ac6.dll] RUNDLL32.EXE w0011ac6.dll,I2 0000046c00011ac6
O4 - HKLM\..\Run: [w05be302.dll] RUNDLL32.EXE w05be302.dll,I2 0000046c005be302
O4 - HKLM\..\Run: [w0012083.dll] RUNDLL32.EXE w0012083.dll,I2 0000046c00012083
O4 - HKLM\..\Run: [w0016dd8.dll] RUNDLL32.EXE w0016dd8.dll,I2 0000046c00016dd8
O4 - HKLM\..\Run: [w06220f8.dll] RUNDLL32.EXE w06220f8.dll,I2 0000046c006220f8
O4 - HKLM\..\Run: [w2dbcd3f.dll] RUNDLL32.EXE w2dbcd3f.dll,I2 0000046c02dbcd3f
O4 - HKLM\..\Run: [w5ce91c4.dll] RUNDLL32.EXE w5ce91c4.dll,I2 0000046c05ce91c4
O4 - HKLM\..\Run: [w825f38a.dll] RUNDLL32.EXE w825f38a.dll,I2 0000046c0825f38a
O4 - HKLM\..\Run: [w0010c4f.dll] RUNDLL32.EXE w0010c4f.dll,I2 0000046c00010c4f
O4 - HKLM\..\Run: [w203d122.dll] RUNDLL32.EXE w203d122.dll,I2 0000046c0203d122
O4 - HKLM\..\Run: [w3446a31.dll] RUNDLL32.EXE w3446a31.dll,I2 0000046c03446a31
O4 - HKLM\..\Run: [w494b820.dll] RUNDLL32.EXE w494b820.dll,I2 0000046c0494b820
O4 - HKLM\..\Run: [w7248ea8.dll] RUNDLL32.EXE w7248ea8.dll,I2 0000046c07248ea8
O4 - HKLM\..\Run: [w33fd0c3.dll] RUNDLL32.EXE w33fd0c3.dll,I2 0000046c033fd0c3
O4 - HKLM\..\Run: [w4d207fc.dll] RUNDLL32.EXE w4d207fc.dll,I2 0000046c04d207fc
O4 - HKLM\..\Run: [w4fb384c.dll] RUNDLL32.EXE w4fb384c.dll,I2 0000046c04fb384c
O4 - HKLM\..\Run: [w5baa424.dll] RUNDLL32.EXE w5baa424.dll,I2 0000046c05baa424
O4 - HKLM\..\Run: [w8547349.dll] RUNDLL32.EXE w8547349.dll,I2 0000046c08547349
O4 - HKLM\..\Run: [w8995e3b.dll] RUNDLL32.EXE w8995e3b.dll,I2 0000046c08995e3b
O4 - HKLM\..\Run: [wad8e3ca.dll] RUNDLL32.EXE wad8e3ca.dll,I2 0000046c0ad8e3ca
O4 - HKLM\..\Run: [wb427184.dll] RUNDLL32.EXE wb427184.dll,I2 0000046c0b427184
O4 - HKLM\..\Run: [w0013ff2.dll] RUNDLL32.EXE w0013ff2.dll,I2 0000046c00013ff2
O4 - HKLM\..\Run: [w229de48.dll] RUNDLL32.EXE w229de48.dll,I2 0000046c0229de48
O4 - HKLM\..\Run: [w2941a73.dll] RUNDLL32.EXE w2941a73.dll,I2 0000046c02941a73
O4 - HKLM\..\Run: [w56baeb4.dll] RUNDLL32.EXE w56baeb4.dll,I2 0000046c056baeb4
O4 - HKLM\..\Run: [w5e7a7f2.dll] RUNDLL32.EXE w5e7a7f2.dll,I2 0000046c05e7a7f2
O4 - HKLM\..\Run: [w0011306.dll] RUNDLL32.EXE w0011306.dll,I2 0000046c00011306
O4 - HKLM\..\Run: [w0013a54.dll] RUNDLL32.EXE w0013a54.dll,I2 0000046c00013a54
O4 - HKLM\..\Run: [w0107bf8.dll] RUNDLL32.EXE w0107bf8.dll,I2 0000046c00107bf8
O4 - HKLM\..\Run: [w02ebd55.dll] RUNDLL32.EXE w02ebd55.dll,I2 0000046c002ebd55
O4 - HKLM\..\Run: [w001482f.dll] RUNDLL32.EXE w001482f.dll,I2 0000046c0001482f
O4 - HKLM\..\Run: [w02ed9f5.dll] RUNDLL32.EXE w02ed9f5.dll,I2 0000046c002ed9f5
O4 - HKLM\..\Run: [w0012e00.dll] RUNDLL32.EXE w0012e00.dll,I2 0000046c00012e00
O4 - HKLM\..\Run: [w0f60f55.dll] RUNDLL32.EXE w0f60f55.dll,I2 0000046c00f60f55
O4 - HKLM\..\Run: [w3875972.dll] RUNDLL32.EXE w3875972.dll,I2 0000046c03875972
O4 - HKLM\..\Run: [w390d8b8.dll] RUNDLL32.EXE w390d8b8.dll,I2 0000046c0390d8b8
O4 - HKLM\..\Run: [w003c804.dll] RUNDLL32.EXE w003c804.dll,I2 0000046c0003c804
O4 - HKLM\..\Run: [w00424da.dll] RUNDLL32.EXE w00424da.dll,I2 0000046c000424da
O4 - HKLM\..\Run: [w009019a.dll] RUNDLL32.EXE w009019a.dll,I2 0000046c0009019a
O4 - HKLM\..\Run: [w239a97f.dll] RUNDLL32.EXE w239a97f.dll,I2 0000046c0239a97f
O4 - HKLM\..\Run: [w283daa9.dll] RUNDLL32.EXE w283daa9.dll,I2 0000046c0283daa9
O4 - HKLM\..\Run: [w0a924e7.dll] RUNDLL32.EXE w0a924e7.dll,I2 0000046c00a924e7
O4 - HKLM\..\Run: [w0013776.dll] RUNDLL32.EXE w0013776.dll,I2 0000046c00013776
O4 - HKLM\..\Run: [w01c719d.dll] RUNDLL32.EXE w01c719d.dll,I2 0000046c001c719d
O4 - HKLM\..\Run: [w0d1aabe.dll] RUNDLL32.EXE w0d1aabe.dll,I2 0000046c00d1aabe
O4 - HKLM\..\Run: [w14fe580.dll] RUNDLL32.EXE w14fe580.dll,I2 0000046c014fe580
O4 - HKLM\..\Run: [w0016905.dll] RUNDLL32.EXE w0016905.dll,I2 0000046c00016905
O4 - HKLM\..\Run: [w097fef3.dll] RUNDLL32.EXE w097fef3.dll,I2 0000046c0097fef3
O4 - HKLM\..\Run: [w476b2f1.dll] RUNDLL32.EXE w476b2f1.dll,I2 0000046c0476b2f1
O4 - HKLM\..\Run: [w4f57f64.dll] RUNDLL32.EXE w4f57f64.dll,I2 0000046c04f57f64
O4 - HKLM\..\Run: [w63dd365.dll] RUNDLL32.EXE w63dd365.dll,I2 0000046c063dd365
O4 - HKLM\..\Run: [w63dee01.dll] RUNDLL32.EXE w63dee01.dll,I2 0000046c063dee01
O4 - HKLM\..\Run: [w0010395.dll] RUNDLL32.EXE w0010395.dll,I2 0000046c00010395

tstewart38301

16 Posts

July 30th, 2006 02:00

i have to give you my log in sections. did everything except rerun java setup and ewido. her is log in sections:
 
Logfile of HijackThis v1.99.1
Scan saved at 10:38:03 PM, on 7/29/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\WINDOWS\system32\hkcmd.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\WordPerfect Office 12\Programs\CorUpd.exe
C:\Program Files\Samsung\Digimax Viewer 1.0\DigimaxViewer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Hijackthis\HijackThis.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS02
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [w610570c.dll] RUNDLL32.EXE w610570c.dll,I2 0000046c0610570c
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [wbe0aa85.dll] RUNDLL32.EXE wbe0aa85.dll,I2 0000046c0be0aa85
O4 - HKLM\..\Run: [wc186965.dll] RUNDLL32.EXE wc186965.dll,I2 0000046c0c186965
O4 - HKLM\..\Run: [wc46199f.dll] RUNDLL32.EXE wc46199f.dll,I2 0000046c0c46199f
O4 - HKLM\..\Run: [w000f7cd.dll] RUNDLL32.EXE w000f7cd.dll,I2 0000046c0000f7cd
O4 - HKLM\..\Run: [w363ae77.dll] RUNDLL32.EXE w363ae77.dll,I2 0000046c0363ae77
O4 - HKLM\..\Run: [w5256af8.dll] RUNDLL32.EXE w5256af8.dll,I2 0000046c05256af8
O4 - HKLM\..\Run: [w81d11cc.dll] RUNDLL32.EXE w81d11cc.dll,I2 0000046c081d11cc
O4 - HKLM\..\Run: [w82a2fe4.dll] RUNDLL32.EXE w82a2fe4.dll,I2 0000046c082a2fe4
O4 - HKLM\..\Run: [w8afe5b0.dll] RUNDLL32.EXE w8afe5b0.dll,I2 0000046c08afe5b0
O4 - HKLM\..\Run: [w000e31c.dll] RUNDLL32.EXE w000e31c.dll,I2 0000046c0000e31c
O4 - HKLM\..\Run: [w0fda2b9.dll] RUNDLL32.EXE w0fda2b9.dll,I2 0000046c00fda2b9
O4 - HKLM\..\Run: [w000d0cd.dll] RUNDLL32.EXE w000d0cd.dll,I2 0000046c0000d0cd
O4 - HKLM\..\Run: [w0011383.dll] RUNDLL32.EXE w0011383.dll,I2 0000046c00011383
O4 - HKLM\..\Run: [w000e2af.dll] RUNDLL32.EXE w000e2af.dll,I2 0000046c0000e2af
O4 - HKLM\..\Run: [w08b4ca5.dll] RUNDLL32.EXE w08b4ca5.dll,I2 0000046c008b4ca5
O4 - HKLM\..\Run: [w0fe023e.dll] RUNDLL32.EXE w0fe023e.dll,I2 0000046c00fe023e
O4 - HKLM\..\Run: [w136b2b2.dll] RUNDLL32.EXE w136b2b2.dll,I2 0000046c0136b2b2
O4 - HKLM\..\Run: [w0086097.dll] RUNDLL32.EXE w0086097.dll,I2 0000046c00086097
O4 - HKLM\..\Run: [w0c4b452.dll] RUNDLL32.EXE w0c4b452.dll,I2 0000046c00c4b452
O4 - HKLM\..\Run: [w000d30f.dll] RUNDLL32.EXE w000d30f.dll,I2 0000046c0000d30f
O4 - HKLM\..\Run: [w235df09.dll] RUNDLL32.EXE w235df09.dll,I2 0000046c0235df09
O4 - HKLM\..\Run: [w26fcde8.dll] RUNDLL32.EXE w26fcde8.dll,I2 0000046c026fcde8
O4 - HKLM\..\Run: [w0105c4b.dll] RUNDLL32.EXE w0105c4b.dll,I2 0000046c00105c4b
O4 - HKLM\..\Run: [w0263995.dll] RUNDLL32.EXE w0263995.dll,I2 0000046c00263995
O4 - HKLM\..\Run: [w3a7e1c1.dll] RUNDLL32.EXE w3a7e1c1.dll,I2 0000046c03a7e1c1
O4 - HKLM\..\Run: [w5619fef.dll] RUNDLL32.EXE w5619fef.dll,I2 0000046c05619fef
O4 - HKLM\..\Run: [w21026c9.dll] RUNDLL32.EXE w21026c9.dll,I2 0000046c021026c9
O4 - HKLM\..\Run: [w2fcefe9.dll] RUNDLL32.EXE w2fcefe9.dll,I2 0000046c02fcefe9
O4 - HKLM\..\Run: [w000fb57.dll] RUNDLL32.EXE w000fb57.dll,I2 0000046c0000fb57
O4 - HKLM\..\Run: [w05ee93d.dll] RUNDLL32.EXE w05ee93d.dll,I2 0000046c005ee93d
O4 - HKLM\..\Run: [w1d9c650.dll] RUNDLL32.EXE w1d9c650.dll,I2 0000046c01d9c650
O4 - HKLM\..\Run: [w4357047.dll] RUNDLL32.EXE w4357047.dll,I2 0000046c04357047
O4 - HKLM\..\Run: [w4ef470c.dll] RUNDLL32.EXE w4ef470c.dll,I2 0000046c04ef470c
O4 - HKLM\..\Run: [w4177f9b.dll] RUNDLL32.EXE w4177f9b.dll,I2 0000046c04177f9b
O4 - HKLM\..\Run: [wb67e79b.dll] RUNDLL32.EXE wb67e79b.dll,I2 0000046c0b67e79b
O4 - HKLM\..\Run: [weea0e1e.dll] RUNDLL32.EXE weea0e1e.dll,I2 0000046c0eea0e1e
O4 - HKLM\..\Run: [w35adc17.dll] RUNDLL32.EXE w35adc17.dll,I2 0000046c035adc17
O4 - HKLM\..\Run: [w000d38c.dll] RUNDLL32.EXE w000d38c.dll,I2 0000046c0000d38c
O4 - HKLM\..\Run: [w033403d.dll] RUNDLL32.EXE w033403d.dll,I2 0000046c0033403d
O4 - HKLM\..\Run: [w119eda5.dll] RUNDLL32.EXE w119eda5.dll,I2 0000046c0119eda5
O4 - HKLM\..\Run: [w15b4761.dll] RUNDLL32.EXE w15b4761.dll,I2 0000046c015b4761
O4 - HKLM\..\Run: [w1ec40f7.dll] RUNDLL32.EXE w1ec40f7.dll,I2 0000046c01ec40f7
O4 - HKLM\..\Run: [w1fd668e.dll] RUNDLL32.EXE w1fd668e.dll,I2 0000046c01fd668e
O4 - HKLM\..\Run: [w000e6c6.dll] RUNDLL32.EXE w000e6c6.dll,I2 0000046c0000e6c6
O4 - HKLM\..\Run: [w0a10976.dll] RUNDLL32.EXE w0a10976.dll,I2 0000046c00a10976
O4 - HKLM\..\Run: [w1937bee.dll] RUNDLL32.EXE w1937bee.dll,I2 0000046c01937bee
O4 - HKLM\..\Run: [w047e209.dll] RUNDLL32.EXE w047e209.dll,I2 0000046c0047e209
O4 - HKLM\..\Run: [w0563333.dll] RUNDLL32.EXE w0563333.dll,I2 0000046c00563333
O4 - HKLM\..\Run: [w0d7244b.dll] RUNDLL32.EXE w0d7244b.dll,I2 0000046c00d7244b
O4 - HKLM\..\Run: [w0010ea1.dll] RUNDLL32.EXE w0010ea1.dll,I2 0000046c00010ea1

1972vet

3.3K Posts

July 30th, 2006 03:00

My goodness. That log just keeps producing more and more trojans. Please explain why you did not download and scan with Ewido. Your log would be two pages shorter if you were to run the Ewido application.

tstewart38301

16 Posts

July 30th, 2006 17:00

6th ewido section:

C:\WINDOWS\Temp\Cookies\cheryl stewart@banner.newyorkcasino[1].txt -> TrackingCookie.Newyorkcasino : No action taken.
C:\WINDOWS\Temp\Cookies\cheryl stewart@data1.perf.overture[1].txt -> TrackingCookie.Overture : No action taken.
C:\WINDOWS\Temp\Cookies\cheryl stewart@data2.perf.overture[1].txt -> TrackingCookie.Overture : No action taken.
C:\WINDOWS\Temp\Cookies\cheryl stewart@overture[2].txt -> TrackingCookie.Overture : No action taken.
C:\WINDOWS\Temp\Cookies\cheryl stewart@perf.overture[1].txt -> TrackingCookie.Overture : No action taken.
C:\WINDOWS\Temp\Cookies\tony stewart@data3.perf.overture[1].txt -> TrackingCookie.Overture : No action taken.
C:\WINDOWS\Temp\Cookies\tony stewart@overture[2].txt -> TrackingCookie.Overture : No action taken.
C:\WINDOWS\Temp\Cookies\tony stewart@perf.overture[1].txt -> TrackingCookie.Overture : No action taken.
C:\WINDOWS\Temp\Cookies\cheryl stewart@ads.pointroll[1].txt -> TrackingCookie.Pointroll : No action taken.
C:\WINDOWS\Temp\Cookies\tony stewart@ads.pointroll[1].txt -> TrackingCookie.Pointroll : No action taken.
C:\WINDOWS\Temp\Cookies\cheryl stewart@qksrv[2].txt -> TrackingCookie.Qksrv : No action taken.
C:\WINDOWS\Temp\Cookies\tony stewart@qksrv[2].txt -> TrackingCookie.Qksrv : No action taken.
C:\WINDOWS\Temp\Cookies\cheryl stewart@questionmarket[1].txt -> TrackingCookie.Questionmarket : No action taken.
C:\WINDOWS\Temp\Cookies\cheryl stewart@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : No action taken.
C:\WINDOWS\Temp\Cookies\tony stewart@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : No action taken.

tstewart38301

16 Posts

July 30th, 2006 17:00

7th ewido section:

C:\WINDOWS\Temp\Cookies\cheryl stewart@revenue[1].txt -> TrackingCookie.Revenue : No action taken.
C:\WINDOWS\Temp\Cookies\cheryl stewart@edge.ru4[1].txt -> TrackingCookie.Ru4 : No action taken.
C:\WINDOWS\Temp\Cookies\cheryl stewart@banners.searchingbooth[1].txt -> TrackingCookie.Searchingbooth : No action taken.
C:\WINDOWS\Temp\Cookies\cheryl stewart@.serving-sys[1].txt -> TrackingCookie.Serving-sys : No action taken.
C:\WINDOWS\Temp\Cookies\cheryl stewart@serving-sys[1].txt -> TrackingCookie.Serving-sys : No action taken.
C:\WINDOWS\Temp\Cookies\tony stewart@serving-sys[2].txt -> TrackingCookie.Serving-sys : No action taken.
C:\WINDOWS\Temp\Cookies\tony stewart@counter2.sextracker[2].txt -> TrackingCookie.Sextracker : No action taken.
C:\WINDOWS\Temp\Cookies\tony stewart@counter5.sextracker[1].txt -> TrackingCookie.Sextracker : No action taken.
C:\WINDOWS\Temp\Cookies\tony stewart@counter7.sextracker[1].txt -> TrackingCookie.Sextracker : No action taken.
C:\WINDOWS\Temp\Cookies\tony stewart@sextracker[2].txt -> TrackingCookie.Sextracker : No action taken.
C:\WINDOWS\Temp\Cookies\cheryl stewart@adopt.specificclick[2].txt -> TrackingCookie.Specificclick : No action taken.
C:\WINDOWS\Temp\Cookies\tony stewart@adopt.specificclick[1].txt -> TrackingCookie.Specificclick : No action taken.

tstewart38301

16 Posts

July 30th, 2006 17:00

ewido log follows in sections:

+ Created at: 12:27:34 PM 7/16/2006

 + Scan result: 

 

C:\WINDOWS\SYSTEM32\bjgcmpci.dll -> Adware.Agent : No action taken.
C:\WINDOWS\SYSTEM32\emocbfcp.dll -> Adware.Agent : No action taken.
C:\WINDOWS\SYSTEM32\engcaaei.dll -> Adware.Agent : No action taken.
C:\WINDOWS\SYSTEM32\ilcbjhop.dll -> Adware.Agent : No action taken.
C:\WINDOWS\SYSTEM32\ppmnjclb.dll -> Adware.Agent : No action taken.
C:\WINDOWS\SYSTEM32\msbe.dll -> Adware.BargainBuddy : No action taken.
C:\WINDOWS\SYSTEM32\nvms.dll -> Adware.BargainBuddy : No action taken.
C:\WINDOWS\bsx32 -> Adware.BookedSpace : No action taken.
C:\WINDOWS\bsx32\ASI2.bsx -> Adware.BookedSpace : No action taken.
C:\WINDOWS\bsx32\ASI5AFF.bsx -> Adware.BookedSpace : No action taken.
C:\WINDOWS\bsx32\ASISSRE.bsx -> Adware.BookedSpace : No action taken.
C:\WINDOWS\bsx32\EECH1.bsx -> Adware.BookedSpace : No action taken.
C:\WINDOWS\bsx32\MYGEEK.bsx -> Adware.BookedSpace : No action taken.
C:\WINDOWS\bsx32\SPZ4.bsx -> Adware.BookedSpace : No action taken.
C:\WINDOWS\bsx32\bspace.html -> Adware.BookedSpace : No action taken.
C:\WINDOWS\SYSTEM32\Runner.dll -> Adware.CASClient : No action taken.
HKLM\SOFTWARE\YourSiteBar -> Adware.ISTBar : No action taken.
HKLM\SOFTWARE\YourSiteBar\Historyfiles -> Adware.ISTBar : No action taken.
HKLM\SOFTWARE\YourSiteBar\Historymusic_keyword -> Adware.ISTBar : No action taken.
C:\WINDOWS\SYSTEM32\Lrwvc12n.dll -> Adware.Look2Me : No action taken.
C:\WINDOWS\SYSTEM32\iyss.dll -> Adware.Look2Me : No action taken.
C:\WINDOWS\SYSTEM32\wB223326.dll -> Adware.Look2Me : No action taken.
[632] C:\WINDOWS\system32\wB223326.dll -> Adware.Look2Me : No action taken.
C:\WINDOWS\SYSTEM32\hpsw.exe -> Adware.Suggestor : No action taken.
HKU\S-1-5-21-1414957029-483880543-4012928307-500\Software\SurfSideKick3 -> Adware.SurfSide : No action taken.
HKU\S-1-5-21-1414957029-483880543-4012928307-500\Software\SurfSideKick3\Internet Explorer -> Adware.SurfSide : No action taken.
C:\WINDOWS\SYSTEM32\dwdsregt.exe -> Adware.ZenoSearch : No action taken.
C:\WINDOWS\SYSTEM32\nwinkrag.exe -> Adware.ZenoSearch : No action taken.
C:\WINDOWS\newname5.exe -> Downloader.Adload.ae : No action taken.
C:\WINDOWS\newname6.exe -> Downloader.Adload.ae : No action taken.
C:\WINDOWS\SYSTEM32\w000d0cd.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w000d30f.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w000d38c.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w000e31c.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w000e6c6.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w000ee96.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w000f01c.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w000f32a.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w000f7cd.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w000f944.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w000f9d1.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w000fb57.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w000fc90.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w0010347.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w0010395.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w00104ae.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w00104ec.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w001074e.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w0010c4f.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w0010e24.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w0010ea1.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w001124a.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w0011306.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w0011383.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w00113b2.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w00116ee.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w0011911.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w001198e.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w0011ac6.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w0011dd3.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w0011e8f.dll -> Downloader.Agent.ahv : No action taken.

tstewart38301

16 Posts

July 30th, 2006 17:00

ewido 3rd section:

C:\WINDOWS\SYSTEM32\w12d116c.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w136b2b2.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w136df6f.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w13d96cb.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1403e4c.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1440566.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w144237e.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w144ce35.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w14b0eda.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w14fe580.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w152739d.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w153d6d7.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w15a3219.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w15b4761.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w15d5533.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w163b7a8.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1683968.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w171919e.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1746000.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w174a892.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1768c18.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w17ecfd1.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w180f3da.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w182b475.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w18347eb.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w183528a.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1839417.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w18a75a0.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1937bee.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w196580c.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1a86727.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1aa9e2c.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1ab0784.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1ac37d7.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1ad115e.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1ae7a26.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1b16278.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1b55d64.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1b7a13a.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1b7ab7b.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1bd08a6.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1bf1ed4.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1c8d509.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1cad5bb.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1d1b05e.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1d265e3.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1d5162e.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1d647f7.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1d9c650.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1dbe633.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1dfe6db.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1e11ff8.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1ec40f7.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1ed4fa8.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1f64730.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w1fd668e.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w203d122.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2096f6d.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w20b979c.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w21026c9.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w212733a.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w212c32e.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2135b86.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w21b5ecb.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w21e2416.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w21e498f.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2223326.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2275309.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w229de48.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w22fe242.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2303c97.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2343a71.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w235df09.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w239a97f.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w23e307e.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w23f7fd1.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w24646ce.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2474ae0.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w247eb27.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2505796.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w26fcde8.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w272c87b.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2732408.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w279b908.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w280163e.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w280d95f.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w283daa9.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w28b2740.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w28b6d61.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w28cb562.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w28d09fa.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2941a73.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w29caa19.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2a16047.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2a1bcde.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2a22aab.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2a24c7b.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2b94ff6.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2c52dfc.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2c8df5c.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2d1a507.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2d5c6b4.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2d609d8.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2dbcd3f.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2e97d85.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2f3fe6c.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w2fcefe9.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w32591b5.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w328f90b.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w32b86ab.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w33fd0c3.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w3446a31.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w34d5e10.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w35adc17.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w363ae77.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w36744cc.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w37aa128.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w3875972.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w3907163.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w390d8b8.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w392fc15.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w3a7e1c1.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w3ae14ab.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w3ccd3f2.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w3d87695.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w3e3d98f.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w3efefbd.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w4016e21.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w4064eba.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w4177f9b.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w424adc0.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w4328eca.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w4357047.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w443675a.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w46f514b.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w476b2f1.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w49046fa.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w494b820.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w4968713.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w49b171b.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w4ac042d.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w4adb160.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w4d207fc.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w4db69c8.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w4e97136.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w4ebf2a1.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w4ee4aba.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w4ef470c.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w4f57f64.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w4fa7d0b.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w4fb384c.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w5136051.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w520e10b.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w5256af8.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w53af09d.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w551ee9a.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w5576817.dll -> Downloader.Agent.ahv : No action taken.

tstewart38301

16 Posts

July 30th, 2006 17:00

ok now have ewido scanned and the above is the long log. I have run my virus scan and only detected 2 file with trojans(deleted). Am I doing something wrong? My pc is faster now that I ran the L2M destroyer.Qoologic did not find anything at all. Can I now delete the Qoolgic or do I need to keep it and the BTF,sidekick and others that you advised me to download? Thank you very much for all your help.

Tony

tstewart38301

16 Posts

July 30th, 2006 17:00

ewido 4th section:

C:\WINDOWS\SYSTEM32\w5619fef.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w56abd3f.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w56baeb4.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w5751be9.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w5865bdd.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w5ab00d9.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w5b2f71e.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w5baa424.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w5bee6d7.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w5c10429.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w5c67a0d.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w5c820a8.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w5ce91c4.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w5e7a7f2.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w5f3ab53.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w60e974b.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w624df84.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w626a9b5.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w63319ba.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w635cc86.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w63dd365.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w63dee01.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w654022b.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w669614c.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w6817666.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w68936d5.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w6d48c0d.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w6de2052.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w6fe637a.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w71c0654.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w7248ea8.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w7621217.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w765df1d.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w76dbdc3.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w7a0f48b.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w7b33ad3.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w7beea57.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w808a680.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w80a041c.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w81d11cc.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w825f38a.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w82a2fe4.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w8547349.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w862891f.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w8995e3b.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w8a753f6.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w8afe5b0.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w8b35227.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w8e1c62e.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w8f3ea87.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w91e8cd6.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w98b8b7c.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w9a74bea.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\w9da0dff.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\wa3d0c19.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\wa464a4f.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\wa772c58.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\wa85eb7e.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\wac0d279.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\wad8e3ca.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\wb427184.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\wb67e79b.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\wb934a0d.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\wbc04ee4.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\wbd4f237.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\wbe0aa85.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\wc186965.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\wc46199f.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\wc4eb730.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\wc78c6a5.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\wd64fa1d.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\weea0e1e.dll -> Downloader.Agent.ahv : No action taken.
C:\WINDOWS\SYSTEM32\awvvwtq.dll -> Downloader.ConHook.ab : No action taken.
C:\WINDOWS\ms0505616-3886.exe -> Downloader.VB.tw : No action taken.
C:\WINDOWS\sys01388605616-.exe -> Downloader.VB.tw : No action taken.
C:\WINDOWS\keyboard5.exe -> Downloader.VB.zl : No action taken.
C:\WINDOWS\keyboard6.exe -> Downloader.VB.zo : No action taken.
C:\WINDOWS\mousepad5.exe -> Hijacker.VB.ly : No action taken.
C:\WINDOWS\Downloaded Program Files\UWFX5_0001_N53L1025NetInstaller.exe ->

Was this post helpful?

View All

No Events found!

Top