My hijack this log.

Comp has been running slowly since my sister decided to install trial games with tons of spyware...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:59:21 PM, on 2/19/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {C2A1C5CB-C0EF-4689-9436-F62CCA1C5383} - (no file)
O2 - BHO: e404 helper - {F10587E9-0E47-4CBE-ABCD-7DD20B862223} - C:\Program Files\Helper\1202269255.dll
O3 - Toolbar: (no name) - {8113B5DE-F7EB-4154-A311-497FB80D8BD0} - (no file)
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\Online Add-on\icthis.exe
O4 - HKLM\..\Policies\Explorer\Run: [start] C:\Program Files\Online Add-on\isfmntr.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZK
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.freeietool.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.freeietool.com/redirect.php (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/Program%20Files/Go%20Go%20Gourmet/Images/stg_drm.ocx
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1190997485609
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Paparazzi/Images/armhelper.ocx
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O22 - SharedTaskScheduler: epineurial - {27cb634d-c84e-4c00-9b53-f5523601dbad} - (no file)
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe

--
End of file - 6783 bytes

Welcome to MR

Please download SmitfraudFix
to your Desktop.
Double-click SmitfraudFix.exe
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consulting/proc...processutil.htm

SmitFraudFix v2.292



Scan done at 15:55:46.78, Wed 02/20/2008

Run from C:\Program Files\Mozilla Firefox\SmitfraudFix

OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT

The filesystem type is NTFS

Fix run in normal mode



»»»»»»»»»»»»»»»»»»»»»»»» Process



C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\MSN Messenger\usnsvc.exe

C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\MSN Messenger\MsnMsgr.Exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\WINDOWS\system32\cmd.exe



»»»»»»»»»»»»»»»»»»»»»»»» hosts





»»»»»»»»»»»»»»»»»»»»»»»» C:\





»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS





»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system





»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web





»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32





»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles





»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Justin





»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Justin\Application Data





»»»»»»»»»»»»»»»»»»»»»»»» Start Menu



C:\DOCUME~1\ALLUSE~1\STARTM~1\Online Security Guide.url FOUND !

C:\DOCUME~1\ALLUSE~1\STARTM~1\Security Troubleshooting.url FOUND !



»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Justin\FAVORI~1





»»»»»»»»»»»»»»»»»»»»»»»» Desktop



C:\DOCUME~1\ALLUSE~1\Desktop\Online Security Guide.url FOUND !



»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 



C:\Program Files\Helper\ FOUND !

C:\Program Files\Online Add-on\ FOUND !

C:\Program Files\Sotfone\ FOUND !

C:\Program Files\VirusProtect 3.9\ FOUND !



»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys





»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

 

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]

"Source"="About:Home"

"SubscribedURL"="About:Home"

"FriendlyName"="My Current Home Page"

 



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

!!!Attention, following keys are not inevitably infected!!!



IEDFix

Credits: Malware Analysis & Diagnostic

Code: S!Ri





»»»»»»»»»»»»»»»»»»»»»»»» VACFix

!!!Attention, following keys are not inevitably infected!!!



VACFix

Credits: Malware Analysis & Diagnostic

Code: S!Ri





»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler

!!!Attention, following keys are not inevitably infected!!!



SrchSTS.exe by S!Ri

Search SharedTaskScheduler's .dll





»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs

!!!Attention, following keys are not inevitably infected!!!



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"=""





»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System

!!!Attention, following keys are not inevitably infected!!!



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

"System"=""





»»»»»»»»»»»»»»»»»»»»»»»» Rustock







»»»»»»»»»»»»»»»»»»»»»»»» DNS



Description: Broadcom 440x 10/100 Integrated Controller - Packet Scheduler Miniport

DNS Server Search Order: 154.11.129.59

DNS Server Search Order: 154.11.129.187



HKLM\SYSTEM\CCS\Services\Tcpip\..\{4487430E-5896-4315-A412-6A7CC5B17BE6}: DhcpNameServer=[removed] [removed]

HKLM\SYSTEM\CS1\Services\Tcpip\..\{4487430E-5896-4315-A412-6A7CC5B17BE6}: DhcpNameServer=[removed] [removed]

HKLM\SYSTEM\CS3\Services\Tcpip\..\{4487430E-5896-4315-A412-6A7CC5B17BE6}: DhcpNameServer=192.168.0.1

HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=[removed] [removed]

HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=[removed] [removed]

HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1





»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection





»»»»»»»»»»»»»»»»»»»»»»»» End

there it is

You should print out these instructions, or copy them to a Notepad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.

Please reboot your computer in Safe Mode by doing the following :

• Restart your computer
• After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
• Instead of Windows loading as normal, a menu with options should appear;
• Select the first option, to run Windows in Safe Mode, then press "Enter".
• Choose your usual account.

Once in Safe Mode, double-click SmitfraudFix.exe
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".

The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart anyway into normal Windows. A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply along with a new HijackThis log.
The report can also be found at the root of the system drive, usually at C:\rapport.txt

Warning : running option #2 on a non infected computer will remove your Desktop background.



========================================

Please perform a scan with Panda ActiveScan - ActiveScan does not remove adware/spyware but will autoclean for viruses & worms. 1. Click "Scan Your PC". 2. A new window will open. Click "Check Now!". 3. Fill in your registration and click "Scan Now!". 4. You may receive an alert on the address bar that "This site might require the following ActiveX control...Click here to install...". Click on that alert and then Click Install ActiveX component. 5. A new window will appear asking "Do you want to install this software?"" Name: asinst.cab. 6. Select "Install" to download the ActiveX controls that allows ActiveScan to run. 7. If running MSAS beta you may receive an alert that an IE ActiveX program requires your approval. Click "Allow". 8. Select a device to scan: Click on "Local Disks" [allow it to Auto Clean]. 9. When the scan completes, if anything malicious is detected, click the "See Report button", then "Save Report" to your desktop. 10. Post back the results of your scan and any infected files that are found but not deleted.

SmitFraudFix v2.292



Scan done at 17:20:27.76, Wed 02/20/2008

Run from C:\Documents and Settings\Justin\Desktop\SmitfraudFix

OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT

The filesystem type is NTFS

Fix run in safe mode



»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix

!!!Attention, following keys are not inevitably infected!!!



SrchSTS.exe by S!Ri

Search SharedTaskScheduler's .dll



»»»»»»»»»»»»»»»»»»»»»»»» Killing process





»»»»»»»»»»»»»»»»»»»»»»»» hosts





127.0.0.1       localhost



»»»»»»»»»»»»»»»»»»»»»»»» VACFix



VACFix

Credits: Malware Analysis & Diagnostic

Code: S!Ri





»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix



S!Ri's WS2Fix: LSP not Found.





»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix



GenericRenosFix by S!Ri





»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files



C:\DOCUME~1\ALLUSE~1\STARTM~1\Online Security Guide.url Deleted

C:\DOCUME~1\ALLUSE~1\STARTM~1\Security Troubleshooting.url Deleted

C:\DOCUME~1\ALLUSE~1\Desktop\Online Security Guide.url Deleted

C:\Program Files\Helper\ Deleted

C:\Program Files\Online Add-on\ Deleted

C:\Program Files\Sotfone\ Deleted

C:\Program Files\VirusProtect 3.9\ Deleted



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix



IEDFix

Credits: Malware Analysis & Diagnostic

Code: S!Ri





»»»»»»»»»»»»»»»»»»»»»»»» DNS



HKLM\SYSTEM\CCS\Services\Tcpip\..\{4487430E-5896-4315-A412-6A7CC5B17BE6}: DhcpNameServer=[removed] [removed]

HKLM\SYSTEM\CS1\Services\Tcpip\..\{4487430E-5896-4315-A412-6A7CC5B17BE6}: DhcpNameServer=[removed] [removed]

HKLM\SYSTEM\CS3\Services\Tcpip\..\{4487430E-5896-4315-A412-6A7CC5B17BE6}: DhcpNameServer=192.168.0.1

HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=[removed] [removed]

HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=[removed] [removed]

HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1





»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files





»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System

!!!Attention, following keys are not inevitably infected!!!



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

"System"=""





»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

 

Registry Cleaning done. 

 

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix

!!!Attention, following keys are not inevitably infected!!!



SrchSTS.exe by S!Ri

Search SharedTaskScheduler's .dll





»»»»»»»»»»»»»»»»»»»»»»»» End

still running slow and using 400mB (!) with just one account logged in, messenger, and firefox open, after a fresh format and updates and everything, its usually around 290-320mB, while havingf more programs opened.

Is there anything else I can do to optimize my comp? at this point im leaning towards a fresh format, which is suchh a pain in the arse.

Unless you guys have tricks up your sleeves that I dont know about . I'm doing that online scan right now I'll update when its done

okay I did the virus scan and saved the log. I have some spyware, so I'll get one of the reccomended programs in the faq,

Incident                                                                        Status                        Location                                                                                                                                                                                                                                                        



Spyware:Cookie/Doubleclick                                                      Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.doubleclick.net/]                                                                                                                                      

Spyware:Cookie/Tribalfusion                                                     Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.tribalfusion.com/]                                                                                                                                     

Spyware:Cookie/Casalemedia                                                      Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.casalemedia.com/]                                                                                                                                      

Spyware:Cookie/YieldManager                                                     Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[ad.yieldmanager.com/]                                                                                                                                   

Spyware:Cookie/Casalemedia                                                      Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.casalemedia.com/]                                                                                                                                      

Spyware:Cookie/YieldManager                                                     Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[ad.yieldmanager.com/]                                                                                                                                   

Spyware:Cookie/RealMedia                                                        Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.247realmedia.com/]                                                                                                                                     

Spyware:Cookie/FastClick                                                        Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.fastclick.net/]                                                                                                                                        

Spyware:Cookie/Zedo                                                             Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.zedo.com/]                                                                                                                                             

Spyware:Cookie/Atlas DMT                                                        Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.atdmt.com/]                                                                                                                                            

Spyware:Cookie/Linksynergy                                                      Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.linksynergy.com/]                                                                                                                                      

Spyware:Cookie/Server.iad.Liveperson                                            Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[server.iad.liveperson.net/hc/24631554]                                                                                                                  

Spyware:Cookie/Server.iad.Liveperson                                            Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[server.iad.liveperson.net/]                                                                                                                             

Spyware:Cookie/WUpd                                                             Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.revenue.net/]                                                                                                                                          

Spyware:Cookie/Searchportal                                                     Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[searchportal.information.com/]                                                                                                                          

Spyware:Cookie/Toplist                                                          Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.toplist.cz/]                                                                                                                                           

Spyware:Cookie/Statcounter                                                      Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.statcounter.com/]                                                                                                                                      

Spyware:Cookie/Serving-sys                                                      Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.serving-sys.com/]                                                                                                                                      

Spyware:Cookie/Serving-sys                                                      Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.bs.serving-sys.com/]                                                                                                                                   

Spyware:Cookie/Serving-sys                                                      Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.serving-sys.com/]                                                                                                                                      

Spyware:Cookie/WebtrendsLive                                                    Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[statse.webtrendslive.com/]                                                                                                                              

Spyware:Cookie/Advertising                                                      Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.advertising.com/]                                                                                                                                      

Spyware:Cookie/Tradedoubler                                                     Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.tradedoubler.com/]                                                                                                                                     

Spyware:Cookie/Overture                                                         Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.overture.com/]                                                                                                                                         

Spyware:Cookie/Mediaplex                                                        Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.mediaplex.com/]                                                                                                                                        

Spyware:Cookie/Xiti                                                             Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.xiti.com/]                                                                                                                                             

Spyware:Cookie/Apmebf                                                           Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.apmebf.com/]                                                                                                                                           

Spyware:Cookie/QuestionMarket                                                   Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.questionmarket.com/]                                                                                                                                   

Spyware:Cookie/BurstNet                                                         Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.burstnet.com/]                                                                                                                                         

Spyware:Cookie/Adrevolver                                                       Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.adrevolver.com/]                                                                                                                                       

Spyware:Cookie/Atwola                                                           Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.atwola.com/]                                                                                                                                           

Spyware:Cookie/Com.com                                                          Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.com.com/]                                                                                                                                              

Spyware:Cookie/RealMedia                                                        Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.realmedia.com/]                                                                                                                                        

Spyware:Cookie/PointRoll                                                        Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.ads.pointroll.com/]                                                                                                                                    

Spyware:Cookie/Bluestreak                                                       Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.bluestreak.com/]                                                                                                                                       

Spyware:Cookie/Adtech                                                           Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.adtech.de/]                                                                                                                                            

Spyware:Cookie/Go                                                               Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.go.com/]                                                                                                                                               

Spyware:Cookie/Hitbox                                                           Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[.ehg-dig.hitbox.com/]                                                                                                                                   

Spyware:Cookie/BurstBeacon                                                      Not disinfected               C:\Documents and Settings\Ashley\Application Data\Mozilla\Firefox\Profiles\f6tj9rnm.default\cookies.txt[www.burstbeacon.com/]                                                                                                                                   

Spyware:Cookie/RealMedia                                                        Not disinfected               C:\Documents and Settings\Ashley\Cookies\ashley@247realmedia[2].txt                                                                                                                                                                                             

Spyware:Cookie/YieldManager                                                     Not disinfected               C:\Documents and Settings\Ashley\Cookies\[removed][1].txt                                                                                                                                                                                          

Spyware:Cookie/PointRoll                                                        Not disinfected               C:\Documents and Settings\Ashley\Cookies\[removed][2].txt                                                                                                                                                                                            

Spyware:Cookie/Adtech                                                           Not disinfected               C:\Documents and Settings\Ashley\Cookies\ashley@adtech[1].txt                                                                                                                                                                                                   

Spyware:Cookie/Advertising                                                      Not disinfected               C:\Documents and Settings\Ashley\Cookies\ashley@advertising[2].txt                                                                                                                                                                                              

Spyware:Cookie/Atlas DMT                                                        Not disinfected               C:\Documents and Settings\Ashley\Cookies\ashley@atdmt[2].txt                                                                                                                                                                                                    

Spyware:Cookie/Casalemedia                                                      Not disinfected               C:\Documents and Settings\Ashley\Cookies\ashley@casalemedia[1].txt                                                                                                                                                                                              

Spyware:Cookie/Doubleclick                                                      Not disinfected               C:\Documents and Settings\Ashley\Cookies\ashley@doubleclick[1].txt                                                                                                                                                                                              

Spyware:Cookie/FastClick                                                        Not disinfected               C:\Documents and Settings\Ashley\Cookies\ashley@fastclick[1].txt                                                                                                                                                                                                

Spyware:Cookie/Linksynergy                                                      Not disinfected               C:\Documents and Settings\Ashley\Cookies\ashley@linksynergy[2].txt                                                                                                                                                                                              

Spyware:Cookie/Mediaplex                                                        Not disinfected               C:\Documents and Settings\Ashley\Cookies\ashley@mediaplex[1].txt                                                                                                                                                                                                

Spyware:Cookie/Overture                                                         Not disinfected               C:\Documents and Settings\Ashley\Cookies\ashley@overture[1].txt                                                                                                                                                                                                 

Spyware:Cookie/QuestionMarket                                                   Not disinfected               C:\Documents and Settings\Ashley\Cookies\ashley@questionmarket[1].txt                                                                                                                                                                                           

Spyware:Cookie/Statcounter                                                      Not disinfected               C:\Documents and Settings\Ashley\Cookies\ashley@statcounter[2].txt                                                                                                                                                                                              

Spyware:Cookie/WebtrendsLive                                                    Not disinfected               C:\Documents and Settings\Ashley\Cookies\[removed][2].txt                                                                                                                                                                                     

Spyware:Cookie/Tribalfusion                                                     Not disinfected               C:\Documents and Settings\Ashley\Cookies\ashley@tribalfusion[2].txt                                                                                                                                                                                             

Spyware:Cookie/Zedo                                                             Not disinfected               C:\Documents and Settings\Ashley\Cookies\ashley@zedo[1].txt                                                                                                                                                                                                     

Potentially unwanted tool:Application/AVSystemCare                              Not disinfected               C:\Documents and Settings\Ashley\Local Settings\Temporary Internet Files\Content.IE5\X4JNO5DE\install_en[1].exe                                                                                                                                                 

Spyware:Cookie/Advertising                                                      Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.advertising.com/]                                                                                                                                       

Spyware:Cookie/Casalemedia                                                      Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.casalemedia.com/]                                                                                                                                       

Spyware:Cookie/Advertising                                                      Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.advertising.com/]                                                                                                                                       

Spyware:Cookie/Atlas DMT                                                        Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.atdmt.com/]                                                                                                                                             

Spyware:Cookie/YieldManager                                                     Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[ad.yieldmanager.com/]                                                                                                                                    

Spyware:Cookie/Doubleclick                                                      Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.doubleclick.net/]                                                                                                                                       

Spyware:Cookie/WebtrendsLive                                                    Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[statse.webtrendslive.com/]                                                                                                                               

Spyware:Cookie/Mediaplex                                                        Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.mediaplex.com/]                                                                                                                                         

Spyware:Cookie/FastClick                                                        Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.fastclick.net/]                                                                                                                                         

Spyware:Cookie/Zedo                                                             Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.zedo.com/]                                                                                                                                              

Spyware:Cookie/Bluestreak                                                       Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.bluestreak.com/]                                                                                                                                        

Spyware:Cookie/RealMedia                                                        Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.realmedia.com/]                                                                                                                                         

Spyware:Cookie/Adrevolver                                                       Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.adrevolver.com/]                                                                                                                                        

Spyware:Cookie/RealMedia                                                        Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.realmedia.com/]                                                                                                                                         

Spyware:Cookie/Apmebf                                                           Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.apmebf.com/]                                                                                                                                            

Spyware:Cookie/Hitbox                                                           Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.ehg.hitbox.com/]                                                                                                                                        

Spyware:Cookie/Tribalfusion                                                     Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.tribalfusion.com/]                                                                                                                                      

Spyware:Cookie/RealMedia                                                        Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.247realmedia.com/]                                                                                                                                      

Spyware:Cookie/QuestionMarket                                                   Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.questionmarket.com/]                                                                                                                                    

Spyware:Cookie/BurstBeacon                                                      Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[www.burstbeacon.com/]                                                                                                                                    

Spyware:Cookie/Azjmp                                                            Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.azjmp.com/]                                                                                                                                             

Spyware:Cookie/Overture                                                         Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.overture.com/]                                                                                                                                          

Spyware:Cookie/Atwola                                                           Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.atwola.com/]                                                                                                                                            

Spyware:Cookie/Statcounter                                                      Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.statcounter.com/]                                                                                                                                       

Spyware:Cookie/Clickbank                                                        Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.clickbank.net/]                                                                                                                                         

Spyware:Cookie/Serving-sys                                                      Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.serving-sys.com/]                                                                                                                                       

Spyware:Cookie/Serving-sys                                                      Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.bs.serving-sys.com/]                                                                                                                                    

Spyware:Cookie/Serving-sys                                                      Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.serving-sys.com/]                                                                                                                                       

Spyware:Cookie/Hitslink                                                         Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[counter.hitslink.com/]                                                                                                                                   

Spyware:Cookie/Overture                                                         Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.perf.overture.com/]                                                                                                                                     

Spyware:Cookie/Com.com                                                          Not disinfected               C:\Documents and Settings\Betty\Application Data\Mozilla\Firefox\Profiles\019qi35d.default\cookies.txt[.com.com/]                                                                                                                                               

Spyware:Cookie/YieldManager                                                     Not disinfected               C:\Documents and Settings\Betty\Cookies\[removed][1].txt                                                                                                                                                                                            

Spyware:Cookie/PointRoll                                                        Not disinfected               C:\Documents and Settings\Betty\Cookies\[removed][1].txt                                                                                                                                                                                              

Spyware:Cookie/Advertising                                                      Not disinfected               C:\Documents and Settings\Betty\Cookies\betty@advertising[1].txt                                                                                                                                                                                                

Spyware:Cookie/Atlas DMT                                                        Not disinfected               C:\Documents and Settings\Betty\Cookies\betty@atdmt[2].txt                                                                                                                                                                                                      

Spyware:Cookie/Serving-sys                                                      Not disinfected               C:\Documents and Settings\Betty\Cookies\[removed]-sys[1].txt                                                                                                                                                                                             

Spyware:Cookie/Casalemedia                                                      Not disinfected               C:\Documents and Settings\Betty\Cookies\betty@casalemedia[1].txt                                                                                                                                                                                                

Spyware:Cookie/Doubleclick                                                      Not disinfected               C:\Documents and Settings\Betty\Cookies\betty@doubleclick[2].txt                                                                                                                                                                                                

Spyware:Cookie/FastClick                                                        Not disinfected               C:\Documents and Settings\Betty\Cookies\betty@fastclick[2].txt                                                                                                                                                                                                  

Spyware:Cookie/Mediaplex                                                        Not disinfected               C:\Documents and Settings\Betty\Cookies\betty@mediaplex[1].txt                                                                                                                                                                                                  

Spyware:Cookie/Serving-sys                                                      Not disinfected               C:\Documents and Settings\Betty\Cookies\betty@serving-sys[2].txt                                                                                                                                                                                                

Spyware:Cookie/Tribalfusion                                                     Not disinfected               C:\Documents and Settings\Betty\Cookies\betty@tribalfusion[2].txt                                                                                                                                                                                               

Potentially unwanted tool:Application/AVSystemCare                              Not disinfected               C:\Documents and Settings\Betty\Local Settings\Temporary Internet Files\Content.IE5\X6MDUT4F\install_en[1].exe                                                                                                                                                  

Spyware:Cookie/Tribalfusion                                                     Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.tribalfusion.com/]                                                                                                                                     

Spyware:Cookie/YieldManager                                                     Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[ad.yieldmanager.com/]                                                                                                                                   

Spyware:Cookie/Atlas DMT                                                        Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.atdmt.com/]                                                                                                                                            

Spyware:Cookie/FastClick                                                        Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.fastclick.net/]                                                                                                                                        

Spyware:Cookie/Casalemedia                                                      Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.casalemedia.com/]                                                                                                                                      

Spyware:Cookie/BurstNet                                                         Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.burstnet.com/]                                                                                                                                         

Spyware:Cookie/RealMedia                                                        Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.247realmedia.com/]                                                                                                                                     

Spyware:Cookie/Doubleclick                                                      Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.doubleclick.net/]                                                                                                                                      

Spyware:Cookie/Adserver                                                         Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.adserver.easyad.info/]                                                                                                                                 

Spyware:Cookie/Traffic Marketplace                                              Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.trafficmp.com/]                                                                                                                                        

Spyware:Cookie/Zedo                                                             Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.zedo.com/]                                                                                                                                             

Spyware:Cookie/Mediaplex                                                        Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.mediaplex.com/]                                                                                                                                        

Spyware:Cookie/adultfriendfinder                                                Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.adultfriendfinder.com/]                                                                                                                                

Spyware:Cookie/BurstBeacon                                                      Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[www.burstbeacon.com/]                                                                                                                                   

Spyware:Cookie/RealMedia                                                        Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.realmedia.com/]                                                                                                                                        

Spyware:Cookie/Statcounter                                                      Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.statcounter.com/]                                                                                                                                      

Spyware:Cookie/WebtrendsLive                                                    Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[statse.webtrendslive.com/]                                                                                                                              

Spyware:Cookie/Advertising                                                      Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.advertising.com/]                                                                                                                                      

Spyware:Cookie/Com.com                                                          Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.com.com/]                                                                                                                                              

Spyware:Cookie/Overture                                                         Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.perf.overture.com/]                                                                                                                                    

Spyware:Cookie/Bfast                                                            Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.bfast.com/]                                                                                                                                            

Spyware:Cookie/PointRoll                                                        Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.ads.pointroll.com/]                                                                                                                                    

Spyware:Cookie/Azjmp                                                            Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.azjmp.com/]                                                                                                                                            

Spyware:Cookie/Serving-sys                                                      Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.serving-sys.com/]                                                                                                                                      

Spyware:Cookie/Serving-sys                                                      Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.bs.serving-sys.com/]                                                                                                                                   

Spyware:Cookie/Serving-sys                                                      Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.serving-sys.com/]                                                                                                                                      

Spyware:Cookie/Adrevolver                                                       Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.adrevolver.com/]                                                                                                                                       

Spyware:Cookie/Apmebf                                                           Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.apmebf.com/]                                                                                                                                           

Spyware:Cookie/Hitbox                                                           Not disinfected               C:\Documents and Settings\Justin\Application Data\Mozilla\Firefox\Profiles\v6nppuvt.default\cookies.txt[.ehg.hitbox.com/]                                                                                                                                       

Spyware:Cookie/Atlas DMT                                                        Not disinfected               C:\Documents and Settings\Justin\Cookies\justin@atdmt[1].txt                                                                                                                                                                                                    

Spyware:Cookie/Atlas DMT                                                        Not disinfected               C:\Documents and Settings\Justin\Cookies\justin@atdmt[3].txt                                                                                                                                                                                                    

Possible Virus.                                                                 Not disinfected               C:\Documents and Settings\Justin\Desktop\Hacks115.rar[1.15 Hacks\scmload.rar][scmload.exe]                                                                                                                                                                      

Potentially unwanted tool:Application/Processor                                 Not disinfected               C:\Documents and Settings\Justin\Desktop\Process.exe                                                                                                                                                                                                            

Potentially unwanted tool:Application/Processor                                 Not disinfected               C:\Documents and Settings\Justin\Desktop\SmitfraudFix\Process.exe                                                                                                                                                                                               

Virus:Trj/Rebooter.J                                                            Disinfected                   C:\Documents and Settings\Justin\Desktop\SmitfraudFix\Reboot.exe                                                                                                                                                                                                

Potentially unwanted tool:Application/SuperFast                                 Not disinfected               C:\Documents and Settings\Justin\Desktop\SmitfraudFix\restart.exe                                                                                                                                                                                               

Potentially unwanted tool:Application/Processor                                 Not disinfected               C:\Program Files\Mozilla Firefox\SmitfraudFix\Process.exe                                                                                                                                                                                                       

Virus:Trj/Rebooter.J                                                            Disinfected                   C:\Program Files\Mozilla Firefox\SmitfraudFix\Reboot.exe                                                                                                                                                                                                        

Potentially unwanted tool:Application/SuperFast                                 Not disinfected               C:\Program Files\Mozilla Firefox\SmitfraudFix\restart.exe                                                                                                                                                                                                       

Adware:Adware/VideoAddon                                                        Not disinfected               C:\Program Files\Trend Micro\HijackThis\backups\backup-20080219-222521-985.dll                                                                                                                                                                                  

Potentially unwanted tool:Application/Processor                                 Not disinfected               C:\WINDOWS\system32\Process.exe                                                                                                                                                                                                                                 

near the end it says possible virus and not disinfected. what should I do about this?

Please DELETE the following file(s) IF STILL PRESENT. You can use Windows Explorer to navigate or use Windows Search feature to locate them.

Files:
C:\Documents and Settings\Justin\Desktop\Hacks115.rar <-- this file


Please download ATF Cleaner by Atribune.

This program is for XP, Windows 2000, and Vista

• Double-click ATF-Cleaner.exe to run the program.
• Under Main choose: Select All
• Click the Empty Selected button.

If you use Firefox browser

• Click Firefox at the top and choose: Select All
• Click the Empty Selected button.
• NOTE: If you would like to keep your saved passwords, please click
• No at the prompt.

If you use Opera browser

• Click Opera at the top and choose: Select All
• Click the Empty Selected button.
• NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Click Exit on the Main menu to close the program. For Technical Support, double-click the e-mail address located at the bottom of each menu.



How is everything running?

Okay I've done everything in this thread lol, no spyware or viruses, cleared all the caches, used ccleaner. I'm thinking a reformat is the best solution at this point

What other problem are you having??? How much memory do you have installed on the computer??

512mb, but I've never seen it run this crappy.
i guess 512mb isn't all that much lol, probably the reason.

I wish I could use linux. I love the interface and how smooth it runs on my computer, but my sister has LOADS of games that dont work on linux, and i also have a hard time getting hardware to work (dvdrw.. doesnt burn but reads disks). also I have an ati card which I believe linux has problems with many cards from this manufacturer?

Yeah, i think its more related to having only 512mb of memory. Running Bitdefender and Webroot will tend to make a machine with only 512 run slow. If you can upgrade it to 1 gb, you shouldn't have anymore problems.

thats what i thought.

im not really going to bother with this computer im just going to build one sometime lol

Since the issues are resolved.

You can delete these tools from your Desktop.
Folder
SmitfraudFix

File
SmitfraudFix.exe


Now that your system is clean you should SET A NEW RESTORE POINT to prevent future reinfection from the old restore point AFTER cleaning your system of any malware infection. Any trojans or spyware you picked up could have been saved in System Restore and are waiting to re-infect you. Since System Restore is a protected directory, your tools can not access it to delete files, trapping viruses inside. Setting a new restore point should be done to prevent any future reinfection from the old restore point and enable your computer to "roll-back" in case there is a future problem.

To SET A NEW RESTORE POINT:
1. Go to Start > Programs > Accessories > System Tools and click "System Restore".
2. Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
3. Then go to Start > Run and type: Cleanmgr
4. Click "OK".
5. Click the "More Options" Tab.
6. Click "Clean Up" in the System Restore section to remove all previous restore points except the newly created one.

Graphics for doing this are in the following links if you need them.
How to Create a Restore Point.
How to use Cleanmgr.

======================================

Here is some useful information on keeping your computer clean:

1. Most important thing is to make sure Windows is kept up to date with the latest patches and updates from Windows Update.
2. Here are two great Preventive programs:
   1. SpywareBlaster protects you from malicious ActiveX controls and cookies. Make sure and check for updates twice a month.
   2. IESpyads adds a long list of bad sites to your Restricted sites in Internet Explorer and protects against drive by downloads.
3. Surf Safe with McAfee's SiteAdisor. SiteAdisor will work with Internet Explorer and Mozilla Firefox. SiteAdisor is a browser plugin that assigns a safety rating to domains listed in your search engine. SiteAdvisor uses the following color codes to indicate the safety level of each site.
   1. Red for Warning
   2. Yellow for Use Caution
   3. Green for Safe
   4. Grey for Unknown
   
   
   Here are the link to install SiteAdisor in Internet Explorer and Firefox
4. Anti-Spyware Programs I Recommend:
   • Free Anti-Spyware Programs
   1. Lavasoft's Ad-Aware SE Personal
   2. Windows Defender
5. For Even More Information On Securing Your Computer read Tony Klein's So How Did I Get Infected In The First Place

color=blue]Glad we could be of assistance.[/color] This topic is now closed. If you wish it to be reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.
Please do not contact us to reopen this topic if you are not the topic starter.
A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.

You can help support this site from this link : Donations For Malware Removal