PC World Community: Need help making sure PC is clean ...

Up to Discussions in Privacy & Security

This Question is Answered

9 Replies Last post: Oct 16, 2008 7:41 AM by Jammer09

Jammer09

336 posts since
Dec 28, 2007

Oct 9, 2008 1:52 PM

Need help making sure PC is clean before transfer of data to another HD before a format of HD and reinstall of WindowsXp?

Heilsa!

I am working on a PC an HP Pavilion 533w with WindowsXp Sp2 that has had quite a bit of infections removed by SuperAntispyware, 900 and something to be exact, along with several pending problems going on with it at the same time. The browsers wont show full webpages and options on them, the Cdroms won't write etc.... amongst other things. We have decided to do a format of the HD and reinstall WindowXp. But we want to make sure that all is as clean as we can get before hand as we want to transfer some of the data from the main HD to an extra one that he installed awhile back and take it out before the format and reinstall and put it back afterwards.

So the issue first is to clean this PC as thoroughly as possible! Can anyone help out in this matter. It has CA antivirus, SuperAntiSpyware and Hijackthis installed on it. I am doing a scan with Super right now and am going to post the log from it and an Uninstall Log from Hijackthis as is requested by someone and then install Malwarebytes AntiMalware, update it and run a full scan with it and post its log too.

Be right back and thanks for the help! FUN!

Ves Heill! Farr Heill!

Honor Yourself with Truth & Fairness! Your Word is Your Bond! Give Your Word Power by Adhering to it!

Reply Tags: antivirus, backup, drive, spyware, windows, xp, browser, questions, privacy, security

Adama

6,570 posts since
Sep 7, 2007

1. Oct 9, 2008 2:17 PM

in response to: Jammer09

Re: Need help making sure PC is clean before transfer of data to another HD before a format of HD and reinstall of WindowsXp?

Jammer09 wrote:
Heilsa!

I am working on a PC an HP Pavilion 533w with WindowsXp Sp2 that has had quite a bit of infections removed by SuperAntispyware, 900 and something to be exact, along with several pending problems going on with it at the same time. The browsers wont show full webpages and options on them, the Cdroms won't write etc.... amongst other things. We have decided to do a format of the HD and reinstall WindowXp. But we want to make sure that all is as clean as we can get before hand as we want to transfer some of the data from the main HD to an extra one that he installed awhile back and take it out before the format and reinstall and put it back afterwards.

Be right back and thanks for the help! FUN!

Ves Heill! Farr Heill!

Hi Jammer, good to see you again.

I think that if you run the SuperAntiSpyware and the Malwarebytes AntiMalware programs scans, you'll get a pretty good idea of what's still left over in your computer - if any.

I would suggest you run the full scans, rather than the quick version. They take a little bit longer, but you'll also get a deeper inquiry into your computer. Then you can post the logs/results here, and I'm sure someone will come along to help you decipher the log. And you can go from there.

Good luck to you.

SpiritWind

1,722 posts since
Aug 19, 2006

2. Oct 9, 2008 2:45 PM

in response to: Jammer09

Re: Need help making sure PC is clean before transfer of data to another HD before a format of HD and reinstall of WindowsXp?

Hi Jammer :

The SUPERAntiSpyware Log I asked for is the One that shows the 900+ "Infections"

( minus the "Adware/Tracking Cookies" ), NOT a "new" Log run today .

By the way, what browser(s) are on this computer, including their Version "Number" ?

For the BEST in what COUNTS in LIFE : http://www.tacf.org

Jammer09

336 posts since
Dec 28, 2007

3. Oct 10, 2008 12:38 PM

in response to: SpiritWind

Re: Need help making sure PC is clean before transfer of data to another HD before a format of HD and reinstall of WindowsXp?

Heilsa!

Here is the log from SuperAntiSpyware the day with all of the infections. It has Windows explorer I think 7 or whatever the latest one is. I will have to check it out and get back to you. Shouldn't it be in the Hijackthis uninstall log? It has Firefox 2.0.17.

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 09/14/2008 at 02:48 PM

Application Version : 4.21.1004

Core Rules Database Version : 3522
Trace Rules Database Version: 1512

Scan type : Complete Scan
Total Scan Time : 01:41:35

Memory items scanned : 511
Memory threats detected : 0
Registry items scanned : 8870
Registry threats detected : 0
File items scanned : 35875
File threats detected : 967

Adware.Tracking Cookie
C:\Documents and Settings\Owner\Cookies\owner@tacoda[1].txt
C:\Documents and Settings\Owner\Cookies\owner@atdmt[2].txt
C:\Documents and Settings\Owner\Cookies\owner@atwola[1].txt

Adware.MovieLand/MediaPipe
C:\Program Files\MovieLand Terms.html
C:\Documents and Settings\Owner\Desktop\MoviePass Terms.lnk
C:\Documents and Settings\Owner\Desktop\moviepass.url
C:\Program Files\moviepass Terms.html

Adware.AlfaCleaner
C:\WINDOWS\warnhp.html

Adware.Ezula
C:\WINDOWS\system32\ezstub.exe
C:\WINDOWS\Downloaded Program Files\ezstub.dll
C:\WINDOWS\Downloaded Program Files\ezstub.INF
C:\WINDOWS\eZinstall.exe
C:\WINDOWS\LastGood\Downloaded Program Files\ezstub.INF

Trojan.Painter
C:\WINDOWS\system32\MSWINUP32.DLL
C:\WINDOWS\system32\MSWINXML.DLL
C:\WINDOWS\system32\WINLFL32.DLL

Adware.ZToolbar
C:\WINDOWS\azesearch.bmp
C:\WINDOWS\system32\azebar.xml
C:\WINDOWS\Downloaded Program Files\azesearch.inf

Adware.Apropos Media
C:\WINDOWS\system32\auto_update_uninstall.log
C:\WINDOWS\system32\auto_update_uninstall.exe

Trojan.SpySheriff
C:\WINDOWS\secure32.html
c:\secure32.html
C:\SpySheriff.lnk
C:\Documents and Settings\Owner\Desktop\SpySheriff.lnk
\SpySheriff.lnk

Adware.180solutions/Search Assistant
C:\WINDOWS\Downloaded Program Files\ClientAX.dll
C:\WINDOWS\Downloaded Program Files\MediaGatewayX.dll
C:\WINDOWS\MediaGateway.exe.bin

Adware.WebNexus
C:\WINDOWS\LastGood\wupdt.exe
C:\WINDOWS\mynexus.exe
C:\WINDOWS\system32\pbvwb.dat
C:\WINDOWS\system32\vgactl.cpl
C:\WINDOWS\system32\wuauclt.dll
C:\WINDOWS\vlpnlp.dat
C:\WINDOWS\wupdt.exe
C:\installerwebnex.exe

Trojan.SmartFinder
C:\WINDOWS\system32\mfcgy32.dll
C:\WINDOWS\system32\owdwi.dll
C:\WINDOWS\system32\sdkok32.exe
C:\WINDOWS\sysvb.exe
C:\WINDOWS\mfcbh.exe
C:\WINDOWS\sdkhk.exe
C:\WINDOWS\system32\sdkmd32.dll
C:\WINDOWS\zkowf.dll

Trojan.SpyFalcon
C:\Documents and Settings\Owner\Desktop\SpyFalcon.lnk
C:\WINDOWS\system32\oleext.dll
C:\WINDOWS\system32\oleext32.dll

Trojan.MalwareWipe
C:\Documents and Settings\Owner\Desktop\MalwareWipe.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWipe.com 4.2.lnk
\MalwareWipe.com.lnk
C:\Documents and Settings\Owner\Desktop\MalwareWipe.com.lnk
C:\Documents and Settings\Owner\Start Menu\MalwareWipe.com 4.2.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWiped 5.2.lnk
C:\Documents and Settings\Owner\Start Menu\MalwareWiped 5.2.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Malware-Wiped 5.2.lnk
C:\Documents and Settings\Owner\Desktop\Malware-Wiped.lnk
C:\Documents and Settings\Owner\Start Menu\Malware-Wiped 5.2.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWiped 5.7.lnk
C:\Documents and Settings\Owner\Desktop\MalwareWiped 5.7.lnk
C:\Documents and Settings\Owner\Start Menu\MalwareWiped 5.7.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWiped 5.8.lnk
C:\Documents and Settings\Owner\Desktop\MalwareWiped 5.8.lnk
C:\Documents and Settings\Owner\Start Menu\MalwareWiped 5.8.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWiped 5.9.lnk
C:\Documents and Settings\Owner\Desktop\MalwareWiped 5.9.lnk
C:\Documents and Settings\Owner\Start Menu\MalwareWiped 5.9.lnk

Trojan.WinAntiSpyware/WinAntiVirus 2006/2007
C:\WINDOWS\system32\av.cpl
C:\WINDOWS\system32\drivers\FOPN.sys
C:\WINDOWS\system32\drivers\uwasfsd.sys
C:\WINDOWS\system32\stera.exe
C:\WINDOWS\system32\stera.job
C:\Documents and Settings\Owner\Desktop\Install WinAntiVirus Pro 2006 .lnk
C:\Documents and Settings\Owner\Cookies\administrator@www.winsoftware[2].txt
C:\Documents and Settings\Owner\Desktop\Summary.txt
C:\Documents and Settings\Owner\Desktop\WinAntiSpyware 2006 Scanner.lnk
C:\Documents and Settings\All Users\Desktop\WinAntiVirus Pro 2006.lnk
C:\Documents and Settings\All Users\Desktop\Look for answers in WinAntiVirus Pro 2007 Knowledge Base.lnk
C:\Documents and Settings\All Users\Desktop\WinAntiVirus Pro 2007.lnk

Adware.SurfSideKick
C:\Documents and Settings\Owner\Application Data\Sskcwrd.dll
C:\Documents and Settings\Owner\Application Data\Sskdmns.dll
C:\Documents and Settings\Owner\Application Data\Sskuknwrd.dll
C:\Documents and Settings\Owner\Application Data\Sskknwrd.dll

Trojan.WinFixer 2006
C:\WINDOWS\Downloaded Program Files\UWFX6_0001_N68M2301NetInstaller.exe
C:\WINDOWS\system32\dfe1.exe
C:\WINDOWS\system32\drivers\d_kmd.sys

Trojan.AdwarePunisher
C:\WINDOWS\adw.htm

Registry Cleaner Trial
C:\Documents and Settings\Owner\Desktop\Registry Cleaner.lnk

Trojan.Windows Overlay Components/SysMon
C:\WINDOWS\offun.exe

Trojan.ZenoSearch
C:\WINDOWS\system32\msnav32.ax
C:\Documents and Settings\Owner\Start Menu\Z_Start.lnk
C:\Documents and Settings\Owner\Start Menu\Programs\Startup\Zeno.lnk

Adware.IST/ISTBar (Slotch Bar)
C:\WINDOWS\Downloaded Program Files\ISTactivex.dll

Trojan.Avpe64/32
C:\WINDOWS\system32\klgcptini.dat
C:\WINDOWS\system32\stt82.ini

Adware.Adservs
C:\WINDOWS\system32\atmtd.dll
C:\WINDOWS\system32\atmtd.dll._

Trojan.DCOM Server
C:\WINDOWS\system32\dcom_14.dll

Trojan.Malware
C:\WINDOWS\back.gif
C:\WINDOWS\bg.gif
C:\WINDOWS\buy-btn.gif
C:\WINDOWS\download-btn.gif
C:\WINDOWS\security.html
C:\Documents and Settings\Owner\Desktop\Adware Reviews.url
C:\Documents and Settings\Owner\Desktop\Play Poker.url
C:\Documents and Settings\Owner\Desktop\access
C:\Documents and Settings\Owner\Desktop\domains
C:\Documents and Settings\Owner\Desktop\map.txt
C:\asdf.txt

Adware.HotBar (Low Risk)
C:\WINDOWS\Downloaded Program Files\HbInstIE.dll

Adware.HotBar/SpamBlockerUtility (Low Risk)
C:\WINDOWS\Downloaded Program Files\SpamBlockerUtility.inf

Trojan.UnSpyPC Spyware Scanner
C:\Documents and Settings\Owner\Desktop\UnSpyPC Scanner & Monitor.lnk
C:\Documents and Settings\Owner\Desktop\SafeAndClean_report.htm

Adware.MediaMediatickets
C:\WINDOWS\Downloaded Program Files\MediaTicketsInstaller.INF
C:\WINDOWS\Downloaded Program Files\MediaTicketsInstaller.ocx

Adware.MediaMotor
C:\WINDOWS\Downloaded Program Files\mm83.ocx
C:\WINDOWS\Downloaded Program Files\amm06.inf
C:\WINDOWS\Downloaded Program Files\amm06.ocx
C:\WINDOWS\System32\safe.tlb
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\amm06.inf
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\amm06.ocx
C:\WINDOWS\mm06y.ini
C:\WINDOWS\Downloaded Program Files\motorsix.inf

Trojan.ISA32
C:\WINDOWS\system32\drivers\isa32.sys

Trojan.PestTrap
C:\Documents and Settings\Owner\Desktop\PestTrap.lnk

Parasite.SpyAxe
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareAxe 3.0.lnk
C:\Documents and Settings\Owner\Desktop\SpywareAxe.lnk

Trojan.RazeSpyware
C:\Documents and Settings\Owner\Desktop\RazeSpyware.lnk

Trojan.AdwareSheriff
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AdwareSheriff.lnk
C:\Documents and Settings\Owner\Desktop\AdwareSheriff.lnk
C:\Documents and Settings\Owner\Start Menu\asheriff.lnk

Trojan.RemedyAntiSpy
C:\Documents and Settings\Owner\Desktop\RemedyAntispy.lnk

Trojan.HitVirus
C:\Documents and Settings\Owner\Desktop\HitVirus.lnk

Trojan.Anti-Virus Pro
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Start Anti-Virus-Pro.lnk
C:\Documents and Settings\Owner\Desktop\Anti-Virus-Pro.lnk
C:\Documents and Settings\Owner\Desktop\Anti-Virus-Pro.pkg

Trojan.PSGuard
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\P.S.Guard spyware remover.lnk

Trojan.ADWareBazooka
C:\Documents and Settings\Owner\Desktop\ADWareBazooka.lnk

Trojan.RegiFast
C:\regifast.log
C:\RFManager.log
C:\RFSilentInstaller.log

Browser Hijacker.Favorites
C:\Documents and Settings\Owner\Favorites\Favorites\Cars.url
C:\Documents and Settings\Owner\Favorites\Favorites\Domain Names.url
C:\Documents and Settings\Owner\Favorites\Favorites\Finance.url
C:\Documents and Settings\Owner\Favorites\Favorites\Games.url
C:\Documents and Settings\Owner\Favorites\Favorites\Humor.url
C:\Documents and Settings\Owner\Favorites\Favorites\Movies.url
C:\Documents and Settings\Owner\Favorites\Favorites\Music and Movies
C:\Documents and Settings\Owner\Favorites\Favorites\Music and Movies\Albums.url
C:\Documents and Settings\Owner\Favorites\Favorites\Music and Movies\Artists.url
C:\Documents and Settings\Owner\Favorites\Favorites\Music and Movies\AudioBooks.url
C:\Documents and Settings\Owner\Favorites\Favorites\Music and Movies\Collections.url
C:\Documents and Settings\Owner\Favorites\Favorites\Music and Movies\Mp3 Search.url
C:\Documents and Settings\Owner\Favorites\Favorites\Music and Movies\New releases.url
C:\Documents and Settings\Owner\Favorites\Favorites\Music and Movies\Ratings.url
C:\Documents and Settings\Owner\Favorites\Favorites\Music and Movies\Soundtracks.url
C:\Documents and Settings\Owner\Favorites\Favorites\Online Pharmacy.url
C:\Documents and Settings\Owner\Favorites\Favorites\

C:\Documents and Settings\Owner\Favorites\Favorites\Sports.url
C:\Documents and Settings\Owner\Favorites\Favorites\Spyware Removers
C:\Documents and Settings\Owner\Favorites\Favorites\Spyware Removers\ADWare Bazooka.url
C:\Documents and Settings\Owner\Favorites\Favorites\Spyware Removers\Adware Punisher.url
C:\Documents and Settings\Owner\Favorites\Favorites\Spyware Removers\Adware Sheriff.url
C:\Documents and Settings\Owner\Favorites\Favorites\Spyware Removers\HIT Virus.url
C:\Documents and Settings\Owner\Favorites\Favorites\Spyware Removers\Raze Spyware.url
C:\Documents and Settings\Owner\Favorites\Favorites\Spyware Removers\Reg Freeze.url
C:\Documents and Settings\Owner\Favorites\Favorites\Spyware Removers\Remedy AntiSpy.url
C:\Documents and Settings\Owner\Favorites\Favorites\Spyware Removers\SPY iBlock.url
C:\Documents and Settings\Owner\Favorites\Favorites\Spyware Removers\The Spy Guard Site.url
C:\Documents and Settings\Owner\Favorites\Favorites\Viagra.url
C:\Documents and Settings\Owner\Favorites\Favorites\Weather.url
C:\Documents and Settings\Owner\Favorites\Favorites\Web Hosting.url
C:\Documents and Settings\Owner\Favorites\Games\Carnival Casino.url
C:\Documents and Settings\Owner\Favorites\Games\Club Dice Casino.url
C:\Documents and Settings\Owner\Favorites\Games\New York Casino.url
C:\Documents and Settings\Owner\Favorites\Games\USA Casino.url
C:\Documents and Settings\Owner\Favorites\Games\You Bingo.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Aces & Faces.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Baccarat.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Black Jack.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Caribbean Poker.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Casino War.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Cinerama.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Craps.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Deuces Wild.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Diamond Valley.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Fruit Mania.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Gold Rally.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Jacks or Better.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Magic Slots.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Mega Jacks.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Pai Gow Poker.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Red Dog Poker.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Roulette.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\SafeCracer.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Sic Bo.url
C:\Documents and Settings\Owner\Favorites\Games\Gambling\Wall St. Fever.url
C:\Documents and Settings\Owner\Favorites\Games\Monaco Gold Casino.url
C:\Documents and Settings\Owner\Favorites\Travel\Adventure Travel.url
C:\Documents and Settings\Owner\Favorites\Travel\Air Travel.url
C:\Documents and Settings\Owner\Favorites\Travel\Business Travel.url
C:\Documents and Settings\Owner\Favorites\Travel\Discount Travel.url
C:\Documents and Settings\Owner\Favorites\Travel\Food.url
C:\Documents and Settings\Owner\Favorites\Travel\Hawaii Travel.url
C:\Documents and Settings\Owner\Favorites\Travel\Lodging.url
C:\Documents and Settings\Owner\Favorites\Travel\London Travel.url
C:\Documents and Settings\Owner\Favorites\Travel\Travel Agent.url
C:\Documents and Settings\Owner\Favorites\Travel\Travel Insurance.url
C:\Documents and Settings\Owner\Favorites\Travel\Travel package.url
C:\Documents and Settings\Owner\Favorites\Travel\Travel Reservation.url
C:\Documents and Settings\Owner\Favorites\Travel\Travel Spain.url
C:\Documents and Settings\Owner\Favorites\Travel\Travel Web site.url
C:\Documents and Settings\Owner\Favorites\Travel\Vacation Cruises.url
C:\Documents and Settings\Owner\Favorites\Travel\Vacations.url
C:\Documents and Settings\Owner\Favorites\Download Free Spyware Remover.url
C:\Documents and Settings\All Users\Favorites\Download Free Spyware Remover.url
C:\Documents and Settings\Owner\Favorites\NEW VIAGRA at Half Price!.url
C:\Documents and Settings\All Users\Favorites\NEW VIAGRA at Half Price!.url
C:\Documents and Settings\Owner\Favorites\Online

C:\Documents and Settings\All Users\Favorites\Online

C:\Documents and Settings\Owner\Favorites\Order CIALIS online without leaving home..url
C:\Documents and Settings\All Users\Favorites\Order CIALIS online without leaving home..url
C:\Documents and Settings\Owner\Favorites\PC protection in under 2 minutes!.url
C:\Documents and Settings\All Users\Favorites\PC protection in under 2 minutes!.url
C:\Documents and Settings\Owner\Favorites\

C:\Documents and Settings\All Users\Favorites\

C:\Documents and Settings\Owner\Favorites\Stop PopUps On Your Computer.url
C:\Documents and Settings\All Users\Favorites\Stop PopUps On Your Computer.url
C:\Documents and Settings\Owner\Favorites\VIAGRA at incredible low price. Bonus Pills!.url
C:\Documents and Settings\All Users\Favorites\VIAGRA at incredible low price. Bonus Pills!.url
C:\Documents and Settings\Owner\Favorites\

C:\Documents and Settings\All Users\Favorites\

C:\Documents and Settings\Owner\Favorites\Dating\

C:\Documents and Settings\Owner\Favorites\Dating\Chinese Personals.url
C:\Documents and Settings\Owner\Favorites\Dating\Christian Personals.url
C:\Documents and Settings\Owner\Favorites\Dating\Dating & Marriage.url
C:\Documents and Settings\Owner\Favorites\Dating\

C:\Documents and Settings\Owner\Favorites\Dating\Fillipina Personals.url
C:\Documents and Settings\Owner\Favorites\Dating\

C:\Documents and Settings\Owner\Favorites\Dating\French Personals.url
C:\Documents and Settings\Owner\Favorites\Dating\German Personals.url
C:\Documents and Settings\Owner\Favorites\Dating\Indian Personals.url
C:\Documents and Settings\Owner\Favorites\Dating\Italian Personals.url
C:\Documents and Settings\Owner\Favorites\Dating\Jewish Personals.url
C:\Documents and Settings\Owner\Favorites\Dating\Senior Personals.url
C:\Documents and Settings\Owner\Favorites\Dating\

C:\Documents and Settings\Owner\Favorites\Dating\Spanish & Portuguese.url

Adware.Elite Media
C:\WINDOWS\Downloaded Program Files\elite.inf
C:\WINDOWS\Downloaded Program Files\elite.ocx
C:\WINDOWS\elitemediagroup.ini
C:\Program Files\Common Files\EliteMediaGroupOinUninstaller.exe
C:\WINDOWS\em06y.ini

Trojan.Freeprod
C:\Documents and Settings\Owner\Desktop\freeprodtb.exe

Adware.IEPlugin
C:\Documents and Settings\Owner\Desktop\Desktop Toolbar
C:\WINDOWS\isp.ico
C:\WINDOWS\lu.dat

Adware.BookedSpace
C:\WINDOWS\bsx32.ini
C:\WINDOWS\bs2.dll
C:\WINDOWS\bs3.dll
C:\WINDOWS\bsx5.dll
C:\WINDOWS\bxxs5.dll
C:\WINDOWS\oo4.dll
C:\WINDOWS\system32\acd.dll
C:\WINDOWS\system32\anaamon.dll
C:\WINDOWS\system32\bs2.dll
C:\WINDOWS\system32\bs3.dll
C:\WINDOWS\system32\bsx5.dll
C:\WINDOWS\system32\bxsx5.dll
C:\WINDOWS\system32\bxxs5.dll
C:\WINDOWS\system32\oo4.dll
C:\WINDOWS\system32\rem00001.dll

Trojan.Security Toolbar
C:\Documents and Settings\All Users\Start Menu\Online Security Guide.url
C:\Documents and Settings\All Users\Start Menu\Security Troubleshooting.url
C:\Documents and Settings\Owner\Favorites\Antivirus Test Online.url
C:\Documents and Settings\All Users\Desktop\Security Troubleshooting.url
C:\Documents and Settings\All Users\Desktop\Online Security Guide.url
C:\Documents and Settings\All Users\Desktop\Find And Fix Errors.lnk

Adware.IST/YourSiteBar
C:\WINDOWS\Downloaded Program Files\ysbactivex.dll
C:\WINDOWS\Downloaded Program Files\ysbactivex.inf

Adware.HotBar/WOWPapers (Low Risk)
C:\Documents and Settings\All Users\Desktop\Free PC Wallpapers.lnk

Adware.Casino Games (Golden Palace Casino)
\Best Casino. $200 signup bonus!.url
C:\Documents and Settings\Owner\Desktop\Best Casino. $200 signup bonus!.url
C:\Documents and Settings\Owner\Favorites\Best Casino. $200 signup bonus!.url

Trojan.BraveSentry
C:\Documents and Settings\Owner\Desktop\BraveSentry.lnk

Trojan.Spy-Shield/BON
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Spy-Shield v4.1.lnk
C:\Documents and Settings\Owner\Desktop\Spy-Shield v4.1.lnk

Adware.Best Offers Network
C:\WINDOWS\tboninst.cfg

Trojan.ZQuest
C:\WINDOWS\dh.ini

Adware.Mirar/NetNucleus
C:\WINDOWS\Downloaded Program Files\WinATS.inf
C:\WINDOWS\Downloaded Program Files\Winwcd.inf

Trojan.PKL/Malware
C:\WINDOWS\system32\bpkwb.dll
C:\WINDOWS\system32\johnwb.dll
C:\WINDOWS\system32\systemwb.dll

Adware.WebHancer
C:\WINDOWS\whAgent.inf
C:\WINDOWS\whInstaller.ini

Malware.SpywareQuake
C:\Documents and Settings\Owner\Desktop\SpywareQuake.lnk
C:\Documents and Settings\Owner\Start Menu\SpywareQuake 2.0.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareQuake 2.0.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyQuake2.com 2.3.lnk
\SpyQuake2.com.lnk
C:\Documents and Settings\Owner\Desktop\SpyQuake2.com.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareQuaked 2.4.lnk
\SpywareQuaked.lnk
C:\Documents and Settings\Owner\Desktop\SpywareQuaked.lnk
C:\Documents and Settings\Owner\Start Menu\SpywareQuaked 2.4.lnk

Adware.TrustInCash
C:\WINDOWS\system32\tisa.cnf

Adware.GloboLook
C:\WINDOWS\system32\Air Tickets.ico
C:\WINDOWS\system32\

C:\WINDOWS\system32\BlackJack.ico
C:\WINDOWS\system32\Britney Spears.ico
C:\WINDOWS\system32\Car Insurance.ico
C:\WINDOWS\system32\Cheap Cigarettes.ico
C:\WINDOWS\system32\Credit Card.ico
C:\WINDOWS\system32\Cruises.ico
C:\WINDOWS\system32\Currency Trading.ico
C:\WINDOWS\system32\

C:\WINDOWS\system32\MP3.ico
C:\WINDOWS\system32\Online Betting.ico
C:\WINDOWS\system32\Online Gambling.ico
C:\WINDOWS\system32\

C:\WINDOWS\system32\Party Poker.ico
C:\WINDOWS\system32\Pharmacy.ico
C:\WINDOWS\system32\Phentermine.ico
C:\WINDOWS\system32\

C:\WINDOWS\system32\Remove Spyware.ico
C:\WINDOWS\system32\Viagra.ico

Adware.ClickSpring/Yazzle
C:\WINDOWS\Downloaded Program Files\YazzleActiveX.inf
C:\WINDOWS\Downloaded Program Files\YazzleActiveX.ocx

Trojan.SysProtect
C:\Documents and Settings\Owner\Desktop\SysProtect.lnk

Trojan.CDSC63R
C:\WINDOWS\system32\cdscsix3.dll
C:\WINDOWS\system32\cdscsix3r.sys

Adware.Tesla Plus
C:\Program Files\secure32.html

Malware.SpyCut
C:\Documents and Settings\Owner\Desktop\SpyCut.lnk

Malware.Spyware Soft Stop
C:\Documents and Settings\Owner\Desktop\Spyware Soft Stop.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Spyware Soft Stop.lnk

Malware.SpywareSheriff
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareSheriff.lnk
\SpywareSheriff.lnk

Trojan.Hackarmy Variant
C:\WINDOWS\system32\MsnMsr.exe

Trojan.XptpMM
C:\WINDOWS\system32\fux87.ini

Malware.Spyware Vanisher
C:\WINDOWS\Spyware Vanisher Setup Log.txt
\Spyware Vanisher Free Scan.lnk
C:\Documents and Settings\Owner\Desktop\Spyware Vanisher Free Scan.lnk

Malware.Ultimate Defender
\Ultimate Defender.lnk
\Ultimate Defender.pkg
C:\Documents and Settings\Owner\Desktop\Ultimate Defender.lnk
C:\Documents and Settings\Owner\Desktop\Ultimate Defender.pkg

Adware.TV Media
C:\WINDOWS\Downloaded Program Files\APInstall_Tiny.dll

DIaler.Super-Adult
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Night Club - Foto Annunci Video - VM18.lnk
\Night Club - Foto Annunci Video - VM18.lnk
C:\Documents and Settings\Owner\Desktop\Night Club - Foto Annunci Video - VM18.lnk
C:\Documents and Settings\Owner\Start Menu\Programs\Night Club - Foto Annunci Video - VM18.lnk

Malware.SystemDoctor
\SystemDoctor 2006.lnk
C:\Documents and Settings\Owner\Desktop\SystemDoctor 2006.lnk
C:\WINDOWS\Downloaded Program Files\USDR6_0001_D08M0404NetInstaller.exe

Dialer.VacPro
C:\WINDOWS\Downloaded Program Files\int_ver34.ocx

Malware.AlertSpy
\AlertSpy.lnk
C:\Documents and Settings\Owner\Desktop\AlertSpy.lnk

Malware.Trust Cleaner
\Trust Cleaner.lnk
C:\Documents and Settings\Owner\Desktop\Trust Cleaner.lnk

Adware.Desktop Hijacker
C:\Program Files\Google\nicobitop.html

Malware.GreatMemo
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\GreatMemo.lnk
\GreatMemo.lnk
C:\Documents and Settings\Owner\Desktop\GreatMemo.lnk
C:\Documents and Settings\Owner\Start Menu\Programs\Startup\GreatMemo.lnk

Malware.TitanShield
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\TitanShield Antispyware.lnk
\TitanShield Antispyware.lnk
C:\Documents and Settings\Owner\Desktop\TitanShield Antispyware.lnk

Malware.RegFreeze
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\RegFreeze.lnk
\RegFreeze.lnk
C:\Documents and Settings\Owner\Start Menu\Programs\Startup\RegFreeze.lnk

Malware.Adware Finder
\AdwareFinder.lnk
C:\Documents and Settings\Owner\Desktop\AdwareFinder.lnk

Malware.SpyHeal
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyHeal 2.1.lnk
C:\Documents and Settings\Owner\Desktop\SpyHeal.lnk
C:\Documents and Settings\Owner\Start Menu\SpyHeal 2.1.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Spy-Heal 2.1.lnk
C:\Documents and Settings\Owner\Desktop\Spy-Heal.lnk
C:\Documents and Settings\Owner\Start Menu\Spy-Heal 2.1.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyHealer 2.2.lnk
\SpyHealer.lnk
C:\Documents and Settings\Owner\Start Menu\SpyHealer 2.2.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyHeals 2.3.lnk
\SpyHeals.lnk
C:\Documents and Settings\Owner\Desktop\SpyHeals.lnk
C:\Documents and Settings\Owner\Start Menu\SpyHeals 2.3.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyHeal 2.7.lnk
\SpyHeal 2.7.lnk
C:\Documents and Settings\Owner\Desktop\SpyHeal 2.7.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyHeal 3.5.lnk
\SpyHeal 3.5.lnk
C:\Documents and Settings\Owner\Desktop\SpyHeal 3.5.lnk
C:\Documents and Settings\Owner\Start Menu\SpyHeal 3.5.lnk

Trojan.DollarRevenue
C:\WINDOWS\newname.dat
C:\WINDOWS\keyboard1.dat

Spyware.IEToolbar
C:\Program Files\IEToolbar\inst.bat
C:\Program Files\IEToolbar\searchbarus.dll
C:\Program Files\IEToolbar\searchbarus.inf

Malware.AntiVirusGolden
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusGolden 3.3.lnk
\AntivirusGolden.lnk
C:\Documents and Settings\Owner\Desktop\AntivirusGolden.lnk
C:\Documents and Settings\Owner\Start Menu\AntivirusGolden 3.3.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiviralGolden 3.5.lnk
C:\Documents and Settings\Owner\Desktop\AntiviralGolden.lnk
C:\Documents and Settings\Owner\Start Menu\AntiviralGolden 3.5.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusGolden 4.0.lnk
\AntivirusGolden 4.0.lnk
C:\Documents and Settings\Owner\Desktop\AntivirusGolden 4.0.lnk
C:\Documents and Settings\Owner\Start Menu\AntivirusGolden 4.0.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AntivirusGold 4.4.lnk
\AntivirusGold 4.4.lnk
C:\Documents and Settings\Owner\Desktop\AntivirusGold 4.4.lnk
C:\Documents and Settings\Owner\Start Menu\AntivirusGold 4.4.lnk

Malware.VirusBlast
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusBlast v5.0.lnk
\VirusBlast v5.0.lnk
C:\Documents and Settings\Owner\Desktop\VirusBlast v5.0.lnk
C:\Documents and Settings\Owner\Start Menu\VirusBlast v5.0.lnk

Trojan.Media-Codec
\PornMag Pass.lnk
C:\Documents and Settings\Owner\Desktop\PornMag Pass.lnk
\X Password Generator.lnk
C:\Documents and Settings\Owner\Desktop\X Password Generator.lnk
\PornPass Manager.lnk
C:\Documents and Settings\Owner\Desktop\PornPass Manager.lnk
\Key Generator.lnk
C:\Documents and Settings\Owner\Desktop\Key Generator.lnk
C:\Documents and Settings\Owner\Favorites\Online Security Test.url

Trojan.ErrorSafe
C:\Documents and Settings\All Users\Start Menu\Programs\ErrorSafe\ErrorSafe on the Web.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\ErrorSafe\Uninstall ErrorSafe.lnk

Malware.Antispyware Soldier
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Antispyware Soldier.lnk
\Antispyware Soldier.lnk
C:\Documents and Settings\Owner\Start Menu\Programs\Startup\antispysoldier.lnk

Malware.VirusBurst
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusBurst 6.1.lnk
\VirusBurst.lnk
C:\Documents and Settings\Owner\Desktop\VirusBurst.lnk
C:\Documents and Settings\Owner\Start Menu\VirusBurst 6.1.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Virus-Burst 6.1.lnk
\Virus-Burst.lnk
C:\Documents and Settings\Owner\Desktop\Virus-Burst.lnk
C:\Documents and Settings\Owner\Start Menu\Virus-Burst 6.1.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusBurster 6.2.lnk
\VirusBurster.lnk
C:\Documents and Settings\Owner\Desktop\VirusBurster.lnk
C:\Documents and Settings\Owner\Start Menu\VirusBurster 6.2.lnk

Malware.AdProtect
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Ad-Protect v6.3.lnk
\Ad-Protect v6.3.lnk
C:\Documents and Settings\Owner\Desktop\Ad-Protect v6.3.lnk
C:\Documents and Settings\Owner\Start Menu\Ad-Protect v6.3.lnk

Malware.DriveCleaner
\DriveCleaner 2006 Free.lnk
C:\Documents and Settings\Owner\Desktop\DriveCleaner 2006 Free.lnk
C:\Program Files\Common Files\DriveCleaner Freeware
C:\Program Files\DriveCleaner Freeware
C:\Documents and Settings\Owner\Application Data\DriveCleaner Freeware
C:\Documents and Settings\All Users\Start Menu\Programs\DriveCleaner Freeware

Malware.VirusRescue
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusRescue v3.0.1.lnk
\VirusRescue v3.0.1.lnk
C:\Documents and Settings\Owner\Desktop\VirusRescue v3.0.1.lnk
C:\Documents and Settings\Owner\Start Menu\VirusRescue v3.0.1.lnk

Malware.RepairRegistryPro
\Repair Registry Pro.lnk
C:\Documents and Settings\Owner\Desktop\Repair Registry Pro.lnk

Unclassified.SpywareBot (Not A Threat)
\SpywareBot.lnk
C:\Documents and Settings\Owner\Desktop\SpywareBot.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareBot.lnk

Malware.PestCapture
\PestCapture.lnk
C:\Documents and Settings\Owner\Desktop\PestCapture.lnk

Malware.AntiVermins
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiVermins 2.1.lnk
C:\Documents and Settings\Owner\Start Menu\AntiVermins 2.1.lnk
\AntiVermins.lnk
C:\Documents and Settings\Owner\Desktop\AntiVermins.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiVermins 2.5.lnk
\AntiVermins 2.5.lnk
C:\Documents and Settings\Owner\Desktop\AntiVermins 2.5.lnk
C:\Documents and Settings\Owner\Start Menu\AntiVermins 2.5.lnk

Worm.Spam-Strato
C:\WINDOWS\msserrv32.dat
C:\WINDOWS\msserrv32.s
C:\WINDOWS\msserrv32.wax
C:\WINDOWS\msserrv32.z
C:\WINDOWS\msserv32.dat
C:\WINDOWS\msserv32.s
C:\WINDOWS\msserv32.wax
C:\WINDOWS\msserv32.z
C:\WINDOWS\mswiizz32.dat
C:\WINDOWS\mswiizz32.s
C:\WINDOWS\mswiizz32.wax
C:\WINDOWS\mswiizz32.z
C:\WINDOWS\mswiz32.dat
C:\WINDOWS\mswiz32.s
C:\WINDOWS\mswiz32.wax

Trojan.Bagle Variant
C:\WINDOWS\system32\winupd.exeopen
C:\WINDOWS\system32\winupd.exeopenopen
C:\WINDOWS\system32\winupd.exeopenopenopen

Malware.SpyiBlock
\SpyiBlock.lnk
C:\Documents and Settings\Owner\Desktop\SpyiBlock.lnk

Malware.BreakSpyware
\BreakSpyware.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Break Spyware.lnk

Malware.SpyMarshal
C:\Documents and Settings\Owner\Desktop\SpyMarshal.lnk

Malware.MrAntiSpy
C:\Documents and Settings\Owner\Desktop\MrAntispy.lnk
\MrAntispy.lnk

Malware.MalwareAlarm
\MalwareAlarm.lnk
C:\Documents and Settings\Owner\Desktop\MalwareAlarm.lnk

Malware.SpywareKnight
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareKnight.lnk
C:\Documents and Settings\Owner\Desktop\SpywareKnight.lnk

Malware.SpySoldier
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpySoldier.lnk
\SpySoldier.lnk
C:\Documents and Settings\Owner\Desktop\SpySoldier.lnk

Malware.ContraVirus
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\ContraVirus 2.0.lnk
C:\Documents and Settings\Owner\Desktop\ContraVirus 2.0.lnk
C:\Documents and Settings\Owner\Start Menu\ContraVirus 2.0.lnk

Trojan.Rustock/LZX32
C:\WINDOWS\system32:lzx32.sys

Trojan.Rustock/HUY32
C:\WINDOWS\system32:huy32.sys

Malware.SpyDawn
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyDawn 3.1.lnk
C:\Documents and Settings\Owner\Desktop\SpyDawn.lnk
C:\Documents and Settings\Owner\Start Menu\SpyDawn 3.1.lnk

Malware.SpyLocked
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyLocked 3.1.lnk
\SpyLocked.lnk
C:\Documents and Settings\Owner\Start Menu\SpyLocked 3.1.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareLocked 3.2.lnk
\SpywareLocked.lnk
C:\Documents and Settings\Owner\Start Menu\SpywareLocked 3.2.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareLocked 3.3.lnk
\SpywareLocked 3.3.lnk
C:\Documents and Settings\Owner\Desktop\SpywareLocked 3.3.lnk
C:\Documents and Settings\Owner\Start Menu\SpywareLocked 3.3.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareLocked 3.4.lnk
\SpywareLocked 3.4.lnk
C:\Documents and Settings\Owner\Desktop\SpywareLocked 3.4.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpywareLocked 3.5.lnk
\SpywareLocked 3.5.lnk
C:\Documents and Settings\Owner\Desktop\SpywareLocked 3.5.lnk
C:\Documents and Settings\Owner\Start Menu\SpywareLocked 3.5.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyLocked 3.6.lnk
\SpyLocked 3.6.lnk
C:\Documents and Settings\Owner\Desktop\SpyLocked 3.6.lnk
C:\Documents and Settings\Owner\Start Menu\SpyLocked 3.6.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyLocked 3.7.lnk
\SpyLocked 3.7.lnk
C:\Documents and Settings\Owner\Desktop\SpyLocked 3.7.lnk
C:\Documents and Settings\Owner\Start Menu\SpyLocked 3.7.lnk

Malware.MalwareStopper
\MalwareStopper.lnk

Dialer.InfoDialer
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\e1xplorer.lnk
\e1xplorer.lnk
C:\Documents and Settings\Owner\Desktop\e1xplorer.lnk
C:\Documents and Settings\Owner\Favorites\e1xplorer.lnk
C:\Documents and Settings\Owner\My Documents\e1xplorer.lnk
C:\Documents and Settings\Owner\Start Menu\Programs\e1xplorer.lnk
C:\Documents and Settings\Owner\Start Menu\e1xplorer.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\exsplorer.lnk
\exsplorer.lnk
C:\Documents and Settings\Owner\Desktop\exsplorer.lnk
C:\Documents and Settings\Owner\Favorites\exsplorer.lnk
C:\Documents and Settings\Owner\My Documents\exsplorer.lnk
C:\Documents and Settings\Owner\Start Menu\Programs\exsplorer.lnk
C:\Documents and Settings\Owner\Start Menu\exsplorer.lnk

Malware.SpyAnalyst
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Spy Analyst.lnk
\SpyAnalyst.lnk
C:\Documents and Settings\Owner\Desktop\SpyAnalyst.lnk

Malware.SpyOfficer
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Spy Officer.lnk
\SpyOfficer.lnk
C:\Documents and Settings\Owner\Desktop\SpyOfficer.lnk

Malware.SpywareSoftStop
\SpywareSoftStop.lnk
C:\Documents and Settings\Owner\Desktop\SpywareSoftStop.lnk

Malware.DrAntiSpy
\DrAntispy.lnk
C:\Documents and Settings\Owner\Desktop\DrAntispy.lnk

Malware.Ultimate Fixer
C:\Documents and Settings\Owner\Desktop\UltimateFixer 2007.lnk

Malware.VirusLocker
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusLocker 3.1.lnk
\VirusLocker.lnk
C:\Documents and Settings\Owner\Desktop\VirusLocker.lnk
C:\Documents and Settings\Owner\Start Menu\VirusLocker 3.1.lnk

Malware.SpyCrush
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyCrush 3.2.lnk
\SpyCrush 3.2.lnk
C:\Documents and Settings\Owner\Desktop\SpyCrush 3.2.lnk
C:\Documents and Settings\Owner\Start Menu\SpyCrush 3.2.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyCrush 3.3.lnk
\SpyCrush 3.3.lnk
C:\Documents and Settings\Owner\Desktop\SpyCrush 3.3.lnk
C:\Documents and Settings\Owner\Start Menu\SpyCrush 3.3.lnk

Unclassified.System Live Protect
C:\Documents and Settings\Owner\Desktop\System Live Protect.lnk

Malware.Spyware Sweeper
\Spyware Sweeper.lnk
C:\Documents and Settings\Owner\Desktop\Spyware Sweeper.lnk

Malware.VirusHeal
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusHeal 3.7.lnk
\VirusHeal 3.7.lnk
C:\Documents and Settings\Owner\Desktop\VirusHeal 3.7.lnk
C:\Documents and Settings\Owner\Start Menu\VirusHeal 3.7.lnk

Malware.VirusProtectPro
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusProtectPro 3.3.lnk
\VirusProtectPro 3.3.lnk
C:\Documents and Settings\Owner\Desktop\VirusProtectPro 3.3.lnk
C:\Documents and Settings\Owner\Start Menu\VirusProtectPro 3.3.lnk

Desktop Hijacker.AboutYourPrivacy
\Error Cleaner.url
\Privacy Protector.url
\Spyware&Malware Protection.url
C:\Documents and Settings\Owner\Desktop\Error Cleaner.url
C:\Documents and Settings\Owner\Desktop\Privacy Protector.url
C:\Documents and Settings\Owner\Desktop\Spyware&Malware Protection.url
C:\Documents and Settings\Owner\Favorites\Error Cleaner.url
C:\Documents and Settings\Owner\Favorites\Privacy Protector.url
C:\Documents and Settings\Owner\Favorites\Spyware&Malware Protection.url

Keylogger.Actual Spy
C:\WINDOWS\system\actualspystart.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Actual Spy.lnk
\ActualSpy.lnk
C:\Documents and Settings\Owner\Desktop\ActualSpy.lnk

Malware.VirusRanger
C:\Documents and Settings\Owner\Start Menu\VirusRanger v3.1.0.lnk

Malware.SpyShredder
\SpyShredder.lnk
C:\Documents and Settings\Owner\Desktop\SpyShredder.lnk

Malware.Ultimate Cleaner
C:\Documents and Settings\All Users\Start Menu\Programs\UltimateCleaner 2007\Uninstall UltimateCleaner 2007.lnk

Malware.MalwareBurn
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareBurn 7.1.lnk
\MalwareBurn 7.1.lnk
C:\Documents and Settings\Owner\Desktop\MalwareBurn 7.1.lnk
C:\Documents and Settings\Owner\Start Menu\MalwareBurn 7.1.lnk

Malware.LocusSoftware Inc/BestSellerAntivirus
C:\Documents and Settings\All Users\Start Menu\Programs\BestsellerAntivirus\BestsellerAntivirus.lnk
C:\Documents and Settings\All Users\Desktop\BestsellerAntivirus.lnk
\Install AVSystemCare .lnk
C:\Documents and Settings\Owner\Desktop\Install AVSystemCare .lnk

Malware.LocusSoftware Inc/ErrClean
\ErrClean.lnk
C:\Documents and Settings\Owner\Desktop\ErrClean.lnk

Rogue.XP AntiVirus
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\XPAntivirus.lnk
C:\Documents and Settings\Owner\Desktop\XPAntivirus.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\XP Antivirus 2008.lnk
\XP Antivirus 2008.lnk
C:\Documents and Settings\Owner\Desktop\XP Antivirus 2008.lnk

Rogue.WinPerformance
C:\Documents and Settings\All Users\Start Menu\Programs\WinPerformance.lnk
\WinPerformance.lnk
C:\Documents and Settings\Owner\Desktop\WinPerformance.lnk

Rogue.VirusRay
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusRay 3.8.lnk
\VirusRay 3.8.lnk
C:\Documents and Settings\Owner\Desktop\VirusRay 3.8.lnk
C:\Documents and Settings\Owner\Start Menu\VirusRay 3.8.lnk

Rogue.AdvancedCleaner
\AdvancedCleaner Free.lnk
C:\Documents and Settings\Owner\Desktop\AdvancedCleaner Free.lnk

Rogue.AntiSpyStorm
C:\Documents and Settings\All Users\Desktop\AntispyStorm.lnk

Rogue.AntiSpyGuard
C:\Documents and Settings\All Users\Start Menu\AntiSpyGuard 2007.lnk
C:\Documents and Settings\All Users\Desktop\AntiSpyGuard 2007.lnk

Rogue.IEDefender
\IE Defender 2.2.lnk
C:\Documents and Settings\Owner\Desktop\IE Defender 2.2.lnk
C:\Documents and Settings\Owner\Start Menu\Programs\IE Defender 2.2.lnk

Malware.VirusProtect
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusProtect 3.8.lnk
C:\Documents and Settings\Owner\Desktop\VirusProtect 3.8.lnk
C:\Documents and Settings\Owner\Start Menu\VirusProtect 3.8.lnk

Rogue.AntiSpywareShield
\AntiSpywareShield.lnk
C:\Documents and Settings\Owner\Desktop\AntiSpywareShield.lnk

Rogue.WinXDefender
\WinXDefender.lnk
C:\Documents and Settings\Owner\Desktop\WinXDefender.lnk

Rogue.SunshineSpy
\Sunshine Spy.lnk
C:\Documents and Settings\Owner\Desktop\Sunshine Spy.lnk
C:\Documents and Settings\Owner\Start Menu\Programs\Startup\Sunshine.lnk

Malware.LocusSoftware Inc/ConfidentSurf
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\ConfidentSurf unregistered.lnk
\ConfidentSurf unregistered.lnk
C:\Documents and Settings\Owner\Desktop\ConfidentSurf unregistered.lnk

Rogue.DrProtection
\DrProtection.lnk
C:\Documents and Settings\Owner\Desktop\DrProtection.lnk

Rogue.OnlineGuard
\OnlineGuard.lnk
C:\Documents and Settings\Owner\Desktop\OnlineGuard.lnk

Rogue.LiveAntiSpy
\LiveAntispy.lnk
C:\Documents and Settings\Owner\Desktop\LiveAntispy.lnk

Rogue.GuardCenter
\GuardCenter.lnk
C:\Documents and Settings\Owner\Desktop\GuardCenter.lnk

Rogue.WinSpyKiller
\WinSpyKiller.lnk

Malware.MalwareCrush
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareCrush 3.7.lnk
\MalwareCrush.lnk
C:\Documents and Settings\Owner\Desktop\MalwareCrush.lnk
C:\Documents and Settings\Owner\Start Menu\MalwareCrush 3.7.lnk

Adware.Unclassified/Spruce
C:\Documents and Settings\Owner\Start Menu\Programs\Startup\Spruce - Auto Update.lnk

RootKit.TnCore/Trace
C:\WINDOWS\system32\drivers\core.cache.dsk
C:\WINDOWS\system32\drivers\core.sys
C:\WINDOWS\system32\drivers\swenumm.sys

Rogue.Installer/Trace
C:\WINDOWS\Spyware Remover.ico
C:\WINDOWS\Casino.ico
C:\WINDOWS\Free Online Dating.ico

Rogue.Files-Secure
C:\Documents and Settings\Owner\Start Menu\Programs\Files Secure 2.1.lnk
C:\Documents and Settings\Owner\Desktop\Files Secure 2.1.lnk
\Files Secure 2.1.lnk

Trojan.Unclassified/Crypt32RT-SD
C:\Documents and Settings\Owner\Application Data\acstrlsp.ocx
C:\Documents and Settings\Owner\Application Data\odbcbase.ocx

Rogue.AntiSpyBoss
C:\Documents and Settings\All Users\Start Menu\Programs\AntiSpyBoss\AntiSpyBoss.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\AntiSpyBoss\Uninstall AntiSpyBoss.ln

Rogue.SpyDefender Pro
\SpyDefender Pro.lnk
C:\Documents and Settings\Owner\Desktop\SpyDefender Pro.lnk

Rootkit.Unclassified/NDISUiOO
C:\WINDOWS\system32\drivers\ndisuioo.sys

Rogue.AntiSpyKit
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpyKit 5.2.lnk
\AntiSpyKit 5.2.lnk
C:\Documents and Settings\Owner\Desktop\AntiSpyKit 5.2.lnk
C:\Documents and Settings\Owner\Start Menu\AntiSpyKit 5.2.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpyKit 5.3.lnk
\AntiSpyKit 5.3.lnk
C:\Documents and Settings\Owner\Desktop\AntiSpyKit 5.3.lnk
C:\Documents and Settings\Owner\Start Menu\AntiSpyKit 5.3.lnk

Rootkit.Unclassified/USBStorR
C:\WINDOWS\system32\drivers\USBSTORR.SYS

Rootkit.Unclassified/ADPU160MM
C:\WINDOWS\system32\drivers\ADPU160MM.SYS

Rootkit.Unclassified/SysDamp-Traces
C:\WINDOWS\system32\svchost.tmp
C:\WINDOWS\system32\svchost.t__
C:\WINDOWS\system32\svcp.csv
C:\WINDOWS\system32\burito.ini
C:\WINDOWS\system32\diperto.ini

Malware.LocusSoftware Inc/AVSystemCare
C:\Documents and Settings\All Users\Desktop\AVSystemCare.lnk

Malware.LocusSoftware Inc/WinSpyControl
C:\Documents and Settings\All Users\Desktop\WinSpyControl.lnk

Rootkit.Unclassified/AudStubB
C:\WINDOWS\system32\drivers\audstubb.sys

Rootkit.Unclassified/KR_Done
C:\WINDOWS\system32\kr_done1
C:\WINDOWS\system32\vx.tll

Rogue.VirusHeat
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusHeat 3.9.lnk
\VirusHeat 3.9.lnk
C:\Documents and Settings\Owner\Desktop\VirusHeat 3.9.lnk
C:\Documents and Settings\Owner\Start Menu\VirusHeat 3.9.lnk

Rogue.MalwareDestructor
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareDestructor 4.5.lnk
\MalwareDestructor 4.5.lnk
C:\Documents and Settings\Owner\Desktop\MalwareDestructor 4.5.lnk
C:\Documents and Settings\Owner\Start Menu\MalwareDestructor 4.5.lnk

Rogue.MalwareCore
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareCore 7.3.lnk
\MalwareCore 7.3.lnk
C:\Documents and Settings\Owner\Desktop\MalwareCore 7.3.lnk
C:\Documents and Settings\Owner\Start Menu\MalwareCore 7.3.lnk

Adware.MMHRen-Trace
C:\WINDOWS\mmax_hren2.ini
C:\WINDOWS\mmhren2.jpg
C:\WINDOWS\system32\winlogans.tmp

Rogue.WinReanimator
C:\Documents and Settings\All Users\Desktop\WinReanimator.lnk

Rogue.Immunizr
C:\Documents and Settings\Owner\Desktop\Immunizr.lnk

Rootkit.Unclassified/DMBootT
C:\WINDOWS\system32\drivers\DMBOOTT.SYS

Rogue.SpywareIsolator
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\spywareisolator.lnk
\spywareisolator.lnk
C:\Documents and Settings\Owner\Desktop\spywareisolator.lnk
C:\WINDOWS\system32\spywarewarning.mht
c:\winxplogon.sys

Rogue.SpySnipe
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpySnipe 1.0.lnk
\SpySnipe 1.0.lnk
C:\Documents and Settings\Owner\Desktop\SpySnipe 1.0.lnk

Adware.JavaCore/NoDNS
C:\WINDOWS\system32\cmds.txt
C:\WINDOWS\system32\cs.dat
C:\WINDOWS\system32\ps1.dat
C:\WINDOWS\system32\rc.dat
C:\WINDOWS\system32\suns.dat

Rogue.AntiVirusProtection
\Antivirus Protection.lnk
C:\Documents and Settings\Owner\Desktop\Antivirus Protection.lnk

Rogue.SearchAndDestroy
C:\Documents and Settings\All Users\Desktop\Search And Destroy.lnk

Rogue.TrustedAntiVirus
C:\Documents and Settings\All Users\Start Menu\Programs\TrustedAntivirus\Contact Customer Support.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\TrustedAntivirus\Uninstall TrustedAntivirus.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\TrustedAntivirus\TrustedAntivirus.lnk

Rogue.SpywareRemover
\Spyware Remover.lnk
C:\Documents and Settings\Owner\Desktop\Spyware Remover.lnk

Rogue.Netcom3/SpyClean
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Netcom3 Cleaner.lnk
\Netcom3 Cleaner.lnk
C:\Documents and Settings\Owner\Desktop\Netcom3 Cleaner.lnk

Rootkit.Unclassified/IRBUSS
C:\WINDOWS\system32\drivers\IRBUSS.SYS

Rootkit.Unclassified/SRR
C:\WINDOWS\system32\drivers\SRR.SYS

Rogue.SpyMaxx
C:\Documents and Settings\All Users\Desktop\SpyMaxx.lnk

Rogue.SpyBurner
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyBurner.lnk
C:\Documents and Settings\Owner\Desktop\SpyBurner.lnk

Rogue.AntiSpyCheck
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpyCheck v2.4.lnk
\AntiSpyCheck v2.4.lnk
C:\Documents and Settings\Owner\Desktop\AntiSpyCheck v2.4.lnk
C:\Documents and Settings\Owner\Start Menu\AntiSpyCheck v2.4.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpyCheck 2.1.lnk
\AntiSpyCheck 2.1.lnk
C:\Documents and Settings\Owner\Desktop\AntiSpyCheck 2.1.lnk
C:\Documents and Settings\Owner\Start Menu\AntiSpyCheck 2.1.lnk

Rogue.MalwareWar
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\MalwareWar 7.3.lnk
\MalwareWar 7.3.lnk
C:\Documents and Settings\Owner\Desktop\MalwareWar 7.3.lnk
C:\Documents and Settings\Owner\Start Menu\MalwareWar 7.3.lnk

Rogue.PC-Antispyware
C:\WINDOWS\system32\drivers\pca-firewall.sys

Rootkit.Unclassified/IANSWXPP
C:\WINDOWS\system32\drivers\IANSWXPP.SYS

Rogue.SpyWatchE
\SpyWatchE.lnk
C:\Documents and Settings\Owner\Desktop\SpyWatchE.lnk

Rogue.MalwareBell
\Malware Bell 3.2.lnk
C:\Documents and Settings\Owner\Start Menu\Programs\Malware Bell 3.2.lnk

Rogue.VirusIsolator
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\virusisolator.lnk
\virusisolator.lnk
C:\Documents and Settings\Owner\Desktop\virusisolator.lnk

Rootkit.Unclassified/USBHubB
C:\WINDOWS\system32\drivers\usbhubb.sys

Rogue.WinIFixer
C:\Documents and Settings\All Users\Desktop\WinIFixer.lnk

Rogue.WinXPProtector
\WinXProtector.lnk
C:\Documents and Settings\Owner\Desktop\WinXProtector.lnk

Trojan.Unknown Origin
C:\WINDOWS\system32\fets.dat
C:\WINDOWS\system32\hrpdcf.bin
C:\WINDOWS\system32\adult.txt
C:\WINDOWS\system32\esoyoweh.tmp
C:\WINDOWS\system32\WinCtrl32.dl_
C:\WINDOWS\system32\finance.txt
C:\WINDOWS\system32\lt.res
C:\WINDOWS\system32\other.txt
C:\WINDOWS\system32\pharma.txt
C:\WINDOWS\system32\sn.txt
C:\WINDOWS\promogif1.gif
C:\WINDOWS\promogif2.gif
C:\WINDOWS\promogif3.gif

Rogue.DataHealer
\DataHealer.lnk
C:\Documents and Settings\Owner\Desktop\DataHealer.ln

Trojan.Multi-Dropper
C:\WINDOWS\..\ktgmhs.exe
C:\WINDOWS\..\rwhucv.exe
C:\WINDOWS\..\tvcfoviw.exe
C:\WINDOWS\..\wxebxbo.exe

Rogue.PrivacyWatcher
\Privacy Watcher.lnk
C:\Documents and Settings\Owner\Desktop\Privacy Watcher.lnk

Rogue.PC-Cleaner
\PC-Cleaner.lnk
C:\Documents and Settings\Owner\Desktop\PC-Cleaner.lnk
\blackbird.jpg
\EditorFKWP1.5.exe
\EditorFKWP2.0.exe
\filemanagerclient.exe
\fkwp1.5.exe
\fkwp2.0.exe
\fwebd.exe
\FWebdEditor.exe
\Trojan.Win32.BlackBird.exe
C:\Documents and Settings\Owner\Desktop\EditorFKWP1.5.exe
C:\Documents and Settings\Owner\Desktop\EditorFKWP2.0.exe
C:\Documents and Settings\Owner\Desktop\filemanagerclient.exe
C:\Documents and Settings\Owner\Desktop\fkwp1.5.exe
C:\Documents and Settings\Owner\Desktop\fkwp2.0.exe
C:\Documents and Settings\Owner\Desktop\fwebd.exe
C:\Documents and Settings\Owner\Desktop\FWebdEditor.exe
C:\Documents and Settings\Owner\Desktop\Trojan.Win32.BlackBird.exe

Rogue.AntiSpywareMaster
\AntiSpywareMaster.lnk
C:\Documents and Settings\Owner\Desktop\AntiSpywareMaster.lnk

Rogue.AntiVirProtect
\AntiVirProtect.lnk
C:\Documents and Settings\Owner\Desktop\AntiVirProtect.lnk

Rogue.MasterAntiVirus
\master anti virus.lnk
C:\Documents and Settings\Owner\Desktop\master anti virus.lnk

Rogue.Deus Cleaner
C:\Documents and Settings\All Users\Desktop\Deus Cleaner.lnk

Rogue.MyNetProtector
C:\Documents and Settings\Owner\Desktop\MyNetProtector.lnk
C:\Documents and Settings\Owner\Start Menu\MyNetProtector.lnk
C:\Documents and Settings\Owner\Start Menu\Programs\Startup\MyNetProtector.lnk

Rogue.IEAntiVirus
\IE AntiVirus 3.2.lnk
C:\Documents and Settings\Owner\Start Menu\Programs\IE AntiVirus 3.2.lnk
C:\Documents and Settings\Owner\Desktop\IE AntiVirus 3.3.lnk
C:\Documents and Settings\Owner\Start Menu\Programs\IE AntiVirus 3.3.lnk

Rogue.XP-Shield
C:\Documents and Settings\Owner\Desktop\XP-Shield.lnk
\XP-Shield.lnk

Rogue.AdvancedXPDefender
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AXPDefender.lnk
C:\Documents and Settings\All Users\Desktop\AXPDefender.lnk

Rogue.VipAntiSpyware
\vipantispyware.lnk
C:\Documents and Settings\Owner\Desktop\vipantispyware.lnk

Rogue.AdvancedXPFixer
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AXPFixer.lnk
C:\Documents and Settings\All Users\Desktop\AXPFixer.lnk

Rootkit.TNCore-Variant/A
C:\WINDOWS\system32\drivers\VCHH.SYS

Rogue.CrisysTecSentry
C:\Documents and Settings\Owner\Desktop\CrisysTec Sentry 3.0.lnk

Rogue.ETDScanner
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\ETD Security Scanner.lnk
\ETD Security Scanner.lnk
C:\Documents and Settings\Owner\Desktop\ETD Security Scanner.lnk

Rogue.MalwareMonitor
\MalwareMonitor.lnk
C:\Documents and Settings\Owner\Desktop\MalwareMonitor.lnk

Rogue.MySpyProtector
\MySpyProtector.lnk
C:\Documents and Settings\Owner\Desktop\MySpyProtector.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\MySpyProtector.lnk

Rogue.PCHealthPlan
C:\Documents and Settings\Owner\Desktop\PC Health Plan.lnk
C:\Documents and Settings\Owner\Start Menu\PC Health Plan.lnk
C:\WINDOWS\PCHP.exe.lnk
\PC Health Plan.lnk

Rogue.PrivacyGuarantor
C:\Documents and Settings\Owner\Start Menu\Privacy Guarantor v2.0.lnk
\Privacy Guarantor v2.0.lnk
C:\Documents and Settings\Owner\Desktop\Privacy Guarantor v2.0.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Privacy Guarantor v2.0.lnk

Rogue.PrivacyRedeemer
\Privacy Redeemer.lnk
C:\Documents and Settings\Owner\Desktop\Privacy Redeemer.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Privacy Redeemer.lnk

Rogue.RaptorDefence
\RaptorDefence.lnk
C:\Documents and Settings\Owner\Desktop\RaptorDefence.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\RaptorDefence.lnk

Rogue.MalwarePatrolPro
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\MPatrolPRO.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Malware Patrol PRO.lnk
C:\Documents and Settings\All Users\Desktop\MPatrolPRO.lnk

Rogue.PCPrivacyCleaner
\PCPrivacyCleaner.lnk
C:\Documents and Settings\Owner\Desktop\PCPrivacyCleaner.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\PCPrivacyCleaner.lnk

Rogue.AntiVirus 2008 Pro
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus-2008pro.lnk
C:\Documents and Settings\Owner\Application Data\TmpRecentIcons\Advanced XP Defender.lnk
C:\Documents and Settings\Owner\Application Data\TmpRecentIcons\Advanced XP Fixer.lnk
C:\Documents and Settings\Owner\Application Data\TmpRecentIcons\antivirus-2008pro.lnk
C:\Documents and Settings\Owner\Application Data\TmpRecentIcons\SystemDefender.lnk
\antivirus-2008pro.lnk
C:\Documents and Settings\Owner\Desktop\antivirus-2008pro.lnk

Rogue.AntiSpywareExpert
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpywareExpert.lnk
\AntiSpywareExpert.lnk
C:\Documents and Settings\Owner\Desktop\AntiSpywareExpert.lnk

Rogue.UltimateAntiVirus
C:\Documents and Settings\Owner\Desktop\Ultimate Antivirus.lnk
\Ultimate Antivirus.lnk

Rogue.Malware Protector 2008
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Malware Protector 2008.lnk

Rogue.Advanced AntiVirus 2008
\Advanced Antivirus.lnk
C:\Documents and Settings\Owner\Desktop\Advanced Antivirus.lnk
C:\WINDOWS\system32\aav.cpl
C:\WINDOWS\system32\wav.cpl

Rogue.System AntiVirus 2008
\System Antivirus 2008.lnk
C:\Documents and Settings\Owner\Desktop\System Antivirus 2008.lnk

Rogue.MandelEnterprise/Variants
C:\Documents and Settings\Owner\Desktop\Adware Deluxe.lnk
C:\Documents and Settings\Owner\Desktop\Adware Patrol.lnk
C:\Documents and Settings\Owner\Desktop\Doctor Adware Pro.lnk
C:\Documents and Settings\Owner\Desktop\Doctor Adware.lnk

Rogue.AntiVirus 2009
C:\Documents and Settings\Owner\Desktop\Antivirus 2009.lnk
\Antivirus 2009.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus 2009.lnk

Rogue.WinAntiSpyware2008
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\WinAntispyware2008.lnk
C:\Documents and Settings\Owner\Application Data\yhohynyd.bat
\WinAntispyware2008.lnk
C:\Documents and Settings\Owner\Cookies\emyvixe._sy
C:\Documents and Settings\Owner\Cookies\kabim.db
C:\Documents and Settings\Owner\Cookies\libibozo.inf
C:\Documents and Settings\Owner\Cookies\moqe.sys
C:\Documents and Settings\Owner\Cookies\visudu._dl
C:\Documents and Settings\Owner\Local Settings\Application Data\nirirokewi._dl
C:\Program Files\Common Files\canaj.inf
C:\Program Files\Common Files\igifeqyre.inf
C:\Program Files\Common Files\rylovewubu.scr
C:\Program Files\Common Files\sugu._dl
C:\Program Files\Common Files\zugy.db
C:\Documents and Settings\Owner\Application Data\fyta.bin
C:\WINDOWS\wipfw.conf
C:\WINDOWS\zugykuzyd.exe
C:\WINDOWS\system32\cuco.reg
C:\WINDOWS\simu.dat
C:\WINDOWS\ruvovo.com
C:\WINDOWS\nyfinazom.dll
C:\WINDOWS\ekukomu.exe

Rogue.PestSweeper
C:\WINDOWS\system\cmsd.exe
C:\WINDOWS\system\MsWin000.exe
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\pestsweeper.lnk
\pestsweeper.lnk
C:\Documents and Settings\Owner\Desktop\pestsweeper.lnk
C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\sav.exe

Rogue.AntiVirus XP 2008
C:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008.lnk
C:\Documents and Settings\All Users\Desktop\Antivirus XP 2008.lnk

Rogue.WistaAntiVirus
\WistaAntivirus.lnk
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\WistaAntivirus.lnk
C:\Documents and Settings\Owner\Desktop\WistaAntivirus.lnk

Rogue.PCCleanPro
\PC Clean Pro.lnk
C:\Documents and Settings\Owner\Desktop\PC Clean Pro.lnk

Rogue.PCAntiSpy
C:\WINDOWS\system32\drivers\pcantispy.sys

Rogue.Doctor AntiVirus 2008
\antvr.exe
C:\Documents and Settings\Owner\Desktop\antvr.exe

Rogue.PCTotalDefender
C:\Documents and Settings\All Users\Desktop\PCTotalDefender.lnk

Rogue.Web/Registry Sentinel
C:\WINDOWS\AttentionEX.html
C:\WINDOWS\BadUrl.txt
C:\WINDOWS\delete.jpg
C:\WINDOWS\delete1.jpg
C:\WINDOWS\locked.ico
C:\WINDOWS\opened.ico
C:\WINDOWS\paths.jpg
C:\WINDOWS\prgrsbar.gif
C:\WINDOWS\refs.jpg
C:\WINDOWS\Sentinel1.jpg
C:\WINDOWS\Sentinel3.jpg
C:\WINDOWS\Sentinel4.jpg
C:\WINDOWS\setts.jpg
C:\WINDOWS\stores.jpg
C:\WINDOWS\uid.tmp
C:\WINDOWS\vals.jpg
C:\WINDOWS\www.jpg
\The Registry Sentinel.lnk
\The Web Sentinel.lnk
C:\Documents and Settings\Owner\Desktop\The Registry Sentinel.lnk
C:\Documents and Settings\Owner\Desktop\The Web Sentinel.lnk

Rogue.VirusRemover2008
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\VirusRemover2008.lnk
\Viruses.bdt
\VirusRemover2008.lnk
C:\Documents and Settings\Owner\Desktop\Viruses.bdt
C:\Documents and Settings\Owner\Desktop\VirusRemover2008.lnk

Rogue.AntiSpyware 2008
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Antispyware-2008.lnk
C:\Documents and Settings\Owner\Desktop\Antispyware-2008.lnk

Rootkit.Agent/Gen
C:\WINDOWS\system32\msliksurcredo.dll
C:\WINDOWS\system32\msliksurdns.dll
C:\WINDOWS\system32\drivers\msliksurserv.sys

Rogue.AntiMalwareGuard
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiMalwareGuard.lnk
\AntiMalwareGuard.lnk
C:\Documents and Settings\Owner\Desktop\AntiMalwareGuard.lnk

Rogue.XP Cleaner
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\XP Cleaner.lnk
\XP Cleaner.lnk
C:\Documents and Settings\Owner\Desktop\XP Cleaner.lnk

Rogue.RegistryDoctor2008
C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\RegistryDoctor2008.lnk
\RegistryDoctor2008.lnk
C:\Documents and Settings\Owner\Desktop\RegistryDoctor2008.lnk

Trojan.Unclassified/RegSVR-Fake
C:\WINDOWS\SYSTEM\REGSVR.EXE

It had quite a lot on it that Super didn't pick up the first time.

I edited some of the content in some of the adware sections above after the initial posting of the log and after some that are helping have seen it as it had some references to adult content. If you are a profesional and think and or want to help in this matter I can send the full log.

Ves Heill! Farr Heill!

Message was edited by: Jammer09

Honor Yourself with Truth & Fairness! Your Word is Your Bond! Give Your Word Power by Adhering to it!

Jammer09

336 posts since
Dec 28, 2007

4. Oct 9, 2008 3:25 PM

in response to: Jammer09

Re: Need help making sure PC is clean before transfer of data to another HD before a format of HD and reinstall of WindowsXp?

Heilsa!

Here is the Uninstall log from Hijackthis:

32 Bit HP CIO Components Installer
7-Zip 4.57
Adobe Acrobat 5.0
Adobe Flash Player 10 ActiveX
Adobe Flash Player Plugin
Amazon MP3 Downloader 1.0.3
ArcSoft ShowBiz DVD 2
ArcSoft Software Suite
AutoCAD 2005 - English
AutoCAD Architecture 2008
Autodesk DWF Viewer 7
AVConverter 1.0
AVIConverter 3.0
AVS4YOU Software Navigator 1.2
Battlezone II
Belarc Advisor 7.2
CA Internet Security Suite
CD LabelMaker 5
Core FTP LE 1.3c
DVD Decrypter (Remove Only)
easy Internet sign-up
Enhanced Multimedia Keyboard Solution
FoneSync
Free Mp3/Wma/Ogg Converter 3.9
FTP Navigator
HijackThis 2.0.2
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
hp center
HP Customer Participation Program 10.0
HP Deskjet F4200 All-In-One Driver Software 10.0 Rel .3
HP DVD Writer
HP Imaging Device Functions 10.0
hp instant support
HP Photosmart Essential 2.5
HP Smart Web Printing
HP Solution Center 10.0
hp toolkit
HP Update
Inactive HP Printer Drivers (Remove only)
Intel(R) 845G Chipset Graphics Driver Software
InterVideo WinDVD
Java 2 Runtime Environment, SE v1.4.1_02
Java Web Start
Kublox
Lernout & Hauspie TruVoice American English TTS Engine
LG USB Drivers
LiveReg (Symantec Corporation)
LiveUpdate 1.6 (Symantec Corporation)
LRC Editor 4.0 (remove only)
MClient.exe
Microsoft .NET Framework (English)
Microsoft .NET Framework (English) v1.0.3705
Microsoft .NET Framework 1.0 Hotfix (KB928367)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 2000 Premium
Microsoft PhotoDraw 2000
Microsoft User-Mode Driver Framework Feature Pack 1.5
Microsoft Visual C++ 2005 Redistributable
Microsoft WinUsb 1.0
Microsoft Works 2001 Setup Launcher
Moldflow Plastics Advisers 7.3
Moldflow Product Security
Mozilla Firefox (2.0.0.17)
MP3 Player Utilities 1.47
MP3 Player Utilities 3.11
MSXML 6.0 Parser (KB933579)
MUSICMATCH Jukebox
muvee autoProducer 3.5_LE10 - HPC
Nero 7 Ultra Edition
neroxml
NVIDIA Windows 2000/XP Display Drivers
Philips PC Camera
PigPen
PL-2303 USB-to-Serial
PowerDVD
PS2
Python 2.2 combined Win32 extensions
Python 2.2.1
Quicken Financial Center
Revo Uninstaller 1.75
Rosetta Stone 2.1.4.2Asms
Roxio Easy Media Creator 8 Suite
S3Display
S3Gamma2
S3Info2
S3Overlay
SabreWing 2
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 2.0 (KB928365)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 9 (KB911565)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Shareaza 2.3.1.0
Shop for HP Supplies
Sonic Update Manager
Space Rocks
Speedway
Student Management System v3.0hs
SUPER © Version 2008.bld.33 (Sep 2, 2008)
SUPERAntiSpyware Free Edition
SureThing CD Labeler 4 SE
SweetIM for Messenger 2.5
SweetIM Toolbar for Internet Explorer 3.2
TWC User Controls
upapp
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
USB MP3 Player WIN98 Drivers
Virtual Warfare
Winamp
Windows Installer Clean Up
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Windows XP Service Pack 3
Wireless Camera Surveillance Solution
WordPerfect Productivity Pack
WordPerfect Productivity Pack
Yahoo! Browser Services
Yahoo! Install Manager
Yahoo! Internet Mail
Yahoo! Messenger
Yahoo! Toolbar

Ves Heill! Farr Heill!

Honor Yourself with Truth & Fairness! Your Word is Your Bond! Give Your Word Power by Adhering to it!

SpiritWind

1,722 posts since
Aug 19, 2006

5. Oct 9, 2008 9:08 PM

in response to: Jammer09

Re: Need help making sure PC is clean before transfer of data to another HD before a format of HD and reinstall of WindowsXp?

http://forums.pcworld.com/images/emoticons/grin.gif

Hi :

That is some "collection" of malware that SUPERAntiSpyware "Detected"; I did NOT see

any really bad malware listed where I would definitely Recommend a re-format and

re-installation of the Operating System . However, I saw some "serious" Ones and 14

Rootkit "Detections" is the most I have ever seen .

The Uninstall Log of HJT shows "Win XP SP3", so does that mean "It" is currently the OS !?

And speaking of the Uninstall Log, I see all of the items I recommended be uninstalled on

July 31 are still there . DEFINITELY "Java 2 Runtime Environment, SE v1.4.1_02" should be

uninstalled, along with any other Sun Java program, because this is a very serious security

risk and could possibly be a Cause of some of the Adware Programs that were detected

by SUPERAntiSpyware !? Should also uninstall "Java Web Start"; then can go to

http://www.java.com/ for the latest Version . Should also uninstall "Shareaza 2.3.1.0" and IF

want the latest Ver 2.4.0.0 , it's at http://shareaza.sourceforge.net . AND those "Symantec"

Items should be removed by using the "Norton Removal Tool" available at several Sites .

There were some "Dialers" in the SUPERAntiSpyware Log and their Presence can cause

very expensive long distance Charges; they appear to have gotten on his computer

because of "visits" to "Adult" Sites . IF you PLAY with FIRE, you are EVENTUALLY going to

get BURNT . Try and install "SpywareBlaster" from http://www.javacoolsoftware.com which

would PREVENT him from going to many of those kind of Sites .

For the BEST in what COUNTS in LIFE : http://www.tacf.org

Jammer09

336 posts since
Dec 28, 2007

6. Oct 10, 2008 8:47 AM

in response to: SpiritWind

Re: Need help making sure PC is clean before transfer of data to another HD before a format of HD and reinstall of WindowsXp?

Heilsa!

I have Malwarebytes Antimalware running a full scan right now when it is done I will remove whatever it finds then post the log from it here. I will do what you recommend with all of the other stuff. As for the adult content truly I didn't even look that hard, saw some but he is pretty active in the dating seen and he is a very good individual not some sick pervert or I wouldn't even be messing with him and have the friendship that I do with him. So I didn't really even pay attention to it. Now as for myself I do not frequent such sites. But anyway, I will ask him and recommend what you suggested about that situation and tell him about the dialers and see what he says about installing Spywarblaster.

Ves Heill! Farr Heill!

Honor Yourself with Truth & Fairness! Your Word is Your Bond! Give Your Word Power by Adhering to it!

SpiritWind

1,722 posts since
Aug 19, 2006

7. Oct 10, 2008 10:26 AM

in response to: Jammer09

Re: Need help making sure PC is clean before transfer of data to another HD before a format of HD and reinstall of WindowsXp?

Hi :

In my 1st Post I mentioned I did not see anything that would merit a DEFINITE re-format/

re-installation of the OS; that is because I was looking for either "Backdoor" or "Zlob" in the

Description . I did mention I saw some "serious" Ones and took a "sample" of 6 for further

investigation by means of a Google Search which I just completed . It turns out that BOTH

"ISA32" & "Rustock/LZX32" have "Backdoor" Capabilities, which is extremely dangerous .

When this Happens, I recommend to seriously consider what the Certified "Microsoft Most

Valuable Professionals" say at http://aumha.net/viewtopic.php?f=26&t=28580 . I

supplement this Info by what is written at

http://www.geekstogo.com/2007/10/03/what-is-a-backdoor-trojan . This "Situation" is

beyond my knowledge or experience to properly help . IF you want to try and avoid

"Flatten & Reinstall", then request help from Certified "Malware Removal Specialists"

such as the Ones at http://aumha.net/ . For Rootkit Removal, I recommend the

Volunteer Experts at http://www.castlecops.com/f233-Rootkit_Revelations.html .

For the BEST in what COUNTS in LIFE : http://www.tacf.org

Jammer09

336 posts since
Dec 28, 2007

8. Oct 10, 2008 12:46 PM

in response to: SpiritWind

Re: Need help making sure PC is clean before transfer of data to another HD before a format of HD and reinstall of WindowsXp?

Heilsa!

I went ahead and uninstalled Java, and Shareeza and install the latest installs for now. I will explain some things concerning Shareeza to him that I don't think he is privy to. I am also going to update and uninstall the other programs that you suggested in the other thread concerning the Net Framework etc... just to help me out keeping it as clean as possible for now. I am going to keep it as tight and clean as I can with this machine until we get professional help and the new HD. Oh, the scan with Malwarebytes Antimalware came out clean. So I will not post the log, if you still want it then I will post it no problem.

That is what we are going to do is a format and reinstall like the professionals are suggesting in the links you provided. BUT he wants to transfer some of his data over to the new Terabyte HD that he has coming and he won't accept a no to that answer. His music, pictures, videos, movies, docs. etc... Hence the cleaning part and by the way it looks I am going to need the professional help that you are suggesting if he is to transfer any of that stuff over to the new HD and back again.

He must have installed Sp3 without my knowledge when he tried it last time that I knew of the install failed. That was on my list to do.

Thanks again!

Ves Heill! Farr Heill!

Honor Yourself with Truth & Fairness! Your Word is Your Bond! Give Your Word Power by Adhering to it!

Jammer09

336 posts since
Dec 28, 2007

9. Oct 16, 2008 7:41 AM

in response to: Jammer09

Re: Need help making sure PC is clean before transfer of data to another HD before a format of HD and reinstall of WindowsXp?

Heilsa!

Well, I ran scans with SuperAntispyware and Malwarebytes Anti-Malware and both say it is clean and then CA has had its real time scans going also. I have run Rouge Remover on it also and it found nothing. I then again ran SuperAntispyware on it again yesterday and found nothing again. Even after explaining about Backdoor capabilities and hidden infections I couldn't talk him out of this next step without first getting some professional advice and help.

Last night we got an 500GB external HD instead of the Terabyte and we put his "My Documents" folder and all of the extra 200 GB internal HD, D:, that he had already had installed on it, on the new 500 GB external HD. So I have closed this question and am thanking everyone for their help! Thank you very much! We are going to format C: and D: on this machine now and reinstall WindowsXp all the way to Sp3 and then all of the programs he wants and needs and some maintenance programs I will need to keep it running as good and as clean as I know how to and can. I will post another thread on that situation and see if some would like to participate in and help out on that situation. I have been here before but he doesn't have any installation CDs from HP and due to that I may need some advice and help still.

Ves Heill! Farr Heill!

Honor Yourself with Truth & Fairness! Your Word is Your Bond! Give Your Word Power by Adhering to it!

Go to original post

Magazine

This Question is Answered

Oct 9, 2008 1:52 PM

Need help making sure PC is clean before transfer of data to another HD before a format of HD and reinstall of WindowsXp?

Actions

More Like This