Register   FAQ   Login  

need help removing ultimate defender





AddThis Social Bookmark Button AddThis Feed Button

       2-spyware forum index -> Removal of spyware, adware and other parasites
Author Message
mikekazik1



Joined: 30 Aug 2007
Posts: 5

Post Post subject: need help removing ultimate defender Reply with quote

[size="3"]Just recently, I switched to avast home edition version 4.7. Everything was going well until my father infected the family computer with ultimate defender. I tried using avast to remove it, but when I clicked on the icon it said that the AAVM Subsystem detected an RPC error. So I removed it, deleted the Avast folder in program files, and installed a fresh copy. However, I kept getting the same message. I did a google search and I found some instructions that I thought would remove ultimate defender from my computer but they did not work. I also downloaded spybot search and destroy and hijackthis, but for some reason the program would not start up when I clicked on the icon after installation. However, I finally found a way to start up the avast virus scanner. I ran a scan and removed all of the infected files that I found. After that scan, I was able to run spybot and hijackthis. I did a regular scan with spybot search and destroy and I removed everything that I found. I also downloaded the free version of AVG Anti-Spyware. I ran a scan with that, removed all of the infected files, and saved the log results. I also went into start >run>regedit and I deleted all of the values that I could find for ultimate defender. Here is the log for the AVG antispyware program.

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 10:20:20 AM 2/9/2008

+ Scan result:



C:\Documents and Settings\Peter\Local Settings\Temp\ir_ext_temp_0\AutoPlay\Docs\Install.exe -> Adware.Casino : Ignored.
C:\Documents and Settings\Peter\Local Settings\Temp\ir_ext_temp_1\AutoPlay\Docs\Install.exe -> Adware.Casino : Ignored.
C:\Documents and Settings\Peter\Local Settings\Temp\ir_ext_temp_2\AutoPlay\Docs\Install.exe -> Adware.Casino : Ignored.
HKLM\SOFTWARE\Classes\WR -> Adware.Generic : Ignored.
:mozilla.247:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.247realmedia : Ignored.
:mozilla.248:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.247realmedia : Ignored.
:mozilla.327:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.328:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.329:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.330:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.331:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.332:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.333:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.334:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.335:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.336:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.337:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.338:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.339:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.340:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.341:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.342:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.343:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.344:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.345:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.457:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.671:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.2o7 : Ignored.
C:\Documents and Settings\Peter\Cookies\peter@pandasoftware.112.2o7[1].txt -> TrackingCookie.2o7 : Ignored.
:mozilla.459:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Adbrite : Ignored.
:mozilla.460:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Adbrite : Ignored.
:mozilla.461:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Adbrite : Ignored.
:mozilla.15:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.
:mozilla.22:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.
:mozilla.23:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.
:mozilla.24:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.
:mozilla.25:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.
:mozilla.27:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.
:mozilla.28:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.
:mozilla.29:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.
:mozilla.639:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Adtech : Ignored.
:mozilla.93:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Advertising : Ignored.
:mozilla.94:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Advertising : Ignored.
:mozilla.95:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Advertising : Ignored.
:mozilla.96:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Advertising : Ignored.
:mozilla.97:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Advertising : Ignored.
C:\Documents and Settings\Peter\Cookies\peter@advertising[1].txt -> TrackingCookie.Advertising : Ignored.
:mozilla.143:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Atdmt : Ignored.
:mozilla.390:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Atdmt : Ignored.
C:\Documents and Settings\Peter\Cookies\peter@atdmt[2].txt -> TrackingCookie.Atdmt : Ignored.
:mozilla.374:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Bluestreak : Ignored.
:mozilla.430:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Bridgetrack : Ignored.
:mozilla.431:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Bridgetrack : Ignored.
:mozilla.432:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Bridgetrack : Ignored.
C:\Documents and Settings\Peter\Cookies\peter@ads.bridgetrack[1].txt -> TrackingCookie.Bridgetrack : Ignored.
:mozilla.291:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Burstbeacon : Ignored.
:mozilla.285:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Burstnet : Ignored.
:mozilla.290:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Burstnet : Ignored.
:mozilla.292:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Burstnet : Ignored.
:mozilla.48:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.
:mozilla.49:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.
:mozilla.50:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.
:mozilla.51:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.
:mozilla.52:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.
:mozilla.53:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.
:mozilla.55:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.
:mozilla.56:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.
:mozilla.58:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.
:mozilla.59:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.
:mozilla.60:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.
:mozilla.656:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Clickhype : Ignored.
:mozilla.54:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Doubleclick : Ignored.
:mozilla.394:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Euroclick : Ignored.
:mozilla.395:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Euroclick : Ignored.
:mozilla.396:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Euroclick : Ignored.
:mozilla.397:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Euroclick : Ignored.
:mozilla.398:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Euroclick : Ignored.
C:\Documents and Settings\Peter\Cookies\peter@adopt.euroclick[1].txt -> TrackingCookie.Euroclick : Ignored.
:mozilla.16:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.
:mozilla.17:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.
:mozilla.18:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.
:mozilla.19:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.
:mozilla.20:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.
:mozilla.21:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.
:mozilla.156:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Gemius : Ignored.
:mozilla.157:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Gemius : Ignored.
C:\Documents and Settings\Peter\Cookies\peter@hit.gemius[2].txt -> TrackingCookie.Gemius : Ignored.
:mozilla.319:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.320:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.321:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.326:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.601:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.602:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Hitbox : Ignored.
:mozilla.201:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Hitslink : Ignored.
:mozilla.778:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Hotlog : Ignored.
:mozilla.563:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Imrworldwide : Ignored.
:mozilla.564:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Imrworldwide : Ignored.
:mozilla.770:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Liveperson : Ignored.
:mozilla.739:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Masterstats : Ignored.
:mozilla.354:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Mediaplex : Ignored.
:mozilla.355:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Mediaplex : Ignored.
:mozilla.567:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Overture : Ignored.
C:\Documents and Settings\Peter\Cookies\peter@perf.overture[1].txt -> TrackingCookie.Overture : Ignored.
:mozilla.627:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Paycounter : Ignored.
C:\Documents and Settings\Peter\Cookies\peter@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Ignored.
:mozilla.171:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Questionmarket : Ignored.
:mozilla.172:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Questionmarket : Ignored.
C:\Documents and Settings\Peter\Cookies\peter@questionmarket[2].txt -> TrackingCookie.Questionmarket : Ignored.
:mozilla.71:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.72:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.73:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.74:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.75:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.76:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.77:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.229:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.230:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.231:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.232:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.233:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.234:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.235:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.236:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.237:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.478:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.609:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.610:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.611:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Sexlist : Ignored.
:mozilla.777:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Spylog : Ignored.
:mozilla.550:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.551:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.552:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.553:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.554:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.555:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.556:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.557:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Statcounter : Ignored.
:mozilla.286:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Tacoda : Ignored.
:mozilla.287:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Tacoda : Ignored.
:mozilla.288:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Tacoda : Ignored.
:mozilla.289:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Tacoda : Ignored.
:mozilla.189:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignored.
:mozilla.377:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.378:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.379:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.380:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.381:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored.
C:\Documents and Settings\Peter\Cookies\peter@trafficmp[1].txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.747:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Trafic : Ignored.
:mozilla.100:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Tribalfusion : Ignored.
:mozilla.101:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Tribalfusion : Ignored.
:mozilla.98:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Tribalfusion : Ignored.
:mozilla.99:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Tribalfusion : Ignored.
:mozilla.704:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Webtrends : Ignored.
:mozilla.274:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Webtrendslive : Ignored.
:mozilla.614:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Yadro : Ignored.
:mozilla.131:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.132:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.134:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.135:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.136:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.137:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.138:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.139:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.140:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.
C:\Documents and Settings\Peter\Cookies\peter@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.26:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Zedo : Ignored.
:mozilla.30:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Zedo : Ignored.
:mozilla.31:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Zedo : Ignored.
:mozilla.32:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Zedo : Ignored.
:mozilla.33:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Zedo : Ignored.
:mozilla.34:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Zedo : Ignored.
:mozilla.35:C:\Documents and Settings\Peter\Application Data\Mozilla\Firefox\Profiles\xdsbel7r.default\cookies.txt -> TrackingCookie.Zedo : Ignored.

And here are the results from hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:26:21 PM, on 2/8/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
C:\WINDOWS\system32\braviax.exe
C:\Program Files\PeerGuardian2\pg2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\ImageStudio\LowLight.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\COMMON~1\Logitech\WebColct\WebColct.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
F2 - REG:system.ini: Shell=
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: (no name) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Speed racer] C:\Program Files\Creative\PlayCenter\CTSRReg.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [AudioHQ] C:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
O4 - HKLM\..\Run: [Onet.pl AutoUpdate] C:\Program Files\Common Files\Onet.pl\AutoUpdate.exe /tsr
O4 - HKLM\..\Run: [braviax] braviax.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [PeerGuardian] C:\Program Files\PeerGuardian2\pg2.exe
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [braviax] C:\WINDOWS\system32\braviax.exe
O4 - HKCU\..\Run: [Flircik] C:\Program Files\Onet\Flircik\Flircik.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1189374326623
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Services Client v.3.12) - http://gameadvisor.futuremark.com/global/msc3121.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: cru629.dat
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
O23 - Service: lxcj_device - - C:\WINDOWS\System32\lxcjcoms.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

--
End of file - 7293 bytes


::Report end



[/size]
Sat Feb 09, 2008 3:54 pm
Back to top
mikekazik1 View user's profile Send private message Send e-mail AIM Address MSN Messenger
 
       2-spyware forum index -> Removal of spyware, adware and other parasites All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




Recommended software:
Spyware Doctor
(91/100)
Spyware Doctor is a very powerful, but yet highly user-friendly spyware remover, made by PC Tools, reputable computer security experts. This product provides effective and easy-to-manage...
SUPERAntiSpyware
(89/100)
SUPERAntiSpyware is a powerful, highly effective spyware remover introducing advanced parasite detection and removal features along with reliable real-time protection. The program is not...
CounterSpy
(85/100)
CounterSpy is a powerful spyware remover based on revolutionary hybrid engine, which incorporates traditional anti-spyware and advanced antivirus engines. Such combination allows CounterSpy...
Malwarebytes Anti Malware
(75/100)
There are loads of malware removers on the net today and most of them are lightweight applications, which usually means they’re fast and don’t have many features. One such...
Windows Defender
(75/100)
Windows Defender is a free anti-spyware program made by the leading software company to add native spyware protection to its most popular product - the Microsoft Windows operating...
Encyclopedia of parasites: