[flavallee]

Those 2 programs are for combating and getting rid of malware and spyware. They are not antivirus programs. They're both frequently used and recommended in these forums.

A computer that's infested with malware and spyware can have all kinds of problems. That's why it needs to be kept in check and cleaned out.

I can't force you to install and make use of these programs.

------------------------------------------------------------

[Boothbay]

OK, I will do so i just wanted to be sure...that i will not be adding more stuff.

[flavallee]

Follow my instructions carefully in post #29.

It's important that you select and fix EVERYTHING that's found after each scan completes.

I don't know how much longer I'll be on-line tonight, so I'll get back to you tomorrow morning if I'm off-line before you return here and post the scan logs.

----------------------------------------------------------------

[Boothbay]

something weird..i went first for the Malware and the server is messed up...so i followed up with the other and had no problem with that one. So i googled, and there are a few other areas downloading Malware 1.41. going to one of those areas to download it, as it started another box appeared called Reimage repair...so now i am getting confused. I suspect you want me to run malware first..if I ever get it.why Hippo server allowed me to d/l that other one and not malware.?

[Boothbay]

i did not see anything where is said "fix everything"...just ignore, save logfile, purchase and removal ...i chose removal...what is with the purchase price offer? i thought this was free? Or is just the scan free?

[flavallee]

I just went to both filehippo sites that I previously gave you and clicked the green icon link at both sites and they work fine.

I don't know what sites you went to that you commented about in post #34, but it sounds like you downloaded and installed and ran some other program.

---------------------------------------------------------------

[Boothbay]

Well i did as you suggested partially. I don't understand what you mean by fixeverything command...i do not see such a tab on either one. I just completed the quick scan and all it shows are 3 box's where i am suppose to either check or leave uncheck. The check mark means to remove and quarantine. I don't confess that i know what to remove?

[flavallee]

Selecting and fixing EVERYTHING that's found is done by selecting(putting a checkmark) in the list of entries that's displayed after the scan finishes.

I've given the same download/install/update/scan/fix/log instructions to numerous people in these forums.

----------------------------------------------------------------

[Boothbay]

As for malware log, after clicking on the removal tab, it shows a blank..but there is shown all that i removed and quarantined in the quaranteed tab...is that what you need?


OK, here are the logs foSUPERAntiSpyware Scan Log

http://www.superantispyware.com
Generated 11/02/2009 at 08:51 AM
Application Version : 4.29.1004
Core Rules Database Version : 4217
Trace Rules Database Version: 2122
Scan type : Quick Scan
Total Scan Time : 00:08:52
Memory items scanned : 463
Memory threats detected : 0
Registry items scanned : 532
Registry threats detected : 25
File items scanned : 5617
File threats detected : 46
Adware.MyWebSearch
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
Adware.Tracking Cookie
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@www.x3track[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@atc.finestmktclick[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@apmebf[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@ad.wsod[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@ads.tcm[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@ar.atwola[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@advertising[2].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@zedo[2].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@chitika[2].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@www.findstuff[2].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@bs.serving-sys[3].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@specificclick[2].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@doubleclick[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@eyewonder[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@overture[2].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@adserver.adtechus[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@snip.www.findstuff[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@adknowledge[2].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@at.atwola[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@collective-media[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@ads.web.aol[3].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@ads.web.aol[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@ads.techguy[2].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@track.webbranddeals[2].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@fastclick[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@pointroll[2].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@ads.pointroll[2].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@trafficmp[3].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@serving-sys[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@specificmedia[3].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@cdn4.specificclick[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@atdmt[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@ads.bridgetrack[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@questionmarket[2].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@interclick[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@ad.yieldmanager[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@realmedia[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@tacoda[3].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@atwola[3].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@a1.interclick[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@mediaplex[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@revsci[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@content.yieldmanager[2].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@ar.atwola[2].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@www.googleadservices[1].txt
C:\Documents and Settings\Anthony Bruno\Cookies\anthony_bruno@yellowpages.112.2o7[1].txt
Adware.MyWebSearch/FunWebProducts
HKU\S-1-5-21-1060284298-1035525444-682003330-1004\SOFTWARE\FunWebProducts
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE#NextInsta nce
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#Serv ice
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#Lega cy
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#Conf igFlags
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#Clas s
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#Clas sGUID
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#Devi ceDesc
HKLM\SYSTEM\CurrentControlSet\Services\MyWebSearchService
HKLM\SYSTEM\CurrentControlSet\Services\MyWebSearchService#Type
HKLM\SYSTEM\CurrentControlSet\Services\MyWebSearchService#Start
HKLM\SYSTEM\CurrentControlSet\Services\MyWebSearchService#ErrorControl
HKLM\SYSTEM\CurrentControlSet\Services\MyWebSearchService#ImagePath
HKLM\SYSTEM\CurrentControlSet\Services\MyWebSearchService#DisplayName
HKLM\SYSTEM\CurrentControlSet\Services\MyWebSearchService#ObjectName
HKLM\SYSTEM\CurrentControlSet\Services\MyWebSearchService\Security
HKLM\SYSTEM\CurrentControlSet\Services\MyWebSearchService\Security#Security
HKLM\SYSTEM\CurrentControlSet\Services\MyWebSearchService\Enum
HKLM\SYSTEM\CurrentControlSet\Services\MyWebSearchService\Enum#0
HKLM\SYSTEM\CurrentControlSet\Services\MyWebSearchService\Enum#Count
HKLM\SYSTEM\CurrentControlSet\Services\MyWebSearchService\Enum#NextInstance
r both malware and superantispyware..

[flavallee]

SUPERAntiSpyware found and fixed several adware tracking cookies and a MyWebSearch infection.

I'd sure like to see what Malwarebytes found and fixed.

----------------------------------------------------------------

[Boothbay]

HI, like i said the log tab showed nothing but i came up with this just by doing a search...is this what you want?
There is another area in Malware that shows all the files that were removed by me and quarantined. Do you want that also?


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head><title>Download Malwarebytes Anti-Malware 1.41 - FileHippo.com</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="description" content="Fast downloads of the latest free software!" />
<meta name="keywords" content="download software freeware shareware program filehippo file hippo" />
<link rel="stylesheet" type="text/css" href="/inc/main4.css" />
<link rel="alternate" type="application/rss+xml" title="FileHippo.com RSS" href="http://feeds2.feedburner.com/filehippo" />
<link rel="search" type="application/opensearchdescription+xml" href="/inc/opensearch.xml" title="FileHippo.com" />
<link rel="icon" href="http://cache.filehippo.com/favicon.ico" type="image/x-icon" />
<script src="/inc/main2.js" type="text/javascript"></script>
</head>
<body>
<div id="upperbar">
<div id="links"><a href="https://www.filehippo.com/login/">Login</a></div>
<div id="searchbox">
<form name="f" action="/search">
<input type="text" id="q" name="q" maxlength="150" />
<input type="submit" id="search-submit" value="Search" />
</form></div></div>
<div id="header"><div id="head-logo"><a href="/"><img src="http://cache.filehippo.com/img/logo2.png" width="266" height="51" alt="FileHippo.com" /></a></div>
<div id="head-right"><a href="/updatechecker/"><img src="http://cache.filehippo.com/img/down2.gif" width="16" height="16" align="top" hspace="2" alt="Download Update Checker" /></a><a href="/updatechecker/">Download our FREE Update Checker <img src="http://cache.filehippo.com/img/new.gif" width="28" height="11" alt="New"/><br /> and scan your PC for the latest software updates!</a></div></div>
<div id="entire">
<div id="content">
<div class="pathbar">
<div style="float: left">
<a href="/">Home</a>
<strong>»</strong> <a href="/software/antispyware/">Anti-Spyware</a> <strong>»</strong> Malwarebytes Anti-Malware 1.41
</div>
<a id="setlink" href="javascript:toggleFilter('setarea','/filter_popup/')">[No Filter]</a>
</div>
<div id="setarea">
</div>
<div id="content-3col">
<div class="left">
<script type="text/javascript"><!--
google_ad_client = "pub-2649314828492070";
google_ad_width = 160;
google_ad_height = 600;
google_ad_format = "160x600_as";
google_ad_channel = "8976982018";
google_color_border = "ffffff";
google_color_bg = "ffffff";
google_color_link = "8c3421";
google_color_url = "666666";
google_color_text = "333333";
//--></script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>

</div>
<div class="middle">
<table cellpadding="0" cellspacing="0" border="0">
<tr>
<td valign="middle">
<img src="http://cache.filehippo.com/img/ex/12...lwarebytes.png" style="width:32px;height:32px;margin-left:5px;" alt="Download Malwarebytes Anti-Malware 1.41"/>
</td>
<td valign="middle">
<h1>Malwarebytes Anti-Malware 1.41</h1>
<em><a target="_blank" href="http://www.malwarebytes.org/mbam.php">Malwarebytes</a> - 3.86MB (Shareware)</em><br />
</td>
</tr>
</table>
<div id="head-nav">
<ul><li id="current"><a href="/download_malwarebytes_anti_malware/" title="Description">Description</a></li><li><a href="/download_malwarebytes_anti_malware/tech/" title="Technical">Technical</a></li><li><a href="/download_malwarebytes_anti_malware/changelog/" title="Change Log">Change Log</a></li></ul>
</div>
<div class="desc">
<p>Malwarebytes' Anti-Malware can detect and remove malware that even the most well known anti-virus and anti-malware applications fail to detect. Malwarebytes' Anti-Malware monitors every process and stops malicious processes before they even start.</p>
<p>Key Features:</p>
<ul>
<li>Support for Windows 2000, XP, and Vista (32-bit only).</li>
<li>Light speed quick scanning.</li>
<li>Ability to perform full scans for all drives.</li>
<li>Malwarebytes' Anti-Malware Protection Module. (requires registration)</li>
<li>Database updates released daily.</li>
<li>Quarantine to hold threats and restore them at your convenience.</li>
<li>Ignore list for both the scanner and Protection Module.</li>
<li>Settings to enhance your Malwarebytes' Anti-Malware performance.</li>
<li>A small list of extra utilities to help remove malware manually.</li>
<li>Multi-lingual support.</li>
<li>Works together with other anti-malware utilities.</li>
<li>Command line support for quick scanning.</li>
<li>Context menu integration to scan files on demand.</li>
</ul>
</div>
<!-- AddThis Button BEGIN -->
<div align="right">
<div class="addthis_toolbox addthis_default_style" style="width: 170px; margin-bottom: 8px;">
<a class="addthis_button_email"></a>
<a class="addthis_button_facebook"></a>
<a class="addthis_button_twitter"></a>
<a class="addthis_button_digg"></a>
<a class="addthis_button_delicious"></a>
<span class="addthis_separator">|</span>
<a href="http://www.addthis.com/bookmark.php?...489af271b7983b" class="addthis_button_compact">More</a>
</div>
</div>
<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis...983b"></script>
<script language="javascript" type="text/javascript">
var addthis_share = { url: 'http://www.filehippo.com/download_malwarebytes_anti_malware/6166/', title: 'Download Malwarebytes Anti-Malware 1.41 - FileHippo.com' }
</script>
<!-- AddThis Button END -->
<div class="progbox"><h2><a href="/screenshot/malwarebytes_anti_malware/">Screenshots</a></h2><div class="box-inner"><a class="scr" href="/screenshot/malwarebytes_anti_malware/6166_1/"><img src="http://cache.filehippo.com/img/ex/12...warebytes1.png" border="0" alt="Screenshot 1"/></a><a class="scr" href="/screenshot/malwarebytes_anti_malware/6166_2/"><img src="http://cache.filehippo.com/img/ex/12...warebytes2.png" border="0" alt="Screenshot 2"/></a><a class="scr" href="/screenshot/malwarebytes_anti_malware/6166_3/"><img src="http://cache.filehippo.com/img/ex/12...warebytes3.png" border="0" alt="Screenshot 3"/></a></div></div>
<div class="progbox">
<div class="box-latest">
<h2><a href="/latest/">Latest updates</a></h2>
<div class="box-inner">
<ul>
<li>31 Oct 09 - <a href="/download_firefox/"><img src="http://cache.filehippo.com/img/ex/1287t__firefox_35.png" alt=""/>Firefox 3.6 Beta 1</a></li><li>31 Oct 09 - <a href="/download_maxthon/"><img src="http://cache.filehippo.com/img/ex/55t__maxthon.png" alt=""/>Maxthon 2.5.10.2576 Beta</a></li><li>31 Oct 09 - <a href="/download_utorrent/"><img src="http://cache.filehippo.com/img/ex/10...Torrent1-8.png" alt=""/>uTorrent 1.8.5 RC3</a></li><li>31 Oct 09 - <a href="/download_daemon_tools/"><img src="http://cache.filehippo.com/img/ex/67t__DAEMONTools.png" alt=""/>DAEMON Tools Lite 4.35.5</a></li><li>30 Oct 09 - <a href="/download_limewire/"><img src="http://cache.filehippo.com/img/ex/1047t__limewire3.png" alt=""/>LimeWire Basic 5.4.0 Beta</a></li>
</ul>
</div>
<div class="more">
<a href="/latest/">View more&raquo;</a></div>
</div>
</div>
<div class="progbox-simple" title="Link to this page">
Copy the following code to link to this page:
<div class="cssform" title="Link to this page">
<input name="usercode" value="&lt;a href=&quot;http://www.filehippo.com/download_ma...t;&gt;Download Malwarebytes Anti-Malware from FileHippo.com&lt;/a&gt;" class="" readonly="readonly" type="text" style="width:100%"/>
</div>
</div>
</div>
<div class="right">
<div id="dlbox">
<a href="/download_malwarebytes_anti_malware/download/9eb2b706355f67bd36f95991900b5165/"><img src="http://cache.filehippo.com/img/down5.png" alt="Download"/></a><a href="/download_malwarebytes_anti_malware/download/9eb2b706355f67bd36f95991900b5165/"><b>Download<br/>Latest Version</b></a><br/><b>3.86MB</b><div class="hr"></div><center><table cellpadding="0" cellspacing="0"><tr><td align="left"><small>Latest Version<br/><b>Malwarebytes Anti-Malware 1.41</b><br/><br/>Old Versions<br/><a href="/download_malwarebytes_anti_malware/5983/">Malwarebytes Anti-Malware 1.40</a><br/>
<a href="/download_malwarebytes_anti_malware/5886/">Malwarebytes Anti-Malware 1.39</a><br/>
<a href="/download_malwarebytes_anti_malware/5791/">Malwarebytes Anti-Malware 1.38</a><br/>
<a href="/download_malwarebytes_anti_malware/5678/">Malwarebytes Anti-Malware 1.37</a><br/>
<a href="/download_malwarebytes_anti_malware/5471/">Malwarebytes Anti-Malware 1.36</a><br/>
<a href="/download_malwarebytes_anti_malware/5430/">Malwarebytes Anti-Malware 1.35</a><br/>
<a href="/download_malwarebytes_anti_malware/5239/">Malwarebytes Anti-Malware 1.34</a><br/>
<a href="/download_malwarebytes_anti_malware/5120/">Malwarebytes Anti-Malware 1.33</a><br/>
<a href="/download_malwarebytes_anti_malware/history/">View more...</a></small></td></tr></table></center>
<br />
<center>
<script type="text/javascript"><!--
google_ad_client = "pub-2649314828492070";
google_ad_width = 120;
google_ad_height = 240;
google_ad_format = "120x240_as";
google_ad_channel = "4799851943";
google_color_border = "ffffff";
google_color_bg = "ffffff";
google_color_link = "025EB3";
google_color_url = "025EB3";
google_color_text = "333333";
//--></script>
<script type="text/javascript"
src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>

</center>
</div>
</div>
<div style="clear:both;">
</div>
</div>

</div>
<div class="bottombar"><a href="/">Homepage</a>-<a href="/info/about/">About</a>-<a href="/info/disclaimer/">Terms and Conditions</a>-<a href="/info/advertise/">Advertise</a>-<a href="/updatechecker/">Update Checker</a></div>
</div>
<div class="copybar">
<div class="copy-left">
&copy; Copyright 2004-2009 FileHippo.com. All rights reserved.<br />
v2.140<!-- 20031WPWEB02 --></div>
<div class="copy-right">
<a href="/download_malwarebytes_anti_malware/rss/"><img src="http://cache.filehippo.com/img/feed4.png" width="16" height="16" align="top" alt="RSS"/> Malwarebytes Anti-Malware Updates</a><br/><a href="http://feeds.feedburner.com/filehippo"><img src="http://cache.filehippo.com/img/feed4.png" width="16" height="16" align="top" alt="RSS" /> All Updates</a></div>
</div>
<script type="text/javascript">
var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
</script>
<script type="text/javascript">
var pageTracker = _gat._getTracker("UA-5815250-1");
pageTracker._trackPageview();
</script>
</body></html>

[flavallee]

You sent me a bunch of HTML code which I have no use for.

You keep referring to the program by the name Malware and not by it's actual name, so I'm not even sure if you've downloaded and installed and run the correct program - Malwarebytes Anti-Malware 1.41.

----------------------------------------------------------------

[Boothbay]

I did the quick scan again this morning and here are the results...in a word , it found no malicious items

Malwarebytes' Anti-Malware 1.41
Database version: 3072
Windows 5.1.2600 Service Pack 3
11/3/2009 8:48:34 AM
mbam-log-2009-11-03 (08-48-34).txt
Scan type: Quick Scan
Objects scanned: 117166
Time elapsed: 12 minute(s), 13 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)

[flavallee]

That's the MBAM log I've been waiting for.

Can you post a new HijackThis log?

----------------------------------------------------------------

[Boothbay]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:06:50 AM, on 11/3/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\vVX1000.exe
C:\Program Files\Common Files\AOL\1218063427\ee\AOLSoftware.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\AOL 9.5\waol.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\aol\1218063427\ee\services\antiSpywareApp\ver2_0_32_1\AOLSP Scheduler.exe
C:\Program Files\Common Files\AOL\1218063427\EE\aolsoftware.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\NCH Software\BroadCam\broadCam.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Norton Ghost\Agent\VProSvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\dllhost.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\AOL 9.5\shellmon.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Common Files\AOL\Topspeed\3.0\aoltpsd3.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.macromedia.com/software/f...rRedirect.html
R3 - URLSearchHook: MapQuest Toolbar Search Class - {2731C719-B8C5-4282-993D-B5AD0E77531D} - (no file)
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - (no file)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Verizon Broadband Toolbar - {4E7BD74F-2B8D-469E-8CB0-AB60BB9AAE22} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\3.9.0\ViewBarBHO.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Verizon Broadband Toolbar - {4E7BD74F-2B8D-469E-8CB0-AB60BB9AAE22} - (no file)
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Common Files\Viewpoint\Toolbar Runtime\3.9.0\IEViewBar.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1218063427\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.5\AOL.EXE" -b
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &MapQuest Toolbar Search - C:\Documents and Settings\All Users\Application Data\MapQuest Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\PROGRA~1\AWS\WEATHE~1\Weather.exe (HKCU)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsof...?1238265281359
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1238265264406
O20 - AppInit_DLLs:
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: BroadCam Service (BroadCamService) - Unknown owner - C:\Program Files\NCH Software\BroadCam\broadCam.exe
O23 - Service: GEARSecurity - Unknown owner - C:\WINDOWS\System32\GEARSec.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: SymSnapService - Symantec - C:\Program Files\Norton Ghost\Shared\Drivers\SymSnapService.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
--
End of file - 9747 bytes