1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Help Computer slowing down

Discussion in 'Virus & Other Malware Removal' started by bebe8141, Nov 4, 2007.

Thread Status:
Not open for further replies.
Advertisement
  1. bebe8141

    bebe8141 Thread Starter

    Joined:
    Aug 7, 2007
    Messages:
    15
    Hi I feel so bad because I was here before and i got help from you guys and my problems were solve as far as spyware but i have this nephew who is staying with me and i don't know what his done to the computer besides downloading games but my computer is acting funny I ran Highjackthis,SuperAntiSpyware and Combofix because i remember that this was some of the programs I had to run on the coputer last time so I will post the logs I had your help before and i was very please with the results you guys are the greatest Please forgive me i feel so bad to come for the second time with the same problem
    ==========================================================
    Logfile of HijackThis v1.99.1
    Scan saved at 1:08:15 AM, on 11/4/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16544)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\WINDOWS\system32\CTsvcCDA.exe
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\WINDOWS\system32\MsPMSPSv.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\DAP\DAP.EXE
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Dell\Media Experience\PCMService.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\NCLAUNCH.EXe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\Program Files\Google\Google Updater\GoogleUpdater.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\PROGRA~1\FREEDO~1\fdm.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/ymj/*http://www.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/ymj/*http://www.yahoo.com/ext/search/search.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/ymj/*http://www.yahoo.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaults/su/ymj/*http://www.yahoo.com
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
    O2 - BHO: Mouse Gestures - {A6A49249-57AE-4295-8D4D-18A9502C7D8E} - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
    O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdmcks.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
    O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
    O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe" /StartupJobs
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [NCLaunch] C:\WINDOWS\NCLAUNCH.EXe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
    O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
    O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
    O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
    O9 - Extra button: (no name) - {4E660F19-E91E-41e1-88EF-D1DFAB118F67} - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll
    O9 - Extra 'Tools' menuitem: Mouse Gestures... - {4E660F19-E91E-41e1-88EF-D1DFAB118F67} - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20070711/qtinstall.info.apple.com/qtactivex/qtplugin.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u2-windows-i586-jc.cab
    O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab
    O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O20 - Winlogon Notify: MCPClient - C:\WINDOWS\
    O20 - Winlogon Notify: WBSrv - C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

    --------------------------------------------------------------------------------------------------------
     
  2. bebe8141

    bebe8141 Thread Starter

    Joined:
    Aug 7, 2007
    Messages:
    15
    ComboFix 07-11-04.1 - Chuqui 2007-11-04 1:04:11.2 - NTFSx86
    Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.269 [GMT -5:00]
    Running from: C:\Downloads\ComboFix.exe
    * Created a new restore point
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Documents and Settings\All Users\Application Data\SeekmoSA
    C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSA.dat
    C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSA_kyf.dat
    C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSAAbout.mht
    C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSAau.dat
    C:\Documents and Settings\All Users\Application Data\SeekmoSA\SeekmoSAEULA.mht
    C:\Documents and Settings\Chuqui\Application Data\Seekmo
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\ustat\35fc.dat
    C:\Documents and Settings\Darito\Application Data\Seekmo
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\1.sdf
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\1057174.sdf
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\204385.sdf
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\819382.sdf
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\domains.txt
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\12772
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\13932
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\16173
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\168167
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\18906
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\29642
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\427075
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\59234
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\65770
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\745415
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\89075
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\91231
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\dynamic\ustat\35fb.dat
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\btntrans.idx
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\btntrans1.dat
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\buttondir.txt
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\components.cdf
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\cursors.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\d_icons_buttons_1000.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\d_icons_buttons_2000.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\d_icons_buttons_3000.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\d_icons_buttons_bar.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\d_icons_buttons_bbar1.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\d_icons_buttons_logos.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\d_icons_buttons_other.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\d_icons_weather.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\default.cdf
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_511745-514279.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_categorize.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_comparison.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_explorer-Mails.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_explorer-people.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_favorites.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_Games.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_Hide.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_hotbarcom.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_Hotmail.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_hsskin.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_Mails.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_new.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_premium.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_searchfor.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_searchgo.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_weather.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Default_yellowpages.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\email-def-511724-548964.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\email-def-511724-9595.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\email-t1-bg.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\icons2.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\ie_games_icon.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\ie_video.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\keywords.idx
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\keywords1.dat
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\layout.cdf
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\linkpathlegal.txt
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\progress.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\s_icons_buttons.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\sales_buttons.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\seekmo.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\seekmo_ie_menu.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\t2_bg.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\theweb.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\top7.cdf
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\Top7_theweb.mnu
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\2\tsd_bg.res
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\BtnTrans.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\BtnTrans1.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\buttondir.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\cursors.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\d_icons_buttons_1000.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\d_icons_buttons_2000.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\d_icons_buttons_3000.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\d_icons_buttons_bar.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\d_icons_buttons_bbar1.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\d_icons_buttons_logos.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\d_icons_buttons_other.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\d_icons_weather.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\default.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\email-t1-bg.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\icons2.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\ie_games_icon.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\ie_video.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\keywords.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\keywords1.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\layout.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\linkpathlegal.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\progress.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\s_icons_buttons.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\sales_buttons.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\samplegroups2.txt
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\samplegroups2.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\seekmo.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\seekmo_ie_menu.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\t2_bg.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\top7.xip
    C:\Documents and Settings\Darito\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\tsd_bg.xip
    C:\Documents and Settings\Tutti\Desktop\internet.lnk
    C:\Program Files\seekmo

    .
    ((((((((((((((((((((((((( Files Created from 2007-10-04 to 2007-11-04 )))))))))))))))))))))))))))))))
    .

    2007-11-02 12:56 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
    2007-11-02 12:55 <DIR> d-------- C:\Program Files\SUPERAntiSpyware
    2007-11-02 12:55 <DIR> d-------- C:\Documents and Settings\Chuqui\Application Data\SUPERAntiSpyware.com
    2007-11-01 22:57 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
    2007-10-30 22:41 <DIR> d-------- C:\Program Files\DivX
    2007-10-29 12:45 <DIR> d-------- C:\Documents and Settings\Darito\Application Data\Free Download Manager
    2007-10-27 01:17 <DIR> d-------- C:\Program Files\Global Star Software
    2007-10-24 21:29 <DIR> d-------- C:\Documents and Settings\Darito\Application Data\Apple Computer
    2007-10-23 19:58 <DIR> d-------- C:\Program Files\Eidos Interactive
    2007-10-21 16:52 <DIR> d-------- C:\Program Files\VUGames
    2007-10-20 19:52 <DIR> d-------- C:\Program Files\Common Files\Nullsoft
    2007-10-20 19:36 <DIR> d-------- C:\Program Files\speed-bit
    2007-10-16 18:33 <DIR> d-------- C:\Program Files\Rockstar Games
    2007-10-16 15:45 <DIR> d-------- C:\Program Files\Team6 game studios
    2007-10-14 17:16 <DIR> d-------- C:\Program Files\id Software
    2007-10-12 13:05 <DIR> d-------- C:\Program Files\Blubster Toolbar
    2007-10-12 13:05 <DIR> d-------- C:\Program Files\Blubster
    2007-10-11 17:50 <DIR> d-------- C:\Program Files\Common Files\Dell
    2007-10-11 17:50 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Dell
    2007-10-11 15:07 <DIR> d-------- C:\Program Files\IrfanView
    2007-10-09 21:31 <DIR> d-------- C:\Games
    2007-10-07 18:40 <DIR> d-------- C:\Program Files\Army National Guard
    2007-10-07 16:38 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Google Updater
    2007-10-06 22:31 <DIR> d-------- C:\WINDOWS\system32\LogFiles
    2007-10-06 22:31 103,736 --a------ C:\WINDOWS\system32\PnkBstrB.exe
    2007-10-06 22:31 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe
    2007-10-06 22:31 22,328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys
    2007-10-06 22:18 <DIR> d-------- C:\Program Files\Wolfenstein - Enemy Territory
    2007-10-06 18:43 <DIR> d-------- C:\Program Files\Toribash-2.3
    2007-10-06 18:14 <DIR> d-------- C:\Program Files\City Interactive
    2007-10-05 22:26 86,019 --a------ C:\WINDOWS\unvise32.exe
    2007-10-05 22:25 <DIR> d-------- C:\Program Files\Auxiliary Power
    2007-10-05 22:02 <DIR> d-------- C:\Program Files\Off Road Arena
    2007-10-05 21:41 <DIR> d-------- C:\Program Files\ReflexiveArcade
    2007-10-05 21:41 <DIR> d-------- C:\Program Files\Alien Shooter
    2007-10-04 16:05 <DIR> d-------- C:\Program Files\Common Files\Download Manager
    2007-10-04 16:05 <DIR> d-------- C:\Program Files\Coding Workshop Polyphonic Wizard
    2007-10-04 14:43 <DIR> d-------- C:\Documents and Settings\Tutti\Application Data\Apple Computer

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2007-11-04 06:04 --------- d-----w C:\Documents and Settings\Chuqui\Application Data\Free Download Manager
    2007-11-03 20:48 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
    2007-11-02 17:54 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
    2007-10-31 17:22 --------- d-----w C:\Documents and Settings\Chuqui\Application Data\LimeWire
    2007-10-30 20:31 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2007-10-30 20:29 --------- d-----w C:\Program Files\Activision
    2007-10-26 17:22 163,712 ----a-w C:\WINDOWS\system32\drivers\vidstub.sys
    2007-10-26 17:19 3,655,168 ----a-w C:\WINDOWS\system32\logonuiX.exe
    2007-10-25 03:34 45,056 ----a-w C:\WINDOWS\NCUNINST.EXe
    2007-10-21 19:12 --------- d-----w C:\Program Files\DAP
    2007-10-20 20:46 --------- d-----w C:\Program Files\EA SPORTS
    2007-10-16 00:06 --------- d-----w C:\Program Files\Common Files\SWF Studio
    2007-10-11 22:50 --------- d-----w C:\Program Files\Dell
    2007-10-07 21:39 --------- d-----w C:\Program Files\Google
    2007-10-07 03:09 --------- d-----w C:\Program Files\Free Download Manager
    2007-10-04 01:17 --------- d-----w C:\Documents and Settings\Tutti\Application Data\EarthLink
    2007-10-03 20:49 --------- d-----w C:\Program Files\Yahoo!
    2007-10-03 20:49 --------- d-----w C:\Documents and Settings\All Users\Application Data\YAHOO
    2007-10-03 10:36 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    2007-10-03 10:04 --------- d-----w C:\Program Files\Comodo
    2007-10-02 19:17 --------- d-----w C:\Documents and Settings\Tutti\Application Data\Comodo
    2007-10-02 19:17 --------- d-----w C:\Documents and Settings\All Users\Application Data\Comodo
    2007-10-02 18:34 --------- d-----w C:\Documents and Settings\All Users\Application Data\MailFrontier
    2007-10-02 08:29 --------- d-----w C:\Program Files\Real
    2007-10-02 08:29 --------- d-----w C:\Program Files\Common Files\xing shared
    2007-10-02 08:28 --------- d-----w C:\Program Files\Common Files\Real
    2007-10-02 07:54 --------- d-----w C:\Documents and Settings\Chuqui\Application Data\Joost
    2007-10-02 07:53 --------- d-----w C:\Program Files\Joost
    2007-10-01 21:49 --------- d-----w C:\Documents and Settings\All Users\Application Data\Yahoo!
    2007-10-01 19:00 --------- d-----w C:\Program Files\Plus!
    2007-10-01 19:00 --------- d-----w C:\Program Files\filesubmit
    2007-10-01 12:17 --------- d-----w C:\Program Files\MSXML 6.0
    2007-09-27 19:01 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
    2007-09-26 14:20 --------- d-----w C:\Documents and Settings\Chuqui\Application Data\CyberLink
    2007-09-26 01:12 --------- d-----w C:\Documents and Settings\Tutti\Application Data\CyberLink
    2007-09-26 01:11 --------- d-----w C:\Program Files\CyberLink
    2007-09-25 19:41 --------- d-----w C:\Documents and Settings\Tutti\Application Data\Free Download Manager
    2007-09-25 18:33 --------- d-----w C:\Documents and Settings\Tutti\Application Data\GetRightToGo
    2007-09-25 17:56 --------- d-----w C:\Program Files\Universal Interactive
    2007-09-25 17:56 --------- d-----w C:\Program Files\directx
    2007-09-23 03:38 --------- d-----w C:\Program Files\Java
    2007-09-23 03:37 --------- d-----w C:\Program Files\Common Files\Java
    2007-09-20 23:42 --------- d-----w C:\Program Files\Stardock
    2007-09-20 23:42 --------- d-----w C:\Program Files\Common Files\Stardock
    2007-09-20 22:12 --------- d-----w C:\Program Files\allTunes
    2007-09-20 22:11 --------- d-----w C:\Documents and Settings\All Users\Application Data\allTunes
    2007-09-18 23:22 12,528 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
    2007-09-17 01:16 --------- d-----w C:\Program Files\Common Files\Adobe
    2007-09-17 01:04 --------- d-----w C:\Program Files\L33TSig
    2007-09-12 17:24 --------- d-----w C:\Program Files\AviSynth 2.5
    2007-09-12 17:20 --------- d-----w C:\Program Files\eRightSoft
    2007-09-08 19:41 --------- d-----w C:\Documents and Settings\Chuqui\Application Data\Apple Computer
    2007-09-08 18:17 --------- d-----w C:\Program Files\Apple Software Update
    2007-09-08 18:17 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer
    2007-09-08 18:17 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple
    2007-09-08 17:23 --------- d-----w C:\Documents and Settings\Chuqui\Application Data\ScamBlocker
    2007-09-08 17:23 --------- d-----w C:\Documents and Settings\Chuqui\Application Data\EarthLink
    2007-09-06 21:27 --------- d-----w C:\Program Files\Monster Truck Fury
    2007-09-06 18:35 --------- d-----w C:\Program Files\Valusoft
    2007-09-06 18:26 --------- d-----w C:\Program Files\Aspyr
    2007-09-06 10:09 801,144 ----a-w C:\WINDOWS\system32\aswBoot.exe
    2007-09-06 10:05 94,416 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
    2007-09-06 10:05 92,848 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys
    2007-09-06 10:03 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
    2007-09-06 10:02 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
    2007-09-06 10:00 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr
    2007-09-06 10:00 26,624 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
    2007-08-24 16:36 50,688 ----a-w C:\WINDOWS\system32\wbhelp2.dll
    2007-08-21 06:15 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
    2006-05-03 09:06:54 163,328 --sh--r C:\WINDOWS\system32\flvDX.dll
    2007-02-21 10:47:16 31,232 --sh--r C:\WINDOWS\system32\msfDX.dll
    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-06-28 23:43]
    "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-08-23 23:02]
    "DownloadAccelerator"="C:\Program Files\DAP\DAP.exe" [2007-10-20 19:33]
    "TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2007-10-02 03:28]
    "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-09-06 05:06]
    "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 02:06]
    "PCMService"="C:\Program Files\Dell\Media Experience\PCMService.exe" [2003-08-26 18:47]
    "DwlClient"="C:\Program Files\Common Files\Dell\EUSW\Support.exe" [2003-10-07 15:21]
    "BootSkin Startup Jobs"="C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe" [2004-04-26 15:21]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 07:00]
    "NCLaunch"="C:\WINDOWS\NCLAUNCH.EXe" [2006-09-05 19:43]
    "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 11:24]
    "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-10-07 16:38]
    "SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-02-27 10:39]

    C:\Documents and Settings\Tutti\Start Menu\Programs\Startup\
    Stardock ObjectDock.lnk - C:\Program Files\Stardock\ObjectDock\ObjectDock.exe [2007-09-20 18:42:06]

    C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
    Google Updater.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2007-10-07 16:38:15]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 11:55 77824]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
    "UIHost"="C:\\WINDOWS\\system32\\logonuiX.exe"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
    C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-02-27 10:39 282624 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MCPClient]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
    C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll 2007-09-23 09:10 143360 C:\Program Files\Stardock\Object Desktop\WindowBlinds\WbSrv.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=wbsys.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^ymetray.lnk]
    backup=C:\WINDOWS\pss\ymetray.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AsioReg]
    REGSVR32.EXE /S CTASIO.DLL

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BootSkin Startup Jobs]
    "C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe" /StartupJobs

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTDVDDet]
    C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
    C:\WINDOWS\system32\ctfmon.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTHelper]
    CTHELPER.EXE

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTSysVol]
    C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Free Download Manager]
    C:\Program Files\Free Download Manager\fdm.exe -autorun

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Utility]
    Logi_MwX.Exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogonStudio]
    "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
    RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
    RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
    nwiz.exe /install

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    "C:\Program Files\QuickTime\qttask.exe" -atboottime

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg]
    C:\WINDOWS\UpdReg.EXE

    R2 X4HSX32;X4HSX32;\??\C:\Program Files\GameTap\bin\Release\X4HSX32.Sys
    S3 EverestDriver;Lavalys EVEREST Kernel Driver;\??\C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt
    S3 ewdmaudn;ewdmaudn;\??\C:\DOCUME~1\Tutti\LOCALS~1\Temp\ewdmaudn.sys

    .
    Contents of the 'Scheduled Tasks' folder
    "2007-11-03 11:11:12 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
    - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
    .
    **************************************************************************

    catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2007-11-04 01:06:06
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    Completion time: 2007-11-04 1:06:38
    C:\ComboFix-quarantined-files.txt ... 2007-08-29 23:43
    C:\ComboFix2.txt ... 2007-08-29 23:43
    .
    --- E O F ---
    --------------------------------------------------------------------------------------------------------
     
  3. bebe8141

    bebe8141 Thread Starter

    Joined:
    Aug 7, 2007
    Messages:
    15
    SUPERAntiSpyware Scan Log
    Generated 11/03/2007 at 04:38 AM

    Application Version : 3.6.1000

    Core Rules Database Version : 3336
    Trace Rules Database Version: 1337

    Scan type : Complete Scan
    Total Scan Time : 06:50:58

    Memory items scanned : 525
    Memory threats detected : 8
    Registry items scanned : 5024
    Registry threats detected : 445
    File items scanned : 94272
    File threats detected : 580

    Trojan.Smitfraud Variant
    C:\WINDOWS\SYSTEM32\YNEID.DLL
    C:\WINDOWS\SYSTEM32\YNEID.DLL
    HKLM\Software\Classes\CLSID\{41591d7f-9e25-4bd0-af53-9908fcf3a738}
    HKCR\CLSID\{41591D7F-9E25-4BD0-AF53-9908FCF3A738}
    HKCR\CLSID\{41591D7F-9E25-4BD0-AF53-9908FCF3A738}\InProcServer32
    HKCR\CLSID\{41591D7F-9E25-4BD0-AF53-9908FCF3A738}\InProcServer32#ThreadingModel
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler#{41591d7f-9e25-4bd0-af53-9908fcf3a738}

    Trojan.Media-Codec/V4
    C:\PROGRAM FILES\VIDEO ADD-ON\ISFMNTR.EXE
    C:\PROGRAM FILES\VIDEO ADD-ON\ISFMNTR.EXE
    C:\PROGRAM FILES\VIDEO ADD-ON\ISFMM.EXE
    C:\PROGRAM FILES\VIDEO ADD-ON\ISFMM.EXE
    C:\PROGRAM FILES\VIDEO ADD-ON\ISFMDL.DLL
    C:\PROGRAM FILES\VIDEO ADD-ON\ISFMDL.DLL
    HKLM\Software\Classes\CLSID\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
    HKCR\CLSID\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
    HKCR\CLSID\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
    HKCR\CLSID\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}\Implemented Categories
    HKCR\CLSID\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}\Implemented Categories\{00021493-0000-0000-C000-000000000046}
    HKCR\CLSID\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}\InprocServer32
    HKCR\CLSID\{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}\InprocServer32#ThreadingModel
    C:\PROGRAM FILES\VIDEO ADD-ON\ICTMDL.DLL
    HKLM\Software\Classes\CLSID\{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
    HKCR\CLSID\{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
    HKCR\CLSID\{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}#xxx
    HKCR\CLSID\{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}\InprocServer32
    HKCR\CLSID\{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}\InprocServer32#ThreadingModel
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B499D34E-58EF-4927-AB9F-7AF52B2C4C82}
    HKLM\Software\Microsoft\Internet Explorer\Toolbar#{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
    HKU\S-1-5-21-746137067-261903793-839522115-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser#{6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16}
    C:\Program Files\Video Add-on\ictun.exe
    C:\Program Files\Video Add-on\isfun.exe
    C:\Program Files\Video Add-on\ot.ico
    C:\Program Files\Video Add-on\ts.ico
    C:\Program Files\Video Add-on\uninst.exe
    C:\Program Files\Video Add-on
    HKU\S-1-5-21-746137067-261903793-839522115-1004\Software\Online Add-on
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE Custom Tools
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE Custom Tools#DisplayName
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE Custom Tools#UninstallString
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE Safety Features
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE Safety Features#DisplayName
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IE Safety Features#UninstallString

    Adware.180solutions/Seekmo
    C:\PROGRAM FILES\SEEKMO\BIN\10.0.370.0\HOSTIE.DLL
    C:\PROGRAM FILES\SEEKMO\BIN\10.0.370.0\HOSTIE.DLL
    C:\PROGRAM FILES\SEEKMO\BIN\10.0.370.0\TOOLBAR.DLL
    C:\PROGRAM FILES\SEEKMO\BIN\10.0.370.0\TOOLBAR.DLL
    C:\PROGRAM FILES\SEEKMO\BIN\10.0.370.0\OEADDON.EXE
    C:\PROGRAM FILES\SEEKMO\BIN\10.0.370.0\OEADDON.EXE
    [SeekmoOE] C:\PROGRAM FILES\SEEKMO\BIN\10.0.370.0\OEADDON.EXE
    HKU\S-1-5-21-746137067-261903793-839522115-1004\Software\seekmo
    HKU\S-1-5-21-746137067-261903793-839522115-1005\Software\seekmo
    HKLM\Software\seekmo
    HKLM\Software\seekmo\Seekmo
    HKLM\Software\seekmo\Seekmo\Install
    HKLM\Software\seekmo\Seekmo\Install#StartInstall
    HKLM\Software\seekmo\Seekmo\Install#IID
    HKLM\Software\seekmo\Seekmo\Install#IID_prv
    HKLM\Software\seekmo\Seekmo\Install#CreateDate
    HKLM\Software\seekmo\Seekmo\Install#CreateDateDW
    HKLM\Software\seekmo\Seekmo\MachineInfo
    HKLM\Software\seekmo\Seekmo\MachineInfo#CID
    HKLM\Software\seekmo\Seekmo\MachineInfo#CID_prv
    HKLM\Software\seekmo\Seekmo\PI
    HKLM\Software\seekmo\Seekmo\PI\3.2
    HKLM\Software\seekmo\Seekmo\PI\3.2#PID00
    HKLM\Software\seekmo\Seekmo\Updates
    HKLM\Software\seekmo\Seekmo\Updates#InstallDate
    HKCR\Seekmo.DesktopFlash
    HKCR\Seekmo.DesktopFlash\CLSID
    HKCR\Seekmo.DesktopFlash\CurVer
    HKCR\Seekmo.DesktopFlash.1
    HKCR\Seekmo.DesktopFlash.1\CLSID
    HKCR\SeekmoAX.ClientDetector
    HKCR\SeekmoAX.ClientDetector\CLSID
    HKCR\SeekmoAX.ClientDetector\CurVer
    HKCR\SeekmoAX.ClientDetector.1
    HKCR\SeekmoAX.ClientDetector.1\CLSID
    HKCR\SeekmoAX.UserProfiles
    HKCR\SeekmoAX.UserProfiles\CLSID
    HKCR\SeekmoAX.UserProfiles\CurVer
    HKCR\SeekmoAX.UserProfiles.1
    HKCR\SeekmoAX.UserProfiles.1\CLSID
    HKCR\CLSID\{1F158A1E-A687-4a11-9679-B3AC64B86A1C}
    HKCR\CLSID\{1F158A1E-A687-4a11-9679-B3AC64B86A1C}\Control
    HKCR\CLSID\{1F158A1E-A687-4a11-9679-B3AC64B86A1C}\InprocServer32
    HKCR\CLSID\{1F158A1E-A687-4a11-9679-B3AC64B86A1C}\InprocServer32#ThreadingModel
    HKCR\CLSID\{1F158A1E-A687-4a11-9679-B3AC64B86A1C}\MiscStatus
    HKCR\CLSID\{1F158A1E-A687-4a11-9679-B3AC64B86A1C}\MiscStatus\1
    HKCR\CLSID\{1F158A1E-A687-4a11-9679-B3AC64B86A1C}\ProgID
    HKCR\CLSID\{1F158A1E-A687-4a11-9679-B3AC64B86A1C}\Programmable
    HKCR\CLSID\{1F158A1E-A687-4a11-9679-B3AC64B86A1C}\ToolboxBitmap32
    HKCR\CLSID\{1F158A1E-A687-4a11-9679-B3AC64B86A1C}\TypeLib
    HKCR\CLSID\{1F158A1E-A687-4a11-9679-B3AC64B86A1C}\Version
    HKCR\CLSID\{1F158A1E-A687-4a11-9679-B3AC64B86A1C}\VersionIndependentProgID
    HKCR\CLSID\{914A8F99-38E4-47ec-B875-2B0653516030}
    HKCR\CLSID\{914A8F99-38E4-47ec-B875-2B0653516030}#AppID
    HKCR\CLSID\{914A8F99-38E4-47ec-B875-2B0653516030}\LocalServer32
    HKCR\CLSID\{914A8F99-38E4-47ec-B875-2B0653516030}\ProgID
    HKCR\CLSID\{914A8F99-38E4-47ec-B875-2B0653516030}\Programmable
    HKCR\CLSID\{914A8F99-38E4-47ec-B875-2B0653516030}\TypeLib
    HKCR\CLSID\{914A8F99-38E4-47ec-B875-2B0653516030}\VersionIndependentProgID
    HKCR\CLSID\{E313F5DC-CFE7-4568-84A4-C76653547571}
    HKCR\CLSID\{E313F5DC-CFE7-4568-84A4-C76653547571}\InprocServer32
    HKCR\CLSID\{E313F5DC-CFE7-4568-84A4-C76653547571}\InprocServer32#ThreadingModel
    HKCR\CLSID\{E313F5DC-CFE7-4568-84A4-C76653547571}\ProgID
    HKCR\CLSID\{E313F5DC-CFE7-4568-84A4-C76653547571}\Programmable
    HKCR\CLSID\{E313F5DC-CFE7-4568-84A4-C76653547571}\TypeLib
    HKCR\CLSID\{E313F5DC-CFE7-4568-84A4-C76653547571}\VersionIndependentProgID
    HKCR\TypeLib\{995E885E-3FF5-4F66-A107-8BFB3A0F8F12}
    HKCR\TypeLib\{995E885E-3FF5-4F66-A107-8BFB3A0F8F12}\1.0
    HKCR\TypeLib\{995E885E-3FF5-4F66-A107-8BFB3A0F8F12}\1.0\0
    HKCR\TypeLib\{995E885E-3FF5-4F66-A107-8BFB3A0F8F12}\1.0\0\win32
    HKCR\TypeLib\{995E885E-3FF5-4F66-A107-8BFB3A0F8F12}\1.0\FLAGS
    HKCR\TypeLib\{995E885E-3FF5-4F66-A107-8BFB3A0F8F12}\1.0\HELPDIR
    HKCR\TypeLib\{FBB40FDF-B715-4342-AB82-244ECC66E979}
    HKCR\TypeLib\{FBB40FDF-B715-4342-AB82-244ECC66E979}\1.0
    HKCR\TypeLib\{FBB40FDF-B715-4342-AB82-244ECC66E979}\1.0\0
    HKCR\TypeLib\{FBB40FDF-B715-4342-AB82-244ECC66E979}\1.0\0\win32
    HKCR\TypeLib\{FBB40FDF-B715-4342-AB82-244ECC66E979}\1.0\FLAGS
    HKCR\TypeLib\{FBB40FDF-B715-4342-AB82-244ECC66E979}\1.0\HELPDIR
    HKCR\Interface\{BD5258AF-20AE-4BD3-B748-B2851ACA7335}
    HKCR\Interface\{BD5258AF-20AE-4BD3-B748-B2851ACA7335}\ProxyStubClsid
    HKCR\Interface\{BD5258AF-20AE-4BD3-B748-B2851ACA7335}\ProxyStubClsid32
    HKCR\Interface\{BD5258AF-20AE-4BD3-B748-B2851ACA7335}\TypeLib
    HKCR\Interface\{BD5258AF-20AE-4BD3-B748-B2851ACA7335}\TypeLib#Version
    HKCR\AppId\SeekmoSA_df.exe
    HKCR\AppId\SeekmoSA_df.exe#AppID
    HKCR\AppId\{4A40E8FC-C7E4-4F57-9FA4-85DD77402897}
    HKU\S-1-5-21-746137067-261903793-839522115-1004\Software\seekmosa
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run#SeekmoOE [ C:\Program Files\Seekmo\bin\10.0.370.0\OEAddOn.exe ]
    C:\Program Files\Seekmo\bin\10.0.370.0\Srv.exe
    C:\Program Files\Seekmo\bin\10.0.370.0
    C:\Program Files\Seekmo\bin
    C:\Program Files\Seekmo
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\IESkins
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\HostOI\dynamic
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\HostOI\static
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\HostOI
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\HostOL\dynamic
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\HostOL\static
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\HostOL
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\1.sdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\1057174.sdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\122092.sdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\1388487.sdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\1408541.sdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\204385.sdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\2681326.sdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\3422350.sdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\367054.sdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\536070.sdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\600583.sdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\611317.sdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\625696.sdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\890068.sdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\domains.txt
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\1000048404
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\1000048504
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\1000084494
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\1058
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\114427
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\116250
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\116977
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\118207
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\118874
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\12772
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\13562
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\153363
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\15622
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\16087
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\16176
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\166329
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\168167
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\17063
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\18275
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\18906
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\19650
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\202699
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\20304
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\20613
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\21060
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\233324
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\250476
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\250532
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\251438
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\26335
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\27503
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\277907
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\28026
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\28056
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\286256
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\290893
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\29115
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\297534
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\3048
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\30854
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\32122
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\32290
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\32547
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\3338
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\34186
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\34947
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\34952
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\36247
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\39228
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\39245
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\402844
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\41952
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\44458
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\471072
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\475788
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\477253
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\490217
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\496386
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\4974
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\4975
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\50548
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\51194
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\51495
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\52335
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\531510
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\53481
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\53501
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\54473
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\578458
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\579123
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\57966
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\59221
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\59231
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\59435
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\59844
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\61779
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\61837
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\639731
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\64444
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\65770
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\6602
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\68257
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\6873
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\702282
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\70650
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\72123
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\733622
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\737950
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\744599
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\744793
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\744869
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\744930
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\744977
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\745189
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\745242
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\745256
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\745304
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\745356
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\745433
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\748002
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\748176
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\748354
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\748405
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\78600
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\79257
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\79972
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\80061
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\82646
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\83463
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\8438
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\84449
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\87499
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\89075
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\90009
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\93934
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\93958
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML\95716
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\TooltipXML
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\ustat\35fb.dat
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic\ustat
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\dynamic
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\btntrans.idx
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\btntrans1.dat
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\buttondir.txt
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\components.cdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\cursors.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\default.cdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_511745-514279.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_categorize.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_comparison.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_explorer-Mails.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_explorer-people.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_favorites.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_Games.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_Hide.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_hotbarcom.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_Hotmail.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_hsskin.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_Mails.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_new.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_premium.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_searchfor.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_searchgo.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_weather.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Default_yellowpages.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\d_icons_buttons_1000.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\d_icons_buttons_2000.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\d_icons_buttons_3000.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\d_icons_buttons_bar.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\d_icons_buttons_bbar1.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\d_icons_buttons_logos.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\d_icons_buttons_other.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\d_icons_weather.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\email-def-511724-548964.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\email-def-511724-9595.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\email-t1-bg.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\icons2.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\ie_games_icon.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\ie_video.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\keywords.idx
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\keywords1.dat
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\layout.cdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\linkpathlegal.txt
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\progress.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\sales_buttons.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\seekmo.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\seekmo_ie_menu.res
     
  4. bebe8141

    bebe8141 Thread Starter

    Joined:
    Aug 7, 2007
    Messages:
    15
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\s_icons_buttons.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\t2_bg.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\theweb.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\top7.cdf
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\Top7_theweb.mnu
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1\tsd_bg.res
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\1
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\BtnTrans.idx
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\BtnTrans.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\BtnTrans1.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\buttondir.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\cursors.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\default.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\d_icons_buttons_1000.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\d_icons_buttons_2000.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\d_icons_buttons_3000.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\d_icons_buttons_bar.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\d_icons_buttons_bbar1.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\d_icons_buttons_logos.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\d_icons_buttons_other.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\d_icons_weather.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\email-t1-bg.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\icons2.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\ie_games_icon.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\ie_video.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\keywords.idx
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\keywords.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\keywords1.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\layout.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\linkpathlegal.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\progress.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\sales_buttons.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\samplegroups2.txt
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\samplegroups2.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\seekmo.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\seekmo_ie_menu.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\s_icons_buttons.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\t2_bg.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\top7.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad\tsd_bg.xip
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static\DownLoad
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo\static
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0\Seekmo
    C:\Documents and Settings\Chuqui\Application Data\Seekmo\v3.0
    C:\Documents and Settings\Chuqui\Application Data\Seekmo
    C:\Documents and Settings\All Users\Start Menu\Programs\Seekmo\Reset Cursor.lnk
    C:\Documents and Settings\All Users\Start Menu\Programs\Seekmo\Seekmo Customer Support Center.lnk
    C:\Documents and Settings\All Users\Start Menu\Programs\Seekmo\Seekmo Uninstall Instructions.lnk
    C:\Documents and Settings\All Users\Start Menu\Programs\Seekmo
    C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS\NPCLNTAX_SEEKMOSA.DLL
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP89\A0083234.DLL
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP89\A0083235.DLL
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP89\A0083236.DLL
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP89\A0083238.EXE
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP89\A0083239.EXE
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP89\A0083240.DLL
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP89\A0083273.DLL
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP89\A0083274.EXE
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP89\A0083275.DLL
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP89\A0083276.DLL

    Adware.180solutions/ZangoSearch
    C:\PROGRAM FILES\SEEKMO\BIN\10.0.370.0\CORESRV.DLL
    C:\PROGRAM FILES\SEEKMO\BIN\10.0.370.0\CORESRV.DLL
    C:\DOWNLOADS\SETUP(1).EXE
    C:\DOWNLOADS\SETUP(2).EXE
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP46\A0033220.EXE
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP46\A0033221.DLL
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP46\A0033223.DLL
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP46\A0033225.DLL
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP46\A0033226.EXE
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP46\A0033227.EXE
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP46\A0033228.EXE
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP46\A0033229.DLL
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP46\A0033236.DLL
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP46\A0033237.DLL
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP46\A0033239.EXE
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP46\A0033240.DLL
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{27136DC5-F94C-4448-92CB-FF228F3131EC}\RP46\A0033241.DLL

    Adware.Zango Toolbar/Hb
    HKLM\Software\Classes\CLSID\{07AA283A-43D7-4CBE-A064-32A21112D94D}
    HKCR\CLSID\{07AA283A-43D7-4CBE-A064-32A21112D94D}
    HKCR\CLSID\{07AA283A-43D7-4CBE-A064-32A21112D94D}
    HKCR\CLSID\{07AA283A-43D7-4CBE-A064-32A21112D94D}\InprocServer32
    HKCR\CLSID\{07AA283A-43D7-4CBE-A064-32A21112D94D}\InprocServer32#ThreadingModel
    HKCR\CLSID\{07AA283A-43D7-4CBE-A064-32A21112D94D}\ProgID
    HKCR\CLSID\{07AA283A-43D7-4CBE-A064-32A21112D94D}\Programmable
    HKCR\CLSID\{07AA283A-43D7-4CBE-A064-32A21112D94D}\TypeLib
    HKCR\CLSID\{07AA283A-43D7-4CBE-A064-32A21112D94D}\VersionIndependentProgID
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07AA283A-43D7-4CBE-A064-32A21112D94D}
    HKLM\Software\Microsoft\Internet Explorer\Toolbar#{07AA283A-43D7-4CBE-A064-32A21112D94D}
    HKCR\HostIE.Bho.1
    HKCR\HostIE.Bho.1\CLSID
    HKCR\HostIE.Bho
    HKCR\HostIE.Bho\CLSID
    HKCR\HostIE.Bho\CurVer
    HKCR\TypeLib\{087C4054-0A2B-4F35-B0DB-BED3E21650F4}
    HKCR\TypeLib\{087C4054-0A2B-4F35-B0DB-BED3E21650F4}\1.0
    HKCR\TypeLib\{087C4054-0A2B-4F35-B0DB-BED3E21650F4}\1.0\0
    HKCR\TypeLib\{087C4054-0A2B-4F35-B0DB-BED3E21650F4}\1.0\0\win32
    HKCR\TypeLib\{087C4054-0A2B-4F35-B0DB-BED3E21650F4}\1.0\FLAGS
    HKCR\TypeLib\{087C4054-0A2B-4F35-B0DB-BED3E21650F4}\1.0\HELPDIR
    HKU\S-1-5-21-746137067-261903793-839522115-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser#{07AA283A-43D7-4CBE-A064-32A21112D94D}
    HKU\S-1-5-21-746137067-261903793-839522115-1005\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser#{07AA283A-43D7-4CBE-A064-32A21112D94D}
    HKCR\CoreSrv.CoreServices
    HKCR\CoreSrv.CoreServices\CLSID
    HKCR\CoreSrv.CoreServices\CurVer
    HKCR\CoreSrv.CoreServices.1
    HKCR\CoreSrv.CoreServices.1\CLSID
    HKCR\CoreSrv.LfgAx
    HKCR\CoreSrv.LfgAx\CLSID
    HKCR\CoreSrv.LfgAx\CurVer
    HKCR\CoreSrv.LfgAx.1
    HKCR\CoreSrv.LfgAx.1\CLSID
    HKCR\HBMain.CommBand
    HKCR\HBMain.CommBand\CLSID
    HKCR\HBMain.CommBand\CurVer
    HKCR\HBMain.CommBand.1
    HKCR\HBMain.CommBand.1\CLSID
    HKCR\hbr.HbMain
    HKCR\hbr.HbMain\CLSID
    HKCR\hbr.HbMain\CurVer
    HKCR\hbr.HbMain.1
    HKCR\hbr.HbMain.1\CLSID
    HKCR\HostOL.MailAnim
    HKCR\HostOL.MailAnim\CLSID
    HKCR\HostOL.MailAnim\CurVer
    HKCR\HostOL.MailAnim.1
    HKCR\HostOL.MailAnim.1\CLSID
    HKCR\HostOL.WebmailSend
    HKCR\HostOL.WebmailSend\CLSID
    HKCR\HostOL.WebmailSend\CurVer
    HKCR\HostOL.WebmailSend.1
    HKCR\HostOL.WebmailSend.1\CLSID
    HKCR\InstIE.HbInstObj
    HKCR\InstIE.HbInstObj\CLSID
    HKCR\InstIE.HbInstObj\CurVer
    HKCR\InstIE.HbInstObj.1
    HKCR\InstIE.HbInstObj.1\CLSID
    HKCR\Srv.CoreServices
    HKCR\Srv.CoreServices\CLSID
    HKCR\Srv.CoreServices\CurVer
    HKCR\Srv.CoreServices.1
    HKCR\Srv.CoreServices.1\CLSID
    HKCR\Toolbar.HtmlMenuUI
    HKCR\Toolbar.HtmlMenuUI\CLSID
    HKCR\Toolbar.HtmlMenuUI\CurVer
    HKCR\Toolbar.HtmlMenuUI.1
    HKCR\Toolbar.HtmlMenuUI.1\CLSID
    HKCR\Toolbar.ToolbarCtl
    HKCR\Toolbar.ToolbarCtl\CLSID
    HKCR\Toolbar.ToolbarCtl\CurVer
    HKCR\Toolbar.ToolbarCtl.1
    HKCR\Toolbar.ToolbarCtl.1\CLSID
    HKCR\CLSID\{5B2E150D-4C8A-40E4-8C36-DD9C02771C67}
    HKCR\CLSID\{5B2E150D-4C8A-40E4-8C36-DD9C02771C67}\InprocServer32
    HKCR\CLSID\{5B2E150D-4C8A-40E4-8C36-DD9C02771C67}\InprocServer32#ThreadingModel
    HKCR\CLSID\{5B2E150D-4C8A-40E4-8C36-DD9C02771C67}\ProgID
    HKCR\CLSID\{5B2E150D-4C8A-40E4-8C36-DD9C02771C67}\Programmable
    HKCR\CLSID\{5B2E150D-4C8A-40E4-8C36-DD9C02771C67}\TypeLib
    HKCR\CLSID\{5B2E150D-4C8A-40E4-8C36-DD9C02771C67}\VersionIndependentProgID
    HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}
    HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\Control
    HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\InprocServer32
    HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\InprocServer32#ThreadingModel
    HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\MiscStatus
    HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\MiscStatus\1
    HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\ProgID
    HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\Programmable
    HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\ToolboxBitmap32
    HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\TypeLib
    HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\Version
    HKCR\CLSID\{627D894A-8A77-416E-B522-432EAF2C818E}\VersionIndependentProgID
    HKCR\CLSID\{7138F250-5B72-48DD-ADFB-9A83B429DD9E}
    HKCR\CLSID\{7138F250-5B72-48DD-ADFB-9A83B429DD9E}\LocalServer32
    HKCR\CLSID\{7138F250-5B72-48DD-ADFB-9A83B429DD9E}\ProgID
    HKCR\CLSID\{7138F250-5B72-48DD-ADFB-9A83B429DD9E}\Programmable
    HKCR\CLSID\{7138F250-5B72-48DD-ADFB-9A83B429DD9E}\TypeLib
    HKCR\CLSID\{7138F250-5B72-48DD-ADFB-9A83B429DD9E}\VersionIndependentProgID
    HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}
    HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}\Control
    HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}\InprocServer32
    HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}\InprocServer32#ThreadingModel
    HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}\ProgID
    HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}\Programmable
    HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}\ToolboxBitmap32
    HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}\TypeLib
    HKCR\CLSID\{8971CB48-9FCA-445A-BE77-E8E8A4CC9DF7}\VersionIndependentProgID
    HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}
    HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}#AppID
    HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\Control
    HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\Implemented Categories
    HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}
    HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\InprocServer32
    HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\InprocServer32#ThreadingModel
    HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\MiscStatus
    HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\MiscStatus\1
    HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\ProgID
    HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\Programmable
    HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\ToolboxBitmap32
    HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\TypeLib
    HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\Version
    HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\VersionIndependentProgID
    HKCR\CLSID\{B88E4484-3FF6-4EA9-815B-A54FE20D4387}
    HKCR\CLSID\{B88E4484-3FF6-4EA9-815B-A54FE20D4387}\InprocServer32
    HKCR\CLSID\{B88E4484-3FF6-4EA9-815B-A54FE20D4387}\InprocServer32#ThreadingModel
    HKCR\CLSID\{B88E4484-3FF6-4EA9-815B-A54FE20D4387}\ProgID
    HKCR\CLSID\{B88E4484-3FF6-4EA9-815B-A54FE20D4387}\Programmable
    HKCR\CLSID\{B88E4484-3FF6-4EA9-815B-A54FE20D4387}\TypeLib
    HKCR\CLSID\{B88E4484-3FF6-4EA9-815B-A54FE20D4387}\VersionIndependentProgID
    HKCR\CLSID\{BF1BF02C-5A86-4ECF-ADAC-472C54C4D21E}
    HKCR\CLSID\{BF1BF02C-5A86-4ECF-ADAC-472C54C4D21E}\Implemented Categories
    HKCR\CLSID\{BF1BF02C-5A86-4ECF-ADAC-472C54C4D21E}\Implemented Categories\{5FFFEDFA-2C7F-48D8-A9A0-16D2850A402F}
    HKCR\CLSID\{BFC08CFF-C737-4433-BD5A-0EE7EFCFEE54}
    HKCR\CLSID\{BFC08CFF-C737-4433-BD5A-0EE7EFCFEE54}\InprocServer32
    HKCR\CLSID\{BFC08CFF-C737-4433-BD5A-0EE7EFCFEE54}\InprocServer32#ThreadingModel
    HKCR\CLSID\{BFC08CFF-C737-4433-BD5A-0EE7EFCFEE54}\ProgID
    HKCR\CLSID\{BFC08CFF-C737-4433-BD5A-0EE7EFCFEE54}\Programmable
    HKCR\CLSID\{BFC08CFF-C737-4433-BD5A-0EE7EFCFEE54}\TypeLib
    HKCR\CLSID\{BFC08CFF-C737-4433-BD5A-0EE7EFCFEE54}\VersionIndependentProgID
    HKCR\CLSID\{D2221CCB-F2BB-4858-AAD4-57C754153603}
    HKCR\CLSID\{D2221CCB-F2BB-4858-AAD4-57C754153603}\InprocServer32
    HKCR\CLSID\{D2221CCB-F2BB-4858-AAD4-57C754153603}\InprocServer32#ThreadingModel
    HKCR\CLSID\{D2221CCB-F2BB-4858-AAD4-57C754153603}\ProgID
    HKCR\CLSID\{D2221CCB-F2BB-4858-AAD4-57C754153603}\TypeLib
    HKCR\CLSID\{D2221CCB-F2BB-4858-AAD4-57C754153603}\VersionIndependentProgID
    HKCR\CLSID\{EA0B6A1A-6A59-4A58-9C41-9966504898A5}
    HKCR\CLSID\{EA0B6A1A-6A59-4A58-9C41-9966504898A5}\InprocServer32
    HKCR\CLSID\{EA0B6A1A-6A59-4A58-9C41-9966504898A5}\InprocServer32#ThreadingModel
    HKCR\CLSID\{EA0B6A1A-6A59-4A58-9C41-9966504898A5}\ProgID
    HKCR\CLSID\{EA0B6A1A-6A59-4A58-9C41-9966504898A5}\Programmable
    HKCR\CLSID\{EA0B6A1A-6A59-4A58-9C41-9966504898A5}\TypeLib
    HKCR\CLSID\{EA0B6A1A-6A59-4A58-9C41-9966504898A5}\VersionIndependentProgID
    HKCR\TypeLib\{08755390-F46D-4D09-968C-3430166B3189}
    HKCR\TypeLib\{08755390-F46D-4D09-968C-3430166B3189}\1.0
    HKCR\TypeLib\{08755390-F46D-4D09-968C-3430166B3189}\1.0\0
    HKCR\TypeLib\{08755390-F46D-4D09-968C-3430166B3189}\1.0\0\win32
    HKCR\TypeLib\{08755390-F46D-4D09-968C-3430166B3189}\1.0\FLAGS
    HKCR\TypeLib\{08755390-F46D-4D09-968C-3430166B3189}\1.0\HELPDIR
    HKCR\TypeLib\{0923208C-E259-4ED5-A778-CB607DA350AD}
    HKCR\TypeLib\{0923208C-E259-4ED5-A778-CB607DA350AD}\1.0
    HKCR\TypeLib\{0923208C-E259-4ED5-A778-CB607DA350AD}\1.0\0
    HKCR\TypeLib\{0923208C-E259-4ED5-A778-CB607DA350AD}\1.0\0\win32
    HKCR\TypeLib\{0923208C-E259-4ED5-A778-CB607DA350AD}\1.0\FLAGS
    HKCR\TypeLib\{0923208C-E259-4ED5-A778-CB607DA350AD}\1.0\HELPDIR
    HKCR\TypeLib\{229D2451-A617-4B30-B5E8-8138694240CB}
    HKCR\TypeLib\{229D2451-A617-4B30-B5E8-8138694240CB}\1.0
    HKCR\TypeLib\{229D2451-A617-4B30-B5E8-8138694240CB}\1.0\0
    HKCR\TypeLib\{229D2451-A617-4B30-B5E8-8138694240CB}\1.0\0\win32
    HKCR\TypeLib\{229D2451-A617-4B30-B5E8-8138694240CB}\1.0\FLAGS
    HKCR\TypeLib\{229D2451-A617-4B30-B5E8-8138694240CB}\1.0\HELPDIR
    HKCR\TypeLib\{9720DE03-5820-4059-B4A4-639D5E52BD09}
    HKCR\TypeLib\{9720DE03-5820-4059-B4A4-639D5E52BD09}\1.0
    HKCR\TypeLib\{9720DE03-5820-4059-B4A4-639D5E52BD09}\1.0\0
    HKCR\TypeLib\{9720DE03-5820-4059-B4A4-639D5E52BD09}\1.0\0\win32
    HKCR\TypeLib\{9720DE03-5820-4059-B4A4-639D5E52BD09}\1.0\FLAGS
    HKCR\TypeLib\{9720DE03-5820-4059-B4A4-639D5E52BD09}\1.0\HELPDIR
    HKCR\TypeLib\{C23FA5A4-1FEA-419F-8B14-F7465DF062BC}
    HKCR\TypeLib\{C23FA5A4-1FEA-419F-8B14-F7465DF062BC}\1.0
    HKCR\TypeLib\{C23FA5A4-1FEA-419F-8B14-F7465DF062BC}\1.0\0
    HKCR\TypeLib\{C23FA5A4-1FEA-419F-8B14-F7465DF062BC}\1.0\0\win32
    HKCR\TypeLib\{C23FA5A4-1FEA-419F-8B14-F7465DF062BC}\1.0\FLAGS
    HKCR\TypeLib\{C23FA5A4-1FEA-419F-8B14-F7465DF062BC}\1.0\HELPDIR
    HKCR\TypeLib\{CCC6E232-AA4C-4813-A019-9C14B27776B6}
    HKCR\TypeLib\{CCC6E232-AA4C-4813-A019-9C14B27776B6}\1.0
    HKCR\TypeLib\{CCC6E232-AA4C-4813-A019-9C14B27776B6}\1.0\0
    HKCR\TypeLib\{CCC6E232-AA4C-4813-A019-9C14B27776B6}\1.0\0\win32
    HKCR\TypeLib\{CCC6E232-AA4C-4813-A019-9C14B27776B6}\1.0\FLAGS
    HKCR\TypeLib\{CCC6E232-AA4C-4813-A019-9C14B27776B6}\1.0\HELPDIR
    HKCR\Interface\{00B77587-BE1B-4201-B8E9-09FCF50AB771}
    HKCR\Interface\{00B77587-BE1B-4201-B8E9-09FCF50AB771}\ProxyStubClsid
    HKCR\Interface\{00B77587-BE1B-4201-B8E9-09FCF50AB771}\ProxyStubClsid32
    HKCR\Interface\{00B77587-BE1B-4201-B8E9-09FCF50AB771}\TypeLib
    HKCR\Interface\{00B77587-BE1B-4201-B8E9-09FCF50AB771}\TypeLib#Version
    HKCR\Interface\{067C6A37-72EA-4437-863A-5BE20C246F3C}
    HKCR\Interface\{067C6A37-72EA-4437-863A-5BE20C246F3C}\ProxyStubClsid
    HKCR\Interface\{067C6A37-72EA-4437-863A-5BE20C246F3C}\ProxyStubClsid32
    HKCR\Interface\{067C6A37-72EA-4437-863A-5BE20C246F3C}\TypeLib
    HKCR\Interface\{067C6A37-72EA-4437-863A-5BE20C246F3C}\TypeLib#Version
    HKCR\Interface\{1A2AF056-1FE1-47CA-993D-5D09D18E674E}
    HKCR\Interface\{1A2AF056-1FE1-47CA-993D-5D09D18E674E}\ProxyStubClsid
    HKCR\Interface\{1A2AF056-1FE1-47CA-993D-5D09D18E674E}\ProxyStubClsid32
    HKCR\Interface\{1A2AF056-1FE1-47CA-993D-5D09D18E674E}\TypeLib
    HKCR\Interface\{1A2AF056-1FE1-47CA-993D-5D09D18E674E}\TypeLib#Version
    HKCR\Interface\{2B81F920-6660-4F76-93BF-B1C67BF5D1A0}
    HKCR\Interface\{2B81F920-6660-4F76-93BF-B1C67BF5D1A0}\ProxyStubClsid
    HKCR\Interface\{2B81F920-6660-4F76-93BF-B1C67BF5D1A0}\ProxyStubClsid32
    HKCR\Interface\{2B81F920-6660-4F76-93BF-B1C67BF5D1A0}\TypeLib
    HKCR\Interface\{2B81F920-6660-4F76-93BF-B1C67BF5D1A0}\TypeLib#Version
    HKCR\Interface\{2E623B96-B166-4C70-8169-820761794299}
    HKCR\Interface\{2E623B96-B166-4C70-8169-820761794299}\ProxyStubClsid
    HKCR\Interface\{2E623B96-B166-4C70-8169-820761794299}\ProxyStubClsid32
    HKCR\Interface\{2E623B96-B166-4C70-8169-820761794299}\TypeLib
    HKCR\Interface\{2E623B96-B166-4C70-8169-820761794299}\TypeLib#Version
    HKCR\Interface\{34E29700-0D13-46AA-B9A5-ACE68E21A091}
    HKCR\Interface\{34E29700-0D13-46AA-B9A5-ACE68E21A091}\ProxyStubClsid
    HKCR\Interface\{34E29700-0D13-46AA-B9A5-ACE68E21A091}\ProxyStubClsid32
    HKCR\Interface\{34E29700-0D13-46AA-B9A5-ACE68E21A091}\TypeLib
    HKCR\Interface\{34E29700-0D13-46AA-B9A5-ACE68E21A091}\TypeLib#Version
    HKCR\Interface\{3661AF2D-C27B-499C-9BCF-66C8502A3806}
    HKCR\Interface\{3661AF2D-C27B-499C-9BCF-66C8502A3806}\ProxyStubClsid
    HKCR\Interface\{3661AF2D-C27B-499C-9BCF-66C8502A3806}\ProxyStubClsid32
    HKCR\Interface\{3661AF2D-C27B-499C-9BCF-66C8502A3806}\TypeLib
    HKCR\Interface\{3661AF2D-C27B-499C-9BCF-66C8502A3806}\TypeLib#Version
    HKCR\Interface\{3F0915B8-B238-4C2D-AD1E-60DB1E14D27A}
    HKCR\Interface\{3F0915B8-B238-4C2D-AD1E-60DB1E14D27A}\ProxyStubClsid
    HKCR\Interface\{3F0915B8-B238-4C2D-AD1E-60DB1E14D27A}\ProxyStubClsid32
    HKCR\Interface\{3F0915B8-B238-4C2D-AD1E-60DB1E14D27A}\TypeLib
    HKCR\Interface\{3F0915B8-B238-4C2D-AD1E-60DB1E14D27A}\TypeLib#Version
    HKCR\Interface\{49155DAE-C471-40FA-98EE-B2B3CAD115CE}
    HKCR\Interface\{49155DAE-C471-40FA-98EE-B2B3CAD115CE}\ProxyStubClsid
    HKCR\Interface\{49155DAE-C471-40FA-98EE-B2B3CAD115CE}\ProxyStubClsid32
    HKCR\Interface\{49155DAE-C471-40FA-98EE-B2B3CAD115CE}\TypeLib
    HKCR\Interface\{49155DAE-C471-40FA-98EE-B2B3CAD115CE}\TypeLib#Version
    HKCR\Interface\{4D783385-0DDA-4188-A529-C97DC3D67CBD}
    HKCR\Interface\{4D783385-0DDA-4188-A529-C97DC3D67CBD}\ProxyStubClsid
    HKCR\Interface\{4D783385-0DDA-4188-A529-C97DC3D67CBD}\ProxyStubClsid32
    HKCR\Interface\{4D783385-0DDA-4188-A529-C97DC3D67CBD}\TypeLib
    HKCR\Interface\{4D783385-0DDA-4188-A529-C97DC3D67CBD}\TypeLib#Version
    HKCR\Interface\{4E8B851B-05B0-4BAF-B24D-D0DFE88DDED3}
    HKCR\Interface\{4E8B851B-05B0-4BAF-B24D-D0DFE88DDED3}\ProxyStubClsid
    HKCR\Interface\{4E8B851B-05B0-4BAF-B24D-D0DFE88DDED3}\ProxyStubClsid32
    HKCR\Interface\{4E8B851B-05B0-4BAF-B24D-D0DFE88DDED3}\TypeLib
    HKCR\Interface\{4E8B851B-05B0-4BAF-B24D-D0DFE88DDED3}\TypeLib#Version
    HKCR\Interface\{5A4737A8-B92A-4E54-970E-C2891D98CE3F}
    HKCR\Interface\{5A4737A8-B92A-4E54-970E-C2891D98CE3F}\ProxyStubClsid
    HKCR\Interface\{5A4737A8-B92A-4E54-970E-C2891D98CE3F}\ProxyStubClsid32
    HKCR\Interface\{5A4737A8-B92A-4E54-970E-C2891D98CE3F}\TypeLib
    HKCR\Interface\{5A4737A8-B92A-4E54-970E-C2891D98CE3F}\TypeLib#Version
    HKCR\Interface\{62B0B239-F9AC-4A5B-BFAE-62C7A23F7627}
     
  5. bebe8141

    bebe8141 Thread Starter

    Joined:
    Aug 7, 2007
    Messages:
    15
    HKCR\Interface\{62B0B239-F9AC-4A5B-BFAE-62C7A23F7627}
    HKCR\Interface\{62B0B239-F9AC-4A5B-BFAE-62C7A23F7627}\ProxyStubClsid
    HKCR\Interface\{62B0B239-F9AC-4A5B-BFAE-62C7A23F7627}\ProxyStubClsid32
    HKCR\Interface\{62B0B239-F9AC-4A5B-BFAE-62C7A23F7627}\TypeLib
    HKCR\Interface\{62B0B239-F9AC-4A5B-BFAE-62C7A23F7627}\TypeLib#Version
    HKCR\Interface\{6E10479B-31E8-4A3B-81B1-DDAF39097F19}
    HKCR\Interface\{6E10479B-31E8-4A3B-81B1-DDAF39097F19}\ProxyStubClsid
    HKCR\Interface\{6E10479B-31E8-4A3B-81B1-DDAF39097F19}\ProxyStubClsid32
    HKCR\Interface\{6E10479B-31E8-4A3B-81B1-DDAF39097F19}\TypeLib
    HKCR\Interface\{6E10479B-31E8-4A3B-81B1-DDAF39097F19}\TypeLib#Version
    HKCR\Interface\{726F0AB9-B842-4AE4-90C7-230E233E6A99}
    HKCR\Interface\{726F0AB9-B842-4AE4-90C7-230E233E6A99}\ProxyStubClsid
    HKCR\Interface\{726F0AB9-B842-4AE4-90C7-230E233E6A99}\ProxyStubClsid32
    HKCR\Interface\{726F0AB9-B842-4AE4-90C7-230E233E6A99}\TypeLib
    HKCR\Interface\{726F0AB9-B842-4AE4-90C7-230E233E6A99}\TypeLib#Version
    HKCR\Interface\{99123AC9-7DDA-4C82-B252-44C2804BF392}
    HKCR\Interface\{99123AC9-7DDA-4C82-B252-44C2804BF392}\ProxyStubClsid
    HKCR\Interface\{99123AC9-7DDA-4C82-B252-44C2804BF392}\ProxyStubClsid32
    HKCR\Interface\{99123AC9-7DDA-4C82-B252-44C2804BF392}\TypeLib
    HKCR\Interface\{99123AC9-7DDA-4C82-B252-44C2804BF392}\TypeLib#Version
    HKCR\Interface\{ACE99E77-AA2A-43C2-8C9D-CAF2020FDF2B}
    HKCR\Interface\{ACE99E77-AA2A-43C2-8C9D-CAF2020FDF2B}\ProxyStubClsid
    HKCR\Interface\{ACE99E77-AA2A-43C2-8C9D-CAF2020FDF2B}\ProxyStubClsid32
    HKCR\Interface\{ACE99E77-AA2A-43C2-8C9D-CAF2020FDF2B}\TypeLib
    HKCR\Interface\{ACE99E77-AA2A-43C2-8C9D-CAF2020FDF2B}\TypeLib#Version
    HKCR\Interface\{B247F5BF-BD9D-4ECD-8FC1-365F36A1FDA1}
    HKCR\Interface\{B247F5BF-BD9D-4ECD-8FC1-365F36A1FDA1}\ProxyStubClsid
    HKCR\Interface\{B247F5BF-BD9D-4ECD-8FC1-365F36A1FDA1}\ProxyStubClsid32
    HKCR\Interface\{B247F5BF-BD9D-4ECD-8FC1-365F36A1FDA1}\TypeLib
    HKCR\Interface\{B247F5BF-BD9D-4ECD-8FC1-365F36A1FDA1}\TypeLib#Version
    HKCR\Interface\{B9CC2B92-5611-453F-8381-8B6F72D9C0B8}
    HKCR\Interface\{B9CC2B92-5611-453F-8381-8B6F72D9C0B8}\ProxyStubClsid
    HKCR\Interface\{B9CC2B92-5611-453F-8381-8B6F72D9C0B8}\ProxyStubClsid32
    HKCR\Interface\{B9CC2B92-5611-453F-8381-8B6F72D9C0B8}\TypeLib
    HKCR\Interface\{B9CC2B92-5611-453F-8381-8B6F72D9C0B8}\TypeLib#Version
    HKCR\Interface\{BBBFB891-98AE-4678-86F3-BD5A2EED86C9}
    HKCR\Interface\{BBBFB891-98AE-4678-86F3-BD5A2EED86C9}\ProxyStubClsid
    HKCR\Interface\{BBBFB891-98AE-4678-86F3-BD5A2EED86C9}\ProxyStubClsid32
    HKCR\Interface\{BBBFB891-98AE-4678-86F3-BD5A2EED86C9}\TypeLib
    HKCR\Interface\{BBBFB891-98AE-4678-86F3-BD5A2EED86C9}\TypeLib#Version
    HKCR\Interface\{C4543E64-1498-410D-8E72-4744EEA99AB9}
    HKCR\Interface\{C4543E64-1498-410D-8E72-4744EEA99AB9}\ProxyStubClsid
    HKCR\Interface\{C4543E64-1498-410D-8E72-4744EEA99AB9}\ProxyStubClsid32
    HKCR\Interface\{C4543E64-1498-410D-8E72-4744EEA99AB9}\TypeLib
    HKCR\Interface\{C4543E64-1498-410D-8E72-4744EEA99AB9}\TypeLib#Version
    HKCR\Interface\{E0FB1610-B25B-49F6-BE20-751B2F230E6F}
    HKCR\Interface\{E0FB1610-B25B-49F6-BE20-751B2F230E6F}\ProxyStubClsid
    HKCR\Interface\{E0FB1610-B25B-49F6-BE20-751B2F230E6F}\ProxyStubClsid32
    HKCR\Interface\{E0FB1610-B25B-49F6-BE20-751B2F230E6F}\TypeLib
    HKCR\Interface\{E0FB1610-B25B-49F6-BE20-751B2F230E6F}\TypeLib#Version
    HKCR\Interface\{E420A65F-9984-4B8C-9FA9-1ED69D3B0A13}
    HKCR\Interface\{E420A65F-9984-4B8C-9FA9-1ED69D3B0A13}\ProxyStubClsid
    HKCR\Interface\{E420A65F-9984-4B8C-9FA9-1ED69D3B0A13}\ProxyStubClsid32
    HKCR\Interface\{E420A65F-9984-4B8C-9FA9-1ED69D3B0A13}\TypeLib
    HKCR\Interface\{E420A65F-9984-4B8C-9FA9-1ED69D3B0A13}\TypeLib#Version
    HKCR\Interface\{EA58C2EA-BE26-49DD-9B9A-C8E4E5CA7791}
    HKCR\Interface\{EA58C2EA-BE26-49DD-9B9A-C8E4E5CA7791}\ProxyStubClsid
    HKCR\Interface\{EA58C2EA-BE26-49DD-9B9A-C8E4E5CA7791}\ProxyStubClsid32
    HKCR\Interface\{EA58C2EA-BE26-49DD-9B9A-C8E4E5CA7791}\TypeLib
    HKCR\Interface\{EA58C2EA-BE26-49DD-9B9A-C8E4E5CA7791}\TypeLib#Version
    HKCR\Interface\{FCA28AC5-C1E1-4D67-A5AE-C44D6C374D9F}
    HKCR\Interface\{FCA28AC5-C1E1-4D67-A5AE-C44D6C374D9F}\ProxyStubClsid
    HKCR\Interface\{FCA28AC5-C1E1-4D67-A5AE-C44D6C374D9F}\ProxyStubClsid32
    HKCR\Interface\{FCA28AC5-C1E1-4D67-A5AE-C44D6C374D9F}\TypeLib
    HKCR\Interface\{FCA28AC5-C1E1-4D67-A5AE-C44D6C374D9F}\TypeLib#Version
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\btntrans.idx
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\btntrans1.dat
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\buttondir.txt
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\components.cdf
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\cursors.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\default.cdf
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_511745-514279.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_bidzC_ZT_IE-ca.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_bidzC_ZT_IE-us.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_categorize.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_comparison.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_explorer-Mails.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_explorer-people.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_favorites.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_Games.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_Hide.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_hotbarcom.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_Hotmail.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_hsskin.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_jemster.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_jemsterie.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_jemsteruk.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_jobsearch.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_Mails.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_MobileSidewalk.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_new.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_premium.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_reun.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_ringtones.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_SearchBoxTrapper.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_searchfor.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_searchgo.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_weather.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Default_yellowpages.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\d_icons_buttons_1000.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\d_icons_buttons_2000.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\d_icons_buttons_3000.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\d_icons_buttons_bar.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\d_icons_buttons_bbar1.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\d_icons_buttons_logos.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\d_icons_buttons_other.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\d_icons_weather.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\email-def-511724-548964.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\email-def-511724-9595.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\email-t1-bg.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\icons2.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\ie_games_icon.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\ie_video.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\keywords1.dat
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\layout.cdf
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\linkpathlegal.txt
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\progress.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\sales_buttons.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\s_icons_buttons.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\t2_bg.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\theweb.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\top7.cdf
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\Top7_theweb.mnu
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\tsd_bg.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\zango_btn.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1\zango_ie_menu.res
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\1
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\BtnTrans.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\BtnTrans1.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\buttondir.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\cursors.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\default.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_1000.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_2000.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_3000.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_bar.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_bbar1.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_logos.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\d_icons_buttons_other.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\d_icons_weather.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\email-t1-bg.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\icons2.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\ie_games_icon.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\ie_video.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\keywords.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\keywords1.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\layout.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\linkpathlegal.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\progress.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\sales_buttons.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\samplegroups2reg.txt
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\samplegroups2reg.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\s_icons_buttons.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\t2_bg.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\top7.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\tsd_bg.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\zango_btn.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad\zango_ie_menu.xip
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static\DownLoad
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango\static
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0\Zango
    C:\Documents and Settings\Chuqui\Application Data\Zango\v3.0
    C:\Documents and Settings\Chuqui\Application Data\Zango

    Adware.HotBar/SpamBlockerUtility (Low Risk)
    HKLM\Software\Classes\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}\Control
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}\Implemented Categories
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}\Implemented Categories\{00021494-0000-0000-C000-000000000046}
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}\InprocServer32
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}\InprocServer32#ThreadingModel
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}\Instance
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}\Instance#CLSID
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}\Instance\InitPropertyBag
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}\Instance\InitPropertyBag#Url
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}\MiscStatus
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}\MiscStatus\1
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}\ProgID
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}\Programmable
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}\ToolboxBitmap32
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}\TypeLib
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}\Version
    HKCR\CLSID\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}\VersionIndependentProgID
    HKLM\Software\Microsoft\Internet Explorer\Explorer Bars\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}
    HKU\S-1-5-21-746137067-261903793-839522115-1004\Software\Microsoft\Internet Explorer\Explorer Bars\{93B0FA7B-50F6-41B4-AC7E-612A72CE8C3C}

    Adware.Tracking Cookie
    C:\Documents and Settings\Chuqui\Cookies\[email protected][6].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][4].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][4].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][5].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected]****fest[2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][4].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][4].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][4].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][4].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected]atdmt[4].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][5].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][4].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][4].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][5].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][4].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][4].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][3].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][4].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][7].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][8].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][9].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][2].txt
    C:\Documents and Settings\Chuqui\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][2].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][2].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][2].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][2].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][2].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][2].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][2].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][2].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][2].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][2].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][2].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][2].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][2].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][1].txt
    C:\Documents and Settings\Darito\Cookies\[email protected][2].txt
    C:\Documents and Settings\Tutti\Cookies\[email protected][1].txt
    C:\Documents and Settings\Tutti\Cookies\[email protected][2].txt
    C:\Documents and Settings\Tutti\Cookies\[email protected][1].txt
    C:\Documents and Settings\Tutti\Cookies\[email protected][1].txt
    C:\Documents and Settings\Tutti\Cookies\[email protected][1].txt
    C:\Documents and Settings\Tutti\Cookies\[email protected][2].txt
    C:\Documents and Settings\Tutti\Cookies\[email protected][3].txt
    C:\Documents and Settings\Tutti\Cookies\[email protected][1].txt
    C:\Documents and Settings\Tutti\Cookies\[email protected][2].txt
    C:\Documents and Settings\Tutti\Cookies\[email protected][1].txt
     
  6. bebe8141

    bebe8141 Thread Starter

    Joined:
    Aug 7, 2007
    Messages:
    15
    Trojan.Security Toolbar
    C:\Documents and Settings\All Users\Start Menu\Online Security Guide.url
    C:\Documents and Settings\All Users\Start Menu\Security Troubleshooting.url
    C:\Documents and Settings\All Users\Desktop\Online Security Guide.url

    Browser Hijacker.Favorites
    C:\DOCUMENTS AND SETTINGS\CHUQUI\FAVORITES\ONLINE SECURITY TEST.URL
    C:\RECYCLER\S-1-5-21-746137067-261903793-839522115-1004\DC14.URL

    Trojan.Downloader-Rogue/AntiVirGear
    C:\DOCUMENTS AND SETTINGS\CHUQUI\LOCAL SETTINGS\TEMP\LAF1.EXE
     
  7. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/647533

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice