Hello,
I seem to have a trojan horse downloader.Zlob.HCB virus, I have tried removing it from my computer using AGV , however it told me it could not be healed. Subsequently i have downloaded the most recent version of Ad-aware following some advice from a friend who directed me here. Having looked at some other posts it seems that i need to post a Log file here, which will follow this message. I hope this is the correct thing to do. Any help at all would be really appreciated as i'm at a loss as to what to do.
Thanks in advance
Ad-Aware 2007 Build
Log File Created on: 2008-03-09 20:59:07
Using Definitions File: C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware 2007\core.aawdef
Computer name: JORDAN-FA8362E3
Name of user performing scan: SYSTEM
System information
===========================
Number of processors: 2
Processor type: AMD Athlon(tm) 64 X2 Dual Core Processor 4400+
Memory Available: 73%
Total Physical Memory: -806047744 Bytes
Available Physical Memory: 2543804416 Bytes
Total Page File Size: 5464842240 Bytes
Available On Page File: 4631224320 Bytes
Total Virtual Memory: 2147352576 Bytes
Available Virtual Memory: 1916727296 Bytes
OS: Microsoft Windows XP Service Pack 2 (Build 2600)
Ad-Aware 2007 Settings
===========================
Skipping files larger than 1048576 kB
Ignoring infections with lower TAI than: 3
Extended Ad-Aware 2007 Settings
===========================
Unloading known modules during scan
Ignoring spanned files when scanning cab archives
Reanalyzing results after scanning before displaying results
Trying to unload modules prior to removal
Let Windows remove files currently in use at next reboot
Removing quarantined objects after restore
Deactivating Ad-Watch during scans
Writeprotecting system files after repairs
Include info about ignored objects in log file
Including basic settings in log file
Including advanced settings in log file
Including user and computer name in log file
Create and save WebUpdate log file
Databaseinfo
===========================
Version number: 58
Build Number: 0
Build Date and Time: 2008/03/06 08:21:44
Scan Statistics
===========================
Method: Full
Scan tracking cookies.............................: On
Scan ADS filestreams..............................: Off
Item Scanned: 290496
Infections Detected: 133
Infections Ignored: 0
Scan detailed statistics
===========================
Type Critical Total
Process Scan....: 0 0
Registry Scan...: 0 0
Registry PE Scan: 0 0
Hosts File Scan.: 0 0
File Scan.......: 0 0
Folder Scan.....: 0 0
LSP Scan........: 0 0
ADS Scan........: 0 0
Cookie Scan.....: 133 133
File Hash Scan..: 0 0
Infections Found
===========================
Family Id: 725 Name: Tracking Cookie Category: DataMiner TAI:3
Item Id: 600000212 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat msnportal.112.2o7.net s_vi /
Item Id: 600000073 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat specificclick.net dmc /
Item Id: 600000073 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat specificclick.net dmk /
Item Id: 600000073 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat specificclick.net smc /
Item Id: 600000073 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat specificclick.net smk /
Item Id: 600000073 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat specificclick.net dmp /
Item Id: 600000101 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat overture.com CMUserData /
Item Id: 600000488 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat indextools.com itvisitorid10001518207556 /
Item Id: 600000488 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat indextools.com itsessionid10001518207556 /
Item Id: 600000179 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat atdmt.com AA002 /
Item Id: 600000457 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat adopt.euroclick.com DMEXP /
Item Id: 600000457 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat adopt.euroclick.com CTCI /
Item Id: 600000457 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat adopt.euroclick.com HS /
Item Id: 600000457 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat adopt.euroclick.com LO /
Item Id: 600000457 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat adopt.euroclick.com UI /
Item Id: 600000457 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat adopt.euroclick.com NSC_mc-bepqu.fvspdmjdl.dpn-iuuq /
Item Id: 600000144 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat doubleclick.net id /
Item Id: 600000126 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ehg-veohnetworksinc.hitbox.com DM561110FDDNV6 /
Item Id: 600000201 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat media.adrevolver.com BIGipServerar-slave /
Item Id: 600000201 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat media.adrevolver.com adrevid /
Item Id: 600000420 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat partypoker.com PPID /
Item Id: 600000420 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat partypoker.com PPWMID /
Item Id: 600000100 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat pacificpoker.com OSR /
Item Id: 600000000 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat zedo.com ZEDOIDX /
Item Id: 600000000 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat zedo.com geo /
Item Id: 600000000 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat zedo.com ZEDOIDA /
Item Id: 600000000 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat zedo.com FFCap /
Item Id: 600000000 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat zedo.com PI /
Item Id: 600000142 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat int.sitestat.com s1 /cassava/new-pcp/
Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat advertising.com ACID /
Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat advertising.com BASE /
Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat advertising.com ROLL /
Item Id: 600000187 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat advertising.com F1 /
Item Id: 600000142 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat www6.addfreestats.com NC1U /cgi-bin
Item Id: 600000142 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat uk.sitestat.com s1 /liverpool/liverpool/
Item Id: 600000085 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat questionmarket.com ES /
Item Id: 600000085 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat questionmarket.com CS1 /
Item Id: 600000126 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat hitbox.com CTG /
Item Id: 600000126 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat hitbox.com WSS_GW /
Item Id: 600000447 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat apmebf.com S /
Item Id: 600000083 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat realitykings.com v1st /
Item Id: 600000219 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat 127.0.0.1 __utma /
Item Id: 600000219 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat 127.0.0.1 __utmb /
Item Id: 600000219 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat 127.0.0.1 __utmz /
Item Id: 600000303 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ads.addynamix.com PI2125153_3 /
Item Id: 600000303 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ads.addynamix.com PI2125153_1 /
Item Id: 600000303 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ads.addynamix.com PI2125153_2 /
Item Id: 600000303 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ads.addynamix.com PI2132500_52 /
Item Id: 600000126 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ehg-foxsports.hitbox.com DM560215CAACV6 /
Item Id: 600000460 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ad.yieldmanager.com uid /
Item Id: 600000460 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ad.yieldmanager.com ih /
Item Id: 600000460 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ad.yieldmanager.com bh /
Item Id: 600000460 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ad.yieldmanager.com pv1 /
Item Id: 600000460 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ad.yieldmanager.com vuday1 /
Item Id: 600000460 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ad.yieldmanager.com liday1 /
Item Id: 600000460 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ad.yieldmanager.com fl_inst /
Item Id: 600000513 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat 3.adbrite.com ihc_25192 /
Item Id: 600000263 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat mediaplex.com svid /
Item Id: 600000513 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ads.adbrite.com ihc_439752 /
Item Id: 600000513 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat adbrite.com Apache /
Item Id: 600000513 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat adbrite.com b /
Item Id: 600000513 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat adbrite.com fq /
Item Id: 600000295 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat adtech.de JEB2 /
Item Id: 600000293 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat adviva.net ansv4_uid /
Item Id: 600000199 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat fe.lea.lycos.co.uk NGUserID /
Item Id: 600000201 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat adrevolver.com adrev_adpath /
Item Id: 600000201 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat adrevolver.com adrev_adpath2 /
Item Id: 600000201 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat adrevolver.com prefs /
Item Id: 600000201 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat adrevolver.com prefs2 /
Item Id: 600000201 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat adrevolver.com adrev_dgp /
Item Id: 600000201 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat adrevolver.com adrev_dgp2 /
Item Id: 600000138 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat fastclick.net pjw /
Item Id: 600000138 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat fastclick.net pluto /
Item Id: 600000138 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat fastclick.net adv_ic /
Item Id: 600000476 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat statcounter.com session_2798097 /
Item Id: 600000476 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat statcounter.com session_2742145 /
Item Id: 600000476 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat statcounter.com session_2602392 /
Item Id: 600000476 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat statcounter.com session_1920542 /
Item Id: 600000476 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat statcounter.com session_489882 /
Item Id: 600000476 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat statcounter.com session_3470926 /
Item Id: 600000415 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ads.revsci.net rsi_us_1000000 /adserver
Item Id: 600000400 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat anat.tacoda.net /BC /
Item Id: 600000408 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat serving-sys.com U /
Item Id: 600000408 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat serving-sys.com A2 /
Item Id: 600000408 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat serving-sys.com B2 /
Item Id: 600000408 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat serving-sys.com C3 /
Item Id: 600000408 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat serving-sys.com D3 /
Item Id: 600000408 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat serving-sys.com E2 /
Item Id: 600000400 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat tacoda.net TID /
Item Id: 600000400 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat tacoda.net ANRTT /
Item Id: 600000400 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat tacoda.net TData /
Item Id: 600000400 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat tacoda.net Anxd /
Item Id: 600000400 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat tacoda.net Tcc /
Item Id: 600000400 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat tacoda.net Tsid /
Item Id: 600000212 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat maxis.112.2o7.net s_vi /
Item Id: 600000234 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat tradedoubler.com TD_UNIQUE_IMP /
Item Id: 600000050 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat tribalfusion.com ANON_ID /
Item Id: 600000171 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat bs.serving-sys.com eyeblaster /
Item Id: 600000434 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat casalemedia.com CMID /
Item Id: 600000434 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat casalemedia.com CMPS /
Item Id: 600000434 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat casalemedia.com CMPP /
Item Id: 600000434 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat casalemedia.com CMPH /
Item Id: 600000434 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat casalemedia.com CMFP /
Item Id: 600000372 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ads.bridgetrack.com AdData /
Item Id: 600000372 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ads.bridgetrack.com BTA44 /
Item Id: 600000372 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ads.bridgetrack.com BTA /
Item Id: 600000372 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat ads.bridgetrack.com ASB44 /
Item Id: 600000662 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat hits.gureport.co.uk CTG /
Item Id: 600000662 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat hits.gureport.co.uk DM54102495BWV6 /
Item Id: 600000662 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat hits.gureport.co.uk WSS_GW /
Item Id: 600000662 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat hits.gureport.co.uk DM550607HJBCV6 /
Item Id: 600000662 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat hits.gureport.co.uk DM5506080PEEV6 /
Item Id: 600000662 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat hits.gureport.co.uk DM550607BIDBV6 /
Item Id: 600000662 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat hits.gureport.co.uk DM550607L7EZV6 /
Item Id: 600000662 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat hits.gureport.co.uk DM561101I6AWV6 /
Item Id: 600000578 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat unicast.com VWCUK200 /
Item Id: 600000400 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat anad.tacoda.net /PC /
Item Id: 600000212 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat 2o7.net s_vi_bfbfdhj /
Item Id: 600000212 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat 2o7.net s_vi_imx7Cx60mxxjcx7Eabm /
Item Id: 600000212 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat 2o7.net s_vi_njnjiyjeoej /
Item Id: 600000212 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat 2o7.net s_vi_lhlhjfdgh /
Item Id: 600000212 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat 2o7.net s_vi_uqwqx7Ducyx7Dcx22ux60x27x7Eq /
Item Id: 600000212 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat 2o7.net s_vi_lhnhdlzx7Cb /
Item Id: 600000201 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat media.adrevolver.com freq /adrevolver/
Item Id: 600000201 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat media.adrevolver.com uid /adrevolver/
Item Id: 600000415 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat revsci.net NETID01 /
Item Id: 600000415 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat revsci.net NETSEGS_G07611 /
Item Id: 600000415 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat revsci.net rsi_segs_1000000 /
Item Id: 600000415 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat revsci.net NETSEGS_H07712 /
Item Id: 600000415 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat revsci.net rsi_cls_1000000 /
Item Id: 600000415 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat revsci.net NETSEGS_E05516 /
Item Id: 600000415 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat revsci.net NETSEGS_C07584 /
Item Id: 600000415 Value: Browser: Internet Explorer Cookie: C:\Documents and Settings\Jordan\Cookies\index.dat revsci.net NETSEGS_K05540 /
Items Ignored During Scan
===========================
Listing of running processes
===========================
C:\WINDOWS\SYSTEM32\SMSS.EXE
c:\windows\system32\smss.exe
c:\windows\system32\ntdll.dll
C:\WINDOWS\SYSTEM32\CSRSS.EXE
c:\windows\system32\csrss.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\csrsrv.dll
c:\windows\system32\basesrv.dll
c:\windows\system32\winsrv.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\user32.dll
c:\windows\system32\sxs.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
C:\WINDOWS\SYSTEM32\WINLOGON.EXE
c:\windows\system32\winlogon.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\authz.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\nddeapi.dll
c:\windows\system32\profmap.dll
c:\windows\system32\netapi32.dll
c:\windows\system32\userenv.dll
c:\windows\system32\psapi.dll
c:\windows\system32\regapi.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\version.dll
c:\windows\system32\winsta.dll
c:\windows\system32\wintrust.dll
c:\windows\system32\imagehlp.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\ws2help.dll
c:\windows\system32\msgina.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\comctl32.dll
c:\windows\system32\odbc32.dll
c:\windows\system32\comdlg32.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
c:\windows\system32\odbcint.dll
c:\windows\system32\shsvcs.dll
c:\windows\system32\sfc.dll
c:\windows\system32\sfc_os.dll
c:\windows\system32\ole32.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\sxs.dll
c:\windows\system32\winscard.dll
c:\windows\system32\wtsapi32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\winmm.dll
c:\windows\system32\cscdll.dll
c:\windows\system32\wlnotify.dll
c:\windows\system32\winspool.drv
c:\windows\system32\mpr.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\samlib.dll
c:\windows\system32\msv1_0.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\cscui.dll
c:\windows\system32\wdmaud.drv
c:\windows\system32\mprapi.dll
c:\windows\system32\activeds.dll
c:\windows\system32\adsldpc.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\atl.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\rtutils.dll
c:\windows\system32\xpsp2res.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\msacm32.drv
c:\windows\system32\msacm32.dll
c:\windows\system32\midimap.dll
c:\windows\system32\comres.dll
c:\windows\system32\clbcatq.dll
C:\WINDOWS\SYSTEM32\SERVICES.EXE
c:\windows\system32\services.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\userenv.dll
c:\windows\system32\scesrv.dll
c:\windows\system32\authz.dll
c:\windows\system32\umpnpmgr.dll
c:\windows\system32\winsta.dll
c:\windows\system32\netapi32.dll
c:\windows\system32\ncobjapi.dll
c:\windows\system32\msvcp60.dll
c:\windows\system32\shimeng.dll
c:\windows\apppatch\acgenral.dll
c:\windows\system32\winmm.dll
c:\windows\system32\ole32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msacm32.dll
c:\windows\system32\version.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\uxtheme.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
c:\windows\system32\comctl32.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\eventlog.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\ws2help.dll
c:\windows\system32\psapi.dll
c:\windows\system32\wtsapi32.dll
C:\WINDOWS\SYSTEM32\LSASS.EXE
c:\windows\system32\lsass.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\lsasrv.dll
c:\windows\system32\mpr.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\netapi32.dll
c:\windows\system32\ntdsapi.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\ws2help.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\samlib.dll
c:\windows\system32\samsrv.dll
c:\windows\system32\cryptdll.dll
c:\windows\system32\shimeng.dll
c:\windows\apppatch\acgenral.dll
c:\windows\system32\winmm.dll
c:\windows\system32\ole32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msacm32.dll
c:\windows\system32\version.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\userenv.dll
c:\windows\system32\uxtheme.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
c:\windows\system32\comctl32.dll
c:\windows\system32\msprivs.dll
c:\windows\system32\kerberos.dll
c:\windows\system32\msv1_0.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\netlogon.dll
c:\windows\system32\w32time.dll
c:\windows\system32\msvcp60.dll
c:\windows\system32\schannel.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\wdigest.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\scecli.dll
c:\windows\system32\ipsecsvc.dll
c:\windows\system32\authz.dll
c:\windows\system32\oakley.dll
c:\windows\system32\winipsec.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\hnetcfg.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\pstorsvc.dll
c:\windows\system32\psbase.dll
c:\windows\system32\dssenh.dll
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
c:\windows\system32\svchost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\shimeng.dll
c:\windows\apppatch\acgenral.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\winmm.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msacm32.dll
c:\windows\system32\version.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\userenv.dll
c:\windows\system32\uxtheme.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
c:\windows\system32\comctl32.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\samlib.dll
c:\windows\system32\rpcss.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\ws2help.dll
c:\windows\system32\xpsp2res.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\comres.dll
c:\windows\system32\termsrv.dll
c:\windows\system32\icaapi.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\wintrust.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\imagehlp.dll
c:\windows\system32\authz.dll
c:\windows\system32\mstlsapi.dll
c:\windows\system32\activeds.dll
c:\windows\system32\adsldpc.dll
c:\windows\system32\netapi32.dll
c:\windows\system32\atl.dll
c:\windows\system32\regapi.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\svchost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\shimeng.dll
c:\windows\apppatch\acgenral.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\winmm.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msacm32.dll
c:\windows\system32\version.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\userenv.dll
c:\windows\system32\uxtheme.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
c:\windows\system32\comctl32.dll
c:\windows\system32\rpcss.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\ws2help.dll
c:\windows\system32\xpsp2res.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\hnetcfg.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\winrnr.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\comres.dll
c:\windows\system32\msi.dll
c:\windows\system32\svchost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\shimeng.dll
c:\windows\apppatch\acgenral.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\winmm.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msacm32.dll
c:\windows\system32\version.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\userenv.dll
c:\windows\system32\uxtheme.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
c:\windows\system32\comctl32.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\samlib.dll
c:\windows\system32\xpsp2res.dll
c:\windows\system32\shsvcs.dll
c:\windows\system32\winsta.dll
c:\windows\system32\netapi32.dll
c:\windows\system32\dhcpcsvc.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\ws2help.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\hnetcfg.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\wzcsvc.dll
c:\windows\system32\rtutils.dll
c:\windows\system32\wmi.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\wtsapi32.dll
c:\windows\system32\esent.dll
c:\windows\system32\atl.dll
c:\windows\system32\rastls.dll
c:\windows\system32\cryptui.dll
c:\windows\system32\wintrust.dll
c:\windows\system32\imagehlp.dll
c:\windows\system32\wininet.dll
c:\windows\system32\mprapi.dll
c:\windows\system32\activeds.dll
c:\windows\system32\adsldpc.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\rasapi32.dll
c:\windows\system32\rasman.dll
c:\windows\system32\tapi32.dll
c:\windows\system32\schannel.dll
c:\windows\system32\winscard.dll
c:\windows\system32\raschap.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\comres.dll
c:\windows\system32\msv1_0.dll
c:\windows\system32\schedsvc.dll
c:\windows\system32\ntdsapi.dll
c:\windows\system32\msidle.dll
c:\windows\system32\audiosrv.dll
c:\windows\system32\wkssvc.dll
c:\windows\system32\qmgr.dll
c:\windows\system32\mpr.dll
c:\windows\system32\shfolder.dll
c:\windows\system32\winhttp.dll
c:\windows\system32\ersvc.dll
c:\windows\system32\cryptsvc.dll
c:\windows\system32\certcli.dll
c:\windows\system32\es.dll
c:\windows\pchealth\helpctr\binaries\pchsvc.dll
c:\windows\system32\srvsvc.dll
c:\windows\system32\netman.dll
c:\windows\system32\netshell.dll
c:\windows\system32\credui.dll
c:\windows\system32\wzcsapi.dll
c:\windows\system32\seclogon.dll
c:\windows\system32\sens.dll
c:\windows\system32\srsvc.dll
c:\windows\system32\powrprof.dll
c:\windows\system32\trkwks.dll
c:\windows\system32\sxs.dll
c:\windows\system32\w32time.dll
c:\windows\system32\msvcp60.dll
c:\windows\system32\wbem\wmisvc.dll
c:\windows\system32\vssapi.dll
c:\windows\system32\wuauserv.dll
c:\windows\system32\wuaueng.dll
c:\windows\system32\winspool.drv
c:\windows\system32\cabinet.dll
c:\windows\system32\mspatcha.dll
c:\windows\system32\browser.dll
c:\windows\system32\ipnathlp.dll
c:\windows\system32\authz.dll
c:\windows\system32\wscsvc.dll
c:\windows\system32\msi.dll
c:\windows\system32\wbem\wbemcomn.dll
c:\windows\system32\wbem\wbemcore.dll
c:\windows\system32\wbem\esscli.dll
c:\windows\system32\wbem\fastprox.dll
c:\windows\system32\comsvcs.dll
c:\windows\system32\colbact.dll
c:\windows\system32\mtxclu.dll
c:\windows\system32\wsock32.dll
c:\windows\system32\clusapi.dll
c:\windows\system32\resutils.dll
c:\windows\system32\sfc.dll
c:\windows\system32\sfc_os.dll
c:\windows\system32\wbem\wmiutils.dll
c:\windows\system32\wbem\repdrvfs.dll
c:\windows\system32\wbem\wmiprvsd.dll
c:\windows\system32\ncobjapi.dll
c:\windows\system32\wbem\wbemess.dll
c:\windows\system32\upnp.dll
c:\windows\system32\ssdpapi.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\rasdlg.dll
c:\windows\system32\wbem\ncprov.dll
c:\windows\system32\msxml3.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\wups2.dll
c:\windows\system32\dssenh.dll
c:\windows\system32\winrnr.dll
c:\windows\system32\catsrvut.dll
c:\windows\system32\catsrv.dll
c:\windows\system32\mfcsubs.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\svchost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\shimeng.dll
c:\windows\apppatch\acgenral.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\winmm.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msacm32.dll
c:\windows\system32\version.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\userenv.dll
c:\windows\system32\uxtheme.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
c:\windows\system32\comctl32.dll
c:\windows\system32\dnsrslvr.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\ws2help.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\hnetcfg.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\svchost.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\shimeng.dll
c:\windows\apppatch\acgenral.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\winmm.dll
c:\windows\system32\ole32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msacm32.dll
c:\windows\system32\version.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\userenv.dll
c:\windows\system32\uxtheme.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
c:\windows\system32\comctl32.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\samlib.dll
c:\windows\system32\xpsp2res.dll
c:\windows\system32\lmhsvc.dll
c:\windows\system32\iphlpapi.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\ws2help.dll
c:\windows\system32\webclnt.dll
c:\windows\system32\wininet.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\wsock32.dll
c:\windows\system32\ssdpsrv.dll
c:\windows\system32\hnetcfg.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\comres.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\wshtcpip.dll
C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
c:\windows\system32\spoolsv.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shimeng.dll
c:\windows\apppatch\acgenral.dll
c:\windows\system32\winmm.dll
c:\windows\system32\ole32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msacm32.dll
c:\windows\system32\version.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\userenv.dll
c:\windows\system32\uxtheme.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
c:\windows\system32\comctl32.dll
c:\windows\system32\spoolss.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\ws2help.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\rasadhlp.dll
c:\windows\system32\localspl.dll
c:\windows\system32\sfc_os.dll
c:\windows\system32\wintrust.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\imagehlp.dll
c:\windows\system32\winspool.drv
c:\windows\system32\netapi32.dll
c:\windows\system32\lxdjlmpm.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\cfgmgr32.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\winrnr.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\hnetcfg.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\cnbjmon.dll
c:\windows\system32\pjlmon.dll
c:\windows\system32\msonpmon.dll
c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcr80.dll
c:\windows\system32\msi.dll
c:\windows\system32\tcpmon.dll
c:\windows\system32\usbmon.dll
c:\windows\system32\spool\prtprocs\w32x86\lxdjdrpp.dll
c:\windows\system32\spool\prtprocs\w32x86\msonpppr.dll
c:\windows\system32\win32spl.dll
c:\windows\system32\netrap.dll
c:\windows\system32\ntdsapi.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\comres.dll
c:\windows\system32\inetpp.dll
c:\windows\system32\xpsp2res.dll
c:\windows\system32\spool\drivers\w32x86\3\lxdjptpc.dll
c:\windows\system32\spool\drivers\w32x86\3\lxdjdrui.dll
c:\windows\system32\mscms.dll
c:\windows\system32\spool\drivers\w32x86\3\lxdjprpr.dll
c:\windows\system32\spool\drivers\w32x86\3\lxdjcfg.dll
c:\windows\system32\spool\drivers\w32x86\3\lxdjdr.dll
c:\windows\system32\wtsapi32.dll
c:\windows\system32\winsta.dll
c:\windows\system32\spool\drivers\w32x86\3\lxdjhps.dll
c:\windows\system32\spool\drivers\w32x86\3\lxdjdatr.dll
c:\windows\system32\lxdjcomc.dll
C:\WINDOWS\EXPLORER.EXE
c:\windows\explorer.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\browseui.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\ole32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\shdocvw.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\cryptui.dll
c:\windows\system32\wintrust.dll
c:\windows\system32\imagehlp.dll
c:\windows\system32\netapi32.dll
c:\windows\system32\wininet.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\version.dll
c:\windows\system32\shell32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\shimeng.dll
c:\windows\apppatch\acgenral.dll
c:\windows\system32\winmm.dll
c:\windows\system32\msacm32.dll
c:\windows\system32\userenv.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
c:\windows\system32\comctl32.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\comres.dll
c:\progra~1\micros~2\office12\gra8e1~1.dll
c:\progra~1\micros~2\office12\grooveutil.dll
c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcr80.dll
c:\progra~1\micros~2\office12\groovenew.dll
c:\windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\atl80.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\cscui.dll
c:\windows\system32\cscdll.dll
c:\windows\system32\themeui.dll
c:\windows\system32\xpsp2res.dll
c:\windows\system32\msutb.dll
c:\windows\system32\msctf.dll
c:\windows\system32\samlib.dll
c:\windows\system32\linkinfo.dll
c:\windows\system32\ntshrui.dll
c:\windows\system32\atl.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\netshell.dll
c:\windows\system32\rtutils.dll
c:\windows\system32\credui.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\ws2help.dll
c:\windows\system32\iphlpapi.dll
c:\progra~1\micros~2\office12\gr99d3~1.dll
c:\windows\system32\urlmon.dll
c:\windows\system32\msxml3.dll
c:\windows\system32\msi.dll
c:\progra~1\micros~2\office12\gr326c~1.dll
c:\windows\system32\winsta.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\wsock32.dll
c:\windows\system32\stobject.dll
c:\windows\system32\batmeter.dll
c:\windows\system32\powrprof.dll
c:\windows\system32\wtsapi32.dll
c:\windows\system32\wdmaud.drv
c:\windows\system32\msacm32.drv
c:\windows\system32\midimap.dll
c:\windows\system32\mpr.dll
c:\windows\system32\drprov.dll
c:\windows\system32\ntlanman.dll
c:\windows\system32\netui0.dll
c:\windows\system32\netui1.dll
c:\windows\system32\netrap.dll
c:\windows\system32\davclnt.dll
c:\windows\system32\shdoclc.dll
c:\windows\system32\browselc.dll
c:\program files\microsoft office\office12\1033\grooveintlresource.dll
c:\windows\system32\msftedit.dll
c:\windows\system32\msgina.dll
c:\windows\system32\odbc32.dll
c:\windows\system32\comdlg32.dll
c:\windows\system32\odbcint.dll
c:\windows\system32\duser.dll
c:\windows\system32\mlang.dll
c:\program files\common files\ahead\lib\nerodigitalext.dll
c:\program files\common files\ahead\lib\mfc71.dll
c:\program files\common files\ahead\lib\msvcr71.dll
c:\program files\common files\ahead\lib\msvcp71.dll
c:\windows\system32\riched32.dll
c:\windows\system32\riched20.dll
c:\program files\common files\microsoft shared\office11\msxml5.dll
c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
c:\windows\system32\mscms.dll
c:\windows\system32\winspool.drv
c:\windows\system32\sxs.dll
c:\program files\nero\nero 7\nero backitup\nbshell.dll
c:\program files\nero\nero 7\nero backitup\mfc71u.dll
c:\program files\poweriso\pwrisosh.dll
c:\program files\grisoft\avg7\avgse.dll
c:\windows\system32\printui.dll
c:\windows\system32\activeds.dll
c:\windows\system32\adsldpc.dll
c:\windows\system32\cfgmgr32.dll
C:\WINDOWS\RTHDCPL.EXE
c:\windows\rthdcpl.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\dsound.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\winmm.dll
c:\windows\system32\version.dll
c:\windows\system32\hhctrl.ocx
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\comctl32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\mpr.dll
c:\windows\system32\winspool.drv
c:\windows\system32\comdlg32.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\wintrust.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\system32\imagehlp.dll
c:\windows\system32\wdmaud.drv
c:\windows\system32\msacm32.drv
c:\windows\system32\msacm32.dll
c:\windows\system32\midimap.dll
c:\windows\system32\msctf.dll
c:\windows\system32\ksuser.dll
C:\WINDOWS\SYSTEM32\RUNDLL32.EXE
c:\windows\system32\rundll32.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\imagehlp.dll
c:\windows\system32\shimeng.dll
c:\windows\apppatch\acgenral.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\winmm.dll
c:\windows\system32\ole32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msacm32.dll
c:\windows\system32\version.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\userenv.dll
c:\windows\system32\uxtheme.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
c:\windows\system32\comctl32.dll
c:\windows\system32\nvmctray.dll
c:\windows\system32\nvapi.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\msctf.dll
C:\PROGRAM FILES\GRISOFT\AVG ANTI-SPYWARE 7.5\AVGAS.EXE
c:\program files\grisoft\avg anti-spyware 7.5\avgas.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\psapi.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\msvcrt.dll
c:\program files\grisoft\avg anti-spyware 7.5\engine.dll
c:\windows\system32\shfolder.dll
c:\windows\system32\winmm.dll
c:\windows\system32\msimg32.dll
c:\windows\system32\comdlg32.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
c:\windows\system32\shell32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\wsock32.dll
c:\windows\system32\ws2_32.dll
c:\windows\system32\ws2help.dll
c:\windows\system32\version.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\msctf.dll
c:\windows\system32\apphelp.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\comres.dll
c:\windows\system32\oleaut32.dll
c:\progra~1\micros~2\office12\gra8e1~1.dll
c:\progra~1\micros~2\office12\grooveutil.dll
c:\windows\system32\wininet.dll
c:\windows\system32\crypt32.dll
c:\windows\system32\msasn1.dll
c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcr80.dll
c:\progra~1\micros~2\office12\groovenew.dll
c:\windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\atl80.dll
c:\windows\system32\rsaenh.dll
c:\windows\system32\cscui.dll
c:\windows\system32\cscdll.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\linkinfo.dll
c:\windows\system32\ntshrui.dll
c:\windows\system32\atl.dll
c:\windows\system32\netapi32.dll
c:\windows\system32\userenv.dll
c:\windows\system32\shdocvw.dll
c:\windows\system32\cryptui.dll
c:\windows\system32\wintrust.dll
c:\windows\system32\imagehlp.dll
c:\windows\system32\wldap32.dll
c:\windows\system32\ntmarta.dll
c:\windows\system32\samlib.dll
c:\windows\system32\mswsock.dll
c:\windows\system32\hnetcfg.dll
c:\windows\system32\wshtcpip.dll
c:\windows\system32\dnsapi.dll
c:\windows\system32\winrnr.dll
c:\windows\system32\rasadhlp.dll
C:\PROGRAM FILES\CYBERLINK\POWERDVD\PDVDSERV.EXE
c:\program files\cyberlink\powerdvd\pdvdserv.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\shell32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\ole32.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
c:\windows\system32\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\comres.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\version.dll
c:\program files\cyberlink\shared files\clrcengine2.dll
c:\windows\system32\xpsp2res.dll
c:\windows\system32\msctf.dll
C:\PROGRA~1\GRISOFT\AVG7\AVGCC.EXE
c:\progra~1\grisoft\avg7\avgcc.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\shell32.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shlwapi.dll
c:\progra~1\grisoft\avg7\avgtmgr.dll
c:\progra~1\grisoft\avg7\avgctrl.dll
c:\progra~1\grisoft\avg7\mfc71.dll
c:\windows\system32\msvcr71.dll
c:\windows\system32\comctl32.dll
c:\windows\system32\ole32.dll
c:\windows\system32\oleaut32.dll
c:\windows\system32\msvfw32.dll
c:\windows\system32\winmm.dll
c:\windows\system32\msvcp71.dll
c:\windows\system32\version.dll
c:\windows\system32\comdlg32.dll
c:\windows\system32\shfolder.dll
c:\progra~1\grisoft\avg7\avgabout.dll
c:\progra~1\grisoft\avg7\avgtest.dll
c:\progra~1\grisoft\avg7\avgtres.dll
c:\progra~1\grisoft\avg7\avgset.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
c:\progra~1\grisoft\avg7\avglog.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\msctf.dll
c:\windows\system32\setupapi.dll
c:\windows\system32\clbcatq.dll
c:\windows\system32\comres.dll
c:\program files\grisoft\avg7\avgcfg.dll
c:\program files\grisoft\avg7\avgklib.dll
c:\program files\grisoft\avg7\avglng.dll
c:\windows\system32\xpsp2res.dll
c:\progra~1\grisoft\avg7\avgresf.dll
c:\windows\system32\psapi.dll
c:\program files\grisoft\avg7\avgf.dll
c:\program files\grisoft\avg7\avgres.dll
c:\program files\grisoft\avg7\avgcckrn.dll
c:\program files\grisoft\avg7\avgvault.dll
c:\program files\grisoft\avg7\avgrep.dll
c:\program files\grisoft\avg7\avgunarc.dll
c:\progra~1\grisoft\avg7\avgemsui.dll
c:\progra~1\grisoft\avg7\avgemcps.dll
C:\PROGRAM FILES\POWERISO\PWRISOVM.EXE
c:\program files\poweriso\pwrisovm.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\comdlg32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\comctl32.dll
c:\windows\system32\shell32.dll
c:\windows\system32\winspool.drv
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
c:\windows\system32\uxtheme.dll
c:\windows\system32\msctf.dll
C:\PROGRAM FILES\LEXMARK 1400 SERIES\LXDJAMON.EXE
c:\program files\lexmark 1400 series\lxdjamon.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\mscoree.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\secur32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
Topic: Trojan horse downloader.Zlob.HCB (Read 3455 times)