Hi. Ive noticed recently that my computers been doing some weird things. For example- Whenever I dial up the internet the computer freezes about 10 seconds after connection had been made. I reeboot and the internet works fine. This had happened every time, the net works the second time never the first. -The computer screen often turns itself off at certain times when I'm typing or playing. The speakers stil work, the tower is still on but the screen is off and wont come back on until I restart the computer by turing it off at the wall, which can't be a good thing to do 3 times a day. -The mouse I'm using now isnt too good but when I plug the good one in, the computer automatically looses power but as soon as I disconnect the mouse the computer comes back on. Most of these things I think would be spyware or viruses. I've run numerous checks with many programs and they all say Im clean. Is there anything I can do to stop this?
Logfile of HijackThis v1.99.1 Scan saved at 11:17:18 AM, on 4/28/2006 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\cisvc.exe C:\WINDOWS\system32\drivers\KodakCCS.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\TOSHIBA\gigabeat room 3.0\TosGbWatcher.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\WINDOWS\System32\wuauclt.exe C:\WINDOWS\System32\cidaemon.exe C:\Program Files\Internet Download Manager\IDMan.exe C:\HJT\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.optusnet.com.au R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.searchforit.com/searchbar R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchforit.com/searchbar R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by OptusNet O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SafeGuard Protect PCShield - {564FFB73-9EEF-4969-92FA-5FC4A92E2C2A} - C:\WINDOWS\System32\sfg.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [PCShield] regsvr32 /s "C:\WINDOWS\System32\sfg.dll" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [xdbrmwb] c:\windows\system32\lbbzaw.exe O4 - HKLM\..\Run: [YMDCApp] YMDCApp.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [TosGbWatcher] "C:\Program Files\TOSHIBA\gigabeat room 3.0\TosGbWatcher.exe" O4 - HKLM\..\Run: [sunasDTServ] C:\Program Files\Sunbelt Software\CounterSpy Client\sunasDTServ.exe O4 - HKLM\..\Run: [sunasServ] C:\Program Files\Sunbelt Software\CounterSpy Client\sunasServ.exe O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKCU\..\Run: [PCShield] regsvr32 /s "C:\WINDOWS\System32\sfg.dll" O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe O4 - HKCU\..\Run: [SYSfit] C:\WINDOWS\SYSfit.exe O4 - HKCU\..\Run: [MallTycoonSetup.exe] C:\DOCUME~1\User\Desktop\MALLTY~1.EXE /r O4 - HKCU\..\Run: [Spyware-Cop] "C:\PROGRA~1\SPYWAR~1\Spyware-Cop.exe" /s O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxmk294YYAU O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll O14 - IERESET.INF: START_PAGE_URL=http://www.optusnet.com.au O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.8.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1127870009497 O16 - DPF: {8C875948-9C60-4381-9248-0DF180542D53} - http://installs.hotbar.com/installs/hbtools/programs/hbtools.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{FD1A1914-4464-4676-A665-B5B0F63FAB3A}: NameServer = 203.2.75.132 198.142.0.51 O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: MCPClient - C:\PROGRA~1\COMMON~1\Stardock\mcpstub.dll O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing) O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
Hi andy2000 You really have some bad guys on your computer Uninstall via add/remove programs (control panel): MyWebSearch Spyware-Cop or SpywareKilla Open HjT, click do a system scan only, checkmark these and press fix checked: R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.searchforit.com/searchbar R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.searchforit.com/searchbar O2 - BHO: SafeGuard Protect PCShield - {564FFB73-9EEF-4969-92FA-5FC4A92E2C2A} - C:\WINDOWS\System32\sfg.dll O4 - HKLM\..\Run: [PCShield] regsvr32 /s "C:\WINDOWS\System32\sfg.dll" O4 - HKLM\..\Run: [xdbrmwb] c:\windows\system32\lbbzaw.exe O4 - HKCU\..\Run: [PCShield] regsvr32 /s "C:\WINDOWS\System32\sfg.dll" O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe O4 - HKCU\..\Run: [SYSfit] C:\WINDOWS\SYSfit.exe O4 - HKCU\..\Run: [Spyware-Cop] "C:\PROGRA~1\SPYWAR~1\Spyware-Cop.exe" /s O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxmk294YYAU O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCent... O16 - DPF: {8C875948-9C60-4381-9248-0DF180542D53} - http://installs.hotbar.com/installs/hbtools/programs/hbtools.cab Please download ewido anti malware it is a free version of the program -> http://www.ewido.net/en/download/ 1. Install ewido security suite 2. When installing, under "Additional Options" uncheck.. * Install background guard * Install scan via context menu 3. Launch ewido, there should be an icon on your desktop, double-click it. 4. The program will now open to the main screen. 5. When you run ewido for the first time, you may get a warning "Database could not be found!". Click OK. We will fix this in a moment. 6. You will need to update ewido to the latest definition files. * On the left hand side of the main screen click update. * Then click on Start Update. 7. The update will start and a progress bar will show the updates being installed. (the status bar at the bottom will display ("Update successful") If you are having problems with the updater, you can use this link to manually update ewido. ewido manual updates -> http://www.ewido.net/en/download/updates/ Once the updates are installed do the following: Reboot your computer in SafeMode by doing the following: 1. Restart your computer 2. After hearing your computer beep once during startup, but before the Windows icon appears, press F8. 3. Instead of Windows loading as normal, a menu should appear 4. Select the first option, to run Windows in Safe Mode. Delete if found: C:\WINDOWS\System32\sfg.dll c:\windows\system32\lbbzaw.exe C:\PROGRA~1\MYWEBS~1 C:\WINDOWS\SYSfit.exe C:\PROGRA~1\SPYWAR~1 C:\WINDOWS\web\related.htm Then launch ewido: * Click on scanner * Click on Complete System Scan and the scan will begin. * You will be prompted to clean the first infection. * Select "Perform action on all infections", then proceed. * Once the scan has completed, there will be a button located on the bottom of the screen named Save report * Click Save report. * Save the report .txt file to your desktop or a location where you can find it easily. Close ewido security suite. Reboot back to normal mode Send a fresh HjT log and ewido report.
Thanks so much. Will do then get back to you with the updated reports, sorry might take a while, got a lot of stuff going on. Thanks heaps again, didnt know there were that many bad things on my computer. Andrew
Hey again. Ive done the things you said to but I think I may have missed something on the HjT list. Just tell me if I have. Ive also got the Ewido report. Logfile of HijackThis v1.99.1 Scan saved at 8:01:03 PM, on 4/29/2006 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\cisvc.exe C:\Program Files\ewido anti-malware\ewidoctrl.exe C:\WINDOWS\system32\drivers\KodakCCS.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\TOSHIBA\gigabeat room 3.0\TosGbWatcher.exe C:\Program Files\Sunbelt Software\CounterSpy Client\sunasDTServ.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Outlook Express\msimn.exe C:\Program Files\Sunbelt Software\CounterSpy Client\CounterSpy.exe C:\WINDOWS\System32\wuauclt.exe C:\WINDOWS\System32\wuauclt.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\HJT\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.optusnet.com.au R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.searchforit.com/searchbar R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by OptusNet O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SafeGuard Protect PCShield - {564FFB73-9EEF-4969-92FA-5FC4A92E2C2A} - C:\WINDOWS\System32\sfg.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [TosGbWatcher] "C:\Program Files\TOSHIBA\gigabeat room 3.0\TosGbWatcher.exe" O4 - HKLM\..\Run: [sunasDTServ] C:\Program Files\Sunbelt Software\CounterSpy Client\sunasDTServ.exe O4 - HKLM\..\Run: [sunasServ] C:\Program Files\Sunbelt Software\CounterSpy Client\sunasServ.exe O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: Download All Links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll O14 - IERESET.INF: START_PAGE_URL=http://www.optusnet.com.au O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1127870009497 O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{FD1A1914-4464-4676-A665-B5B0F63FAB3A}: NameServer = 203.2.75.132 198.142.0.51 O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: MCPClient - C:\PROGRA~1\COMMON~1\Stardock\mcpstub.dll O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing) O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe --------------------------------------------------------- ewido anti-malware - Scan report --------------------------------------------------------- + Created on: 7:55:38 PM, 4/29/2006 + Report-Checksum: 6B45AF4D + Scan result: HKU\S-1-5-21-583907252-1644491937-682003330-1003\Software\Softomate -> Adware.CoolWebSearch : Cleaned with backup :mozilla.18:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.19:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.20:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.29:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.30:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.33:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.34:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.35:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.36:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.37:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.38:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.39:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.40:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.41:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.42:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.43:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.44:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.45:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.46:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.47:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.48:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.49:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.50:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.51:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.52:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.53:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.67:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.68:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.69:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.70:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.82:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup :mozilla.84:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.85:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup :mozilla.86:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup :mozilla.87:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.88:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.89:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.90:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.91:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.100:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.104:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.105:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.106:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.107:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.182:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup :mozilla.183:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.188:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup :mozilla.189:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup :mozilla.191:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup :mozilla.192:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup :mozilla.194:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Revenue : Cleaned with backup :mozilla.199:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Com : Cleaned with backup :mozilla.200:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Com : Cleaned with backup :mozilla.209:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.212:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup :mozilla.213:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup :mozilla.245:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.251:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Overture : Cleaned with backup :mozilla.252:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.253:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.254:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.255:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.260:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.261:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.262:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.267:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Realtracker : Cleaned with backup :mozilla.268:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Realtracker : Cleaned with backup :mozilla.271:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.274:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.283:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup :mozilla.284:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup :mozilla.286:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.291:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup :mozilla.292:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup :mozilla.295:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Yadro : Cleaned with backup :mozilla.296:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Targetnet : Cleaned with backup :mozilla.297:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\default\unt3eae7.slt\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.6:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.7:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.8:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.9:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.18:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.19:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.29:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup :mozilla.42:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.43:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.44:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.45:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup :mozilla.49:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.50:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.51:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.52:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.53:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.57:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup :mozilla.58:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup :mozilla.59:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup :mozilla.60:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup :mozilla.61:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup :mozilla.62:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup :mozilla.63:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup :mozilla.64:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup :mozilla.65:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup :mozilla.66:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Aavalue : Cleaned with backup :mozilla.74:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup :mozilla.75:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup :mozilla.76:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup :mozilla.80:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup :mozilla.83:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.84:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.85:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.86:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Masterstats : Cleaned with backup :mozilla.87:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.88:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.89:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.90:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.91:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.92:C:\Documents and Settings\User\Application Data\Mozilla\Profiles\Default User\3b85wd5i.slt\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup C:\Documents and Settings\User\Cookies\user@2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup C:\Documents and Settings\User\Cookies\user@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned with backup C:\Documents and Settings\User\Cookies\user@atdmt[1].txt -> TrackingCookie.Atdmt : Cleaned with backup C:\Documents and Settings\User\Cookies\user@casalemedia[1].txt -> TrackingCookie.Casalemedia : Cleaned with backup C:\Documents and Settings\User\Cookies\user@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup C:\Documents and Settings\User\Cookies\user@e-2dj6wfl4woajklo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup C:\Documents and Settings\User\Cookies\user@e-2dj6wjliwlazecp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup C:\Documents and Settings\User\Cookies\user@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned with backup C:\Documents and Settings\User\Cookies\user@maxis.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup C:\Documents and Settings\User\Cookies\user@media.fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned with backup C:\Documents and Settings\User\Cookies\user@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup C:\Documents and Settings\User\Cookies\user@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned with backup C:\Documents and Settings\User\Cookies\user@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned with backup C:\Documents and Settings\User\Cookies\user@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned with backup C:\Documents and Settings\User\Cookies\user@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned with backup C:\Documents and Settings\User\Desktop\Andrew's Folder\Other\Travis\DOLLZ!\Setup.exe -> Adware.180Solutions : Cleaned with backup C:\Documents and Settings\User\Local Settings\Temp\Cookies\user@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned with backup C:\Documents and Settings\User\Local Settings\Temp\Cookies\user@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned with backup C:\WINDOWS\system\YMDCApp.exe -> Trojan.Agent.ei : Cleaned with backup ::Report End
One leftover: Fix this with HjT: O2 - BHO: SafeGuard Protect PCShield - {564FFB73-9EEF-4969-92FA-5FC4A92E2C2A} - C:\WINDOWS\System32\sfg.dll Delete: C:\WINDOWS\System32\sfg.dll Reboot and send a fresh HjT log I recommend you to use spywareblaster in order to prevent bad cookies coming -> http://www.javacoolsoftware.com/spywareblaster.html Also, antivirus would be nice to have AVG, avast and antivir are free antiviruses.
Haha. Thanks heaps, most problems have stopped but the computer does still turn itself off without warning from time to time, might be time for a new moniter
Nice to hear. Well, I can't help for that issue :/ New monitor or checking monitor's shutdown options might be a good idea