Søg
Avatar billede siggi Nybegynder
16. oktober 2005 - 10:24 Der er 8 kommentarer og
1 løsning

Net Offers pop up

Jeg har på beklageligevis fået en virus eller hvad det er, som gør at når jeg er på nettet, så popper der et vindue op med Net offers. (spam pop up). når jeg lukker vinduet kommer der efter lidt tid bare en ny og ny op igen.
hvor sletter jeg denne satan?
Avatar billede halvamatoer Nybegynder
16. oktober 2005 - 11:15 #1
kom med en hijackthis log
Avatar billede johnstigers Seniormester
16. oktober 2005 - 11:41 #2
Hijacktis finder du her, samt vejledning: http://arlet.dk/spybothjt.htm
Avatar billede siggi Nybegynder
16. oktober 2005 - 17:55 #3
her kommer hijackthis loggen:
Logfile of HijackThis v1.99.1
Scan saved at 17:56:51, on 16-10-2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\brss01a.exe
C:\Programmer\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\System32\RegSrvc.exe
C:\Programmer\Dantz\Retrospect\retrorun.exe
C:\WINDOWS\System32\RoamMgr.exe
C:\WINDOWS\System32\svchost.exe
c:\Programmer\Trend Micro\PC-cillin 2002\Tmntsrv.exe
C:\Programmer\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ATK0100\Hcontrol.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Progra~1\ASUS\Power4 Gear\BatteryLife.exe
C:\Programmer\Synaptics\SynTP\SynTPLpr.exe
C:\Programmer\Synaptics\SynTP\SynTPEnh.exe
C:\Programmer\Trend Micro\PC-cillin 2002\pccguide.exe
C:\Programmer\Trend Micro\PC-cillin 2002\PCCClient.exe
C:\WINDOWS\System32\1XConfig.exe
C:\Programmer\Trend Micro\PC-cillin 2002\Pop3trap.exe
C:\Programmer\Intel\NCS\PROSet\PRONoMgr.exe
C:\Programmer\Ahead\InCD\InCD.exe
C:\PROGRA~1\FÆLLES~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe
C:\WINDOWS\MXOALDR.EXE
C:\Programmer\Java\jre1.5.0_02\bin\jusched.exe
C:\Programmer\iTunes\iTunesHelper.exe
C:\Programmer\QuickTime\qttask.exe
C:\Programmer\iPod\bin\iPodService.exe
C:\Programmer\HbTools\Bin\4.7.1.0\HbtOEAddOn.exe
C:\PROGRA~1\FÆLLES~1\PCSuite\Services\SERVIC~1.EXE
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\Programmer\Microsoft ActiveSync\WCESCOMM.EXE
C:\Programmer\Asus\Asus ChkMail\ChkMail.exe
C:\Programmer\Asus\ASUS Hotkey\Hotkey.exe
C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Programmer\Nikon\NkView6\NkvMon.exe
C:\Programmer\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Programmer\Microsoft AntiSpyware\gcasDtServ.exe
C:\Programmer\Internet Explorer\iexplore.exe
C:\Programmer\HbTools\Bin\4.7.1.0\HbtSrv.exe
C:\Documents and Settings\Lasse\Skrivebord\Ny mappe\hjt.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local.,
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmer\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmer\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: HbTools - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Programmer\HbTools\Bin\4.7.1.0\HbtHostIE.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programmer\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programmer\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Programmer\HbTools\Bin\4.7.1.0\HbtHostIE.dll
O4 - HKLM\..\Run: [Hcontrol] C:\WINDOWS\ATK0100\Hcontrol.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [Power_Gear] C:\Progra~1\ASUS\Power4 Gear\BatteryLife.exe 1
O4 - HKLM\..\Run: [SynTPLpr] C:\Programmer\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programmer\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [pccguide.exe] "c:\Programmer\Trend Micro\PC-cillin 2002\pccguide.exe"
O4 - HKLM\..\Run: [PCCClient.exe] "c:\Programmer\Trend Micro\PC-cillin 2002\PCCClient.exe"
O4 - HKLM\..\Run: [Pop3trap.exe] "c:\Programmer\Trend Micro\PC-cillin 2002\Pop3trap.exe"
O4 - HKLM\..\Run: [PRONoMgr.exe] c:\Programmer\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Programmer\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\FÆLLES~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [MaxtorOneTouch] C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe
O4 - HKLM\..\Run: [MXO Auto Loader] C:\WINDOWS\MXOALDR.EXE
O4 - HKLM\..\Run: [gcasServ] "C:\Programmer\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmer\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmer\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HbTools] C:\Programmer\HbTools\Bin\4.7.1.0\HbtOEAddOn.exe
O4 - HKLM\..\Run: [iqbyzkkd] C:\WINDOWS\System32\bglazamf.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programmer\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - Global Startup: ASUS ChkMail.lnk = C:\Programmer\Asus\Asus ChkMail\ChkMail.exe
O4 - Global Startup: Hotkey.lnk = C:\Programmer\Asus\ASUS Hotkey\Hotkey.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: NkvMon.exe.lnk = C:\Programmer\Nikon\NkView6\NkvMon.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Programmer\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Programmer\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programmer\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programmer\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\programmer\bonjour\mdnsnsp.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com.tw
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://downol.dr.dk/download/netradio/Rawflow.cab
O16 - DPF: {1819853F-A3CA-4BC4-AD65-EC29D7448494} (CBPLauncher Class) - https://secure.centrebet.com/poker/centrebetpokerlauncher.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DA505AF8-D112-45AC-B9D1-23C437A3FBFE}: NameServer = 192.168.1.254
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: Sebring - c:\WINDOWS\System32\LgNotify.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Programmer\Fælles filer\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Bonjour-tjeneste (Bonjour Service) - Apple Computer, Inc. - C:\Programmer\Bonjour\mDNSResponder.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\System32\brsvc01a.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmer\Fælles filer\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - AHEAD Software - C:\Programmer\Ahead\InCD\InCDsrv.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Programmer\iPod\bin\iPodService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - c:\Programmer\Intel\NCS\Sync\NetSvc.exe
O23 - Service: PC-cillin PersonalFirewall (PCCPFW) - Trend Micro Inc. - c:\Programmer\Trend Micro\PC-cillin 2002\PCCPFW.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\System32\RegSrvc.exe
O23 - Service: Retrospect Launcher (RetroLauncher) - Dantz Development Corporation - C:\Programmer\Dantz\Retrospect\retrorun.exe
O23 - Service: RoamMgr - Intel Corporation - C:\WINDOWS\System32\RoamMgr.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation  - C:\WINDOWS\System32\S24EvMon.exe
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Inc. - c:\Programmer\Trend Micro\PC-cillin 2002\Tmntsrv.exe
Avatar billede halvamatoer Nybegynder
19. oktober 2005 - 01:03 #4
Sorry har været lidt væk - og ryger i seng nu - er først tilbage til aften

Nu er jeg ikke supereksperten i dette - så lad lige en bekræfte før du udfører.

Jeg er i tvivl mht. C:\WINDOWS\System32\bglazamf.exe - kan intet umiddelbart finde på den. Du må derfor gerne uploade den til: http://virusscan.jotti.org/

Med mindre vi har en hurtigt kollega - der melder ok for den. I det tilfælde skal du se bort fra de 2 linjer med stjerne foran


1. Hent Ewido:
http://www.spywarefri.dk/forum/links/ewido.htm
Klik på Demo download.
Installer og kør Ewido - Opdater straks efter installationen programmet (men lad være med at scanne endnu).

2. Genstart i fejlsikret (tast F8 ved opstart)

3. Kør Hijackthis, scan, sæt flueben ved linierne listet her, luk alle vinduer undtaget Hijackthis, klik på "Fix checked":

O2 -BHO: HbTools - {74CC49F7-EB32-4A08-B204-948962A6E3DB}-C:\Programmer\HbTools\Bin\4.7.1.0\HbtHostIE.dll
O3 -Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB}- C:\Programmer\HbTools\Bin\4.7.1.0\HbtHostIE.dll
O4 - HKLM\..\Run: [HbTools] C:\Programmer\HbTools\Bin\4.7.1.0\HbtOEAddOn.exe
* O4 - HKLM\..\Run: [iqbyzkkd] C:\WINDOWS\System32\bglazamf.exe



Sletning af filer og mapper:
Åbn en mappe, klik på Funktioner=>Mappeindstillinger=>Vis.
Fjern flueben ved "Skjul beskyttede operativsystemfiler".
Fjern flueben ved "Skjul filtypenavne for kendte filtyper".
Sæt prik i "Vis skjulte filer og mapper".

Genstart i fejlsikret (tryk på <F8> under opstarten), slet mapper og filer listet herunder (nogle af dem er muligvis allerede blevet slettet af Hijackthis).
-------------------
Filer:
C:\Programmer\HbTools\Bin\4.7.1.0\HbtOEAddOn.exe
* C:\WINDOWS\System32\bglazamf.exe
C:\Programmer\HbTools\Bin\4.7.1.0\HbtHostIE.dll
------------------------------------------------


4. Kør en fuld scanning med Ewido. Programmet laver en lille log, som du skal kopiere herind.

5. Genstart og kom med en frisk Hijackthislog, samt loggen fra Ewido.
Avatar billede halvamatoer Nybegynder
19. oktober 2005 - 19:31 #5
Har checket den *-markerede skal væk.
Avatar billede johnstigers Seniormester
19. oktober 2005 - 20:00 #6
Det ser ok ud amatoer ;)

siggi> bare kør efter amatoers anvisning.
Avatar billede siggi Nybegynder
22. oktober 2005 - 13:01 #7
mange tak indtil videre
her kommer ewido log
------
---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------

+ Created on:            12:54:52, 22-10-2005
+ Report-Checksum:        B3C3D620

+ Scan result:

    HKLM\SOFTWARE\Classes\CLSID\{0AB71193-EC19-4D70-85C2-E46E2FF02755}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\CLSID\{1E0004EC-5DF0-48C7-A8F0-FBB0488A3D94} -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\CLSID\{1E0004EC-5DF0-48C7-A8F0-FBB0488A3D94}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\CLSID\{31A59636-0FA3-4A56-954D-DB7AD02840D8}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\CLSID\{3FA917B9-DF69-477F-9E4F-B60D929DE79F}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\CLSID\{420C35C9-E4F2-49F9-BF67-2BE1ECF86989}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\CLSID\{66B90ADB-0BE3-40AE-8680-84A6F0577CA0}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\CLSID\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\CLSID\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\CLSID\{A14C0D8D-E753-4E73-9E2B-4070791D8940}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\CLSID\{C2BAA4C9-AE1E-4605-AE2F-A1C49A30D881}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\CLSID\{ED8525EA-2BFC-4440-BD8A-20EFB9D5E541}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\CLSID\{FA16BCE1-5E36-472A-8466-E0CDD5CE00E6} -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\CLSID\{FA16BCE1-5E36-472A-8466-E0CDD5CE00E6}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp\CLSID -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp\CLSID\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp\CurVer -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp.1 -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp.1\CLSID\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices\CLSID -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices\CurVer -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices.1 -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx\CLSID -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx\CurVer -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx.1 -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtHostIE.Bho -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtHostIE.Bho\CLSID -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtHostIE.Bho\CLSID\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtHostIE.Bho\CurVer -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtHostIE.Bho.1 -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtHostIE.Bho.1\CLSID\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim\CLSID -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim\CurVer -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim.1 -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend\CLSID -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend\CurVer -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend.1 -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbTools.HbtCommBand -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbTools.HbtCommBand\CLSID -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbTools.HbtCommBand\CLSID\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbTools.HbtCommBand\CurVer -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbTools.HbtCommBand.1 -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbTools.HbtCommBand.1\CLSID\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar\CLSID -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar\CurVer -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar.1 -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices\CLSID -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices\CLSID\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices\CurVer -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices.1 -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices.1\CLSID\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI\CLSID -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI\CurVer -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI.1 -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl\CLSID -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl\CurVer -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl.1 -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtTools.HbMain -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtTools.HbMain\CLSID -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtTools.HbMain\CurVer -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\HbtTools.HbMain.1 -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{023A4648-601A-4C30-8A2E-C72EBFA99AF6}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{175816A5-219E-4079-B2F9-53C501C409BA}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{18E6C36A-C45F-4B60-A1A4-5C0BB16D4CC2} -> Spyware.CoolWebSearch : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{18E6C36A-C45F-4B60-A1A4-5C0BB16D4CC2}\TypeLib\\ -> Spyware.CoolWebSearch : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{19EBCBE0-9245-4397-BC5D-883D34782043}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{27C4569F-8728-4958-A920-A607CAE8153C}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{397A208B-3D09-4B3E-93E8-CA171886612E}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{421745E9-16DF-4EE4-A758-D51F939C49CB}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{4331EC56-0AAB-499E-8757-DD2EE44AD671}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{54286C3A-E044-4E65-BD44-528D6AE28A18}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{5D16197A-1EAA-45AF-B29A-69F1AA055E87}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{5F2B9DE7-F878-4762-8CFE-E9C58F082F0E}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{8654592E-952A-4E7C-A960-304763B35FA6}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{8A61A950-C325-4F44-BA64-273180FF3464}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{8D5C4EC6-AF8E-4B85-BA27-64BABE410510}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{8E98FAF8-794F-47F9-AF90-15305564ED81}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{AF15975B-1498-4740-8E6C-90AF78E4198C}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{B53D4CD4-406D-43CC-8244-7893D72236DD}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{B9BB3219-F84C-4060-966B-4A1E73E24226}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{BC8C2E5F-D8B4-4997-BCE3-8775C3707956}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{D082721F-4BD4-4B8B-BB82-06753EE6174F}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{D24F9D3C-5D4C-47F8-9AB7-632B44AD6A0D}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{F43EC88B-B6C8-4969-A763-E2BF55602CCE}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{F786CB18-3809-4E49-BC99-9A66DA47DB8B}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{F814BE58-1BF9-4B50-829A-E889F86127AD}\TypeLib\\ -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\Netscape Starting\CLSID\\ -> Spyware.Aureate : Cleaned with backup
    HKLM\SOFTWARE\Classes\TypeLib\{00A322E2-7D50-4DBA-BEA4-5C8078D47269} -> Spyware.CoolWebSearch : Cleaned with backup
    HKLM\SOFTWARE\Classes\TypeLib\{45397063-D7D0-47C2-9508-26487608A298} -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\TypeLib\{71E9CF40-AF72-4B55-BD3F-1FEA2A0EAEA6} -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\TypeLib\{71EFE583-62FE-4419-9918-CA3B683F7B36} -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\TypeLib\{9967A873-40F3-4C7E-9239-6C8760F19F61} -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Classes\TypeLib\{B9F51D42-CCA0-4408-BB02-D433D1865A3A} -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\HbTools -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\HbTools\Install -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\HbTools\MachineInfo -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\HbTools\Mail -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\HbTools\PI -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\HbTools\PI\3.2 -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\HbTools\Updates -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\HbTools\Upgrade -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\HostOI -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\HostOI\Mail -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\HostOI\Updates -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\HostOL -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\HostOL\Mail -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\HostOL\Updates -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\Hotbar -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\Hotbar\Install -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\Install -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\Install\CmpMap -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\Install\Icons -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\HbTools\Install\Links -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} -> Spyware.HotBar : Cleaned with backup
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HbToolsOutlookTools -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\Common -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\Common\Time -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\Common\Updates -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\dynamic -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\EUI -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\HtmlPPP -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\ImagesHistory -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\init -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Install -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\links -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Local -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\mail -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\options -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\PI -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\PI\3.2 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg800 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg801 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg802 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg803 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg807 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg808 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg810 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg811 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg812 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg818 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg819 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg824 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg825 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg826 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg827 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg828 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg829 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg830 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg842 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg843 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg844 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg845 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg847 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg848 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg849 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg856 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sg857 -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Sample\Hist\sgsbt -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\updates -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\UserInfo -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HbTools\Weather -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HostOI -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HostOI\links -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HostOI\setting -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\HostOI\Updates -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\hostol -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\hostol\links -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\hostol\Mail -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\hostol\setting -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\hostol\soho -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\hostol\Updates -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\hotbar -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\hotbar\MultiUrl -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\Time -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\Time\HostIE -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\Time\HostIE\Updates -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\Time\HostOI -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\Time\HostOI\Updates -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\Time\HostOL -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\HbTools\Time\HostOL\Updates -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\Microsoft\Internet Explorer\Explorer Bars\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{74CC49F7-EB32-4A08-B204-948962A6E3DB} -> Spyware.HotBar : Cleaned with backup
    HKU\S-1-5-21-1017170933-439724132-2179656868-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{74CC49F7-EB32-4A08-B204-948962A6E3DB} -> Spyware.HotBar : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@tradedoubler[1].txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@2o7[2].txt -> Spyware.Cookie.2o7 : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@adtech[2].txt -> Spyware.Cookie.Adtech : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@atdmt[2].txt -> Spyware.Cookie.Atdmt : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@doubleclick[2].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@advertising[2].txt -> Spyware.Cookie.Advertising : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@mediaplex[2].txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@as1.falkag[1].txt -> Spyware.Cookie.Falkag : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjlyeidzcbo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@servedby.advertising[1].txt -> Spyware.Cookie.Advertising : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@atdmt[1].txt -> Spyware.Cookie.Atdmt : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@mediaplex[1].txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@tribalfusion[1].txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@adopt.euroclick[1].txt -> Spyware.Cookie.Euroclick : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@qksrv[2].txt -> Spyware.Cookie.Qksrv : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@z1.adserver[1].txt -> Spyware.Cookie.Adserver : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@ilead.itrack[2].txt -> Spyware.Cookie.Itrack : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@buycom.122.2o7[2].txt -> Spyware.Cookie.2o7 : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@www.goldenpalace[1].txt -> Spyware.Cookie.Goldenpalace : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfkygjdzggo.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@cbs.112.2o7[2].txt -> Spyware.Cookie.2o7 : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wflisoc5slo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfkialczceo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjnywjc5cgp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjl4qldjweq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjlighajefo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wgkicjajadp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjlygjdjcco.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjkywgcpaap.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjmysmcpsgp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjkouoc5ifo.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjnyglcpshq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjny-1jczgg.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjk4koczmbp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjk4uid5seq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjl4gmd5obp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfloemajsgo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjl4chczglq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjliugcpslq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfk4aic5odp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjny-1oazse.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfk4soajklo.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjliqkajmbp.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfkiqjazeaq.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfmiwod5kgo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfk4ohajwdq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfkisjc5wkq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjlokgd5chq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjnyekdpelo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfk4wic5ghp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjlosjczobp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjk4uoczmdp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjlowmdjabp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wgkyagajaho.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfl4cidzkkp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfl4okdjkbp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfk4apc5wbo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjmikkdzgeo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wflogjazscp.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjnyclajoao.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@fastclick[1].txt -> Spyware.Cookie.Fastclick : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@stat.onestat[2].txt -> Spyware.Cookie.Onestat : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@bluestreak[2].txt -> Spyware.Cookie.Bluestreak : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@serving-sys[2].txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjlicldpkap.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjmiskdjekp.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjkogjdzadq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjlyqmajcko.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfk4woc5eap.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjk4oldpado.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfmikkd5ibo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@doubleclick[3].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjmyaic5ekp.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjmyekczmco.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@tradedoubler[3].txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@ad.yieldmanager[1].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@casalemedia[2].txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@adtech[1].txt -> Spyware.Cookie.Adtech : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjkowpc5ilo.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfmigicpgaq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjmyqgc5slq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjnyopazeep.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@centrport[2].txt -> Spyware.Cookie.Centrport : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjkokhc5elo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjlismdzsap.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjmykgdpocp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfmiejajkho.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjnygidpmeq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjloqmdzgbp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfk4gpcpwbo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfl4oodjego.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjk4onc5wbp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjk4andpshp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjloeicpslq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjl4gpdpmao.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjnygkcpcfo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjl4epdpgap.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjliqhdzmdp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wgkiwpd5clp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfl4wnd5ihq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjkykld5kco.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfloslajgcq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfkicidjsgp.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@adopt.specificclick[1].txt -> Spyware.Cookie.Specificclick : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@as1.falkag[3].txt -> Spyware.Cookie.Falkag : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfk4ghcjglp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjkysldzofq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjnycgd5sdo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjnyujczabo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wfkogld5cdo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjloakdpaeq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@as-us.falkag[1].txt -> Spyware.Cookie.Falkag : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@trafficmp[2].txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjnycmdjgfo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wgkicmc5aao.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@www.etracker[2].txt -> Spyware.Cookie.Etracker : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wgkiehd5igo.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@ads.pointroll[2].txt -> Spyware.Cookie.Pointroll : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@server.iad.liveperson[2].txt -> Spyware.Cookie.Liveperson : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@statcounter[2].txt -> Spyware.Cookie.Statcounter : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wgkykmazmeq.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjmialczcko.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjmiglcjklp.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjkyepdpilo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjnyggdjsgo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wjkooldjsdp.stats.esomniture[1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@e-2dj6wflouncpcbo.stats.esomniture[2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@advertising[3].txt -> Spyware.Cookie.Advertising : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@burstnet[2].txt -> Spyware.Cookie.Burstnet : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@counter.hitslink[2].txt -> Spyware.Cookie.Hitslink : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@com[2].txt -> Spyware.Cookie.Com : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@servedby.advertising[3].txt -> Spyware.Cookie.Advertising : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@statse.webtrendslive[1].txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@ads.addynamix[2].txt -> Spyware.Cookie.Addynamix : Cleaned with backup
    C:\Documents and Settings\Lasse\Cookies\lasse@2o7[1].txt -> Spyware.Cookie.2o7 : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@mediaplex[1].txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@doubleclick[2].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@as1.falkag[2].txt -> Spyware.Cookie.Falkag : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@adtech[2].txt -> Spyware.Cookie.Adtech : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@burstnet[2].txt -> Spyware.Cookie.Burstnet : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@counter11.sextracker[1].txt -> Spyware.Cookie.Sextracker : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@sextracker[2].txt -> Spyware.Cookie.Sextracker : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@fastclick[1].txt -> Spyware.Cookie.Fastclick : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@statcounter[2].txt -> Spyware.Cookie.Statcounter : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@overture[1].txt -> Spyware.Cookie.Overture : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@2o7[2].txt -> Spyware.Cookie.2o7 : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@z1.adserver[1].txt -> Spyware.Cookie.Adserver : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@estat[1].txt -> Spyware.Cookie.Estat : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@valueclick[2].txt -> Spyware.Cookie.Valueclick : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@atdmt[2].txt -> Spyware.Cookie.Atdmt : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@hitbox[1].txt -> Spyware.Cookie.Hitbox : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@ehg-lionsgate.hitbox[2].txt -> Spyware.Cookie.Hitbox : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@advertising[2].txt -> Spyware.Cookie.Advertising : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@xxxtoolbar[1].txt -> Spyware.Cookie.Xxxtoolbar : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@spylog[2].txt -> Spyware.Cookie.Spylog : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@com[2].txt -> Spyware.Cookie.Com : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@banner.commissionpartner[1].txt -> Spyware.Cookie.Commissionpartner : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@phg.hitbox[1].txt -> Spyware.Cookie.Hitbox : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@tradedoubler[1].txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@tribalfusion[1].txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@as-us.falkag[2].txt -> Spyware.Cookie.Falkag : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@questionmarket[1].txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@serving-sys[2].txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
    C:\Documents and Settings\ls\Cookies\ls@servedby.advertising[2].txt -> Spyware.Cookie.Advertising : Cleaned with backup
    C:\Documents and Settings\ls\Lokale indstillinger\Temp\access_now.exe -> Not-A-Virus.Pornware.Downloader.Tibsystems.a : Cleaned with backup
    C:\Documents and Settings\ls\Lokale indstillinger\Temp\Cookies\ls@mediaplex[2].txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
    C:\Documents and Settings\ls\Lokale indstillinger\Temp\Cookies\ls@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
    C:\Documents and Settings\ls\Lokale indstillinger\Temp\Cookies\ls@servedby.advertising[1].txt -> Spyware.Cookie.Advertising : Cleaned with backup
    C:\Documents and Settings\ls\Lokale indstillinger\Temp\Cookies\ls@advertising[1].txt -> Spyware.Cookie.Advertising : Cleaned with backup
    C:\Documents and Settings\ls\Lokale indstillinger\Temp\Cookies\ls@as1.falkag[1].txt -> Spyware.Cookie.Falkag : Cleaned with backup
    C:\Programmer\HbTools\bin\4.7.1.0\HbtHostOE.dll -> Spyware.HotBar : Cleaned with backup
    C:\Recycled\Dc327.exe -> Adware.Hotbar : Cleaned with backup


::Report End

-------
her kommer hijackthis log
-------
Logfile of HijackThis v1.99.1
Scan saved at 12:58:41, on 22-10-2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\brss01a.exe
C:\Programmer\ewido\security suite\ewidoctrl.exe
C:\Programmer\ewido\security suite\ewidoguard.exe
C:\Programmer\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\System32\RegSrvc.exe
C:\Programmer\Dantz\Retrospect\retrorun.exe
C:\WINDOWS\System32\RoamMgr.exe
C:\WINDOWS\System32\svchost.exe
c:\Programmer\Trend Micro\PC-cillin 2002\Tmntsrv.exe
C:\Programmer\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\1XConfig.exe
C:\WINDOWS\ATK0100\Hcontrol.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Progra~1\ASUS\Power4 Gear\BatteryLife.exe
C:\Programmer\Synaptics\SynTP\SynTPLpr.exe
C:\Programmer\Synaptics\SynTP\SynTPEnh.exe
C:\Programmer\Trend Micro\PC-cillin 2002\pccguide.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Programmer\Trend Micro\PC-cillin 2002\PCCClient.exe
C:\Programmer\Trend Micro\PC-cillin 2002\Pop3trap.exe
C:\Programmer\Intel\NCS\PROSet\PRONoMgr.exe
C:\Programmer\Ahead\InCD\InCD.exe
C:\PROGRA~1\FÆLLES~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe
C:\PROGRA~1\FÆLLES~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\MXOALDR.EXE
C:\Programmer\Microsoft AntiSpyware\gcasDtServ.exe
C:\Programmer\Java\jre1.5.0_02\bin\jusched.exe
C:\Programmer\iTunes\iTunesHelper.exe
C:\Programmer\iPod\bin\iPodService.exe
C:\Programmer\QuickTime\qttask.exe
C:\Programmer\MSN Messenger\MsnMsgr.Exe
C:\Programmer\Microsoft ActiveSync\WCESCOMM.EXE
C:\Programmer\Asus\Asus ChkMail\ChkMail.exe
C:\Programmer\Asus\ASUS Hotkey\Hotkey.exe
C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Programmer\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Programmer\Nikon\NkView6\NkvMon.exe
C:\Programmer\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Documents and Settings\Lasse\Skrivebord\Ny mappe\hjt.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local.,
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmer\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmer\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programmer\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programmer\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [Hcontrol] C:\WINDOWS\ATK0100\Hcontrol.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [Power_Gear] C:\Progra~1\ASUS\Power4 Gear\BatteryLife.exe 1
O4 - HKLM\..\Run: [SynTPLpr] C:\Programmer\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programmer\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [pccguide.exe] "c:\Programmer\Trend Micro\PC-cillin 2002\pccguide.exe"
O4 - HKLM\..\Run: [PCCClient.exe] "c:\Programmer\Trend Micro\PC-cillin 2002\PCCClient.exe"
O4 - HKLM\..\Run: [Pop3trap.exe] "c:\Programmer\Trend Micro\PC-cillin 2002\Pop3trap.exe"
O4 - HKLM\..\Run: [PRONoMgr.exe] c:\Programmer\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Programmer\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\FÆLLES~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [MaxtorOneTouch] C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe
O4 - HKLM\..\Run: [MXO Auto Loader] C:\WINDOWS\MXOALDR.EXE
O4 - HKLM\..\Run: [gcasServ] "C:\Programmer\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmer\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmer\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmer\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmer\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programmer\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - Global Startup: ASUS ChkMail.lnk = C:\Programmer\Asus\Asus ChkMail\ChkMail.exe
O4 - Global Startup: Hotkey.lnk = C:\Programmer\Asus\ASUS Hotkey\Hotkey.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: NkvMon.exe.lnk = C:\Programmer\Nikon\NkView6\NkvMon.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Programmer\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Programmer\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programmer\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programmer\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\programmer\bonjour\mdnsnsp.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com.tw
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://downol.dr.dk/download/netradio/Rawflow.cab
O16 - DPF: {1819853F-A3CA-4BC4-AD65-EC29D7448494} (CBPLauncher Class) - https://secure.centrebet.com/poker/centrebetpokerlauncher.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {D8575CE3-3432-4540-88A9-85A1325D3375} (e-Safekey) - https://netbank.danskebank.dk/html/activex/e-Safekey/DB/e-Safekey.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DA505AF8-D112-45AC-B9D1-23C437A3FBFE}: NameServer = 192.168.1.254
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: Sebring - c:\WINDOWS\System32\LgNotify.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Programmer\Fælles filer\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Bonjour-tjeneste (Bonjour Service) - Apple Computer, Inc. - C:\Programmer\Bonjour\mDNSResponder.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\System32\brsvc01a.exe
O23 - Service: ewido security suite control - ewido networks - C:\Programmer\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Programmer\ewido\security suite\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmer\Fælles filer\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - AHEAD Software - C:\Programmer\Ahead\InCD\InCDsrv.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Programmer\iPod\bin\iPodService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - c:\Programmer\Intel\NCS\Sync\NetSvc.exe
O23 - Service: PC-cillin PersonalFirewall (PCCPFW) - Trend Micro Inc. - c:\Programmer\Trend Micro\PC-cillin 2002\PCCPFW.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\System32\RegSrvc.exe
O23 - Service: Retrospect Launcher (RetroLauncher) - Dantz Development Corporation - C:\Programmer\Dantz\Retrospect\retrorun.exe
O23 - Service: RoamMgr - Intel Corporation - C:\WINDOWS\System32\RoamMgr.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation  - C:\WINDOWS\System32\S24EvMon.exe
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Inc. - c:\Programmer\Trend Micro\PC-cillin 2002\Tmntsrv.exe
Avatar billede halvamatoer Nybegynder
23. oktober 2005 - 16:48 #8
Udemærket log er ren nu - kører alt som det skal?
Avatar billede siggi Nybegynder
24. oktober 2005 - 08:12 #9
ja tak, det kører fint igen.
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
Se alle it-kurser fra Computerworld Kurser
IT-kurser om Microsoft 365, sikkerhed, personlig vækst, udvikling, digital markedsføring, grafisk design, SAP og forretningsanalyse.
Se alle it-kurser

Flere spørgsmål fra Andre onlineløsninger kategorien

Titel Indlæg Oprettet Seneste aktivitet
mit.dk - grotesk lang response tid Af Slettet bruger i Andre onlineløsninger 4 08/06/202610:18 10/06/202610:32
hvilken AI synes I er bedst? Af jcr18 i Andre onlineløsninger 8 23/05/202609:37 04/06/202615:11
AI google.com Af Peter Olsen i Andre onlineløsninger 3 04/04/202609:43 06/04/202608:43
Eboks.dk og Borger.dk Af nu_igen i Andre onlineløsninger 10 25/02/202612:56 03/03/202619:43
Mobilpay svindel Af nu_igen i Andre onlineløsninger 8 24/01/202609:50 26/01/202612:02
Se alle spørgsmål i kategorien Opret spørgsmål

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Opret Log ind

Du kan også logge ind via nedenstående tjenester

Alle kategorier på Eksperten
Seneste spørgsmål Seneste aktivitet
I dag 13:55 Ukendt sender e-mails fra - og til min e-mail adresse Af mort1 i Andet sikkerhed
I går 11:08 Forskel mellem klokkeslet start aften slut næste morgen Af krasmussen i Excel
23/0715:10 WINDOWS KOMPABILITET Af snestrup2000 i Windows
22/0720:19 DVB T2 tuner med optagefunktion Af ErikHg i Andet hardware
20/0716:00 Fildeling mellem 2 windows 11 systemer Af knudg i Windows
White papers
Flere white papers »