I have been having this problem with these constant popup pages. The page often ends with "muon.html I have been browsing the internet and it seems as if many people have this same problem.. Any suggestions on how to remove this? I tried Ad-aware, and spybot...
thanks
DOB
Full Version: popups ending in Muon.html
Lavasoft Support Forums > Archived Topics > Archives: Resolved/Inactive Topics > Ad-Aware SE Resolved/Inactive Issues
DOB,
Please can you make sure that you are using
Ad-aware SE Build 106
[if not Uninstall your old Ad-aware first then install SE]
Then use the WebUpDate
to get the latest Definition file
(SE1R106 02.05.2006)
To do this Open Ad-aware
Click the WebUpDate
button at the top right hand side of the Ad-aware screen (The world globe).
Click "Connect"
Ad-aware will then download the latest Definition file for you.
To make sure it is updated , look at the main
Ad-aware screen, and look under "Initialization Status"
It should say the Latest Definition file.
then scan doing a "Full Scan" and then post your logfile here by using the Add-Reply Feature .
As Logs are stored in :
C:\Documents and Settings\USERNAME\Application Data\Lavasoft\Ad-aware\Logs\.
An easy way to get there is to
click Start,
click Run
And type in and press ENTER: %appdata%
then click Lavasoft
then Ad-Aware
and then Logs.
scroll down to find the latest one that you have
(by date & time)
and open it right Click select all
copy and then paste the contents of it here.
(Make sure that all of your Logfile has been posted, sometimes it will require two post's to get it all)
I recommend that you use the WebUpDate just before you scan that way you will always be up to date.
(note The Application Data is a hidden folder, so you will need to show hidden files and folders
and for Windows 98/ME users your logs are stored in
C:\WINDOWS\All Users\Application Data\ ) by default.
GR@PH;<'S
Please can you make sure that you are using
Ad-aware SE Build 106
[if not Uninstall your old Ad-aware first then install SE]
Then use the WebUpDate
to get the latest Definition file
(SE1R106 02.05.2006)
To do this Open Ad-aware
Click the WebUpDate
button at the top right hand side of the Ad-aware screen (The world globe).
Click "Connect"
Ad-aware will then download the latest Definition file for you.
To make sure it is updated , look at the main
Ad-aware screen, and look under "Initialization Status"
It should say the Latest Definition file.
then scan doing a "Full Scan" and then post your logfile here by using the Add-Reply Feature .
As Logs are stored in :
C:\Documents and Settings\USERNAME\Application Data\Lavasoft\Ad-aware\Logs\.
An easy way to get there is to
click Start,
click Run
And type in and press ENTER: %appdata%
then click Lavasoft
then Ad-Aware
and then Logs.
scroll down to find the latest one that you have
(by date & time)
and open it right Click select all
copy and then paste the contents of it here.
(Make sure that all of your Logfile has been posted, sometimes it will require two post's to get it all)
I recommend that you use the WebUpDate just before you scan that way you will always be up to date.
(note The Application Data is a hidden folder, so you will need to show hidden files and folders
and for Windows 98/ME users your logs are stored in
C:\WINDOWS\All Users\Application Data\ ) by default.
GR@PH;<'S
QUOTE(DOB @ May 3 2006, 01:00 AM) 
I have been having this problem with these constant popup pages. The page often ends with "muon.html I have been browsing the internet and it seems as if many people have this same problem.. Any suggestions on how to remove this? I tried Ad-aware, and spybot...
thanks
DOB
thanks
DOB
QUOTE(GRAFX @ May 3 2006, 11:05 PM)
DOB,
Please can you make sure that you are using
Ad-aware SE Build 106
[if not Uninstall your old Ad-aware first then install SE]
Then use the WebUpDate
to get the latest Definition file
(SE1R106 02.05.2006)
To do this Open Ad-aware
Click the WebUpDate
button at the top right hand side of the Ad-aware screen (The world globe).
Click "Connect"
Ad-aware will then download the latest Definition file for you.
To make sure it is updated , look at the main
Ad-aware screen, and look under "Initialization Status"
It should say the Latest Definition file.
then scan doing a "Full Scan" and then post your logfile here by using the Add-Reply Feature .
As Logs are stored in :
C:\Documents and Settings\USERNAME\Application Data\Lavasoft\Ad-aware\Logs\.
An easy way to get there is to
click Start,
click Run
And type in and press ENTER: %appdata%
then click Lavasoft
then Ad-Aware
and then Logs.
scroll down to find the latest one that you have
(by date & time)
and open it right Click select all
copy and then paste the contents of it here.
(Make sure that all of your Logfile has been posted, sometimes it will require two post's to get it all)
I recommend that you use the WebUpDate just before you scan that way you will always be up to date.
(note The Application Data is a hidden folder, so you will need to show hidden files and folders
and for Windows 98/ME users your logs are stored in
C:\WINDOWS\All Users\Application Data\ ) by default.
GR@PH;<'S
Please can you make sure that you are using
Ad-aware SE Build 106
[if not Uninstall your old Ad-aware first then install SE]
Then use the WebUpDate
to get the latest Definition file
(SE1R106 02.05.2006)
To do this Open Ad-aware
Click the WebUpDate
button at the top right hand side of the Ad-aware screen (The world globe).
Click "Connect"
Ad-aware will then download the latest Definition file for you.
To make sure it is updated , look at the main
Ad-aware screen, and look under "Initialization Status"
It should say the Latest Definition file.
then scan doing a "Full Scan" and then post your logfile here by using the Add-Reply Feature .
As Logs are stored in :
C:\Documents and Settings\USERNAME\Application Data\Lavasoft\Ad-aware\Logs\.
An easy way to get there is to
click Start,
click Run
And type in and press ENTER: %appdata%
then click Lavasoft
then Ad-Aware
and then Logs.
scroll down to find the latest one that you have
(by date & time)
and open it right Click select all
copy and then paste the contents of it here.
(Make sure that all of your Logfile has been posted, sometimes it will require two post's to get it all)
I recommend that you use the WebUpDate just before you scan that way you will always be up to date.
(note The Application Data is a hidden folder, so you will need to show hidden files and folders
and for Windows 98/ME users your logs are stored in
C:\WINDOWS\All Users\Application Data\ ) by default.
GR@PH;<'S
thanks I will try that. I went to the store and purchasd the Ad-aware SE plus edition..
I had the free one downloaded off the internet. what is the difference? except for me paying for one...
DOB,
The main difference between the free personal and licensed versions is the inclusion of Ad-Watch, which is a realtime monitor for your system.
Here is a quick look at the differences between our new offerings.
Note: all versions include the options of the version(s) preceeding it.
Ad-Aware SE Personal:
CSI (Code Sequence Identification) Technology
Links to more information on detected content from our website
Extended protection against DLL-injection
New safety option that allows you to write protect sensitive system files such as the Hosts file
New comprehensive help manual
Configurations protection and hardened against third party uninstall
Enhanced Data base
Personal version plug-ins and extensions
Full featured quarantine support
Tweaks (optional configurations) (Limited)
Browser hijack protection
Customizable scanning (Limited)
Improved safety and redundant backups
Improved logging capability
Ad-Aware SE Plus:
Tweaks (optional configurations)
Customizable scanning
Automated Definitions file update support
Automated and silent operation for Ad-Aware and Ad-Watch
Basic command line parameters
Automated scanning
Automated Blocking
Plus version plug-ins and extensions
Ad-watch real-time monitor
Registry protection
Executable file extension protection
Free E-mail support
Advanced filtering
Printable reports
Ad-Watch rule editor
Popup Blocking (Internet Explorer only) Sites manager included in Ad-Watch
Ad-Aware SE Professional:
Process manager/viewer*
Additional command line parameters
Additional menu and export options for reports
Professional only plug-ins and extensions
Mapped network, UNC, and ram drive support
*With the Professional edition, we have included a powerful Process
manager/viewer that offers more than an ordinary process monitor. It has
been designed to completely support our all-new Plug-in interface and the
exporting features that are only available with the Plus and Professional
Editions.
What's new in Ad-Aware SE Professional edition?
Scanning engine improvements
Extended Memory scanning
Now scans all modules loaded by a process
uses our all new CSI (Code Sequence Identification) technology to identify
new and unknown variants of known targets
Extended protection against DLL-injection, SE can unload process modules on
the fly
Extended Registry scanning
Now scans registry branches of multiple user accounts
Performs additional smart checks to detect dynamically created references
Scanning speed noticeably faster
Extended Scanning for known and unknown/possible Browser-Hijackers
Extended Disk scanning
Now scans and lists alternate Data-streams on NTFS volumes
Now Ad-Aware supports scanning of Cabinet files, (including spanned
archives)
Scanning speed increased
Improved Hosts-file scan
Now Ad-Aware and Ad-Watch Use much smaller reference files
Several User Interface improvements
Improved Graphical UI
Ad-Aware now supports custom graphical Skins
more user friendly Plug-in/Extension GUI (Plug-ins and Extensions now shown
on separate screens)
New Scan Result view, Includes a scan summary and Detailed view
Ad-Aware now linked to the online TAC database
Multiple New Tweak options
Unloading of process modules during a scan
Obtaining command line of scanned processes
Ignoring spanned cab files
Scan registry for all users instead of current user only
Permanent archive caching
Always try to unload modules before deletion
Disable manual quarantine if auto quarantine is selected
Block pop-ups aggressively
Load aw minimized
Hide Ad-watch tray icon
Write protect system files after repair
Limit drive selection to fixed drives
Use gridlines in item lists
Log file detail section condensed
Proc-watch
Improved ProcWatch scanning capabilities and scanning speed (Using the new
fingerprint engine)
Several ProcWatch Interface improvements
Option to create a Hexdump of the process memory or dump the process memory
to disk
Several Log file improvements
Includes support for separate removal-Log files
Allows adding a Reference summary/index to log files
Log file contains overall more detailed information
Ad-watch
Several GUI improvements
Ad-watch now supports Cookie Blocking
Site-manager to edit the popup-blacklist included
Ad-watch now uses the new CSI technology to detect new and unknown variants
of known targets
New Ad-watch configuration screen
New rules editor for pre-defined blocking exclusions
Support for hiding the Ad-Watch tray icon for unattended operation.
GR@PH;<'S
The main difference between the free personal and licensed versions is the inclusion of Ad-Watch, which is a realtime monitor for your system.
Here is a quick look at the differences between our new offerings.
Note: all versions include the options of the version(s) preceeding it.
Ad-Aware SE Personal:
CSI (Code Sequence Identification) Technology
Links to more information on detected content from our website
Extended protection against DLL-injection
New safety option that allows you to write protect sensitive system files such as the Hosts file
New comprehensive help manual
Configurations protection and hardened against third party uninstall
Enhanced Data base
Personal version plug-ins and extensions
Full featured quarantine support
Tweaks (optional configurations) (Limited)
Browser hijack protection
Customizable scanning (Limited)
Improved safety and redundant backups
Improved logging capability
Ad-Aware SE Plus:
Tweaks (optional configurations)
Customizable scanning
Automated Definitions file update support
Automated and silent operation for Ad-Aware and Ad-Watch
Basic command line parameters
Automated scanning
Automated Blocking
Plus version plug-ins and extensions
Ad-watch real-time monitor
Registry protection
Executable file extension protection
Free E-mail support
Advanced filtering
Printable reports
Ad-Watch rule editor
Popup Blocking (Internet Explorer only) Sites manager included in Ad-Watch
Ad-Aware SE Professional:
Process manager/viewer*
Additional command line parameters
Additional menu and export options for reports
Professional only plug-ins and extensions
Mapped network, UNC, and ram drive support
*With the Professional edition, we have included a powerful Process
manager/viewer that offers more than an ordinary process monitor. It has
been designed to completely support our all-new Plug-in interface and the
exporting features that are only available with the Plus and Professional
Editions.
What's new in Ad-Aware SE Professional edition?
Scanning engine improvements
Extended Memory scanning
Now scans all modules loaded by a process
uses our all new CSI (Code Sequence Identification) technology to identify
new and unknown variants of known targets
Extended protection against DLL-injection, SE can unload process modules on
the fly
Extended Registry scanning
Now scans registry branches of multiple user accounts
Performs additional smart checks to detect dynamically created references
Scanning speed noticeably faster
Extended Scanning for known and unknown/possible Browser-Hijackers
Extended Disk scanning
Now scans and lists alternate Data-streams on NTFS volumes
Now Ad-Aware supports scanning of Cabinet files, (including spanned
archives)
Scanning speed increased
Improved Hosts-file scan
Now Ad-Aware and Ad-Watch Use much smaller reference files
Several User Interface improvements
Improved Graphical UI
Ad-Aware now supports custom graphical Skins
more user friendly Plug-in/Extension GUI (Plug-ins and Extensions now shown
on separate screens)
New Scan Result view, Includes a scan summary and Detailed view
Ad-Aware now linked to the online TAC database
Multiple New Tweak options
Unloading of process modules during a scan
Obtaining command line of scanned processes
Ignoring spanned cab files
Scan registry for all users instead of current user only
Permanent archive caching
Always try to unload modules before deletion
Disable manual quarantine if auto quarantine is selected
Block pop-ups aggressively
Load aw minimized
Hide Ad-watch tray icon
Write protect system files after repair
Limit drive selection to fixed drives
Use gridlines in item lists
Log file detail section condensed
Proc-watch
Improved ProcWatch scanning capabilities and scanning speed (Using the new
fingerprint engine)
Several ProcWatch Interface improvements
Option to create a Hexdump of the process memory or dump the process memory
to disk
Several Log file improvements
Includes support for separate removal-Log files
Allows adding a Reference summary/index to log files
Log file contains overall more detailed information
Ad-watch
Several GUI improvements
Ad-watch now supports Cookie Blocking
Site-manager to edit the popup-blacklist included
Ad-watch now uses the new CSI technology to detect new and unknown variants
of known targets
New Ad-watch configuration screen
New rules editor for pre-defined blocking exclusions
Support for hiding the Ad-Watch tray icon for unattended operation.
GR@PH;<'S
Regarding your problem ...
Download HijackThis© Merijn from: http://www.thespykiller.co.uk/files/HJTsetup.exe .
This installer will put HijackThis onto your computer at C:\Program Files\HijackThis (it will make an entry in the Start menu and also provide a desktop shortcut).
At the download prompt, choose "Save". After the download is complete, navigate to the C:\Program Files\HijackThis folder and double-click it to complete the installation.
Double-click the HijackThis icon on your desktop. Choose "Do a system scan and save logfile". The log will open in Notepad and you can copy/paste it here.
Download HijackThis© Merijn from: http://www.thespykiller.co.uk/files/HJTsetup.exe .
This installer will put HijackThis onto your computer at C:\Program Files\HijackThis (it will make an entry in the Start menu and also provide a desktop shortcut).
At the download prompt, choose "Save". After the download is complete, navigate to the C:\Program Files\HijackThis folder and double-click it to complete the installation.
Double-click the HijackThis icon on your desktop. Choose "Do a system scan and save logfile". The log will open in Notepad and you can copy/paste it here.
thanks for the help and info guys. I am happy i purchased the software, Instead of keeping the free download. I followed the advice and updated my definitions, I downloaded the SE build 106. I ran a scan and it detected some file l2me I think that was the file or something similar, I know it had 2me in it somewhere. After the scan, I haven't had a problem with the muon pop up since.
thanks..
DOB..
thanks..
DOB..
I would like to add this. Everytime I run a scan, I get this Explorer error and this rundll error, I have to hang around so I can click OK to make sure the scan finishes. Do you have any idea what may cause this?
DOB... you possibly have Look2Me on your system
Could you post a HijackThis log in the HijackThis forum? and while you are waiting, try the steps listed in Adware.Look2Me in the Infection Knowledge Base
http://www.lavasoftsupport.com/index.php?showtopic=357
Thanks
//Steve
Could you post a HijackThis log in the HijackThis forum? and while you are waiting, try the steps listed in Adware.Look2Me in the Infection Knowledge Base
http://www.lavasoftsupport.com/index.php?showtopic=357
Thanks
//Steve
Look2Me can be stubborn, hence my earlier suggestion to look at a HJT log. 
WOW, I'm having the same problem and I dowloaded Hijack This and here is the readme file----this popup is driving me insane!!!! Thanks for looking--Logfile of HijackThis v1.99.1
Scan saved at 9:55:39 PM, on 6/16/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Trend Micro\Internet Security 2005\pccguide.exe
D:\WINDOWS\system32\lockx.exe
D:\Program Files\TrojanHunter 4.2\THGuard.exe
D:\Program Files\iTunes\iTunesHelper.exe
D:\Program Files\QuickTime\qttask.exe
D:\Program Files\ipwins\ipwins.exe
D:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
D:\PROGRA~1\mcafee.com\agent\mcregwiz.exe
D:\PROGRA~1\mcafee.com\agent\mcagent.exe
D:\progra~1\mcafee\MCAFEE~1\masalert.exe
d:\progra~1\mcafee\mcafee antispyware\massrv.exe
d:\program files\mcafee.com\agent\mcdetect.exe
D:\WINDOWS\system32\devldr32.exe
d:\PROGRA~1\mcafee.com\agent\mctskshd.exe
D:\WINDOWS\System32\nvsvc32.exe
D:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
D:\WINDOWS\System32\svchost.exe
D:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
D:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
D:\WINDOWS\wanmpsvc.exe
D:\WINDOWS\wmiapv.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Canon\CAL\CALMAIN.exe
D:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
D:\Program Files\iPod\bin\iPodService.exe
D:\WINDOWS\explorer.exe
D:\Program Files\Hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.s1s1s1search.com/sp2.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://drudgereport.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://drudgereport.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [J.exe] D:\documents and settings\administrator\local settings\temp\J.exe
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "D:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
O4 - HKLM\..\Run: [pccguide.exe] "D:\Program Files\Trend Micro\Internet Security 2005\pccguide.exe"
O4 - HKLM\..\Run: [stratas] lockx.exe
O4 - HKLM\..\Run: [THGuard] "D:\Program Files\TrojanHunter 4.2\THGuard.exe"
O4 - HKLM\..\Run: [iTunesHelper] "D:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CBICompInstall] E:\Setup.exe
O4 - HKLM\..\Run: [IpWins] D:\Program Files\ipwins\ipwins.exe
O4 - HKLM\..\Run: [McRegWiz] D:\PROGRA~1\mcafee.com\agent\mcregwiz.exe /autorun
O4 - HKLM\..\Run: [MCAgentExe] d:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] d:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [_AntiSpyware] d:\progra~1\mcafee\MCAFEE~1\masalert.exe
O4 - HKLM\..\RunServices: [stratas] lockx.exe
O4 - HKCU\..\Run: [stratas] lockx.exe
O4 - HKCU\..\Run: [updateMgr] D:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
O4 - Global Startup: DING!.lnk = D:\Program Files\Southwest Airlines\Ding\Ding.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &AIM Search - res://D:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Google Search - res://D:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://D:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://D:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://D:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://D:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://D:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\WINDOWS\system32\msjava.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Toss\Program Files\AIM95\aim.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwe...up1.0.0.8-2.cab
O20 - AppInit_DLLs: d6mpbmnoho0gl.tlb tanslpeyfy.tlb 4sk9i2e6433f.tlb yu0t6xuvc2t.tlb 8ddliaa2zm.tlb 86nmgwi4tlgi97.tlb D:\WINDOWS\system32\rundll32.dll
O20 - Winlogon Notify: Telephony - D:\WINDOWS\system32\dnl6013se.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - D:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - D:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - D:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee AntiSpyware Service - McAfee, Inc. - d:\progra~1\mcafee\mcafee antispyware\massrv.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - d:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - d:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - D:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - D:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - D:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - D:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - D:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - D:\WINDOWS\wanmpsvc.exe
O23 - Service: Microsoft Performance WMI Add-On (WMIPAdd-On) - Unknown owner - D:\WINDOWS\wmiapv.exe
Scan saved at 9:55:39 PM, on 6/16/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Trend Micro\Internet Security 2005\pccguide.exe
D:\WINDOWS\system32\lockx.exe
D:\Program Files\TrojanHunter 4.2\THGuard.exe
D:\Program Files\iTunes\iTunesHelper.exe
D:\Program Files\QuickTime\qttask.exe
D:\Program Files\ipwins\ipwins.exe
D:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
D:\PROGRA~1\mcafee.com\agent\mcregwiz.exe
D:\PROGRA~1\mcafee.com\agent\mcagent.exe
D:\progra~1\mcafee\MCAFEE~1\masalert.exe
d:\progra~1\mcafee\mcafee antispyware\massrv.exe
d:\program files\mcafee.com\agent\mcdetect.exe
D:\WINDOWS\system32\devldr32.exe
d:\PROGRA~1\mcafee.com\agent\mctskshd.exe
D:\WINDOWS\System32\nvsvc32.exe
D:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
D:\WINDOWS\System32\svchost.exe
D:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
D:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
D:\WINDOWS\wanmpsvc.exe
D:\WINDOWS\wmiapv.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Canon\CAL\CALMAIN.exe
D:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
D:\Program Files\iPod\bin\iPodService.exe
D:\WINDOWS\explorer.exe
D:\Program Files\Hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.s1s1s1search.com/sp2.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://drudgereport.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://drudgereport.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [J.exe] D:\documents and settings\administrator\local settings\temp\J.exe
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "D:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
O4 - HKLM\..\Run: [pccguide.exe] "D:\Program Files\Trend Micro\Internet Security 2005\pccguide.exe"
O4 - HKLM\..\Run: [stratas] lockx.exe
O4 - HKLM\..\Run: [THGuard] "D:\Program Files\TrojanHunter 4.2\THGuard.exe"
O4 - HKLM\..\Run: [iTunesHelper] "D:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CBICompInstall] E:\Setup.exe
O4 - HKLM\..\Run: [IpWins] D:\Program Files\ipwins\ipwins.exe
O4 - HKLM\..\Run: [McRegWiz] D:\PROGRA~1\mcafee.com\agent\mcregwiz.exe /autorun
O4 - HKLM\..\Run: [MCAgentExe] d:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] d:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [_AntiSpyware] d:\progra~1\mcafee\MCAFEE~1\masalert.exe
O4 - HKLM\..\RunServices: [stratas] lockx.exe
O4 - HKCU\..\Run: [stratas] lockx.exe
O4 - HKCU\..\Run: [updateMgr] D:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
O4 - Global Startup: DING!.lnk = D:\Program Files\Southwest Airlines\Ding\Ding.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &AIM Search - res://D:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Google Search - res://D:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://D:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://D:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://D:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://D:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://D:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\WINDOWS\system32\msjava.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Toss\Program Files\AIM95\aim.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwe...up1.0.0.8-2.cab
O20 - AppInit_DLLs: d6mpbmnoho0gl.tlb tanslpeyfy.tlb 4sk9i2e6433f.tlb yu0t6xuvc2t.tlb 8ddliaa2zm.tlb 86nmgwi4tlgi97.tlb D:\WINDOWS\system32\rundll32.dll
O20 - Winlogon Notify: Telephony - D:\WINDOWS\system32\dnl6013se.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - D:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - D:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - D:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee AntiSpyware Service - McAfee, Inc. - d:\progra~1\mcafee\mcafee antispyware\massrv.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - d:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - d:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - D:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - D:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - D:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - D:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - D:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - D:\WINDOWS\wanmpsvc.exe
O23 - Service: Microsoft Performance WMI Add-On (WMIPAdd-On) - Unknown owner - D:\WINDOWS\wmiapv.exe
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.