HijackThis and AVG-antispyware logs

Question

nakedape 0 Newbie Poster

19 Years Ago

Hi guys,

This is my first post here.

I have recently been cleaning up some problems on a friend's pc including severe browser-hijacking activity as well as a problem where icons and start menu/taskbar would not load on windows XP startup.

I've managed to resolve some of these problems, but there are still some strangely-named processes in HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

Below are my hijackthis and AVG-antispyware logs (hijackthis log was created after a reboot following the quarantining of 1270-or-so infected objects detected by the AVG full-system scan). Could somebody please advise me as to the status of the pc?... are there still some nasties in there?

Cheers,

John

p.s. The PC is running Win XP Pro SP1 (are there any potential problems with upgrading to SP2? I have the disc but didn't want to go ahead with upgrading my friend's computer unless there will be no negative consequences).

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 3:21:20 PM 20/02/2007

+ Scan result:

C:\Documents and Settings\jbertram\Local Settings\Temp\Del21.tmp -> Adware.180Solutions : Cleaned with backup (quarantined).
C:\Documents and Settings\jbertram\Local Settings\Temp\!update.exe -> Adware.ClickSpring : Cleaned with backup (quarantined).
C:\Documents and Settings\jbertram\Local Settings\Temporary Internet Files\Content.IE5\O58F4JSN\!update-3642[1].0000 -> Adware.ClickSpring : Cleaned with backup (quarantined).
C:\WINDOWS\Οracle\bak\explorer.exe -> Adware.ClickSpring : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\Httpfilter.CallThrough -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\Httpfilter.CallThrough.1 -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\Httpfilter.CallThrough\CLSID -> Adware.CoolWebSearch : Cleaned with backup (quarantined).
C:\WINDOWS\Web\tip.htm -> Adware.FindSpy : Cleaned with backup (quarantined).
C:\WINDOWS\system32\opensdl.exe -> Adware.FindSpy : Cleaned with backup (quarantined).
C:\WINDOWS\system32\vwipxspnt.exe -> Adware.FindSpy : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Hd -> Adware.FreshBar : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Hd\#1# -> Adware.FreshBar : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Hd\#2# -> Adware.FreshBar : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Hd\#3# -> Adware.FreshBar : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Hd\#4# -> Adware.FreshBar : Cleaned with backup (quarantined).
C:\Documents and Settings\jbertram\Local Settings\Temp\abc123j5GCa.exe -> Adware.Hoax.Renos : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\MediaTicketsInstaller.INF -> Adware.MediaTickets : Cleaned with backup (quarantined).
C:\WINDOWS\LastGood\Downloaded Program Files\MediaTicketsInstaller.INF -> Adware.MediaTickets : Cleaned with backup (quarantined).
C:\WINDOWS\mtuninst.exe -> Adware.MediaTickets : Cleaned with backup (quarantined).
C:\Program Files\Common Files\Real\WeatherBug\MiniBugTransporter.dll -> Adware.Minibug : Cleaned with backup (quarantined).
C:\Documents and Settings\administrator\mt-uninstaller.exe -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\Documents and Settings\jbertram\Local Settings\Temp\mt-uninstaller.exe -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\WINDOWS\system32\Shex.exe -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\WINDOWS\system32\tlsfnvaj.dll -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\WINDOWS\system32\wuauboot.dll -> Adware.PurityScan : Cleaned with backup (quarantined).
HKLM\SOFTWARE\ClickSpring -> Adware.PurityScan : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaTickets -> Adware.PurityScan : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\TypeLib\{CE7C3CE2-4B15-11D1-ABED-709549C10000} -> Adware.RegiFast : Cleaned with backup (quarantined).
C:\Documents and Settings\jbertram\Local Settings\Temp\ICD2.tmp\int_ver32b.ocx -> Dialer.Creazione.x : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\int_ver32b.ocx -> Dialer.Creazione.x : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\int_ver34.ocx -> Dialer.VB.j : Cleaned with backup (quarantined).
C:\WINDOWS\sr.dll -> Downloader.Agent.ai : Cleaned with backup (quarantined).
C:\Program Files\Telstra\Cable Login\_bpcable.exe -> Downloader.Agent.awf : Cleaned with backup (quarantined).
C:\WINDOWS\system32\_wоwexec.exe -> Downloader.Agent.awf : Cleaned with backup (quarantined).
C:\WINDOWS\Οracle\explorer.exe -> Downloader.Agent.awf : Cleaned with backup (quarantined).
[1528] C:\WINDOWS\RACLE~1\explorer.exe -> Downloader.Agent.awf : Cleaned with backup (quarantined).
C:\Program Files\Internet Explorer\bcsdcssd.exe -> Downloader.Agent.cz : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\bcsdcssd.exe.1 -> Downloader.Agent.cz : Cleaned with backup (quarantined).
C:\Program Files\Internet Explorer\ebcdwnny.exe -> Downloader.Agent.dk : Cleaned with backup (quarantined).
C:\Program Files\Internet Explorer\pvena.exe -> Downloader.Agent.dk : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\ebcdwnny.exe.1 -> Downloader.Agent.dk : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\pvena.exe -> Downloader.Agent.dk : Cleaned with backup (quarantined).
C:\WINDOWS\system32\IEPnit.dll -> Downloader.ConHook.an : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\ad.exe -> Downloader.Donn.ab : Cleaned with backup (quarantined).
C:\Documents and Settings\jbertram\Local Settings\Temporary Internet Files\Content.IE5\7D18NDJB\!update-3195[1].0000 -> Downloader.PurityScan.be : Cleaned with backup (quarantined).
C:\WINDOWS\system32\oins.exe -> Downloader.PurityScan.be : Cleaned with backup (quarantined).
C:\Documents and Settings\jbertram\Local Settings\Temporary Internet Files\Content.IE5\CPEZKP2R\!update-3862[1].0000 -> Downloader.PurityScan.cl : Cleaned with backup (quarantined).
C:\Documents and Settings\jbertram\Local Settings\Temporary Internet Files\Content.IE5\SH41EVK9\!update-3512[1].0000 -> Downloader.PurityScan.cl : Cleaned with backup (quarantined).
C:\Documents and Settings\jbertram\Local Settings\Temporary Internet Files\Content.IE5\A458TGHL\!update-3895[1].0000 -> Downloader.PurityScan.co : Cleaned with backup (quarantined).
C:\Documents and Settings\jbertram\Local Settings\Temporary Internet Files\Content.IE5\I7AF2LUR\!update-3952[1].0000 -> Downloader.PurityScan.cs : Cleaned with backup (quarantined).
C:\WINDOWS\LastGood\Downloaded Program Files\Ole32ws.inf -> Downloader.Small : Cleaned with backup (quarantined).
C:\WINDOWS\system32\winuptd.exe -> Downloader.Small.agg : Cleaned with backup (quarantined).
C:\Program Files\Internet Explorer\fbpza.exe -> Downloader.Small.lo : Cleaned with backup (quarantined).
C:\WINDOWS\system32\xscan.exe -> Dropper.Agent.hy : Cleaned with backup (quarantined).
C:\Documents and Settings\administrator\Local Settings\Temp\installer.exe -> Dropper.PurityScan.q : Cleaned with backup (quarantined).
C:\WINDOWS\system32\pentxpl.exe -> Hijacker.Small.dg : Cleaned with backup (quarantined).
C:\WINDOWS\system32\tlntadmnx.exe -> Hijacker.Small.dg : Cleaned with backup (quarantined).
C:\WINDOWS\system32\remove_me.dll -> Hijacker.StartPage.ld : Cleaned with backup (quarantined).
C:\WINDOWS\system32\loading.exe -> Hijacker.StartPage.pm : Cleaned with backup (quarantined).
C:\WINDOWS\aauqfgf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\aayenep.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\acblnpf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\aducldu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\adyauce.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\aecmyuh.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\aeymrcq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\afbeceq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\agaaxiy.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\agecpmn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\agonhyw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ahgcabs.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\aitbnea.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\aiwhjjo.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\akbgaqv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\akwqxmm.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\alpdwit.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\amlvaqs.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\amvwdpu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\apgepnx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\aqddgjq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\aqowqck.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\asbxscx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\asdlwng.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\asjsyjr.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\atwuvij.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\auejdle.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\aufcaam.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\avjyibd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\awlyylh.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\awmiebu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\awqpbka.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\awwqqst.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\awwqtxs.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\axklyuj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bfdvekp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bfgmctg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bgarnnb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bgomhvl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bgqosef.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bhgcfqv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bhpvjmi.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bhvajrn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bidxgnq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\birycuj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\biwtvia.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bjmddtp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bkatmdo.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bmbphis.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bmkpmhx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bmqvddf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bnddcxc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bonwxao.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bpgpgkc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bppgelw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bpwslla.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bqlddto.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bqrhaxf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bsfruhm.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bsnlajl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bspbsjd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bttixwm.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bumhaha.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bviflcg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bvilwva.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bvqblgw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bwnkjnh.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bxrumom.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\bymturd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cacedhs.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cavybte.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\caykbfn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cbaqjcf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cbgdgvo.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cblxtkn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cbmbdah.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cbpaddy.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cchmuvg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ccwiexu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ccxlhkb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ccxtmgs.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cdrpbey.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cdvihcs.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cexfpet.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ceyueoj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\chcdxqb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cheurdt.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\chuayjg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\chwclcn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cicrhls.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\citwquv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cjrbcdb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cjthfcu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ckaqpnd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ckcvgtu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cknqjhb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\clcfuyy.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cldithg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\clwsyuk.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cmagwnb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cmetaho.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cmqkqfh.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cmyrpui.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cnjkjot.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cnvlcty.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\coocpob.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\coufwdf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cowllnn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cpedjue.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cpwqtmd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\croncti.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\crpbnpa.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ctjokyg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cubrkit.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cumhxih.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cumnjxt.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cvjxval.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cwhnmui.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cwovlve.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cwplvvk.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cwwfxcw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cxaoywi.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cxqwtlt.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\cygnjph.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\daswbbh.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dawfnbd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dbwyiqu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dcvhgxp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\debjavy.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\deybyqu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dfunokq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dfvfjjl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\diipykb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\disnoek.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ditwina.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\djkriog.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dkuwltt.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dldeieg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dmgpsyd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dmuumfg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dndikru.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dnymdbn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\doaeifn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\docuspp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dofhepj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dpspmgg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dqrchpb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dqsajru.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dqxrriu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\drfyxet.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\drrrewk.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dsckcft.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dsumhcr.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dsygwvf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dtdnfhw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dtnewtr.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dtqukyd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dtrrdpu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dugnikg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\duhkwbv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dupwgaj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dvgucne.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dvhgchg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dxontla.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\dyxawmc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\eahvumc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\eaptnwo.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\eawrlpg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ebaocps.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ebtionl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ecgwqbv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\eckhynp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ecryeob.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\eekfttp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\efclgcn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\efwlojl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\egsdclc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ehsatcu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ehwhwup.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\eielxtp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\eincnnu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\einnwxk.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ejdrgkq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ejjmkyd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ekflger.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\eklvymb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\eocvswi.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\eoegthi.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\epttpxc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\epwieor.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\eqigaes.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\eqoddhe.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\eqplhug.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\eqskald.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\equbbgu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\erkmfxo.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\euthjgq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\evhbrxw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\evmrioa.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\evofpel.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\evrrrvc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\eweunjn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ewpbnul.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\exptwrg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\eynxxta.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\faydbim.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fbcqpmt.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fbgwvrb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fbmgnte.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fbwoiai.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fcbiyip.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fdtxndi.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fhhexxj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fhvqspu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fjckjjd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fjnxvan.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fjrejnq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fkcwxbm.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\flgdxwj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\flwserp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fmekupm.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fmftqyo.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fmomvrx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fmqbvwp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fmynewv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fnbbymw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fnqwbkw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fntjdfu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fodepgu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fouerdx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fpmxcyo.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fqfnhul.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fqieoli.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fqimmyg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fqolfav.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\frncyhp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\frtvisb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\frvddnc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fsurfgx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ftgdulk.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ftkqseu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fundkcx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fusmcjg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fvbaebs.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fvjewmh.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fwdmaie.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fwdyxua.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fxdhhoc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fxhhmuo.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fxulrss.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fxvybib.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fxyglmu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fycrpst.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fydewku.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fykpvxx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fyptncn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\fyyotdm.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gaqciip.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gawucbo.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gbendye.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gbotepl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gekcgog.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\geoymlc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gfmrvsl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gggftnt.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ghjqayl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ghyfvel.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gitnqlq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gjlbrvj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gjrtkny.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\glowtwl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\glrirnd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gmgjpuj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gmlxssl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gmoxuak.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gmxojqa.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gnpplri.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gpbowva.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gpdevha.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gpdpqhj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gpfvblv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gpplvtq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gpslsbo.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gpwcgxn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gqhhtqk.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\grebqwj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\greiiyg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gseeoft.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gsfmjes.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gtonyre.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gujjrox.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gumgnwm.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gvtvdbr.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gvvcqio.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gweamoe.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gwrtesp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gxfpbqk.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gxgfgpn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gxqjgau.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gybvhrv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\gyqkarl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hasmqcx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hbbhmtj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hbhtcmd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hbkjdvn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hciuvdc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hdqxlda.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hermgfy.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hftptop.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hghkbtb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hgkhglw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hglvnfq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hgqwjhl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hherqbe.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hhksyhr.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hjkhymt.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hjqkdxb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hjsleup.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hlneurq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hnlqlvq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hnxvnbq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hodqpri.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hovbjjg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hpaocgg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hpgbrst.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hphkgvb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hplnvcu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hpwshcp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hqebwjv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hqslhkq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hrrtdwl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hrvcnuw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hslqckx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hucpcha.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hvchubq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hwfvttn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hwtrojh.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hxgxsom.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hxjsyix.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\hypdicv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ibqocjk.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ibtbrug.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\icytfjl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ieriipe.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\iesgcqm.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ieyohbw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ifiduvf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\igdcqvr.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\iiftmey.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\iiqlbju.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ijfmywv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ikfycbx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ilathkn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ilkplme.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\iltfcsi.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\imkewnk.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\immfxio.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\imtjksd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\imuddgi.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\inifjmy.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\iniidrj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\inpihff.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\iojelaf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ioogsie.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ipuiuea.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ipyanfr.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\iscbpmv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\isvdwlx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\itafmir.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\iwyeclo.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ixfpiav.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ixorpol.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jaknfyr.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jasxhfi.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jbldksn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jdpdnol.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jdwsvbr.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jefcmnv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jftprth.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jgoseyh.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jgrdvxg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jhagqaj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jhiewyl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jhlsnpd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jisxqbs.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jivvxgg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jlaaxqf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jlkmqap.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jmdpvkq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jmxngmh.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jnhdaae.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jovayto.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\joxgviw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jphqhnc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jrkakew.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jrtchge.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jscirvy.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jsdsoom.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jspcbul.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jtcwatd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jtmngqp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jvkvuej.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jvqmhmd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jwilqij.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jwlyhrq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jxirncl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\jxrcjse.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kbbckig.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kblaqli.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kbwwshx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kbybomu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kdbecrv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kdgukkh.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\keiiogm.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kfuatdb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\khpjskb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kimfmvl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kiolswp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kivigcs.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kjfyses.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kjqsdvl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kknkqoo.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\klnvytt.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\klpabvv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kmeekjv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kmoumnf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kmqvaxp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\koiybxy.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kortpiq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kpucpfx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kqksjxb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kqrngqt.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\krfylig.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\krwpkqc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ksqhsnd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ktfuupo.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ktiloyj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kvnvtko.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kvpxmdc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kvufhek.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kvuwkrn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kvwxque.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kwcmmsb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kyedypf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\kyokjbe.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\labmxuo.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lbibnqs.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lbtyvux.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lcdckne.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ldajcfy.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ldgnfud.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ldkkspk.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ldwfkjl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\levigyw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lfcbjfi.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lffvbyy.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lfnxuct.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lgaybkv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lgjijmu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lhaggbx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lhlavvc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lhlgyel.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lhrnhji.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ljvsgab.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lkkbbpi.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lkmqjsw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lkyidsg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\llciwsn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\llkppyp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lmfbbqg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lmhvyyb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lngliia.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lnkkkiv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lnsnkyx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lnvuqdh.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\loqqvmo.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\loyxmfk.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lqoqvjg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lqpuwcy.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lscwmsy.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lstmybw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ltsqnmf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ltyinjv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ludhhvn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lukwxwy.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\luqffhl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lvvtwmy.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lvwbrfw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lwblchx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lwbonmn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lwodqqe.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lxcrdqu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lxustap.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\lyikrym.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mahdroa.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\makfbmt.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mayfsyr.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mbftyft.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mbpbgpb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mcbxtwj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mcfpcjr.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\memhdva.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\menuquh.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mffswjc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mfvjkgr.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mhykebp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mipqjmp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\miqgwpi.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mkirwfc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mklsdyh.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mkogyxa.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mlbfysl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mlbyotf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mlmmbgp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mngdsgp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mooukjm.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\moprfkh.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\morgudc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mpmtaav.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mpxsscr.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\msrboek.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mtnwgvj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\muaglsy.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mualbkn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mvwjcox.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mvyuxdu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mwjagub.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mxccmxj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mxhftnn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\mxjptyf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ncfvxpl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ncgcdxd.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nclvlac.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ncmmpuo.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ndlepln.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ndrpkam.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ngmpooj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nhhrtlm.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nhrcwxj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nhvgtrs.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\niaiotq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nibewdh.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nitwowq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\njthrrp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\njvooov.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nljfdwv.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nlkglfb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nlysurw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nnfyrvh.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nnlnasx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\npepkrx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nptximl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nqjgbxq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nrpchyt.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nsejhne.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nspikvx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nsybbef.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nuvrhwe.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nvibafu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nvwxtbh.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nvxlgxm.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nwacbhl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nwgdrrt.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nwprrfc.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nxivplp.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nxqxvhl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nxuxntk.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\nygqadb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\oanwtkg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\oariyvb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\obchcfj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\obobcdl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\obpcnql.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\obqhhug.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ocxawic.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\odpjkfl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\odxpnvj.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\oeaqfxn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ofaidxa.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ofhtepw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ofllgfu.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ofsbmsq.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ofxybov.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\oghckgt.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\oitkyhm.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\oiujogn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ojctaxx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ojfctnr.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ojqgfcl.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\okhuanf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\oliitod.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\olimnyx.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\omxvape.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\omyystb.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ooplbae.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\opkhbkm.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\opwbrbm.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\oqrnpgn.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\orgyyex.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\orniwlg.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\orraqna.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\osirabf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\oswrfvf.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\otcxpff.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\otihkjw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\oubqxat.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ouowcnw.exe -> Hijacker.StartPage.qp : Cleaned with backup (quarantined).
C:\WINDOWS\ovfkxwd.exe

cybersecurity microsoft:windows-nt-2000-xp virus-malware

2 Contributors
1 Reply
192 Views
6 Hours Discussion Span
Latest Post 19 Years Ago Latest Post by TT4Titans

Dani AI

Generated 6 Months Ago

Good work so far — you’ve quarantined a lot of junk, but the symptom set (browser hijack + missing Start/Menu icons + many stray startup objects) points to persistent components that can survive ordinary cleaning. was right to flag System Restore: suspicious files often hide in the restore store and can be reactivated unless you clear them first. (bitdefender.com)

A pragmatic next-step workflow (prioritise safety and brevity):

Isolate the machine (unplug network/Wi‑Fi) to stop DNS/browser redirection and data leakage.
Turn off System Restore on all drives, reboot (this deletes restore points). Re-scan after reboot. (bitdefender.com)
Boot Safe Mode and run current, reputable tools (full AV + Malwarebytes/AdwCleaner or equivalent). Create a HijackThis log, save it, and only use HijackThis’s “fix” for entries you can positively identify — use a trusted guide when unsure. (bleepingcomputer.com)
Check the hosts file and your TCP/IP DNS settings; reset DNS to obtain automatically or to a trusted resolver, then flush the resolver cache:

ipconfig /flushdns

See an authoritative hosts-file edit guide for exact steps. (hostgator.com)

If after those steps the system still shows widespread random executables, missing core UI elements, or disabled services, don’t waste time chasing every leftover: back up only personal documents/pictures (avoid executables, installers, archives), verify those backups on a clean machine, then wipe and do a clean reinstall or reimage. Security experts and removal communities generally recommend a full rebuild when compromise is deep. After reinstall, apply the latest XP service pack if you must stay on XP (SP3 was the final pack) — but strongly consider moving to a supported OS because XP is end of life. (bleepingcomputer.com)

Quick checklist: disable SR → Safe Mode scans → save/analyse HijackThis logs → fix hosts/DNS → back up personal files only → clean reinstall if symptoms persist → patch, install AV, change passwords from a known-clean device.

Reply to this topic

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.

TT4Titans 5 Posting Pro · Answer 1 · 2007-02-20T11:35:11+00:00

first thing is turn off system restore just in case it's there till you get it cleaned out then turn it back on also empty the recycle bin.

Have Hijack this fix.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R3 - URLSearchHook: (no name) - {69E15D47-91D8-C070-828A-C36943FE86C0} - C:\WINDOWS\System32\tlsfnvaj.dll (file missing)

O2 - BHO: (no name) - {5818518d-d884-4512-adca-738feba2c38f} - C:\WINDOWS\system32\IEPnit.dll (file missing)

O2 - BHO: (no name) - {69E15D47-91D8-C070-828A-C36943FE86C0} - C:\WINDOWS\System32\tlsfnvaj.dll (file missing)

O2 - BHO: (no name) - {E03C740E-BB24-4d3c-B92A-6F84DE1DD99C} - C:\WINDOWS\System32\tmp3.tmp.dll

O4 - HKLM\..\Run: [scanSYS] borlandg.exe

O4 - HKLM\..\Run: [DllRunning] rundll32.exe "C:\WINDOWS\urssro.dll",setvm

O4 - HKLM\..\Run: [bhoserv] ms-its.exe

O4 - HKCU\..\Run: [Keht] C:\WINDOWS\System32\WWEXEC~1.EXE

O4 - HKCU\..\Run: [abrek] trycrt.exe

O4 - HKCU\..\Run: [control64] Preliminary.exe

O4 - HKCU\..\Run: [trycrt] 10010.exe

O15 - Trusted Zone: frame.crazywinnings.com

O17 - HKLM\System\CCS\Services\Tcpip\..\{6F075E2C-9AA9-45DE-8950-41DB708F1CC3}: NameServer = ,

O18 - Filter: text/html - {EE7A946E-61FA-4979-87B8-A6C462E6FA62} - C:\WINDOWS\httpfilter.dll

O20 - Winlogon Notify: IEPnit - IEPnit.dll (file missing)

O23 - Service: Security Agent (scagent) - Unknown owner - C:\WINDOWS\system32\scagent.exe" start (file missing)

Actually if it was me and had that many things i would get the HDD manufactures util and do a zero write and a reinstall.