SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 03/10/2008 at 08:14 PM

Application Version : 4.0.1154

Core Rules Database Version : 3412
Trace Rules Database Version: 1404

Scan type       : Quick Scan
Total Scan Time : 00:51:11

Memory items scanned      : 436
Memory threats detected   : 2
Registry items scanned    : 332
Registry threats detected : 12
File items scanned        : 51378
File threats detected     : 42

Adware.Vundo Variant/Resident
	C:\WINDOWS\SYSTEM32\IIFFG.DLL
	C:\WINDOWS\SYSTEM32\IIFFG.DLL

Adware.Vundo-Variant/Small-A
	C:\WINDOWS\SYSTEM32\MOPRHBAH.DLL
	C:\WINDOWS\SYSTEM32\MOPRHBAH.DLL

Adware.Vundo-Variant
	HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AADEBF65-F0EE-4B00-AEFA-72C4D29F5B84}
	HKCR\CLSID\{AADEBF65-F0EE-4B00-AEFA-72C4D29F5B84}
	HKCR\CLSID\{AADEBF65-F0EE-4B00-AEFA-72C4D29F5B84}\InprocServer32
	HKCR\CLSID\{AADEBF65-F0EE-4B00-AEFA-72C4D29F5B84}\InprocServer32#ThreadingModel

Adware.Vundo Variant
	HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B285004D-6D02-4212-91FC-B8F47B68C254}
	HKCR\CLSID\{B285004D-6D02-4212-91FC-B8F47B68C254}
	HKCR\CLSID\{B285004D-6D02-4212-91FC-B8F47B68C254}\InprocServer32
	HKCR\CLSID\{B285004D-6D02-4212-91FC-B8F47B68C254}\InprocServer32#ThreadingModel
	C:\WINDOWS\SYSTEM32\JKKJKHF.DLL
	HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks#{B285004D-6D02-4212-91FC-B8F47B68C254}
	HKCR\CLSID\{B285004D-6D02-4212-91FC-B8F47B68C254}

Adware.Tracking Cookie
	C:\Documents and Settings\Ylva\Cookies\ylva@cgi-bin[2].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@panasonic[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@atdmt[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@zedo[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@advertising[3].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@ad.yieldmanager[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@serving-sys[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@stat.www[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@doubleclick[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@clicktorrent[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@adsby.webtraffic[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@track.webgains[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@mtgnewmedia[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@maximedia[3].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@1060902119[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@statcounter[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@ad.zanox[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@ad.adtoma[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@pacificpoker[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@eas4.emediate[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@eas.apm.emediate[2].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@se[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@adserver.banneradministration[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@spyguardpro[2].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@track.adform[2].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@e2.emediate[2].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@komtrack[2].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@questionmarket[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@casinolasvegas[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@m1.webstats.motigo[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@adinterax[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@www.ticketsnow2[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@richmedia.yahoo[2].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@msnportal.112.2o7[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@protect.spyguardpro[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@288_[2].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@clicksor[1].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@server.iad.liveperson[2].txt
	C:\Documents and Settings\Ylva\Cookies\ylva@bs.serving-sys[1].txt

Trojan.Unknown Origin
	HKLM\Software\xpre
	HKLM\Software\xpre#execount