We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

help please - keep getting redirected to gamingharbour website

Nenen
Nenen Posts: 2,379 Forumite
Part of the Furniture Combo Breaker
edited 16 July 2009 at 5:33PM in Techie Stuff
Not sure if this is some sort of virus or what but when I click on links (either links sent via email from trusted sites like lastminute.com or links posted on MSE, even links to another MSE thread) I see the website I want falsh briefly then immediately be replaced by one from gamingharbour


I would really appreciate help getting rid of this. I am running Vista (Business version I think) if that makes any difference and using Firefox. My ISP is BT and we have McAfee with them.
“A journey is best measured in friends, not in miles.”
(Tim Cahill)
«13

Comments

  • inmypocketnottheirs
    inmypocketnottheirs Posts: 4,745 Forumite
    Part of the Furniture 1,000 Posts Photogenic Combo Breaker
    OK, try putting your cursor over the start icon, right click, properties, then click clear next to the 'to remove recently accessed documents....' Your web history will be cleared as will your recent document list. That may do the trick.

    HTH
    Don't lie, thieve, cheat or steal. The Government do not like the competition.
     The Lord Giveth and the Government Taketh Away.
     I'm sorry, I don't apologise. That's just the way I am. Homer (Simpson)
  • Sput2001
    Sput2001 Posts: 1,206 Forumite
    Part of the Furniture
    It's almost certainly malware.

    AlienRik or Browntoa are the best people to help, but dowloading and installing Malwarebytes is a good place to start.

    You might need to download it to another PC and put the file onto a memory stick (or something similar) and transfer it to the problem PC.
  • Nenen
    Nenen Posts: 2,379 Forumite
    Part of the Furniture Combo Breaker
    I have just done as inmypocketnottheirs suggested and then tried clicking through a couple of links - these both loaded properly without problem, so hopefully this has sorted things. However, if it reoccurs I will do as NickMidgley suggests. Thank you both so much for such quick and helpful responses.
    :beer:
    “A journey is best measured in friends, not in miles.”
    (Tim Cahill)
  • phil11
    phil11 Posts: 22 Forumite
    Update your Anti-Virus then run a scan of your PC from your Anti-Virus.
    This should pick up any viruses on your computer.
    At the the end of the scan be sure to remove any files that you are being warned about as they are not always automatically deleted by the Anti-Virus.
  • Nenen
    Nenen Posts: 2,379 Forumite
    Part of the Furniture Combo Breaker
    OH heck! Despite clearing my web history, cookies etc and running a full Macaffee scan it has just done it again! It seems to redirect about every 3rd or 4th click through I attempt. The only thing I haven't tried yet is installing the Malwarebytes Nick suggested. I am always nervous about installing new software, particularly downloads but is that the next move do you think?
    “A journey is best measured in friends, not in miles.”
    (Tim Cahill)
  • inmypocketnottheirs
    inmypocketnottheirs Posts: 4,745 Forumite
    Part of the Furniture 1,000 Posts Photogenic Combo Breaker
    Malwarebtes is safe. I'd do that, but would remove Macaffee and put AVG on free from the link on this site. Also run windows defender maybe.
    Don't lie, thieve, cheat or steal. The Government do not like the competition.
     The Lord Giveth and the Government Taketh Away.
     I'm sorry, I don't apologise. That's just the way I am. Homer (Simpson)
  • Sput2001
    Sput2001 Posts: 1,206 Forumite
    Part of the Furniture
    Malwarebytes is definitely the next step.
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Download MALWAREBYTES (Make sure you click 'DOWNLOAD NOW')
    http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
    UPDATE and FULL SCAN
    Post the log here AFTER youve deleted everything it finds


    reboot

    Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
    http://www.filehippo.com/download_hijackthis/
    Click DO A SCAN AND SAVE A LOGFILE (Takes seconds) then post the log so we can see whats running
    (do NOT do anything else with Hijack but scan and post the FULL log)


    Both are perfectly safe. Think of it like this ~ your computers infected so you can hardly make it worse by using programs that have been used many MANY times by the experts can you?

    Everything I post is safe (Unless I say otherwise) and free to download and use
    :idea:
  • Nenen
    Nenen Posts: 2,379 Forumite
    Part of the Furniture Combo Breaker
    Thanks very much for all the help so far

    I have done the Malaware scan (despite having just done a mcaffee scan it found over a hundred infected files all connected to this gamingharbour site - comes up as doublejoy).
    I selected delete these but got a message saying it had been unable to delete all the files. I saved a screen shot of this message which I can post here if someone gives me step by step instructions.
    I saved a logfile of the malaware scan (which I will post after this mail).
    I did the highjackthis scan and this is the logfile:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 15:36:49, on 16/07/2009
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    c:\PROGRA~1\mcafee.com\agent\mcagent.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\SYSTEM32\WISPTIS.EXE
    C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\WTablet\Pen_TabletUser.exe
    C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
    C:\Windows\System32\ico.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
    C:\Windows\System32\WLTRAY.EXE
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
    C:\Program Files\Dell Support Center\bin\sprtcmd.exe
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Scansoft\PaperPort\pptd40nt.exe
    C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Microsoft IntelliType Pro\itype.exe
    C:\Program Files\Microsoft IntelliPoint\ipoint.exe
    C:\Program Files\DellSupport\DSAgnt.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
    C:\Program Files\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe
    C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
    C:\Program Files\Research In Motion\BlackBerry\DesktopMgr.exe
    C:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
    C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
    C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
    C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
    C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\Brother\Brmfcmon\BrMfimon.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Windows\System32\mobsync.exe
    C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=6080814
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Dell
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: txthlpBHO Class - {060235DC-6D84-47BD-95D7-A4EF5099A59D} - C:\PROGRA~1\TEXTHE~1\READAN~1\TE3219~1.DLL
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
    O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [Bluetooth HCI Monitor] RunDll32 HCIMNTR.DLL,RunCheckHCIMode
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe
    O4 - HKLM\..\Run: [PMX Daemon] ICO.EXE
    O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
    O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
    O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
    O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
    O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
    O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /F "C:\Windows\TEMP\E_SC449.tmp" /EF "HKLM"
    O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
    O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
    O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
    O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini"
    O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
    O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
    O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
    O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
    O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
    O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
    O4 - HKCU\..\Run: [RIMDeviceManager] "C:\Program Files\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe" -RunServer
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\RunOnce: [] (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-20\..\RunOnce: [] (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
    O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
    O4 - Global Startup: Bluetooth.lnk = ?
    O4 - Global Startup: Desktop Manager.lnk = C:\Program Files\Research In Motion\BlackBerry\DesktopMgr.exe
    O4 - Global Startup: Device Detector 3.lnk = C:\Program Files\Olympus\DeviceDetector\DevDtct2.exe
    O4 - Global Startup: Directrec Configuration Tool.lnk = C:\Program Files\Olympus\DeviceDetector\DirectrecConfig.exe
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O13 - Gopher Prefix:
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
    O16 - DPF: {79E0C1C0-316D-11D5-A72A-006097BFA1AC} (EPSON Web Printer-SelfTest Control Class) - http://esupport.epson-europe.com/selftest/en/Prg/ESTPTest.cab
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
    O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
    O23 - Service: Automatic LiveUpdate Scheduler - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\Windows\system32\CTsvcCDA.exe
    O23 - Service: DM1Service - OLYMPUS IMAGING CORP. - C:\Program Files\Olympus\DeviceDetector\DM1Service.exe
    O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
    O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
    O23 - Service: Google Desktop Manager 5.7.801.7324 (GoogleDesktopManager-010708-104812) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    O23 - Service: Google Update Service (gupdate1c9e85b10836fd9) (gupdate1c9e85b10836fd9) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LiveUpdate - Unknown owner - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE (file missing)
    O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
    O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
    O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
    O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
    O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
    O23 - Service: LiveShare P2P Server 10 (RoxLiveShare10) - Unknown owner - C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe (file missing)
    O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
    O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
    O23 - Service: SessionLauncher - Unknown owner - C:\Users\ADMINI~1\AppData\Local\Temp\DX9\SessionLauncher.exe (file missing)
    O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
    O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Windows\system32\STacSV.exe
    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
    O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\Windows\system32\Pen_Tablet.exe
    O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE

    --
    End of file - 15959 bytes
    “A journey is best measured in friends, not in miles.”
    (Tim Cahill)
  • Nenen
    Nenen Posts: 2,379 Forumite
    Part of the Furniture Combo Breaker
    This is the Malaware logfile:

    Malwarebytes' Anti-Malware 1.39
    Database version: 2438
    Windows 6.0.6001 Service Pack 1

    16/07/2009 14:17:27
    mbam-log-2009-07-16 (14-17-27).txt

    Scan type: Full Scan (B:\|C:\|D:\|)
    Objects scanned: 292190
    Time elapsed: 58 minute(s), 15 second(s)

    Memory Processes Infected: 2
    Memory Modules Infected: 5
    Registry Keys Infected: 23
    Registry Values Infected: 3
    Registry Data Items Infected: 0
    Folders Infected: 16
    Files Infected: 122

    Memory Processes Infected:
    C:\Program Files\DoubleD\GamingHarbor Toolbar\4.1.2.19770\stbapp.exe (Adware.DoubleD) -> Unloaded process successfully.
    C:\Program Files\DoubleD\GamingHarbor Toolbar\4.1.2.19770\stbappHelper.exe (Adware.DoubleD) -> Unloaded process successfully.

    Memory Modules Infected:
    C:\Program Files\DoubleD\GamingHarbor Toolbar\4.1.2.19770\HookAPINT.dll (Adware.DoubleD) -> Delete on reboot.
    C:\Program Files\DoubleD\GamingHarbor Toolbar\4.1.2.19770\ProductInfo.dll (Adware.DoubleD) -> Delete on reboot.
    C:\Program Files\DoubleD\GamingHarbor Toolbar\4.1.2.19770\SkinCrafterDll.dll (Adware.DoubleD) -> Delete on reboot.
    C:\Program Files\DoubleD\GamingHarbor Toolbar\4.1.2.19770\stbapp.dll (Adware.DoubleD) -> Delete on reboot.
    C:\Program Files\DoubleD\GamingHarbor Toolbar\4.1.2.19770\stbOL.dll (Adware.DoubleD) -> Delete on reboot.

    Registry Keys Infected:
    HKEY_CLASSES_ROOT\explorerbar.funredirector (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{883dfc00-8a21-411d-956c-73a4e4b7d16f} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{480098c6-f6ad-4c61-9b5c-2bae228a34d1} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{cdbfb47b-58a8-4111-bf95-06178dce326d} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{cdbfb47b-58a8-4111-bf95-06178dce326d} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cdbfb47b-58a8-4111-bf95-06178dce326d} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\explorerbar.funredirector.1 (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{5297e905-1dfb-4a9c-9871-a4f95fd58945} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\{5617eca9-488d-4ba2-8562-9710b9ab78d2} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{5617eca9-488d-4ba2-8562-9710b9ab78d2} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5617eca9-488d-4ba2-8562-9710b9ab78d2} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{d335d84d-61d8-4b5f-9c4e-067dc8b27ed5} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{42c23154-00fa-4a93-9de9-3eb523cffff6} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{2e8e2100-98cb-4aac-9480-63a281acaff5} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{22c12739-c111-44c6-9bb7-f335c2a9be2a} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{edb1a56e-2224-4c79-a4bd-42a39c6e4608} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{27ff1ee8-8ccc-49e1-b801-f212e3744e80} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\TypeLib\{0514c9b0-e4c6-4d6b-a3a6-b38bc280b115} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{3fb17508-0bf4-4fde-845a-323a1052957c} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{803e73fe-cb73-4d49-8aff-653fd6f44171} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{3fb17508-0bf4-4fde-845a-323a1052957c} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{51b67a88-02d0-43cb-8d12-5ca3e2d4cf49} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{d44cc2fb-77b8-48a5-a5dc-f961f2d258fb} (Adware.DoubleD) -> Quarantined and deleted successfully.

    Registry Values Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{5617eca9-488d-4ba2-8562-9710b9ab78d2} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{5617eca9-488d-4ba2-8562-9710b9ab78d2} (Adware.DoubleD) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\smileyapp (Adware.DoubleD) -> Quarantined and deleted successfully.

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    C:\Program Files\DoubleD (Adware.DoubleD) -> Delete on reboot.
    c:\program files\DoubleD\GamingHarbor Toolbar (Adware.DoubleD) -> Delete on reboot.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770 (Adware.DoubleD) -> Delete on reboot.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Cache (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\FFToolbar (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\fftoolbar\chrome (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\fftoolbar\chrome\locale (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\fftoolbar\chrome\locale\en-US (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\fftoolbar\components (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\fftoolbar\searchplugins (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Skins (Adware.DoubleD) -> Quarantined and deleted successfully.
    C:\Program Files\System Search Dispatcher (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\system search dispatcher\1.2.0.750 (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\system search dispatcher\1.2.0.750\Data (Adware.DoubleD) -> Quarantined and deleted successfully.

    Files Infected:
    C:\Program Files\System Search Dispatcher\1.2.0.750\ssd.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    C:\Program Files\DoubleD\GamingHarbor Toolbar\4.1.2.19770\stb0.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\AIMActiveXDLL.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\AxGifAnimator.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\gdiplus.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\HookAPINT.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\mfc80.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Microsoft.VC80.CRT.manifest (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Microsoft.VC80.MFC.manifest (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\msvcr80.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\MyDll.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\OEActiveXDLL.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\ProductInfo.dll (Adware.DoubleD) -> Delete on reboot.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Riched20Smiley.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\SkinCrafterDll.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\stbAol.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\stbapp.dll (Adware.DoubleD) -> Delete on reboot.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\stbapp.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\stbappHelper.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\stbasst.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\stbdl.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\stbIE.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\stbMsn.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\stbOL.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\stbOLEX.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\stbsvc.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\stbYahoo8.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\stbYahoo9.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Cache\248d6576afce4ee94af42d7350131106.gif (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Cache\24a70fb875fab686b6b3c217612bc07c.gif (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Cache\2afcf6f3f2e19cc42d7f72f3b18b26ef.gif (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Cache\50bffa6936b3e661971a58e3c8bdf4cb.gif (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Cache\default1.dat (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Cache\loading.dat (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Cache\loading.gif (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\Module_Cursor.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\Module_DailyVideo.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\Module_Game.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\Module_Glitter.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\Module_Logo.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\Module_Option.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\Module_Recipe.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\Module_Ringtone.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\Module_Screensaver.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\Module_Search.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\Module_Smiley.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\Module_Smiley_Config.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\Module_Smiley_TellAFriend.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\Module_Wallpaper.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\Module_Web.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\pixel.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\ProductInfo.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\profile.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\SearchEngineList.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\tbcore.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\ToolbarLayout.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\UpdateCentre.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\UpdateCentreBk.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\URLDynamic.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Data\URLStatic.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\fftoolbar\chrome.manifest (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\fftoolbar\install.rdf (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\fftoolbar\chrome\GamingHarborToolbar.jar (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\fftoolbar\chrome\locale\en-US\global.dtd (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\fftoolbar\components\DDAutoComplete.js (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\fftoolbar\components\ISmileyCore.xpt (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\fftoolbar\components\SmileyCore.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\fftoolbar\components\TBFFHelper.js (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\fftoolbar\components\TBFFHelper.xpt (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\fftoolbar\searchplugins\gamingharborsearchplugins.xml (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\About.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\Component_ComboBox.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\Module_Cursor.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\Module_Cursor.png (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\Module_DailyVideo.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\Module_Game.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\Module_Glitter.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\Module_Glitter.png (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\Module_Logo.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\Module_Option.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\Module_Recipe.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\Module_Ringtone.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\Module_Screensaver.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\Module_Search.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\Module_Smiley.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\Module_Smiley.png (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\Module_Wallpaper.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\Module_Web.mg (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnDefault.png (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnDisplay.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnDisplay.png (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnDisplay18.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnDisplay20.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnGlitters.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnGlitters.png (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnGlitters18.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnGlitters20.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnOption.png (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnSmiley.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnSmiley.png (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnSmiley18.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnSmiley20.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnTellFd.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnTellFd.png (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnTellFd18.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnTellFd20.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnWink.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnWink.png (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnWink18.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Icons\TBBtnWink20.bmp (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Skins\myskin1.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Skins\myskin2.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Skins\myskin3.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Skins\myskin4.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Skins\TellafriendSkin.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Skins\TellafriendSkin_s.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\DoubleD\gamingharbor toolbar\4.1.2.19770\Skins\ToastSkin.skf (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\system search dispatcher\1.2.0.750\unins000.dat (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\system search dispatcher\1.2.0.750\unins000.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\system search dispatcher\1.2.0.750\Data\eacore.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\system search dispatcher\1.2.0.750\Data\URLDynamic.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    c:\program files\system search dispatcher\1.2.0.750\Data\URLStatic.mx (Adware.DoubleD) -> Quarantined and deleted successfully.
    “A journey is best measured in friends, not in miles.”
    (Tim Cahill)
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 352.1K Banking & Borrowing
  • 253.6K Reduce Debt & Boost Income
  • 454.3K Spending & Discounts
  • 245.2K Work, Benefits & Business
  • 600.8K Mortgages, Homes & Bills
  • 177.5K Life & Family
  • 259K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16K Discuss & Feedback
  • 37.7K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.
Update Your Picture