Sponge,
Thanks for the help..

Below is a new scan after removing RapidBlaster.

I did the HiJackThis!.. It has many more files tha adaware.

Do you recommened the Blaster HiJack Browers software to protect/block IE?

I need to check my stsyem at home now for all of this stuff.

Thanks for yor help.

Xanth

Lavasoft Ad-aware Personal Build 6.181
Logfile created on :Thursday, November 06, 2003 6:31:12 AM
Created with Ad-aware Personal, free for private use.
Using reference-file :01R229 03.11.2003
__________________________________________________ ____

Ad-aware Settings
=========================
Set : Activate in-depth scan (Recommended)
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep scan registry


11-6-2003 6:31:12 AM - Scan started. (Smart mode)

Listing running processes
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ

#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ThreadCreationTime : 11-6-2003 11:26:28 AM
BasePriority : Normal


#:2 [winlogon.exe]
FilePath : \??\C:\WINDOWS\system32\
ThreadCreationTime : 11-6-2003 11:26:31 AM
BasePriority : High


#:3 [services.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 11-6-2003 11:26:31 AM
BasePriority : Normal
FileSize : 99 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Services and Controller app
InternalName : services.exe
OriginalFilename : services.exe
ProductName : Microsoft
Created on : 8/29/2002 10:00:00 AM
Last accessed : 11/6/2003 11:05:56 AM
Last modified : 8/29/2002 10:00:00 AM

#:4 [lsass.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 11-6-2003 11:26:31 AM
BasePriority : Normal
FileSize : 11 KB
FileVersion : 5.1.2600.1106 (xpsp1.020828-1920)
ProductVersion : 5.1.2600.1106
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
OriginalFilename : lsass.exe
ProductName : Microsoft
Created on : 8/29/2002 10:00:00 AM
Last accessed : 11/6/2003 11:05:56 AM
Last modified : 8/29/2002 10:00:00 AM

#:5 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 11-6-2003 11:26:32 AM
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 8/29/2002 10:00:00 AM
Last accessed : 11/6/2003 11:05:56 AM
Last modified : 8/29/2002 10:00:00 AM

#:6 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 11-6-2003 11:26:32 AM
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 8/29/2002 10:00:00 AM
Last accessed : 11/6/2003 11:05:56 AM
Last modified : 8/29/2002 10:00:00 AM

#:7 [explorer.exe]
FilePath : C:\WINDOWS\
ThreadCreationTime : 11-6-2003 11:26:33 AM
BasePriority : Normal
FileSize : 973 KB
FileVersion : 6.00.2800.1221 (xpsp2.030511-1403)
ProductVersion : 6.00.2800.1221
CompanyName : Microsoft Corporation
FileDescription : Windows Explorer
InternalName : explorer
OriginalFilename : EXPLORER.EXE
ProductName : Microsoft
Created on : 5/12/2003 1:12:10 AM
Last accessed : 11/6/2003 11:29:27 AM
Last modified : 5/12/2003 1:12:10 AM

#:8 [spoolsv.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 11-6-2003 11:26:34 AM
BasePriority : Normal
FileSize : 50 KB
FileVersion : 5.1.2600.0 (XPClient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
OriginalFilename : spoolsv.exe
ProductName : Microsoft
Created on : 8/29/2002 10:00:00 AM
Last accessed : 11/6/2003 11:05:56 AM
Last modified : 8/29/2002 10:00:00 AM

#:9 [hkcmd.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 11-6-2003 11:26:35 AM
BasePriority : Normal
FileSize : 112 KB
FileVersion : 3,0,0,2104
ProductVersion : 7,0,0,2104
Copyright : Copyright 1999-2003, Intel Corporation
CompanyName : Intel Corporation
FileDescription : hkcmd Module
InternalName : HKCMD
OriginalFilename : HKCMD.EXE
ProductName : Intel(R) Common User Interface
Created on : 1/1/1980 5:00:00 AM
Last accessed : 11/6/2003 11:26:27 AM
Last modified : 4/7/2003 5:07:38 AM

#:10 [alogserv.exe]
FilePath : C:\Program Files\McAfee\McAfee VirusScan\
ThreadCreationTime : 11-6-2003 11:26:35 AM
BasePriority : Normal
FileSize : 36 KB
FileVersion : 6.02.1019.1
ProductVersion : 6.02.1019.1
Copyright : Copyright
CompanyName : Networks Associates Technologies, Inc.
FileDescription : Activity Log Server
InternalName : AlogServ
OriginalFilename : AlogServ.exe
ProductName : McAfee VirusScan
Created on : 9/27/2001 11:01:00 AM
Last accessed : 11/6/2003 11:26:27 AM
Last modified : 5/28/2002 10:02:30 AM

#:11 [cmgrdian.exe]
FilePath : C:\Program Files\McAfee\McAfee Shared
Components\Guardian\
ThreadCreationTime : 11-6-2003 11:26:35 AM
BasePriority : Normal
FileSize : 139 KB
FileVersion : 3.00.1038.0
ProductVersion : 3.00.1038.0
Copyright : Copyright
CompanyName : Network Associates, Inc.
FileDescription : McAfee Guardian Agent
InternalName : CMGrdian
OriginalFilename : CMGrdian.exe
ProductName : McAfee Windows Guardian
Created on : 9/27/2001 8:00:00 AM
Last accessed : 11/6/2003 11:26:27 AM
Last modified : 8/19/2002 7:03:00 AM

#:12 [support.exe]
FilePath : C:\Program Files\Common Files\Dell\EUSW\
ThreadCreationTime : 11-6-2003 11:26:35 AM
BasePriority : Normal
FileSize : 240 KB
FileVersion : 2, 0, 0, 33
ProductVersion : 1, 0, 0, 1
Copyright : Copyright
CompanyName : Dell
FileDescription : Support
InternalName : Support
OriginalFilename : Support.exe
ProductName : Dell Support
Created on : 6/24/2003 3:46:30 PM
Last accessed : 11/6/2003 11:26:27 AM
Last modified : 6/24/2003 3:46:30 PM

#:13 [wfxsnt40.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 11-6-2003 11:26:35 AM
BasePriority : Normal
FileSize : 42 KB
FileVersion : 7.00 (Build 019)
ProductVersion : 7.00 (Build 019)
Copyright : Copyright (C) Symantec Corp. 1990-1997
CompanyName : Microsoft Corporation
FileDescription : Delrina Fax Port Launcher
InternalName : WFXSNT40.DLL
OriginalFilename : WFXSNT40.DLL
ProductName : Microsoft (R) Windows NT(TM) WinFax Printer Driver
Created on : 9/24/2003 7:46:49 PM
Last accessed : 11/6/2003 11:26:27 AM
Last modified : 7/27/1998 8:54:10 AM

#:14 [directcd.exe]
FilePath : C:\Program Files\Adaptec\Easy CD Creator
5\DirectCD\
ThreadCreationTime : 11-6-2003 11:26:35 AM
BasePriority : Normal
FileSize : 668 KB
FileVersion : 5.3.2.34
ProductVersion : 5.3.2.34
Copyright : Copyright (c) 2001,2002, Roxio, Inc.
CompanyName : Roxio
FileDescription : DirectCD Application
InternalName : DirectCD
OriginalFilename : Directcd.exe
ProductName : DirectCD
Created on : 5/17/2001 7:25:10 PM
Last accessed : 11/6/2003 11:26:27 AM
Last modified : 9/25/2003 10:19:48 AM

#:15 [rulaunch.exe]
FilePath : C:\Program Files\McAfee\McAfee Shared
Components\Instant Updater\
ThreadCreationTime : 11-6-2003 11:26:35 AM
BasePriority : Normal
FileSize : 112 KB
FileVersion : 1.04.1113.0
ProductVersion : 1.04.1113.0
Copyright : Copyright
CompanyName : Networks Associates Technologies, Inc.
FileDescription : RuLaunch
InternalName : RuLaunch
OriginalFilename : RuLaunch.exe
ProductName : McAfee Instant Updater
Created on : 9/27/2001 6:01:00 AM
Last accessed : 11/6/2003 11:26:27 AM
Last modified : 5/2/2002 5:04:00 AM

#:16 [msoffice.exe]
FilePath : C:\Program Files\Microsoft Office\Office\1033\
ThreadCreationTime : 11-6-2003 11:26:36 AM
BasePriority : Normal
FileSize : 396 KB
FileVersion : 9.0.2601
ProductVersion : 9.0.2601
Copyright : Copyright
CompanyName : Microsoft Corporation
FileDescription : Microsoft Office 2000 component
InternalName : MSOFFICE
OriginalFilename : MSOFFICE.EXE
ProductName : Microsoft Office 2000
Created on : 2/1/1999 11:53:24 PM
Last accessed : 11/6/2003 11:05:56 AM
Last modified : 2/1/1999 11:53:24 PM

#:17 [avsynmgr.exe]
FilePath : C:\Program Files\McAfee\McAfee VirusScan\
ThreadCreationTime : 11-6-2003 11:26:41 AM
BasePriority : Normal
FileSize : 168 KB
FileVersion : 6.02.1019.1
ProductVersion : 6.02.1019.1
Copyright : Copyright
CompanyName : Networks Associates Technologies, Inc.
FileDescription : VirusScan Synchronization Service
InternalName : AvSynMgr
OriginalFilename : AvSynMgr.exe
ProductName : McAfee VirusScan
Created on : 9/27/2001 11:01:00 AM
Last accessed : 11/6/2003 11:05:56 AM
Last modified : 5/28/2002 10:02:30 AM

#:18 [cisvc.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 11-6-2003 11:26:41 AM
BasePriority : Normal
FileSize : 5 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Content Index service
InternalName : cisvc.exe
OriginalFilename : cisvc.exe
ProductName : Microsoft
Created on : 8/29/2002 10:00:00 AM
Last accessed : 11/6/2003 11:05:56 AM
Last modified : 8/29/2002 10:00:00 AM

#:19 [ups.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 11-6-2003 11:26:41 AM
BasePriority : Normal
FileSize : 16 KB
FileVersion : 5.1.2600.1106 (xpsp1.020828-1920)
ProductVersion : 5.1.2600.1106
CompanyName : Microsoft Corporation
FileDescription : UPS Service
InternalName : ups.exe
OriginalFilename : ups.exe
ProductName : Microsoft
Created on : 8/29/2002 10:00:00 AM
Last accessed : 11/6/2003 11:05:56 AM
Last modified : 8/29/2002 10:00:00 AM

#:20 [wfxsvc.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 11-6-2003 11:26:41 AM
BasePriority : Normal
FileSize : 118 KB
FileVersion : 9.00.98.0727
ProductVersion : 9.00
Copyright : Copyright
CompanyName : Symantec Corporation
FileDescription : Symantec WinFax PRO NT Service
InternalName : WFXSVC
ProductName : Symantec WinFax PRO
Created on : 9/24/2003 7:46:49 PM
Last accessed : 11/6/2003 11:05:56 AM
Last modified : 7/27/1998 8:54:10 AM

#:21 [wfxmod32.exe]
FilePath : C:\Program Files\Symantec\WinFax\
ThreadCreationTime : 11-6-2003 11:26:41 AM
BasePriority : High
FileSize : 556 KB
FileVersion : 9.00.98.0727
ProductVersion : 9.00
Copyright : Copyright
CompanyName : Symantec Corporation
FileDescription : WinFax Pro Serial Modem Driver.
InternalName : WFXMOD32.EXE
ProductName : Symantec WinFax PRO
Created on : 9/24/2003 7:46:53 PM
Last accessed : 11/6/2003 11:05:56 AM
Last modified : 7/27/1998 8:54:08 AM

#:22 [vsstat.exe]
FilePath : C:\Program Files\McAfee\McAfee VirusScan\
ThreadCreationTime : 11-6-2003 11:26:44 AM
BasePriority : Normal
FileSize : 104 KB
FileVersion : 6.02.3000.1
ProductVersion : 6.02.3000.1
Copyright : Copyright
CompanyName : Networks Associates Technologies, Inc.
FileDescription : VirusScan System Tray
InternalName : VsStat
OriginalFilename : VsStat.exe
ProductName : McAfee VirusScan
Created on : 9/27/2001 11:01:00 AM
Last accessed : 11/6/2003 11:05:56 AM
Last modified : 5/28/2002 10:02:30 AM

#:23 [vshwin32.exe]
FilePath : C:\Program Files\McAfee\McAfee VirusScan\
ThreadCreationTime : 11-6-2003 11:26:44 AM
BasePriority : Normal
FileSize : 120 KB
FileVersion : 6.02.3000.1
ProductVersion : 6.02.3000.1
Copyright : Copyright
CompanyName : Networks Associates Technologies, Inc.
FileDescription : VirusScan System Scan
InternalName : VshWin32
OriginalFilename : VshWin32.exe
ProductName : McAfee VirusScan
Created on : 9/27/2001 11:01:00 AM
Last accessed : 11/6/2003 11:05:56 AM
Last modified : 5/28/2002 10:02:30 AM

#:24 [mcshield.exe]
FilePath : C:\Program Files\Common Files\Network
Associates\McShield\
ThreadCreationTime : 11-6-2003 11:26:48 AM
BasePriority : High
FileSize : 220 KB
Created on : 9/27/2001 11:01:00 AM
Last accessed : 11/6/2003 11:05:56 AM
Last modified : 9/27/2001 11:01:00 AM

#:25 [avconsol.exe]
FilePath : C:\Program Files\McAfee\McAfee VirusScan\
ThreadCreationTime : 11-6-2003 11:26:50 AM
BasePriority : Normal
FileSize : 148 KB
FileVersion : 6.02.1019.1
ProductVersion : 6.02.1019
Copyright : Copyright
CompanyName : Network Associates, Inc.
FileDescription : VirusScan Consol
InternalName : AvConsol
OriginalFilename : AvConsol.exe
ProductName : McAfee VirusScan
Created on : 9/27/2001 11:01:00 AM
Last accessed : 11/6/2003 11:05:56 AM
Last modified : 5/28/2002 10:02:30 AM

#:26 [webscanx.exe]
FilePath : C:\Program Files\McAfee\McAfee VirusScan\
ThreadCreationTime : 11-6-2003 11:26:50 AM
BasePriority : Normal
FileSize : 140 KB
FileVersion : 6.02.1019.1
ProductVersion : 6.02.1019.1
Copyright : Copyright
CompanyName : Networks Associates Technologies, Inc.
FileDescription : WebScanX
InternalName : WebScanX
OriginalFilename : WebScanX.exe
ProductName : McAfee VirusScan
Created on : 9/27/2001 11:01:00 AM
Last accessed : 11/6/2003 11:05:56 AM
Last modified : 5/28/2002 10:02:30 AM

#:27 [ad-aware.exe]
FilePath : C:\Program Files\Lavasoft\Ad-aware 6\
ThreadCreationTime : 11-6-2003 11:28:12 AM
BasePriority : Normal
FileSize : 668 KB
FileVersion : 6.0.1.181
ProductVersion : 6.0.0.0
Copyright : Copyright
CompanyName : Lavasoft Sweden
FileDescription : Ad-aware 6 core application
InternalName : Ad-aware.exe
OriginalFilename : Ad-aware.exe
ProductName : Lavasoft Ad-aware Plus
Created on : 11/4/2003 12:24:54 PM
Last accessed : 11/6/2003 11:28:12 AM
Last modified : 7/13/2003 3:00:20 AM

Memory scan result :
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
New objects : 0
Objects found so far: 0


Started registry scan
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ

Alexa Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Internet
Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}


Windows Object recognized!
Type : RegData
Data :
Rootkey : HKEY_CURRENT_USER
Object : Software\Microsoft\MediaPlayer\Player\Settings
Value : Client ID
Data :


Registry scan result :
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
New objects : 2
Objects found so far: 2


Started deep registry scan
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ

Deep registry scan result :
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
New objects : 0
Objects found so far: 2


ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ

Tracking Cookie Object recognized!
Type : File
Data : utell electric@2o7[1].txt
Object : C:\Documents and Settings\Utell Electric\Cookies\
FileSize : 1 KB
Created on : 10/3/2003 10:30:41 AM
Last accessed : 11/6/2003 11:30:06 AM
Last modified : 10/3/2003 10:31:29 AM


ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ


Deep scanning and examining files (C
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ


Performing conditional scans..
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ

Conditional scan result:
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
New objects : 0
Objects found so far: 3


6:32:37 AM Scan complete

Summary of this scan
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
Total scanning time :00:01:25:140
Objects scanned :38741
Objects identified :3
Objects ignored :0
New objects :3


"sponge" <yosponge@yahoo.com> wrote in message
news:8d76ec03.0311051837.58a26cb6@posting.google.c om...
> On Wed, 05 Nov 2003 12:18:18 GMT, "Xanth" <utellelectric@verizon.net>
> wrote:
>
> >Hello all,
> >I have adware 6.x build 181 installed, try to post the findings to
> there
> >site, made a login name and registered but I could not post for
> someone to
> >read and evaluate.
> >Can someone help me- evere since I installed a DSL ISP the system is
> slow,
> >someone suggested to run ad-aware to delete files, dont' know where
> to go
> >from here.
> >
> >Thanks,
> >Xanth
> >Lavasoft Ad-aware Personal Build 6.181
>
> In addition to Robin's advice, UPS.EXE and ZSTATUS.EXE look a little
> suspect. Do you know what they are? You can try disabling them by
> running MSCONFIG.EXE and unchecking those items and seeing how your
> system runs. You might also want to download and run HiJackThis! and
> post whatever it tells you here. The RapidBlaster, though, is a
> definite, BIG problem.
>
> Sponge
> Sponge's Secure Solutions
> www.geocities.com/yosponge
> My new email: yosponge2 att yahoo dott com