Logfile created: 30.4.2011 22:3:46 Lavasoft Ad-Aware version: 8.1.3 Extended engine version: 8.

1 User performing scan: Win XP *********************** Definitions database information *********************** Lavasoft definition file: 144.0 Extended engine definition file: 8.1 ******************************** Scan results: ********************************* Scan profile name: Full Scan (ID: full) Objects scanned: 162736 Objects detected: 8 Type Detected ========================== Processes.......: 0 Registry entries: 7 Hostfile entries: 0 Files...........: 0 Folders.........: 1 LSPs............: 0 Cookies.........: 0 Browser hijacks.: 0 MRU objects.....: 0

Removed items: Description: HKCR:clsid\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb}: Family Name: Fun Web Clean status: Success Item ID: 12151 Family ID: 92 Description: HKCR:interface\{1d4db7d1-6ec9-47a3-bd87-1e41684e07bb}: Family Name: FunWeb Clean status: Success Item ID: 12154 Family ID: 92 Description: HKCR:typelib\{1d4db7d0-6ec9-47a3-bd87-1e41684e07bb}: Family Name: F unWeb Clean status: Success Item ID: 12155 Family ID: 92 Description: HKCR:funwebproductsinstaller.start: Family Name: FunWeb Clean statu s: Success Item ID: 12152 Family ID: 92 Description: HKCR:funwebproductsinstaller.start.1: Family Name: FunWeb Clean sta tus: Success Item ID: 12153 Family ID: 92 Description: HKLM:software\funwebproducts: Family Name: FunWeb Clean status: Suc cess Item ID: 12156 Family ID: 92 Description: HKLM:software\fun web products: Family Name: FunWeb Clean status: S uccess Item ID: 12162 Family ID: 92 Description: C:\Program Files\funwebproducts Family Name: FunWeb Clean status: S uccess Item ID: 55520 Family ID: 92 Scan and cleaning complete: Finished correctly after 2391 seconds *********************************** Settings *********************************** Scan profile: ID: full, enabled:1, value: Full Scan ID: scancriticalareas, enabled:1, value: true ID: scanrunningapps, enabled:1, value: true ID: scanregistry, enabled:1, value: true ID: scanlsp, enabled:1, value: true ID: scanads, enabled:1, value: true ID: scanhostsfile, enabled:1, value: true ID: scanmru, enabled:1, value: true

ID: scanbrowserhijacks, enabled:1, value: true ID: scantrackingcookies, enabled:1, value: true ID: closebrowsers, enabled:1, value: false ID: folderstoscan, enabled:1, value: C:\,D:\ ID: usespywareheuristics, enabled:1, value: true ID: extendedengine, enabled:0, value: true ID: useheuristics, enabled:0, value: true ID: heuristicslevel, enabled:0, value: mild, domain: medium,mild,strict ID: filescanningoptions, enabled:1 ID: scanrootkits, enabled:1, value: true ID: archives, enabled:1, value: true ID: onlyexecutables, enabled:1, value: false ID: skiplargerthan, enabled:1, value: 20480 Scan global: ID: global, enabled:1 ID: addtocontextmenu, enabled:1, value: true ID: playsoundoninfection, enabled:1, value: false ID: soundfile, enabled:0, value: *to be filled in automatically*\alert.wav Scheduled scan settings: <Empty> Update settings: ID: updates, enabled:1 ID: launchthreatworksafterscan, enabled:1, value: normal, domain: normal,off,s ilently ID: softwareupdates, enabled:1, value: downloadandinstall, domain: dontcheck,d ownloadandinstall ID: licenseandinfo, enabled:1, value: downloadandinstall, domain: dontcheck,do wnloadandinstall ID: schedules, enabled:1, value: true ID: updatedaily, enabled:1, value: Daily ID: time, enabled:1, value: Fri Aug 27 09:02:00 2010 ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systems tart,weekly ID: weekdays, enabled:1 ID: monday, enabled:1, value: false ID: tuesday, enabled:1, value: false ID: wednesday, enabled:1, value: false ID: thursday, enabled:1, value: false ID: friday, enabled:1, value: false ID: saturday, enabled:1, value: false ID: sunday, enabled:1, value: false ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31 ID: scanprofile, enabled:1, value: ID: auto_deal_with_infections, enabled:1, value: false ID: updateweekly, enabled:1, value: Weekly ID: time, enabled:1, value: Fri Aug 27 09:02:00 2010 ID: frequency, enabled:1, value: weekly, domain: daily,monthly,once,system start,weekly ID: weekdays, enabled:1 ID: monday, enabled:1, value: true ID: tuesday, enabled:1, value: false ID: wednesday, enabled:1, value: false ID: thursday, enabled:1, value: false ID: friday, enabled:1, value: true ID: saturday, enabled:1, value: false ID: sunday, enabled:1, value: false ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31

ID: scanprofile, enabled:1, value: ID: auto_deal_with_infections, enabled:1, value: false Appearance settings: ID: appearance, enabled:1 ID: skin, enabled:1, value: default.egl, reglocation: HKEY_LOCAL_MACHINE\SOFTW ARE\Lavasoft\Ad-Aware\Resource ID: showtrayicon, enabled:1, value: true ID: language, enabled:1, value: en, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\L avasoft\Ad-Aware\Language Realtime protection settings: ID: realtime, enabled:1 ID: processprotection, enabled:1, value: true ID: registryprotection, enabled:0, value: false ID: networkprotection, enabled:0, value: false ID: usespywareheuristics, enabled:0, value: true ID: extendedengine, enabled:0, value: false ID: useheuristics, enabled:0, value: false ID: heuristicslevel, enabled:0, value: mild, domain: medium,mild,strict ID: infomessages, enabled:1, value: onlyimportant, domain: display,dontnotify, onlyimportant ****************************** System information ****************************** Computer name: WIN_XP Processor name: AMD Athlon(tm) II X2 240 Processor Processor identifier: x86 Family 16 Model 6 Stepping 2 Raw info: processorarchitecture 0, processortype 586, processorlevel 16, process or revision 1538, number of processors 2 Physical memory available: 1455677440 bytes Physical memory total: 2146676736 bytes Virtual memory available: 2032705536 bytes Virtual memory total: 2147352576 bytes Memory load: 32% Microsoft Windows XP Home Edition Service Pack 3 (build 2600) Windows startup mode: Running processes: PID: 688 name: \SystemRoot\System32\smss.exe owner: SYSTEM domain: NT AUTHORITY PID: 768 name: \??\C:\WINDOWS\system32\csrss.exe owner: SYSTEM domain: NT AUTHOR ITY PID: 800 name: \??\C:\WINDOWS\system32\winlogon.exe owner: SYSTEM domain: NT AUT HORITY PID: 844 name: C:\WINDOWS\system32\services.exe owner: SYSTEM domain: NT AUTHORI TY PID: 856 name: C:\WINDOWS\system32\lsass.exe owner: SYSTEM domain: NT AUTHORITY PID: 1008 name: C:\WINDOWS\system32\Ati2evxx.exe owner: SYSTEM domain: NT AUTHOR ITY PID: 1028 name: C:\WINDOWS\system32\svchost.exe owner: SYSTEM domain: NT AUTHORI TY PID: 1092 name: C:\WINDOWS\system32\svchost.exe owner: NETWORK SERVICE domain: N T AUTHORITY PID: 1132 name: C:\WINDOWS\System32\svchost.exe owner: SYSTEM domain: NT AUTHORI TY PID: 1280 name: C:\WINDOWS\system32\svchost.exe owner: NETWORK SERVICE domain: N T AUTHORITY PID: 1312 name: C:\WINDOWS\system32\svchost.exe owner: LOCAL SERVICE domain: NT AUTHORITY PID: 1348 name: C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe owner: SYSTEM

domain: NT AUTHORITY PID: 1392 name: C:\WINDOWS\system32\Ati2evxx.exe owner: SYSTEM domain: NT AUTHOR ITY PID: 1596 name: C:\WINDOWS\system32\spoolsv.exe owner: SYSTEM domain: NT AUTHORI TY PID: 1740 name: C:\WINDOWS\Explorer.EXE owner: Win XP domain: WIN_XP PID: 2000 name: C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe owner: Win XP do main: WIN_XP PID: 2024 name: C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe owner: Win X P domain: WIN_XP PID: 2032 name: C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe owner: Win XP dom ain: WIN_XP PID: 124 name: C:\WINDOWS\PixArt\PAC7302\Monitor.exe owner: Win XP domain: WIN_X P PID: 164 name: C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\DATAMN~1.EXE owner: Win XP domain: WIN_XP PID: 180 name: C:\Program Files\Internet Bilo gdje\UIExec.exe owner: Win XP doma in: WIN_XP PID: 232 name: C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe owne r: Win XP domain: WIN_XP PID: 248 name: C:\Program Files\Real\RealPlayer\update\realsched.exe owner: Win XP domain: WIN_XP PID: 264 name: C:\WINDOWS\system32\ctfmon.exe owner: Win XP domain: WIN_XP PID: 356 name: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifi er.exe owner: Win XP domain: WIN_XP PID: 520 name: C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE owner: Wi n XP domain: WIN_XP PID: 680 name: C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe own er: Win XP domain: WIN_XP PID: 1388 name: C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe ow ner: Win XP domain: WIN_XP PID: 2184 name: C:\WINDOWS\system32\svchost.exe owner: LOCAL SERVICE domain: NT AUTHORITY PID: 2352 name: C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe owner: SYSTE M domain: NT AUTHORITY PID: 2752 name: C:\WINDOWS\system32\svchost.exe owner: SYSTEM domain: NT AUTHORI TY PID: 2792 name: C:\Program Files\Internet BILO GDJE\AssistantServices.exe owner: SYSTEM domain: NT AUTHORITY PID: 2836 name: C:\WINDOWS\system32\wdfmgr.exe owner: LOCAL SERVICE domain: NT A UTHORITY PID: 3208 name: C:\WINDOWS\system32\wbem\unsecapp.exe owner: SYSTEM domain: NT A UTHORITY PID: 3452 name: C:\WINDOWS\System32\alg.exe owner: LOCAL SERVICE domain: NT AUTH ORITY PID: 3624 name: C:\WINDOWS\system32\wbem\wmiprvse.exe owner: SYSTEM domain: NT A UTHORITY PID: 1948 name: C:\Program Files\Internet BILO GDJE\UIMain.exe owner: Win XP dom ain: WIN_XP PID: 3512 name: C:\Program Files\Internet BILO GDJE\CMUpdater.exe owner: Win XP domain: WIN_XP PID: 408 name: C:\Program Files\Opera\opera.exe owner: Win XP domain: WIN_XP PID: 2336 name: C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe owner: Win XP do main: WIN_XP Startup items: Name: {438755C2-A8BA-11D1-B96B-00A0C90312E1} imagepath: Browseui preloader Name: {8C7461EF-2B13-11d2-BE35-3078302C2030} imagepath: Component Categories cache daemon

Name: HDAudDeck imagepath: C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1