My sister was using the spare computer when AVG8 (using it for the first time) noted several problems. After it cleaned up what it found, I could not access the internet. When I tried to repair the connection, it returned "Windows could not finish repairing the problem because the following action cannot be completed. Renewing your IP address." Since I could not access the internet from that computer, I downloaded SuperAntispyware, Malwarebytes and HiJackThis on a jumpdrive and ran them. Follows are the log


SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 05/11/2008 at 09:09 PM

Application Version : 4.0.1154

Core Rules Database Version : 3458
Trace Rules Database Version: 1449

Scan type : Complete Scan
Total Scan Time : 02:15:47

Memory items scanned : 152
Memory threats detected : 0
Registry items scanned : 4680
Registry threats detected : 37
File items scanned : 116792
File threats detected : 356

Unclassified.Unknown Origin
HKLM\Software\Classes\CLSID\{0656A137-B161-CADD-9777-E37A75727E78}
HKCR\CLSID\{0656A137-B161-CADD-9777-E37A75727E78}

Adware.webHancer
HKLM\Software\Classes\CLSID\{c900b400-cdfe-11d3-976a-00e02913a9e0}
HKCR\CLSID\{C900B400-CDFE-11D3-976A-00E02913A9E0}
HKCR\CLSID\{C900B400-CDFE-11D3-976A-00E02913A9E0}
HKCR\CLSID\{C900B400-CDFE-11D3-976A-00E02913A9E0}\InprocServer32
HKCR\CLSID\{C900B400-CDFE-11D3-976A-00E02913A9E0}\InprocServer32#ThreadingModel
HKCR\CLSID\{C900B400-CDFE-11D3-976A-00E02913A9E0}\ProgID
HKCR\CLSID\{C900B400-CDFE-11D3-976A-00E02913A9E0}\Programmable
HKCR\CLSID\{C900B400-CDFE-11D3-976A-00E02913A9E0}\VersionIndependentProgID
C:\PROGRAM FILES\WEBHANCER\PROGRAMS\WHIEHLPR.DLL
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c900b400-cdfe-11d3-976a-00e02913a9e0}
HKCR\WhIeHelperObj.WhIeHelperObj
HKCR\WhIeHelperObj.WhIeHelperObj\CurVer
HKCR\WhIeHelperObj.WhIeHelperObj.1
HKCR\WhIeHelperObj.WhIeHelperObj.1\CLSID
HKCR\Interface\{C89435B0-CDFE-11D3-976A-00E02913A9E0}
HKCR\Interface\{C89435B0-CDFE-11D3-976A-00E02913A9E0}\ProxyStubClsid
HKCR\Interface\{C89435B0-CDFE-11D3-976A-00E02913A9E0}\ProxyStubClsid32
HKCR\Interface\{C89435B0-CDFE-11D3-976A-00E02913A9E0}\TypeLib
HKCR\Interface\{C89435B0-CDFE-11D3-976A-00E02913A9E0}\TypeLib#Version
HKCR\TypeLib\{C8CB3870-CDFE-11D3-976A-00E02913A9E0}
HKCR\TypeLib\{C8CB3870-CDFE-11D3-976A-00E02913A9E0}\1.0
HKCR\TypeLib\{C8CB3870-CDFE-11D3-976A-00E02913A9E0}\1.0\0
HKCR\TypeLib\{C8CB3870-CDFE-11D3-976A-00E02913A9E0}\1.0\0\win32
HKCR\TypeLib\{C8CB3870-CDFE-11D3-976A-00E02913A9E0}\1.0\FLAGS
HKCR\TypeLib\{C8CB3870-CDFE-11D3-976A-00E02913A9E0}\1.0\HELPDIR
HKLM\Software\WebHancer
HKLM\Software\WebHancer#BaseDir
HKLM\Software\WebHancer\CC
HKLM\Software\WebHancer\CC#DistTag
HKLM\Software\WebHancer\CC#INSTFRM
HKLM\Software\WebHancer\CC#DWLLTM
HKLM\Software\WebHancer\CC#SLNTIND
HKLM\Software\WebHancer\CC#ACCPTPS
HKLM\Software\WebHancer\CC#id
HKLM\Software\WebHancer\ESO
HKLM\Software\WebHancer\ESO#aa
C:\Program Files\WEBHANCER\Programs\license.txt
C:\Program Files\WEBHANCER\Programs\readme.txt
C:\Program Files\WEBHANCER\Programs\sporder.dll
C:\Program Files\WEBHANCER\Programs\whagent.ini
C:\Program Files\WEBHANCER\Programs
C:\Program Files\WEBHANCER

Adware.Tracking Cookie
C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
C:\Documents and Settings\Guest\Cookies\guest@2o7[2].txt
C:\Documents and Settings\Guest\Cookies\[email protected][1].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and ken@2o7[1].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and [email protected][1].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and [email protected][1].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and ken@adlegend[1].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and ken@adrevolver[1].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and ken@adrevolver[2].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and [email protected][1].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and ken@adserver[1].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and ken@advertising[2].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and ken@atdmt[2].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and ken@atwola[2].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and ken@doubleclick[1].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and [email protected][2].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and [email protected][2].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and ken@mediaplex[1].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and ken@questionmarket[2].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and ken@tacoda[1].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and ken@trafficmp[1].txt
C:\Documents and Settings\jen and ken\Local Settings\Temp\Cookies\jen and ken@tribalfusion[1].txt
F:\Documents and Settings\LocalService\Cookies\system@mywebsearch[1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@10click[2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@247realmedia[2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@2o7[2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@a.************[1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@adbriteandfreestyle[1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@adbrite[2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@adecn[2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@adinterax[1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@adknowledge[1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@adlegend[1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@adprofile[1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@adrevolver[2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@adrevolver[3].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@adserver[1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@adtech[2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@adultfriendfinder[2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@apmebf[2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@askiacsearchmedia[2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@atwola[1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@azjmp[1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@azoogleads[1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@banner[1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@belnk[1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@bizrate[2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@bluestreak[1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@bravenet[1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn [email protected][1].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@buddytracker[2].txt
F:\Documents and Settings\Marilyn Berg\Cookies\marilyn berg@burstnet[2].txt