Is everything OK with my log?

Hello and welcome to the forums. Sorry for the delay in responding, but we have been pretty busy here lately. Since your log might have changed since your last posting, I would like to see a new log. If you could please post a new log, I will be glad to review it.

Ok, I don't see anything there of concern. Please run full scans with Ad-Aware SE and Spybot-S&D as follows:
(If you already have Ad-Aware SE 1.06 and Spybot 1.4 installed, you can skip the installation steps. If you don't, please uninstall your old versions and install the new ones from the links below.)

Full Ad-Aware Scan
Please download Ad-Aware SE from here:
http://www.majorgeeks.com/download506.html
Install Ad-Aware and run it. In the bottom-right hand corner, click "Check for updates now". Click "Connect" to download the newest reference file.

Now we will configure Ad-Aware to perform a full scan. In the Ad-Aware main window, click on the gear icon at the top of the screen to open the preferences window. In the "General" window, make sure the following options are selected:
1) Automatically save log-file
2) Automatically quarantine objects prior to removal
3) Safe Mode (always request confirmation)

Click the "Scanning" button on the left-hand side and make sure the following options are selected:
1) Scan within archives
2) Scan active processes
3) Scan registry
4) Deep scan registry
4) Scan my IE Favorites for banned URLs
5) Scan my Hosts file

Please also click on "Select drives & folders to scan" and select your hard drive(s). Then click the "Advanced" button on the left-hand side and make sure all the options under "Log-file Detail Level" are selected. Next, click the "Tweak" button on the left-hand side. Click on "Scanning Engine" and make sure the following options are selected:
1) Unload recognized processes & modules during scanning
2) Obtain command line of scanned processes
3) Scan registry for all users instead of current user only

Click on "Cleaning Engine" and make sure the following options are selected:
1) Always try to unload modules before deletion
2) During removal, unload Explorer and IE if necessary
3) Let Windows remove files in use at next reboot
4) Delete quarantined objects after restoring

Finally, click on "Safety Settings" and make sure the following options are selected:
1) Automatically select problematic objects in results lists
2) Write-protect system files after repair (Hosts file, etc)

Click on "Proceed" to save the preferences. Then please click the "Start" button on the bottom right side to begin a scan. Select "Use custom scanning options" and then click "Next". Ad-Aware will then scan for malware. When it is finished, make sure any objects listed in RED are selected and click "Next" to remove the objects. Then please restart your computer.


Spybot Full Scan
Next, please download Spybot-S&D from here:
http://www.majorgeeks.com/download.php?det=2471
Install Spybot-S&D and run it. Select "Search for updates" and then select all available updates. Click on the drop-down box in the top center to choose a download location nearest to you. Then click "Download updates". When all updates have downloaded, close Spybot-S&D, and then run it again. Click on "Check for problems". When the scan has finished, select any entries listed in red and click "Fix selected problems". Then please restart your computer again. Let me know how the scans go and if anything cannot be removed.

OK updated Adaware. Here is the log file. All AA needed to do was kill tracking cookies.. Ran Spybot S&D with latest definitions & it found nothing. I wonder about the smss & csrss exe files. Ran the Yaha removal tool from Symantec & it found nothing. However some programs give me a zonealarm pro alert about wanting to open smss. Strange…. Another problem I'm having is very slow DVD burning with both Nero Burning Rom & DVD Decrypter after I upgraded my Plexter firmware & Nero to the latest versions. A couple of other people (at the Afterdawn forums) are having slow DVD burning problems too after upgrading Nero. I removed Nero & Decrypter, rebooted then installed decrypter by itself. Still slow (2.4k) burning on DVD's plus I removed Audiblemanager (an audiobook program), rebooted then reinstalled it. All of a sudden the Roxio CD burning engine wouldn't work. If I can't fix these problems then I'm going to have to replace my current C partition with the one on my old hard drive (leaving the much bigger D partition alone) then reinstall all my programs. Thats a few hours of work!!! Ad-Aware SE Build 1.06r1 Logfile Created on:Tuesday, August 09, 2005 12:31:41 PM Created with Ad-Aware SE Personal, free for private use. Using definitions file:SE1R60 04.08.2005 »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» References detected during the scan: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» MRU List(TAC index:0):65 total references Tracking Cookie(TAC index:3):40 total references »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Definition File: ========================= Definitions File Loaded: Reference Number : SE1R47 24.05.2005 Internal build : 55 File location : C:\PROGRA~1\LAVASOFT\AD-AWA~1\defs.ref File size : 476246 Bytes Total size : 1439523 Bytes Signature data size : 1408291 Bytes Reference data size : 30720 Bytes Signatures total : 40174 CSI Fingerprints total : 886 CSI data size : 30371 Bytes Target categories : 15 Target families : 679 8-9-2005 12:25:25 PM Performing WebUpdate… Installing Update… Definitions File Loaded: Reference Number : SE1R60 04.08.2005 Internal build : 70 File location : C:\PROGRA~1\LAVASOFT\AD-AWA~1\defs.ref File size : 506981 Bytes Total size : 1528563 Bytes Signature data size : 1495861 Bytes Reference data size : 32190 Bytes Signatures total : 42593 CSI Fingerprints total : 1001 CSI data size : 35296 Bytes Target categories : 15 Target families : 728 8-9-2005 12:25:31 PM Success Update successfully downloaded and installed. Memory + processor status: ========================== Number of processors : 1 Processor architecture : Intel Pentium IV Memory available:33 % Total physical memory:523808 kb Available physical memory:168248 kb Total page file size:887472 kb Available on page file:540688 kb Total virtual memory:2097024 kb Available virtual memory:2045588 kb OS:Microsoft Windows XP Home Edition Service Pack 2 (Build 2600) Ad-Aware SE Settings =========================== Set : Search for negligible risk entries Set : Search for low-risk threats Set : Safe mode (always request confirmation) Set : Scan active processes Set : Scan registry Set : Deep-scan registry Set : Scan my IE Favorites for banned URLs Set : Scan within archives Set : Scan my Hosts file Extended Ad-Aware SE Settings =========================== Set : Unload recognized processes & modules during scan Set : Obtain command line of scanned processes Set : Scan registry for all users instead of current user only Set : Always try to unload modules before deletion Set : During removal, unload Explorer and IE if necessary Set : Let Windows remove files in use at next reboot Set : Delete quarantined objects after restoring Set : Write-protect system files after repair (Hosts file, etc.) Set : Include basic Ad-Aware settings in log file Set : Include additional Ad-Aware settings in log file Set : Include reference summary in log file Set : Include alternate data stream details in log file Set : Play sound at scan completion if scan locates critical objects 8-9-2005 12:31:41 PM - Scan started. (Custom mode) Listing running processes »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» #:1 [smss.exe] ModuleName : \SystemRoot\System32\smss.exe Command Line : n/a ProcessID : 460 ThreadCreationTime : 8-9-2005 5:21:36 AM BasePriority : Normal #:2 [csrss.exe] ModuleName : \??\C:\WINDOWS\system32\csrss.exe Command Line : C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestTh ProcessID : 528 ThreadCreationTime : 8-9-2005 5:21:38 AM BasePriority : Normal #:3 [winlogon.exe] ModuleName : \??\C:\WINDOWS\system32\winlogon.exe Command Line : winlogon.exe ProcessID : 552 ThreadCreationTime : 8-9-2005 5:21:39 AM BasePriority : High #:4 [services.exe] ModuleName : C:\WINDOWS\system32\services.exe Command Line : C:\WINDOWS\system32\services.exe ProcessID : 596 ThreadCreationTime : 8-9-2005 5:21:39 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Services and Controller app InternalName : services.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : services.exe #:5 [lsass.exe] ModuleName : C:\WINDOWS\system32\lsass.exe Command Line : C:\WINDOWS\system32\lsass.exe ProcessID : 608 ThreadCreationTime : 8-9-2005 5:21:39 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : LSA Shell (Export Version) InternalName : lsass.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : lsass.exe #:6 [svchost.exe] ModuleName : C:\WINDOWS\system32\svchost.exe Command Line : C:\WINDOWS\system32\svchost -k DcomLaunch ProcessID : 768 ThreadCreationTime : 8-9-2005 5:21:39 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:7 [svchost.exe] ModuleName : C:\WINDOWS\system32\svchost.exe Command Line : C:\WINDOWS\system32\svchost -k rpcss ProcessID : 812 ThreadCreationTime : 8-9-2005 5:21:40 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:8 [svchost.exe] ModuleName : C:\WINDOWS\System32\svchost.exe Command Line : C:\WINDOWS\System32\svchost.exe -k netsvcs ProcessID : 876 ThreadCreationTime : 8-9-2005 5:21:40 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:9 [svchost.exe] ModuleName : C:\WINDOWS\System32\svchost.exe Command Line : C:\WINDOWS\System32\svchost.exe -k NetworkService ProcessID : 932 ThreadCreationTime : 8-9-2005 5:21:40 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:10 [svchost.exe] ModuleName : C:\WINDOWS\System32\svchost.exe Command Line : C:\WINDOWS\System32\svchost.exe -k LocalService ProcessID : 1008 ThreadCreationTime : 8-9-2005 5:21:41 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:11 [explorer.exe] ModuleName : C:\WINDOWS\Explorer.EXE Command Line : C:\WINDOWS\Explorer.EXE ProcessID : 1260 ThreadCreationTime : 8-9-2005 5:21:42 AM BasePriority : Normal FileVersion : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 6.00.2900.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Windows Explorer InternalName : explorer LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : EXPLORER.EXE #:12 [ccsetmgr.exe] ModuleName : C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe Command Line : n/a ProcessID : 1308 ThreadCreationTime : 8-9-2005 5:21:42 AM BasePriority : Normal FileVersion : 103.0.5.2 ProductVersion : 103.0.5.2 ProductName : Client and Host Security Platform CompanyName : Symantec Corporation FileDescription : Symantec Settings Manager Service InternalName : ccSetMgr LegalCopyright : Copyright © 2000-2004 Symantec Corporation. All rights reserved. OriginalFilename : ccSetMgr.exe #:13 [sndsrvc.exe] ModuleName : C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe Command Line : n/a ProcessID : 1324 ThreadCreationTime : 8-9-2005 5:21:42 AM BasePriority : Normal FileVersion : 5.5.1.6 ProductVersion : 5.5 ProductName : Symantec Security Drivers CompanyName : Symantec Corporation FileDescription : Network Driver Service InternalName : SndSrvc LegalCopyright : Copyright 2002, 2003, 2004 Symantec Corporation OriginalFilename : SndSrvc.exe #:14 [spbbcsvc.exe] ModuleName : C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe Command Line : n/a ProcessID : 1344 ThreadCreationTime : 8-9-2005 5:21:43 AM BasePriority : Normal FileVersion : 1,0,1,47 ProductVersion : 1,0,1,47 ProductName : SPBBC CompanyName : Symantec Corporation FileDescription : SPBBC Service InternalName : SPBBCSvc LegalCopyright : Copyright © 2004 Symantec Corporation. All rights reserved. OriginalFilename : SPBBCSvc.exe #:15 [ccevtmgr.exe] ModuleName : C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe Command Line : n/a ProcessID : 1388 ThreadCreationTime : 8-9-2005 5:21:43 AM BasePriority : Normal FileVersion : 103.0.5.2 ProductVersion : 103.0.5.2 ProductName : Client and Host Security Platform CompanyName : Symantec Corporation FileDescription : Symantec Event Manager Service InternalName : ccEvtMgr LegalCopyright : Copyright © 2000-2004 Symantec Corporation. All rights reserved. OriginalFilename : ccEvtMgr.exe #:16 [lexbces.exe] ModuleName : C:\WINDOWS\system32\LEXBCES.EXE Command Line : C:\WINDOWS\system32\LEXBCES.EXE ProcessID : 1604 ThreadCreationTime : 8-9-2005 5:21:44 AM BasePriority : Normal FileVersion : 7.2 ProductVersion : 7.2 ProductName : MarkVision for Windows (32 bit) CompanyName : Lexmark International, Inc. FileDescription : LexBce Service InternalName : LexBce Service LegalCopyright : © 1993 - 2001 Lexmark International, Inc. OriginalFilename : LexBceS.exe #:17 [spoolsv.exe] ModuleName : C:\WINDOWS\system32\spoolsv.exe Command Line : C:\WINDOWS\system32\spoolsv.exe ProcessID : 1640 ThreadCreationTime : 8-9-2005 5:21:44 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Spooler SubSystem App InternalName : spoolsv.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : spoolsv.exe #:18 [lexpps.exe] ModuleName : C:\WINDOWS\system32\LEXPPS.EXE Command Line : LEXPPS.EXE ProcessID : 1648 ThreadCreationTime : 8-9-2005 5:21:44 AM BasePriority : Normal FileVersion : 7.2 ProductVersion : 7.2 ProductName : MarkVision for Windows (32 bit) CompanyName : Lexmark International, Inc. FileDescription : LEXPPS.EXE InternalName : LEXPPS LegalCopyright : © 1993 - 2001 Lexmark International, Inc. OriginalFilename : LEXPPS.EXE Comments : MarkVision for Windows '95 New P2P Server (32-bit) #:19 [mainserv.exe] ModuleName : C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe Command Line : "C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe" ProcessID : 1872 ThreadCreationTime : 8-9-2005 5:21:50 AM BasePriority : Normal FileVersion : 1, 5, 0, 0 ProductVersion : 1, 5, 0, 0 ProductName : APC PowerChute Personal Edition CompanyName : American Power Conversion Corporation FileDescription : Battery backup management service InternalName : PowerChute LegalCopyright : Copyright © 2004 OriginalFilename : PowerChute Comments : Battery backup management service #:20 [navapsvc.exe] ModuleName : C:\Program Files\Norton AntiVirus\navapsvc.exe Command Line : n/a ProcessID : 1920 ThreadCreationTime : 8-9-2005 5:21:50 AM BasePriority : Normal FileVersion : 11.0.9.16 ProductVersion : 11.0.9 ProductName : Norton AntiVirus CompanyName : Symantec Corporation FileDescription : Norton AntiVirus Auto-Protect Service InternalName : NAVAPSVC LegalCopyright : Norton AntiVirus 2005 for Windows 98/ME/2000/XP Copyright © 2004 Symantec Corporation. All rights reserved. OriginalFilename : NAVAPSVC.EXE #:21 [npfmntor.exe] ModuleName : C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe Command Line : n/a ProcessID : 1940 ThreadCreationTime : 8-9-2005 5:21:50 AM BasePriority : Normal FileVersion : 11.0.9.16 ProductVersion : 11.0.9 ProductName : Norton AntiVirus CompanyName : Symantec Corporation FileDescription : Norton AntiVirus Firewall Install Monitor InternalName : NPFMonitor LegalCopyright : Norton AntiVirus 2005 for Windows 98/ME/2000/XP Copyright © 2004 Symantec Corporation. All rights reserved. OriginalFilename : NPFMonitor.EXE #:22 [nvsvc32.exe] ModuleName : C:\WINDOWS\System32\nvsvc32.exe Command Line : C:\WINDOWS\System32\nvsvc32.exe ProcessID : 1964 ThreadCreationTime : 8-9-2005 5:21:51 AM BasePriority : Normal FileVersion : 5.13.01.1461 ProductVersion : 5.13.01.1461 ProductName : NVIDIA Driver Helper Service, Version 14.61 CompanyName : NVIDIA Corporation FileDescription : NVIDIA Driver Helper Service, Version 14.61 InternalName : NVSVC LegalCopyright : Copyright © 1998-2001 NVIDIA Corporation OriginalFilename : nvsvc32.exe #:23 [symlcsvc.exe] ModuleName : C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe Command Line : n/a ProcessID : 176 ThreadCreationTime : 8-9-2005 5:21:54 AM BasePriority : Normal FileVersion : 1, 8, 54, 478 ProductVersion : 1, 8, 54, 478 ProductName : Symantec Core Component CompanyName : Symantec Corporation FileDescription : Symantec Core Component InternalName : symlcsvc LegalCopyright : Copyright © 2003 OriginalFilename : symlcsvc.exe #:24 [wdfmgr.exe] ModuleName : C:\WINDOWS\system32\wdfmgr.exe Command Line : C:\WINDOWS\system32\wdfmgr.exe ProcessID : 216 ThreadCreationTime : 8-9-2005 5:21:54 AM BasePriority : Normal FileVersion : 5.2.3790.1230 built by: dnsrv(bld4act) ProductVersion : 5.2.3790.1230 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Windows User Mode Driver Manager InternalName : WdfMgr LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : WdfMgr.exe #:25 [vsmon.exe] ModuleName : C:\WINDOWS\SYSTEM32\ZONELABS\vsmon.exe Command Line : n/a ProcessID : 356 ThreadCreationTime : 8-9-2005 5:21:55 AM BasePriority : Normal FileVersion : 6.0.631.003 ProductVersion : 6.0.631.003 ProductName : TrueVector Service CompanyName : Zone Labs, LLC FileDescription : TrueVector Service InternalName : vsmon LegalCopyright : Copyright © 1998-2005, Zone Labs, LLC OriginalFilename : vsmon.exe #:26 [savscan.exe] ModuleName : C:\Program Files\Norton AntiVirus\SAVScan.exe Command Line : n/a ProcessID : 1556 ThreadCreationTime : 8-9-2005 5:22:03 AM BasePriority : Normal FileVersion : 9.4.2.1 ProductVersion : 9.4 ProductName : AutoProtect CompanyName : Symantec Corporation FileDescription : AutoProtect InternalName : SAVSCAN LegalCopyright : Copyright © 2005 Symantec Corporation OriginalFilename : SAVSCAN.EXE #:27 [qttask.exe] ModuleName : C:\Program Files\QuickTime\qttask.exe Command Line : "C:\Program Files\QuickTime\qttask.exe" -atboottime ProcessID : 2308 ThreadCreationTime : 8-9-2005 5:22:21 AM BasePriority : Normal FileVersion : 6.5.1 ProductVersion : QuickTime 6.5.1 ProductName : QuickTime CompanyName : Apple Computer, Inc. InternalName : QuickTime Task LegalCopyright : © Apple Computer, Inc. 2001-2004 OriginalFilename : QTTask.exe #:28 [manager.exe] ModuleName : C:\Program Files\Audible\Bin\Manager.exe Command Line : "C:\Program Files\Audible\Bin\Manager.exe" /Tray ProcessID : 2316 ThreadCreationTime : 8-9-2005 5:22:21 AM BasePriority : Normal FileVersion : 3, 6, 1, 0 ProductVersion : 3, 6, 1, 0 ProductName : AudibleManager 3.6.1 CompanyName : Audible Inc. FileDescription : AudibleManager Application Executable. InternalName : Manager LegalCopyright : Copyright ® Audible, Inc. 1997-2003 OriginalFilename : Manager.exe Comments : AudibleManager Application. #:29 [lxamsp32.exe] ModuleName : C:\WINDOWS\system32\lxamsp32.exe Command Line : "C:\WINDOWS\system32\lxamsp32.exe" ProcessID : 2324 ThreadCreationTime : 8-9-2005 5:22:21 AM BasePriority : Normal FileVersion : 0, 98, 1, 0 ProductVersion : 0, 98, 1, 0 ProductName : Lexmark shpc32.exe CompanyName : Lexmark International FileDescription : SHPC32 - Port Monitor InternalName : shpc32 LegalCopyright : Copyright © 2001 by Lexmark International OriginalFilename : shpc32.exe #:30 [printray.exe] ModuleName : C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe Command Line : "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe" ProcessID : 2332 ThreadCreationTime : 8-9-2005 5:22:21 AM BasePriority : Normal FileVersion : 1, 0, 0, 7 ProductVersion : 1, 0, 0, 7 ProductName : Lexmark PrinTray CompanyName : Lexmark FileDescription : PrinTray InternalName : PrinTray LegalCopyright : Copyright © 2001 OriginalFilename : PrinTray.exe #:31 [realsched.exe] ModuleName : C:\Program Files\Common Files\Real\Update_OB\realsched.exe Command Line : "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot ProcessID : 2352 ThreadCreationTime : 8-9-2005 5:22:21 AM BasePriority : Normal FileVersion : 0.1.0.3275 ProductVersion : 0.1.0.3275 ProductName : RealPlayer (32-bit) CompanyName : RealNetworks, Inc. FileDescription : RealNetworks Scheduler InternalName : schedapp LegalCopyright : Copyright © RealNetworks, Inc. 1995-2004 LegalTrademarks : RealAudio™ is a trademark of RealNetworks, Inc. OriginalFilename : realsched.exe #:32 [alg.exe] ModuleName : C:\WINDOWS\System32\alg.exe Command Line : C:\WINDOWS\System32\alg.exe ProcessID : 2360 ThreadCreationTime : 8-9-2005 5:22:21 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Application Layer Gateway Service InternalName : ALG.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : ALG.exe #:33 [ccapp.exe] ModuleName : C:\Program Files\Common Files\Symantec Shared\ccApp.exe Command Line : n/a ProcessID : 2376 ThreadCreationTime : 8-9-2005 5:22:22 AM BasePriority : Normal FileVersion : 103.0.5.2 ProductVersion : 103.0.5.2 ProductName : Client and Host Security Platform CompanyName : Symantec Corporation FileDescription : Symantec User Session InternalName : ccApp LegalCopyright : Copyright © 2000-2004 Symantec Corporation. All rights reserved. OriginalFilename : ccApp.exe #:34 [winampa.exe] ModuleName : C:\Program Files\Winamp\winampa.exe Command Line : "C:\Program Files\Winamp\winampa.exe" ProcessID : 2408 ThreadCreationTime : 8-9-2005 5:22:22 AM BasePriority : Normal #:35 [zlclient.exe] ModuleName : C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe Command Line : n/a ProcessID : 2416 ThreadCreationTime : 8-9-2005 5:22:22 AM BasePriority : Normal FileVersion : 6.0.631.003 ProductVersion : 6.0.631.003 ProductName : Zone Labs Client CompanyName : Zone Labs, LLC FileDescription : Zone Labs Client InternalName : zlclient LegalCopyright : Copyright © 1998-2005, Zone Labs, LLC OriginalFilename : zlclient.exe #:36 [msmsgs.exe] ModuleName : C:\Program Files\Messenger\msmsgs.exe Command Line : "C:\Program Files\Messenger\msmsgs.exe" /background ProcessID : 2424 ThreadCreationTime : 8-9-2005 5:22:23 AM BasePriority : Normal FileVersion : 4.7.3001 ProductVersion : Version 4.7.3001 ProductName : Messenger CompanyName : Microsoft Corporation FileDescription : Windows Messenger InternalName : msmsgs LegalCopyright : Copyright © Microsoft Corporation 2004 LegalTrademarks : Microsoft® is a registered trademark of Microsoft Corporation in the U.S. and/or other countries. OriginalFilename : msmsgs.exe #:37 [vaserv.exe] ModuleName : C:\Program Files\Sony\VAIO Action Setup\VAServ.exe Command Line : "C:\Program Files\Sony\VAIO Action Setup\VAServ.exe" ProcessID : 2436 ThreadCreationTime : 8-9-2005 5:22:23 AM BasePriority : Normal #:38 [acbtnmgr_x63.exe] ModuleName : C:\Program Files\LexmarkX63\AcBtnMgr_X63.exe Command Line : "C:\Program Files\LexmarkX63\AcBtnMgr_X63.exe" ProcessID : 2492 ThreadCreationTime : 8-9-2005 5:22:25 AM BasePriority : Normal FileVersion : 1, 0, 0, 1 ProductVersion : 1, 0, 0, 1 ProductName : Jetsoft Development Company AcBtnMgr CompanyName : Jetsoft Development Company FileDescription : AcBtnMgr InternalName : AcBtnMgr LegalCopyright : Copyright © 2000 OriginalFilename : AcBtnMgr.exe Comments : By: Alan S Hong #:39 [acmonitor_x63.exe] ModuleName : C:\Program Files\LexmarkX63\ACMonitor_X63.exe Command Line : "C:\Program Files\LexmarkX63\ACMonitor_X63.exe" ProcessID : 2508 ThreadCreationTime : 8-9-2005 5:22:25 AM BasePriority : Normal #:40 [getright.exe] ModuleName : C:\Program Files\GetRight\getright.exe Command Line : "C:\Program Files\GetRight\getright.exe" ProcessID : 2616 ThreadCreationTime : 8-9-2005 5:22:26 AM BasePriority : Normal FileVersion : 5.2b ProductVersion : 5.2b ProductName : GetRight CompanyName : Headlight Software, Inc. FileDescription : GetRight® www.getright.com InternalName : GETRIGHT LegalCopyright : Copyright © 1997-2004 Headlight Software, Inc. LegalTrademarks : "GetRight" and the GetRight "arrows around a globe" logo are registered trademarks of Headlight Software OriginalFilename : GETRIGHT.EXE Comments : GetRight® was designed and developed by Michael J Burford. #:41 [getright.exe] ModuleName : C:\Program Files\GetRight\getright.exe Command Line : "C:\Program Files\GetRight\getright.exe" ProcessID : 2700 ThreadCreationTime : 8-9-2005 5:22:27 AM BasePriority : Normal FileVersion : 5.2b ProductVersion : 5.2b ProductName : GetRight CompanyName : Headlight Software, Inc. FileDescription : GetRight® www.getright.com InternalName : GETRIGHT LegalCopyright : Copyright © 1997-2004 Headlight Software, Inc. LegalTrademarks : "GetRight" and the GetRight "arrows around a globe" logo are registered trademarks of Headlight Software OriginalFilename : GETRIGHT.EXE Comments : GetRight® was designed and developed by Michael J Burford. #:42 [wincinemamgr.exe] ModuleName : C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe Command Line : "C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe" ProcessID : 2876 ThreadCreationTime : 8-9-2005 5:22:30 AM BasePriority : Normal FileVersion : 1.0 ProductVersion : 1, 0, 0, 1 ProductName : WinCinema Manager for InterVideo WinCinema products FileDescription : WinCinema Manager InternalName : WinCinema Manager LegalCopyright : Copyright © 2000 InterVideo Inc. OriginalFilename : WinCinemaMgr.EXE #:43 [plextool.exe] ModuleName : C:\Program Files\Plextor\PlexTool.exe Command Line : "C:\Program Files\Plextor\PlexTool.exe" Startup ProcessID : 3220 ThreadCreationTime : 8-9-2005 5:22:40 AM BasePriority : Normal FileVersion : 2, 24, 0, 0 ProductVersion : 2, 24, 0, 0 ProductName : PlexTools Professional CompanyName : Plextor SA/NV FileDescription : PlexTools Professional InternalName : PlexTools Professional LegalCopyright : Copyright © 1999-2005 OriginalFilename : PlexTool.EXE #:44 [apcsystray.exe] ModuleName : C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe Command Line : "C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe" ProcessID : 3232 ThreadCreationTime : 8-9-2005 5:22:40 AM BasePriority : Normal FileVersion : 1, 5, 0, 0 ProductVersion : 1, 5, 0, 0 ProductName : APC PowerChute Personal Edition CompanyName : American Power Conversion Corporation FileDescription : PowerChute system tray power icon InternalName : PowerChute LegalCopyright : Copyright © 2004 OriginalFilename : PowerChute Comments : PowerChute system tray power icon #:45 [ad-aware.exe] ModuleName : C:\PROGRA~1\LAVASOFT\AD-AWA~1\AD-AWARE.EXE Command Line : "C:\PROGRA~1\LAVASOFT\AD-AWA~1\AD-AWARE.EXE" +483832 ProcessID : 2672 ThreadCreationTime : 8-9-2005 5:25:12 PM BasePriority : Normal FileVersion : 6.2.0.236 ProductVersion : SE 106 ProductName : Lavasoft Ad-Aware SE CompanyName : Lavasoft Sweden FileDescription : Ad-Aware SE Core application InternalName : Ad-Aware.exe LegalCopyright : Copyright © Lavasoft AB Sweden OriginalFilename : Ad-Aware.exe Comments : All Rights Reserved Memory scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 0 Started registry scan »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Registry Scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 0 Started deep registry scan »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Deep registry scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 0 MRU List Object Recognized! Location: : C:\Documents and Settings\Robert M. Bratcher J\recent Description : list of recently opened documents MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\adobe\acrobat reader\5.0\avgeneral\crecentfiles Description : list of recently used files in adobe reader MRU List Object Recognized! Location: : .DEFAULT\software\ahead\nero wave editor\recent file list Description : list of recently used files in nero wave editor MRU List Object Recognized! Location: : S-1-5-18\software\ahead\nero wave editor\recent file list Description : list of recently used files in nero wave editor MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\direct3d\mostrecentapplication Description : most recent application to use microsoft direct3d MRU List Object Recognized! Location: : software\microsoft\direct3d\mostrecentapplication Description : most recent application to use microsoft direct3d MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\direct3d\mostrecentapplication Description : most recent application to use microsoft direct X MRU List Object Recognized! Location: : software\microsoft\direct3d\mostrecentapplication Description : most recent application to use microsoft direct X MRU List Object Recognized! Location: : software\microsoft\directdraw\mostrecentapplication Description : most recent application to use microsoft directdraw MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\directinput\mostrecentapplication Description : most recent application to use microsoft directinput MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\directinput\mostrecentapplication Description : most recent application to use microsoft directinput MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\internet explorer Description : last download directory used in microsoft internet explorer MRU List Object Recognized! Location: : .DEFAULT\software\microsoft\internet explorer\typedurls Description : list of recently entered addresses in microsoft internet explorer MRU List Object Recognized! Location: : S-1-5-18\software\microsoft\internet explorer\typedurls Description : list of recently entered addresses in microsoft internet explorer MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\internet explorer\typedurls Description : list of recently entered addresses in microsoft internet explorer MRU List Object Recognized! Location: : .DEFAULT\software\microsoft\mediaplayer\player\recentfilelist Description : list of recently used files in microsoft windows media player MRU List Object Recognized! Location: : S-1-5-18\software\microsoft\mediaplayer\player\recentfilelist Description : list of recently used files in microsoft windows media player MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\mediaplayer\player\recentfilelist Description : list of recently used files in microsoft windows media player MRU List Object Recognized! Location: : .DEFAULT\software\microsoft\mediaplayer\player\settings Description : last open directory used in jasc paint shop pro MRU List Object Recognized! Location: : S-1-5-18\software\microsoft\mediaplayer\player\settings Description : last open directory used in jasc paint shop pro MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\mediaplayer\player\settings Description : last open directory used in jasc paint shop pro MRU List Object Recognized! Location: : .DEFAULT\software\microsoft\mediaplayer\preferences Description : last playlist index loaded in microsoft windows media player MRU List Object Recognized! Location: : S-1-5-18\software\microsoft\mediaplayer\preferences Description : last playlist index loaded in microsoft windows media player MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\mediaplayer\preferences Description : last playlist index loaded in microsoft windows media player MRU List Object Recognized! Location: : .DEFAULT\software\microsoft\mediaplayer\preferences Description : last playlist loaded in microsoft windows media player MRU List Object Recognized! Location: : S-1-5-18\software\microsoft\mediaplayer\preferences Description : last playlist loaded in microsoft windows media player MRU List Object Recognized! Location: : S-1-5-19\software\microsoft\mediaplayer\preferences Description : last playlist loaded in microsoft windows media player MRU List Object Recognized! Location: : S-1-5-20\software\microsoft\mediaplayer\preferences Description : last playlist loaded in microsoft windows media player MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1003\software\microsoft\mediaplayer\preferences Description : last playlist loaded in microsoft windows media player MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\mediaplayer\preferences Description : last playlist loaded in microsoft windows media player MRU List Object Recognized! Location: : .DEFAULT\software\microsoft\microsoft management console\recent file list Description : list of recent snap-ins used in the microsoft management console MRU List Object Recognized! Location: : S-1-5-18\software\microsoft\microsoft management console\recent file list Description : list of recent snap-ins used in the microsoft management console MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1003\software\microsoft\microsoft management console\recent file list Description : list of recent snap-ins used in the microsoft management console MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\microsoft management console\recent file list Description : list of recent snap-ins used in the microsoft management console MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\search assistant\acmru Description : list of recent search terms used with the search assistant MRU List Object Recognized! Location: : .DEFAULT\software\microsoft\windows\currentversion\applets\regedit Description : last key accessed using the microsoft registry editor MRU List Object Recognized! Location: : S-1-5-18\software\microsoft\windows\currentversion\applets\regedit Description : last key accessed using the microsoft registry editor MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1003\software\microsoft\windows\currentversion\applets\regedit Description : last key accessed using the microsoft registry editor MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\windows\currentversion\applets\regedit Description : last key accessed using the microsoft registry editor MRU List Object Recognized! Location: : .DEFAULT\software\microsoft\windows\currentversion\applets\wordpad\recent file list Description : list of recent files opened using wordpad MRU List Object Recognized! Location: : S-1-5-18\software\microsoft\windows\currentversion\applets\wordpad\recent file list Description : list of recent files opened using wordpad MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\windows\currentversion\applets\wordpad\recent file list Description : list of recent files opened using wordpad MRU List Object Recognized! Location: : .DEFAULT\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru Description : list of recent programs opened MRU List Object Recognized! Location: : S-1-5-18\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru Description : list of recent programs opened MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1003\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru Description : list of recent programs opened MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru Description : list of recent programs opened MRU List Object Recognized! Location: : .DEFAULT\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru Description : list of recently saved files, stored according to file extension MRU List Object Recognized! Location: : S-1-5-18\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru Description : list of recently saved files, stored according to file extension MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1003\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru Description : list of recently saved files, stored according to file extension MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru Description : list of recently saved files, stored according to file extension MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\windows\currentversion\explorer\recentdocs Description : list of recent documents opened MRU List Object Recognized! Location: : .DEFAULT\software\realnetworks\realplayer\6.0\preferences Description : list of recent skins in realplayer MRU List Object Recognized! Location: : S-1-5-18\software\realnetworks\realplayer\6.0\preferences Description : list of recent skins in realplayer MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\realnetworks\realplayer\6.0\preferences Description : list of recent skins in realplayer MRU List Object Recognized! Location: : .DEFAULT\software\realnetworks\realplayer\6.0\preferences Description : list of recent clips in realplayer MRU List Object Recognized! Location: : S-1-5-18\software\realnetworks\realplayer\6.0\preferences Description : list of recent clips in realplayer MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\realnetworks\realplayer\6.0\preferences Description : list of recent clips in realplayer MRU List Object Recognized! Location: : .DEFAULT\software\realnetworks\realplayer\6.0\preferences Description : last login time in realplayer MRU List Object Recognized! Location: : S-1-5-18\software\realnetworks\realplayer\6.0\preferences Description : last login time in realplayer MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\realnetworks\realplayer\6.0\preferences Description : last login time in realplayer MRU List Object Recognized! Location: : .DEFAULT\software\microsoft\windows media\wmsdk\general Description : windows media sdk MRU List Object Recognized! Location: : S-1-5-18\software\microsoft\windows media\wmsdk\general Description : windows media sdk MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1003\software\microsoft\windows media\wmsdk\general Description : windows media sdk MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\microsoft\windows media\wmsdk\general Description : windows media sdk MRU List Object Recognized! Location: : S-1-5-21-329068152-926492609-725345543-1004\software\winrar\dialogedithistory\extrpath Description : winrar "extract-to" history Started Tracking Cookie scan »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher [removed][2].txt TAC Rating : 3 Category : Data Miner Comment : Hits:6 Value : Cookie:robert m. bratcher [removed]/ Expires : 8-3-2006 8:44:38 PM LastSync : Hits:6 UseCount : 0 Hits : 6 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher [removed][1].txt TAC Rating : 3 Category : Data Miner Comment : Hits:3 Value : Cookie:robert m. bratcher [removed]/ Expires : 9-2-2005 9:10:00 PM LastSync : Hits:3 UseCount : 0 Hits : 3 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher j@atdmt[2].txt TAC Rating : 3 Category : Data Miner Comment : Hits:11 Value : Cookie:robert m. bratcher [removed]/ Expires : 8-4-2010 7:00:00 PM LastSync : Hits:11 UseCount : 0 Hits : 11 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher j@live365[2].txt TAC Rating : 3 Category : Data Miner Comment : Hits:44 Value : Cookie:robert m. bratcher [removed]/ Expires : 7-29-2010 12:56:54 PM LastSync : Hits:44 UseCount : 0 Hits : 44 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher [removed][1].txt TAC Rating : 3 Category : Data Miner Comment : Hits:12 Value : Cookie:robert m. bratcher [removed]/ Expires : 12-31-2009 7:00:00 PM LastSync : Hits:12 UseCount : 0 Hits : 12 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher j@questionmarket[1].txt TAC Rating : 3 Category : Data Miner Comment : Hits:1 Value : Cookie:robert m. bratcher [removed]/ Expires : 9-25-2006 1:31:48 AM LastSync : Hits:1 UseCount : 0 Hits : 1 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher j@bluestreak[2].txt TAC Rating : 3 Category : Data Miner Comment : Hits:2 Value : Cookie:robert m. bratcher [removed]/ Expires : 8-1-2015 5:09:02 PM LastSync : Hits:2 UseCount : 0 Hits : 2 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher j@2o7[2].txt TAC Rating : 3 Category : Data Miner Comment : Hits:20 Value : Cookie:robert m. bratcher [removed]/ Expires : 8-7-2010 11:44:00 PM LastSync : Hits:20 UseCount : 0 Hits : 20 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher [removed][2].txt TAC Rating : 3 Category : Data Miner Comment : Hits:2 Value : Cookie:robert m. bratcher [removed]/ Expires : 5-12-2024 1:07:28 PM LastSync : Hits:2 UseCount : 0 Hits : 2 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher j@tribalfusion[1].txt TAC Rating : 3 Category : Data Miner Comment : Hits:6 Value : Cookie:robert m. bratcher [removed]/ Expires : 12-31-2037 7:00:00 PM LastSync : Hits:6 UseCount : 0 Hits : 6 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher j@maxserving[2].txt TAC Rating : 3 Category : Data Miner Comment : Hits:2 Value : Cookie:robert m. bratcher [removed]/ Expires : 8-2-2015 2:15:26 PM LastSync : Hits:2 UseCount : 0 Hits : 2 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher j@tradedoubler[1].txt TAC Rating : 3 Category : Data Miner Comment : Hits:1 Value : Cookie:robert m. bratcher [removed]/ Expires : 7-30-2025 1:00:54 PM LastSync : Hits:1 UseCount : 0 Hits : 1 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher [removed][2].txt TAC Rating : 3 Category : Data Miner Comment : Hits:3 Value : Cookie:robert m. bratcher [removed]/ Expires : 2-28-2007 7:00:00 PM LastSync : Hits:3 UseCount : 0 Hits : 3 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher j@serving-sys[2].txt TAC Rating : 3 Category : Data Miner Comment : Hits:8 Value : Cookie:robert m. bratcher [removed]/ Expires : 1-1-2038 LastSync : Hits:8 UseCount : 0 Hits : 8 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher j@fastclick[2].txt TAC Rating : 3 Category : Data Miner Comment : Hits:19 Value : Cookie:robert m. bratcher [removed]/ Expires : 8-8-2007 10:06:36 PM LastSync : Hits:19 UseCount : 0 Hits : 19 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher j@real[1].txt TAC Rating : 3 Category : Data Miner Comment : Hits:19 Value : Cookie:robert m. bratcher [removed]/ Expires : 7-31-2035 2:18:38 AM LastSync : Hits:19 UseCount : 0 Hits : 19 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher j@adrevolver[1].txt TAC Rating : 3 Category : Data Miner Comment : Hits:7 Value : Cookie:robert m. bratcher [removed]/ Expires : 8-3-2006 12:41:30 PM LastSync : Hits:7 UseCount : 0 Hits : 7 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher j@trafficmp[1].txt TAC Rating : 3 Category : Data Miner Comment : Hits:7 Value : Cookie:robert m. bratcher [removed]/ Expires : 8-6-2006 1:09:52 PM LastSync : Hits:7 UseCount : 0 Hits : 7 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher [removed][1].txt TAC Rating : 3 Category : Data Miner Comment : Hits:15 Value : Cookie:robert m. bratcher [removed]/ Expires : 8-4-2005 9:06:16 PM LastSync : Hits:15 UseCount : 0 Hits : 15 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher j@centrport[3].txt TAC Rating : 3 Category : Data Miner Comment : Hits:2 Value : Cookie:robert m. bratcher [removed]/ Expires : 12-31-2029 7:00:00 PM LastSync : Hits:2 UseCount : 0 Hits : 2 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher j@mediaplex[2].txt TAC Rating : 3 Category : Data Miner Comment : Hits:2 Value : Cookie:robert m. bratcher [removed]/ Expires : 6-21-2009 7:00:00 PM LastSync : Hits:2 UseCount : 0 Hits : 2 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher j@edge.ru4[2].txt TAC Rating : 3 Category : Data Miner Comment : Hits:2 Value : Cookie:robert m. bratcher [removed]/ Expires : 7-27-2035 8:40:46 AM LastSync : Hits:2 UseCount : 0 Hits : 2 Tracking Cookie Object Recognized! Type : IECache Entry Data : robert m. bratcher [removed][2].txt TAC Rating : 3 Category : Data Miner Comment : Hits:6 Value : Cookie:robert m. bratcher [removed]/ Expi

Ok, not much there either. Please download the trial version of Ewido Security Suite here. Install it, and update the definitions to the newest files. Run the scan and allow it fix what it finds. Please post the log for me to review.

For DVD issues, unless it is related to malware, I don't know that we would be able to help you much here. Afterdawn is a good source for that, as you know.

Here is the report. All it found were a few cookies. As to the DVD burning problems 2 people at Afterdawn solved it by formatting the hard drive, reinstalling Windows then installing the last version of Nero burning Rom that worked. I may have to save 100gb of files, format, then put the smaller hd files over the bigger one & reinstall my programs after activating Windows again. Lots of work but it may be my only answer. ——————————————————— ewido security suite - Scan report ——————————————————— + Created on: 1:52:39 PM, 8/9/2005 + Report-Checksum: 4C49FDA1 + Scan result: C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher [removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher [removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher [removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher [removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher j@burstnet[2].txt -> Spyware.Cookie.Burstnet : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher [removed][1].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher [removed][1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher [removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher [removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher [removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher [removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher [removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher [removed][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher [removed][1].txt -> Spyware.Cookie.Paypopup : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher [removed][1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher [removed][1].txt -> Spyware.Cookie.Burstnet : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher [removed][2].txt -> Spyware.Cookie.Specificclick : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher j@cnn.122.2o7[1].txt -> Spyware.Cookie.2o7 : Cleaned with backup C:\Documents and Settings\Robert M. Bratcher J\Cookies\robert m. bratcher [removed][3].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup ::Report End

Ok, I've got one more scan to run. Please download SilentRunners from here (version 37). Right-click the link and choose save as. Save it to the desktop and then double-click on it. If you get any kind of warning message about scripts, please choose to allow the script to run. When the scan is finished, a message will pop up and a logfile will have been created on the desktop. Please post the entire contents of this logfile for me to see. When the script is done running, you will receive a popup informing you as such. Please wait for the script to run completely.

Ok, I don't see any malware there that would be causing slowness. On the plus side, your machine is pretty clean of malware! Is there anything else I can help you with?

No that solves my request. Thanks very much! Now to fix my slow DVD burning problem today. If I can't get it to work then I'll send a few hours saving data, formatting the HD, then reinstalling Windows & all of my other programs.

Well, I hope it does not come to reinstalling Windows! Below I have included a number of recommendations for how to protect your computer in order to prevent future malware infections. Please take these recommendations seriously; these few simple steps can stave off the vast majority of spyware problems. As happy as we are to help you, for your sake we would rather not have repeat customers.

• On a regular basis, please navigate to http://windowsupdate.microsoft.com and download all the "critical updates" for Windows, including the latest version of Internet Explorer. This can patch many of the security holes through which attackers can gain access to your computer.
• In order to protect yourself against spyware, you should consider installing and running the following free programs:
  • Ad-Aware SE. A tutorial on using Ad-Aware to remove spyware from your computer may be found here. You have this installed currently. Please keep it updated and run it on a regular basis.
  • Spybot-Search & Destroy. A tutorial on using Spybot to remove spyware from your computer may be found here. Please also remember to enable Spybot's "Immunize" and "TeaTimer" features. You have this installed currently. Please keep it updated and run it on a regular basis.
  • SpywareBlaster. A tutorial on using SpywareBlaster to prevent spyware from ever installing on your computer may be found here.
  • SpywareGuard. A tutorial on using SpywareGuard for realtime protection against spyware and hijackers may be found here.
  Keeping these programs up-to-date and running them regularly can prevent a great deal of spyware hassle.
• Please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built-in popup blocker (as an added benefit!) that I have ever seen. If you are interested, Firefox may be downloaded from here.
• Also make sure to run your antivirus software regularly, and to keep it up-to-date.

Please also read Tony Klein's excellent article: How I got Infected in the First Place

Hopefully this should take care of your problems! Good luck.

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.