8 replies to this topic

[jewelrygal]

Hi! See below for today's HiJackThis...I thought it was clean but every day SpyNoMore finds Smitfraud.c. I clean it off and it's back the next day. Please help! I'm running Trojan Hunter, SpyNoMore, Spyware Doctor, Panda Antivirus, Registry Mechanic and have also checked the drive with BitDefender.

Any help would be greatly appreciated. Sharon

Logfile of HijackThis v1.99.1
Scan saved at 7:11:44 PM, on 3/3/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\APVXDWIN.EXE
C:\Program Files\SpyNoMore\SNM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\USB 2.0 Switch\USwitch.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Firewall\PavFires.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavFnSvr.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Pavkre.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavProt.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\pavsrv51.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\AVENGINE.EXE
C:\WINDOWS\SYSTEM32\HPZipm12.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\prevsrv.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PsImSvc.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\WebProxy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\notepad.exe
C:\Temp Install Files\hijack this\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.maceddy.com/
F2 - REG:system.ini: UserInit=C:\WINDOWS\regedit /s C:\pav.reg,C:\WINDOWS\system32\pavdr.exe,C:\WINDOWS\system32\userinit.exe,
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: Browser protection - {FB9FFB4B-9680-4256-8178-5ECDB2C19B23} - C:\PROGRA~1\SPYNOM~1\SNMIEG~1.DLL
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SNM] C:\Program Files\SpyNoMore\SNM.exe /startup
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: USB 2.0 Switch.lnk = ?
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitd...can8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1121181001609
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1136251202000
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Firewall\PavFires.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavFnSvr.exe
O23 - Service: Panda Pavkre (Pavkre) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Pavkre.exe
O23 - Service: Panda PavProt (PavProt) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavProt.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\pavsrv51.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\SYSTEM32\HPZipm12.exe
O23 - Service: Panda Preventium+ Service (PREVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\prevsrv.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PsImSvc.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

[little eagle]

Download Ewido Security Suite it is a trial version of the program.

• Install ewido security suite
• Launch ewido, there should be an icon on your desktop double-click it.
• The program will now go to the main screen

You will need to update ewido to the latest definition files.

• On the left hand side of the main screen click update
• Then click on Start Update

The update will start and a progress bar will show the updates being installed.
If you are having problems with the updater, you can use this link to manually update Ewido.
Ewido manual updates

Once the updates are installed do the following:

• Click on scanner
• Click on Complete System Scan and the scan will begin.
• During some scans with ewido it is finding cases of false positives.
• You will need to step through the process of cleaning files one-by-one.
• If ewido detects a file you KNOW to be legitimate, select none as the action.
• DO NOT select "Perform action on all infections"
• If you are unsure of any entry found select none for now.

Once the scan has completed, there will be a button located on the bottom of the screen named Save report
Click Save report.
Save the report .txt file to your desktop.
Now close ewido security suite and post the results here.
With a new hijackthis log.

[jewelrygal]

---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 9:49:15 AM, 3/6/2006
+ Report-Checksum: 3A2ED007

+ Scan result:

:mozilla.78:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-1.txt -> TrackingCookie.Googleadservices : Ignored
HKLM\SOFTWARE\Classes\Interface\{39C78B50-7E98-4AA0-B007-D83114EA6E0F} -> Adware.Generic : Cleaned with backup
HKU\S-1-5-21-1659004503-113007714-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01EB5130-FC0C-4D75-B9CE-4801B1B854F5} -> Adware.Begin2Search : Cleaned with backup
HKU\S-1-5-21-1659004503-113007714-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{39C78B50-7E98-4AA0-B007-D83114EA6E0F} -> Adware.Generic : Cleaned with backup
:mozilla.145:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-1.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.146:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-1.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.147:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-1.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.148:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-1.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.329:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-1.txt -> TrackingCookie.Masterstats : Cleaned with backup
:mozilla.333:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-1.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.334:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-1.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.335:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-1.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.336:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-1.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.99:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-2.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.100:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-2.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.101:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-2.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.107:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-2.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.182:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-2.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.223:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-2.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.224:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-2.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.225:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-2.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.226:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-2.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.319:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-2.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.439:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-2.txt -> TrackingCookie.Masterstats : Cleaned with backup
:mozilla.36:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-3.txt -> TrackingCookie.Popuptraffic : Cleaned with backup
:mozilla.37:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-3.txt -> TrackingCookie.Popuptraffic : Cleaned with backup
:mozilla.156:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-3.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.157:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-3.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.158:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-3.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.164:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-3.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.228:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-3.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.262:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-3.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.263:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-3.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.264:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-3.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.265:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-3.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.358:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-3.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.473:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-3.txt -> TrackingCookie.Masterstats : Cleaned with backup
:mozilla.72:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.73:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.74:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.75:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.76:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.121:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.173:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.175:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.176:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.200:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.340:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.361:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.362:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.363:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.364:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.365:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.366:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.367:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.368:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.407:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.415:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.416:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.431:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.432:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.470:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.476:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.533:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.534:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.536:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.587:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.640:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.724:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-4.txt -> TrackingCookie.Masterstats : Cleaned with backup
:mozilla.28:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.29:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.196:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.251:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.252:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.253:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.268:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.319:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.321:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.322:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.331:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.388:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.405:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.406:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.407:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.408:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.409:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.410:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.411:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.412:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.449:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.454:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.455:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.464:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.465:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.493:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.499:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.552:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.553:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.555:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.605:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.732:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-5.txt -> TrackingCookie.Masterstats : Cleaned with backup
:mozilla.10:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.11:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.73:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.99:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.175:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.176:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.336:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.359:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.360:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.369:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.419:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.420:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.421:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.425:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.453:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.470:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.471:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.472:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.473:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.474:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.475:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.476:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.477:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.509:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.514:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.515:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.524:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.525:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.551:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.557:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.600:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.602:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.649:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.762:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-6.txt -> TrackingCookie.Masterstats : Cleaned with backup
:mozilla.234:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.235:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.236:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.237:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.238:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.298:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.299:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.300:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.330:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.331:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.367:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.368:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.369:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.370:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.388:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.409:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.410:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.482:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.499:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.546:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.547:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.548:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.552:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.576:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.583:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.584:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.585:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.586:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.601:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.611:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.612:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.626:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.666:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.668:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.713:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.816:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies-7.txt -> TrackingCookie.Masterstats : Cleaned with backup
:mozilla.6:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.12:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.15:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.33:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.80:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.81:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.82:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.83:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.84:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.85:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.86:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.87:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.88:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.89:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.90:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.91:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.92:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.93:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.94:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.95:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.96:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.97:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.100:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.101:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.102:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.103:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.104:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.145:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Revenue : Cleaned with backup
:mozilla.159:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.160:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.161:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.162:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.163:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.166:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.167:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.203:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.223:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.226:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.227:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.262:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.263:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.264:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.265:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.266:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.267:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.268:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.269:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.270:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.328:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.329:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.419:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.515:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.518:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.670:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.671:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.672:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.673:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.674:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.675:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.676:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.677:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.678:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.679:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.680:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.681:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.682:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.683:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.684:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.897:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned with backup
C:\Documents and Settings\user\Cookies\user@2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\user\Cookies\user@a-1shz2prbmdj6wvny-1sez2pra2dj6wjk4cjazsapw-1dj6x9ny-1seq-2-2.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\user\Cookies\user@adopt.specificclick[2].txt -> TrackingCookie.Specificclick : Cleaned with backup
C:\Documents and Settings\user\Cookies\user@ads.addynamix[1].txt -> TrackingCookie.Addynamix : Cleaned with backup
C:\Documents and Settings\user\Cookies\user@centrport[1].txt -> TrackingCookie.Centrport : Cleaned with backup
C:\Documents and Settings\user\Cookies\user@cnn.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\user\Cookies\user@e-2dj6wjk4chajmep.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\user\Cookies\user@e-2dj6wjk4kidzkgo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\user\Cookies\user@e-2dj6wjnyekc5aep.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\user\Cookies\user@image.masterstats[1].txt -> TrackingCookie.Masterstats : Cleaned with backup
C:\Documents and Settings\user\Cookies\user@imgserv.adbutler[1].txt -> TrackingCookie.Adbutler : Cleaned with backup
C:\Documents and Settings\user\Cookies\user@server.iad.liveperson[1].txt -> TrackingCookie.Liveperson : Cleaned with backup
C:\Documents and Settings\user\Cookies\user@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned with backup
C:\Documents and Settings\user\Local Settings\Temp\adwsetup_upd.exe -> Dropper.Agent.abb : Cleaned with backup
C:\Documents and Settings\user\Local Settings\Temp\New10.tmp\upgrade.cab/upgrade.exe -> Adware.NewDotNet : Cleaned with backup
C:\Documents and Settings\user\Local Settings\Temp\New10.tmp\upgrade.exe -> Adware.NewDotNet : Cleaned with backup
C:\Documents and Settings\user\Local Settings\Temp\New10.tmp\upg_dll.dll -> Adware.NewDotNet : Cleaned with backup
C:\Program Files\SpyNoMore\RollBack\user2o71.zip/user@2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Program Files\SpyNoMore\RollBack\user2o710.zip/user@2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Program Files\SpyNoMore\RollBack\user2o72.zip/user@2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Program Files\SpyNoMore\RollBack\user2o720.zip/user@2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Program Files\SpyNoMore\RollBack\usercentrport1.zip/user@centrport[1].txt -> TrackingCookie.Centrport : Cleaned with backup
C:\Program Files\SpyNoMore\RollBack\usercentrport10.zip/user@centrport[1].txt -> TrackingCookie.Centrport : Cleaned with backup
C:\Program Files\SpyNoMore\RollBack\usercentrport11.zip/user@centrport[1].txt -> TrackingCookie.Centrport : Cleaned with backup
C:\Program Files\SpyNoMore\RollBack\usercentrport12.zip/user@centrport[1].txt -> TrackingCookie.Centrport : Cleaned with backup
C:\WINDOWS\system32\hpsw.exe -> Adware.Suggestor : Cleaned with backup
C:\WINDOWS\system32\nsl44.dll -> Adware.EZula : Cleaned with backup
C:\WINDOWS\system32\rpdsregn.exe -> Adware.ZenoSearch : Cleaned with backup
C:\WINDOWS\system32\wgse.exe -> Trojan.Runner.h : Cleaned with backup
C:\WINDOWS\unin101.exe -> Trojan.VB.tg : Cleaned with backup
C:\WINDOWS\uni_eh.exe -> Trojan.VB.tg : Cleaned with backup


::Report End

Logfile of HijackThis v1.99.1
Scan saved at 9:50:49 AM, on 3/6/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\APVXDWIN.EXE
C:\Program Files\SpyNoMore\SNM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\USB 2.0 Switch\USwitch.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Firewall\PavFires.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavFnSvr.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Pavkre.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavProt.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\pavsrv51.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\AVENGINE.EXE
C:\WINDOWS\SYSTEM32\HPZipm12.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\prevsrv.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PsImSvc.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\WebProxy.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Temp Install Files\hijack this\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.maceddy.com/
F2 - REG:system.ini: UserInit=C:\WINDOWS\regedit /s C:\pav.reg,C:\WINDOWS\system32\pavdr.exe,C:\WINDOWS\system32\userinit.exe,
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: Browser protection - {FB9FFB4B-9680-4256-8178-5ECDB2C19B23} - C:\PROGRA~1\SPYNOM~1\SNMIEG~1.DLL
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SNM] C:\Program Files\SpyNoMore\SNM.exe /startup
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: USB 2.0 Switch.lnk = ?
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitd...can8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1121181001609
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1136251202000
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Firewall\PavFires.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavFnSvr.exe
O23 - Service: Panda Pavkre (Pavkre) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Pavkre.exe
O23 - Service: Panda PavProt (PavProt) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavProt.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\pavsrv51.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\SYSTEM32\HPZipm12.exe
O23 - Service: Panda Preventium+ Service (PREVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\prevsrv.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PsImSvc.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

PS: Thank you so much for helping me with this!

[little eagle]

Close all programs leaving only HijackThis running. Place a check against each of the following,
F2 - REG:system.ini: UserInit=C:\WINDOWS\regedit /s C:\pav.reg,C:\WINDOWS\system32\pavdr.exe,C:\WINDOWS\system32\userinit.exe,

Click on Fix Checked when finished.


I don't think SpyNoMore if any good is worth the money. If you have not paid for it.
I would think that Spybot would be a better choice and it is free.

[jewelrygal]

I did what you said. Thank you so much. Unfortunately, I did pay for SpyNoMore and thought it was working well till this happened. I will take your advice with Spybot and keep it running. Here is the new HijackThis printout:

Logfile of HijackThis v1.99.1
Scan saved at 10:29:23 AM, on 3/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\APVXDWIN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\USB 2.0 Switch\USwitch.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Firewall\PavFires.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavFnSvr.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Pavkre.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavProt.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\pavsrv51.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\AVENGINE.EXE
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\SYSTEM32\HPZipm12.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\prevsrv.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PsImSvc.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\WebProxy.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\SpyNoMore\SNM.exe
C:\Temp Install Files\hijack this\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.maceddy.com/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: Browser protection - {FB9FFB4B-9680-4256-8178-5ECDB2C19B23} - C:\PROGRA~1\SPYNOM~1\SNMIEG~1.DLL
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SNM] C:\Program Files\SpyNoMore\SNM.exe /startup
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: USB 2.0 Switch.lnk = ?
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitd...can8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1121181001609
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1136251202000
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Firewall\PavFires.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavFnSvr.exe
O23 - Service: Panda Pavkre (Pavkre) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Pavkre.exe
O23 - Service: Panda PavProt (PavProt) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavProt.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\pavsrv51.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\SYSTEM32\HPZipm12.exe
O23 - Service: Panda Preventium+ Service (PREVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\prevsrv.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PsImSvc.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

[little eagle]

Looks clean are you having anymore trouble.

[jewelrygal]

Not sure, it's still running a little slow and yesterday one of the scans found a "exploit-trojan" but I deleted it without thinking, sorry, don't remember what the name of it was.

Mid yesterday, the computer was "churning" as if the hard drive was doing something, the red light was blinking. I wasn't even touching the computer. so, don't know... that's why I ran all the virus and malware programs again. Ewida seems to do the best, by the way.
:
Ran Ewido and other programs run this AM and nothing new showed up.

I did another HijackThis report:

Logfile of HijackThis v1.99.1
Scan saved at 1:50:11 PM, on 3/21/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\APVXDWIN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\USB 2.0 Switch\USwitch.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Firewall\PavFires.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavFnSvr.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Pavkre.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavProt.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\pavsrv51.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\AVENGINE.EXE
C:\WINDOWS\SYSTEM32\HPZipm12.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\prevsrv.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PsImSvc.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\WebProxy.exe
C:\Program Files\SpyNoMore\SNM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\notepad.exe
C:\Temp Install Files\hijack this\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.maceddy.com/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: Browser protection - {FB9FFB4B-9680-4256-8178-5ECDB2C19B23} - C:\PROGRA~1\SPYNOM~1\SNMIEG~1.DLL
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SNM] C:\Program Files\SpyNoMore\SNM.exe /startup
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: USB 2.0 Switch.lnk = ?
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitd...can8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1121181001609
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1136251202000
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Firewall\PavFires.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavFnSvr.exe
O23 - Service: Panda Pavkre (Pavkre) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\Pavkre.exe
O23 - Service: Panda PavProt (PavProt) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PavProt.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\pavsrv51.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\SYSTEM32\HPZipm12.exe
O23 - Service: Panda Preventium+ Service (PREVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\prevsrv.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - C:\Program Files\Panda Software\Panda Titanium Antivirus 2005\PsImSvc.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

Ewido findings after latest scan (looks like just cookies):

---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 2:14:29 PM, 3/21/2006
+ Report-Checksum: 5DC1BA01

+ Scan result:

:mozilla.10:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.38:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.39:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.40:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.41:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.42:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.43:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.44:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.45:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.46:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.47:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.48:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.49:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.50:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.51:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.52:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.53:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.54:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.100:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.101:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.102:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.103:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.104:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.119:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.120:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.121:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.122:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.141:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.142:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.143:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.144:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.145:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.168:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.169:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.170:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.171:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.172:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.173:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.175:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.176:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.177:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.179:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.181:C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\5k1qxoqh.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
C:\Documents and Settings\user\Cookies\user@2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\user\Cookies\user@centrport[1].txt -> TrackingCookie.Centrport : Cleaned with backup


::Report End

Thank you again for your help.

[little eagle]

the computer was "churning" as if the hard drive was doing something

Try removing spynomore.

[little eagle]

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoy...showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php