Jump to content

Build Theme!
  •  
  • Unreplied Topics
  • Downloads
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 93099 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

How do I get rid of CoolWWWeb?

Started by IGotWormz , May 27 2006 11:18 PM

  • This topic is locked This topic is locked
12 replies to this topic

#1 IGotWormz

IGotWormz

    New Member

  • New Member
  • Pip
  • 7 posts

Posted 27 May 2006 - 11:18 PM

I'm not sure I want to resort to something as drastic as Hijack This as I'm very accident-prone as well as lacking in computer skills, and I can see myself deleting a vital program or application by mistake... even with someone giving me advice. At least I don't want to try it just yet. I've been using 'Spy-bot search & Destroy' and 'AdAware', but despite this my computer is still very slow. It's not a virus, since I've run AVG and Norton anti-virus and come up with nothing. When I do a scan on Spybot S&D, I see the files at the bottom being scanned (and God knows why it doesn't delete them, since 99% of it is garbage) and I see one trojan/hijacker/whatever in particular reappear over and over again; CoolWWWeb. Also, whenever I fix something on Spybot S&D, it seems to somehow not get purged and make its way back on my system. What's a great free program besides S&D and AdAware that I can try, that might get rid of malicious programs that the former overlooked? One specializing in removal of worms and trojans would be particularly useful. Thanks for any help.

    Advertisements

Register to Remove

#2 Susan528

Susan528

    SuperMember

  • Authentic Member
  • PipPipPipPipPip
  • 3,194 posts

Posted 28 May 2006 - 03:22 PM

Hello IGotWormz and Welcome to TomCoyote,

Please use this link and download the newest version and post(reply) with a current hijackthis log. You will see Download Hijackthis button in the left margin.

http://www.tomcoyote.org/hjt/
Posted Image

Proud member of ASAP since 2005

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Want to help others? Come join us in the Class Room and learn how.

#3 IGotWormz

IGotWormz

    New Member

  • New Member
  • Pip
  • 7 posts

Posted 29 May 2006 - 07:28 AM

Hi Susan and thanks! :) Is it safe to open up HikjackThis with Winzip (because I can't seem to open it with anything else)? Will a backlog still be created?

#4 Susan528

Susan528

    SuperMember

  • Authentic Member
  • PipPipPipPipPip
  • 3,194 posts

Posted 29 May 2006 - 07:34 AM

Here is another place to download it which you will not have to unzip.

Use this link to get HijackThis.
Save it to your desktop and then double-click to run it.
It will install the program in c:\program files\HijackThis.
Browse to that location with windows explorer, and double click on the HijackThis.exe program to run. Chose the 'Do a system scan and save a logfile'
That will allow you to save the log to the desktop (or some other place) and leave open a notepad file with the HijackThis log in it.
Posted Image

Proud member of ASAP since 2005

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Want to help others? Come join us in the Class Room and learn how.

#5 IGotWormz

IGotWormz

    New Member

  • New Member
  • Pip
  • 7 posts

Posted 30 May 2006 - 08:02 AM

Susan...

Sorry for my late reply. Here is my logfile...

Logfile of HijackThis v1.99.1
Scan saved at 9:56:05 AM, on 5/30/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Google\Google Updater\1.1.489.27609\GoogleUpdater.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Trend Micro\Tmas\Tmas.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBarBHO.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\1.1.489.27609\GoogleUpdater.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\digital imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\digital imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Trend Micro Anti-Spyware.lnk = C:\Program Files\Trend Micro\Tmas\Tmas.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {10B80396-96A7-11D3-B7A6-00A0C94C6AE0} (ParallelGraphics Cortona VRML 1.0 to VRML 2.0 convertor) - http://www.parallelg.../cortvrml10.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.snapfish....fishActivia.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebo...otoUploader.cab
O16 - DPF: {86A88967-7A20-11D2-8EDA-00600818EDB1} (ParallelGraphics Cortona Control) - http://www.parallelg...in/cortvrml.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe


Thanks in advance. :-)

#6 Susan528

Susan528

    SuperMember

  • Authentic Member
  • PipPipPipPipPip
  • 3,194 posts

Posted 30 May 2006 - 08:47 AM

Hello IGotWormz,

I thought maybe you have Windows Me since you could not unzip it which was why I gave you other link. Glad you were able to post hijackthis.

STEP 1.
======
P2P Applications

Clean and Infected File Sharing Programs

Limewire is okay.

STEP 2.
======
SpySweeper

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Clear "Hide file extensions for known file types."
Under the "Hidden files" folder, select "Show hidden files and folders."
Clear "Hide protected operating system files."
Click Apply, and then click OK.


Please do not delete anything unless you are instructed to.


Download the trial version of Spy Sweeper from Here
  • Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it. If you receive alerts from your firewall, allow all activities for Spy Sweeper) You will be prompted to check for updated definitions, please do so.
    (This may take several minutes)
  • Click on Options > Sweep Options and check Sweep all Folders on Selected drives. Check Local Disc C. Under What to Sweep, check every box.
  • Click on Sweep and allow it to fully scan your system.If you are prompted to restart the computer, do so immediately. This is a necessary step to kill the infection!
  • When the sweep has finished, click Remove. Click Select All and then Next
  • From 'Results', select the Session Log tab. Click Save to File and save the log somewhere convenient.
  • Exit Spy Sweeper.
STEP 3.
======
Ewido Trojan Scanner
Please download, install, and update the NEW free version of Ewido trojan scanner:
  • When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
  • When you run ewido for the first time, you may get a warning "Database could not be found!". Click OK. We will fix this in a moment.
  • From the main ewido screen, click on update in the left menu, then click the Start update button.
  • After the update finishes (the status bar at the bottom will display "Update successful")
  • Click on the Scanner button in the left menu, then click on Complete System Scan. This scan can take quite a while to run.
  • If ewido finds anything, it will pop up a notification. Select "clean" and check the boxes "Perform action with all infections" and "Create encrypted backup" before clicking on OK.
  • When the scan finishes, click on "Save Report". This will create a text file. Make sure you know where to find this file again.
Empty Recycle Bin
Reboot

Please post the results from SpySweeper, ewido and a new hijackthis log.

Edited by Susan528, 30 May 2006 - 12:17 PM.

Posted Image

Proud member of ASAP since 2005

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Want to help others? Come join us in the Class Room and learn how.

#7 IGotWormz

IGotWormz

    New Member

  • New Member
  • Pip
  • 7 posts

Posted 30 May 2006 - 12:46 PM

Hey Susan, Uninstalled Limewire... Ran spy-sweeper and Ewido. Here is the transcript for spysweeper... ******** 11:36 AM: | Start of Session, Tuesday, May 30, 2006 | 11:36 AM: Spy Sweeper started 11:36 AM: Sweep initiated using definitions version 686 11:36 AM: Starting Memory Sweep 11:49 AM: Memory Sweep Complete, Elapsed Time: 00:12:32 11:49 AM: Starting Registry Sweep 11:50 AM: Registry Sweep Complete, Elapsed Time:00:01:01 11:50 AM: Starting Cookie Sweep 11:50 AM: Found Spy Cookie: atwola cookie 11:50 AM: andrew@atwola[1].txt (ID = 2255) 11:50 AM: Found Spy Cookie: 2o7.net cookie 11:50 AM: jack@112.2o7[1].txt (ID = 1958) 11:50 AM: jack@2o7[2].txt (ID = 1957) 11:50 AM: Found Spy Cookie: 64.62.232 cookie 11:50 AM: jack@64.62.232[2].txt (ID = 1987) 11:50 AM: Found Spy Cookie: websponsors cookie 11:50 AM: jack@a.websponsors[2].txt (ID = 3665) 11:50 AM: Found Spy Cookie: go.com cookie 11:50 AM: jack@abcnews.go[1].txt (ID = 2729) 11:50 AM: Found Spy Cookie: about cookie 11:50 AM: jack@about[1].txt (ID = 2037) 11:50 AM: jack@actionadventure.about[1].txt (ID = 2038) 11:50 AM: Found Spy Cookie: yieldmanager cookie 11:50 AM: jack@ad.yieldmanager[1].txt (ID = 3751) 11:50 AM: Found Spy Cookie: adecn cookie 11:50 AM: jack@adecn[1].txt (ID = 2063) 11:50 AM: Found Spy Cookie: adknowledge cookie 11:50 AM: jack@adknowledge[1].txt (ID = 2072) 11:50 AM: Found Spy Cookie: adlegend cookie 11:50 AM: jack@adlegend[1].txt (ID = 2074) 11:50 AM: Found Spy Cookie: hbmediapro cookie 11:50 AM: jack@adopt.hbmediapro[2].txt (ID = 2768) 11:50 AM: Found Spy Cookie: specificclick.com cookie 11:50 AM: jack@adopt.specificclick[1].txt (ID = 3400) 11:50 AM: Found Spy Cookie: cc214142 cookie 11:50 AM: jack@ads.cc214142[2].txt (ID = 2367) 11:50 AM: Found Spy Cookie: advertising cookie 11:50 AM: jack@advertising[1].txt (ID = 2175) 11:50 AM: Found Spy Cookie: tacoda cookie 11:50 AM: jack@anat.tacoda[2].txt (ID = 6445) 11:50 AM: jack@animatedtv.about[1].txt (ID = 2038) 11:50 AM: Found Spy Cookie: anm.co.uk cookie 11:50 AM: jack@anm.co[2].txt (ID = 2223) 11:50 AM: jack@ar.atwola[1].txt (ID = 2256) 11:50 AM: Found Spy Cookie: casalemedia cookie 11:50 AM: jack@as.casalemedia[1].txt (ID = 2355) 11:50 AM: Found Spy Cookie: askmen cookie 11:50 AM: jack@askmen[1].txt (ID = 2247) 11:50 AM: Found Spy Cookie: ask cookie 11:50 AM: jack@ask[1].txt (ID = 2245) 11:50 AM: Found Spy Cookie: belnk cookie 11:50 AM: jack@ath.belnk[2].txt (ID = 2293) 11:50 AM: jack@atwola[1].txt (ID = 2255) 11:50 AM: Found Spy Cookie: azjmp cookie 11:50 AM: jack@azjmp[2].txt (ID = 2270) 11:50 AM: Found Spy Cookie: a cookie 11:50 AM: jack@a[1].txt (ID = 2027) 11:50 AM: Found Spy Cookie: paypopup cookie 11:50 AM: jack@banner.paypopup[1].txt (ID = 3120) 11:50 AM: Found Spy Cookie: banner cookie 11:50 AM: jack@banner[1].txt (ID = 2276) 11:50 AM: jack@belnk[2].txt (ID = 2292) 11:50 AM: Found Spy Cookie: burstnet cookie 11:50 AM: jack@burstnet[1].txt (ID = 2336) 11:50 AM: Found Spy Cookie: gostats cookie 11:50 AM: jack@c3.gostats[1].txt (ID = 2748) 11:50 AM: jack@casalemedia[1].txt (ID = 2354) 11:50 AM: Found Spy Cookie: classmates cookie 11:50 AM: jack@classmates[1].txt (ID = 2384) 11:50 AM: jack@cnn.122.2o7[1].txt (ID = 1958) 11:50 AM: Found Spy Cookie: clickzs cookie 11:50 AM: jack@cz4.clickzs[2].txt (ID = 2413) 11:50 AM: jack@cz6.clickzs[2].txt (ID = 2413) 11:50 AM: jack@cz8.clickzs[2].txt (ID = 2413) 11:50 AM: Found Spy Cookie: overture cookie 11:50 AM: jack@data1.perf.overture[1].txt (ID = 3106) 11:50 AM: Found Spy Cookie: did-it cookie 11:50 AM: jack@did-it[1].txt (ID = 2523) 11:50 AM: jack@disney.go[1].txt (ID = 2729) 11:50 AM: jack@dist.belnk[2].txt (ID = 2293) 11:50 AM: jack@entrepreneur.122.2o7[1].txt (ID = 1958) 11:50 AM: Found Spy Cookie: eroticy cookie 11:50 AM: jack@eroticy[1].txt (ID = 2623) 11:50 AM: jack@espn.go[1].txt (ID = 2729) 11:50 AM: Found Spy Cookie: fe.lea.lycos.com cookie 11:50 AM: jack@fe.lea.lycos[2].txt (ID = 2660) 11:50 AM: Found Spy Cookie: wegcash cookie 11:50 AM: jack@free.wegcash[1].txt (ID = 3682) 11:50 AM: jack@french.about[2].txt (ID = 2038) 11:50 AM: Found Spy Cookie: go2net.com cookie 11:50 AM: jack@go2net[1].txt (ID = 2730) 11:50 AM: jack@gojapan.about[1].txt (ID = 2038) 11:50 AM: jack@gostats[2].txt (ID = 2747) 11:50 AM: jack@go[1].txt (ID = 2728) 11:50 AM: jack@go[2].txt (ID = 2728) 11:50 AM: Found Spy Cookie: starware.com cookie 11:50 AM: jack@h.starware[1].txt (ID = 3442) 11:50 AM: Found Spy Cookie: clickandtrack cookie 11:50 AM: jack@hits.clickandtrack[2].txt (ID = 2397) 11:50 AM: jack@honeymoons.about[1].txt (ID = 2038) 11:50 AM: Found Spy Cookie: howstuffworks cookie 11:50 AM: jack@howstuffworks[2].txt (ID = 2805) 11:50 AM: Found Spy Cookie: hypertracker.com cookie 11:50 AM: jack@hypertracker[2].txt (ID = 2817) 11:50 AM: jack@imc2.122.2o7[1].txt (ID = 1958) 11:50 AM: jack@insider.espn.go[2].txt (ID = 2729) 11:50 AM: Found Spy Cookie: kmpads cookie 11:50 AM: jack@kmpads[1].txt (ID = 2909) 11:50 AM: Found Spy Cookie: linkexchange cookie 11:50 AM: jack@linkexchange[1].txt (ID = 2920) 11:50 AM: jack@metacafe.122.2o7[1].txt (ID = 1958) 11:50 AM: Found Spy Cookie: mrskin cookie 11:50 AM: jack@mrskin[2].txt (ID = 3020) 11:50 AM: jack@msnportal.112.2o7[2].txt (ID = 1958) 11:50 AM: Found Spy Cookie: realmedia cookie 11:50 AM: jack@network.realmedia[1].txt (ID = 3236) 11:50 AM: Found Spy Cookie: nextag cookie 11:50 AM: jack@nextag[1].txt (ID = 5014) 11:50 AM: Found Spy Cookie: offeroptimizer cookie 11:50 AM: jack@offeroptimizer[1].txt (ID = 3087) 11:50 AM: jack@partygaming.122.2o7[1].txt (ID = 1958) 11:50 AM: Found Spy Cookie: touchclarity cookie 11:50 AM: jack@partypoker.touchclarity[1].txt (ID = 3567) 11:50 AM: Found Spy Cookie: partypoker cookie 11:50 AM: jack@partypoker[1].txt (ID = 3111) 11:50 AM: Found Spy Cookie: pricegrabber cookie 11:50 AM: jack@pricegrabber[1].txt (ID = 3185) 11:50 AM: jack@proxy.espn.go[1].txt (ID = 2729) 11:50 AM: Found Spy Cookie: questionmarket cookie 11:50 AM: jack@questionmarket[2].txt (ID = 3217) 11:50 AM: jack@radio.about[1].txt (ID = 2038) 11:50 AM: Found Spy Cookie: reunion cookie 11:50 AM: jack@reunion[2].txt (ID = 3255) 11:50 AM: Found Spy Cookie: rn11 cookie 11:50 AM: jack@rn11[2].txt (ID = 3261) 11:50 AM: Found Spy Cookie: adjuggler cookie 11:50 AM: jack@rotator.adjuggler[2].txt (ID = 2071) 11:50 AM: jack@rsi.espn.go[1].txt (ID = 2729) 11:50 AM: jack@science.howstuffworks[1].txt (ID = 2806) 11:50 AM: Found Spy Cookie: web-stat cookie 11:50 AM: jack@server3.web-stat[2].txt (ID = 3649) 11:50 AM: Found Spy Cookie: serving-sys cookie 11:50 AM: jack@serving-sys[1].txt (ID = 3343) 11:50 AM: jack@shakespeare.about[2].txt (ID = 2038) 11:50 AM: jack@sports.espn.go[1].txt (ID = 2729) 11:50 AM: Found Spy Cookie: clicktracks cookie 11:50 AM: jack@stats2.clicktracks[1].txt (ID = 2407) 11:50 AM: jack@tacoda[2].txt (ID = 6444) 11:50 AM: Found Spy Cookie: toplist cookie 11:50 AM: jack@toplist[2].txt (ID = 3557) 11:50 AM: Found Spy Cookie: trafficmp cookie 11:50 AM: jack@trafficmp[1].txt (ID = 3581) 11:50 AM: Found Spy Cookie: trb.com cookie 11:50 AM: jack@trb[1].txt (ID = 3587) 11:51 AM: Found Spy Cookie: ugo cookie 11:51 AM: jack@ugo[1].txt (ID = 3608) 11:51 AM: jack@vip.clickzs[2].txt (ID = 2413) 11:51 AM: jack@vip2.clickzs[2].txt (ID = 2413) 11:51 AM: Found Spy Cookie: webpower cookie 11:51 AM: jack@webpower[2].txt (ID = 3660) 11:51 AM: Found Spy Cookie: burstbeacon cookie 11:51 AM: jack@www.burstbeacon[2].txt (ID = 2335) 11:51 AM: jack@www.classmates[2].txt (ID = 2385) 11:51 AM: jack@www.eroticy[1].txt (ID = 2624) 11:51 AM: jack@www.mrskin[1].txt (ID = 3021) 11:51 AM: Found Spy Cookie: myaffiliateprogram.com cookie 11:51 AM: jack@www.myaffiliateprogram[1].txt (ID = 3032) 11:51 AM: Found Spy Cookie: starpulse cookie 11:51 AM: jack@www.starpulse[2].txt (ID = 3440) 11:51 AM: Found Spy Cookie: xiti cookie 11:51 AM: jack@xiti[1].txt (ID = 3717) 11:51 AM: jack@yieldmanager[1].txt (ID = 3749) 11:51 AM: mom@112.2o7[2].txt (ID = 1958) 11:51 AM: mom@a.websponsors[2].txt (ID = 3665) 11:51 AM: mom@abclocal.go[1].txt (ID = 2729) 11:51 AM: mom@abcnews.go[1].txt (ID = 2729) 11:51 AM: mom@about[1].txt (ID = 2037) 11:51 AM: mom@ad.yieldmanager[2].txt (ID = 3751) 11:51 AM: mom@adknowledge[1].txt (ID = 2072) 11:51 AM: mom@adlegend[2].txt (ID = 2074) 11:51 AM: mom@adopt.specificclick[1].txt (ID = 3400) 11:51 AM: mom@ads.cc214142[1].txt (ID = 2367) 11:51 AM: mom@anat.tacoda[2].txt (ID = 6445) 11:51 AM: mom@ask[1].txt (ID = 2245) 11:51 AM: mom@ath.belnk[2].txt (ID = 2293) 11:51 AM: mom@atwola[2].txt (ID = 2255) 11:51 AM: mom@banner[1].txt (ID = 2276) 11:51 AM: mom@belnk[1].txt (ID = 2292) 11:51 AM: Found Spy Cookie: bizrate cookie 11:51 AM: mom@bizrate[2].txt (ID = 2308) 11:51 AM: mom@burstnet[2].txt (ID = 2336) 11:51 AM: Found Spy Cookie: goclick cookie 11:51 AM: mom@c.goclick[2].txt (ID = 2733) 11:51 AM: mom@casalemedia[1].txt (ID = 2354) 11:51 AM: mom@cbs.112.2o7[1].txt (ID = 1958) 11:51 AM: Found Spy Cookie: ccbill cookie 11:51 AM: mom@ccbill[1].txt (ID = 2369) 11:51 AM: mom@classmates[1].txt (ID = 2384) 11:51 AM: mom@data1.perf.overture[1].txt (ID = 3106) 11:51 AM: mom@data2.perf.overture[1].txt (ID = 3106) 11:51 AM: mom@data3.perf.overture[1].txt (ID = 3106) 11:51 AM: mom@did-it[2].txt (ID = 2523) 11:51 AM: mom@dist.belnk[1].txt (ID = 2293) 11:51 AM: Found Spy Cookie: ru4 cookie 11:51 AM: mom@edge.ru4[1].txt (ID = 3269) 11:51 AM: Found Spy Cookie: falkag cookie 11:51 AM: mom@falkag[2].txt (ID = 2649) 11:51 AM: mom@gonyc.about[1].txt (ID = 2038) 11:51 AM: mom@go[1].txt (ID = 2728) 11:51 AM: mom@harpo.122.2o7[1].txt (ID = 1958) 11:51 AM: mom@healing.about[1].txt (ID = 2038) 11:51 AM: mom@highbeam.122.2o7[1].txt (ID = 1958) 11:51 AM: Found Spy Cookie: ic-live cookie 11:51 AM: mom@ic-live[1].txt (ID = 2821) 11:51 AM: mom@lists.classmates[1].txt (ID = 2385) 11:51 AM: mom@msnportal.112.2o7[1].txt (ID = 1958) 11:51 AM: mom@nextag[1].txt (ID = 5014) 11:51 AM: mom@powellsbooks.122.2o7[2].txt (ID = 1958) 11:51 AM: mom@privateschool.about[1].txt (ID = 2038) 11:51 AM: Found Spy Cookie: pub cookie 11:51 AM: mom@pub[2].txt (ID = 3205) 11:51 AM: mom@questionmarket[2].txt (ID = 3217) 11:51 AM: mom@reunion[1].txt (ID = 3255) 11:51 AM: mom@rotator.adjuggler[1].txt (ID = 2071) 11:51 AM: mom@rsi.abcnews.go[1].txt (ID = 2729) 11:51 AM: Found Spy Cookie: tvguide cookie 11:51 AM: mom@sdc.tvguide[1].txt (ID = 3600) 11:51 AM: Found Spy Cookie: servlet cookie 11:51 AM: mom@servlet[1].txt (ID = 3345) 11:51 AM: Found Spy Cookie: dealtime cookie 11:51 AM: mom@stat.dealtime[2].txt (ID = 2506) 11:51 AM: Found Spy Cookie: statcounter cookie 11:51 AM: mom@statcounter[2].txt (ID = 3447) 11:51 AM: mom@tacoda[2].txt (ID = 6444) 11:51 AM: mom@trafficmp[2].txt (ID = 3581) 11:51 AM: mom@trb[2].txt (ID = 3587) 11:51 AM: Found Spy Cookie: tribalfusion cookie 11:51 AM: mom@tribalfusion[1].txt (ID = 3589) 11:51 AM: mom@tvguide[1].txt (ID = 3599) 11:51 AM: mom@www.burstbeacon[1].txt (ID = 2335) 11:51 AM: Found Spy Cookie: zedo cookie 11:51 AM: mom@zedo[2].txt (ID = 3762) 11:51 AM: dad@112.2o7[2].txt (ID = 1958) 11:51 AM: dad@2o7[2].txt (ID = 1957) 11:51 AM: dad@a.websponsors[2].txt (ID = 3665) 11:51 AM: dad@abcnews.go[2].txt (ID = 2729) 11:51 AM: dad@about[2].txt (ID = 2037) 11:51 AM: dad@ad.yieldmanager[2].txt (ID = 3751) 11:51 AM: dad@adknowledge[2].txt (ID = 2072) 11:51 AM: dad@adopt.specificclick[1].txt (ID = 3400) 11:51 AM: dad@ask[1].txt (ID = 2245) 11:51 AM: dad@atwola[2].txt (ID = 2255) 11:51 AM: dad@banner[1].txt (ID = 2276) 11:51 AM: dad@belnk[1].txt (ID = 2292) 11:51 AM: dad@bizrate[2].txt (ID = 2308) 11:51 AM: dad@burstnet[2].txt (ID = 2336) 11:51 AM: dad@cbs.112.2o7[2].txt (ID = 1958) 11:51 AM: dad@classmates[2].txt (ID = 2384) 11:51 AM: dad@data1.perf.overture[1].txt (ID = 3106) 11:51 AM: dad@data3.perf.overture[2].txt (ID = 3106) 11:51 AM: dad@data4.perf.overture[2].txt (ID = 3106) 11:51 AM: dad@dealtime[1].txt (ID = 2505) 11:51 AM: dad@did-it[2].txt (ID = 2523) 11:51 AM: dad@dist.belnk[2].txt (ID = 2293) 11:51 AM: dad@espn.go[1].txt (ID = 2729) 11:51 AM: Found Spy Cookie: esurance cookie 11:51 AM: dad@esurance[2].txt (ID = 2625) 11:51 AM: dad@go[1].txt (ID = 2728) 11:51 AM: dad@ic-live[1].txt (ID = 2821) 11:51 AM: dad@insider.espn.go[1].txt (ID = 2729) 11:51 AM: dad@microsofteup.112.2o7[1].txt (ID = 1958) 11:51 AM: dad@msnportal.112.2o7[2].txt (ID = 1958) 11:51 AM: dad@nextag[1].txt (ID = 5014) 11:51 AM: Found Spy Cookie: one-time-offer cookie 11:51 AM: dad@one-time-offer[2].txt (ID = 3095) 11:51 AM: dad@pcworld.pricegrabber[1].txt (ID = 3186) 11:51 AM: dad@perf.overture[1].txt (ID = 3106) 11:51 AM: dad@powellsbooks.122.2o7[1].txt (ID = 1958) 11:51 AM: dad@pricegrabber[1].txt (ID = 3185) 11:51 AM: dad@qantasairways.122.2o7[1].txt (ID = 1958) 11:51 AM: dad@questionmarket[1].txt (ID = 3217) 11:51 AM: dad@rotator.adjuggler[1].txt (ID = 2071) 11:51 AM: dad@rsi.abcnews.go[1].txt (ID = 2729) 11:51 AM: dad@rsi.espn.go[1].txt (ID = 2729) 11:51 AM: dad@serving-sys[1].txt (ID = 3343) 11:51 AM: dad@sports-att.espn.go[1].txt (ID = 2729) 11:51 AM: dad@sports.espn.go[2].txt (ID = 2729) 11:51 AM: dad@stat.dealtime[2].txt (ID = 2506) 11:51 AM: Found Spy Cookie: reliablestats cookie 11:51 AM: dad@stats1.reliablestats[2].txt (ID = 3254) 11:51 AM: dad@tacoda[1].txt (ID = 6444) 11:51 AM: dad@toplist[1].txt (ID = 3557) 11:51 AM: dad@www.burstbeacon[1].txt (ID = 2335) 11:51 AM: dad@www.esurance[1].txt (ID = 2626) 11:51 AM: dad@xiti[1].txt (ID = 3717) 11:51 AM: Found Spy Cookie: adserver cookie 11:51 AM: dad@z1.adserver[1].txt (ID = 2142) 11:51 AM: Cookie Sweep Complete, Elapsed Time: 00:00:30 11:51 AM: Starting File Sweep 12:40 PM: File Sweep Complete, Elapsed Time: 00:48:40 12:40 PM: Full Sweep has completed. Elapsed time 01:03:04 12:40 PM: Traces Found: 209 12:44 PM: Removal process initiated 12:44 PM: Quarantining All Traces: 2o7.net cookie 12:44 PM: Quarantining All Traces: 64.62.232 cookie 12:44 PM: Quarantining All Traces: a cookie 12:44 PM: Quarantining All Traces: about cookie 12:44 PM: Quarantining All Traces: adecn cookie 12:44 PM: Quarantining All Traces: adjuggler cookie 12:44 PM: Quarantining All Traces: adknowledge cookie 12:44 PM: Quarantining All Traces: adlegend cookie 12:44 PM: Quarantining All Traces: adserver cookie 12:44 PM: Quarantining All Traces: advertising cookie 12:44 PM: Quarantining All Traces: anm.co.uk cookie 12:44 PM: Quarantining All Traces: ask cookie 12:44 PM: Quarantining All Traces: askmen cookie 12:44 PM: Quarantining All Traces: atwola cookie 12:44 PM: Quarantining All Traces: azjmp cookie 12:44 PM: Quarantining All Traces: banner cookie 12:44 PM: Quarantining All Traces: belnk cookie 12:44 PM: Quarantining All Traces: bizrate cookie 12:44 PM: Quarantining All Traces: burstbeacon cookie 12:44 PM: Quarantining All Traces: burstnet cookie 12:44 PM: Quarantining All Traces: casalemedia cookie 12:44 PM: Quarantining All Traces: cc214142 cookie 12:44 PM: Quarantining All Traces: ccbill cookie 12:44 PM: Quarantining All Traces: classmates cookie 12:44 PM: Quarantining All Traces: clickandtrack cookie 12:44 PM: Quarantining All Traces: clicktracks cookie 12:44 PM: Quarantining All Traces: clickzs cookie 12:44 PM: Quarantining All Traces: dealtime cookie 12:44 PM: Quarantining All Traces: did-it cookie 12:44 PM: Quarantining All Traces: eroticy cookie 12:44 PM: Quarantining All Traces: esurance cookie 12:44 PM: Quarantining All Traces: falkag cookie 12:44 PM: Quarantining All Traces: fe.lea.lycos.com cookie 12:44 PM: Quarantining All Traces: go.com cookie 12:45 PM: Quarantining All Traces: go2net.com cookie 12:45 PM: Quarantining All Traces: goclick cookie 12:45 PM: Quarantining All Traces: gostats cookie 12:45 PM: Quarantining All Traces: hbmediapro cookie 12:45 PM: Quarantining All Traces: howstuffworks cookie 12:45 PM: Quarantining All Traces: hypertracker.com cookie 12:45 PM: Quarantining All Traces: ic-live cookie 12:45 PM: Quarantining All Traces: kmpads cookie 12:45 PM: Quarantining All Traces: linkexchange cookie 12:45 PM: Quarantining All Traces: mrskin cookie 12:45 PM: Quarantining All Traces: myaffiliateprogram.com cookie 12:45 PM: Quarantining All Traces: nextag cookie 12:45 PM: Quarantining All Traces: offeroptimizer cookie 12:45 PM: Quarantining All Traces: one-time-offer cookie 12:45 PM: Quarantining All Traces: overture cookie 12:45 PM: Quarantining All Traces: partypoker cookie 12:45 PM: Quarantining All Traces: paypopup cookie 12:45 PM: Quarantining All Traces: pricegrabber cookie 12:45 PM: Quarantining All Traces: pub cookie 12:45 PM: Quarantining All Traces: questionmarket cookie 12:45 PM: Quarantining All Traces: realmedia cookie 12:45 PM: Quarantining All Traces: reliablestats cookie 12:45 PM: Quarantining All Traces: reunion cookie 12:45 PM: Quarantining All Traces: rn11 cookie 12:45 PM: Quarantining All Traces: ru4 cookie 12:45 PM: Quarantining All Traces: serving-sys cookie 12:45 PM: Quarantining All Traces: servlet cookie 12:45 PM: Quarantining All Traces: specificclick.com cookie 12:45 PM: Quarantining All Traces: starpulse cookie 12:45 PM: Quarantining All Traces: starware.com cookie 12:45 PM: Quarantining All Traces: statcounter cookie 12:45 PM: Quarantining All Traces: tacoda cookie 12:45 PM: Quarantining All Traces: toplist cookie 12:45 PM: Quarantining All Traces: touchclarity cookie 12:45 PM: Quarantining All Traces: trafficmp cookie 12:45 PM: Quarantining All Traces: trb.com cookie 12:45 PM: Quarantining All Traces: tribalfusion cookie 12:45 PM: Quarantining All Traces: tvguide cookie 12:45 PM: Quarantining All Traces: ugo cookie 12:45 PM: Quarantining All Traces: webpower cookie 12:45 PM: Quarantining All Traces: websponsors cookie 12:45 PM: Quarantining All Traces: web-stat cookie 12:45 PM: Quarantining All Traces: wegcash cookie 12:45 PM: Quarantining All Traces: xiti cookie 12:45 PM: Quarantining All Traces: yieldmanager cookie 12:45 PM: Quarantining All Traces: zedo cookie 12:45 PM: Removal process completed. Elapsed time 00:00:32 ******** 11:34 AM: | Start of Session, Tuesday, May 30, 2006 | 11:34 AM: Spy Sweeper started 11:35 AM: Your spyware definitions have been updated. 11:36 AM: | End of Session, Tuesday, May 30, 2006 | End of spy-sweeper log

Edited by IGotWormz, 30 May 2006 - 12:51 PM.

#8 IGotWormz

IGotWormz

    New Member

  • New Member
  • Pip
  • 7 posts

Posted 30 May 2006 - 12:50 PM

Sorry! I think I went over the text limit! Here is my transcript for ewido uninterrupted this time. :-) Here is the session log for ewido --------------------------------------------------------- ewido anti-malware - Scan report --------------------------------------------------------- + Created on: 2:22:09 PM, 5/30/2006 + Report-Checksum: 747CF22B + Scan result: :mozilla.6:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.7:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.8:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.10:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.11:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.18:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup :mozilla.61:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.62:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.63:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.64:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.65:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.66:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.67:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.68:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.69:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.70:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup :mozilla.71:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup :mozilla.72:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.73:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.74:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.75:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.97:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.98:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.99:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.100:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.101:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.106:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.107:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.108:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.109:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.110:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.120:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup :mozilla.121:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup :mozilla.122:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup :mozilla.123:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup :mozilla.124:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup :mozilla.125:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Addynamix : Cleaned with backup :mozilla.136:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup :mozilla.142:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.143:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.159:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.160:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.161:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.162:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.163:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.195:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup :mozilla.198:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup :mozilla.199:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup :mozilla.200:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup :mozilla.201:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup :mozilla.202:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup :mozilla.212:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.213:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.214:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.215:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.216:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.217:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.223:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.224:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.225:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.232:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup :mozilla.233:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.234:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.235:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.236:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.237:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.238:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.239:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.240:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.241:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.242:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.243:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.244:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.245:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.246:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.247:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.255:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.256:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.257:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.258:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.259:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.268:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.270:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup :mozilla.271:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup :mozilla.272:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.273:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.274:C:\Documents and Settings\Andrew\Application Data\Mozilla\Firefox\Profiles\2fefap5o.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.6:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.12:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.13:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.14:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.20:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup :mozilla.21:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup :mozilla.22:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.55:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.68:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.69:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.70:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.71:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.295:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.316:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.373:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup :mozilla.374:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup :mozilla.392:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup :mozilla.400:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.412:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Pro-market : Cleaned with backup :mozilla.413:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Pro-market : Cleaned with backup :mozilla.420:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.421:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup :mozilla.422:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup :mozilla.425:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.426:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.440:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Revenue : Cleaned with backup :mozilla.454:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup :mozilla.476:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.480:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.481:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.482:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.483:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.484:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.514:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup :mozilla.515:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup :mozilla.516:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.517:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.518:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.519:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.520:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.521:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.522:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup :mozilla.523:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup :mozilla.524:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup :mozilla.525:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup :mozilla.538:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.539:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.578:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.579:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.594:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup :mozilla.607:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Realtracker : Cleaned with backup :mozilla.656:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned with backup :mozilla.868:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.869:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.870:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.871:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.872:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.879:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup :mozilla.880:C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\x1qqy6sw.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup C:\Documents and Settings\Dad\Cookies\dad@adopt.euroclick[1].txt -> TrackingCookie.Euroclick : Cleaned with backup C:\Documents and Settings\Dad\Cookies\dad@com[2].txt -> TrackingCookie.Com : Cleaned with backup C:\Documents and Settings\Dad\Cookies\dad@e-2dj6wjny-1iazif.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup C:\Documents and Settings\Dad\Cookies\dad@ivwbox[1].txt -> TrackingCookie.Ivwbox : Cleaned with backup C:\Documents and Settings\Dad\Cookies\dad@stats.adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned with backup :mozilla.6:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.9:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.10:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.11:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.12:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.13:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.14:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup -> : Error during cleaning :mozilla.16:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.25:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.26:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.27:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.28:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.29:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.30:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.31:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup :mozilla.32:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.33:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.34:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.35:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.36:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup :mozilla.48:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup :mozilla.51:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.52:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.54:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.55:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.56:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.57:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.58:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.61:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.99:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.101:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.102:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.103:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.104:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.105:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.125:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.126:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.127:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.132:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.133:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.134:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.136:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.137:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.138:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.146:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup :mozilla.153:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.154:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.155:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.156:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.157:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.158:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.159:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.160:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.161:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.162:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.163:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.164:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.173:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.174:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.175:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.176:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.187:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.188:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.189:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.203:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.204:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.205:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.224:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.232:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup :mozilla.237:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup :mozilla.241:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.242:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.243:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.260:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup :mozilla.278:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.279:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.280:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.289:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup :mozilla.290:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup :mozilla.294:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned with backup :mozilla.300:C:\Documents and Settings\Jack\Application Data\Mozilla\Firefox\Profiles\38cbv2en.default\cookies.txt -> TrackingCookie.Myaffiliateprogram : Cleaned with backup C:\Documents and Settings\Jack\Cookies\jack@adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned with backup C:\Documents and Settings\Jack\Cookies\jack@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Cleaned with backup C:\Documents and Settings\Jack\Cookies\jack@ads.realcastmedia[2].txt -> TrackingCookie.Realcastmedia : Cleaned with backup C:\Documents and Settings\Jack\Cookies\jack@com[1].txt -> TrackingCookie.Com : Cleaned with backup C:\Documents and Settings\Jack\Cookies\jack@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : Cleaned with backup C:\Documents and Settings\Jack\Cookies\jack@e-2dj6wjmiqmd5cbp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup C:\Documents and Settings\Jack\Cookies\jack@ehg-dig.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned with backup C:\Documents and Settings\Jack\Cookies\jack@image.masterstats[1].txt -> TrackingCookie.Masterstats : Cleaned with backup C:\Documents and Settings\Jack\Cookies\jack@komtrack[1].txt -> TrackingCookie.Komtrack : Cleaned with backup C:\Documents and Settings\Jack\Cookies\jack@login.tracking101[2].txt -> TrackingCookie.Tracking101 : Cleaned with backup C:\Documents and Settings\Jack\Cookies\jack@webstat[1].txt -> TrackingCookie.Web-stat : Cleaned with backup :mozilla.27:C:\Documents and Settings\Mom\Application Data\Mozilla\Firefox\Profiles\wakeezne.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.36:C:\Documents and Settings\Mom\Application Data\Mozilla\Firefox\Profiles\wakeezne.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.37:C:\Documents and Settings\Mom\Application Data\Mozilla\Firefox\Profiles\wakeezne.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.38:C:\Documents and Settings\Mom\Application Data\Mozilla\Firefox\Profiles\wakeezne.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.39:C:\Documents and Settings\Mom\Application Data\Mozilla\Firefox\Profiles\wakeezne.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.40:C:\Documents and Settings\Mom\Application Data\Mozilla\Firefox\Profiles\wakeezne.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.41:C:\Documents and Settings\Mom\Application Data\Mozilla\Firefox\Profiles\wakeezne.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.42:C:\Documents and Settings\Mom\Application Data\Mozilla\Firefox\Profiles\wakeezne.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup -> : Error during cleaning ::Report End I'm worried about that "error during cleaning", but it found over 250 infected objects which I cleaned. I'm going to put my hijackthis log in a new reply so I don't run over again.

#9 IGotWormz

IGotWormz

    New Member

  • New Member
  • Pip
  • 7 posts

Posted 30 May 2006 - 12:52 PM

Here is my new hijackthis log...

ogfile of HijackThis v1.99.1
Scan saved at 2:41:38 PM, on 5/30/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\Google\Google Updater\1.1.489.27609\GoogleUpdater.exe
C:\Program Files\Trend Micro\Tmas\Tmas.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBarBHO.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\1.1.489.27609\GoogleUpdater.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\digital imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\digital imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Trend Micro Anti-Spyware.lnk = C:\Program Files\Trend Micro\Tmas\Tmas.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {10B80396-96A7-11D3-B7A6-00A0C94C6AE0} (ParallelGraphics Cortona VRML 1.0 to VRML 2.0 convertor) - http://www.parallelg.../cortvrml10.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.snapfish....fishActivia.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebo...otoUploader.cab
O16 - DPF: {86A88967-7A20-11D2-8EDA-00600818EDB1} (ParallelGraphics Cortona Control) - http://www.parallelg...in/cortvrml.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe



Once again, thanks for your help.

#10 Susan528

Susan528

    SuperMember

  • Authentic Member
  • PipPipPipPipPip
  • 3,194 posts

Posted 30 May 2006 - 01:17 PM

hello IGotWormz,

Sorry about the Limewire. The information had not been updated at the one link I used. I just read recent information on different link that Limewire is clean.

Let's run Kapersky scan and check to see if it finds anything since you received the "error in cleaning".

Now run this online scan using Internet Explorer:
Kaspersky WebScanner from http://www.kaspersky.com/virusscanner

Next Click on Launch Kaspersky Anti-Virus Web Scanner

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then begin downloading the latest definition files:
  • Once the files have been downloaded click on NEXT
  • Now click on Scan Settings
  • In the scan settings make that the following are selected:
  • Scan using the following Anti-Virus database:
  • Standard
  • Scan Options:
  • Scan Archives
  • Scan Mail Bases
  • Click OK
  • Now under select a target to scan:
  • Select My Computer
  • This will program will start and scan your system.
  • The scan will take a while so be patient and let it run.
  • Once the scan is complete it will display if your system has been infected.
  • Now click on the Save as Text button:
  • Save the file to your desktop.

Reply with the Kapersky results and a new hijackthis log please.
Posted Image

Proud member of ASAP since 2005

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Want to help others? Come join us in the Class Room and learn how.

#11 IGotWormz

IGotWormz

    New Member

  • New Member
  • Pip
  • 7 posts

Posted 30 May 2006 - 08:57 PM

Susan,

Followed your directions.

Kapersky didn't turn up anything.


Ran a new hijack session... Here's the current log:


Logfile of HijackThis v1.99.1
Scan saved at 10:52:06 PM, on 5/30/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\Google\Google Updater\1.1.489.27609\GoogleUpdater.exe
C:\Program Files\Trend Micro\Tmas\Tmas.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBarBHO.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\1.1.489.27609\GoogleUpdater.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\digital imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\digital imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Trend Micro Anti-Spyware.lnk = C:\Program Files\Trend Micro\Tmas\Tmas.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O16 - DPF: {10B80396-96A7-11D3-B7A6-00A0C94C6AE0} (ParallelGraphics Cortona VRML 1.0 to VRML 2.0 convertor) - http://www.parallelg.../cortvrml10.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.snapfish....fishActivia.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebo...otoUploader.cab
O16 - DPF: {86A88967-7A20-11D2-8EDA-00600818EDB1} (ParallelGraphics Cortona Control) - http://www.parallelg...in/cortvrml.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

#12 Susan528

Susan528

    SuperMember

  • Authentic Member
  • PipPipPipPipPip
  • 3,194 posts

Posted 31 May 2006 - 02:18 AM

Hello IGotWormZ,

You need to change your userid!-don't think you got WormZ anymore. Your hijackthis log appears to be clean. With Kapersky and ewido logs being clean, I would not worry about the "error in cleaning".

You need to update your java- Sun just released update.
http://www.osnn.net/...?shownews=12890

Sun Microsystems has issued an update to fix stability and security problems with its Java software. It includes all operating systems. It is recommended that you update to the latest version. it's also necessary to remove the old java environments, not just update the new versions, as an attacker can target the old environments when they are still present.


Updating Java:
  • Go to Start > Control Panel double-click on the Software icon > add/remove programs.
  • Search in the list for all previous installed versions of Java. (J2SE Runtime Environment.... )
    It should have next icon next to it: Posted Image
    Select it and click Remove.
  • Then Download and install the newest version from here:https://sdlc6c.sun.c...4E1EA2D176EE3EA
STEP 1.
======
Cleanmgr
To clean temporary files:
  • Go > start > run and type cleanmgr and click OK
  • Scan your system for files to remove.
  • Make sure Temporary Files, Temporary Internet Files and Recycle Bin are the only things checked.
  • Click OK to remove those files.
  • Click Yes to confirm deletion.
STEP 2.
======
DON’T BECOME OVERCONFIDENT WITH ANTIVIRUS APPLICATIONS INSTALLED!!!

http://forum.malware...39eba6ea0b5e8ee

Stay up to date on security patches and be extremely wary of clicking on links and attachments that arrive unbidden in instant messages and e-mail.

"The number one thing the majority of the malicious code we're seeing now does is disable or delete anti-virus and other security software," Dunham said. "In a lot of cases, once the user clicks on that attachment, it's already too late."


Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:
  • Update your AntiVirus Software - It is imperative that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.

  • Test your Firewall - Please test your firewall and make sure it is working properly.
    Test Firewall

  • Visit Microsoft's Update Site Frequently - It is important that you visit Windows Updates regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.

  • Install Spybot - Search and Destroy - Install and download Spybot - Search and Destroy with its TeaTimer option. This will provide realtime spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with program on a regular basis just as you would an antivirus software.
    A tutorial on installing & using this product can be found here:
    Using Spybot - Search & Destroy to remove Spyware , Malware, and Hijackers

  • Install Ad-Aware - Install and download Ad-Aware. ou should also scan your computer with program on a regular basis just as you would an antivirus software in conjunction with Spybot.
    A tutorial on installing & using this product can be found here:
    Using Ad-aware to remove Spyware, Malware, & Hijackers from Your Computer

  • Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.
    A tutorial on installing & using this product can be found here:
    Using SpywareBlaster to protect your computer from Spyware and Malware

  • Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.
  • More info on how to prevent malware you can also find here (By Tony Klein)
    and here: http://wiki.castleco...nt_Re-infection
Follow this list and your potential for being infected again will reduce dramatically.

Thank you for allowing me to assist you.

Susan
Posted Image

Proud member of ASAP since 2005

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Want to help others? Come join us in the Class Room and learn how.

#13 Susan528

Susan528

    SuperMember

  • Authentic Member
  • PipPipPipPipPip
  • 3,194 posts

Posted 05 June 2006 - 07:52 AM

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoy...showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php
Posted Image

Proud member of ASAP since 2005

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Want to help others? Come join us in the Class Room and learn how.

Related Topics

Back to Virus, Spyware & Malware Removal · Next Unread Topic →

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. What the Tech
  2. → Spyware / Malware / Virus Removal
  3. → Virus, Spyware & Malware Removal
  4. Privacy Policy
  5. Terms of Use ·