What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Making Sure My System Is Clean

3 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1 last edited
This is my log.
Thank you for reviewing it.
Note: I am concerned about сhkntfs.exe…It keeps asking for Internet access.

Logfile of HijackThis v1.99.1
Scan saved at 1:04:04 PM, on 6/23/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\CTHELPER.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE
C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\HP Software Update\HPWuSchd.exe
C:\WINDOWS\system32\7fde97b6.exe
C:\Program Files\Trend Micro\Internet Security 2006\pccguide.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\WINDOWS\RACLE~1\iexplore.exe
C:\Program Files\Spyware Doctor\swdoctor.exe
C:\PROGRA~1\YSTEM~1\HKNTFS~1.EXE
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\PcCtlCom.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\tmproxy.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\TmPfw.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\DOCUME~1\ENYINN~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://cnn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://cnn.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Trend Micro Antifraud Toolbar - {06647158-359E-4D10-A8DE-E6145DA90BE9} - C:\PROGRA~1\TRENDM~1\INTERN~2\PccIeBar.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Trend Micro Antifraud Toolbar - {871F91FD-3A92-4988-A842-16AB2CFF5AF1} - C:\PROGRA~1\TRENDM~1\INTERN~2\PccIeBar.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE"
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe" /r
O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [7fde97b6.exe] C:\WINDOWS\system32\7fde97b6.exe
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 2006\pccguide.exe"
O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Uaol] "C:\WINDOWS\RACLE~1\iexplore.exe" -vt yax
O4 - HKCU\..\Run: [7fde97b6.exe] C:\Documents and Settings\Enyinnia Family\Local Settings\Application Data\7fde97b6.exe
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [Bbfevfvd] C:\PROGRA~1\YSTEM~1\HKNTFS~1.EXE
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\mshta.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~2\PcCtlCom.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~2\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~2\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~2\tmproxy.exe
Post #2
Welcome to the forum :wavey:

You have several unwanted items showing in your log.

Let's go this route:

Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»
This program is for XP and Windows 2000 only

Don't run it yet.

Please download, install, and update the NEW free version of Ewido trojan scanner:
  • When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
  • When you run ewido for the first time, you may get a warning "Database could not be found!". Click OK. We will fix this in a moment.
  • From the main ewido screen, click on update in the left menu, then click the Start update button.
  • After the update finishes (the status bar at the bottom will display "Update successful")
  • Close Ewido.
  • Boot in "safe" mode
  • Double-click ATF-Cleaner.exe to run the program. Under Main choose: Select All. Click the Empty Selected button. Close the program.
  • Run Ewido. Click on the Scanner button in the left menu, then click on Complete System Scan. This scan can take quite a while to run.
  • If ewido finds anything, it will pop up a notification. Select "clean" and check the boxes "Perform action with all infections" and "Create encrypted backup" before clicking on OK.
  • When the scan finishes, click on "Save Report". This will create a text file. Make sure you know where to find this file again.
Boot in normal mode.

Please post the results from Ewido and a new HijackThis! log.
Post #3 last edited
Alright, here is the Ewido report


———————————————————
ewido anti-spyware - Scan Report
———————————————————

+ Created at: 8:10:32 PM 6/24/2006

+ Scan result:



C:\drivers\JJ\JJ\WINDOWS\TEMP\bi.cab/bi.dll -> Adware.BiSpy : No action taken.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\ins -> Adware.WebRebates : No action taken.
C:\WINDOWS\Οracle\iexplore.exe -> Downloader.PurityScan.cr : No action taken.
C:\Program Files\DIGStream\digstream.exe -> Not-A-Virus.Downloader.Win32.DigStream : No action taken.
:mozilla.132:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.6:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.7:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.8:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.9:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.247realmedia : No action taken.
:mozilla.10:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.10:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.11:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.126:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.12:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.12:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.13:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.144:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.14:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.14:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.155:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.159:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.15:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.15:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.16:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.178:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.17:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.18:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.197:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.19:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.20:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.21:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.226:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.22:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.23:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.24:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.25:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.26:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.27:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.28:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.29:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.30:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.31:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.32:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.33:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.34:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.35:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.36:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.37:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.38:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.39:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.40:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.41:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.42:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.43:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.44:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.45:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.46:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.47:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.48:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.49:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.50:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.51:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.52:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.53:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.54:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.55:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.56:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.57:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.58:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.59:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.77:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Addynamix : No action taken.
:mozilla.78:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Addynamix : No action taken.
:mozilla.79:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Addynamix : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@addynamix[1].txt.bak -> TrackingCookie.Addynamix : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Addynamix : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Addynamix : No action taken.
:mozilla.103:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Adjuggler : No action taken.
:mozilla.710:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Adjuggler : No action taken.
:mozilla.134:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Adorigin : No action taken.
:mozilla.135:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Adorigin : No action taken.
:mozilla.136:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Adorigin : No action taken.
:mozilla.137:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Adorigin : No action taken.
:mozilla.71:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Adorigin : No action taken.
:mozilla.72:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Adorigin : No action taken.
:mozilla.73:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Adorigin : No action taken.
:mozilla.74:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Adorigin : No action taken.
:mozilla.75:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Adorigin : No action taken.
:mozilla.215:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.28:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.29:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.696:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.697:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.698:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.699:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.700:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.76:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.617:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Adserver : No action taken.
:mozilla.618:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Adserver : No action taken.
:mozilla.619:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Adserver : No action taken.
:mozilla.620:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Adserver : No action taken.
:mozilla.621:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Adserver : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Adserver : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Adserver : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@adtech[2].txt.bak -> TrackingCookie.Adtech : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@advertising[1].txt.bak -> TrackingCookie.Advertising : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@advertising[2].txt.bak -> TrackingCookie.Advertising : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Advertising : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Advertising : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@atdmt[1].txt.bak -> TrackingCookie.Atdmt : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@atdmt[2].txt.bak -> TrackingCookie.Atdmt : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@bfast[1].txt.bak -> TrackingCookie.Bfast : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@bfast[2].txt.bak -> TrackingCookie.Bfast : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@bluestreak[1].txt.bak -> TrackingCookie.Bluestreak : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@bluestreak[2].txt.bak -> TrackingCookie.Bluestreak : No action taken.
:mozilla.658:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Bridgetrack : No action taken.
:mozilla.659:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Bridgetrack : No action taken.
:mozilla.660:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Bridgetrack : No action taken.
:mozilla.745:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Burstbeacon : No action taken.
:mozilla.133:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.746:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.145:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Centrport : No action taken.
:mozilla.146:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Centrport : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@centrport[1].txt.bak -> TrackingCookie.Centrport : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@centrport[2].txt.bak -> TrackingCookie.Centrport : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@clickagents[1].txt.bak -> TrackingCookie.Clickagents : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@clickagents[2].txt.bak -> TrackingCookie.Clickagents : No action taken.
:mozilla.150:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Clickbank : No action taken.
:mozilla.164:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.165:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.49:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.51:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Com : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@commission-junction[1].txt.bak -> TrackingCookie.Commission-junction : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Coremetrics : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Coremetrics : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Coremetrics : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Coremetrics : No action taken.
:mozilla.204:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Cqcounter : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@doubleclick[1].txt.bak -> TrackingCookie.Doubleclick : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@doubleclick[2].txt.bak -> TrackingCookie.Doubleclick : No action taken.
:mozilla.154:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.155:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.156:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.157:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.186:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.187:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.188:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.189:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.190:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.191:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.192:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.100:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.101:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.102:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.103:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.104:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.105:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.106:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.627:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.628:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.64:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Falkag : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@fastclick[1].txt.bak -> TrackingCookie.Fastclick : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@fastclick[2].txt.bak -> TrackingCookie.Fastclick : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@gator[1].txt.bak -> TrackingCookie.Gator : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@gator[2].txt.bak -> TrackingCookie.Gator : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@hitbox[2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitbox : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitslink : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Hitslink : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Hitslink : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@linksynergy[1].txt.bak -> TrackingCookie.Linksynergy : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@linksynergy[2].txt.bak -> TrackingCookie.Linksynergy : No action taken.
:mozilla.711:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.712:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.713:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@mediaplex[1].txt.bak -> TrackingCookie.Mediaplex : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@mediaplex[2].txt.bak -> TrackingCookie.Mediaplex : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@offshoreclicks[1].txt.bak -> TrackingCookie.Offshoreclicks : No action taken.
:mozilla.437:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.438:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.43:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.447:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.7:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.37:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.82:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.83:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.84:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.85:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@qksrv[1].txt.bak -> TrackingCookie.Qksrv : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@qksrv[2].txt.bak -> TrackingCookie.Qksrv : No action taken.
:mozilla.455:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.456:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.724:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Realtracker : No action taken.
:mozilla.725:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Realtracker : No action taken.
:mozilla.478:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Revenue : No action taken.
:mozilla.201:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.202:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.203:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.204:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.205:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.206:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.74:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.495:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.496:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.497:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.498:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.499:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.654:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@sexlist[1].txt.bak -> TrackingCookie.Sexlist : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@sexlist[2].txt.bak -> TrackingCookie.Sexlist : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@sextracker[1].txt.bak -> TrackingCookie.Sextracker : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@sextracker[2].txt.bak -> TrackingCookie.Sextracker : No action taken.
:mozilla.68:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Specificclick : No action taken.
:mozilla.69:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Specificclick : No action taken.
:mozilla.70:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Specificclick : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Specificpop : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Specificpop : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@specificpop[1].txt.bak -> TrackingCookie.Specificpop : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@specificpop[2].txt.bak -> TrackingCookie.Specificpop : No action taken.
:mozilla.519:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.520:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.521:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.522:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.523:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.524:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.94:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.95:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.20:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.532:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.533:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Targetnet : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@targetnet[1].txt.bak -> TrackingCookie.Targetnet : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@targetnet[2].txt.bak -> TrackingCookie.Targetnet : No action taken.
:mozilla.543:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.544:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.545:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.546:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.547:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.548:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.549:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.550:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.8:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.9:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@trafficmp[1].txt.bak -> TrackingCookie.Trafficmp : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@trafficmp[2].txt.bak -> TrackingCookie.Trafficmp : No action taken.
:mozilla.128:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Trafic : No action taken.
:mozilla.25:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.551:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.552:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.553:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.554:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.555:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.556:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.557:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.558:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.102:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.565:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.566:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.567:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][1].txt.bak -> TrackingCookie.Valuead : No action taken.
C:\Program Files\SpyHunter\Backup\[removed][2].txt.bak -> TrackingCookie.Valueclick : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@valueclick[1].txt.bak -> TrackingCookie.Valueclick : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@valueclick[2].txt.bak -> TrackingCookie.Valueclick : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@valueclick[3].txt.bak -> TrackingCookie.Valueclick : No action taken.
:mozilla.580:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
:mozilla.581:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
:mozilla.582:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@weborama[2].txt.bak -> TrackingCookie.Weborama : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@ads.x10[1].txt.bak -> TrackingCookie.X10 : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@ads.x10[2].txt.bak -> TrackingCookie.X10 : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@xxxcounter[1].txt.bak -> TrackingCookie.Xxxcounter : No action taken.
C:\Program Files\SpyHunter\Backup\joseph@xxxcounter[2].txt.bak -> TrackingCookie.Xxxcounter : No action taken.
:mozilla.58:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\vfujj76w.Default User\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.613:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.614:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.615:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.616:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.630:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.631:C:\Documents and Settings\Enyinnia Family\Application Data\Mozilla\Firefox\Profiles\opg3yrec.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.632:C:\Documents and Settings
Post #4
And here is the new Hijack This! log

Logfile of HijackThis v1.99.1
Scan saved at 8:36:07 PM, on 6/24/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\PcCtlCom.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\CTHELPER.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\Tmntsrv.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\tmproxy.exe
C:\WINDOWS\system32\7fde97b6.exe
C:\Program Files\Trend Micro\Internet Security 2006\pccguide.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\TmPfw.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\PROGRA~1\YSTEM~1\HKNTFS~1.EXE
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\DOCUME~1\ENYINN~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://cnn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://cnn.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Trend Micro Antifraud Toolbar - {06647158-359E-4D10-A8DE-E6145DA90BE9} - C:\PROGRA~1\TRENDM~1\INTERN~2\PccIeBar.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Trend Micro Antifraud Toolbar - {871F91FD-3A92-4988-A842-16AB2CFF5AF1} - C:\PROGRA~1\TRENDM~1\INTERN~2\PccIeBar.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE"
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe" /r
O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [7fde97b6.exe] C:\WINDOWS\system32\7fde97b6.exe
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 2006\pccguide.exe"
O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HP Software Update] C:\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [7fde97b6.exe] C:\Documents and Settings\Enyinnia Family\Local Settings\Application Data\7fde97b6.exe
O4 - HKCU\..\Run: [Bbfevfvd] C:\PROGRA~1\YSTEM~1\HKNTFS~1.EXE
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\mshta.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~2\PcCtlCom.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~2\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~2\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~2\tmproxy.exe


Thank you for your help.
Post #5
Please make a PERMANANT folder for Hijack This!

Important: Create a folder on the C: drive called C:\HJT.
You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HJT. MOVE (drag-and-drop) HijackThis into this folder.

If required a tutorial is here = Hijackthis Folder Tutorial

CLOSE ALL WINDOWS (even this one) AND PROGRAMS!!!!

Run Hijack This!
Click "Do a systen scan only".
Then "check" the box to the left of these item(s):

R3 - Default URLSearchHook is missing

F2 - REG:system.ini: UserInit=userinit.exe

O4 - HKLM\..\Run: [7fde97b6.exe] C:\WINDOWS\system32\7fde97b6.exe

O4 - HKCU\..\Run: [7fde97b6.exe] C:\Documents and Settings\Enyinnia Family\Local Settings\Application Data\7fde97b6.exe

O4 - HKCU\..\Run: [Bbfevfvd] C:\PROGRA~1\YSTEM~1\HKNTFS~1.EXE

O20 - AppInit_DLLs: C:\WINDOWS\system32\mshta.dll

Then click "Fix checked" and close Hijack This!.

Reboot in "safe" mode.

Delete all of the following noted (in red) file(s)/FOLDER(s) you can find:

c:\documents and settings\enyinnia family\local settings\application data\7fde97b6.exe <— file

c:\program files\ystem~1\hkntfs~1.exe <— file

c:\windows\system32\7fde97b6.exe <— file

C:\WINDOWS\system32\mshta.dll <— file

Some malware files may be "hidden".
Be sure to show hidden files when looking for these file(s) and/or folder(s).

Reboot in normal mode and "copy/paste" a new HijackThis! log file into this thread. :)
Post #6
Okay, here is the new log.

Logfile of HijackThis v1.99.1
Scan saved at 11:44:37 PM, on 6/24/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\CTHELPER.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE
C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\Trend Micro\Internet Security 2006\pccguide.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\PcCtlCom.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Adobe\Acrobat 7.0\Acrobat\acrobat_sl.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\tmproxy.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\PROGRA~1\TRENDM~1\INTERN~2\TmPfw.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://cnn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://cnn.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
O2 - BHO: Trend Micro Antifraud Toolbar - {06647158-359E-4D10-A8DE-E6145DA90BE9} - C:\PROGRA~1\TRENDM~1\INTERN~2\PccIeBar.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Trend Micro Antifraud Toolbar - {871F91FD-3A92-4988-A842-16AB2CFF5AF1} - C:\PROGRA~1\TRENDM~1\INTERN~2\PccIeBar.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE"
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe" /r
O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 2006\pccguide.exe"
O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HP Software Update] C:\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~2\PcCtlCom.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~2\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~2\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~2\tmproxy.exe

Thanks for your help. :thumbup:
Post #7
Looks good. :thumbup:

Your Java needs updated:

O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

The latest version out is jre1.5.0_07

After updating you must remove previous versions via "Add/Remove Programs".

jre1.5.0_07 update link

Thank you for using the forum.

M68 :)

Post Infection Items To Ponder
Post #8
This topic is now closed.

If you need this topic reopened, please request this by sending an email to us at the following link
(Click for address)
Include your post user name and detail why you need it reopened with a valid link to your post.
Any bad links or emails that are not from the original poster will be deleted without response.
Any emails without the subject "Reopen" will be deleted without being looked at.

If this is not your thread please start a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI