What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

My Hijack This log HELP please

45 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16
First lets get rid of the junk.

Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»

Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.


(If you use FireFox or the Opera browser
To keep saved passwords, click No at the prompt.)

It's normal after running ATF cleaner that the PC will be slower to boot the first time.


Did you set Ewido like this?

select the "Scanner" icon at the top of
the screen, then select the "Settings" tab.
[*]Once in the Settings screen click on "Recommended actions" and then

select "Delete".
[*]Under "Reports"
  • Select "Automatically generate report after every scan"
  • Un-Select "Only if threats were found"
Close ewido anti-spyware, Do Not run a scan just yet, we will shortly.
  • Reboot your computer into SafeMode. You can do this by restarting
    your computer and continually tapping the F8 key until a menu appears.

    Use your up arrow key to highlight SafeMode then hit enter.
    IMPORTANT: Do not open any other windows or
    programs while ewido is scanning, it may interfere with the scanning proccess:
  • Lauch ewido-anti-spyware by double-clicking the icon on your desktop.
  • Select the "Scanner" icon at the top and then the "Scan" tab
    then click on "Complete System Scan".
  • ewido will now begin the scanning process, be patient this may take a little
    time.
    Once the scan is complete do the following:
  • If you have any infections you will prompted, then select "Apply all
    actions    "
  • Next select the "Reports" icon at the top.
  • Select the "Save report as" button in the lower left hand of the
    screen and save it to a text file on your system (make sure to remember where
    you saved that file, this is important).
  • Close ewido and reboot your system back into Normal Mode and post the
    results of the ewido report scan along with a new HijackThis log.

Post #18
HI Thanks I worked 12 hours yesterday… but have been working on this. I will report when I get it done. I did this before.. ran that ATF Cleaner and then Ewido but I will do it again. Thanks
Post #19
Make sure you change this setting to Delete in Ewido
[*]Once in the Settings screen click on "Recommended actions" and then

select "Delete".
Post #20
Hi again and thanks for your patience. I believe this time we did it. Here are my logs..
Are there anymore suggestions???
Thanks again!!



Logfile of HijackThis v1.99.1
Scan saved at 1:37:38 PM, on 6/30/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
D:\Program Files\Alwil Software\Avast4\ashServ.exe
D:\Program Files\ewido anti-spyware 4.0\guard.exe
D:\WINDOWS\system32\oodag.exe
D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\WINDOWS\Explorer.EXE
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
D:\Program Files\hijack this\HijackThis.exe
D:\Program Files\Internet Explorer\iexplore.exe

F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - D:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Neopets - {CD292324-974F-4224-D074-CACA427AA030} - D:\PROGRA~1\Neopets\Toolbar\Toolbar.dll
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/…arch.jhtml?p=ZN
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\PROGRA~1\AIM\aim.exe
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - D:\Documents and Settings\Smidge\Start Menu\Programs\IMVU\Run IMVU.lnk
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: D:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/f…tup1.0.0.15.cab
O16 - DPF: {5D1E3FA5-64FF-4387-9418-F1D67AFB2247} (MaxisSuperstarTeleX Control) - http://thesims.ea.com/teleport/superstar/M…erstarTeleX.cab
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/housecal…ivex/hcImpl.cab
O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} - http://yax-download.yazzle.net/YazzleActiveX.cab?refid=1162
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: winfmj32 - winfmj32.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - D:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: O&O Defrag - O&O Software GmbH - D:\WINDOWS\system32\oodag.exe

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++


———————————————————
ewido anti-spyware - Scan Report
———————————————————

+ Created at: 12:56:45 PM 6/30/2006

+ Scan result:



D:\WINDOWS\g1077319.dll -> Downloader.Delf.amb : Cleaned.
D:\WINDOWS\g2345722.dll -> Downloader.Delf.amb : Cleaned.
D:\Program Files\MyWebSearch\bar\3.bin\F3HTTPCT.DLL -> Downloader.IstBar : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP134\A0049069.DLL -> Downloader.IstBar : Cleaned.
D:\WINDOWS\Temp\win37.tmp.exe -> Downloader.IstBar.eq : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP139\A0052741.dll -> Downloader.IstBar.ff : Cleaned.
C:\WINDOWS\laibzjmi.dll -> Downloader.Lemmy.u : Cleaned.
C:\WINDOWS\ohskme.dll -> Downloader.Lemmy.u : Cleaned.
C:\WINDOWS\tyvwqb.dll -> Downloader.Lemmy.u : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP134\A0046050.exe -> Downloader.Obfuscated.a : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP134\A0047047.exe -> Downloader.Obfuscated.a : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP134\A0049048.exe -> Downloader.Obfuscated.a : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP136\A0049375.exe -> Downloader.Obfuscated.a : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP137\A0050314.exe -> Downloader.Obfuscated.a : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP137\A0050369.exe -> Downloader.Obfuscated.a : Cleaned.
D:\WINDOWS\Temp\win30.tmp.exe -> Downloader.Obfuscated.a : Cleaned.
D:\WINDOWS\Temp\win3AB.tmp.exe -> Downloader.Obfuscated.a : Cleaned.
D:\WINDOWS\Temp\!update.exe -> Downloader.PurityScan.co : Cleaned.
D:\Program Files\Common Files\Y1123OA.exe -> Downloader.PurityScan.cq : Cleaned.
D:\Program Files\Common Files\sуmbols\mshta.exe -> Downloader.PurityScan.cq : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP119\A0043160.exe -> Downloader.PurityScan.cq : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP121\A0043197.exe -> Downloader.PurityScan.cq : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP122\A0044130.exe -> Downloader.PurityScan.cq : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP122\A0045133.exe -> Downloader.PurityScan.cq : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP122\A0045150.exe -> Downloader.PurityScan.cq : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP122\A0045151.exe -> Downloader.PurityScan.cq : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP123\A0045163.exe -> Downloader.PurityScan.cq : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP123\A0045164.exe -> Downloader.PurityScan.cq : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP136\A0049297.exe -> Downloader.PurityScan.cq : Cleaned.
D:\WINDOWS\Temp\OA.exe -> Downloader.PurityScan.cq : Cleaned.
D:\WINDOWS\Temp\win56E.tmp.exe -> Downloader.Small.cvw : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP136\A0049274.exe -> Downloader.Zlob.rw : Cleaned.
D:\Program Files\Alwil Software\Avast4\DATA\moved\hp101.tmp.vir -> Downloader.Zlob.uz : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP134\A0049052.exe -> Downloader.Zlob.uz : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP136\A0049236.exe -> Downloader.Zlob.vx : Cleaned.
D:\WINDOWS\system32\oins.exe -> Dropper.Small : Cleaned.
D:\WINDOWS\Temp\win32.tmp.exe -> Hijacker.Small : Cleaned.
D:\Documents and Settings\Scott\My Documents\Pranks\ButtonShyMouse.dll -> Not-A-Virus.BadJoke.Win32.MouseShy.a : Cleaned.
D:\Documents and Settings\Scott\My Documents\Pranks\ButtonShyMouse.exe -> Not-A-Virus.BadJoke.Win32.MouseShy.a : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP138\A0051665.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP136\A0049237.dll -> Not-A-Virus.Hoax.Win32.Renos.dt : Cleaned.
D:\Documents and Settings\Scott\Local Settings\Temp\RarSFX0\officekey.exe -> Not-A-Virus.PSWTool.Win32.RAS.a : Cleaned.
D:\Documents and Settings\Scott\Local Settings\Temp\RarSFX0\xpkey.exe -> Not-A-Virus.PSWTool.Win32.RAS.a : Cleaned.
D:\Documents and Settings\Scott\Local Settings\Temp\RarSFX1\officekey.exe -> Not-A-Virus.PSWTool.Win32.RAS.a : Cleaned.
D:\Documents and Settings\Scott\Local Settings\Temp\RarSFX1\xpkey.exe -> Not-A-Virus.PSWTool.Win32.RAS.a : Cleaned.
:mozilla.182:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.280:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.33:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.34:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.35:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.369:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.36:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.37:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.38:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.39:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.40:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\WINDOWS\Profiles\scott\Cookies\anyuser@2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
D:\Documents and Settings\Dad\Cookies\dad@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
D:\Documents and Settings\Guest\Cookies\guest@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@microsofteup.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@microsoftwga.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@msnportal.112.2o7[2].txt -> TrackingCookie.2o7 : Cleaned.
D:\Documents and Settings\Smidge\Cookies\smidge@2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
D:\Documents and Settings\Smidge\Cookies\smidge@maxis.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
D:\WINDOWS\Temp\Cookies\dad@2o7[2].txt -> TrackingCookie.2o7 : Cleaned.
D:\WINDOWS\Temp\Cookies\smidge@2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
D:\WINDOWS\Temp\Cookies\smidge@maxis.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][1].txt -> TrackingCookie.Adbrite : Cleaned.
D:\WINDOWS\Temp\Cookies\[removed][1].txt -> TrackingCookie.Addynamix : Cleaned.
D:\Documents and Settings\Dad\Cookies\[removed][1].txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.247:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.248:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.249:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.250:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.251:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.127:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.128:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.129:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.130:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][1].txt -> TrackingCookie.Adserver : Cleaned.
D:\WINDOWS\Temp\Cookies\[removed][1].txt -> TrackingCookie.Adserver : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.41:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.42:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.43:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.44:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.31:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.357:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
D:\WINDOWS\Temp\Cookies\dad@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned.
D:\WINDOWS\Temp\Cookies\smidge@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned.
D:\WINDOWS\Temp\Cookies\[removed][1].txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.296:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][2].txt -> TrackingCookie.Burstbeacon : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][3].txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.297:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.298:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned.
D:\WINDOWS\Temp\Cookies\smidge@burstnet[2].txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.188:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.189:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.195:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.196:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.199:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.200:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@casalemedia[3].txt -> TrackingCookie.Casalemedia : Cleaned.
D:\WINDOWS\Temp\Cookies\smidge@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned.
D:\WINDOWS\Temp\Cookies\dad@clickbank[1].txt -> TrackingCookie.Clickbank : Cleaned.
:mozilla.23:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.24:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Com : Cleaned.
C:\WINDOWS\Profiles\bryan\Cookies\default@com[2].txt -> TrackingCookie.Com : Cleaned.
C:\WINDOWS\Profiles\scott\Cookies\default@com[2].txt -> TrackingCookie.Com : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@com[1].txt -> TrackingCookie.Com : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@com[2].txt -> TrackingCookie.Com : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][1].txt -> TrackingCookie.Com : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : Cleaned.
:mozilla.11:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
D:\Documents and Settings\Guest\Cookies\guest@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.418:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Enhance : Cleaned.
C:\WINDOWS\Profiles\scott\Cookies\[removed][2].txt -> TrackingCookie.Enigmasoftwaregroup : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@epilot[1].txt -> TrackingCookie.Epilot : Cleaned.
:mozilla.162:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.164:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][1].txt -> TrackingCookie.Esomniture : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][2].txt -> TrackingCookie.Euroclick : Cleaned.
D:\Documents and Settings\Smidge\Cookies\[removed][1].txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.169:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.170:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.171:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.176:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.177:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.179:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][2].txt -> TrackingCookie.Falkag : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][3].txt -> TrackingCookie.Falkag : Cleaned.
D:\Documents and Settings\Smidge\Cookies\[removed][1].txt -> TrackingCookie.Falkag : Cleaned.
D:\WINDOWS\Temp\Cookies\[removed][1].txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.66:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.67:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.68:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.71:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.72:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.73:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
D:\Documents and Settings\Dad\Cookies\dad@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned.
D:\Documents and Settings\Guest\Cookies\guest@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@fastclick[3].txt -> TrackingCookie.Fastclick : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][1].txt -> TrackingCookie.Fastclick : Cleaned.
D:\WINDOWS\Temp\Cookies\dad@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned.
D:\WINDOWS\Temp\Cookies\smidge@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned.
D:\WINDOWS\Temp\Cookies\[removed][2].txt -> TrackingCookie.Fastclick : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@findwhat[1].txt -> TrackingCookie.Findwhat : Cleaned.
:mozilla.98:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.######-access : Cleaned.
:mozilla.419:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Goclick : Cleaned.
:mozilla.420:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Goclick : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][2].txt -> TrackingCookie.Goclick : Cleaned.
:mozilla.145:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.146:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.147:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.168:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.268:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.269:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.270:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.271:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.344:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.345:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.346:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.385:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.386:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.387:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.77:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Hotlog : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@hotlog[1].txt -> TrackingCookie.Hotlog : Cleaned.
:mozilla.238:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][1].txt -> TrackingCookie.Masterstats : Cleaned.
D:\WINDOWS\Temp\Cookies\[removed][1].txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.27:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.59:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.60:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.61:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.62:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][2].txt -> TrackingCookie.Onestat : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][3].txt -> TrackingCookie.Onestat : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@overture[2].txt -> TrackingCookie.Overture : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@overture[3].txt -> TrackingCookie.Overture : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][2].txt -> TrackingCookie.Overture : Cleaned.
:mozilla.411:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Paycounter : Cleaned.
D:\WINDOWS\Temp\Cookies\dad@paycounter[1].txt -> TrackingCookie.Paycounter : Cleaned.
:mozilla.93:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.94:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.95:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.96:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.97:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
D:\Documents and Settings\Dad\Cookies\[removed][2].txt -> TrackingCookie.Pointroll : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][1].txt -> TrackingCookie.Pointroll : Cleaned.
D:\WINDOWS\Temp\Cookies\[removed][2].txt -> TrackingCookie.Pointroll : Cleaned.
D:\WINDOWS\Temp\Cookies\[removed][2].txt -> TrackingCookie.Pointroll : Cleaned.
D:\WINDOWS\Temp\Cookies\dad@pro-market[1].txt -> TrackingCookie.Pro-market : Cleaned.
D:\WINDOWS\Temp\Cookies\dad@qksrv[2].txt -> TrackingCookie.Qksrv : Cleaned.
:mozilla.214:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
D:\Documents and Settings\Dad\Cookies\dad@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned.
D:\WINDOWS\Temp\Cookies\dad@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned.
D:\WINDOWS\Temp\Cookies\[removed][1].txt -> TrackingCookie.Reliablestats : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@revenue[2].txt -> TrackingCookie.Revenue : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@edge.ru4[2].txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.347:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.348:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.349:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.350:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.351:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed]-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
D:\WINDOWS\Temp\Cookies\smidge@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.397:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.398:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.399:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.400:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.401:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.402:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.403:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.404:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.405:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.406:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
D:\WINDOWS\Temp\Cookies\[removed][2].txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.377:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.215:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.216:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.217:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.218:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.219:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][1].txt -> TrackingCookie.Specificclick : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][2].txt -> TrackingCookie.Specificclick : Cleaned.
D:\WINDOWS\Temp\Cookies\[removed][2].txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.15:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Spylog : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@spylog[2].txt -> TrackingCookie.Spylog : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][1].txt -> TrackingCookie.Starware : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@starware[2].txt -> TrackingCookie.Starware : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][1].txt -> TrackingCookie.Starware : Cleaned.
:mozilla.100:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.101:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.102:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.99:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][2].txt -> TrackingCookie.Tacoda : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned.
D:\Documents and Settings\Smidge\Cookies\[removed][1].txt -> TrackingCookie.Tacoda : Cleaned.
D:\Documents and Settings\Smidge\Cookies\smidge@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned.
D:\WINDOWS\Temp\Cookies\[removed][2].txt -> TrackingCookie.Tacoda : Cleaned.
D:\WINDOWS\Temp\Cookies\dad@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.303:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned.
:mozilla.304:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned.
:mozilla.305:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@login.tracking101[2].txt -> TrackingCookie.Tracking101 : Cleaned.
:mozilla.288:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.289:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.290:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.131:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.132:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.133:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.134:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.135:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.136:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.139:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@trafficmp[2].txt -> TrackingCookie.Trafficmp : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@trafic[1].txt -> TrackingCookie.Trafic : Cleaned.
:mozilla.125:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.126:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@tribalfusion[3].txt -> TrackingCookie.Tribalfusion : Cleaned.
D:\WINDOWS\Temp\Cookies\dad@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned.
D:\WINDOWS\Temp\Cookies\smidge@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][2].txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.263:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.264:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@vegasred[2].txt -> TrackingCookie.Vegasred : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][1].txt -> TrackingCookie.Vegasred : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@web-stat[1].txt -> TrackingCookie.Web-stat : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@weborama[1].txt -> TrackingCookie.Weborama : Cleaned.
D:\WINDOWS\Temp\Cookies\dad@xxxcounter[2].txt -> TrackingCookie.Xxxcounter : Cleaned.
:mozilla.78:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@yadro[2].txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.85:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.86:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.87:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.88:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.89:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.90:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.91:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][2].txt -> TrackingCookie.Yieldmanager : Cleaned.
D:\Documents and Settings\Scott\Cookies\[removed][3].txt -> TrackingCookie.Yieldmanager : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned.
D:\Documents and Settings\Smidge\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : Cleaned.
D:\WINDOWS\Temp\Cookies\[removed][2].txt -> TrackingCookie.Yieldmanager : Cleaned.
D:\WINDOWS\Temp\Cookies\dad@yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned.
D:\WINDOWS\Temp\Cookies\[removed][2].txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.284:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.285:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.286:C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\dqmcy53d.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
D:\Documents and Settings\Scott\Cookies\scott@zedo[1].txt -> TrackingCookie.Zedo : Cleaned.
D:\Documents and Settings\Smidge\Cookies\[removed][1].txt -> TrackingCookie.Zedo : Cleaned.
D:\Documents and Settings\Smidge\Cookies\smidge@zedo[2].txt -> TrackingCookie.Zedo : Cleaned.
D:\WINDOWS\Temp\Cookies\smidge@zedo[1].txt -> TrackingCookie.Zedo : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP136\A0049217.DLL -> Trojan.Agent.qt : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP139\A0052728.exe -> Trojan.Dialer.pz : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP139\A0052730.exe -> Trojan.Dialer.pz : Cleaned.
D:\System Volume Information\_restore{B4DAC3FB-A1A4-41A8-8D51-9676DBC17D2B}\RP139\A0052733.exe -> Trojan.Dialer.pz : Cleaned.
D:\WINDOWS\Temp\win1B84.tmp -> Trojan.Dialer.pz : Cleaned.
D:\WINDOWS\Temp\win1B96.tmp -> Trojan.Dialer.pz : Cleaned.
D:\WINDOWS\Temp\winA9F.tmp.exe -> Trojan.Dialer.pz : Cleaned.
D:\WINDOWS\Temp\winAA0.tmp.exe -> Trojan.Dialer.pz : Cleaned.
D:\WINDOWS\Temp\winAA1.tmp.exe -> Trojan.Dialer.pz : Cleaned.
D:\WINDOWS\Temp\NI.UWA6P_0001_N73M1004\setup.exe -> Trojan.Fakealert : Cleaned.
C:\WINDOWS\hta2.hta -> Trojan.LowZones.a : Cleaned.
C:\WINDOWS\hta3.hta -> Trojan.LowZones.a : Cleaned.


::Report end
Post #21
Only a couple leftovers :thumbup:

Run hijackthis. Hit None of the above, Click Do a System Scan Only. Put a Check in the box on the left side on these:

O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} - http://yax-download.yazzle.net/YazzleActiveX.cab?refid=1162

O20 - Winlogon Notify: winfmj32 - winfmj32.dll (file missing)

Close ALL windows and browsers except HijackThis and click "Fix checked"



Good Job :thumbup:

Log looks good

You need to create a new Clean restore point.

Note: This will remove all previous Restore Points

Turn off System Restore:

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

Restart your computer, turn it back on.

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Remove the Check Turn off System Restore.
Click Apply, and then click OK.

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Check "Hide file extensions for known file types."
Under the "Hidden files" folder, Uncheck "Show hidden files and folders."
Check "Hide protected operating system files."
Click Apply, and then click OK.





If you dont have these programs I would recommend that you get them. Spywareblaster, Spywareguard. They will add 1000's of sites to your resticted zone and block some hijacks from happening. I also have a FREE FIREWALL and FREE ANTI VIRUS if you need one.

It is critical to have both a firewall and anti virus to protect your system.

Keep your system up to date and run Adaware & Spybot, once a week works, and hopefully you will be ok from here on. Both are available below.

Safe Surfing. :D

I would also suggest you read this:
So how did I get infected in the first place?
by Tony Klein
Post #22
Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI