Help with Hijact This logs

Theorhet

Welcome to the forum, my name is Ken and I will be helping you clean up your system. You have a lot going on and to try to do it all at once would be difficult, so let start by doing this. You may want to print this out as you will be offline for part of the fix.

Your HIJACKTHIS program is current, but it is very important that it resides in its own folder.
We will use Hijackthis (HJT) to make changes to your system and HJT will make backups of those changes,
If HJT is not in its own folder, those backups could be lost.

Easy to fix,
* just go to My Computer > YOUR C:\ DRIVE > Program Files and create a new folder and name it Hijackthis .
* Now scroll to where you have HJT currently, right click on the HJT icon and select CUT .
* Now open the new folder you just created and right click within that folder and select PASTE .
* Now HJT should reside in C:\Program Files\Hijackthis\Hijackthis.exe

Please do not proceed until you have moved HJT




We need to make sure all hidden files are showing :

• Click Start.
• Open My Computer.
• Select the Tools menu and click Folder Options.
• Select the View tab.
• Under the Hidden files and folders heading select Show hidden files and folders.
• Uncheck the Hide file extensions for known types option.
• Uncheck the Hide protected operating system files (recommended) option.
• Click Yes to confirm.
• Click OK.

* Go to Start> Run and type in services.msc then press Enter
* Scroll down to ISEXEng
* Double Click that service to open it.
* Click on Stop Service.
* Then change the Startup Type to Disabled.
* OK your way out of the program.

Open HJT > Misc Tools > Delete an NT Service
* Type in ISEXEng
* Then click on OK, it will ask you to reboot, do so.



Please download Look2Me-Destroyer.exe to your desktop.

Close all windows before continuing.
Double-click Look2Me-Destroyer.exe to run it.
Put a check next to Run this program as a task.

You will receive a message saying Look2Me-Destroyer will close and re-open in approximately 10 seconds. Click OK
When Look2Me-Destroyer re-opens, click the Scan for L2M button, your desktop icons will disappear, this is normal.
Once it's done scanning, click the Remove L2M button.

You will receive a Done Scanning message, click OK.
When completed, you will receive this message: Done removing infected files! Look2Me-Destroyer will now shutdown your computer, click OK.
Your computer will then shutdown.

Turn your computer back on.
Please post the contents of C:\Look2Me-Destroyer.txt and a new HiJackThis log into your next reply.
If you receive a message from your firewall about this program accessing the internet please allow it.

If you receive a runtime error '339' please download MSWINSCK.OCX from the link below and place it in your C:\Windows\System32 Directory.
http://www.ascentive.com/support/new/images/lib/MSWINSCK.OCX



So I need to see the Look2Me-Destroyer.txt and a new HJT log.

Ken, The Ewido report is too long even for this post. I'll cut some of it and paste it into another post. Ken ewido anti-spyware - Scan Report ——————————————————— + Created at: 10:17:14 PM 8/29/2006 + Scan result: HKLM\SOFTWARE\180ax -> Adware.180Solutions : Cleaned with backup (quarantined). HKU\.DEFAULT\Software\msbb -> Adware.180Solutions : Cleaned with backup (quarantined). HKU\S-1-5-18\Software\msbb -> Adware.180Solutions : Cleaned with backup (quarantined). HKU\S-1-5-21-2195837988-72331792-2543535990-1005\Software\180ax -> Adware.180Solutions : Cleaned with backup (quarantined). HKLM\SOFTWARE\SecureWin -> Adware.Adlogix : Cleaned with backup (quarantined). C:\WINDOWS\system32\lxjwu.dll -> Adware.Adstart : Cleaned with backup (quarantined). C:\WINDOWS\system32\nynob.dll -> Adware.Adstart : Cleaned with backup (quarantined). C:\WINDOWS\system32\nynobf.exe -> Adware.Adstart : Cleaned with backup (quarantined). C:\Documents and Settings\Ken\Local Settings\Temp\temp.frE0A7 -> Adware.Apropos : Cleaned with backup (quarantined). C:\Program Files\CxtPls -> Adware.Apropos : Cleaned with backup (quarantined). C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll -> Adware.Aws : Cleaned with backup (quarantined). C:\WINDOWS\bsx32 -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ADTMI1.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ADVC5.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ADVCTX2.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIB9894.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIC29667.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASID12180.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIE17070.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIF29819.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIF4502.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIFA15376.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIFWH29233.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIG21943.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIGT10102.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIH21180.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIH7853.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASII21469.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIL18549.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASILS29399.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIM9740.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIOG19375.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIOT25456.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIPF1965.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIR21184.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIRE20082.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIS24110.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIS31590.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIT17011.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIT26116.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIW11211.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\ASIWS3.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\AUTOS2.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\BID1.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\BingoRoom1.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\CARD2.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\CARS3.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\DATE4.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\EECH1.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\EML1.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\FAST1.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\FINC3.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\FINC5.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\FLWR1.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\FMND1.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\HERBS1.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\INK1.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\JOBS4.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\MOVS2.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\NEWS2.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\SHOP2.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\SPEC1.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\SPZ3.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\TECH2.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\TRVL6.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\TVEN2.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\TVMX.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\UTONE2.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\WWW3.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\WINDOWS\bsx32\XTFL2.bsx -> Adware.BookedSpace : Cleaned with backup (quarantined). C:\Documents and Settings\Ken\Local Settings\Temp\temp.frBA4D\A_ClearSearch.DLL -> Adware.ClearSearch : Cleaned with backup (quarantined). C:\WINDOWS\system32\secure.exe -> Adware.DealHelper : Cleaned with backup (quarantined). HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DisplayUtility -> Adware.Delfin : Cleaned with backup (quarantined). HKLM\SOFTWARE\Mvu -> Adware.Delfin : Cleaned with backup (quarantined). HKLM\SOFTWARE\picsvr -> Adware.Delfin : Cleaned with backup (quarantined). HKLM\SOFTWARE\skin -> Adware.Delfin : Cleaned with backup (quarantined). HKU\S-1-5-21-2195837988-72331792-2543535990-1005\Software\Mvu -> Adware.Delfin : Cleaned with backup (quarantined). HKU\S-1-5-21-2195837988-72331792-2543535990-1005\Software\picsvr -> Adware.Delfin : Cleaned with backup (quarantined). C:\Documents and Settings\Ken\Local Settings\Temp\uppicsvr.exe -> Adware.DelphinMedia.Viewer : Cleaned with backup (quarantined). C:\Documents and Settings\All Users\Application Data\wsxs\patchme.exe -> Adware.DelphinMediaViewer : Cleaned with backup (quarantined). C:\Documents and Settings\Ken\Local Settings\Temp\app6.tmp -> Adware.DelphinMediaViewer : Cleaned with backup (quarantined). C:\Program Files\Common Files\Uninstall Information\RemoveDisplayUtility.exe -> Adware.DelphinMediaViewer : Cleaned with backup (quarantined). C:\WINDOWS\system32\nsvsvc\nsv.ocx -> Adware.DelphinMediaViewer : Cleaned with backup (quarantined). C:\WINDOWS\system32\nsvsvc\nsvs.dll -> Adware.DelphinMediaViewer : Cleaned with backup (quarantined). C:\WINDOWS\bundles\adl_mteststub.exe -> Adware.EZula : Cleaned with backup (quarantined). C:\WINDOWS\bundles\vl_ezstub.exe -> Adware.EZula : Cleaned with backup (quarantined). HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E1412445-4FF8-410E-8D24-F2CF86B171A4} -> Adware.Generic : Cleaned with backup (quarantined). HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E1412445-4FF8-410E-8D24-F2CF86B171A4} -> Adware.Generic : Cleaned with backup (quarantined). HKU\S-1-5-21-2195837988-72331792-2543535990-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E1412445-4FF8-410E-8D24-F2CF86B171A4} -> Adware.Generic : Cleaned with backup (quarantined). HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00027925-0017-4FAF-9539-90E4AC0B9EC5} -> Adware.IEPlugin : Cleaned with backup (quarantined). HKU\.DEFAULT\Software\intexp -> Adware.IEPlugin : Cleaned with backup (quarantined). HKU\.DEFAULT\Software\intexp\Config -> Adware.IEPlugin : Cleaned with backup (quarantined). HKU\.DEFAULT\Software\intexp\MyFileSystem2 -> Adware.IEPlugin : Cleaned with backup (quarantined). HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00027925-0017-4FAF-9539-90E4AC0B9EC5} -> Adware.IEPlugin : Cleaned with backup (quarantined). HKU\S-1-5-18\Software\intexp -> Adware.IEPlugin : Cleaned with backup (quarantined). HKU\S-1-5-18\Software\intexp\Config -> Adware.IEPlugin : Cleaned with backup (quarantined). HKU\S-1-5-18\Software\intexp\MyFileSystem2 -> Adware.IEPlugin : Cleaned with backup (quarantined). HKU\S-1-5-21-2195837988-72331792-2543535990-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00027925-0017-4FAF-9539-90E4AC0B9EC5} -> Adware.IEPlugin : Cleaned with backup (quarantined). C:\Program Files\IncrediFind -> Adware.Incredifind : Cleaned with backup (quarantined). C:\Program Files\IncrediFind\BHO -> Adware.Incredifind : Cleaned with backup (quarantined). C:\WINDOWS\unstall.exe -> Adware.MediaMotor : Cleaned with backup (quarantined). C:\Documents and Settings\LocalService\Start Menu\Programs\Power Scan -> Adware.PowerScan : Cleaned with backup (quarantined). C:\Documents and Settings\LocalService\Start Menu\Programs\Power Scan\Power Scan.lnk -> Adware.PowerScan : Cleaned with backup (quarantined). C:\WINDOWS\temp\powerscan.exe -> Adware.PowerScan : Cleaned with backup (quarantined). C:\WINDOWS\temp\whenu.exe/VVSN.exe -> Adware.SaveNow : Cleaned with backup (quarantined). HKU\S-1-5-21-2195837988-72331792-2543535990-1005\Software\Bundles -> Adware.SecondThought : Cleaned with backup (quarantined). C:\Program Files\TopSearch\TopSearch.dll -> Adware.TopSearch : Cleaned with backup (quarantined). C:\WINDOWS\system32\mad.dll -> Adware.TotalVelocity : Cleaned with backup (quarantined). [208] C:\WINDOWS\system32\mad.dll -> Adware.TotalVelocity : Cleaned with backup (quarantined). [256] C:\WINDOWS\system32\mad.dll -> Adware.TotalVelocity : Cleaned with backup (quarantined). [268] C:\WINDOWS\system32\mad.dll -> Adware.TotalVelocity : Cleaned with backup (quarantined). [428] C:\WINDOWS\system32\mad.dll -> Adware.TotalVelocity : Cleaned with backup (quarantined). [500] C:\WINDOWS\system32\mad.dll -> Adware.TotalVelocity : Cleaned with backup (quarantined). [564] C:\WINDOWS\system32\mad.dll -> Adware.TotalVelocity : Cleaned with backup (quarantined). [784] C:\WINDOWS\system32\mad.dll -> Adware.TotalVelocity : Cleaned with backup (quarantined). C:\WINDOWS\system32\SplWbr.dll -> Adware.VirtualBouncer : Cleaned with backup (quarantined). HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\ins -> Adware.WebRebates : Cleaned with backup (quarantined). HKLM\SOFTWARE\Classes\PROTOCOLS\Name-Space Handler\res -> Adware.WebSearch : Cleaned with backup (quarantined). C:\WINDOWS\system32\lockx.exe -> Backdoor.IRCBot.gw : Cleaned with backup (quarantined). C:\WINDOWS\system32\winst.exe -> Downloader.Agent.cj : Cleaned with backup (quarantined). C:\WINDOWS\system32\picsvr\picsvr.exe -> Downloader.Delmed.b : Cleaned with backup (quarantined). C:\WINDOWS\xxrvgy.dll -> Downloader.Lemmy.u : Cleaned with backup (quarantined). C:\Documents and Settings\Ken\Local Settings\Temp\i3C0.tmp -> Downloader.Small.wk : Cleaned with backup (quarantined). C:\WINDOWS\Downloaded Program Files\rist-aug-acx21.exe -> Downloader.Small.yl : Cleaned with backup (quarantined). C:\WINDOWS\mm20.ocx -> Downloader.VB.db : Cleaned with backup (quarantined). C:\WINDOWS\bundles\HelperInstaller.exe -> Dropper.Delf.z : Cleaned with backup (quarantined). C:\WINDOWS\system32\in10b6s.dll -> Dropper.Small.abe : Cleaned with backup (quarantined). C:\WINDOWS\system32\ideal.exe -> Dropper.Small.kz : Cleaned with backup (quarantined). C:\WINDOWS\system32\MyDailyHoroscope17307.dll -> Dropper.Small.nj : Cleaned with backup (quarantined). C:\WINDOWS\bundles\traspec7.exe -> Dropper.Small.sc : Cleaned with backup (quarantined). :mozilla.206:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup (quarantined). :mozilla.207:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup (quarantined). :mozilla.652:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup (quarantined). :mozilla.653:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup (quarantined). :mozilla.654:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup (quarantined). :mozilla.104:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.105:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.106:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.114:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.115:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.116:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.117:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.118:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.119:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.120:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.121:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.122:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.123:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.124:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.125:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.126:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.127:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.128:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.129:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.130:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.131:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.132:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.133:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.134:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.135:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.136:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.137:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.138:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.139:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.140:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.141:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.142:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.143:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.144:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.145:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.146:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.147:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.148:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.149:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.150:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.151:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.152:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.153:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.154:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.155:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.156:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.157:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.158:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.159:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.160:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.161:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.162:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.175:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.182:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.238:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.281:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.305:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.464:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.519:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.61:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.62:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.64:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.65:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.663:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.66:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.67:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.686:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.68:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.69:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.706:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.70:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.719:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.71:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.72:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.73:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.74:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.75:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.76:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.779:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.77:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.82:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.83:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.84:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.85:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.86:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.87:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.88:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.89:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.90:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.917:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.91:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.92:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.93:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.946:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.94:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.95:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.97:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\Big Kyle.KHSH.000\Cookies\big kyle@gateway.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\Ken\Cookies\ken@dowjones.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). C:\Documents and Settings\Ken\Cookies\ken@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.332:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined). :mozilla.333:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined). :mozilla.168:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup (quarantined). :mozilla.169:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup (quarantined). :mozilla.57:C:\Documents and Settings\Ken\Application Data\Thunderbird\Profiles\default.o6u\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup (quarantined). :mozilla.58:C:\Documents and Settings\Ken\Application Data\Thunderbird\Profiles\default.o6u\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup (quarantined). :mozilla.274:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Admarketplace : Cleaned with backup (quarantined). :mozilla.85:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Admarketplace : Cleaned with backup (quarantined). :mozilla.86:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Admarketplace : Cleaned with backup (quarantined). :mozilla.87:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Admarketplace : Cleaned with backup (quarantined). :mozilla.149:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.150:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.151:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.152:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.153:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.264:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.265:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.266:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.267:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.268:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.646:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.759:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.761:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.86:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.87:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.88:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.89:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.90:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.91:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined). :mozilla.160:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined). :mozilla.161:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined). :mozilla.314:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined). :mozilla.315:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined). :mozilla.316:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined). :mozilla.317:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined). :mozilla.318:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined). :mozilla.797:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined). :mozilla.798:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined). :mozilla.799:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined). :mozilla.443:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup (quarantined). :mozilla.444:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup (quarantined). :mozilla.10:C:\Documents and Settings\Sharon\Application Data\Mozilla\Firefox\Profiles\default.d6h\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.117:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.118:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.119:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.11:C:\Documents and Settings\Sharon\Application Data\Mozilla\Firefox\Profiles\default.d6h\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.120:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.121:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.122:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.40:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.41:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.42:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.43:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.58:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.59:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.60:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.61:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.6:C:\Documents and Settings\Sharon\Application Data\Mozilla\Firefox\Profiles\default.d6h\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.9:C:\Documents and Settings\Sharon\Application Data\Mozilla\Firefox\Profiles\default.d6h\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.116:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined). :mozilla.17:C:\Documents and Settings\Sharon\Application Data\Mozilla\Firefox\Profiles\default.d6h\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined). :mozilla.25:C:\Documents and Settings\Ken\Application Data\Thunderbird\Profiles\default.o6u\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined). :mozilla.367:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined). :mozilla.36:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined). :mozilla.568:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined). :mozilla.62:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined). :mozilla.691:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Bfast : Cleaned with backup (quarantined). :mozilla.840:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Bfast : Cleaned with backup (quarantined). :mozilla.204:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Bluestreak : Cleaned with backup (quarantined). :mozilla.221:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Bluestreak : Cleaned with backup (quarantined). :mozilla.85:C:\Documents and Settings\Ken\Application Data\Thunderbird\Profiles\default.o6u\cookies.txt -> TrackingCookie.Bluestreak : Cleaned with backup (quarantined). :mozilla.156:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup (quarantined). :mozilla.157:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup (quarantined). :mozilla.80:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup (quarantined). :mozilla.81:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup (quarantined). :mozilla.82:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup (quarantined). :mozilla.83:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup (quarantined). :mozilla.850:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup (quarantined). :mozilla.851:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup (quarantined). :mozilla.301:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned with backup (quarantined). :mozilla.285:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined). :mozilla.286:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined). :mozilla.703:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined). :mozilla.704:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined). :mozilla.226:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.227:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.228:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.37:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.38:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.39:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.42:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.43:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.44:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.45:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.45:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.46:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.47:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.48:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.49:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.50:C:\Documents and Settings\Big Kyle.KHSH.000\Application Data\Mozilla\Firefox\Profiles\default.87p\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.50:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.51:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.701:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Clickbank : Cleaned with backup (quarantined). :mozilla.16:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Com : Cleaned with backup (quarantined). :mozilla.362:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Coremetrics : Cleaned with backup (quarantined). :mozilla.596:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Coremetrics : Cleaned with backup (quarantined). C:\Documents and Settings\Ken\Cookies\ken@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : Cleaned with backup (quarantined). :mozilla.150:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). :mozilla.16:C:\Documents and Settings\Sharon\Application Data\Mozilla\Firefox\Profiles\default.d6h\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). :mozilla.19:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). :mozilla.20:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). :mozilla.21:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). :mozilla.22:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\481xtb8g.Default User\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). :mozilla.38:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). :mozilla.391:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). :mozilla.39:C:\Documents and Settings\Ken\Application Data\Mozilla\Firefox\Profiles\default.yif\cookies.txt ->

Theorhet,

I think outside of posting here I would stay off the internet until we deem your system is clean, you have a few other things have shown up since your last post. Sometimes this malware acts as magnets and attracts other malware.


Open Ewido and go into the Quarantine folder and delete it all, nothing in there you want to keep.


Please download miekiemoes' LQfix batch here:
http://users.telenet.be/bluepatchy/miekiem…tools/LQfix.zip
Unzip it to the desktop but do NOT run it yet.

Next, please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.

For additional help in booting into Safe Mode, see the following site:
http://www.pchell.com/support/safemode.shtml


Once in Safe Mode, please run LQfix.bat. When finished, restart your computer in normal mode and please post a new HijackThis log




Download Pocket Killbox to your desktop, unzip it to a folder that you can find

C:\WINDOWS\eltupt.exe
C:\WINDOWS\etb
C:\WINDOWS\system32\mad.dll
C:\WINDOWS\system32\nsvsvc

Highlight all the files with the complete path in the quote and press Ctrl C on your keyboard.

• Open Pocket Killbox
• Go to File > Paste from clipboard
• Set it to Delete on Reboot
• Tick the box that says End Explorer shell while killing file
• If its not greyed out..Click the radio button that say Unregister .dll before deleting.
• Make sure ALL Files is selected
• Click on the Red circle with the white X
• It will ask you to confirm the deletion…Say yes
• It will ask you to reboot, say yes

Open HJT Scan Only, close your browser and all open windows, check these and click on Fix Checked
O4 - HKLM\..\Run: [Nsv] C:\WINDOWS\system32\nsvsvc\nsvsvc.exe
O4 - HKLM\..\Run: [eltupt] C:\WINDOWS\eltupt.exe
O4 - HKLM\..\Run: [System service70] C:\WINDOWS\\\etb\\pokapoka70.exe
O20 - AppInit_DLLs: mad.dll


Post a new HJT log please.

Theorhet,

That mad.dll is related to TV Media adware and is one of the most difficult to remove, most programs wont run in Safemode so the are not in use and can be deleted, not so with TV Media I hope you are learning here that the vermin that write this garbage have only one goal and thats to line there own pockets and have absolutly no regard for you or anyone else.


Lets try this removal tool and see if it goes away. I would try downloading the tool to your desktop and then try running it in Safemode.

Adware T.V. Media Removal Tool 1.1
http://www.majorgeeks.com/download4368.html


After you run the tool, remove this entry with HJT in Safemode

O20 - AppInit_DLLs: mad.dll

Post a new HJT log and if its not gone I will have to do some more research on it.

Ken, I downloaded the program and ran it, but it gave me the message that TV Media was not installed. I then tried to remove mad.dll with HJT and got the same error message. I am a computer novice, and must admit that I thought I was protected since I had Ad-Aware and an anti-virus program. How do you protect your computer from these things? Ken

Theorhet

When we get rid of this pest, I will give you a list of free programs to install to help keep this garbage from installing.

Outside of this, the rest of your log is looking good.

Try this tool from Microsoft
http://support.microsoft.com/?kbid=886590

After you run the tool, post a new HJT log.

Ken, I downloaded the program, ran it, and got the message again that TV Media is not installed. I also got the same error message when I ran HJT and attempted to remove the mad.dll. Does that mean TV Media is really not on the computer, or does TV Media have some type of blocking mechanism built in? Ken

Lets try this.

Open HJT > Misc Tools > Open Uninstall Manager > Save List and post it into this thread.

Ken

OK - here it is. 1 Click Fixer PLUS 56Kbps Internal Modem Ad-Aware SE Plus Adobe Atmosphere Player for Acrobat and Adobe Reader Adobe Download Manager 1.2 (Remove Only) Adobe Photoshop Album 2.0 Starter Edition Adobe Reader 7.0.5 AOL Instant Messenger AOL Toolbar 2.0 AOL Uninstaller (Choose which Products to Remove) Avance AC'97 Audio Avery® Wizard 2.1 for Microsoft® Word 2002 BigFix Brother MFL-Pro Suite BugOff 1.10 CA eTrust EZ Antivirus DeductionPro 2005-06 DING! EarthLink FastLane EarthLink TotalAccess 2004 e-Sword ewido anti-spyware 4.0 ExamView Pro FileSpecs plug-in for Ad-Aware SE Finale NotePad 2004 Google Earth Google Toolbar for Internet Explorer HexDump plug-in for Ad-Aware SE HijackThis 1.99.1 HP Image Zone Express HP Photosmart Essential Intel® Extreme Graphics Driver iPod for Windows 2005-09-23 iPod for Windows 2005-10-12 iPod Updater 2004-11-15 iTunes iView Catalog Reader (remove only) J2SE Runtime Environment 5.0 Update 4 J2SE Runtime Environment 5.0 Update 6 Java 2 Runtime Environment Standard Edition v1.3.1_02 Kiplinger's WILLPower Lavasoft VX2 Cleaner Lexmark Supplies Monitor Lexmark Z25-Z35 LSP Explorer plug-in for Ad-Aware SE Macromedia Flash Player 8 Macromedia Shockwave Player McGraw-Hill EZ Test Messenger-Control plug-in for Ad-Aware SE Microsoft Data Access Components KB870669 Microsoft Interactive Training Microsoft Money 2003 Microsoft Money 2003 System Pack Microsoft Office FrontPage 2003 Microsoft Office Publisher 2003 Microsoft Office XP Media Content Microsoft Office XP Standard for Students and Teachers Microsoft Works 7.0 Mozilla Firefox (1.0.7) Multimedia Keyboard Driver Ver1.0 (KB-0108) Musicmatch® Jukebox MyLabels Premium MySoftware Fonts Newsflash OE/W Messengerctrl plug-in for Ad-Aware SE Plaxo Toolbar for Outlook (with AIM Enhancements) PowerDVD Pradis Do Not Remove Pradis: NIV Holy Bible QuickTime RealArcade RealPlayer Rhapsody Player Engine Security Update for Step By Step Interactive Training (KB898458) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player 10 (KB911565) Security Update for Windows Media Player 10 (KB917734) Security Update for Windows XP (KB883939) Security Update for Windows XP (KB890046) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896358) Security Update for Windows XP (KB896422) Security Update for Windows XP (KB896423) Security Update for Windows XP (KB896424) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB896688) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB899588) Security Update for Windows XP (KB899591) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901214) Security Update for Windows XP (KB902400) Security Update for Windows XP (KB903235) Security Update for Windows XP (KB904706) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Security Update for Windows XP (KB905915) Security Update for Windows XP (KB908519) Security Update for Windows XP (KB908531) Security Update for Windows XP (KB911280) Security Update for Windows XP (KB911562) Security Update for Windows XP (KB911567) Security Update for Windows XP (KB911927) Security Update for Windows XP (KB912812) Security Update for Windows XP (KB912919) Security Update for Windows XP (KB913446) Security Update for Windows XP (KB913580) Security Update for Windows XP (KB914388) Security Update for Windows XP (KB914389) Security Update for Windows XP (KB916281) Security Update for Windows XP (KB917159) Security Update for Windows XP (KB917344) Security Update for Windows XP (KB917422) Security Update for Windows XP (KB917953) Security Update for Windows XP (KB918439) Security Update for Windows XP (KB918899) Security Update for Windows XP (KB920214) Security Update for Windows XP (KB920670) Security Update for Windows XP (KB920683) Security Update for Windows XP (KB921398) Security Update for Windows XP (KB921883) Security Update for Windows XP (KB922616) Shockwave SonixStorage1.82 TaxCut 2003 TaxCut 2004 TaxCut Deluxe 2005 THE OC - FOX Broadcasting Screen Saver TopSearch Update for Windows XP (KB894391) Update for Windows XP (KB896727) Update for Windows XP (KB898461) Update for Windows XP (KB900485) Update for Windows XP (KB910437) Update for Windows XP (KB916595) Viewpoint Media Player VPN Client VX2 Cleaner plug-in for Ad-Aware SE Winamp (remove only) Windows Backup Utility Windows Installer 3.1 (KB893803) Windows Installer 3.1 (KB893803) Windows Media Format Runtime Windows Media Player 10 Windows Support Tools Windows XP Hotfix - KB834707 Windows XP Hotfix - KB867282 Windows XP Hotfix - KB873333 Windows XP Hotfix - KB873339 Windows XP Hotfix - KB885250 Windows XP Hotfix - KB885835 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB885884 Windows XP Hotfix - KB886185 Windows XP Hotfix - KB887472 Windows XP Hotfix - KB887742 Windows XP Hotfix - KB888113 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB890047 Windows XP Hotfix - KB890175 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB890923 Windows XP Hotfix - KB891781 Windows XP Hotfix - KB893066 Windows XP Hotfix - KB893086 Windows XP Service Pack 2 WinPcap 3.1 beta3 Yahoo! Toolbar

I dont see TV Media installed although mad.dll is related to it, you do have Top Search installed that may be part of it.

Go to your Add-Remove Programs in the Control Panel and uninstall Top Search. If it wont let you, run this tool.

http://www.spywareremove.com/removeTopSearch.html


Run HJT Scan Only and see if O20 - AppInit_DLLs: mad.dll is still present , if so, try and remove it now. Post a new log.

Ken