What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Log and description

6 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1 last edited
Ever since I downloaded a file last night (I can provide a link if it helps.) I've been getting Charter security suite messages and a ####load of malware and memory usage. I scanned with Charter virus protection and Ewido anti Malware but they keep returning. Here is the log:

Logfile of HijackThis v1.99.1
Scan saved at 11:50:15 AM, on 8/27/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\Program Files\Charter High-Speed Security Suite\Common\FSM32.EXE
C:\PROGRA~1\CHARTE~1\backweb\3528733\Program\SERVIC~1.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\BigFix\BigFix.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fsgk32st.exe
C:\Program Files\Charter High-Speed Security Suite\backweb\3528733\Program\fspex.exe
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\FSGK32.EXE
C:\Program Files\Charter High-Speed Security Suite\backweb\3528733\program\fsbwsys.exe
C:\Program Files\Charter High-Speed Security Suite\Common\FSMA32.EXE
C:\Program Files\Charter High-Speed Security Suite\Common\FSMB32.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fssm32.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\Charter High-Speed Security Suite\Common\FCH32.EXE
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fsqh.exe
C:\Program Files\Charter High-Speed Security Suite\Common\FAMEH32.EXE
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fsrw.exe
C:\Program Files\Charter High-Speed Security Suite\FSPC\fspc.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv4.exe
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Charter High-Speed Security Suite\FWES\Program\fsdfwd.exe
C:\PROGRA~1\CHARTE~1\ANTI-S~1\fsaw.exe
C:\Program Files\Charter High-Speed Security Suite\FSGUI\fsguidll.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Owner\My Documents\Unzipped\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.emachines.com/
O1 - Hosts: 72.36.169.250 l2authd.lineage2.com
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: ToolBar888 - {CBCC61FA-0221-4ccc-B409-CEE865CACA3A} - C:\Program Files\ToolBar888\MyToolBar.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Charter High-Speed Security Suite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Charter High-Speed Security Suite\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Charter High-Speed Security Suite\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Charter High-Speed Security Suite\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\BigFix.exe
O4 - Global Startup: Charter High-Speed Security Suite.lnk = C:\Program Files\Charter High-Speed Security Suite\backweb\3528733\Program\fspex.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Block this popup - C:\Program Files\Charter High-Speed Security Suite\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Web Filter - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Charter High-Speed Security Suite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Charter High-Speed Security Suite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Web Filter - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Charter High-Speed Security Suite\FSPC\fspcmsie.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Charter High-Speed Security Suite\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield… - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Charter High-Speed Security Suite\Anti-Spyware\ieshield.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: pushow43.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Charter High-Speed Security Suite (BackWeb Plug-in - 3528733) - BackWeb Technologies Inc. - C:\PROGRA~1\CHARTE~1\backweb\3528733\Program\SERVIC~1.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fsgk32st.exe
O23 - Service: FSBWSYS - F-Secure Corp. - C:\Program Files\Charter High-Speed Security Suite\backweb\3528733\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Charter High-Speed Security Suite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Charter High-Speed Security Suite\FSPC\fshttps\fshttps.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Charter High-Speed Security Suite\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: WUSB54Gv4SVC - Unknown owner - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe" "WUSB54Gv4.exe (file missing)

Thanks in advance.
Post #2 last edited
Bump.

Edit: Here's a fresh log:

Logfile of HijackThis v1.99.1
Scan saved at 2:36:01 PM, on 8/28/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\CHARTE~1\backweb\3528733\Program\SERVIC~1.EXE
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Charter High-Speed Security Suite\backweb\3528733\Program\fspex.exe
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fsgk32st.exe
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\FSGK32.EXE
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fssm32.exe
C:\Program Files\Charter High-Speed Security Suite\backweb\3528733\program\fsbwsys.exe
C:\Program Files\Charter High-Speed Security Suite\Common\FSMA32.EXE
C:\Program Files\Charter High-Speed Security Suite\Common\FSMB32.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Charter High-Speed Security Suite\Common\FCH32.EXE
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\Program Files\Charter High-Speed Security Suite\Common\FAMEH32.EXE
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fsqh.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv4.exe
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fsrw.exe
C:\Program Files\Charter High-Speed Security Suite\FSPC\fspc.exe
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Charter High-Speed Security Suite\FWES\Program\fsdfwd.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\Program Files\Charter High-Speed Security Suite\Common\FSM32.EXE
C:\PROGRA~1\CHARTE~1\ANTI-S~1\fsaw.exe
C:\Program Files\Charter High-Speed Security Suite\FSGUI\ispnews.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Charter High-Speed Security Suite\FSGUI\fsguidll.exe
C:\Documents and Settings\Owner\My Documents\Unzipped\err31\msmnsgr.exe
C:\Program Files\BigFix\BigFix.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\My Documents\Unzipped\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.emachines.com/
O1 - Hosts: 72.36.169.250 l2authd.lineage2.com
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: ToolBar888 - {CBCC61FA-0221-4ccc-B409-CEE865CACA3A} - C:\Program Files\ToolBar888\MyToolBar.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Charter High-Speed Security Suite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Charter High-Speed Security Suite\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Charter High-Speed Security Suite\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Charter High-Speed Security Suite\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKLM\..\Run: [msmnsgr] C:\Documents and Settings\Owner\My Documents\Unzipped\err31\msmnsgr
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\BigFix.exe
O4 - Global Startup: Charter High-Speed Security Suite.lnk = C:\Program Files\Charter High-Speed Security Suite\backweb\3528733\Program\fspex.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Block this popup - C:\Program Files\Charter High-Speed Security Suite\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Web Filter - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Charter High-Speed Security Suite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Charter High-Speed Security Suite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Web Filter - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Charter High-Speed Security Suite\FSPC\fspcmsie.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Charter High-Speed Security Suite\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield… - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Charter High-Speed Security Suite\Anti-Spyware\ieshield.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: pushow43.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Charter High-Speed Security Suite (BackWeb Plug-in - 3528733) - BackWeb Technologies Inc. - C:\PROGRA~1\CHARTE~1\backweb\3528733\Program\SERVIC~1.EXE
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fsgk32st.exe
O23 - Service: FSBWSYS - F-Secure Corp. - C:\Program Files\Charter High-Speed Security Suite\backweb\3528733\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Charter High-Speed Security Suite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Charter High-Speed Security Suite\FSPC\fshttps\fshttps.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Charter High-Speed Security Suite\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: WUSB54Gv4SVC - Unknown owner - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe" "WUSB54Gv4.exe (file missing)
Post #3
Bump, again. Another fresh log:

Logfile of HijackThis v1.99.1
Scan saved at 10:25:22 AM, on 9/2/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\Program Files\Charter High-Speed Security Suite\Common\FSM32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\CHARTE~1\backweb\3528733\Program\SERVIC~1.EXE
C:\Documents and Settings\Owner\My Documents\Unzipped\err31\msmnsgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\BigFix\BigFix.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fsgk32st.exe
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\FSGK32.EXE
C:\Program Files\Charter High-Speed Security Suite\backweb\3528733\program\fsbwsys.exe
C:\Program Files\Charter High-Speed Security Suite\backweb\3528733\Program\fspex.exe
C:\Program Files\Charter High-Speed Security Suite\Common\FSMA32.EXE
C:\Program Files\Charter High-Speed Security Suite\Common\FSMB32.EXE
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fssm32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Charter High-Speed Security Suite\Common\FCH32.EXE
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fsqh.exe
C:\Program Files\Charter High-Speed Security Suite\Common\FAMEH32.EXE
C:\Program Files\Charter High-Speed Security Suite\FSPC\fspc.exe
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fsrw.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv4.exe
C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fsav32.exe
C:\Program Files\Charter High-Speed Security Suite\FWES\Program\fsdfwd.exe
C:\PROGRA~1\CHARTE~1\ANTI-S~1\fsaw.exe
C:\Program Files\Charter High-Speed Security Suite\FSGUI\fsguidll.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
c:\program files\common files\aol\1153969047\ee\aolsoftware.exe
C:\Program Files\Steam\steam.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\Desktop\New Folder (2)\Steam keys\keysteam.exe
C:\WINDOWS\system32\taskmgr.exe
c:\program files\common files\aol\1153969047\ee\aolsoftware.exe
C:\Documents and Settings\Owner\My Documents\Unzipped\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.emachines.com/
O1 - Hosts: 72.36.169.250 l2authd.lineage2.com
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Charter High-Speed Security Suite\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Charter High-Speed Security Suite\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Charter High-Speed Security Suite\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Charter High-Speed Security Suite\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKLM\..\Run: [msmnsgr] C:\Documents and Settings\Owner\My Documents\Unzipped\err31\msmnsgr
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\BigFix.exe
O4 - Global Startup: Charter High-Speed Security Suite.lnk = C:\Program Files\Charter High-Speed Security Suite\backweb\3528733\Program\fspex.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Web Filter - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Charter High-Speed Security Suite\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Charter High-Speed Security Suite\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Web Filter - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Charter High-Speed Security Suite\FSPC\fspcmsie.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Charter High-Speed Security Suite\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield… - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Charter High-Speed Security Suite\Anti-Spyware\ieshield.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Charter High-Speed Security Suite (BackWeb Plug-in - 3528733) - BackWeb Technologies Inc. - C:\PROGRA~1\CHARTE~1\backweb\3528733\Program\SERVIC~1.EXE
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fsgk32st.exe
O23 - Service: FSBWSYS - F-Secure Corp. - C:\Program Files\Charter High-Speed Security Suite\backweb\3528733\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Charter High-Speed Security Suite\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Charter High-Speed Security Suite\FSPC\fshttps\fshttps.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Charter High-Speed Security Suite\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: WUSB54Gv4SVC - Unknown owner - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe" "WUSB54Gv4.exe (file missing)
Post #5
Well, when I first posted this it was much much worse, but after getting no replies I decided to try myself, and I guess I didn't mess it up because everything works as well as it did before and I can tell most of the malware is gone. However, I can still see traces of it, about once a day I'll get a report and whenever I scan with Ewido it keeps finding the same dayam things. And on my latest logs I didn't really see anything that looked bad so, I dunno what to do. Before I fixed some stuff on HJT, I saw Pakes alot, I'm pretty sure it's gone now though. and it's just alot of resource drainers now, but I really want to get rid of them.
Post #7
——————————————————— ewido anti-spyware - Scan Report ——————————————————— + Created at: 9:25:20 PM 9/2/2006 + Scan result: C:\Documents and Settings\Owner\Local Settings\Temp\yyl2hc09.exe -> Not-A-Virus.Downloader.Win32.WinFixer.o : No action taken. C:\WINDOWS\system32\rkpvrqjn.exe -> Not-A-Virus.Downloader.Win32.WinFixer.r : No action taken. C:\Documents and Settings\Owner\My Documents\Unzipped\err31\errmess.dll -> Not-A-Virus.Monitor.Win32.Dafunk : No action taken. :mozilla.219:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.220:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.221:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.2o7 : No action taken. :mozilla.275:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.50:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.51:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.52:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.53:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.54:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.55:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Adbrite : No action taken. :mozilla.188:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Addynamix : No action taken. :mozilla.189:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Addynamix : No action taken. :mozilla.234:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Admarketplace : No action taken. :mozilla.235:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Admarketplace : No action taken. :mozilla.155:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.156:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.157:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.158:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.159:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken. :mozilla.288:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.289:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.290:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.291:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Advertising : No action taken. :mozilla.98:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Atdmt : No action taken. :mozilla.187:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Bluestreak : No action taken. :mozilla.108:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Burstbeacon : No action taken. :mozilla.100:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Burstnet : No action taken. :mozilla.101:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Burstnet : No action taken. :mozilla.102:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Burstnet : No action taken. :mozilla.230:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.231:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.232:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.233:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.247:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken. :mozilla.139:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken. :mozilla.212:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Falkag : No action taken. :mozilla.213:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Falkag : No action taken. :mozilla.214:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Falkag : No action taken. :mozilla.215:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Falkag : No action taken. :mozilla.225:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Fastclick : No action taken. :mozilla.226:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Fastclick : No action taken. :mozilla.227:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Fastclick : No action taken. :mozilla.228:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Fastclick : No action taken. :mozilla.163:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken. :mozilla.249:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.250:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.251:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Hitbox : No action taken. :mozilla.349:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Hitslink : No action taken. :mozilla.350:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Hitslink : No action taken. :mozilla.351:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Hitslink : No action taken. :mozilla.352:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Hitslink : No action taken. :mozilla.114:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Hotlog : No action taken. :mozilla.36:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Masterstats : No action taken. :mozilla.107:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Mediaplex : No action taken. :mozilla.148:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Pointroll : No action taken. :mozilla.152:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Pointroll : No action taken. :mozilla.153:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Pointroll : No action taken. :mozilla.154:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Pointroll : No action taken. :mozilla.141:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken. :mozilla.142:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken. :mozilla.263:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Reliablestats : No action taken. :mozilla.264:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Reliablestats : No action taken. :mozilla.265:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Reliablestats : No action taken. :mozilla.266:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Reliablestats : No action taken. :mozilla.267:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Reliablestats : No action taken. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Reliablestats : No action taken. :mozilla.178:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Ru4 : No action taken. :mozilla.183:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Ru4 : No action taken. :mozilla.185:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Ru4 : No action taken. :mozilla.125:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken. :mozilla.126:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken. :mozilla.127:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken. :mozilla.128:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken. :mozilla.147:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Specificclick : No action taken. :mozilla.149:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Specificclick : No action taken. :mozilla.150:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Specificclick : No action taken. :mozilla.151:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Specificclick : No action taken. :mozilla.44:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Statcounter : No action taken. :mozilla.103:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Tacoda : No action taken. :mozilla.104:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Tacoda : No action taken. :mozilla.105:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Tacoda : No action taken. :mozilla.106:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Tacoda : No action taken. :mozilla.171:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.172:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.173:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.174:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.175:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.176:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.177:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken. :mozilla.97:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Trafic : No action taken. :mozilla.260:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken. :mozilla.99:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken. :mozilla.117:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Yadro : No action taken. :mozilla.121:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken. :mozilla.122:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken. :mozilla.123:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken. :mozilla.124:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken. :mozilla.179:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Zedo : No action taken. :mozilla.180:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Zedo : No action taken. :mozilla.181:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Zedo : No action taken. :mozilla.182:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Zedo : No action taken. :mozilla.184:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\5llbi976.default\cookies.txt -> TrackingCookie.Zedo : No action taken. C:\WINDOWS\Temp\win1525.tmp.exe -> Trojan.Pakes : No action taken. C:\WINDOWS\Temp\win155E.tmp.exe -> Trojan.Pakes : No action taken. ::Report end
Post #8
hi Arimoh,

download atf cleaner>> check: select all, then click: empty selected:

http://www.atribune.org/content/view/25/2/

looks like they are in your temp folder, can also do this:

go to run>start> and type in: cleanmgr. Windows will scan. When done check these 3 and press *ok* to remove:

Temporary Files
Temporary Internet Files
Recycle Bin

you can control cookies in firefox.

see if that helps any if not post back………later

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI