What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

HijackThis Log: Please help advise

6 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Logfile of HijackThis v1.99.1
Scan saved at 16:28:39, on 13/09/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
C:\Program Files\Belkin\Belkin Wireless Network Utility\WLanCfgG.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AOL 9.0\aoltray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\DOCUME~1\COLDFI~1.XXC\LOCALS~1\Temp\Rar$EX00.469\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.co.uk/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DK
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.co.uk/myway
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.co.uk/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.co.uk/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell.co.uk/myway
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe"
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [BuildBU] c:\dell\bldbubg.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: AOL 9.0 Tray Icon.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS…er.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by115fd.bay115.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://download.shockwave.com/pub/otoy/OTOYAX.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab34246.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave.com/content/heavyweap…aploader_v6.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~3\msgrapp.dll" (file missing)
O18 - Filter: application/x-internet-signup - {A173B69A-1F9B-4823-9FDA-412F641E65D6} - C:\Program Files\Tiscali\Tiscali Internet\dlls\tiscalifilter.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Belkin Wireless USB Network Adapter (Belkin Wireless USB Network Adapter Service) - Unknown owner - C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
Post #2
AndyJames, :D

Welcome to Tom Coyote. Your log isn't looking to bad. :thumbup:


Your HIJACKTHIS program is current, but it is very important that it resides in its own folder.
We will use Hijackthis (HJT) to make changes to your system and HJT will make backups of those changes,
If HJT is not in its own folder, those backups could be lost.

Easy to fix.
  • just go to My Computer > YOUR C:\ DRIVE > Program Files and create a new folder and name it Hijackthis .
  • Now scroll to where you have HJT currently, right click on the HJT icon and select CUT .
  • Now open the new folder you just created and right click within that folder and select PASTE .
  • Now HJT should reside in C:\Program Files\Hijackthis\Hijackthis.exe





Open HJT Scan Only, close your browser and all open windows, check these and click on Fix Checked

This is set by Dell on there systems , they are in alliance with myway search, its considered spyware by some and is not needed, it has been known to degrade performane.
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DK

Fix this one
O4 - Startup: PowerReg Scheduler.exe


Outside of that, you have a clean log, :thumbup: what issues are you having??
Post #3 last edited
Hi ken, thanks for the help :) Well there was a point where i was having these pop up ads coming up, and other adware such as "Purity scan" and spyware.IPsearch" i think it was. There was also a pop up message coming up every 30 seconds saying "Please connect your phoneline into the modem", which i knew to be some sort of adware. So i did a system restore to a few days back and most of the problems have gone, but i wanted to make sure there werent any dodgy things left on the system. So now im not having any problems with the system, and again thankyou for cheking the log out. Regards; AJ
Post #4
AndyJames :D

There could be some bits and pieces of that infection left over, why dont you run the trial of Ewido, it will flush out any bad files that may still be lurking.

Download and install the 30 day trial of Ewido Anti Spyware to your desktop.
  • Once you have downloaded Ewido Anti-Spyware, locate the icon on the desktop and double-click it to launch the set up program.
  • Once the setup is complete you will need run Ewido and update the definition files.
  • On the main screen select the icon Update then select the Update now link.
  • Next select the Start Update button, the update will start and a progress bar will show the updates being installed.
  • Once the update has completed select the Scanner icon at the top of the screen, then select the Settings tab.
  • Once in the Settings screen click on Recommended actions and then select Quarantine <– Dont forget this
  • Under Reports
  • Select Automatically generate report after every scan
  • Un-Select Only if threats were found
  • Close Ewido Anti-Spyware <– Do not run the scan yet.
Boot your computer into Safemode
  • Go to Start> Shut Off your Computer> Restart
  • As the computer starts to boot-up, Tap the F8 KEY somewhat rapidly.
  • This will bring up a menu.
  • Use the Up and Down Arrow Keys to scroll up to SAFEMODE
  • Then press the Enter on your Keyboard
IMPORTANT: Do not open any other windows or programs while ewido is scanning, it may interfere with the scanning process:
  • Launch Ewido-Anti-Spyware by double-clicking the icon on your desktop.
  • Select the Scanner icon at the top and then the Scan tab then click on Complete System Scan.
  • Ewido will now begin the scanning process, be patient this may take a little time.
  • Once the scan is complete do the following:
  • If you have any infections you will prompted, then select Apply all actions
  • Next select the Reports icon at the top.
  • Select the Save report as button in the lower left hand of the screen and save it to a text file on your system
  • make sure to remember where you saved that file, this is important
  • Close Ewido


Reboot and run this system cleaner

Please download ATF Cleaner by Atribune.
  • This program is for XP and Windows 2000 only
  • Double-click ATF-Cleaner.exe to run the program.
  • Under Main choose: Select All
  • Click the Empty Selected button.


Let me see your new HJT log along with the Ewido report, and if all is well at this point I am going to have you flush out System Restore and set a new clean Restore Point. There could be bad files in this program.
Post #6
Hi ken, i apologise for the delay;

I was surprised to see i had 255 malware files detected by ewido, including the ones i thought i got rid of using system restore; purity scan etc.

Here are the new logs;

———————————————————
ewido anti-spyware - Scan Report
———————————————————

+ Created at: 13:31:04 17/09/2006

+ Scan result:



C:\Documents and Settings\coldfire.XXCOLDFIREXX\Local Settings\Temp\Fadpu16E.sys -> Backdoor.Genlot.DX : No action taken.
C:\WINDOWS\Downloaded Program Files\rdgGB2404.exe -> Dialer.GBDialer.g : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Local Settings\Temp\win57.tmp.exe -> Dialer.InstantAccess.k : No action taken.
C:\WINDOWS\Temp\win77.tmp -> Dialer.InstantAccess.k : No action taken.
C:\WINDOWS\Temp\winB2.tmp.exe -> Dialer.InstantAccess.k : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Local Settings\Temp\win50.tmp.exe -> Downloader.Obfuscated.a : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Local Settings\Temp\win83.tmp.exe -> Downloader.Obfuscated.a : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Local Settings\Temp\OA.exe -> Downloader.PurityScan.cq : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Local Settings\Temp\win7C.tmp.exe -> Hijacker.Small : No action taken.
C:\WINDOWS\Downloaded Program Files\popcaploader.dll -> Not-A-Virus.Downloader.Win32.PopCap.b : No action taken.
C:\Program Files\Network Monitor\netmon(2).exe -> Not-A-Virus.Monitor.Win32.NetMon.a : No action taken.
:mozilla.113:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.173:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.18:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.197:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.19:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.206:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.20:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.87:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.88:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.89:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.90:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.91:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.92:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.95:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.96:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.97:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.98:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Cookies\coldfire@2o7[2].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Cookies\coldfire@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
:mozilla.241:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.242:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Cookies\coldfire@adbrite[1].txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.335:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Adition : No action taken.
:mozilla.336:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Adition : No action taken.
:mozilla.365:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Adjuggler : No action taken.
:mozilla.366:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Adjuggler : No action taken.
:mozilla.108:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.109:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.110:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.111:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.112:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.36:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.38:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.39:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.40:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.41:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.76:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.77:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.78:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Cookies\coldfire@adrevolver[3].txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.369:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Adserver : No action taken.
:mozilla.370:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Adserver : No action taken.
:mozilla.142:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Adtech : No action taken.
:mozilla.143:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Adtech : No action taken.
:mozilla.79:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Adtech : No action taken.
:mozilla.80:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Adtech : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Cookies\coldfire@adtech[2].txt -> TrackingCookie.Adtech : No action taken.
:mozilla.137:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.138:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.139:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.140:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.141:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.46:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.47:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.48:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.51:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.54:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.195:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Adviva : No action taken.
:mozilla.94:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Adviva : No action taken.
:mozilla.22:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Atdmt : No action taken.
:mozilla.60:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Atdmt : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Cookies\coldfire@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken.
:mozilla.184:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Bluestreak : No action taken.
:mozilla.382:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Bluestreak : No action taken.
:mozilla.169:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.170:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.171:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.250:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.251:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.252:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.253:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.254:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.255:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.42:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.43:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.44:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.45:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.46:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.47:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.48:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.49:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.50:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.111:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Clickbank : No action taken.
:mozilla.213:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Clickhype : No action taken.
:mozilla.214:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Clickhype : No action taken.
:mozilla.198:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.284:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.285:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.199:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Coremetrics : No action taken.
:mozilla.53:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken.
:mozilla.56:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Cookies\coldfire@doubleclick[2].txt -> TrackingCookie.Doubleclick : No action taken.
C:\Documents and Settings\LocalService\Cookies\[removed][1].txt -> TrackingCookie.Enhance : No action taken.
:mozilla.299:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.124:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.125:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.127:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.128:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.129:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.367:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.368:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.225:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.226:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.227:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.228:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.229:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.254:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.255:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.256:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.51:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.52:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.54:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.55:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.56:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.57:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.58:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.59:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.60:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.61:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.62:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.63:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.64:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.314:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Gamershell : No action taken.
:mozilla.315:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Gamershell : No action taken.
:mozilla.316:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Gamershell : No action taken.
:mozilla.317:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Gamershell : No action taken.
:mozilla.318:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Gamershell : No action taken.
:mozilla.319:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Gamershell : No action taken.
:mozilla.320:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Gamershell : No action taken.
:mozilla.321:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Gamershell : No action taken.
:mozilla.322:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Gamershell : No action taken.
C:\Documents and Settings\LocalService\Cookies\[removed][2].txt -> TrackingCookie.Goclick : No action taken.
:mozilla.165:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.219:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
:mozilla.176:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.177:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.178:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.239:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.302:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.72:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.73:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.74:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.75:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.322:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Hitslink : No action taken.
:mozilla.323:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Hitslink : No action taken.
:mozilla.324:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Hitslink : No action taken.
:mozilla.325:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Hitslink : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Cookies\[removed][1].txt -> TrackingCookie.Hitslink : No action taken.
:mozilla.27:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Hotlog : No action taken.
:mozilla.277:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.278:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.279:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.106:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Mediaplex : No action taken.
:mozilla.183:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Mediaplex : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Cookies\coldfire@mediaplex[2].txt -> TrackingCookie.Mediaplex : No action taken.
:mozilla.195:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Overture : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Cookies\[removed][1].txt -> TrackingCookie.Overture : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Cookies\[removed][1].txt -> TrackingCookie.Overture : No action taken.
:mozilla.286:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.287:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.288:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.289:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.292:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.293:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.215:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Revenue : No action taken.
:mozilla.146:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.147:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.148:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.149:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.150:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.260:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.261:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.262:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.263:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.264:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Cookies\[removed][2].txt -> TrackingCookie.Sextracker : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Cookies\coldfire@sextracker[1].txt -> TrackingCookie.Sextracker : No action taken.
:mozilla.26:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Spylog : No action taken.
:mozilla.216:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Starware : No action taken.
:mozilla.217:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Starware : No action taken.
:mozilla.218:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Starware : No action taken.
:mozilla.219:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Starware : No action taken.
:mozilla.21:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Starware : No action taken.
:mozilla.22:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Starware : No action taken.
:mozilla.23:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Starware : No action taken.
:mozilla.24:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Starware : No action taken.
:mozilla.118:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.245:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.246:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.247:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.248:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.249:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Cookies\coldfire@statcounter[1].txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.114:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.115:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.116:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.117:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.93:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.94:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.96:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.98:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.243:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Targetnet : No action taken.
:mozilla.119:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.120:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.121:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.122:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.337:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Trafic : No action taken.
:mozilla.364:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Trafic : No action taken.
:mozilla.13:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.14:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.186:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.209:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.21:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.355:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.356:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.357:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.358:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.359:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.360:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.191:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Valueclick : No action taken.
:mozilla.192:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Valueclick : No action taken.
:mozilla.158:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Webtrendslive : No action taken.
:mozilla.346:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Webtrendslive : No action taken.
:mozilla.381:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Webtrendslive : No action taken.
:mozilla.333:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Xhit : No action taken.
:mozilla.334:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Xhit : No action taken.
:mozilla.152:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.153:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.17:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.18:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.19:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.20:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Cookies\[removed][2].txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.266:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.267:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.268:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\rfe16z2q.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Cookies\coldfire@zedo[1].txt -> TrackingCookie.Zedo : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Local Settings\Temp\cli7A.tmp -> Trojan.Agent.vg : No action taken.
C:\Documents and Settings\coldfire.XXCOLDFIREXX\Local Settings\Temp\win7F.tmp.exe -> Trojan.Dialer.oy : No action taken.
C:\WINDOWS\Temp\win41.tmp.exe -> Trojan.Dialer.oy : No action taken.
C:\WINDOWS\Temp\win43.tmp.exe -> Trojan.Dialer.oy : No action taken.
C:\WINDOWS\Temp\win77.tmp.exe -> Trojan.Dialer.oy : No action taken.
C:\WINDOWS\Temp\win7E.tmp.exe -> Trojan.Dialer.oy : No action taken.
C:\WINDOWS\Temp\win92.tmp.exe -> Trojan.Dialer.oy : No action taken.


::Report end









Logfile of HijackThis v1.99.1
Scan saved at 13:50:01, on 17/09/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
C:\Program Files\Belkin\Belkin Wireless Network Utility\WLanCfgG.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AOL 9.0\aoltray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.co.uk/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DK
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.co.uk/myway
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.co.uk/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.co.uk/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell.co.uk/myway
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe"
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [BuildBU] c:\dell\bldbubg.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: AOL 9.0 Tray Icon.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS…er.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by115fd.bay115.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) -
Post #7
You didnt read my instructions and follow them like I posted


Once in the Settings screen click on Recommended actions and then select Quarantine <– Dont forget this

I would run Ewido again and let it remove it all.


Also you did not post a complete log, I need to see a complete log after you run Ewido.

Ken :D
Post #8 last edited
Hi ken, i posted all the text from the log, it started with "Ewido Scan" and ended with "Report End", so i am unsure what i missed out. However i have run a new scan, and this is the log produced from it. ——————————————————— ewido anti-spyware - Scan Report ——————————————————— + Created at: 19:32:11 17/09/2006 + Scan result: :mozilla.16:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined). :mozilla.13:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined). :mozilla.14:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined). :mozilla.17:C:\Documents and Settings\coldfire.XXCOLDFIREXX\Application Data\Mozilla\Firefox\Profiles\udd7dar6.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined). ::Report end The infections from the previous scan are currently in quarantine. If there is anything else please let me know. Regards; Andy James
Post #10
Ah :D

Logfile of HijackThis v1.99.1
Scan saved at 21:20:44, on 17/09/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
C:\Program Files\Belkin\Belkin Wireless Network Utility\WLanCfgG.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AOL 9.0\aoltray.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\MindArk\Entropia Universe\ClientLoader.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\MindArk\Entropia Universe\PE.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.co.uk/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DK
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.co.uk/myway
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.co.uk/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.co.uk/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell.co.uk/myway
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe"
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [BuildBU] c:\dell\bldbubg.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: AOL 9.0 Tray Icon.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS…er.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by115fd.bay115.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://download.shockwave.com/pub/otoy/OTOYAX.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab34246.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave.com/content/heavyweap…aploader_v6.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~3\msgrapp.dll" (file missing)
O18 - Filter: application/x-internet-signup - {A173B69A-1F9B-4823-9FDA-412F641E65D6} - C:\Program Files\Tiscali\Tiscali Internet\dlls\tiscalifilter.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Belkin Wireless USB Network Adapter (Belkin Wireless USB Network Adapter Service) - Unknown owner - C:\Program Files\Belkin\Belkin Wireless Network Utility\WLService.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
Post #11
AndyJames,

Your log is clean, :thumbup: just a few options for you. These are optional and totally your call to remove.

C:\Program Files\LimeWire <– This program is legit but downloading from there site can bring you nothing but trouble. I wouldnt want it on any computer of mine. You can dump it via the Add-Remove Progams in the Control Panel.





My Way Search Assistant is not required for your system to run.

Dell said there was nothing untoward about My Way Search Assistant, despite complaints from customers that the toolbar impairs computer performance, changes browser settings and is difficult to remove. However anti-spyware firm Sunbelt Software defines My Way components as a ‘potential privacy risk’ that pose a moderate threat to users.


Remove this if you wish with HJT.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.co.uk/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DK
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.co.uk/myway
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.co.uk/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.co.uk/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell.co.uk/myway

R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll



This is Trend Micro's detection for components of the legal adware called PopCap Loader from PopCap Games company. It is a Web plug-in that provides Web update features.
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave.com/content/heavyweap…aploader_v6.cab



How did I get infected in the first place ? Read these links and find out how to prevent getting infected again.

TonyKlein CastleCops
Grinler BleepingComputer
Geeks To Go


Thanks for stopping by Tom Coyote
Post #14
Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI