Spyware / Malware / Virus Removal

HJT log

97 min read

Looking for the outcome? Ask AI

Evan G Harrelll Topic Starter

Post #1October 8, 2006, 6:32 PM UTC

Here is the log. I would appreciate any help.

Logfile of HijackThis v1.99.1
Scan saved at 1:08:27 PM, on 10/8/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\AccessDirect\dadapp.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Handspring\HOTSYNC.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Dell\AccessDirect\DadTray.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Suzette Harrel\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nytimes.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [DadApp] C:\Program Files\Dell\AccessDirect\dadapp.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Handspring\HOTSYNC.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://locator.cdn.imageservr.com
O15 - Trusted Zone: *.musicmatch.com
O15 - Trusted Zone: *.musicmatch.com (HKLM)
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/raptisoftgameloader.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/as…rl/LSSupCtl.cab
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as…rl/SymAData.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1118855504367
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} - https://a248.e.akamai.net/f/248/5462/2h/www…ol/SymDlBrg.cab
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} (Toontown Installer ActiveX Control) - http://download.toontown.com/sv1.0.15.35/ttinst.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

Thank you, Evan Harrelll

Susan528

Post #2October 9, 2006, 2:41 PM UTC

Hello Evan and Welcome to TomCoyote,

Please do the following:

Please set your system to show all files; please see here if you're unsure how to do this.

Scan with HijackThis. Place a check against each of the following:
O15 - Trusted Zone: http://locator.cdn.imageservr.com
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/raptisoftgameloader.cab
Close all windows or browsers except for Hijackthis. Click on Fix Checked when finished and exit HijackThis.

STEP 1.
======
SpySweeper
Download the trial version of Spy Sweeper from Here

Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it. If you receive alerts from your firewall, allow all activities for Spy Sweeper)

If you are taken to the internet page, just close the page.
You will be prompted to check for updated definitions, please do so.
(This may take several minutes)
Click on Options > Sweep Options and check Sweep all Folders on Selected drives. Check Local Disc C. Under What to Sweep, check every box.
Click on Sweep and allow it to fully scan your system.If you are prompted to restart the computer, do so immediately. This is a necessary step to kill the infection!
When the sweep has finished, click Remove. Click Select All and then Next
From 'Results', select the Session Log tab. Click Save to File and save the log somewhere convenient.

STEP 2.
======
The AVG anti-spyware program’s detection rate is excellent. After the Trial has expired, the auto updates and real time protection stop but you can still update it manually and run scans anytime you want.

First download AVG anti-spyware 7.5 from HERE and save that file to your
desktop.
This is a 30 day trial of the program

Once you have downloaded AVG anti-spyware , locate the icon on the desktop
and double-click it to launch the set up program.
Once the setup is complete you will need run AVG anti-spyware and update the definition
files.
On the main screen select the icon "Update" then select the "
Update now" link.
- Next select the "Start Update" button, the update will start and a
  progress bar will show the updates being installed.
Once the update has completed select the "Scanner" icon at the top of
the screen, then select the "Settings" tab.
Once in the Settings screen click on "Recommended actions" and then
select "Quarantine".
Under "Reports"
- Select "Automatically generate report after every scan"
- Un-Select "Only if threats were found"

Close AVG anti-spyware , Do Not run a scan just yet, we will shortly.

Reboot your computer into SafeMode. You can do this by restarting
your computer and continually tapping the F8 key until a menu appears.

Use your up arrow key to highlight SafeMode then hit enter.
IMPORTANT: Do not open any other windows or
programs while AVG anti-spyware is scanning, it may interfere with the scanning proccess:
Lauch ewido-anti-spyware by double-clicking the icon on your desktop.
Select the "Scanner" icon at the top and then the "Scan" tab
then click on "Complete System Scan".
AVG anti-spyware will now begin the scanning process, be patient this may take a little
time.
Once the scan is complete do the following:
If you have any infections you will prompted, then select "Apply all
actions"
Next select the "Reports" icon at the top.
Select the "Save report as" button in the lower left hand of the
screen and save it to a text file on your system (make sure to remember where
you saved that file, this is important).
Close AVG anti-spyware and reboot your system back into Normal Mode and post the
results of the AVG anti-spyware report scan.

Please post the results from SpySweeper, AVG anti-spyware report and a new hijackthis log.

Evan G Harrelll

Post #3October 10, 2006, 11:33 AM UTC

Thank you, Susan528 I have gone through the steps you laid out, and the logs are below. Thanks again. Now, both Spy Sweeper and AVG run on startup. Doesn't running two security programs simultaneously create issues? Evan SPY SWEEPER LOG: Keylogger Shield: On BHO Shield: On IE Security Shield: On Alternate Data Stream (ADS) Execution Shield: On Startup Shield: On Common Ad Sites Shield: Off Hosts File Shield: On Spy Communication Shield: On ActiveX Shield: On Windows Messenger Service Shield: On IE Favorites Shield: On Spy Installation Shield: On Memory Shield: On IE Hijack Shield: On IE Tracking Cookies Shield: Off 8:33 PM: Shield States 8:33 PM: Spyware Definitions: 778 8:33 PM: Spy Sweeper 5.0.5.1286 started 7:46 PM: | End of Session, Monday, October 09, 2006 | Operation: File Access Target: Source: C:\PROGRAM FILES\GOOGLE\GOOGLE DESKTOP SEARCH\GOOGLEDESKTOPCRAWL.EXE 7:46 PM: Tamper Detection 7:46 PM: Your spyware definitions have been updated. Keylogger Shield: On BHO Shield: On IE Security Shield: On Alternate Data Stream (ADS) Execution Shield: On Startup Shield: On Common Ad Sites Shield: Off Hosts File Shield: On Spy Communication Shield: On ActiveX Shield: On Windows Messenger Service Shield: On IE Favorites Shield: On Spy Installation Shield: On Memory Shield: On IE Hijack Shield: On IE Tracking Cookies Shield: Off 7:43 PM: Shield States 7:43 PM: Spyware Definitions: 691 7:42 PM: Spy Sweeper 5.0.5.1286 started 7:42 PM: Spy Sweeper 5.0.5.1286 started 7:42 PM: | Start of Session, Monday, October 09, 2006 | ******** 8:30 PM: Removal process completed. Elapsed time 00:02:35 8:30 PM: Preparing to restart your computer. Please wait… 8:30 PM: Quarantining All Traces: yadro cookie 8:30 PM: Quarantining All Traces: xiti cookie 8:30 PM: Quarantining All Traces: stlyrics cookie 8:30 PM: Quarantining All Traces: sex cookie 8:30 PM: Quarantining All Traces: epilot cookie 8:30 PM: Quarantining All Traces: 123count cookie 8:30 PM: Quarantining All Traces: versiontracker cookie 8:30 PM: Quarantining All Traces: tradedoubler cookie 8:30 PM: Quarantining All Traces: reliablestats cookie 8:30 PM: Quarantining All Traces: clicktracks cookie 8:30 PM: Quarantining All Traces: spywarestormer cookie 8:30 PM: Quarantining All Traces: spylog cookie 8:30 PM: Quarantining All Traces: servlet cookie 8:30 PM: Quarantining All Traces: searchadnetwork cookie 8:30 PM: Quarantining All Traces: search123 cookie 8:30 PM: Quarantining All Traces: qsrch cookie 8:30 PM: Quarantining All Traces: pub cookie 8:30 PM: Quarantining All Traces: ping cookie 8:30 PM: Quarantining All Traces: partypoker cookie 8:30 PM: Quarantining All Traces: one-time-offer cookie 8:30 PM: Quarantining All Traces: mygeek cookie 8:30 PM: Quarantining All Traces: monstermarketplace cookie 8:30 PM: Quarantining All Traces: ugo cookie 8:30 PM: Quarantining All Traces: webtrends cookie 8:30 PM: Quarantining All Traces: domainsponsor cookie 8:30 PM: Quarantining All Traces: kount cookie 8:30 PM: Quarantining All Traces: howstuffworks cookie 8:30 PM: Quarantining All Traces: hotlog cookie 8:30 PM: Quarantining All Traces: gamespy cookie 8:30 PM: Quarantining All Traces: fortunecity cookie 8:30 PM: Quarantining All Traces: findwhat cookie 8:30 PM: Quarantining All Traces: euniverseads cookie 8:30 PM: Quarantining All Traces: empnads cookie 8:30 PM: Quarantining All Traces: did-it cookie 8:30 PM: Quarantining All Traces: customer cookie 8:30 PM: Quarantining All Traces: goclick cookie 8:30 PM: Quarantining All Traces: enhance cookie 8:30 PM: Quarantining All Traces: adultrevenueservice cookie 8:30 PM: Quarantining All Traces: adultfriendfinder cookie 8:30 PM: Quarantining All Traces: x10 cookie 8:30 PM: Quarantining All Traces: uproar cookie 8:30 PM: Quarantining All Traces: cc214142 cookie 8:30 PM: Quarantining All Traces: ads.adsag cookie 8:30 PM: Quarantining All Traces: adprofile cookie 8:30 PM: Quarantining All Traces: precisead cookie 8:30 PM: Quarantining All Traces: ad-logics cookie 8:30 PM: Quarantining All Traces: 3 cookie 8:30 PM: Quarantining All Traces: 6425137 cookie 8:30 PM: Quarantining All Traces: sandboxer cookie 8:30 PM: Quarantining All Traces: seeq cookie 8:30 PM: Quarantining All Traces: realtracker cookie 8:30 PM: Quarantining All Traces: tracking cookie 8:30 PM: Quarantining All Traces: tickle cookie 8:30 PM: Quarantining All Traces: onestat.com cookie 8:30 PM: Quarantining All Traces: dealtime cookie 8:30 PM: Quarantining All Traces: starware.com cookie 8:30 PM: Quarantining All Traces: web-stat cookie 8:30 PM: Quarantining All Traces: server.iad.liveperson cookie 8:30 PM: Quarantining All Traces: revenue.net cookie 8:30 PM: Quarantining All Traces: qksrv cookie 8:30 PM: Quarantining All Traces: pro-market cookie 8:30 PM: Quarantining All Traces: pricegrabber cookie 8:30 PM: Quarantining All Traces: valuead cookie 8:30 PM: Quarantining All Traces: passion cookie 8:30 PM: Quarantining All Traces: touchclarity cookie 8:30 PM: Quarantining All Traces: military cookie 8:30 PM: Quarantining All Traces: l2m.net cookie 8:30 PM: Quarantining All Traces: infospace cookie 8:30 PM: Quarantining All Traces: ic-live cookie 8:30 PM: Quarantining All Traces: screensavers.com cookie 8:30 PM: Quarantining All Traces: clickandtrack cookie 8:30 PM: Quarantining All Traces: humanclick cookie 8:30 PM: Quarantining All Traces: go2net.com cookie 8:30 PM: Quarantining All Traces: 360i cookie 8:30 PM: Quarantining All Traces: adbureau cookie 8:30 PM: Quarantining All Traces: bizrate cookie 8:30 PM: Quarantining All Traces: bilbo.counted.com cookie 8:30 PM: Quarantining All Traces: banner cookie 8:30 PM: Quarantining All Traces: bannerspace cookie 8:30 PM: Quarantining All Traces: a cookie 8:30 PM: Quarantining All Traces: askmen cookie 8:30 PM: Quarantining All Traces: adserver.trb cookie 8:30 PM: Quarantining All Traces: belointeractive cookie 8:30 PM: Quarantining All Traces: adecn cookie 8:30 PM: Quarantining All Traces: ad-rotator cookie 8:30 PM: Quarantining All Traces: 64.62.232 cookie 8:30 PM: Quarantining All Traces: burstbeacon cookie 8:30 PM: Quarantining All Traces: trb.com cookie 8:30 PM: Quarantining All Traces: adjuggler cookie 8:30 PM: Quarantining All Traces: 247realmedia cookie 8:30 PM: Quarantining All Traces: zedo cookie 8:30 PM: Quarantining All Traces: adserver cookie 8:30 PM: Quarantining All Traces: videodome cookie 8:30 PM: Quarantining All Traces: tripod cookie 8:30 PM: Quarantining All Traces: tribalfusion cookie 8:30 PM: Quarantining All Traces: trafficmp cookie 8:30 PM: Quarantining All Traces: targetnet cookie 8:30 PM: Quarantining All Traces: tacoda cookie 8:30 PM: Quarantining All Traces: webtrendslive cookie 8:30 PM: Quarantining All Traces: statcounter cookie 8:30 PM: Quarantining All Traces: serving-sys cookie 8:30 PM: Quarantining All Traces: tvguide cookie 8:30 PM: Quarantining All Traces: rightmedia cookie 8:30 PM: Quarantining All Traces: reunion cookie 8:30 PM: Quarantining All Traces: rednova cookie 8:30 PM: Quarantining All Traces: realmedia cookie 8:30 PM: Quarantining All Traces: questionmarket cookie 8:30 PM: Quarantining All Traces: overture cookie 8:30 PM: Quarantining All Traces: nextag cookie 8:30 PM: Quarantining All Traces: mediaplex cookie 8:30 PM: Quarantining All Traces: maxserving cookie 8:30 PM: Quarantining All Traces: exitexchange cookie 8:30 PM: Quarantining All Traces: ru4 cookie 8:30 PM: Quarantining All Traces: directtrack cookie 8:30 PM: Quarantining All Traces: centrport net cookie 8:30 PM: Quarantining All Traces: casalemedia cookie 8:30 PM: Quarantining All Traces: burstnet cookie 8:30 PM: Quarantining All Traces: bs.serving-sys cookie 8:30 PM: Quarantining All Traces: bravenet cookie 8:30 PM: Quarantining All Traces: bluestreak cookie 8:30 PM: Quarantining All Traces: atwola cookie 8:30 PM: Quarantining All Traces: belnk cookie 8:30 PM: Quarantining All Traces: atlas dmt cookie 8:30 PM: Quarantining All Traces: ask cookie 8:30 PM: Quarantining All Traces: falkag cookie 8:30 PM: Quarantining All Traces: apmebf cookie 8:30 PM: Quarantining All Traces: anm.co.uk cookie 8:30 PM: Quarantining All Traces: advertising cookie 8:30 PM: Quarantining All Traces: adtech cookie 8:30 PM: Quarantining All Traces: pointroll cookie 8:30 PM: Quarantining All Traces: addynamix cookie 8:30 PM: Quarantining All Traces: adrevolver cookie 8:30 PM: Quarantining All Traces: specificclick.com cookie 8:30 PM: Quarantining All Traces: hbmediapro cookie 8:30 PM: Quarantining All Traces: adlegend cookie 8:30 PM: Quarantining All Traces: adknowledge cookie 8:30 PM: Quarantining All Traces: yieldmanager cookie 8:29 PM: Quarantining All Traces: about cookie 8:29 PM: Quarantining All Traces: go.com cookie 8:29 PM: Quarantining All Traces: websponsors cookie 8:29 PM: Quarantining All Traces: 2o7.net cookie 8:29 PM: Quarantining All Traces: myaffiliateprogram.com cookie 8:29 PM: Quarantining All Traces: linksynergy cookie 8:29 PM: Quarantining All Traces: vs toolbar 8:29 PM: C:\WINDOWS\SYSTEM32\jkhfc.dll is in use. It will be removed on reboot. 8:29 PM: virtumonde is in use. It will be removed on reboot. 8:29 PM: Quarantining All Traces: virtumonde 8:28 PM: Removal process initiated 8:26 PM: Traces Found: 471 8:26 PM: Full Sweep has completed. Elapsed time 00:40:23 8:26 PM: File Sweep Complete, Elapsed Time: 00:36:11 8:11 PM: C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP618\A0115940.dll (ID = 373314) 7:52 PM: C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP618\A0115863.dll (ID = 373314) 7:52 PM: Found Adware: vs toolbar 7:50 PM: Starting File Sweep 7:50 PM: Cookie Sweep Complete, Elapsed Time: 00:01:10 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@zedo[2].txt (ID = 3762) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2142) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@yieldmanager[2].txt (ID = 3749) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@yadro[1].txt (ID = 3743) 7:50 PM: Found Spy Cookie: yadro cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@xiti[1].txt (ID = 3717) 7:50 PM: Found Spy Cookie: xiti cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3332) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed]-stat[1].txt (ID = 3649) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3600) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3462) 7:50 PM: Found Spy Cookie: stlyrics cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3348) 7:50 PM: Found Spy Cookie: sex cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3312) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3298) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3032) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2622) 7:50 PM: Found Spy Cookie: epilot cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2335) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2246) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@www.123count[1].txt (ID = 1928) 7:50 PM: Found Spy Cookie: 123count cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@wrigley.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@webxites.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3242) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@videodome[1].txt (ID = 3638) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@versiontracker[1].txt (ID = 3636) 7:50 PM: Found Spy Cookie: versiontracker cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@usnews.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@usatoday1.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tvguide[2].txt (ID = 3599) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3442) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tripod[2].txt (ID = 3591) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tribalfusion[2].txt (ID = 3589) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@trb[2].txt (ID = 3587) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@trafficmp[1].txt (ID = 3581) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tradedoubler[2].txt (ID = 3575) 7:50 PM: Found Spy Cookie: tradedoubler cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tracking[4].txt (ID = 3571) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tracking[2].txt (ID = 3571) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tracking[1].txt (ID = 3571) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tickle[1].txt (ID = 3529) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2070) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tcompany.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tacoda[1].txt (ID = 6444) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3254) 7:50 PM: Found Spy Cookie: reliablestats cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2407) 7:50 PM: Found Spy Cookie: clicktracks cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@statcounter[2].txt (ID = 3447) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3098) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2506) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@spywarestormer[1].txt (ID = 3417) 7:50 PM: Found Spy Cookie: spywarestormer cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@spylog[1].txt (ID = 3415) 7:50 PM: Found Spy Cookie: spylog cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@sonycorporate.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@servlet[2].txt (ID = 3345) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@servlet[1].txt (ID = 3345) 7:50 PM: Found Spy Cookie: servlet cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@serving-sys[1].txt (ID = 3343) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed]-stat[1].txt (ID = 3649) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3341) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@searchadnetwork[2].txt (ID = 3311) 7:50 PM: Found Spy Cookie: searchadnetwork cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@search123[1].txt (ID = 3305) 7:50 PM: Found Spy Cookie: search123 cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2534) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3600) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@saksfifthavenue.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3600) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2070) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2071) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@riptownmedia.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@rightmedia[1].txt (ID = 3259) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@revenue[1].txt (ID = 3257) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@reunion[1].txt (ID = 3255) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@realmedia[2].txt (ID = 3235) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2528) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@questionmarket[2].txt (ID = 3217) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@qsrch[1].txt (ID = 3215) 7:50 PM: Found Spy Cookie: qsrch cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@qksrv[2].txt (ID = 3213) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@pub[1].txt (ID = 3205) 7:50 PM: Found Spy Cookie: pub cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@pro-market[1].txt (ID = 3197) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@pricegrabber[1].txt (ID = 3185) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ping[2].txt (ID = 3137) 7:50 PM: Found Spy Cookie: ping cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3106) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@passion[2].txt (ID = 3113) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@partypoker[2].txt (ID = 3111) 7:50 PM: Found Spy Cookie: partypoker cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@partygaming.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@overture[2].txt (ID = 3105) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@one-time-offer[1].txt (ID = 3095) 7:50 PM: Found Spy Cookie: one-time-offer cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@northwestairlines.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@nextag[1].txt (ID = 5014) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@nbcuniversal.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@nasdaq.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2295) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@mygeek[1].txt (ID = 3041) 7:50 PM: Found Spy Cookie: mygeek cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@msnportal.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@monstermarketplace[2].txt (ID = 3006) 7:50 PM: Found Spy Cookie: monstermarketplace cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@military[2].txt (ID = 2996) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@microsofteup.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3609) 7:50 PM: Found Spy Cookie: ugo cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@maxserving[1].txt (ID = 2966) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3669) 7:50 PM: Found Spy Cookie: webtrends cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@leeenterprises.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2535) 7:50 PM: Found Spy Cookie: domainsponsor cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@l2m[1].txt (ID = 2913) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@kount[2].txt (ID = 2911) 7:50 PM: Found Spy Cookie: kount cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3588) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@journalregistercompany.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@jcrew.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ic-live[1].txt (ID = 2821) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@howstuffworks[1].txt (ID = 2805) 7:50 PM: Found Spy Cookie: howstuffworks cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@hotlog[1].txt (ID = 2801) 7:50 PM: Found Spy Cookie: hotlog cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2295) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2397) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@highbeam.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@hertz.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2810) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@harpo.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3442) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@go[1].txt (ID = 2728) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@gamespy[1].txt (ID = 2719) 7:50 PM: Found Spy Cookie: gamespy cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3588) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@fortunecity[2].txt (ID = 2686) 7:50 PM: Found Spy Cookie: fortunecity cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@findwhat[1].txt (ID = 2674) 7:50 PM: Found Spy Cookie: findwhat cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@exitexchange[1].txt (ID = 2633) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@euniverseads[1].txt (ID = 2629) 7:50 PM: Found Spy Cookie: euniverseads cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2060) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@empnads[2].txt (ID = 5012) 7:50 PM: Found Spy Cookie: empnads cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@edge.ru4[2].txt (ID = 3269) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@dowjones.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2293) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@did-it[1].txt (ID = 2523) 7:50 PM: Found Spy Cookie: did-it cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@dealtime[1].txt (ID = 2505) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@dcs8ir0f010000oyioyaka1kl_8j7n[2].txt (ID = 3673) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3106) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3106) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3106) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@customer[1].txt (ID = 2481) 7:50 PM: Found Spy Cookie: customer cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ct.360i[1].txt (ID = 1962) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@cratebarrel.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2634) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2634) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2634) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3530) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@cnn.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@cneteurope.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2060) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@chicagosuntimes.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@centrport[2].txt (ID = 2374) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@cbs.112.2o7[2].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@campingworld.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2733) 7:50 PM: Found Spy Cookie: goclick cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2614) 7:50 PM: Found Spy Cookie: enhance cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@burstnet[1].txt (ID = 2336) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed]-sys[1].txt (ID = 2330) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@brguest.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@bravenet[2].txt (ID = 2322) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@bluestreak[2].txt (ID = 2314) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@bizrate[1].txt (ID = 2308) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2306) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@belointeractive[2].txt (ID = 2294) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@belnk[1].txt (ID = 2292) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@banner[2].txt (ID = 2276) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@bannerspace[2].txt (ID = 2284) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@atwola[2].txt (ID = 2255) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2293) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ask[2].txt (ID = 2245) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@askmen[1].txt (ID = 2247) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2650) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@arnoldpalmer.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@apmebf[1].txt (ID = 2229) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2223) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 6445) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 6445) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@americanexpress.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@advertisingcom.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adultrevenueservice[1].txt (ID = 2167) 7:50 PM: Found Spy Cookie: adultrevenueservice cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adultfriendfinder[2].txt (ID = 2165) 7:50 PM: Found Spy Cookie: adultfriendfinder cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adtech[2].txt (ID = 2155) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adserver[1].txt (ID = 2141) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ads.x10[1].txt (ID = 3712) 7:50 PM: Found Spy Cookie: x10 cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3613) 7:50 PM: Found Spy Cookie: uproar cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3148) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ads.cc214142[2].txt (ID = 2367) 7:50 PM: Found Spy Cookie: cc214142 cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2295) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2108) 7:50 PM: Found Spy Cookie: ads.adsag cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2062) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adrevolver[4].txt (ID = 2088) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adrevolver[3].txt (ID = 2088) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adrevolver[1].txt (ID = 2088) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adprofile[1].txt (ID = 2084) 7:50 PM: Found Spy Cookie: adprofile cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3400) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3182) 7:50 PM: Found Spy Cookie: precisead cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adlegend[1].txt (ID = 2074) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adknowledge[2].txt (ID = 2072) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3751) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ad-logics[2].txt (ID = 2049) 7:50 PM: Found Spy Cookie: ad-logics cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@about[2].txt (ID = 2037) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3665) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2650) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@85.17.3[2].txt (ID = 1960) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@85.17.3[1].txt (ID = 1960) 7:50 PM: Found Spy Cookie: 3 cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@6425137[1].txt (ID = 1989) 7:50 PM: Found Spy Cookie: 6425137 cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@64.62.232[1].txt (ID = 1987) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@2o7[1].txt (ID = 1957) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@247realmedia[2].txt (ID = 1953) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@0[2].txt (ID = 3282) 7:50 PM: Found Spy Cookie: sandboxer cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@zedo[1].txt (ID = 3762) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2142) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2866) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3332) 7:49 PM: Found Spy Cookie: seeq cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3298) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3032) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2997) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2337) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2335) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3242) 7:49 PM: Found Spy Cookie: realtracker cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tvguide[2].txt (ID = 3599) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tripod[1].txt (ID = 3591) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tribalfusion[1].txt (ID = 3589) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@trb[1].txt (ID = 3587) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@trafficmp[2].txt (ID = 3581) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tracking[2].txt (ID = 3571) 7:49 PM: Found Spy Cookie: tracking cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tickle[1].txt (ID = 3529) 7:49 PM: Found Spy Cookie: tickle cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2295) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tacoda[1].txt (ID = 6444) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@statcounter[1].txt (ID = 3447) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3098) 7:49 PM: Found Spy Cookie: onestat.com cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2506) 7:49 PM: Found Spy Cookie: dealtime cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@starware[2].txt (ID = 3441) 7:49 PM: Found Spy Cookie: starware.com cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@serving-sys[3].txt (ID = 3343) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@serving-sys[1].txt (ID = 3343) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed]-stat[2].txt (ID = 3649) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed]-stat[2].txt (ID = 3649) 7:49 PM: Found Spy Cookie: web-stat cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3341) 7:49 PM: Found Spy Cookie: server.iad.liveperson cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3600) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3600) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2071) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@revenue[1].txt (ID = 3257) 7:49 PM: Found Spy Cookie: revenue.net cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@reunion[2].txt (ID = 3255) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@rednova[2].txt (ID = 3245) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@realmedia[2].txt (ID = 3235) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2528) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@questionmarket[1].txt (ID = 3217) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@qksrv[2].txt (ID = 3213) 7:49 PM: Found Spy Cookie: qksrv cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@pro-market[2].txt (ID = 3197) 7:49 PM: Found Spy Cookie: pro-market cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@pricegrabber[2].txt (ID = 3185) 7:49 PM: Found Spy Cookie: pricegrabber cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3627) 7:49 PM: Found Spy Cookie: valuead cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3106) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@passion[1].txt (ID = 3113) 7:49 PM: Found Spy Cookie: passion cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3567) 7:49 PM: Found Spy Cookie: touchclarity cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@overture[1].txt (ID = 3105) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3600) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@nextag[2].txt (ID = 5014) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@military[1].txt (ID = 2996) 7:49 PM: Found Spy Cookie: military cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@maxserving[2].txt (ID = 2966) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@l2m[1].txt (ID = 2913) 7:49 PM: Found Spy Cookie: l2m.net cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2060) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@infospace[1].txt (ID = 2865) 7:49 PM: Found Spy Cookie: infospace cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@ic-live[1].txt (ID = 2821) 7:49 PM: Found Spy Cookie: ic-live cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3298) 7:49 PM: Found Spy Cookie: screensavers.com cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2295) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2397) 7:49 PM: Found Spy Cookie: clickandtrack cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2810) 7:49 PM: Found Spy Cookie: humanclick cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@go[1].txt (ID = 2728) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@go2net[1].txt (ID = 2730) 7:49 PM: Found Spy Cookie: go2net.com cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@exitexchange[1].txt (ID = 2633) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@edge.ru4[2].txt (ID = 3269) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2293) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@directtrack[2].txt (ID = 2527) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@ct.360i[2].txt (ID = 1962) 7:49 PM: Found Spy Cookie: 360i cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2060) 7:49 PM: Found Spy Cookie: adbureau cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@cratebarrel.112.2o7[1].txt (ID = 1958) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@centrport[1].txt (ID = 2374) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@cbs.112.2o7[1].txt (ID = 1958) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3763) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@burstnet[2].txt (ID = 2336) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed]-sys[2].txt (ID = 2330) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@bravenet[1].txt (ID = 2322) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@bluestreak[2].txt (ID = 2314) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@bizrate[1].txt (ID = 2308) 7:49 PM: Found Spy Cookie: bizrate cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2306) 7:49 PM: Found Spy Cookie: bilbo.counted.com cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@belointeractive[1].txt (ID = 2294) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@belnk[1].txt (ID = 2292) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@banner[1].txt (ID = 2276) 7:49 PM: Found Spy Cookie: banner cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@bannerspace[1].txt (ID = 2284) 7:49 PM: Found Spy Cookie: bannerspace cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@a[1].txt (ID = 2027) 7:49 PM: Found Spy Cookie: a cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@atwola[2].txt (ID = 2255) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2293) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@ask[1].txt (ID = 2245) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@askmen[1].txt (ID = 2247) 7:49 PM: Found Spy Cookie: askmen cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2650) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2650) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@apmebf[2].txt (ID = 2229) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adtech[2].txt (ID = 2155) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2147) 7:49 PM: Found Spy Cookie: adserver.trb cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3148) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2295) 7:49 PM: Found Spy Cookie: belointeractive cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2062) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adrevolver[3].txt (ID = 2088) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adrevolver[1].txt (ID = 2088) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3400) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2768) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adlegend[2].txt (ID = 2074) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adknowledge[2].txt (ID = 2072) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adecn[2].txt (ID = 2063) 7:49 PM: Found Spy Cookie: adecn cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3751) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@ad-rotator[1].txt (ID = 2051) 7:49 PM: Found Spy Cookie: ad-rotator cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@about[2].txt (ID = 2037) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3665) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@64.62.232[1].txt (ID = 1987) 7:49 PM: Found Spy Cookie: 64.62.232 cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@2o7[2].txt (ID = 1957) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@247realmedia[1].txt (ID = 1953) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@112.2o7[1].txt (ID = 1958) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@zedo[2].txt (ID = 3762) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick [removed][1].txt (ID = 2337) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick [removed][2].txt (ID = 2335) 7:49 PM: Found Spy Cookie: burstbeacon cookie 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@tribalfusion[2].txt (ID = 3589) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@trb[1].txt (ID = 3587) 7:49 PM: Found Spy Cookie: trb.com cookie 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@trafficmp[2].txt (ID = 3581) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@tacoda[2].txt (ID = 6444) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@statcounter[1].txt (ID = 3447) 7:49 PM: c

Susan528

Post #4October 10, 2006, 11:41 AM UTC

Looks like you will need to post (reply) more than once please since it was cut off.

Evan G Harrelll

Post #5October 10, 2006, 12:45 PM UTC

I'll Try again. SPY SWEEPER LOG: Keylogger Shield: On BHO Shield: On IE Security Shield: On Alternate Data Stream (ADS) Execution Shield: On Startup Shield: On Common Ad Sites Shield: Off Hosts File Shield: On Spy Communication Shield: On ActiveX Shield: On Windows Messenger Service Shield: On IE Favorites Shield: On Spy Installation Shield: On Memory Shield: On IE Hijack Shield: On IE Tracking Cookies Shield: Off 8:33 PM: Shield States 8:33 PM: Spyware Definitions: 778 8:33 PM: Spy Sweeper 5.0.5.1286 started 7:46 PM: | End of Session, Monday, October 09, 2006 | Operation: File Access Target: Source: C:\PROGRAM FILES\GOOGLE\GOOGLE DESKTOP SEARCH\GOOGLEDESKTOPCRAWL.EXE 7:46 PM: Tamper Detection 7:46 PM: Your spyware definitions have been updated. Keylogger Shield: On BHO Shield: On IE Security Shield: On Alternate Data Stream (ADS) Execution Shield: On Startup Shield: On Common Ad Sites Shield: Off Hosts File Shield: On Spy Communication Shield: On ActiveX Shield: On Windows Messenger Service Shield: On IE Favorites Shield: On Spy Installation Shield: On Memory Shield: On IE Hijack Shield: On IE Tracking Cookies Shield: Off 7:43 PM: Shield States 7:43 PM: Spyware Definitions: 691 7:42 PM: Spy Sweeper 5.0.5.1286 started 7:42 PM: Spy Sweeper 5.0.5.1286 started 7:42 PM: | Start of Session, Monday, October 09, 2006 | ******** 8:30 PM: Removal process completed. Elapsed time 00:02:35 8:30 PM: Preparing to restart your computer. Please wait… 8:30 PM: Quarantining All Traces: yadro cookie 8:30 PM: Quarantining All Traces: xiti cookie 8:30 PM: Quarantining All Traces: stlyrics cookie 8:30 PM: Quarantining All Traces: sex cookie 8:30 PM: Quarantining All Traces: epilot cookie 8:30 PM: Quarantining All Traces: 123count cookie 8:30 PM: Quarantining All Traces: versiontracker cookie 8:30 PM: Quarantining All Traces: tradedoubler cookie 8:30 PM: Quarantining All Traces: reliablestats cookie 8:30 PM: Quarantining All Traces: clicktracks cookie 8:30 PM: Quarantining All Traces: spywarestormer cookie 8:30 PM: Quarantining All Traces: spylog cookie 8:30 PM: Quarantining All Traces: servlet cookie 8:30 PM: Quarantining All Traces: searchadnetwork cookie 8:30 PM: Quarantining All Traces: search123 cookie 8:30 PM: Quarantining All Traces: qsrch cookie 8:30 PM: Quarantining All Traces: pub cookie 8:30 PM: Quarantining All Traces: ping cookie 8:30 PM: Quarantining All Traces: partypoker cookie 8:30 PM: Quarantining All Traces: one-time-offer cookie 8:30 PM: Quarantining All Traces: mygeek cookie 8:30 PM: Quarantining All Traces: monstermarketplace cookie 8:30 PM: Quarantining All Traces: ugo cookie 8:30 PM: Quarantining All Traces: webtrends cookie 8:30 PM: Quarantining All Traces: domainsponsor cookie 8:30 PM: Quarantining All Traces: kount cookie 8:30 PM: Quarantining All Traces: howstuffworks cookie 8:30 PM: Quarantining All Traces: hotlog cookie 8:30 PM: Quarantining All Traces: gamespy cookie 8:30 PM: Quarantining All Traces: fortunecity cookie 8:30 PM: Quarantining All Traces: findwhat cookie 8:30 PM: Quarantining All Traces: euniverseads cookie 8:30 PM: Quarantining All Traces: empnads cookie 8:30 PM: Quarantining All Traces: did-it cookie 8:30 PM: Quarantining All Traces: customer cookie 8:30 PM: Quarantining All Traces: goclick cookie 8:30 PM: Quarantining All Traces: enhance cookie 8:30 PM: Quarantining All Traces: adultrevenueservice cookie 8:30 PM: Quarantining All Traces: adultfriendfinder cookie 8:30 PM: Quarantining All Traces: x10 cookie 8:30 PM: Quarantining All Traces: uproar cookie 8:30 PM: Quarantining All Traces: cc214142 cookie 8:30 PM: Quarantining All Traces: ads.adsag cookie 8:30 PM: Quarantining All Traces: adprofile cookie 8:30 PM: Quarantining All Traces: precisead cookie 8:30 PM: Quarantining All Traces: ad-logics cookie 8:30 PM: Quarantining All Traces: 3 cookie 8:30 PM: Quarantining All Traces: 6425137 cookie 8:30 PM: Quarantining All Traces: sandboxer cookie 8:30 PM: Quarantining All Traces: seeq cookie 8:30 PM: Quarantining All Traces: realtracker cookie 8:30 PM: Quarantining All Traces: tracking cookie 8:30 PM: Quarantining All Traces: tickle cookie 8:30 PM: Quarantining All Traces: onestat.com cookie 8:30 PM: Quarantining All Traces: dealtime cookie 8:30 PM: Quarantining All Traces: starware.com cookie 8:30 PM: Quarantining All Traces: web-stat cookie 8:30 PM: Quarantining All Traces: server.iad.liveperson cookie 8:30 PM: Quarantining All Traces: revenue.net cookie 8:30 PM: Quarantining All Traces: qksrv cookie 8:30 PM: Quarantining All Traces: pro-market cookie 8:30 PM: Quarantining All Traces: pricegrabber cookie 8:30 PM: Quarantining All Traces: valuead cookie 8:30 PM: Quarantining All Traces: passion cookie 8:30 PM: Quarantining All Traces: touchclarity cookie 8:30 PM: Quarantining All Traces: military cookie 8:30 PM: Quarantining All Traces: l2m.net cookie 8:30 PM: Quarantining All Traces: infospace cookie 8:30 PM: Quarantining All Traces: ic-live cookie 8:30 PM: Quarantining All Traces: screensavers.com cookie 8:30 PM: Quarantining All Traces: clickandtrack cookie 8:30 PM: Quarantining All Traces: humanclick cookie 8:30 PM: Quarantining All Traces: go2net.com cookie 8:30 PM: Quarantining All Traces: 360i cookie 8:30 PM: Quarantining All Traces: adbureau cookie 8:30 PM: Quarantining All Traces: bizrate cookie 8:30 PM: Quarantining All Traces: bilbo.counted.com cookie 8:30 PM: Quarantining All Traces: banner cookie 8:30 PM: Quarantining All Traces: bannerspace cookie 8:30 PM: Quarantining All Traces: a cookie 8:30 PM: Quarantining All Traces: askmen cookie 8:30 PM: Quarantining All Traces: adserver.trb cookie 8:30 PM: Quarantining All Traces: belointeractive cookie 8:30 PM: Quarantining All Traces: adecn cookie 8:30 PM: Quarantining All Traces: ad-rotator cookie 8:30 PM: Quarantining All Traces: 64.62.232 cookie 8:30 PM: Quarantining All Traces: burstbeacon cookie 8:30 PM: Quarantining All Traces: trb.com cookie 8:30 PM: Quarantining All Traces: adjuggler cookie 8:30 PM: Quarantining All Traces: 247realmedia cookie 8:30 PM: Quarantining All Traces: zedo cookie 8:30 PM: Quarantining All Traces: adserver cookie 8:30 PM: Quarantining All Traces: videodome cookie 8:30 PM: Quarantining All Traces: tripod cookie 8:30 PM: Quarantining All Traces: tribalfusion cookie 8:30 PM: Quarantining All Traces: trafficmp cookie 8:30 PM: Quarantining All Traces: targetnet cookie 8:30 PM: Quarantining All Traces: tacoda cookie 8:30 PM: Quarantining All Traces: webtrendslive cookie 8:30 PM: Quarantining All Traces: statcounter cookie 8:30 PM: Quarantining All Traces: serving-sys cookie 8:30 PM: Quarantining All Traces: tvguide cookie 8:30 PM: Quarantining All Traces: rightmedia cookie 8:30 PM: Quarantining All Traces: reunion cookie 8:30 PM: Quarantining All Traces: rednova cookie 8:30 PM: Quarantining All Traces: realmedia cookie 8:30 PM: Quarantining All Traces: questionmarket cookie 8:30 PM: Quarantining All Traces: overture cookie 8:30 PM: Quarantining All Traces: nextag cookie 8:30 PM: Quarantining All Traces: mediaplex cookie 8:30 PM: Quarantining All Traces: maxserving cookie 8:30 PM: Quarantining All Traces: exitexchange cookie 8:30 PM: Quarantining All Traces: ru4 cookie 8:30 PM: Quarantining All Traces: directtrack cookie 8:30 PM: Quarantining All Traces: centrport net cookie 8:30 PM: Quarantining All Traces: casalemedia cookie 8:30 PM: Quarantining All Traces: burstnet cookie 8:30 PM: Quarantining All Traces: bs.serving-sys cookie 8:30 PM: Quarantining All Traces: bravenet cookie 8:30 PM: Quarantining All Traces: bluestreak cookie 8:30 PM: Quarantining All Traces: atwola cookie 8:30 PM: Quarantining All Traces: belnk cookie 8:30 PM: Quarantining All Traces: atlas dmt cookie 8:30 PM: Quarantining All Traces: ask cookie 8:30 PM: Quarantining All Traces: falkag cookie 8:30 PM: Quarantining All Traces: apmebf cookie 8:30 PM: Quarantining All Traces: anm.co.uk cookie 8:30 PM: Quarantining All Traces: advertising cookie 8:30 PM: Quarantining All Traces: adtech cookie 8:30 PM: Quarantining All Traces: pointroll cookie 8:30 PM: Quarantining All Traces: addynamix cookie 8:30 PM: Quarantining All Traces: adrevolver cookie 8:30 PM: Quarantining All Traces: specificclick.com cookie 8:30 PM: Quarantining All Traces: hbmediapro cookie 8:30 PM: Quarantining All Traces: adlegend cookie 8:30 PM: Quarantining All Traces: adknowledge cookie 8:30 PM: Quarantining All Traces: yieldmanager cookie 8:29 PM: Quarantining All Traces: about cookie 8:29 PM: Quarantining All Traces: go.com cookie 8:29 PM: Quarantining All Traces: websponsors cookie 8:29 PM: Quarantining All Traces: 2o7.net cookie 8:29 PM: Quarantining All Traces: myaffiliateprogram.com cookie 8:29 PM: Quarantining All Traces: linksynergy cookie 8:29 PM: Quarantining All Traces: vs toolbar 8:29 PM: C:\WINDOWS\SYSTEM32\jkhfc.dll is in use. It will be removed on reboot. 8:29 PM: virtumonde is in use. It will be removed on reboot. 8:29 PM: Quarantining All Traces: virtumonde 8:28 PM: Removal process initiated 8:26 PM: Traces Found: 471 8:26 PM: Full Sweep has completed. Elapsed time 00:40:23 8:26 PM: File Sweep Complete, Elapsed Time: 00:36:11 8:11 PM: C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP618\A0115940.dll (ID = 373314) 7:52 PM: C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP618\A0115863.dll (ID = 373314) 7:52 PM: Found Adware: vs toolbar 7:50 PM: Starting File Sweep 7:50 PM: Cookie Sweep Complete, Elapsed Time: 00:01:10 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@zedo[2].txt (ID = 3762) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2142) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@yieldmanager[2].txt (ID = 3749) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@yadro[1].txt (ID = 3743) 7:50 PM: Found Spy Cookie: yadro cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@xiti[1].txt (ID = 3717) 7:50 PM: Found Spy Cookie: xiti cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3332) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed]-stat[1].txt (ID = 3649) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3600) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3462) 7:50 PM: Found Spy Cookie: stlyrics cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3348) 7:50 PM: Found Spy Cookie: sex cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3312) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3298) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3032) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2622) 7:50 PM: Found Spy Cookie: epilot cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2335) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2246) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@www.123count[1].txt (ID = 1928) 7:50 PM: Found Spy Cookie: 123count cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@wrigley.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@webxites.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3242) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@videodome[1].txt (ID = 3638) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@versiontracker[1].txt (ID = 3636) 7:50 PM: Found Spy Cookie: versiontracker cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@usnews.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@usatoday1.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tvguide[2].txt (ID = 3599) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3442) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tripod[2].txt (ID = 3591) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tribalfusion[2].txt (ID = 3589) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@trb[2].txt (ID = 3587) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@trafficmp[1].txt (ID = 3581) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tradedoubler[2].txt (ID = 3575) 7:50 PM: Found Spy Cookie: tradedoubler cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tracking[4].txt (ID = 3571) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tracking[2].txt (ID = 3571) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tracking[1].txt (ID = 3571) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tickle[1].txt (ID = 3529) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2070) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tcompany.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tacoda[1].txt (ID = 6444) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3254) 7:50 PM: Found Spy Cookie: reliablestats cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2407) 7:50 PM: Found Spy Cookie: clicktracks cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@statcounter[2].txt (ID = 3447) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3098) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2506) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@spywarestormer[1].txt (ID = 3417) 7:50 PM: Found Spy Cookie: spywarestormer cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@spylog[1].txt (ID = 3415) 7:50 PM: Found Spy Cookie: spylog cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@sonycorporate.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@servlet[2].txt (ID = 3345) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@servlet[1].txt (ID = 3345) 7:50 PM: Found Spy Cookie: servlet cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@serving-sys[1].txt (ID = 3343) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed]-stat[1].txt (ID = 3649) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3341) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@searchadnetwork[2].txt (ID = 3311) 7:50 PM: Found Spy Cookie: searchadnetwork cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@search123[1].txt (ID = 3305) 7:50 PM: Found Spy Cookie: search123 cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2534) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3600) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@saksfifthavenue.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3600) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2070) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2071) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@riptownmedia.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@rightmedia[1].txt (ID = 3259) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@revenue[1].txt (ID = 3257) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@reunion[1].txt (ID = 3255) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@realmedia[2].txt (ID = 3235) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2528) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@questionmarket[2].txt (ID = 3217) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@qsrch[1].txt (ID = 3215) 7:50 PM: Found Spy Cookie: qsrch cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@qksrv[2].txt (ID = 3213) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@pub[1].txt (ID = 3205) 7:50 PM: Found Spy Cookie: pub cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@pro-market[1].txt (ID = 3197) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@pricegrabber[1].txt (ID = 3185) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ping[2].txt (ID = 3137) 7:50 PM: Found Spy Cookie: ping cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3106) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@passion[2].txt (ID = 3113) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@partypoker[2].txt (ID = 3111) 7:50 PM: Found Spy Cookie: partypoker cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@partygaming.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@overture[2].txt (ID = 3105) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@one-time-offer[1].txt (ID = 3095) 7:50 PM: Found Spy Cookie: one-time-offer cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@northwestairlines.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@nextag[1].txt (ID = 5014) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@nbcuniversal.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@nasdaq.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2295) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@mygeek[1].txt (ID = 3041) 7:50 PM: Found Spy Cookie: mygeek cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@msnportal.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@monstermarketplace[2].txt (ID = 3006) 7:50 PM: Found Spy Cookie: monstermarketplace cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@military[2].txt (ID = 2996) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@microsofteup.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3609) 7:50 PM: Found Spy Cookie: ugo cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@maxserving[1].txt (ID = 2966) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3669) 7:50 PM: Found Spy Cookie: webtrends cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@leeenterprises.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2535) 7:50 PM: Found Spy Cookie: domainsponsor cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@l2m[1].txt (ID = 2913) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@kount[2].txt (ID = 2911) 7:50 PM: Found Spy Cookie: kount cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3588) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@journalregistercompany.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@jcrew.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ic-live[1].txt (ID = 2821) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@howstuffworks[1].txt (ID = 2805) 7:50 PM: Found Spy Cookie: howstuffworks cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@hotlog[1].txt (ID = 2801) 7:50 PM: Found Spy Cookie: hotlog cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2295) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2397) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@highbeam.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@hertz.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2810) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@harpo.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3442) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@go[1].txt (ID = 2728) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@gamespy[1].txt (ID = 2719) 7:50 PM: Found Spy Cookie: gamespy cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3588) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@fortunecity[2].txt (ID = 2686) 7:50 PM: Found Spy Cookie: fortunecity cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@findwhat[1].txt (ID = 2674) 7:50 PM: Found Spy Cookie: findwhat cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@exitexchange[1].txt (ID = 2633) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@euniverseads[1].txt (ID = 2629) 7:50 PM: Found Spy Cookie: euniverseads cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2060) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@empnads[2].txt (ID = 5012) 7:50 PM: Found Spy Cookie: empnads cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@edge.ru4[2].txt (ID = 3269) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@dowjones.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2293) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@did-it[1].txt (ID = 2523) 7:50 PM: Found Spy Cookie: did-it cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@dealtime[1].txt (ID = 2505) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@dcs8ir0f010000oyioyaka1kl_8j7n[2].txt (ID = 3673) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3106) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3106) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3106) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@customer[1].txt (ID = 2481) 7:50 PM: Found Spy Cookie: customer cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ct.360i[1].txt (ID = 1962) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@cratebarrel.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2634) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2634) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2634) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3530) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@cnn.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@cneteurope.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2060) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@chicagosuntimes.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@centrport[2].txt (ID = 2374) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@cbs.112.2o7[2].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@campingworld.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2733) 7:50 PM: Found Spy Cookie: goclick cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2614) 7:50 PM: Found Spy Cookie: enhance cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@burstnet[1].txt (ID = 2336) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed]-sys[1].txt (ID = 2330) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@brguest.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@bravenet[2].txt (ID = 2322) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@bluestreak[2].txt (ID = 2314) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@bizrate[1].txt (ID = 2308) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2306) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@belointeractive[2].txt (ID = 2294) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@belnk[1].txt (ID = 2292) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@banner[2].txt (ID = 2276) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@bannerspace[2].txt (ID = 2284) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@atwola[2].txt (ID = 2255) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2293) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ask[2].txt (ID = 2245) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@askmen[1].txt (ID = 2247) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2650) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@arnoldpalmer.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@apmebf[1].txt (ID = 2229) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2223) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 6445) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 6445) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@americanexpress.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@advertisingcom.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adultrevenueservice[1].txt (ID = 2167) 7:50 PM: Found Spy Cookie: adultrevenueservice cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adultfriendfinder[2].txt (ID = 2165) 7:50 PM: Found Spy Cookie: adultfriendfinder cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adtech[2].txt (ID = 2155) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adserver[1].txt (ID = 2141) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ads.x10[1].txt (ID = 3712) 7:50 PM: Found Spy Cookie: x10 cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3613) 7:50 PM: Found Spy Cookie: uproar cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3148) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ads.cc214142[2].txt (ID = 2367) 7:50 PM: Found Spy Cookie: cc214142 cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2295) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2108) 7:50 PM: Found Spy Cookie: ads.adsag cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2062) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adrevolver[4].txt (ID = 2088) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adrevolver[3].txt (ID = 2088) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adrevolver[1].txt (ID = 2088) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adprofile[1].txt (ID = 2084) 7:50 PM: Found Spy Cookie: adprofile cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3400) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3182) 7:50 PM: Found Spy Cookie: precisead cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adlegend[1].txt (ID = 2074) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adknowledge[2].txt (ID = 2072) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3751) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ad-logics[2].txt (ID = 2049) 7:50 PM: Found Spy Cookie: ad-logics cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@about[2].txt (ID = 2037) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3665) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2650) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@85.17.3[2].txt (ID = 1960) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@85.17.3[1].txt (ID = 1960) 7:50 PM: Found Spy Cookie: 3 cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@6425137[1].txt (ID = 1989) 7:50 PM: Found Spy Cookie: 6425137 cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@64.62.232[1].txt (ID = 1987) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@2o7[1].txt (ID = 1957) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@247realmedia[2].txt (ID = 1953) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@0[2].txt (ID = 3282) 7:50 PM: Found Spy Cookie: sandboxer cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@zedo[1].txt (ID = 3762) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2142) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2866) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3332) 7:49 PM: Found Spy Cookie: seeq cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3298) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3032) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2997) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2337) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2335) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3242) 7:49 PM: Found Spy Cookie: realtracker cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tvguide[2].txt (ID = 3599) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tripod[1].txt (ID = 3591) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tribalfusion[1].txt (ID = 3589) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@trb[1].txt (ID = 3587) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@trafficmp[2].txt (ID = 3581) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tracking[2].txt (ID = 3571) 7:49 PM: Found Spy Cookie: tracking cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tickle[1].txt (ID = 3529) 7:49 PM: Found Spy Cookie: tickle cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2295) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tacoda[1].txt (ID = 6444) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@statcounter[1].txt (ID = 3447) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3098) 7:49 PM: Found Spy Cookie: onestat.com cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2506) 7:49 PM: Found Spy Cookie: dealtime cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@starware[2].txt (ID = 3441) 7:49 PM: Found Spy Cookie: starware.com cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@serving-sys[3].txt (ID = 3343) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@serving-sys[1].txt (ID = 3343) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed]-stat[2].txt (ID = 3649) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed]-stat[2].txt (ID = 3649) 7:49 PM: Found Spy Cookie: web-stat cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3341) 7:49 PM: Found Spy Cookie: server.iad.liveperson cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3600) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3600) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2071) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@revenue[1].txt (ID = 3257) 7:49 PM: Found Spy Cookie: revenue.net cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@reunion[2].txt (ID = 3255) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@rednova[2].txt (ID = 3245) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@realmedia[2].txt (ID = 3235) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2528) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@questionmarket[1].txt (ID = 3217) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@qksrv[2].txt (ID = 3213) 7:49 PM: Found Spy Cookie: qksrv cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@pro-market[2].txt (ID = 3197) 7:49 PM: Found Spy Cookie: pro-market cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@pricegrabber[2].txt (ID = 3185) 7:49 PM: Found Spy Cookie: pricegrabber cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3627) 7:49 PM: Found Spy Cookie: valuead cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3106) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@passion[1].txt (ID = 3113) 7:49 PM: Found Spy Cookie: passion cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3567) 7:49 PM: Found Spy Cookie: touchclarity cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@overture[1].txt (ID = 3105) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3600) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@nextag[2].txt (ID = 5014) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@military[1].txt (ID = 2996) 7:49 PM: Found Spy Cookie: military cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@maxserving[2].txt (ID = 2966) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@l2m[1].txt (ID = 2913) 7:49 PM: Found Spy Cookie: l2m.net cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2060) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@infospace[1].txt (ID = 2865) 7:49 PM: Found Spy Cookie: infospace cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@ic-live[1].txt (ID = 2821) 7:49 PM: Found Spy Cookie: ic-live cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3298) 7:49 PM: Found Spy Cookie: screensavers.com cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2295) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2397) 7:49 PM: Found Spy Cookie: clickandtrack cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2810) 7:49 PM: Found Spy Cookie: humanclick cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@go[1].txt (ID = 2728) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@go2net[1].txt (ID = 2730) 7:49 PM: Found Spy Cookie: go2net.com cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@exitexchange[1].txt (ID = 2633) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@edge.ru4[2].txt (ID = 3269) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2293) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@directtrack[2].txt (ID = 2527) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@ct.360i[2].txt (ID = 1962) 7:49 PM: Found Spy Cookie: 360i cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2060) 7:49 PM: Found Spy Cookie: adbureau cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@cratebarrel.112.2o7[1].txt (ID = 1958) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@centrport[1].txt (ID = 2374) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@cbs.112.2o7[1].txt (ID = 1958) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3763) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@burstnet[2].txt (ID = 2336) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed]-sys[2].txt (ID = 2330) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@bravenet[1].txt (ID = 2322) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@bluestreak[2].txt (ID = 2314) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@bizrate[1].txt (ID = 2308) 7:49 PM: Found Spy Cookie: bizrate cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2306) 7:49 PM: Found Spy Cookie: bilbo.counted.com cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@belointeractive[1].txt (ID = 2294) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@belnk[1].txt (ID = 2292) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@banner[1].txt (ID = 2276) 7:49 PM: Found Spy Cookie: banner cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@bannerspace[1].txt (ID = 2284) 7:49 PM: Found Spy Cookie: bannerspace cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@a[1].txt (ID = 2027) 7:49 PM: Found Spy Cookie: a cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@atwola[2].txt (ID = 2255) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2293) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@ask[1].txt (ID = 2245) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@askmen[1].txt (ID = 2247) 7:49 PM: Found Spy Cookie: askmen cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2650) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2650) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@apmebf[2].txt (ID = 2229) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adtech[2].txt (ID = 2155) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2147) 7:49 PM: Found Spy Cookie: adserver.trb cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3148) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2295) 7:49 PM: Found Spy Cookie: belointeractive cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2062) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adrevolver[3].txt (ID = 2088) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adrevolver[1].txt (ID = 2088) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3400) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2768) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adlegend[2].txt (ID = 2074) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adknowledge[2].txt (ID = 2072) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adecn[2].txt (ID = 2063) 7:49 PM: Found Spy Cookie: adecn cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3751) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@ad-rotator[1].txt (ID = 2051) 7:49 PM: Found Spy Cookie: ad-rotator cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@about[2].txt (ID = 2037) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3665) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@64.62.232[1].txt (ID = 1987) 7:49 PM: Found Spy Cookie: 64.62.232 cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@2o7[2].txt (ID = 1957) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@247realmedia[1].txt (ID = 1953) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@112.2o7[1].txt (ID = 1958) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@zedo[2].txt (ID = 3762) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick [removed][1].txt (ID = 2337) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick [removed][2].txt (ID = 2335) 7:49 PM: Found Spy Cookie: burstbeacon cookie 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@tribalfusion[2].txt (ID = 3589) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@trb[1].txt (ID = 3587) 7:49 PM: Found Spy Cookie: trb.com cookie 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@trafficmp[2].txt (ID = 3581) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@tacoda[2].txt (ID = 6444) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@statcounter[1].txt (ID = 3447) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick [removed][1].txt (ID = 272

Susan528

Post #6October 10, 2006, 2:32 PM UTC

It was cut off again. I am sorry. I would also like to see the AVG log. You need to make multiple posts please.

Evan G Harrelll

Post #7October 11, 2006, 2:21 AM UTC

Susan528 - Thanks for your patience. I will try again. I have checked the post length, etc. I will post in four different posts. Here first is the AVG LOG. AVG Anti-Spyware - Scan Report ——————————————————— + Created at: 5:30:30 AM 10/10/2006 + Scan result: C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll -> Adware.Aws : Cleaned. C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP629\A0121198.dll -> Logger.VBStat.e : Cleaned. C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP629\A0121199.dll -> Logger.VBStat.e : Cleaned. C:\WINDOWS\Downloaded Program Files\popcaploader.dll -> Not-A-Virus.Downloader.Win32.PopCap.b : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\ICD1.tmp\UWA6P_0001_N91M1807NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.o : Cleaned. C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UWA6P_0001_N91M1807NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.o : Cleaned. C:\WINDOWS\Downloaded Program Files\UWA6P_0001_N91M1807NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.o : Cleaned. C:\WINDOWS\SYSTEM32\aagjrsek.exe -> Not-A-Virus.Downloader.Win32.WinFixer.r : Cleaned. C:\WINDOWS\SYSTEM32\cuatvask.exe -> Not-A-Virus.Downloader.Win32.WinFixer.r : Cleaned. C:\WINDOWS\SYSTEM32\daffifef.exe -> Not-A-Virus.Downloader.Win32.WinFixer.r : Cleaned. C:\WINDOWS\SYSTEM32\fdvlrufc.exe -> Not-A-Virus.Downloader.Win32.WinFixer.r : Cleaned. C:\WINDOWS\SYSTEM32\fvbocmyn.exe -> Not-A-Virus.Downloader.Win32.WinFixer.r : Cleaned. C:\WINDOWS\SYSTEM32\ioajcisw.exe -> Not-A-Virus.Downloader.Win32.WinFixer.r : Cleaned. C:\WINDOWS\SYSTEM32\ksjigarb.exe -> Not-A-Virus.Downloader.Win32.WinFixer.r : Cleaned. C:\WINDOWS\SYSTEM32\mmiurmyh.exe -> Not-A-Virus.Downloader.Win32.WinFixer.r : Cleaned. C:\WINDOWS\SYSTEM32\mntkscdb.exe -> Not-A-Virus.Downloader.Win32.WinFixer.r : Cleaned. C:\WINDOWS\SYSTEM32\niupujji.exe -> Not-A-Virus.Downloader.Win32.WinFixer.r : Cleaned. C:\WINDOWS\SYSTEM32\okidoton.exe -> Not-A-Virus.Downloader.Win32.WinFixer.r : Cleaned. C:\WINDOWS\SYSTEM32\rjkjoslj.exe -> Not-A-Virus.Downloader.Win32.WinFixer.r : Cleaned. C:\WINDOWS\SYSTEM32\uqowqewd.exe -> Not-A-Virus.Downloader.Win32.WinFixer.r : Cleaned. C:\WINDOWS\SYSTEM32\wynkuuyr.exe -> Not-A-Virus.Downloader.Win32.WinFixer.r : Cleaned. C:\WINDOWS\SYSTEM32\xgnpcnsb.exe -> Not-A-Virus.Downloader.Win32.WinFixer.r : Cleaned. C:\WINDOWS\SYSTEM32\xupyqnwr.exe -> Not-A-Virus.Downloader.Win32.WinFixer.r : Cleaned. C:\Documents and Settings\Patrick Harrel\Local Settings\Temp\Cookies\patrick harrel@2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@americanexpress.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@cbs.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@dowjones.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@honfurniture.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette harrel@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette [removed][1].txt -> TrackingCookie.Addynamix : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette [removed][2].txt -> TrackingCookie.Adjuggler : Cleaned. C:\Documents and Settings\Evan Harrel\Cookies\evan harrel@admarketplace[1].txt -> TrackingCookie.Admarketplace : Cleaned. C:\Documents and Settings\Patrick Harrel\Cookies\patrick harrel@admarketplace[1].txt -> TrackingCookie.Admarketplace : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette [removed][1].txt -> TrackingCookie.Admarketplace : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette [removed][1].txt -> TrackingCookie.Adserver : Cleaned. C:\Documents and Settings\Evan Harrel\Cookies\evan harrel@adtrak[2].txt -> TrackingCookie.Adtrak : Cleaned. C:\Documents and Settings\Will Harrel\Cookies\will harrel@adtrak[1].txt -> TrackingCookie.Adtrak : Cleaned. C:\Documents and Settings\Patrick Harrel\Local Settings\Temp\Cookies\patrick harrel@advertising[2].txt -> TrackingCookie.Advertising : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@advertising[1].txt -> TrackingCookie.Advertising : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@bfast[1].txt -> TrackingCookie.Bfast : Cleaned. C:\Documents and Settings\Will Harrel\Cookies\will harrel@bfast[1].txt -> TrackingCookie.Bfast : Cleaned. C:\Documents and Settings\Evan Harrel\Cookies\evan [removed][2].txt -> TrackingCookie.Bridgetrack : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette [removed][1].txt -> TrackingCookie.Bridgetrack : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette [removed][1].txt -> TrackingCookie.Bridgetrack : Cleaned. C:\Documents and Settings\Will Harrel\Cookies\will [removed][2].txt -> TrackingCookie.Bridgetrack : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette [removed][1].txt -> TrackingCookie.Burstbeacon : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned. C:\Documents and Settings\Evan Harrel\Cookies\evan harrel@com[2].txt -> TrackingCookie.Com : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette harrel@com[1].txt -> TrackingCookie.Com : Cleaned. C:\Documents and Settings\Will Harrel\Cookies\will harrel@com[2].txt -> TrackingCookie.Com : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette harrel@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Cleaned. C:\Documents and Settings\Patrick Harrel\Local Settings\Temp\Cookies\patrick harrel@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@doubleclick[2].txt -> TrackingCookie.Doubleclick : Cleaned. C:\Documents and Settings\Will Harrel\Cookies\will harrel@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned. C:\Documents and Settings\Evan Harrel\Cookies\evan [removed][1].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Evan Harrel\Cookies\evan [removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Evan Harrel\Cookies\evan [removed][1].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Evan Harrel\Cookies\evan [removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Evan Harrel\Cookies\evan [removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette [removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette [removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette [removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette [removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette [removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette [removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette [removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette [removed][1].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Patrick Harrel\Cookies\patrick [removed][1].txt -> TrackingCookie.Euroclick : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette [removed][2].txt -> TrackingCookie.Euroclick : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette [removed][1].txt -> TrackingCookie.Falkag : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned. C:\Documents and Settings\Will Harrel\Cookies\will harrel@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette [removed][1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette [removed][1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Will Harrel\Cookies\will [removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Will Harrel\Cookies\will [removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Will Harrel\Cookies\will [removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Will Harrel\Cookies\will [removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Will Harrel\Cookies\will [removed][1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Will Harrel\Cookies\will [removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Will Harrel\Cookies\will harrel@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Evan Harrel\Cookies\evan harrel@ivwbox[2].txt -> TrackingCookie.Ivwbox : Cleaned. C:\Documents and Settings\Evan Harrel\Cookies\evan [removed][2].txt -> TrackingCookie.Liveperson : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette [removed][2].txt -> TrackingCookie.Liveperson : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette [removed][2].txt -> TrackingCookie.Liveperson : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette [removed][1].txt -> TrackingCookie.Pointroll : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette [removed][1].txt -> TrackingCookie.Realcastmedia : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@edge.ru4[2].txt -> TrackingCookie.Ru4 : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette [removed][1].txt -> TrackingCookie.Smartadserver : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette [removed][2].txt -> TrackingCookie.Specificclick : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette harrel@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette [removed][1].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Evan Harrel\Cookies\evan harrel@login.tracking101[1].txt -> TrackingCookie.Tracking101 : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette harrel@login.tracking101[2].txt -> TrackingCookie.Tracking101 : Cleaned. C:\Documents and Settings\Will Harrel\Cookies\will harrel@login.tracking101[2].txt -> TrackingCookie.Tracking101 : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@trafficmp[1].txt -> TrackingCookie.Trafficmp : Cleaned. C:\Documents and Settings\Evan Harrel\Cookies\evan harrel@trafic[1].txt -> TrackingCookie.Trafic : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned. C:\Documents and Settings\Evan Harrel\Cookies\evan [removed][1].txt -> TrackingCookie.Valueclick : Cleaned. C:\Documents and Settings\Evan Harrel\Cookies\evan harrel@valueclick[1].txt -> TrackingCookie.Valueclick : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette [removed][2].txt -> TrackingCookie.Valueclick : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette harrel@valueclick[2].txt -> TrackingCookie.Valueclick : Cleaned. C:\Documents and Settings\Will Harrel\Cookies\will harrel@valueclick[1].txt -> TrackingCookie.Valueclick : Cleaned. C:\Documents and Settings\Evan Harrel\Cookies\evan harrel@webstat[2].txt -> TrackingCookie.Web-stat : Cleaned. C:\Documents and Settings\Suzette Harrel\Cookies\suzette harrel@webstat[1].txt -> TrackingCookie.Web-stat : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette [removed][2].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\Documents and Settings\Suzette Harrel\Local Settings\Temp\Cookies\suzette harrel@zedo[1].txt -> TrackingCookie.Zedo : Cleaned. C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP629\A0121212.dll -> Trojan.BHO.g : Cleaned. ::Report end

Evan G Harrelll

Post #8October 11, 2006, 2:23 AM UTC

Here is the HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 6:14:20 AM, on 10/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\AccessDirect\dadapp.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Handspring\HOTSYNC.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Suzette Harrel\Desktop\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nytimes.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: Google Desktop Search Capture - {7c1ce531-09e9-4fc5-9803-1c2956615786} - C:\Program Files\Google\Google Desktop Search\GoogleDesktopIE.dll
O2 - BHO: (no name) - {849B9523-785F-4014-9CAF-079FB4A74C61} - C:\WINDOWS\system32\doquvmiw.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe"
O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [DadApp] "C:\Program Files\Dell\AccessDirect\dadapp.exe"
O4 - HKLM\..\Run: [Dell QuickSet] "C:\Program Files\Dell\QuickSet\quickset.exe"
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKLM\..\Run: [ViewMgr] "C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] "C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" /STARTUP
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Handspring\HOTSYNC.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: *.musicmatch.com
O15 - Trusted Zone: *.musicmatch.com (HKLM)
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/as…rl/LSSupCtl.cab
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as…rl/SymAData.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1118855504367
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} - https://a248.e.akamai.net/f/248/5462/2h/www…ol/SymDlBrg.cab
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} (Toontown Installer ActiveX Control) - http://download.toontown.com/sv1.0.15.35/ttinst.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

Evan G Harrelll

Post #9October 11, 2006, 2:25 AM UTC

Spy Sweeper Part I: Keylogger Shield: On BHO Shield: On IE Security Shield: On Alternate Data Stream (ADS) Execution Shield: On Startup Shield: On Common Ad Sites Shield: Off Hosts File Shield: On Spy Communication Shield: On ActiveX Shield: On Windows Messenger Service Shield: On IE Favorites Shield: On Spy Installation Shield: On Memory Shield: On IE Hijack Shield: On IE Tracking Cookies Shield: Off 8:33 PM: Shield States 8:33 PM: Spyware Definitions: 778 8:33 PM: Spy Sweeper 5.0.5.1286 started 7:46 PM: | End of Session, Monday, October 09, 2006 | Operation: File Access Target: Source: C:\PROGRAM FILES\GOOGLE\GOOGLE DESKTOP SEARCH\GOOGLEDESKTOPCRAWL.EXE 7:46 PM: Tamper Detection 7:46 PM: Your spyware definitions have been updated. Keylogger Shield: On BHO Shield: On IE Security Shield: On Alternate Data Stream (ADS) Execution Shield: On Startup Shield: On Common Ad Sites Shield: Off Hosts File Shield: On Spy Communication Shield: On ActiveX Shield: On Windows Messenger Service Shield: On IE Favorites Shield: On Spy Installation Shield: On Memory Shield: On IE Hijack Shield: On IE Tracking Cookies Shield: Off 7:43 PM: Shield States 7:43 PM: Spyware Definitions: 691 7:42 PM: Spy Sweeper 5.0.5.1286 started 7:42 PM: Spy Sweeper 5.0.5.1286 started 7:42 PM: | Start of Session, Monday, October 09, 2006 | ******** 8:30 PM: Removal process completed. Elapsed time 00:02:35 8:30 PM: Preparing to restart your computer. Please wait… 8:30 PM: Quarantining All Traces: yadro cookie 8:30 PM: Quarantining All Traces: xiti cookie 8:30 PM: Quarantining All Traces: stlyrics cookie 8:30 PM: Quarantining All Traces: sex cookie 8:30 PM: Quarantining All Traces: epilot cookie 8:30 PM: Quarantining All Traces: 123count cookie 8:30 PM: Quarantining All Traces: versiontracker cookie 8:30 PM: Quarantining All Traces: tradedoubler cookie 8:30 PM: Quarantining All Traces: reliablestats cookie 8:30 PM: Quarantining All Traces: clicktracks cookie 8:30 PM: Quarantining All Traces: spywarestormer cookie 8:30 PM: Quarantining All Traces: spylog cookie 8:30 PM: Quarantining All Traces: servlet cookie 8:30 PM: Quarantining All Traces: searchadnetwork cookie 8:30 PM: Quarantining All Traces: search123 cookie 8:30 PM: Quarantining All Traces: qsrch cookie 8:30 PM: Quarantining All Traces: pub cookie 8:30 PM: Quarantining All Traces: ping cookie 8:30 PM: Quarantining All Traces: partypoker cookie 8:30 PM: Quarantining All Traces: one-time-offer cookie 8:30 PM: Quarantining All Traces: mygeek cookie 8:30 PM: Quarantining All Traces: monstermarketplace cookie 8:30 PM: Quarantining All Traces: ugo cookie 8:30 PM: Quarantining All Traces: webtrends cookie 8:30 PM: Quarantining All Traces: domainsponsor cookie 8:30 PM: Quarantining All Traces: kount cookie 8:30 PM: Quarantining All Traces: howstuffworks cookie 8:30 PM: Quarantining All Traces: hotlog cookie 8:30 PM: Quarantining All Traces: gamespy cookie 8:30 PM: Quarantining All Traces: fortunecity cookie 8:30 PM: Quarantining All Traces: findwhat cookie 8:30 PM: Quarantining All Traces: euniverseads cookie 8:30 PM: Quarantining All Traces: empnads cookie 8:30 PM: Quarantining All Traces: did-it cookie 8:30 PM: Quarantining All Traces: customer cookie 8:30 PM: Quarantining All Traces: goclick cookie 8:30 PM: Quarantining All Traces: enhance cookie 8:30 PM: Quarantining All Traces: adultrevenueservice cookie 8:30 PM: Quarantining All Traces: adultfriendfinder cookie 8:30 PM: Quarantining All Traces: x10 cookie 8:30 PM: Quarantining All Traces: uproar cookie 8:30 PM: Quarantining All Traces: cc214142 cookie 8:30 PM: Quarantining All Traces: ads.adsag cookie 8:30 PM: Quarantining All Traces: adprofile cookie 8:30 PM: Quarantining All Traces: precisead cookie 8:30 PM: Quarantining All Traces: ad-logics cookie 8:30 PM: Quarantining All Traces: 3 cookie 8:30 PM: Quarantining All Traces: 6425137 cookie 8:30 PM: Quarantining All Traces: sandboxer cookie 8:30 PM: Quarantining All Traces: seeq cookie 8:30 PM: Quarantining All Traces: realtracker cookie 8:30 PM: Quarantining All Traces: tracking cookie 8:30 PM: Quarantining All Traces: tickle cookie 8:30 PM: Quarantining All Traces: onestat.com cookie 8:30 PM: Quarantining All Traces: dealtime cookie 8:30 PM: Quarantining All Traces: starware.com cookie 8:30 PM: Quarantining All Traces: web-stat cookie 8:30 PM: Quarantining All Traces: server.iad.liveperson cookie 8:30 PM: Quarantining All Traces: revenue.net cookie 8:30 PM: Quarantining All Traces: qksrv cookie 8:30 PM: Quarantining All Traces: pro-market cookie 8:30 PM: Quarantining All Traces: pricegrabber cookie 8:30 PM: Quarantining All Traces: valuead cookie 8:30 PM: Quarantining All Traces: passion cookie 8:30 PM: Quarantining All Traces: touchclarity cookie 8:30 PM: Quarantining All Traces: military cookie 8:30 PM: Quarantining All Traces: l2m.net cookie 8:30 PM: Quarantining All Traces: infospace cookie 8:30 PM: Quarantining All Traces: ic-live cookie 8:30 PM: Quarantining All Traces: screensavers.com cookie 8:30 PM: Quarantining All Traces: clickandtrack cookie 8:30 PM: Quarantining All Traces: humanclick cookie 8:30 PM: Quarantining All Traces: go2net.com cookie 8:30 PM: Quarantining All Traces: 360i cookie 8:30 PM: Quarantining All Traces: adbureau cookie 8:30 PM: Quarantining All Traces: bizrate cookie 8:30 PM: Quarantining All Traces: bilbo.counted.com cookie 8:30 PM: Quarantining All Traces: banner cookie 8:30 PM: Quarantining All Traces: bannerspace cookie 8:30 PM: Quarantining All Traces: a cookie 8:30 PM: Quarantining All Traces: askmen cookie 8:30 PM: Quarantining All Traces: adserver.trb cookie 8:30 PM: Quarantining All Traces: belointeractive cookie 8:30 PM: Quarantining All Traces: adecn cookie 8:30 PM: Quarantining All Traces: ad-rotator cookie 8:30 PM: Quarantining All Traces: 64.62.232 cookie 8:30 PM: Quarantining All Traces: burstbeacon cookie 8:30 PM: Quarantining All Traces: trb.com cookie 8:30 PM: Quarantining All Traces: adjuggler cookie 8:30 PM: Quarantining All Traces: 247realmedia cookie 8:30 PM: Quarantining All Traces: zedo cookie 8:30 PM: Quarantining All Traces: adserver cookie 8:30 PM: Quarantining All Traces: videodome cookie 8:30 PM: Quarantining All Traces: tripod cookie 8:30 PM: Quarantining All Traces: tribalfusion cookie 8:30 PM: Quarantining All Traces: trafficmp cookie 8:30 PM: Quarantining All Traces: targetnet cookie 8:30 PM: Quarantining All Traces: tacoda cookie 8:30 PM: Quarantining All Traces: webtrendslive cookie 8:30 PM: Quarantining All Traces: statcounter cookie 8:30 PM: Quarantining All Traces: serving-sys cookie 8:30 PM: Quarantining All Traces: tvguide cookie 8:30 PM: Quarantining All Traces: rightmedia cookie 8:30 PM: Quarantining All Traces: reunion cookie 8:30 PM: Quarantining All Traces: rednova cookie 8:30 PM: Quarantining All Traces: realmedia cookie 8:30 PM: Quarantining All Traces: questionmarket cookie 8:30 PM: Quarantining All Traces: overture cookie 8:30 PM: Quarantining All Traces: nextag cookie 8:30 PM: Quarantining All Traces: mediaplex cookie 8:30 PM: Quarantining All Traces: maxserving cookie 8:30 PM: Quarantining All Traces: exitexchange cookie 8:30 PM: Quarantining All Traces: ru4 cookie 8:30 PM: Quarantining All Traces: directtrack cookie 8:30 PM: Quarantining All Traces: centrport net cookie 8:30 PM: Quarantining All Traces: casalemedia cookie 8:30 PM: Quarantining All Traces: burstnet cookie 8:30 PM: Quarantining All Traces: bs.serving-sys cookie 8:30 PM: Quarantining All Traces: bravenet cookie 8:30 PM: Quarantining All Traces: bluestreak cookie 8:30 PM: Quarantining All Traces: atwola cookie 8:30 PM: Quarantining All Traces: belnk cookie 8:30 PM: Quarantining All Traces: atlas dmt cookie 8:30 PM: Quarantining All Traces: ask cookie 8:30 PM: Quarantining All Traces: falkag cookie 8:30 PM: Quarantining All Traces: apmebf cookie 8:30 PM: Quarantining All Traces: anm.co.uk cookie 8:30 PM: Quarantining All Traces: advertising cookie 8:30 PM: Quarantining All Traces: adtech cookie 8:30 PM: Quarantining All Traces: pointroll cookie 8:30 PM: Quarantining All Traces: addynamix cookie 8:30 PM: Quarantining All Traces: adrevolver cookie 8:30 PM: Quarantining All Traces: specificclick.com cookie 8:30 PM: Quarantining All Traces: hbmediapro cookie 8:30 PM: Quarantining All Traces: adlegend cookie 8:30 PM: Quarantining All Traces: adknowledge cookie 8:30 PM: Quarantining All Traces: yieldmanager cookie 8:29 PM: Quarantining All Traces: about cookie 8:29 PM: Quarantining All Traces: go.com cookie 8:29 PM: Quarantining All Traces: websponsors cookie 8:29 PM: Quarantining All Traces: 2o7.net cookie 8:29 PM: Quarantining All Traces: myaffiliateprogram.com cookie 8:29 PM: Quarantining All Traces: linksynergy cookie 8:29 PM: Quarantining All Traces: vs toolbar 8:29 PM: C:\WINDOWS\SYSTEM32\jkhfc.dll is in use. It will be removed on reboot. 8:29 PM: virtumonde is in use. It will be removed on reboot. 8:29 PM: Quarantining All Traces: virtumonde 8:28 PM: Removal process initiated 8:26 PM: Traces Found: 471 8:26 PM: Full Sweep has completed. Elapsed time 00:40:23 8:26 PM: File Sweep Complete, Elapsed Time: 00:36:11 8:11 PM: C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP618\A0115940.dll (ID = 373314) 7:52 PM: C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP618\A0115863.dll (ID = 373314) 7:52 PM: Found Adware: vs toolbar 7:50 PM: Starting File Sweep 7:50 PM: Cookie Sweep Complete, Elapsed Time: 00:01:10 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@zedo[2].txt (ID = 3762) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2142) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@yieldmanager[2].txt (ID = 3749) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@yadro[1].txt (ID = 3743) 7:50 PM: Found Spy Cookie: yadro cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@xiti[1].txt (ID = 3717) 7:50 PM: Found Spy Cookie: xiti cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3332) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed]-stat[1].txt (ID = 3649) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3600) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3462) 7:50 PM: Found Spy Cookie: stlyrics cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3348) 7:50 PM: Found Spy Cookie: sex cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3312) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3298) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3032) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2622) 7:50 PM: Found Spy Cookie: epilot cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2335) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2246) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@www.123count[1].txt (ID = 1928) 7:50 PM: Found Spy Cookie: 123count cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@wrigley.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@webxites.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3242) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@videodome[1].txt (ID = 3638) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@versiontracker[1].txt (ID = 3636) 7:50 PM: Found Spy Cookie: versiontracker cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@usnews.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@usatoday1.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tvguide[2].txt (ID = 3599) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3442) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tripod[2].txt (ID = 3591) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tribalfusion[2].txt (ID = 3589) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@trb[2].txt (ID = 3587) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@trafficmp[1].txt (ID = 3581) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tradedoubler[2].txt (ID = 3575) 7:50 PM: Found Spy Cookie: tradedoubler cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tracking[4].txt (ID = 3571) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tracking[2].txt (ID = 3571) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tracking[1].txt (ID = 3571) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tickle[1].txt (ID = 3529) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2070) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tcompany.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@tacoda[1].txt (ID = 6444) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3254) 7:50 PM: Found Spy Cookie: reliablestats cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2407) 7:50 PM: Found Spy Cookie: clicktracks cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@statcounter[2].txt (ID = 3447) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3098) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2506) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@spywarestormer[1].txt (ID = 3417) 7:50 PM: Found Spy Cookie: spywarestormer cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@spylog[1].txt (ID = 3415) 7:50 PM: Found Spy Cookie: spylog cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@sonycorporate.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@servlet[2].txt (ID = 3345) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@servlet[1].txt (ID = 3345) 7:50 PM: Found Spy Cookie: servlet cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@serving-sys[1].txt (ID = 3343) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed]-stat[1].txt (ID = 3649) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3341) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@searchadnetwork[2].txt (ID = 3311) 7:50 PM: Found Spy Cookie: searchadnetwork cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@search123[1].txt (ID = 3305) 7:50 PM: Found Spy Cookie: search123 cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2534) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3600) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@saksfifthavenue.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3600) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2070) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2071) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@riptownmedia.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@rightmedia[1].txt (ID = 3259) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@revenue[1].txt (ID = 3257) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@reunion[1].txt (ID = 3255) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@realmedia[2].txt (ID = 3235) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2528) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@questionmarket[2].txt (ID = 3217) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@qsrch[1].txt (ID = 3215) 7:50 PM: Found Spy Cookie: qsrch cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@qksrv[2].txt (ID = 3213) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@pub[1].txt (ID = 3205) 7:50 PM: Found Spy Cookie: pub cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@pro-market[1].txt (ID = 3197) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@pricegrabber[1].txt (ID = 3185) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ping[2].txt (ID = 3137) 7:50 PM: Found Spy Cookie: ping cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3106) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@passion[2].txt (ID = 3113) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@partypoker[2].txt (ID = 3111) 7:50 PM: Found Spy Cookie: partypoker cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@partygaming.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@overture[2].txt (ID = 3105) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@one-time-offer[1].txt (ID = 3095) 7:50 PM: Found Spy Cookie: one-time-offer cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@northwestairlines.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@nextag[1].txt (ID = 5014) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@nbcuniversal.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@nasdaq.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2295) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@mygeek[1].txt (ID = 3041) 7:50 PM: Found Spy Cookie: mygeek cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@msnportal.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@monstermarketplace[2].txt (ID = 3006) 7:50 PM: Found Spy Cookie: monstermarketplace cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@military[2].txt (ID = 2996) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@microsofteup.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3609) 7:50 PM: Found Spy Cookie: ugo cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@maxserving[1].txt (ID = 2966) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3669) 7:50 PM: Found Spy Cookie: webtrends cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@leeenterprises.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2535) 7:50 PM: Found Spy Cookie: domainsponsor cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@l2m[1].txt (ID = 2913) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@kount[2].txt (ID = 2911) 7:50 PM: Found Spy Cookie: kount cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3588) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@journalregistercompany.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@jcrew.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ic-live[1].txt (ID = 2821) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@howstuffworks[1].txt (ID = 2805) 7:50 PM: Found Spy Cookie: howstuffworks cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@hotlog[1].txt (ID = 2801) 7:50 PM: Found Spy Cookie: hotlog cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2295) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2397) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@highbeam.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@hertz.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2810) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@harpo.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3442) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@go[1].txt (ID = 2728) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@gamespy[1].txt (ID = 2719) 7:50 PM: Found Spy Cookie: gamespy cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3588) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@fortunecity[2].txt (ID = 2686) 7:50 PM: Found Spy Cookie: fortunecity cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@findwhat[1].txt (ID = 2674) 7:50 PM: Found Spy Cookie: findwhat cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@exitexchange[1].txt (ID = 2633) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@euniverseads[1].txt (ID = 2629) 7:50 PM: Found Spy Cookie: euniverseads cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2060) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@empnads[2].txt (ID = 5012) 7:50 PM: Found Spy Cookie: empnads cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@edge.ru4[2].txt (ID = 3269) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@dowjones.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2293) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@did-it[1].txt (ID = 2523) 7:50 PM: Found Spy Cookie: did-it cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@dealtime[1].txt (ID = 2505) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@dcs8ir0f010000oyioyaka1kl_8j7n[2].txt (ID = 3673) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3106) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3106) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3106) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@customer[1].txt (ID = 2481) 7:50 PM: Found Spy Cookie: customer cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ct.360i[1].txt (ID = 1962) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@cratebarrel.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2634) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2634) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2634) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3530) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@cnn.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@cneteurope.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2060) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@chicagosuntimes.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@centrport[2].txt (ID = 2374) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@cbs.112.2o7[2].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@campingworld.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2733) 7:50 PM: Found Spy Cookie: goclick cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2614) 7:50 PM: Found Spy Cookie: enhance cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@burstnet[1].txt (ID = 2336) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed]-sys[1].txt (ID = 2330) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@brguest.112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@bravenet[2].txt (ID = 2322) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@bluestreak[2].txt (ID = 2314) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@bizrate[1].txt (ID = 2308) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2306) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@belointeractive[2].txt (ID = 2294) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@belnk[1].txt (ID = 2292) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@banner[2].txt (ID = 2276) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@bannerspace[2].txt (ID = 2284) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@atwola[2].txt (ID = 2255) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2293) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ask[2].txt (ID = 2245) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@askmen[1].txt (ID = 2247) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2650) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@arnoldpalmer.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@apmebf[1].txt (ID = 2229) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2223) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 6445) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 6445) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@americanexpress.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2038) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@advertisingcom.122.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adultrevenueservice[1].txt (ID = 2167) 7:50 PM: Found Spy Cookie: adultrevenueservice cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adultfriendfinder[2].txt (ID = 2165) 7:50 PM: Found Spy Cookie: adultfriendfinder cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adtech[2].txt (ID = 2155) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adserver[1].txt (ID = 2141) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ads.x10[1].txt (ID = 3712) 7:50 PM: Found Spy Cookie: x10 cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3613) 7:50 PM: Found Spy Cookie: uproar cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3148) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ads.cc214142[2].txt (ID = 2367) 7:50 PM: Found Spy Cookie: cc214142 cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2295) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2108) 7:50 PM: Found Spy Cookie: ads.adsag cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2062) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adrevolver[4].txt (ID = 2088) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adrevolver[3].txt (ID = 2088) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adrevolver[1].txt (ID = 2088) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adprofile[1].txt (ID = 2084) 7:50 PM: Found Spy Cookie: adprofile cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 3400) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3182) 7:50 PM: Found Spy Cookie: precisead cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adlegend[1].txt (ID = 2074) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@adknowledge[2].txt (ID = 2072) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3751) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@ad-logics[2].txt (ID = 2049) 7:50 PM: Found Spy Cookie: ad-logics cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@about[2].txt (ID = 2037) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][1].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2729) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 3665) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette [removed][2].txt (ID = 2650) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@85.17.3[2].txt (ID = 1960) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@85.17.3[1].txt (ID = 1960) 7:50 PM: Found Spy Cookie: 3 cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@6425137[1].txt (ID = 1989) 7:50 PM: Found Spy Cookie: 6425137 cookie 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@64.62.232[1].txt (ID = 1987) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@2o7[1].txt (ID = 1957) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@247realmedia[2].txt (ID = 1953) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@112.2o7[1].txt (ID = 1958) 7:50 PM: c:\documents and settings\suzette harrel\cookies\suzette harrel@0[2].txt (ID = 3282) 7:50 PM: Found Spy Cookie: sandboxer cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@zedo[1].txt (ID = 3762) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2142) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2866) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3332) 7:49 PM: Found Spy Cookie: seeq cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3298) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3032) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2997) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2337) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2335) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3242) 7:49 PM: Found Spy Cookie: realtracker cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tvguide[2].txt (ID = 3599) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tripod[1].txt (ID = 3591) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tribalfusion[1].txt (ID = 3589) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@trb[1].txt (ID = 3587) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@trafficmp[2].txt (ID = 3581) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tracking[2].txt (ID = 3571) 7:49 PM: Found Spy Cookie: tracking cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tickle[1].txt (ID = 3529) 7:49 PM: Found Spy Cookie: tickle cookie

Evan G Harrelll

Post #10October 11, 2006, 2:26 AM UTC

Thanks again, for your patience. SPY SWEEPER, PT II: 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2295) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@tacoda[1].txt (ID = 6444) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@statcounter[1].txt (ID = 3447) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3098) 7:49 PM: Found Spy Cookie: onestat.com cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2506) 7:49 PM: Found Spy Cookie: dealtime cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@starware[2].txt (ID = 3441) 7:49 PM: Found Spy Cookie: starware.com cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@serving-sys[3].txt (ID = 3343) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@serving-sys[1].txt (ID = 3343) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed]-stat[2].txt (ID = 3649) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed]-stat[2].txt (ID = 3649) 7:49 PM: Found Spy Cookie: web-stat cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3341) 7:49 PM: Found Spy Cookie: server.iad.liveperson cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3600) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3600) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2071) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@revenue[1].txt (ID = 3257) 7:49 PM: Found Spy Cookie: revenue.net cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@reunion[2].txt (ID = 3255) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@rednova[2].txt (ID = 3245) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@realmedia[2].txt (ID = 3235) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2528) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@questionmarket[1].txt (ID = 3217) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@qksrv[2].txt (ID = 3213) 7:49 PM: Found Spy Cookie: qksrv cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@pro-market[2].txt (ID = 3197) 7:49 PM: Found Spy Cookie: pro-market cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@pricegrabber[2].txt (ID = 3185) 7:49 PM: Found Spy Cookie: pricegrabber cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3627) 7:49 PM: Found Spy Cookie: valuead cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3106) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@passion[1].txt (ID = 3113) 7:49 PM: Found Spy Cookie: passion cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3567) 7:49 PM: Found Spy Cookie: touchclarity cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@overture[1].txt (ID = 3105) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3600) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@nextag[2].txt (ID = 5014) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@military[1].txt (ID = 2996) 7:49 PM: Found Spy Cookie: military cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@maxserving[2].txt (ID = 2966) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@l2m[1].txt (ID = 2913) 7:49 PM: Found Spy Cookie: l2m.net cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2060) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@infospace[1].txt (ID = 2865) 7:49 PM: Found Spy Cookie: infospace cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@ic-live[1].txt (ID = 2821) 7:49 PM: Found Spy Cookie: ic-live cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3298) 7:49 PM: Found Spy Cookie: screensavers.com cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2295) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2397) 7:49 PM: Found Spy Cookie: clickandtrack cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2810) 7:49 PM: Found Spy Cookie: humanclick cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@go[1].txt (ID = 2728) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@go2net[1].txt (ID = 2730) 7:49 PM: Found Spy Cookie: go2net.com cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@exitexchange[1].txt (ID = 2633) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2038) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@edge.ru4[2].txt (ID = 3269) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2293) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@directtrack[2].txt (ID = 2527) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@ct.360i[2].txt (ID = 1962) 7:49 PM: Found Spy Cookie: 360i cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2060) 7:49 PM: Found Spy Cookie: adbureau cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@cratebarrel.112.2o7[1].txt (ID = 1958) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@centrport[1].txt (ID = 2374) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@cbs.112.2o7[1].txt (ID = 1958) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3763) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@burstnet[2].txt (ID = 2336) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed]-sys[2].txt (ID = 2330) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@bravenet[1].txt (ID = 2322) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@bluestreak[2].txt (ID = 2314) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@bizrate[1].txt (ID = 2308) 7:49 PM: Found Spy Cookie: bizrate cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2306) 7:49 PM: Found Spy Cookie: bilbo.counted.com cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@belointeractive[1].txt (ID = 2294) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@belnk[1].txt (ID = 2292) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@banner[1].txt (ID = 2276) 7:49 PM: Found Spy Cookie: banner cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@bannerspace[1].txt (ID = 2284) 7:49 PM: Found Spy Cookie: bannerspace cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@a[1].txt (ID = 2027) 7:49 PM: Found Spy Cookie: a cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@atwola[2].txt (ID = 2255) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2293) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@ask[1].txt (ID = 2245) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@askmen[1].txt (ID = 2247) 7:49 PM: Found Spy Cookie: askmen cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2650) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2650) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@apmebf[2].txt (ID = 2229) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adtech[2].txt (ID = 2155) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2147) 7:49 PM: Found Spy Cookie: adserver.trb cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 3148) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2295) 7:49 PM: Found Spy Cookie: belointeractive cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2062) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adrevolver[3].txt (ID = 2088) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adrevolver[1].txt (ID = 2088) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3400) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2768) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adlegend[2].txt (ID = 2074) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adknowledge[2].txt (ID = 2072) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@adecn[2].txt (ID = 2063) 7:49 PM: Found Spy Cookie: adecn cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3751) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@ad-rotator[1].txt (ID = 2051) 7:49 PM: Found Spy Cookie: ad-rotator cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@about[2].txt (ID = 2037) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][2].txt (ID = 2729) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan [removed][1].txt (ID = 3665) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@64.62.232[1].txt (ID = 1987) 7:49 PM: Found Spy Cookie: 64.62.232 cookie 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@2o7[2].txt (ID = 1957) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@247realmedia[1].txt (ID = 1953) 7:49 PM: c:\documents and settings\evan harrel\cookies\evan harrel@112.2o7[1].txt (ID = 1958) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@zedo[2].txt (ID = 3762) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick [removed][1].txt (ID = 2337) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick [removed][2].txt (ID = 2335) 7:49 PM: Found Spy Cookie: burstbeacon cookie 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@tribalfusion[2].txt (ID = 3589) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@trb[1].txt (ID = 3587) 7:49 PM: Found Spy Cookie: trb.com cookie 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@trafficmp[2].txt (ID = 3581) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@tacoda[2].txt (ID = 6444) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@statcounter[1].txt (ID = 3447) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick [removed][1].txt (ID = 2071) 7:49 PM: Found Spy Cookie: adjuggler cookie 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@questionmarket[1].txt (ID = 3217) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@nextag[2].txt (ID = 5014) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@go[2].txt (ID = 2728) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@edge.ru4[2].txt (ID = 3269) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@cbs.112.2o7[1].txt (ID = 1958) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@burstnet[2].txt (ID = 2336) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@atwola[2].txt (ID = 2255) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@ask[1].txt (ID = 2245) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick [removed][2].txt (ID = 2650) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@adrevolver[3].txt (ID = 2088) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@adrevolver[2].txt (ID = 2088) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@adlegend[1].txt (ID = 2074) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick [removed][1].txt (ID = 3751) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@2o7[1].txt (ID = 1957) 7:49 PM: c:\documents and settings\patrick harrel\cookies\patrick harrel@247realmedia[1].txt (ID = 1953) 7:49 PM: Found Spy Cookie: 247realmedia cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@zedo[2].txt (ID = 3762) 7:49 PM: Found Spy Cookie: zedo cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][2].txt (ID = 2142) 7:49 PM: Found Spy Cookie: adserver cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@videodome[1].txt (ID = 3638) 7:49 PM: Found Spy Cookie: videodome cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@tvguide[1].txt (ID = 3599) 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@tripod[1].txt (ID = 3591) 7:49 PM: Found Spy Cookie: tripod cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@tribalfusion[1].txt (ID = 3589) 7:49 PM: Found Spy Cookie: tribalfusion cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@trafficmp[2].txt (ID = 3581) 7:49 PM: Found Spy Cookie: trafficmp cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@targetnet[2].txt (ID = 3489) 7:49 PM: Found Spy Cookie: targetnet cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@tacoda[2].txt (ID = 6444) 7:49 PM: Found Spy Cookie: tacoda cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][2].txt (ID = 3667) 7:49 PM: Found Spy Cookie: webtrendslive cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@statcounter[1].txt (ID = 3447) 7:49 PM: Found Spy Cookie: statcounter cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@serving-sys[1].txt (ID = 3343) 7:49 PM: Found Spy Cookie: serving-sys cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][1].txt (ID = 3600) 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][1].txt (ID = 3600) 7:49 PM: Found Spy Cookie: tvguide cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@rightmedia[2].txt (ID = 3259) 7:49 PM: Found Spy Cookie: rightmedia cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@reunion[2].txt (ID = 3255) 7:49 PM: Found Spy Cookie: reunion cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@rednova[2].txt (ID = 3245) 7:49 PM: Found Spy Cookie: rednova cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@realmedia[1].txt (ID = 3235) 7:49 PM: Found Spy Cookie: realmedia cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][2].txt (ID = 2528) 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@questionmarket[2].txt (ID = 3217) 7:49 PM: Found Spy Cookie: questionmarket cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][1].txt (ID = 2038) 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][1].txt (ID = 3106) 7:49 PM: Found Spy Cookie: overture cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@nextag[2].txt (ID = 5014) 7:49 PM: Found Spy Cookie: nextag cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@mediaplex[1].txt (ID = 6442) 7:49 PM: Found Spy Cookie: mediaplex cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@maxserving[1].txt (ID = 2966) 7:49 PM: Found Spy Cookie: maxserving cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][1].txt (ID = 2038) 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@go[1].txt (ID = 2728) 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@exitexchange[2].txt (ID = 2633) 7:49 PM: Found Spy Cookie: exitexchange cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@edge.ru4[2].txt (ID = 3269) 7:49 PM: Found Spy Cookie: ru4 cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][2].txt (ID = 2293) 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@directtrack[1].txt (ID = 2527) 7:49 PM: Found Spy Cookie: directtrack cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@centrport[2].txt (ID = 2374) 7:49 PM: Found Spy Cookie: centrport net cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@casalemedia[1].txt (ID = 2354) 7:49 PM: Found Spy Cookie: casalemedia cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@burstnet[1].txt (ID = 2336) 7:49 PM: Found Spy Cookie: burstnet cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed]-sys[1].txt (ID = 2330) 7:49 PM: Found Spy Cookie: bs.serving-sys cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@bravenet[1].txt (ID = 2322) 7:49 PM: Found Spy Cookie: bravenet cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@bluestreak[2].txt (ID = 2314) 7:49 PM: Found Spy Cookie: bluestreak cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@belnk[2].txt (ID = 2292) 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@atwola[2].txt (ID = 2255) 7:49 PM: Found Spy Cookie: atwola cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][2].txt (ID = 2293) 7:49 PM: Found Spy Cookie: belnk cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@atdmt[2].txt (ID = 2253) 7:49 PM: Found Spy Cookie: atlas dmt cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@ask[1].txt (ID = 2245) 7:49 PM: Found Spy Cookie: ask cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][1].txt (ID = 2650) 7:49 PM: Found Spy Cookie: falkag cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@apmebf[1].txt (ID = 2229) 7:49 PM: Found Spy Cookie: apmebf cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][2].txt (ID = 2223) 7:49 PM: Found Spy Cookie: anm.co.uk cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@advertising[1].txt (ID = 2175) 7:49 PM: Found Spy Cookie: advertising cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@adtech[2].txt (ID = 2155) 7:49 PM: Found Spy Cookie: adtech cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][1].txt (ID = 3148) 7:49 PM: Found Spy Cookie: pointroll cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][1].txt (ID = 2062) 7:49 PM: Found Spy Cookie: addynamix cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@adrevolver[3].txt (ID = 2088) 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@adrevolver[1].txt (ID = 2088) 7:49 PM: Found Spy Cookie: adrevolver cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][2].txt (ID = 3400) 7:49 PM: Found Spy Cookie: specificclick.com cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][2].txt (ID = 2768) 7:49 PM: Found Spy Cookie: hbmediapro cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@adlegend[1].txt (ID = 2074) 7:49 PM: Found Spy Cookie: adlegend cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@adknowledge[2].txt (ID = 2072) 7:49 PM: Found Spy Cookie: adknowledge cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][1].txt (ID = 3751) 7:49 PM: Found Spy Cookie: yieldmanager cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@about[2].txt (ID = 2037) 7:49 PM: Found Spy Cookie: about cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][1].txt (ID = 2729) 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][1].txt (ID = 2729) 7:49 PM: Found Spy Cookie: go.com cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will [removed][1].txt (ID = 3665) 7:49 PM: Found Spy Cookie: websponsors cookie 7:49 PM: c:\documents and settings\will harrel\cookies\will harrel@2o7[2].txt (ID = 1957) 7:49 PM: Found Spy Cookie: 2o7.net cookie 7:49 PM: c:\documents and settings\administrator\cookies\[removed][1].txt (ID = 3032) 7:49 PM: Found Spy Cookie: myaffiliateprogram.com cookie 7:49 PM: c:\documents and settings\administrator\cookies\administrator@linksynergy[2].txt (ID = 2926) 7:49 PM: Found Spy Cookie: linksynergy cookie 7:49 PM: Starting Cookie Sweep 7:49 PM: Registry Sweep Complete, Elapsed Time:00:00:42 7:48 PM: Starting Registry Sweep 7:48 PM: Memory Sweep Complete, Elapsed Time: 00:02:07 7:47 PM: Detected running threat: C:\WINDOWS\SYSTEM32\jkhfc.dll (ID = 486) 7:47 PM: Found Adware: virtumonde 7:46 PM: Starting Memory Sweep 7:46 PM: Sweep initiated using definitions version 778 7:46 PM: Spy Sweeper 5.0.5.1286 started 7:46 PM: | Start of Session, Monday, October 09, 2006 | ********

Susan528

Post #11October 11, 2006, 3:49 AM UTC

Disable SpySweeper:
You have SpySweeper installed. While this is a great program, we need to temporarily disable (not uninstall) the program because it might stop our fix.
Right click on the SpySweeper icon in your System Tray (near the clock).
From the pop up menu, left click on Shields, this will open the program at the same time.
Click the "Internet Explorer" tab and uncheck the following:

IE Favorites Shield
IE Security Shield
Broswer Helper Object (BHO) Shield
IE Hijack Shield

Click the "Windows System Shields" and uncheck the following:

Memory Shield
Spy Installation Shield

Click the "Startup Programs" tab and uncheck the Startup Items Shield

Updating Java

Download the latest version of Java Runtime Environment (JRE) 5.0 Update 9.
Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
Click the "Download" button to the right.
Check the box that says: "Accept License Agreement".
The page will refresh.
Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
Close any programs you may have running - especially your web browser.
Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
Check any item with Java Runtime Environment (JRE or J2SE) in the name.
Click the Remove or Change/Remove button.
Repeat as many times as necessary to remove each Java versions.
Reboot your computer once all Java components are removed.
Then from your desktop double-click on jre-1_5_0_09-windowsi586-p.exe to install the newest version.

O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {849B9523-785F-4014-9CAF-079FB4A74C61} - C:\WINDOWS\system32\doquvmiw.dll (file missing)

It is very important that you enable SpySweeper again.

Evan G Harrelll

Post #12October 11, 2006, 12:12 PM UTC

Here is the latest HJT log. thanks for your help.

Logfile of HijackThis v1.99.1
Scan saved at 6:57:44 AM, on 10/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\AccessDirect\dadapp.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Handspring\HOTSYNC.EXE
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\Suzette Harrel\Desktop\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nytimes.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Google Desktop Search Capture - {7c1ce531-09e9-4fc5-9803-1c2956615786} - C:\Program Files\Google\Google Desktop Search\GoogleDesktopIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [DadApp] "C:\Program Files\Dell\AccessDirect\dadapp.exe"
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKLM\..\Run: [ViewMgr] "C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] "C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" /STARTUP
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Handspring\HOTSYNC.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: *.musicmatch.com
O15 - Trusted Zone: *.musicmatch.com (HKLM)
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/as…rl/LSSupCtl.cab
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as…rl/SymAData.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1118855504367
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} - https://a248.e.akamai.net/f/248/5462/2h/www…ol/SymDlBrg.cab
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} (Toontown Installer ActiveX Control) - http://download.toontown.com/sv1.0.15.35/ttinst.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

Susan528

Post #13October 11, 2006, 1:43 PM UTC last edited October 11, 2006, 1:44 PM UTC

IE Favorites Shield
IE Security Shield
Broswer Helper Object (BHO) Shield
IE Hijack Shield

Click the "Windows System Shields" and uncheck the following:

Memory Shield
Spy Installation Shield

Click the "Startup Programs" tab and uncheck the Startup Items Shield

Scan with HijackThis. Place a check against each of the following:
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)

Close all windows or browsers except for Hijackthis. Click on Fix Checked when finished and exit HijackThis.

After all of the fixes are complete it is very important that you enable SpySweeper again.

Post (reply) with a fresh HijackThis log. How is your computer running?

Evan G Harrelll

Post #14October 12, 2006, 12:07 AM UTC

Susan528 -

Thanks for your help. Computer seems to be working smoothly without the dreaded paralyzing popups. Thanks so much. Should I be running both AVG and SpySweeper at startup?

Here's the latest HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 6:34:38 PM, on 10/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Handspring\HOTSYNC.EXE
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Documents and Settings\Suzette Harrel\Desktop\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nytimes.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Google Desktop Search Capture - {7c1ce531-09e9-4fc5-9803-1c2956615786} - C:\Program Files\Google\Google Desktop Search\GoogleDesktopIE.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [DadApp] "C:\Program Files\Dell\AccessDirect\dadapp.exe"
O4 - HKLM\..\Run: [Dell QuickSet] "C:\Program Files\Dell\QuickSet\quickset.exe"
O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
O4 - HKLM\..\Run: [ViewMgr] "C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] "C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" /STARTUP
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Handspring\HOTSYNC.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: *.musicmatch.com
O15 - Trusted Zone: *.musicmatch.com (HKLM)
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/as…rl/LSSupCtl.cab
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/as…rl/SymAData.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1118855504367
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} - https://a248.e.akamai.net/f/248/5462/2h/www…ol/SymDlBrg.cab
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} (Toontown Installer ActiveX Control) - http://download.toontown.com/sv1.0.15.35/ttinst.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

Evan G Harrelll

Post #15October 12, 2006, 12:08 AM UTC

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

HJT log

✨ Ask AI

Ask AI