This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

System32:huy32 problem

5 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hey everyone, I am a brand new member here and looking to see if anyone can help me out. I am definitely not as advanced in my computer knowledge as many of you so please bear with me.

I have been having unauthorized shut downs the last few days. My computer will crash to the "blue screen of death" and it gives me this error message under the 'Technical Information' area:

***Stop:0x0000008E (0xC0000005, 0xB0A3B5E9, 0xACCAAA28, 0x00000000)
***system32:huy32.sys-Address B0A3B5E9 base at B0A39000, Date stamp 45abe717

I found a couple other people on here that have had problems like this (seems the system32:huy32.sys is the problem) but I wanted to give my own log files to make sure I am fixing my individual problem.

I am currently running in safe mode because I can only get about 10 minutes out of my computer in regular mode before it crashes. (This scan was done while in safe mode if that changes anything) I have done a HijackThis - v1.99.1 scan and here is the log:

Logfile of HijackThis v1.98.2
Scan saved at 3:48:10 PM, on 2/3/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\svchost.exe
C:\HJT\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: SoftWareObj Class - {20e70232-2e54-4290-8dcb-037f3ce18fd6} - C:\PROGRA~1\FREEPA~1\SoftWare.dll (file missing)
R3 - URLSearchHook: (no name) - {72917166-6b0c-4462-9c10-598f3d5d3c25} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6020\SiteAdv.dll
O2 - BHO: SpywareBlock Class - {0A87E45F-537A-40B4-B812-E2544C21A09F} - C:\Program Files\GhostSurf 2007 Platinum\SCActiveBlock.dll
O2 - BHO: SoftWare - {20e70232-2e54-4290-8dcb-037f3ce18fd6} - C:\PROGRA~1\FREEPA~1\SoftWare.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SoftWare - {72917166-6b0c-4462-9c10-598f3d5d3c25} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6020\SiteAdv.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AWMON] "C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe"
O4 - HKCU\..\Run: [ESPN BottomLine] D:\Program Files\ESPN\BottomLine\bline.exe
O4 - HKCU\..\Run: [SB Audigy 2 Startup Menu] "C:\Program Files\Creative\SBAudigy2ZS\Program\Startup Menu\ChkColor.EXE"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - Startup: Scheduler.lnk = C:\Program Files\GhostSurf 2007 Platinum\Scheduler daemon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Extender Resource Monitor.lnk = C:\WINDOWS\ehome\RMSysTry.exe
O4 - Global Startup: GhostSurf proxy.lnk = C:\Program Files\GhostSurf 2007 Platinum\Proxy.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Privoxy.lnk = C:\Program Files\Privoxy\privoxy.exe
O4 - Global Startup: SpyCatcher Protector.lnk = C:\Program Files\GhostSurf 2007 Platinum\Protector.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/229?511a6e08b2094c8fa6c0c1fd4cfaf6dd
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/230?511a6e08b2094c8fa6c0c1fd4cfaf6dd
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} (Microsoft Virtual Server VMRC Advanced Control) - http://www.windowsvistatestdrive.com/Activ…iveXClient1.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://amiuptodate.mcafee.com/vsc/bin/2,0,…pdatePortal.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1150505871593
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…881/mcfscan.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6020\SiteAdv.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll





(I also forgot to mention that right before all of this I purchased GhostSurf Platinum 2007. I read reviews on PC Magazine and Cnet that said it was a trusted and great program, so I doubt it has anything to do with this problem, but I thought I would at least mention that.)

Any help that could be given would be incredibly appreciated. Thanks for taking time to help me.
I don't mean to bump this at all but I edited my first post like 5 times and it won't let me anymore.

I have been looking around at this problem a little more and have noticed the first step has always been to also run a AVG scan and clear out the problems. So I did.

Here is my AVG scan:

———————————————————
AVG Anti-Spyware - Scan Report
———————————————————

+ Created at: 9:31:38 PM 2/3/2007

+ Scan result:



C:\Program Files\Common Files\Common Files\Real\WeatherBug\MiniBugTransporter.dll -> Adware.Minibug : Cleaned with backup (quarantined).
D:\Program Files\Common Files\Real\WeatherBug\MiniBugTransporter.dll -> Adware.Minibug : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP232\A0042420.exe -> Adware.Trymedia : Cleaned with backup (quarantined).
C:\WINDOWS\system32\autosys.exe -> Downloader.Obfuscated.bh : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP308\A0053557.exe -> Downloader.Small.edb : Cleaned with backup (quarantined).
C:\Program Files\DIGStream\digstream.exe -> Not-A-Virus.Downloader.Win32.DigStream : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WinOpts -> Proxy.Small : Cleaned with backup (quarantined).
:mozilla.712:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.713:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.11:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\icffcxm6.Drew\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.12:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\icffcxm6.Drew\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.13:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\icffcxm6.Drew\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.154:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.522:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.523:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.524:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.525:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.526:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.527:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.528:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.529:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.530:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.531:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.532:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.533:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.534:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.535:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.536:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.537:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.538:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.539:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.540:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.541:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.542:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.543:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.544:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.545:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.546:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.547:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.548:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.549:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.550:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.551:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.552:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.553:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.554:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.555:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.556:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.708:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.750:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.763:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.7:D:\Documents and Settings\Drew\Application Data\Mozilla\Profiles\default\mngmxe73.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.805:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.816:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.8:D:\Documents and Settings\Drew\Application Data\Mozilla\Profiles\default\mngmxe73.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.9:D:\Documents and Settings\Drew\Application Data\Mozilla\Profiles\default\mngmxe73.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.500:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.52:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.55:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.632:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.71:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.77:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.347:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Addynamix : Cleaned.
:mozilla.61:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.63:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.64:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.831:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.832:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.348:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.349:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.350:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.351:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.352:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.43:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.44:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.106:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.109:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.110:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.111:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.27:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.29:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.30:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.31:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.32:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.33:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.34:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.35:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.20:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.24:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.40:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.162:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.163:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.756:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.154:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.155:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.156:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.157:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.417:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.424:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.425:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.62:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.63:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.64:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.368:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.369:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.370:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.371:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.372:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.373:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.374:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.375:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.21:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Clickbank : Cleaned.
:mozilla.140:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Co : Cleaned.
:mozilla.432:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.10:D:\Documents and Settings\Drew\Application Data\Mozilla\Profiles\default\mngmxe73.slt\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.20:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.28:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.53:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.6:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\icffcxm6.Drew\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.874:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.875:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.876:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.250:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.251:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.252:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.255:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.258:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.259:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.95:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.96:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.97:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.98:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.230:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.231:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.232:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.233:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.234:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.41:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.42:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.43:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.44:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.224:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.30:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.31:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.728:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.944:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.166:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.168:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.169:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.170:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.461:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.462:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.480:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.481:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.482:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.483:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.484:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.485:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.569:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.631:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.716:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.748:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.164:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Linksynergy : Cleaned.
:mozilla.165:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Linksynergy : Cleaned.
:mozilla.572:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.573:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.574:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.15:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.298:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.345:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.346:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.39:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.7:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.137:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.173:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.174:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.767:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
D:\Documents and Settings\Drew\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned.
:mozilla.10:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.11:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.12:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.13:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.14:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.188:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.189:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.190:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.191:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.192:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.412:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
:mozilla.413:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
:mozilla.315:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.316:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.317:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.318:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.101:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.103:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.104:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.105:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.106:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.107:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.108:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.109:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.110:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.111:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.112:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.113:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.114:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.115:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.116:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.117:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.117:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.418:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.419:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.420:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.421:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.422:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.423:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.561:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.562:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.563:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.564:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.46:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.47:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.48:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.49:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.927:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.928:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.854:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Spylog : Cleaned.
:mozilla.135:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.136:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.137:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.138:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.139:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.140:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.141:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.142:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.143:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.144:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.145:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.146:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.147:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.148:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.149:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.150:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.151:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.207:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.208:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.209:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.210:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.58:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.59:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.60:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.61:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.353:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned.
:mozilla.354:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned.
:mozilla.852:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.396:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.397:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.398:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.399:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.400:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.401:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.402:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.403:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.404:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.405:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.70:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.71:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.79:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.80:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.81:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.82:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.83:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.84:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.85:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.235:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.236:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.237:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.238:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.239:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.240:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.241:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.242:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.243:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.244:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.245:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.246:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.247:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.54:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.54:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.27:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.28:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.769:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.770:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.802:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.577:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.578:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.579:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.580:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.581:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.582:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.583:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.584:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.585:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.128:C:\Documents and Settings\Drew Tarzwell\Application Data\Mozilla\Firefox\Profiles\wnmtw7b5.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.152:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.31:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.32:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.33:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.34:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.35:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.36:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.38:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\ggzmaidu.Drew\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.66:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.67:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.68:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.69:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.70:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.72:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.73:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.74:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.75:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.76:D:\Documents and Settings\Drew\Application Data\Mozilla\Firefox\Profiles\w1zztcdt.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.29:D:&#
And Here is my new HJT scan report:

Logfile of HijackThis v1.98.2
Scan saved at 9:39:30 PM, on 2/3/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\HJT\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: SoftWareObj Class - {20e70232-2e54-4290-8dcb-037f3ce18fd6} - C:\PROGRA~1\FREEPA~1\SoftWare.dll (file missing)
R3 - URLSearchHook: (no name) - {72917166-6b0c-4462-9c10-598f3d5d3c25} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6020\SiteAdv.dll
O2 - BHO: SpywareBlock Class - {0A87E45F-537A-40B4-B812-E2544C21A09F} - C:\Program Files\GhostSurf 2007 Platinum\SCActiveBlock.dll
O2 - BHO: SoftWare - {20e70232-2e54-4290-8dcb-037f3ce18fd6} - C:\PROGRA~1\FREEPA~1\SoftWare.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6020\SiteAdv.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [GhostSurf Reminder] "C:\Program Files\GhostSurf 2007 Platinum\Privacy Control Center.exe" reminder
O4 - HKLM\..\Run: [ZSScheduler] RunDll32.exe "C:\Program Files\FBM Software\ZeroSpyware\ZSScheduler.dll", runScheduler C:\Program Files\FBM Software\ZeroSpyware\
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AWMON] "C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe"
O4 - HKCU\..\Run: [ESPN BottomLine] D:\Program Files\ESPN\BottomLine\bline.exe
O4 - HKCU\..\Run: [SB Audigy 2 Startup Menu] "C:\Program Files\Creative\SBAudigy2ZS\Program\Startup Menu\ChkColor.EXE"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Scheduler.lnk = C:\Program Files\GhostSurf 2007 Platinum\Scheduler daemon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Extender Resource Monitor.lnk = C:\WINDOWS\ehome\RMSysTry.exe
O4 - Global Startup: GhostSurf proxy.lnk = C:\Program Files\GhostSurf 2007 Platinum\Proxy.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Privoxy.lnk = C:\Program Files\Privoxy\privoxy.exe
O4 - Global Startup: SpyCatcher Protector.lnk = C:\Program Files\GhostSurf 2007 Platinum\Protector.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/229?511a6e08b2094c8fa6c0c1fd4cfaf6dd
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/230?511a6e08b2094c8fa6c0c1fd4cfaf6dd
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} (Microsoft Virtual Server VMRC Advanced Control) - http://www.windowsvistatestdrive.com/Activ…iveXClient1.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://amiuptodate.mcafee.com/vsc/bin/2,0,…pdatePortal.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1150505871593
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…881/mcfscan.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6020\SiteAdv.dll
O20 - AppInit_DLLs: Interceptor.dll C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll


(All of this is still being done in Safe Mode)
Again, I apologize for bumping this.
I recently did a system restore to a couple of days ago and here is my new scan.

HJT log:

Logfile of HijackThis v1.98.2
Scan saved at 8:19:58 PM, on 2/5/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\ehome\RMSysTry.exe
C:\Program Files\GhostSurf 2007 Platinum\Proxy.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\ehome\RMSvc.exe
C:\Program Files\SiteAdvisor\6021\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Windows Defender\MpCmdRun.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Drew Tarzwell\My Documents\HJT\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:7212
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: SoftWareObj Class - {20e70232-2e54-4290-8dcb-037f3ce18fd6} - C:\PROGRA~1\FREEPA~1\SoftWare.dll (file missing)
R3 - URLSearchHook: (no name) - {72917166-6b0c-4462-9c10-598f3d5d3c25} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O2 - BHO: SpywareBlock Class - {0A87E45F-537A-40B4-B812-E2544C21A09F} - C:\Program Files\GhostSurf 2007 Platinum\SCActiveBlock.dll
O2 - BHO: SoftWare - {20e70232-2e54-4290-8dcb-037f3ce18fd6} - C:\PROGRA~1\FREEPA~1\SoftWare.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [AWMON] "C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe"
O4 - HKCU\..\Run: [ESPN BottomLine] D:\Program Files\ESPN\BottomLine\bline.exe
O4 - HKCU\..\Run: [SB Audigy 2 Startup Menu] "C:\Program Files\Creative\SBAudigy2ZS\Program\Startup Menu\ChkColor.EXE"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - Startup: Scheduler.lnk = C:\Program Files\GhostSurf 2007 Platinum\Scheduler daemon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Extender Resource Monitor.lnk = C:\WINDOWS\ehome\RMSysTry.exe
O4 - Global Startup: GhostSurf proxy.lnk = C:\Program Files\GhostSurf 2007 Platinum\Proxy.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: SpyCatcher Protector.lnk = C:\Program Files\GhostSurf 2007 Platinum\Protector.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/229?511a6e08b2094c8fa6c0c1fd4cfaf6dd
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/230?511a6e08b2094c8fa6c0c1fd4cfaf6dd
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} (Microsoft Virtual Server VMRC Advanced Control) - http://www.windowsvistatestdrive.com/Activ…iveXClient1.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://amiuptodate.mcafee.com/vsc/bin/2,0,…pdatePortal.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1150505871593
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…881/mcfscan.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

250 views and no response? :P I have rune a Gmer scan and right when I start it up I get a message saying it has caught a program that might be malicious. It then asks me if I want to do a complete scan. I have accepted and the program starts to scan. Towards the bottom it catches the System32:huy32.sys problem but crashes after about 5 minutes into the scan. Any help? (I apologize for being impatient about this, it's just I am doing online courses for my school and this problem is keeping me from doing it.)
Hi Squeaks and Welcome to TomCoyote,

You have the new rustock variant.

Download
http://www.uploads.ejvindh.net/rustbfix.exe
…and save it to your desktop.

Double click on rustbfix.exe to run the tool. If a Rustock.b-infection is found, you will shortly hereafter be asked to reboot the computer. The reboot will probably take quite a while, and perhaps 2 reboots will be needed. But this will happen automatically. After the reboot 2 logfiles will open (%root%\avenger.txt & %root%\rustbfix\pelog.txt). Post the content of these logfiles along with a new HijackThis log.
Thank you so much for your reply. I can't tell you how much it is appreciated.

I did all the steps and here are the 3 different pieces of information.

Pelog:

************************* Rustock.b-fix – By ejvindh *************************
Tue 02/06/2007 17:14:31.56

******************* Pre-run Status of system *******************

Rootkit driver huy32 is found. Starting the unload-procedure….

Rustock.b-ADS attached to the System32-folder:
:huy32.sys 70570
Total size: 70570 bytes.
Attempting to remove ADS…
system32: deleted 70570 bytes in 1 streams.

Looking for Rustock.b-files in the System32-folder:
No Rustock.b-files found in system32


******************* Post-run Status of system *******************

Rustock.b-driver on the system: NONE!

Rustock.b-ADS attached to the System32-folder:
No System32-ADS found.

Looking for Rustock.b-files in the System32-folder:
No Rustock.b-files found in system32


******************************* End of Logfile ********************************


Avenger:

Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\bsdxyqms

*******************

Script file located at: \??\C:\WINDOWS\system32\drdvmkjn.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Driver huy32 unloaded successfully.
Program C:\Rustbfix\2run.bat successfully set up to run once on reboot.

Completed script processing.

*******************

Finished! Terminate.


And the new HJT scan:

Logfile of HijackThis v1.98.2
Scan saved at 5:20:50 PM, on 2/6/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\NOTEPAD.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\ehome\RMSvc.exe
C:\Program Files\SiteAdvisor\6021\SAService.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\ehome\RMSysTry.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\GhostSurf 2007 Platinum\Scheduler daemon.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Drew Tarzwell\My Documents\HJT\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: SoftWareObj Class - {20e70232-2e54-4290-8dcb-037f3ce18fd6} - C:\PROGRA~1\FREEPA~1\SoftWare.dll (file missing)
R3 - URLSearchHook: (no name) - {72917166-6b0c-4462-9c10-598f3d5d3c25} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O2 - BHO: SpywareBlock Class - {0A87E45F-537A-40B4-B812-E2544C21A09F} - C:\Program Files\GhostSurf 2007 Platinum\SCActiveBlock.dll
O2 - BHO: SoftWare - {20e70232-2e54-4290-8dcb-037f3ce18fd6} - C:\PROGRA~1\FREEPA~1\SoftWare.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [AWMON] "C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe"
O4 - HKCU\..\Run: [SB Audigy 2 Startup Menu] "C:\Program Files\Creative\SBAudigy2ZS\Program\Startup Menu\ChkColor.EXE"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ESPN BottomLine] D:\Program Files\ESPN\BottomLine\bline.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - Startup: Scheduler.lnk = C:\Program Files\GhostSurf 2007 Platinum\Scheduler daemon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Extender Resource Monitor.lnk = C:\WINDOWS\ehome\RMSysTry.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/229?511a6e08b2094c8fa6c0c1fd4cfaf6dd
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/230?511a6e08b2094c8fa6c0c1fd4cfaf6dd
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} (Microsoft Virtual Server VMRC Advanced Control) - http://www.windowsvistatestdrive.com/Activ…iveXClient1.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://amiuptodate.mcafee.com/vsc/bin/2,0,…pdatePortal.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1150505871593
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…881/mcfscan.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll

Hi Squeaks,

Your last hijackthis log shows Logfile of HijackThis v1.98.2

Please use this link and download the newest version and post(reply) with a current hijackthis log. You will see Download Hijackthis button in the left margin.
http://www.tomcoyote.org/hjt/

This scan works with Internet Explorer.

STEP 1.
======
Panda Active Scan
Please go to Panda ActiveScan.
Once you are on the Panda site click the Scan your PC button
A new window will open…click the Check Now button
  • Enter your Country
  • Enter your State/Province
  • Enter your e-mail address and click send
  • Select either Home User or Company
  • Click the big Scan Now button
  • If it wants to install an ActiveX component allow it
  • It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
  • When download is complete, click on Local Disks to start the scan
  • When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.
Post the contents of the Panda scan report, along with a new HijackThis Log, by using Add Reply.
Let us know if any problems persist.
Hey Susan,

Thank you so much again!!! I am no longer getting a stop error and my computer seems to be running great. I had a little problem with my internet connection due to some proxy stuff, but I ironed it out finally.

Sorry about the HJT problem. I had to re-download it and I must of gotten the wrong one. Should be good now though.

I am unable to connect to Pandasoftware.com for some reason. My internet is fully working, but I can't connect to their server. Dunno if it's just me or if they are just down. I did do a HJT Scan however.

Logfile of HijackThis v1.99.1
Scan saved at 9:10:50 PM, on 2/6/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\ehome\RMSvc.exe
C:\Program Files\SiteAdvisor\6021\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\SiteAdvisor\6021\SiteAdv.exe
C:\WINDOWS\system32\DllHost.exe
C:\Program Files\Network Associates\VirusScan\mcshield.exe
C:\WINDOWS\system32\LVComsX.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\GhostSurf 2006 Platinum\Proxy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Drew Tarzwell\Desktop\Bug fixes\HJT\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:7212
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: SoftWareObj Class - {20e70232-2e54-4290-8dcb-037f3ce18fd6} - C:\PROGRA~1\FREEPA~1\SoftWare.dll (file missing)
R3 - URLSearchHook: (no name) - {72917166-6b0c-4462-9c10-598f3d5d3c25} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O2 - BHO: SpywareBlock Class - {0A87E45F-537A-40B4-B812-E2544C21A09F} - C:\Program Files\GhostSurf 2007 Platinum\SCActiveBlock.dll (file missing)
O2 - BHO: SoftWare - {20e70232-2e54-4290-8dcb-037f3ce18fd6} - C:\PROGRA~1\FREEPA~1\SoftWare.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [GhostSurf Reminder] "C:\Program Files\GhostSurf 2006 Platinum\Privacy Control Center.exe" reminder
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [AWMON] "C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe"
O4 - HKCU\..\Run: [SB Audigy 2 Startup Menu] "C:\Program Files\Creative\SBAudigy2ZS\Program\Startup Menu\ChkColor.EXE"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ESPN BottomLine] D:\Program Files\ESPN\BottomLine\bline.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Extender Resource Monitor.lnk = C:\WINDOWS\ehome\RMSysTry.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: SpyCatcher Protector.lnk = C:\Program Files\GhostSurf 2006 Platinum\Protector.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/229?511a6e08b2094c8fa6c0c1fd4cfaf6dd
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/230?511a6e08b2094c8fa6c0c1fd4cfaf6dd
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} (Microsoft Virtual Server VMRC Advanced Control) - http://www.windowsvistatestdrive.com/Activ…iveXClient1.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://amiuptodate.mcafee.com/vsc/bin/2,0,…pdatePortal.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1150505871593
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…881/mcfscan.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: rpcc - C:\WINDOWS\system32\rpcc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6021\SAService.exe

Glad things improved! :)

I almost skipped your posts. We look for 0 replies and if person has several responses, we think they are already receiving help.

Disable AdWatch:
Please disable AdWatch, as it may hinder the removal of some entries. You can re-enable it after you're clean.To disable AdWatch:
  • Open AdAware SE.
  • Go to AdWatch User Interface .
  • Go to Tools and Preferences.At the bottom of the screen you will see 2 options Active and Automatic.
  • Active : This will turn Ad-Watch On\Off without closing it
  • Automatic : Suspicious activity will be blocked automatically
  • Uncheck both options. You can enable these after resolving your problem.
After all of the fixes are complete it is very important that you enable AdWatch again.

Disable Microsoft Windows Defender:
We need to disable your Microsoft Windows Defender Real-time Protection as it may interfere with the fixes that we need to make.
  • Open Microsoft Windows Defender. Click Start, Programs, Windows Defender
  • Click on Tools, General Settings.
  • Under Real-time protection options, unselect the Turn on real-time protection check box
  • Click Save
After all of the fixes are complete it is very important that you enable Real-time Protection again.

Updating Java
  • Download the latest version of Java Runtime Environment (JRE) 6.0.
  • Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
  • Click the "Download" button to the right.
  • Check the box that says: "Accept License Agreement".
  • The page will refresh.
  • Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
  • Close any programs you may have running - especially your web browser.
  • Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
  • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on jre-6-windows-i586.exe to install the newest version.

Scan with HijackThis. Place a check against each of the following:
R3 - URLSearchHook: (no name) - {72917166-6b0c-4462-9c10-598f3d5d3c25} - (no file)
Close all windows or browsers except for Hijackthis. Click on Fix Checked when finished and exit HijackThis.
=========

Now run this online scan using Internet Explorer:
Kaspersky Online Scanner from http://www.kaspersky.com/virusscanner

* Turn off the real time scanner of any existing antivirus program while performing the online scan
Next Click on Launch Kaspersky Online Scanner

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then begin downloading the latest definition files:
  • Once the files have been downloaded click on NEXT
  • Now click on Scan Settings
  • In the scan settings make that the following are selected:
  • Scan using the following Anti-Virus database:
  • Standard
  • Scan Options:
  • Scan Archives
  • Scan Mail Bases
  • Click OK
  • Now under select a target to scan:
  • Select My Computer
  • This will program will start and scan your system.
  • The scan will take a while so be patient and let it run.
  • Once the scan is complete it will display if your system has been infected.
  • Now click on the Save as Text button:
  • Save the file to your desktop.
Copy and paste that information from Kapersky in your next post.


Post (reply) with log from Kapersky, and a fresh HijackThis log.
Thanks for the help again. After I posted in my own thread I was thinking it might of done more harm than good. I wasn't complaining it was taking to long, just surprised at the amount of views it had compared to the other threads.

Here are both scans:
Kasperksy scan:

——————————————————————————-
KASPERSKY ONLINE SCANNER REPORT
Wednesday, February 07, 2007 8:02:37 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 8/02/2007
Kaspersky Anti-Virus database records: 251015
——————————————————————————-

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\
F:\

Scan Statistics:
Total number of scanned objects: 135797
Number of viruses found: 3
Number of infected objects: 5 / 0
Number of suspicious objects: 0
Duration of the scan process: 01:42:41

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3ad391678a806ec4d691e83aaa393b6f_24adf822-76f7-4481-b30b-ff1b40f8687f Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\eHome\logs\ehRecvr.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-10312006-122244.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Network Associates\Common Framework\Db\Agent_DREWSRIG.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Network Associates\Common Framework\Db\PrdMgr_DREWSRIG.log Object is locked skipped
C:\Documents and Settings\All Users\DRM\Cache\Indiv03.tmp Object is locked skipped
C:\Documents and Settings\All Users\DRM\drmstore.hds Object is locked skipped
C:\Documents and Settings\Drew Tarzwell\Application Data\Lavasoft\Ad-Aware\Logs\AWEVLOG.txt Object is locked skipped
C:\Documents and Settings\Drew Tarzwell\Application Data\SiteAdvisor\SiteAdv.csh Object is locked skipped
C:\Documents and Settings\Drew Tarzwell\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Drew Tarzwell\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_360.wmdb Object is locked skipped
C:\Documents and Settings\Drew Tarzwell\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Drew Tarzwell\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Drew Tarzwell\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Drew Tarzwell\Local Settings\Temp\hpodvd09.log Object is locked skipped
C:\Documents and Settings\Drew Tarzwell\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Drew Tarzwell\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Drew Tarzwell\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Drew Tarzwell\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Quarantine\taskdir.exe.Vir Infected: Email-Worm.Win32.Zhelatin.i skipped
C:\quarantine\prompt[1].php.Vir.Vir.Vir/packed Infected: Trojan-Downloader.JS.IstBar.k skipped
C:\quarantine\prompt[1].php.Vir.Vir.Vir GZIP: infected - 1 skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP325\A0062208.dll Infected: Trojan-Proxy.Win32.Dlena.bt skipped
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP342\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{B1BBAD35-314E-4ED3-B1E3-46B96FC62054}.crmlog Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{38519496-AAE7-4254-8292-ADD1D3FEA92A}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\ACEEvent.evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\Media Ce.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\atapi.sys Object is locked skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\drivers\sptd0205.sys Object is locked skipped
C:\WINDOWS\system32\game0.exe.exe Infected: Email-Worm.Win32.Zhelatin.i skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_92c.dat Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\aff1017019681a2ea68fc50082a605d4_0fd961ff-e30d-43a5-af70-e313bc7a00f7 Object is locked skipped
D:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
D:\Documents and Settings\All Users\Documents\Config\desktop2.idf Object is locked skipped
D:\Documents and Settings\All Users\Documents\Fonts\SwUniNew.tff Object is locked skipped
D:\Documents and Settings\All Users\Documents\Softwrap\STREAMCASTNE884A\Morpheus.sw2 Object is locked skipped
D:\Documents and Settings\Drew\My Documents\filelib\Thumbs.db Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

Scan process completed.


and

HJT

Logfile of HijackThis v1.99.1
Scan saved at 8:05:59 PM, on 2/7/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\ehome\RMSvc.exe
C:\Program Files\SiteAdvisor\6021\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SiteAdvisor\6021\SiteAdv.exe
C:\WINDOWS\system32\sol.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Drew Tarzwell\Desktop\Bug fixes\HJT\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: SoftWareObj Class - {20e70232-2e54-4290-8dcb-037f3ce18fd6} - C:\PROGRA~1\FREEPA~1\SoftWare.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O2 - BHO: SpywareBlock Class - {0A87E45F-537A-40B4-B812-E2544C21A09F} - C:\Program Files\GhostSurf 2007 Platinum\SCActiveBlock.dll (file missing)
O2 - BHO: SoftWare - {20e70232-2e54-4290-8dcb-037f3ce18fd6} - C:\PROGRA~1\FREEPA~1\SoftWare.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [GhostSurf Reminder] "C:\Program Files\GhostSurf 2007 Platinum\Privacy Control Center.exe" reminder
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [AWMON] "C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Watch.exe"
O4 - HKCU\..\Run: [SB Audigy 2 Startup Menu] "C:\Program Files\Creative\SBAudigy2ZS\Program\Startup Menu\ChkColor.EXE"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ESPN BottomLine] D:\Program Files\ESPN\BottomLine\bline.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Scheduler.lnk = C:\Program Files\GhostSurf 2006 Platinum\Scheduler daemon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Extender Resource Monitor.lnk = C:\WINDOWS\ehome\RMSysTry.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: SpyCatcher Protector.lnk = C:\Program Files\GhostSurf 2006 Platinum\Protector.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/229?511a6e08b2094c8fa6c0c1fd4cfaf6dd
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/230?511a6e08b2094c8fa6c0c1fd4cfaf6dd
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d…can_unicode.cab
O16 - DPF: {4EFA317A-8569-4788-B175-5BAF9731A549} (Microsoft Virtual Server VMRC Advanced Control) - http://www.windowsvistatestdrive.com/Activ…iveXClient1.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://amiuptodate.mcafee.com/vsc/bin/2,0,…pdatePortal.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1150505871593
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…881/mcfscan.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: rpcc - C:\WINDOWS\system32\rpcc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6021\SAService.exe


I also wanted to let you know I will be donating to the site thanks to the great help you guys give out.
I do not see a firewall application installed. Your Network Associates applications does not include a firewall does it? Perhaps you have a hardware firewall but a combination of both a software firewall and a hardware firewall is better. Just be sure there are no conflicts. Please do not rely solely on the Windows XP firewall. Using a software firewall other than the XP firewall will allow you to give/deny access for applications that want to go online. Select one of these, or another of your choice:
Test your Firewall - Please test your firewall and make sure it is working properly.
Test Firewall

===========
Well Kapersky found these:

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Quarantine\taskdir.exe.Vir Infected: Email-Worm.Win32.Zhelatin.i skipped

We take care of _restore files at the end.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP325\A0062208.dll Infected: Trojan-Proxy.Win32.Dlena.bt skipped

I have not seen a quarantine folder like this–it is not associated with a product in the file name path (like above has Grisoft\AVG Anti-Spyware 7.5). I would recommend deleting the file out of the quarantine.
C:\quarantine\prompt[1].php.Vir.Vir.Vir/packed Infected: Trojan-Downloader.JS.IstBar.k skipped

Please set your system to show all files; please see here if you're unsure how to do this.

Reboot into Safe Mode: please see here if you are not sure how to do this.

Using Windows Explorer, locate the following files/folders, and delete them:
C:\quarantine\prompt[1].php<=file
C:\WINDOWS\system32\game0.exe.exe<=file

Exit Explorer, and reboot as normal afterwards.

Please run Kapersky again and let's make sure we got them and nothing else cropped up.
Because no reply was made. This topic is now closed. If you wish it reopened, please send us an email
(Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.


Also follow the recommendations in Tony Klein's article
So how did I get infected in the first place?

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI