Jump to content

Build Theme!
  •  
  • Unreplied Topics
  • Downloads
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 93084 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

I Just Cant Get Rid of Junk

Started by rexcatz , Feb 27 2007 04:27 PM

  • This topic is locked This topic is locked
6 replies to this topic

#1 rexcatz

rexcatz

    Authentic Member

  • Authentic Member
  • PipPip
  • 35 posts

Posted 27 February 2007 - 04:27 PM

These never get romoved from my computer even tho Spybot and Adaware say they have been removed:

shell32.dll
StatCounter
AdRevolver
CasaleMedia
Clickbank
Direct Track
Media Plex

Logfile of HijackThis v1.99.1
Scan saved at 8:23:34 AM, on 28/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\LG Software\On Screen Display\HotKey.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\LG Software\IP Operator\IP Operator.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\PROGRA~1\Webshots\Webshots.scr
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\SRS Labs\WOWXT and TSXT Driver\SRS_PostInstaller.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\DOCUME~1\MICHAE~1\LOCALS~1\Temp\Temporary Directory 8 for hijackthis.zip\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [EPSON Stylus CX5700F Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIALP.EXE /P27 "EPSON Stylus CX5700F Series" /O6 "USB001" /M "Stylus CX5700F"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [KeybdUtility] "C:\Program Files\LG Software\On Screen Display\HotKey.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [IPO3] "C:\Program Files\LG Software\IP Operator\IP Operator.exe" -aUtOsTaRtFrOmReG
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop...p/PCPitStop.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewi...oOnlineScan.cab
O16 - DPF: {2E12FB00-546B-4EE3-9CC2-057BF02E1C17} (Webshots Multiple Media Uploader - Container) - http://community.web...wsaxcontrol.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1170378893609
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-sec...m/ols/fscax.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SRS PostInstaller Service (SRS_PostInstaller) - SRS Labs, Inc. - C:\Program Files\SRS Labs\WOWXT and TSXT Driver\SRS_PostInstaller.exe

    Advertisements

Register to Remove

#2 LDTate

LDTate

    Grand Poobah

  • Root Admin
  • 57,211 posts

Posted 06 March 2007 - 06:24 PM

Hello and welcome to the forum.

Sorry about the delay in responding :(

If you still need help, Scan again with HijackThis, and copy/paste" a new log file into this thread.

Also please describe how your computer behaves at the moment.

Please use the Posted Image Button below to reply. Thanks

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 

#3 rexcatz

rexcatz

    Authentic Member

  • Authentic Member
  • PipPip
  • 35 posts

Posted 08 March 2007 - 12:16 AM

Hi
The computer doesnt run too badly but then again, its quite new. Here is the new HJT log. Thankyou

Logfile of HijackThis v1.99.1
Scan saved at 4:13:28 PM, on 8/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\LG Software\On Screen Display\HotKey.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\SRS Labs\WOWXT and TSXT Driver\SRS_PostInstaller.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\LG Software\IP Operator\IP Operator.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\Webshots\Webshots.scr
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\DOCUME~1\MICHAE~1\LOCALS~1\Temp\Temporary Directory 9 for hijackthis.zip\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [EPSON Stylus CX5700F Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIALP.EXE /P27 "EPSON Stylus CX5700F Series" /O6 "USB001" /M "Stylus CX5700F"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [KeybdUtility] "C:\Program Files\LG Software\On Screen Display\HotKey.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [IPO3] "C:\Program Files\LG Software\IP Operator\IP Operator.exe" -aUtOsTaRtFrOmReG
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop...p/PCPitStop.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewi...oOnlineScan.cab
O16 - DPF: {2E12FB00-546B-4EE3-9CC2-057BF02E1C17} (Webshots Multiple Media Uploader - Container) - http://community.web...wsaxcontrol.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1170378893609
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-sec...m/ols/fscax.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SRS PostInstaller Service (SRS_PostInstaller) - SRS Labs, Inc. - C:\Program Files\SRS Labs\WOWXT and TSXT Driver\SRS_PostInstaller.exe

#4 LDTate

LDTate

    Grand Poobah

  • Root Admin
  • 57,211 posts

Posted 08 March 2007 - 03:18 PM

Delete this file:
ALCMTR.EXE

Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»

Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.


(If you use FireFox or the Opera browser
To keep saved passwords, click No at the prompt.)

It's normal after running ATF cleaner that the PC will be slower to boot the first time.

Next:

Download AVG Anti-Spyware from HERE and save that file to your
desktop.
This is a 30 day trial of the program
  • Once you have downloaded AVG Anti-Spyware, locate the icon on the desktop
    and double-click it to launch the set up program.
  • Once the setup is complete you will need run ewido and update the definition
    files.
  • On the main screen select the icon "Update" then select the "
    Update now    " link.
    • Next select the "Start Update" button, the update will start and a
      progress bar will show the updates being installed.
  • Once the update has completed select the "Scanner" icon at the top of
    the screen, then select the "Settings" tab.
  • Once in the Settings screen click on "Recommended actions" and then
    select " "Quarantine" .".
  • Under "Reports"
    • Select "Automatically generate report after every scan"
    • Un-Select "Only if threats were found"
Close AVG Anti-Spyware, Do Not run a scan just yet, we will shortly.
  • Reboot your computer into SafeMode. You can do this by restarting
    your computer and continually tapping the F8 key until a menu appears.

    Use your up arrow key to highlight SafeMode then hit enter.
    IMPORTANT: Do not open any other windows or
    programs while AVG Anti-Spyware is scanning, it may interfere with the scanning proccess:
  • Lauch AVG Anti-Spyware by double-clicking the icon on your desktop.
  • Select the "Scanner" icon at the top and then the "Scan" tab
    then click on "Complete System Scan".
  • ewido will now begin the scanning process, be patient this may take a little
    time.
    Once the scan is complete do the following:
  • If you have any infections you will prompted, then select "Apply all
    actions    "
  • Next select the "Reports" icon at the top.
  • Select the "Save report as" button in the lower left hand of the
    screen and save it to a text file on your system (make sure to remember where
    you saved that file, this is important).
  • Close AVG Anti-Spyware and reboot your system back into Normal Mode and post the
    results of the AVG Anti-Spyware report scan along with a new HijackThis log.

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 

#5 rexcatz

rexcatz

    Authentic Member

  • Authentic Member
  • PipPip
  • 35 posts

Posted 10 March 2007 - 12:40 AM

Thankyou...you have a lot to sift thru here...Belinda


AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 11:01:30 AM 10/03/2007

+ Scan result:



C:\Documents and Settings\Michael & Dragana\Local Settings\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\Cache\B4F33C7Dd01/script.ini -> Backdoor.Zapchast : Cleaned.
C:\Documents and Settings\Michael & Dragana\Local Settings\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\Cache\B4F33C7Dd01/sup.reg -> Backdoor.Zapchast : Cleaned.
:mozilla.48:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.2o7 : Cleaned.
:mozilla.49:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.2o7 : Cleaned.
:mozilla.213:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Adbrite : Cleaned.
:mozilla.214:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Adbrite : Cleaned.
:mozilla.215:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Adbrite : Cleaned.
:mozilla.687:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.688:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.19:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.24:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.25:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.431:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.434:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.337:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.339:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.371:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.375:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.116:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Advertising : Cleaned.
:mozilla.117:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Advertising : Cleaned.
:mozilla.118:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Advertising : Cleaned.
:mozilla.119:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Advertising : Cleaned.
:mozilla.120:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Advertising : Cleaned.
:mozilla.70:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Atdmt : Cleaned.
:mozilla.379:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Burstnet : Cleaned.
:mozilla.380:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Burstnet : Cleaned.
:mozilla.381:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Burstnet : Cleaned.
:mozilla.565:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.566:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.100:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.101:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.65:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.68:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.69:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.70:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.71:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.72:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.73:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.95:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.96:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.97:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.98:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.99:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.156:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Com : Cleaned.
:mozilla.157:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Com : Cleaned.
:mozilla.165:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.166:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.112:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.487:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.777:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.188:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Falkag : Cleaned.
:mozilla.189:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Falkag : Cleaned.
:mozilla.190:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Falkag : Cleaned.
:mozilla.191:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Falkag : Cleaned.
:mozilla.456:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.457:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.458:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.665:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.666:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.667:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.192:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Fastclick : Cleaned.
:mozilla.193:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Fastclick : Cleaned.
:mozilla.194:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Fastclick : Cleaned.
:mozilla.195:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Fastclick : Cleaned.
:mozilla.196:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Fastclick : Cleaned.
:mozilla.286:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.306:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.320:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.324:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.414:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.516:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.695:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.696:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.697:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.698:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.699:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.700:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.701:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.702:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.703:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.704:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.705:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.706:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.721:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.734:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.735:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.767:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.808:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.811:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.357:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Hitbox : Cleaned.
:mozilla.358:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Hitbox : Cleaned.
:mozilla.37:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Hitbox : Cleaned.
:mozilla.38:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Hitbox : Cleaned.
:mozilla.39:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Hitbox : Cleaned.
:mozilla.827:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Hypertracker : Cleaned.
:mozilla.710:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Information : Cleaned.
:mozilla.20:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Linksynergy : Cleaned.
:mozilla.23:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Linksynergy : Cleaned.
:mozilla.531:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Liveperson : Cleaned.
:mozilla.717:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.719:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.278:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Masterstats : Cleaned.
:mozilla.500:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.150:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.910:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.911:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.176:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Overture : Cleaned.
:mozilla.317:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Overture : Cleaned.
:mozilla.66:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Pointroll : Cleaned.
:mozilla.67:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Pointroll : Cleaned.
:mozilla.68:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Pointroll : Cleaned.
:mozilla.187:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.55:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Real : Cleaned.
:mozilla.931:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Real : Cleaned.
:mozilla.932:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Real : Cleaned.
:mozilla.181:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Realmedia : Cleaned.
:mozilla.182:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Realmedia : Cleaned.
:mozilla.183:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Realmedia : Cleaned.
:mozilla.184:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Realmedia : Cleaned.
:mozilla.285:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.286:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.287:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.714:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.267:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Revsci : Cleaned.
:mozilla.268:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Revsci : Cleaned.
:mozilla.269:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Revsci : Cleaned.
:mozilla.271:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Revsci : Cleaned.
:mozilla.368:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.369:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.370:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.372:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.373:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.374:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.376:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.377:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.170:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.171:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.172:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.173:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.174:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.175:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.85:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.86:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.87:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.88:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.89:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.90:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.665:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Sitestat : Cleaned.
:mozilla.666:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Sitestat : Cleaned.
:mozilla.900:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.901:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.216:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Statcounter : Cleaned.
:mozilla.217:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Statcounter : Cleaned.
:mozilla.222:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Statcounter : Cleaned.
:mozilla.223:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Statcounter : Cleaned.
:mozilla.40:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.41:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.42:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.43:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.44:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.45:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.46:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.47:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.48:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.49:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.50:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.248:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Tacoda : Cleaned.
:mozilla.249:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Tacoda : Cleaned.
:mozilla.250:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Tacoda : Cleaned.
:mozilla.251:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Tacoda : Cleaned.
:mozilla.252:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Tacoda : Cleaned.
:mozilla.363:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.364:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.367:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.124:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.338:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.336:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Trafic : Cleaned.
:mozilla.421:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Trafic : Cleaned.
:mozilla.18:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.21:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.348:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Web-stat : Cleaned.
:mozilla.349:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Web-stat : Cleaned.
:mozilla.350:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Web-stat : Cleaned.
:mozilla.66:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.67:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.353:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.348:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.477:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Yadro : Cleaned.
:mozilla.105:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.106:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.108:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.109:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.304:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.305:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.306:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.307:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.224:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Zedo : Cleaned.
:mozilla.225:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Zedo : Cleaned.
:mozilla.226:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Zedo : Cleaned.
:mozilla.227:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Zedo : Cleaned.
:mozilla.228:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt.old -> TrackingCookie.Zedo : Cleaned.
:mozilla.259:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.260:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.261:C:\Documents and Settings\Michael & Dragana\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
C:\Documents and Settings\Michael & Dragana\Local Settings\Application Data\Mozilla\Firefox\Profiles\teyhkgqf.default\Cache\B4F33C7Dd01/sup.bat -> Trojan.Zapchas.F : Cleaned.


::Report end



Logfile of HijackThis v1.99.1
Scan saved at 4:37:43 PM, on 10/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\SRS Labs\WOWXT and TSXT Driver\SRS_PostInstaller.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\LG Software\On Screen Display\HotKey.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\LG Software\IP Operator\IP Operator.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\Webshots\Webshots.scr
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\Program Files\Microsoft Works\WkDStore.exe
C:\WINDOWS\msagent\AgentSvr.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\ComponentLauncher.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\DOCUME~1\MICHAE~1\LOCALS~1\Temp\Temporary Directory 10 for hijackthis.zip\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [EPSON Stylus CX5700F Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIALP.EXE /P27 "EPSON Stylus CX5700F Series" /O6 "USB001" /M "Stylus CX5700F"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [KeybdUtility] "C:\Program Files\LG Software\On Screen Display\HotKey.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [IPO3] "C:\Program Files\LG Software\IP Operator\IP Operator.exe" -aUtOsTaRtFrOmReG
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop...p/PCPitStop.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewi...oOnlineScan.cab
O16 - DPF: {2E12FB00-546B-4EE3-9CC2-057BF02E1C17} (Webshots Multiple Media Uploader - Container) - http://community.web...wsaxcontrol.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1170378893609
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-sec...m/ols/fscax.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SRS PostInstaller Service (SRS_PostInstaller) - SRS Labs, Inc. - C:\Program Files\SRS Labs\WOWXT and TSXT Driver\SRS_PostInstaller.exe

#6 LDTate

LDTate

    Grand Poobah

  • Root Admin
  • 57,211 posts

Posted 10 March 2007 - 07:04 AM

You can remove any programs I had you install. Use Add/Remove Programs to remove if listed there:

Log looks good :D


You need to create a new Clean restore point.

Note: This will remove all previous Restore Points

Turn off System Restore:

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

Restart your computer, turn it back on.

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Remove the Check Turn off System Restore.
Click Apply, and then click OK.

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Check "Hide file extensions for known file types."
Under the "Hidden files" folder, Uncheck "Show hidden files and folders."
Check "Hide protected operating system files."
Click Apply, and then click OK.



If you dont have any programs like these, I would recommend that you get them.
Spywareblaster,
Spywareguard.


Also get a FREE FIREWALL and FREE ANTI VIRUS if you need one.

Only run one Anti-Virus and Firewall program.

It is critical to have both a firewall and anti virus to protect your system.

Keep your system up to date and run Adaware & Spybot, once a week works, and hopefully you will be ok from here on. Both are available below.

Do not use Ad-aware if you have McAfee's VirusScan and AntiSpyware


Safe Surfing. :D

I would also suggest you read this:
So how did I get infected in the first place?
by Tony Klein

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 

#7 LDTate

LDTate

    Grand Poobah

  • Root Admin
  • 57,211 posts

Posted 11 March 2007 - 04:30 PM

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoy...showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 

Related Topics

Back to Virus, Spyware & Malware Removal · Next Unread Topic →

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. What the Tech
  2. → Spyware / Malware / Virus Removal
  3. → Virus, Spyware & Malware Removal
  4. Privacy Policy
  5. Terms of Use ·