What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Please Help

2 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
hi. for some reason my hard drive keeps filling up. I think i lost around 2 gb from my c drive and only have 602 mb. That number keeps on decreasing until a warning tells me i am running low on memory, then it goes back up and starts falling again. I also spotted the virus that installs the av.exe. I read another post reporting the same thing about the hard drive filling up and have also scanned the smitfraudfix.

This is my hjt report

Logfile of HijackThis v1.99.1
Scan saved at 9:44:58 PM, on 4/4/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\mcshield.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\EarthLink 5.0\ConMgr.exe
C:\Program Files\EarthLink 5.0\updatemgr.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
C:\WINDOWS\system32\mrtMngr.EXE
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\kdx\khost.exe
C:\Program Files\instant messenger\aim.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\WINDOWS\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\hijackthis\HijackThis.exe
c:\dell\E-center\gtb2.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.earthlink.net/partner/more/msie…ton/search.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotmail.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by EarthLink, Inc.
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ECenter] "c:\dell\E-Center\gtb.exe"
O4 - HKLM\..\Run: [ConMgr.exe] "C:\Program Files\EarthLink 5.0\ConMgr.exe"
O4 - HKLM\..\Run: [UpdateMgr.exe] "C:\Program Files\EarthLink 5.0\updatemgr.exe" /NOCM
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\instant messenger\aim.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=http://start.earthlink.net
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/…lscbase8300.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1154864966125
O16 - DPF: {A7ECD556-D6F6-4F41-8C6B-14AB246801A0} (Secure Delivery) - http://cdn.digitalcity.com/video/kdx.cab
O16 - DPF: {C190FF32-96D0-445F-9F60-5CF288FD3D0F} (ActiveFormX Control) - https://resnet.verify.binghamton.edu:8443/r…/CAT/CNICAT.cab
O19 - User stylesheet: (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Intel® PROSet/Wireless SSO Service (WLANKEEPER) - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

avg report

AVG Anti-Spyware - Scan Report
———————————————————

+ Created at: 9:36:12 PM 4/4/2007

+ Scan result:



:mozilla.621:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.622:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.623:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.850:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.251:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.252:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.253:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.254:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.255:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.256:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.257:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.235:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Burstbeacon : No action taken.
:mozilla.65:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.66:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.67:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.68:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.448:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.451:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.452:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.453:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.74:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.75:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.76:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.944:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Cpvfeed : No action taken.
:mozilla.945:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Cpvfeed : No action taken.
:mozilla.946:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Cpvfeed : No action taken.
:mozilla.947:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Cpvfeed : No action taken.
:mozilla.958:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Esomniture : No action taken.
:mozilla.10:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.6:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.7:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.8:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.9:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.103:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.104:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.105:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.895:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.896:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.897:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.898:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.661:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Imrworldwide : No action taken.
:mozilla.662:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Imrworldwide : No action taken.
:mozilla.454:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Information : No action taken.
:mozilla.455:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Information : No action taken.
:mozilla.456:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Information : No action taken.
:mozilla.667:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.668:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.669:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.612:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Msn : No action taken.
:mozilla.613:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Msn : No action taken.
:mozilla.614:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Msn : No action taken.
:mozilla.78:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Netflame : No action taken.
:mozilla.680:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Paypal : No action taken.
:mozilla.40:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.41:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.42:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.43:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.44:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.45:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.46:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.47:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.48:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.49:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.50:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.51:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.52:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.53:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.54:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.55:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.56:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.57:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.58:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.59:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.60:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.61:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.62:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.63:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.64:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.449:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revenue : No action taken.
:mozilla.450:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revenue : No action taken.
:mozilla.586:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.587:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.588:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.589:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.590:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.591:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.592:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.593:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.594:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.595:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.596:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.597:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.598:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.599:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.600:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.601:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.602:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.603:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.604:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
C:\Documents and Settings\Michael Gee\Cookies\michael_gee@revsci[2].txt -> TrackingCookie.Revsci : No action taken.
:mozilla.378:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.379:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.380:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.381:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.382:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.383:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.949:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.950:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.951:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.952:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.953:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.954:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.286:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.287:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.288:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.289:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.290:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.291:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.292:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.293:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.294:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.295:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.296:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.297:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.298:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.299:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.300:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.301:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.302:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.303:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.304:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.305:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.306:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.307:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.308:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.309:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.310:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.311:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.312:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.313:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.314:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.315:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.316:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.317:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.318:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.319:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.320:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.321:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.322:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.323:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.324:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.325:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.326:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.327:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.328:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.329:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.330:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.331:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.332:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.333:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.334:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.335:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.244:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.245:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.246:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.247:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.248:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.249:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.250:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.369:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.630:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
:mozilla.126:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Webtrends : No action taken.
:mozilla.141:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.142:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.143:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.144:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.521:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.522:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.523:C:\Documents and Settings\Michael Gee\Application Data\Mozilla\Firefox\Profiles\4mpp2xkh.default\cookies.txt -> TrackingCookie.Zedo : No action taken.


::Report end


SmitFraudFix v2.164

Scan done at 21:14:44.09, Wed 04/04/2007
Run from C:\Documents and Settings\Michael Gee\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\mcshield.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\EarthLink 5.0\ConMgr.exe
C:\Program Files\EarthLink 5.0\updatemgr.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
C:\WINDOWS\system32\mrtMngr.EXE
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\kdx\khost.exe
C:\Program Files\instant messenger\aim.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\WINDOWS\system32\cmd.exe
c:\dell\E-center\gtb.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Michael Gee


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Michael Gee\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\MICHAE~1\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32-huy32



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Intel® PRO/Wireless 3945ABG Network Connection - Packet Scheduler Miniport
DNS Server Search Order: 192.168.1.1
DNS Server Search Order: 192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{B1DD0C6A-A9B9-46B6-89DB-266EBBC60B74}: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{B1DD0C6A-A9B9-46B6-89DB-266EBBC60B74}: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{B1DD0C6A-A9B9-46B6-89DB-266EBBC60B74}: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End

any help greatly appreciated. thanks
Post #2
evikou :D

Welcome to Tom Coyote . Sorry about the delay in responding but we are as most times just overwhelmed with logs.

Open HijackThis > Do a System Scan Only, close your browser and all open windows, the only program or window you should have open is HijackThis, check the following entries and click on Fix Checked.

O19 - User stylesheet: (file missing)


  • Your Java is out of date and leaving your system vulnerable.
  • Go to your Add-Remove Programs in the Control Panel and uninstall any previous versions of Java (J2SE Runtime Environment)
  • It should have an icon next to it:
    [external image: Posted Image]
    Select it and click Remove.
  • Reboot your system.
  • Then go to the Sun Microsystems and install the update
  • Java Runtime Environment (JRE) 5.0 Update 11 <–This is what you need to download and install.
  • If you chose the online installation, it will prompt you to run the program.
  • If you chose the offline installation, you will be prompted to save the file and you can run it from wherever you saved it.
  • Then after install you can verify your installation here Sun Java Verify
I like to to do the offline installation and save the setup file in case I may need it in the future



The rest of your log looks fine :thumbup: and all AVG found were cookies and there is no evidence on your HJT log or the Smitfraud log of any smitfraud infection.

It's Not Always Malware
  • Slow Computer

This may be a problem with your hard drive. You can try posting on one of these other sites.

Windows Tech Support Forums
Post #5
Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI