This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

My Browser Keeps Getting Highjacked

48 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

My newest Logfile. Please help!



Logfile of HijackThis v1.99.1
Scan saved at 12:38:28 PM, on 4/26/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\default\Desktop\Computer stuff\HighjackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [InfoData] rundll32.exe "C:\WINDOWS\System32\ojephfri.dll",realset
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZN
O9 - Extra button: (no name) - {06FE5D02-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: &Find Pages Linking to this URL - {06FE5D02-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {06FE5D03-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: Find Other Pages on this &Host - {06FE5D03-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {06FE5D04-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: AV Live - {06FE5D04-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: AV &Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O12 - Plugin for .wma: C:\PROGRAM FILES\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npdsplay.dll
O12 - Plugin for .xml: C:\Program Files\Netscape\Netscape Browser\PLUGINS\npTrident.dll
O15 - Trusted Zone: *.sxload.net (HKLM)
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab46479.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX 5.5 Basic) - http://www.bestmark.com/support/ScriptX.cab
O16 - DPF: {26098EA2-C95D-48EA-89B4-63C5A63BD42F} - http://www.pacimedia.com/install/pcs_0021.exe
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {4169B5A0-9048-11D6-BDFF-00C0F024AF20} (ActiveXTester.TesterControl) - http://www.jasons-toolbox.com/BrowserSecur…tiveXTester.ocx
O16 - DPF: {444B911E-6E55-4A11-B3E9-0D3E21AE0437} - http://www.exfol.com/v/1/i/eins008.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by110fd.bay110.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1151621816202
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (ZPA_TexasHoldem Object) - http://zone.msn.com/bingame/zpagames/zpa_txhe.cab45837.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab34246.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/5m/vir…5/installer.exe
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab
O16 - DPF: {EE8B6D5F-FEF2-11D0-B13F-00A024798EF3} (Microsoft Search Settings Control) - http://lg.home.microsoft.com/search/lobby/searchsettings.cab
O16 - DPF: {FF3C5A9F-5A91-4930-80E8-4709194C2AD3} (CheckersZPA Object) - http://zone.msn.com/bingame/zpagames/Check…PA.cab40641.cab
O20 - AppInit_DLLs:
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
Hi and welcome to the forums. :) I'm Markka and I will be helping you with your malware issues. I'll check your HijackThis log. Right now I'm MRU Undergrad, everything that I post to you must be checked by teachers of Malware Removal University. Please be patient. :)
Hi Benbar36 :)

We can definitely help you, but first you need to help us. You are quite behind on your Windows Updates and Patches!!

The first step in this process is to apply Service Pack 1a for Windows XP. Without this update, you're wide open to re-infection, and we're both just wasting our time.
Click here to get WinXP SP1a: http://www.microsoft.com/downloads/details…&DisplayLang=en

Apply the update, reboot, then go to Windows Update and install all the Critical Updates (Note: Except for WinXP SP2)
Click here for Windows Update: http://www.windowsupdate.com/

After installing all the Patches and updates, reboot, then post a fresh Hijack This log.
Ok I tried to do this,but MS says I have an invalid copy of XP so I have to buy a new key. It cost me $150.00, but I should have it in a few days. After I get everything installed I will re-post.
hELLO Again,

Here is my latest log after I downloaded and installed updates. Thanks for helping me.

Logfile of HijackThis v1.99.1
Scan saved at 6:48:11 AM, on 4/29/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\WgaTray.exe
C:\WINDOWS\SYSTEM32\taskmgr.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\default\Desktop\Computer stuff\HighjackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [InfoData] rundll32.exe "C:\WINDOWS\System32\ojephfri.dll",realset
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [A00F61B3B5.exe] C:\DOCUME~1\default\LOCALS~1\Temp\_A00F61B3B5.exe
O4 - HKCU\..\Run: [A00F61B3DD.exe] C:\DOCUME~1\default\LOCALS~1\Temp\_A00F61B3DD.exe
O4 - HKCU\..\Run: [A00F25AD038.exe] C:\DOCUME~1\default\LOCALS~1\Temp\_A00F25AD038.exe
O4 - HKCU\..\Run: [A00F25B7BCB.exe] C:\DOCUME~1\default\LOCALS~1\Temp\_A00F25B7BCB.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZN
O9 - Extra button: (no name) - {06FE5D02-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: &Find Pages Linking to this URL - {06FE5D02-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {06FE5D03-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: Find Other Pages on this &Host - {06FE5D03-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {06FE5D04-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: AV Live - {06FE5D04-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: AV &Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O12 - Plugin for .wma: C:\PROGRAM FILES\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npdsplay.dll
O15 - Trusted Zone: *.sxload.net (HKLM)
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab46479.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX 5.5 Basic) - http://www.bestmark.com/support/ScriptX.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {26098EA2-C95D-48EA-89B4-63C5A63BD42F} - http://www.pacimedia.com/install/pcs_0021.exe
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {4169B5A0-9048-11D6-BDFF-00C0F024AF20} (ActiveXTester.TesterControl) - http://www.jasons-toolbox.com/BrowserSecur…tiveXTester.ocx
O16 - DPF: {444B911E-6E55-4A11-B3E9-0D3E21AE0437} - http://www.exfol.com/v/1/i/eins008.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by110fd.bay110.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1151621816202
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (ZPA_TexasHoldem Object) - http://zone.msn.com/bingame/zpagames/zpa_txhe.cab45837.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab34246.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/5m/vir…5/installer.exe
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab
O16 - DPF: {EE8B6D5F-FEF2-11D0-B13F-00A024798EF3} (Microsoft Search Settings Control) - http://lg.home.microsoft.com/search/lobby/searchsettings.cab
O16 - DPF: {FF3C5A9F-5A91-4930-80E8-4709194C2AD3} (CheckersZPA Object) - http://zone.msn.com/bingame/zpagames/Check…PA.cab40641.cab
O20 - AppInit_DLLs:
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
Hello,

Here is newest Scan, with Comodo Loaded.

Logfile of HijackThis v1.99.1
Scan saved at 11:47:31 AM, on 4/29/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WgaTray.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Comodo\Firewall\cpf.exe
C:\Program Files\Comodo\Firewall\cpfupdat.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\default\Desktop\Computer stuff\HighjackThis\Scanner.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=566…www.google.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=566…ER}&ar=home
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost
O2 - BHO: (no name) - {1F644DA9-5607-4202-B0B8-A42095347E07} - C:\WINDOWS\System32\khfcd.dll
O2 - BHO: (no name) - {3F9D0C61-737D-44D1-BD80-91AF857061CC} - C:\WINDOWS\System32\ljjigde.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {756b8cf4-830c-49b8-a921-8d16763f892c} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {D5B9B122-5A92-46BE-9E2F-FD583ADD5EC0} - (no file)
O2 - BHO: (no name) - {D651AFF4-9590-424d-BD1E-8E33E090DFB3} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [InfoData] rundll32.exe "C:\WINDOWS\System32\ojephfri.dll",realset
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKCU\..\Run: [A00F61B3B5.exe] C:\DOCUME~1\default\LOCALS~1\Temp\_A00F61B3B5.exe
O4 - HKCU\..\Run: [A00F61B3DD.exe] C:\DOCUME~1\default\LOCALS~1\Temp\_A00F61B3DD.exe
O4 - HKCU\..\Run: [A00F25AD038.exe] C:\DOCUME~1\default\LOCALS~1\Temp\_A00F25AD038.exe
O4 - HKCU\..\Run: [A00F25B7BCB.exe] C:\DOCUME~1\default\LOCALS~1\Temp\_A00F25B7BCB.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZN
O9 - Extra button: (no name) - {06FE5D02-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: &Find Pages Linking to this URL - {06FE5D02-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {06FE5D03-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: Find Other Pages on this &Host - {06FE5D03-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {06FE5D04-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: AV Live - {06FE5D04-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: AV &Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\WINDOWS\System32\shdocvw.dll (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O12 - Plugin for .wma: C:\PROGRAM FILES\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npdsplay.dll
O15 - Trusted Zone: *.sxload.net (HKLM)
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab46479.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX 5.5 Basic) - http://www.bestmark.com/support/ScriptX.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {26098EA2-C95D-48EA-89B4-63C5A63BD42F} - http://www.pacimedia.com/install/pcs_0021.exe
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {4169B5A0-9048-11D6-BDFF-00C0F024AF20} (ActiveXTester.TesterControl) - http://www.jasons-toolbox.com/BrowserSecur…tiveXTester.ocx
O16 - DPF: {444B911E-6E55-4A11-B3E9-0D3E21AE0437} - http://www.exfol.com/v/1/i/eins008.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by110fd.bay110.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/…lscbase8300.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1151621816202
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (ZPA_TexasHoldem Object) - http://zone.msn.com/bingame/zpagames/zpa_txhe.cab45837.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab34246.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/5m/vir…5/installer.exe
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab
O16 - DPF: {EE8B6D5F-FEF2-11D0-B13F-00A024798EF3} (Microsoft Search Settings Control) - http://lg.home.microsoft.com/search/lobby/searchsettings.cab
O16 - DPF: {FF3C5A9F-5A91-4930-80E8-4709194C2AD3} (CheckersZPA Object) - http://zone.msn.com/bingame/zpagames/Check…PA.cab40641.cab
O20 - AppInit_DLLs:
O20 - Winlogon Notify: khfcd - C:\WINDOWS\System32\khfcd.dll
O20 - Winlogon Notify: ljjigde - C:\WINDOWS\SYSTEM32\ljjigde.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: __c00BD9BE - C:\WINDOWS\System32\__c00BD9BE.dat
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe



By the wayI hate all toolbars excet Google. I also dont want any messenger services either. i noticed some on there, but don't know how to take them off.
Hello :)


Please download VundoFix.exe to your desktop.
  • Double-click VundoFix.exe to run it.
  • Click the Scan for Vundo button.
  • Once it's done scanning, click the Remove Vundo button.
  • You will receive a prompt asking if you want to remove the files, click YES
  • Once you click yes, your desktop will go blank as it starts removing Vundo.
  • When completed, it will prompt that it will reboot your computer, click OK.
Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button." when VundoFix appears at reboot.



Please download the following program and save it to your desktop:

http://noahdfear.geekstogo.com/FindAWF.exe

Once downloaded, double-click on the file to run it. When it is done there will be a file called awf.txt on your desktop. Please post the contents of that file as a reply to this topic.



Post:* A fresh HijackThis log
* Contents of C:\vundofix.txt
* Logfile of FindAWF
Hello,


here are the posts after Vundo and AWF


Logfile of HijackThis v1.99.1
Scan saved at 4:28:38 PM, on 5/1/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\WINDOWS\System32\WgaTray.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\SYSTEM32\notepad.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\default\Desktop\Computer stuff\HighjackThis\Scanner.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=566…ER}&ar=home
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost
O2 - BHO: (no name) - {1DF0DFC1-813B-4727-87D7-C9E7280FA037} - C:\WINDOWS\System32\khfcd.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {756b8cf4-830c-49b8-a921-8d16763f892c} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {D5B9B122-5A92-46BE-9E2F-FD583ADD5EC0} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [InfoData] rundll32.exe "C:\WINDOWS\System32\ojephfri.dll",realset
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [PC Pitstop Optimize Scheduler] C:\Program Files\PCPitstop\Optimize\PCPOptimize.exe -boot
O4 - HKCU\..\Run: [A00F61B3B5.exe] C:\DOCUME~1\default\LOCALS~1\Temp\_A00F61B3B5.exe
O4 - HKCU\..\Run: [A00F61B3DD.exe] C:\DOCUME~1\default\LOCALS~1\Temp\_A00F61B3DD.exe
O4 - HKCU\..\Run: [A00F25AD038.exe] C:\DOCUME~1\default\LOCALS~1\Temp\_A00F25AD038.exe
O4 - HKCU\..\Run: [A00F25B7BCB.exe] C:\DOCUME~1\default\LOCALS~1\Temp\_A00F25B7BCB.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZN
O9 - Extra button: (no name) - {06FE5D02-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: &Find Pages Linking to this URL - {06FE5D02-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {06FE5D03-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: Find Other Pages on this &Host - {06FE5D03-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {06FE5D04-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: AV Live - {06FE5D04-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: AV &Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\JavaSoft\JRE\1.3.1_03\bin\npjava131_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\JavaSoft\JRE\1.3.1_03\bin\npjava131_03.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\WINDOWS\System32\shdocvw.dll (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O12 - Plugin for .wma: C:\PROGRAM FILES\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npdsplay.dll
O15 - Trusted Zone: *.sxload.net (HKLM)
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab46479.cab
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/oas/ActiveX/MSDcode.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX 5.5 Basic) - http://www.bestmark.com/support/ScriptX.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {26098EA2-C95D-48EA-89B4-63C5A63BD42F} - http://www.pacimedia.com/install/pcs_0021.exe
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {4169B5A0-9048-11D6-BDFF-00C0F024AF20} (ActiveXTester.TesterControl) - http://www.jasons-toolbox.com/BrowserSecur…tiveXTester.ocx
O16 - DPF: {444B911E-6E55-4A11-B3E9-0D3E21AE0437} - http://www.exfol.com/v/1/i/eins008.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by110fd.bay110.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/…lscbase8300.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1151621816202
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (ZPA_TexasHoldem Object) - http://zone.msn.com/bingame/zpagames/zpa_txhe.cab45837.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur…loadManager.ocx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab34246.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/5m/vir…5/installer.exe
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab
O16 - DPF: {EE8B6D5F-FEF2-11D0-B13F-00A024798EF3} (Microsoft Search Settings Control) - http://lg.home.microsoft.com/search/lobby/searchsettings.cab
O16 - DPF: {FF3C5A9F-5A91-4930-80E8-4709194C2AD3} (CheckersZPA Object) - http://zone.msn.com/bingame/zpagames/Check…PA.cab40641.cab
O20 - AppInit_DLLs:
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: __c00BD9BE - C:\WINDOWS\System32\__c00BD9BE.dat
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe




VundoFix V6.3.21

Checking Java version…

Java version is 1.5.0.3
Old versions of java are exploitable and should be removed.

Scan started at 2:51:56 PM 5/1/2007

Listing files found while scanning….

C:\WINDOWS\System32\dcfhk.bak1
C:\WINDOWS\System32\dcfhk.bak2
C:\WINDOWS\System32\dcfhk.ini
C:\WINDOWS\System32\dcfhk.ini2
C:\WINDOWS\System32\dcfhk.tmp
C:\WINDOWS\SYSTEM32\irfhpejo.ini
C:\WINDOWS\System32\khfcd.dll
C:\WINDOWS\SYSTEM32\ljjigde.dll
C:\WINDOWS\SYSTEM32\ojephfri.dll
C:\WINDOWS\SYSTEM32\pmnomml.dll
C:\WINDOWS\SYSTEM32\vtuuvvs.dll

Beginning removal…

Attempting to delete C:\WINDOWS\System32\dcfhk.bak1
C:\WINDOWS\System32\dcfhk.bak1 Has been deleted!

Attempting to delete C:\WINDOWS\System32\dcfhk.bak2
C:\WINDOWS\System32\dcfhk.bak2 Has been deleted!

Attempting to delete C:\WINDOWS\System32\dcfhk.ini
C:\WINDOWS\System32\dcfhk.ini Has been deleted!

Attempting to delete C:\WINDOWS\System32\dcfhk.ini2
C:\WINDOWS\System32\dcfhk.ini2 Has been deleted!

Attempting to delete C:\WINDOWS\System32\dcfhk.tmp
C:\WINDOWS\System32\dcfhk.tmp Has been deleted!

Attempting to delete C:\WINDOWS\SYSTEM32\irfhpejo.ini
C:\WINDOWS\SYSTEM32\irfhpejo.ini Has been deleted!

Attempting to delete C:\WINDOWS\System32\khfcd.dll
C:\WINDOWS\System32\khfcd.dll Has been deleted!

Attempting to delete C:\WINDOWS\SYSTEM32\ljjigde.dll
C:\WINDOWS\SYSTEM32\ljjigde.dll Could not be deleted.

Attempting to delete C:\WINDOWS\SYSTEM32\ojephfri.dll
C:\WINDOWS\SYSTEM32\ojephfri.dll Has been deleted!

Attempting to delete C:\WINDOWS\SYSTEM32\pmnomml.dll
C:\WINDOWS\SYSTEM32\pmnomml.dll Has been deleted!

Attempting to delete C:\WINDOWS\SYSTEM32\vtuuvvs.dll
C:\WINDOWS\SYSTEM32\vtuuvvs.dll Has been deleted!

Performing Repairs to the registry.
Done!

Beginning removal…

Attempting to delete C:\WINDOWS\SYSTEM32\ljjigde.dll
C:\WINDOWS\SYSTEM32\ljjigde.dll Has been deleted!

Performing Repairs to the registry.
Done!

VundoFix V6.3.21

Checking Java version…

Java version is 1.5.0.3
Old versions of java are exploitable and should be removed.

Scan started at 3:22:43 PM 5/1/2007

Listing files found while scanning….

No infected files were found.




Find AWF report by noahdfear ©2006


bak folders found
~~~~~~~~~~~


Directory of C:\PROGRA~1\QUICKT~1\BAK

03/26/2006 10:51 PM 155,648 qttask.exe
1 File(s) 155,648 bytes

Directory of C:\PROGRA~1\GRISOFT\AVGFRE~1\BAK

12/24/2006 05:44 PM 406,016 avgcc.exe
1 File(s) 406,016 bytes


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

155648 Mar 26 2006 "C:\Program Files\QuickTime\bak\qttask.exe"
416256 Apr 28 2007 "C:\Program Files\Grisoft\AVG7\avgcc.exe"
406016 Dec 24 2006 "C:\Program Files\Grisoft\AVG Free\bak\avgcc.exe"


end of report
Hello :)

We need to disable your SpyBot S&D as it can blocks the fix!

TeaTimer

1) Run Spybot-S&D
2) Go to the Mode menu, and make sure "Advanced Mode" is selected
3) On the left hand side, choose Tools -> Resident
4) Uncheck "Resident TeaTimer" and OK any prompts
5) Restart your computer.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Open Notepad
-> copy the following lines into a new document:

@ECHO OFF
move /Y "C:\Program Files\QuickTime\bak\qttask.exe" "C:\Program Files\QuickTime"
move /Y "C:\Program Files\Grisoft\AVG Free\bak\avgcc.exe" "C:\Program Files\Grisoft\AVG Free"

Save the document to your desktop as Fix.bat and filetype: All Files

Don't run it yet! We will run it later.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Open HijackThis, Click Do a system scan only, checkmark this/these. Then close all others windows except HijackThis and press fix checked.

O2 - BHO: (no name) - {1DF0DFC1-813B-4727-87D7-C9E7280FA037} - C:\WINDOWS\System32\khfcd.dll (file missing)
O2 - BHO: (no name) - {756b8cf4-830c-49b8-a921-8d16763f892c} - (no file)
O2 - BHO: (no name) - {D5B9B122-5A92-46BE-9E2F-FD583ADD5EC0} - (no file)
O4 - HKLM\..\Run: [InfoData] rundll32.exe "C:\WINDOWS\System32\ojephfri.dll",realset
O4 - HKCU\..\Run: [A00F61B3B5.exe] C:\DOCUME~1\default\LOCALS~1\Temp\_A00F61B3B5.exe
O4 - HKCU\..\Run: [A00F61B3DD.exe] C:\DOCUME~1\default\LOCALS~1\Temp\_A00F61B3DD.exe
O4 - HKCU\..\Run: [A00F25AD038.exe] C:\DOCUME~1\default\LOCALS~1\Temp\_A00F25AD038.exe
O4 - HKCU\..\Run: [A00F25B7BCB.exe] C:\DOCUME~1\default\LOCALS~1\Temp\_A00F25B7BCB.exe
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZN
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\WINDOWS\System32\shdocvw.dll (HKCU)
O16 - DPF: {26098EA2-C95D-48EA-89B4-63C5A63BD42F} - http://www.pacimedia.com/install/pcs_0021.exe
O16 - DPF: {4169B5A0-9048-11D6-BDFF-00C0F024AF20} (ActiveXTester.TesterControl) - http://www.jasons-toolbox.com/BrowserSecur…tiveXTester.ocx
O16 - DPF: {444B911E-6E55-4A11-B3E9-0D3E21AE0437} - http://www.exfol.com/v/1/i/eins008.exe
O20 - AppInit_DLLs:
O20 - Winlogon Notify: __c00BD9BE - C:\WINDOWS\System32\__c00BD9BE.dat


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Make your hidden files visible:
  • Click start
  • Click my computer
  • Select the Tools menu and click Folder Options.
  • After the new window appears select the View tab.
  • Put a checkmark in the checkbox labeled Display the contents of system folders.
  • Under the Hidden files and folders section select the radio button labeled Show hidden files and folders.
  • Remove the checkmark from the checkbox labeled Hide file extensions for known file types.
  • Remove the checkmark from the checkbox labeled Hide protected operating system files.
  • Press the Apply button and then the OK button and shutdown My Computer.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Download Dr.Web CureIt to the desktop -> ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe

Don't run it yet!

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Please download ATF-cleaner and save it to your desktop.
  • Double-click ATF-Cleaner.exe to run the program.
  • Under Main choose: Select All
  • Click the Empty Selected button.

    If you use Firefox browser:

  • Click Firefox at the top and choose: Select All
  • Click the Empty Selected button.
  • NOTE: If you would like to keep your saved passwords, please click No at the prompt.

    If you use Opera browser:

  • Click Opera at the top and choose: Select All
  • Click the Empty Selected button.
  • NOTE: If you would like to keep your saved passwords, please click No at the prompt.
  • Click Exit on the Main menu to close the program.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Please then reboot your computer in Safe Mode by doing the following:
  • Restart your computer
  • After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
  • Instead of Windows loading as normal, the Advanced Options Menu should appear;
  • Select the first option, to run Windows in Safe Mode, then press Enter.
  • Choose your usual account.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Delete these files: (if found)
C:\WINDOWS\System32\ojephfri.dll
C:\WINDOWS\System32\__c00BD9BE.dat
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Go to your desktop and run the file Fix.bat and answer yes to any questions.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Run a scan with Dr.Web CureIt
  • Doubleclick the drweb-cureit.exe file and Allow to run the express scan
  • This will scan the files currently running in memory and when something is found, click the yes button when it asks you if you want to cure it. This is only a short scan.
  • Once the short scan has finished, you should now mark the drives that you want to scan.
  • Select all drives. A red dot shows which drives have been chosen.
  • Click the green arrow at the right, and the scan will start.
  • Click 'Yes to all' if it asks if you want to cure/move the file.
  • When the scan has finished, look if you can click next icon next to the files found [external image: Posted Image]
  • If so, click it and then click the next icon right below and select Move incurable
  • After the scan, in the menu, click file and choose save report list
  • Save the report to your desktop. The report will be called DrWeb.csv
  • Close Dr.Web Cureit.
  • Reboot the computer in Normal Mode,
  • Post the Cure-it report and a fresh HijackThis log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Re-run with FindAWF!

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Post:* A fresh HijackThis log
* The report of the Dr.Web Cureit
* Logfile of FindAWF
OK these are the latest logs:

Logfile of HijackThis v1.99.1
Scan saved at 6:09:27 PM, on 5/10/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\WINDOWS\System32\WgaTray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\default\Desktop\Computer stuff\HighjackThis\Scanner.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=566…ER}&ar=home
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [PC Pitstop Optimize Scheduler] C:\Program Files\PCPitstop\Optimize\PCPOptimize.exe -boot
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: (no name) - {06FE5D02-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: &Find Pages Linking to this URL - {06FE5D02-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {06FE5D03-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: Find Other Pages on this &Host - {06FE5D03-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {06FE5D04-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: AV Live - {06FE5D04-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: AV &Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\JavaSoft\JRE\1.3.1_03\bin\npjava131_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\JavaSoft\JRE\1.3.1_03\bin\npjava131_03.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O12 - Plugin for .wma: C:\PROGRAM FILES\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npdsplay.dll
O15 - Trusted Zone: *.sxload.net (HKLM)
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab46479.cab
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/oas/ActiveX/MSDcode.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX 5.5 Basic) - http://www.bestmark.com/support/ScriptX.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by110fd.bay110.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/…lscbase8300.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1151621816202
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (ZPA_TexasHoldem Object) - http://zone.msn.com/bingame/zpagames/zpa_txhe.cab45837.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur…loadManager.ocx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab34246.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/5m/vir…5/installer.exe
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab
O16 - DPF: {EE8B6D5F-FEF2-11D0-B13F-00A024798EF3} (Microsoft Search Settings Control) - http://lg.home.microsoft.com/search/lobby/searchsettings.cab
O16 - DPF: {FF3C5A9F-5A91-4930-80E8-4709194C2AD3} (CheckersZPA Object) - http://zone.msn.com/bingame/zpagames/Check…PA.cab40641.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe




Find AWF report by noahdfear ©2006


bak folders found
~~~~~~~~~~~


Directory of C:\PROGRA~1\QUICKT~1\BAK

0 File(s) 0 bytes

Directory of C:\PROGRA~1\GRISOFT\AVGFRE~1\BAK

0 File(s) 0 bytes


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~



end of report


Process.exe;C:\WINDOWS\SYSTEM32;Tool.Prockill;Incurable.Deleted.;
__c00F0BB2.dat;C:\WINDOWS\SYSTEM32;Probably BACKDOOR.Trojan;Incurable.Deleted.;
__c00C5D74.dat;C:\WINDOWS\SYSTEM32;Probably BACKDOOR.Trojan;Incurable.Deleted.;
CDWSOCK.DLL;C:\Program Files\Carbon Copy Support;Probably BACKDOOR.Trojan;Incurable.Deleted.;
PPWEBCAP.EXE;C:\Program Files\ScanSoft\PaperPort;Probably DLOADER.Trojan;Incurable.Deleted.;
UnInstall.exe;C:\Program Files\Ipwindows;Trojan.Rond;Deleted.;
inst.exe;C:\Documents and Settings\All Users\Application Data\AOL Downloads\triton_suite_install_2.2.82.1;Probably BACKDOOR.Trojan;Incurable.Deleted.;
inst.exe;C:\Documents and Settings\All Users\Application Data\AOL Downloads\triton_suite_install_6.0.28.3;Probably BACKDOOR.Trojan;Incurable.Deleted.;
Process.exe;C:\Documents and Settings\default\Desktop\SmitfraudFix;Tool.Prockill;Incurable.Deleted.;
restart.exe;C:\Documents and Settings\default\Desktop\SmitfraudFix;Tool.ShutDown.11;Incurable.Deleted.;
MAGVAR5A.HTM;C:\Documents and Settings\default\Desktop\Work\All Star Satellite\Starband\training manual\360NEWfulldown1\360NEWfull\360NEWful;Win32.HLLM.Graz;Incurable.Moved.;
A0007047.dll;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP87;Trojan.Juan;Deleted.;
A0007050.dll;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP87;Trojan.Virtumod;Deleted.;
A0007051.dll;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP87;Trojan.Virtumod;Deleted.;
A0007052.dll;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP87;Trojan.Virtumod;Deleted.;
A0007053.dll;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP87;Trojan.Virtumod;Deleted.;
A0007054.dll;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP87;Trojan.Virtumod;Deleted.;
A0007056.dll;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP88;Adware.Coupons;Incurable.Deleted.;
A0012125.dll;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP97;Trojan.Virtumod;Deleted.;
A0012126.dll;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP97;Trojan.Virtumod;Deleted.;
A0012127.dll;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP97;Trojan.Virtumod;Deleted.;
A0012128.dll;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP97;Trojan.Virtumod;Deleted.;
A0012134.dll;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP97;Trojan.Virtumod;Deleted.;
A0012237.exe;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP106;Trojan.Rond;Deleted.;
khfcd.dll.bad;C:\VundoFix Backups;Trojan.Virtumod;Deleted.;
ljjigde.dll.bad;C:\VundoFix Backups;Trojan.Virtumod;Deleted.;
ojephfri.dll.bad;C:\VundoFix Backups;Trojan.Virtumod;Deleted.;
pmnomml.dll.bad;C:\VundoFix Backups;Trojan.Virtumod;Deleted.;
vtuuvvs.dll.bad;C:\VundoFix Backups;Trojan.Virtumod;Deleted.;


One Question, would it be easier if I downloded sp2??
Hi, I scanned again and got more stuff here are the scans again.

Logfile of HijackThis v1.99.1
Scan saved at 11:11:06 PM, on 5/10/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\WgaTray.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\default\Desktop\Computer stuff\HighjackThis\Scanner.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=566…ER}&ar=home
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [PC Pitstop Optimize Scheduler] C:\Program Files\PCPitstop\Optimize\PCPOptimize.exe -boot
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: (no name) - {06FE5D02-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: &Find Pages Linking to this URL - {06FE5D02-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {06FE5D03-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: Find Other Pages on this &Host - {06FE5D03-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {06FE5D04-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: AV Live - {06FE5D04-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: AV &Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\JavaSoft\JRE\1.3.1_03\bin\npjava131_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\JavaSoft\JRE\1.3.1_03\bin\npjava131_03.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O12 - Plugin for .wma: C:\PROGRAM FILES\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npdsplay.dll
O15 - Trusted Zone: *.sxload.net (HKLM)
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab46479.cab
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/oas/ActiveX/MSDcode.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX 5.5 Basic) - http://www.bestmark.com/support/ScriptX.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by110fd.bay110.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/…lscbase8300.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1151621816202
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (ZPA_TexasHoldem Object) - http://zone.msn.com/bingame/zpagames/zpa_txhe.cab45837.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur…loadManager.ocx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab34246.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/5m/vir…5/installer.exe
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab
O16 - DPF: {EE8B6D5F-FEF2-11D0-B13F-00A024798EF3} (Microsoft Search Settings Control) - http://lg.home.microsoft.com/search/lobby/searchsettings.cab
O16 - DPF: {FF3C5A9F-5A91-4930-80E8-4709194C2AD3} (CheckersZPA Object) - http://zone.msn.com/bingame/zpagames/Check…PA.cab40641.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe




Find AWF report by noahdfear ©2006


bak folders found
~~~~~~~~~~~


Directory of C:\PROGRA~1\QUICKT~1\BAK

0 File(s) 0 bytes

Directory of C:\PROGRA~1\GRISOFT\AVGFRE~1\BAK

0 File(s) 0 bytes


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~



end of report



A0012244.exe;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP106;Tool.Prockill;Incurable.Moved.;
A0012245.dll;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP106;Probably BACKDOOR.Trojan;Incurable.Moved.;
A0012246.exe;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP106;Probably DLOADER.Trojan;Incurable.Moved.;
A0012247.exe;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP106;Probably BACKDOOR.Trojan;Incurable.Moved.;
A0012248.exe;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP106;Probably BACKDOOR.Trojan;Incurable.Moved.;
A0012249.exe;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP106;Tool.Prockill;Incurable.Moved.;
A0012250.exe;C:\System Volume Information\_restore{9DD040BE-D791-4141-A565-A6840DC8FF26}\RP106;Tool.ShutDown.11;Incurable.Moved.;




new scans over
Hello :)


One Question, would it be easier if I downloded sp2??

No. Install SP2 when your computer is clean.

**************************************************************

Go to control panel -> add/remove programs -> delete this:
Party Poker

**************************************************************

Please download AVG Anti-Spyware to your Desktop or to your usual Download Folder.
http://www.ewido.net/en/download/
  • Install AVG Anti-Spyware by double clicking the installer.
  • Follow the prompts. Make sure that Launch AVG Anti-Spyware is checked.
  • On the main screen under Your Computer's security.
    • Click on Change state next to Resident shield. It should now change to inactive.
    • Click on Change state next to Automatic updates. It should now change to inactive.
    • Next to Last Update, click on Update now. (You will need an active internet connection to perform this)
    • Wait until you see the Update succesfull message.
  • Right-click the AVG Anti-Spyware Tray Icon and uncheck Start with Windows.
  • Right-click the AVG Anti-Spyware Tray Icon and select Exit. Confirm by clicking Yes.
If you are having problems with the updater, you can use this link to manually update ewido.
AVG Anti-Spyware manual updates.
Download the Full database to your Desktop or to your usual Download Folder and install it by double clicking the file. Make sure that AVG Anti-Spyware is closed before installing the update.
**************************************************************
Open HijackThis, Click Do a system scan only, checkmark these. Then close all others windows except HijackThis and press fix checked.
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O15 - Trusted Zone: *.sxload.net (HKLM)


**************************************************************
Open Notepad
Open Notepad
-> copy the following lines into a new document:

@echo off
RD /s /q "C:\Program Files\QuickTime\bak"
RD /s /q "C:\Program Files\Grisoft\AVG Free\bak"
RD /s /q "C:\Program Files\PartyGaming"
exit

Save the document to your desktop as Fix.bat and filetype: All Files
**************************************************************
Please download ATF-cleaner and save it to your desktop.
  • Double-click ATF-Cleaner.exe to run the program.
  • Under Main choose: Select All
  • Click the Empty Selected button.

    If you use Firefox browser:

  • Click Firefox at the top and choose: Select All
  • Click the Empty Selected button.
  • NOTE: If you would like to keep your saved passwords, please click No at the prompt.

    If you use Opera browser:

  • Click Opera at the top and choose: Select All
  • Click the Empty Selected button.
  • NOTE: If you would like to keep your saved passwords, please click No at the prompt.
  • Click Exit on the Main menu to close the program.
**************************************************************
Please then reboot your computer in Safe Mode by doing the following:
  • Restart your computer
  • After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
  • Instead of Windows loading as normal, the Advanced Options Menu should appear;
  • Select the first option, to run Windows in Safe Mode, then press Enter.
  • Choose your usual account.
**************************************************************
Go to your desktop and run the file Fix.bat and answer yes to any questions.
**************************************************************
Close ALL open Windows / Programs / Folders. Please start AVG Anti-Spyware and run a full scan.
  • Click on Scanner on the toolbar.
  • Click on the Settings tab.
    • Under How to act?
      • Click on Recommended Action and choose Quarantine from the popup menu.
    • Under How to scan?
      • All checkboxes should be ticked.
    • Under Possibly unwanted software:
      • All checkboxes should be ticked.
    • Under Reports:
      • Select Automatically generate report after every scan and uncheck Only if threats were found.
    • Under What to scan?
      • Select Scan every file.
  • Click on the Scan tab.
  • Click on Complete System Scan to start the scan process.
  • Let the program scan the machine.
  • When the scan has finished, follow the instructions below.
    IMPORTANT : Don't click on the "Save Scan Report" button before you did hit the "Apply all Actions" button.
    • Make sure that Set all elements to: shows Quarantine (1), if not click on the link and choose Quarantine from the popup menu. (2)
    • At the bottom of the window click on the Apply all Actions button. (3)
      [external image: Posted Image]
  • When done, click the Save Scan Report button. (4)
    • Click the Save Report as button.
    • Save the report to your Desktop.
  • Right-click the AVG Anti-Spyware Tray Icon and select Exit. Confirm by clicking Yes.
Reboot in Normal Mode.
**************************************************************

Post:
- A fresh HijackThis log
- AVG's log
Logfile of HijackThis v1.99.1
Scan saved at 5:26:01 PM, on 5/12/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\default\Desktop\Computer stuff\HighjackThis\Scanner.exe
C:\WINDOWS\System32\WgaTray.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=566…ER}&ar=home
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [PC Pitstop Optimize Scheduler] C:\Program Files\PCPitstop\Optimize\PCPOptimize.exe -boot
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: (no name) - {06FE5D02-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: &Find Pages Linking to this URL - {06FE5D02-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {06FE5D03-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: Find Other Pages on this &Host - {06FE5D03-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {06FE5D04-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: AV Live - {06FE5D04-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra 'Tools' menuitem: AV &Translate - {06FE5D05-8F11-11d2-804F-00105A133818} - http://search.presario.net/scripts/redirec…c00&LC=0409 (file missing)
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\JavaSoft\JRE\1.3.1_03\bin\npjava131_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\JavaSoft\JRE\1.3.1_03\bin\npjava131_03.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O12 - Plugin for .wma: C:\PROGRAM FILES\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npdsplay.dll
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab46479.cab
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/oas/ActiveX/MSDcode.cab
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX 5.5 Basic) - http://www.bestmark.com/support/ScriptX.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by110fd.bay110.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/…lscbase8300.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1151621816202
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (ZPA_TexasHoldem Object) - http://zone.msn.com/bingame/zpagames/zpa_txhe.cab45837.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur…loadManager.ocx
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab34246.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/5m/vir…5/installer.exe
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab
O16 - DPF: {EE8B6D5F-FEF2-11D0-B13F-00A024798EF3} (Microsoft Search Settings Control) - http://lg.home.microsoft.com/search/lobby/searchsettings.cab
O16 - DPF: {FF3C5A9F-5A91-4930-80E8-4709194C2AD3} (CheckersZPA Object) - http://zone.msn.com/bingame/zpagames/Check…PA.cab40641.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
The AVG log is too big and I will have to send it in 2 parts. Here is the first part. ——————————————————— AVG Anti-Spyware - Scan Report ——————————————————— + Created at: 5:18:55 PM 5/12/2007 + Scan result: C:\Program Files\WinBudget\bin\carp**.1168624977.old -> Adware.BHO : Cleaned with backup (quarantined). C:\Program Files\WinBudget\bin\matrix.dll -> Adware.BHO : Cleaned with backup (quarantined). HKLM\SOFTWARE\BTIEIN -> Adware.WebSearch : Error during cleaning. HKLM\SOFTWARE\BTIEIN\BTIEIN -> Adware.WebSearch : Error during cleaning. HKLM\SOFTWARE\BTIEIN\BTIEIN\taskcache -> Adware.WebSearch : Error during cleaning. :mozilla.132:C:\Documents and Settings\Carolyn Barrera\Application Data\Mozilla\Firefox\Profiles\ct5yve59.default\cookies.txt -> TrackingCookie.Dealtime : Cleaned. :mozilla.82:C:\Documents and Settings\Carolyn Barrera\Application Data\Mozilla\Firefox\Profiles\ct5yve59.default\cookies.txt -> TrackingCookie.Netflame : Cleaned. :mozilla.112:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-1.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.113:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-2.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.113:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-3.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.113:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-4.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.113:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-5.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-10.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-11.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-12.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-13.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-14.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-15.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-16.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-17.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-18.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-19.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-20.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-21.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-22.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-23.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-24.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-25.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-26.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-6.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-7.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-8.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.118:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-9.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.119:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-27.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.120:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-28.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.120:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-29.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.120:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-30.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.120:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-31.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.120:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-32.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.120:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-33.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.120:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-34.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.120:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-35.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.120:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-36.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.121:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-37.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.121:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-38.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.121:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-39.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.122:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-40.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.122:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-41.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.123:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-42.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.123:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-43.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.123:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-44.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.123:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-45.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.127:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-154.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.127:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-46.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.127:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-47.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.127:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-48.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.127:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-49.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.127:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-50.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.127:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-51.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.127:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-52.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.127:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-53.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.127:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-54.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-158.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-159.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-160.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-161.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-162.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-163.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-164.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-165.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-166.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-167.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-168.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-169.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-170.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-171.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-172.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-173.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-174.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-175.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-176.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-177.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-178.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-179.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-180.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-181.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-182.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-183.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-184.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-185.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-186.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-187.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-188.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-189.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-190.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-191.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-192.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-193.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-194.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-195.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-196.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-197.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-198.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-199.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-200.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-201.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-202.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-203.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-204.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-205.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-206.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-207.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-208.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-209.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-210.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-211.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-212.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-213.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-155.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-156.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-157.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-214.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-215.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.130:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-216.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.130:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-217.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.130:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-218.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.130:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-219.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.130:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-220.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-221.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-222.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-223.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-224.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-225.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-226.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-227.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-228.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-229.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-230.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-231.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-232.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-233.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-234.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-235.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-236.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-237.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-238.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-239.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-240.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-55.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.131:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-56.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-241.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-242.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-243.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-244.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-280.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-281.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-282.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-283.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-284.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-285.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-286.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-287.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-288.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-289.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-290.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-291.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-292.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-293.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-294.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-295.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-296.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-297.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-298.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.132:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-57.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-245.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-246.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-247.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-248.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-249.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-250.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-251.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-252.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-253.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-254.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-255.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-256.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-257.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-258.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-259.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-260.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-261.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-262.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-263.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-264.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-265.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-266.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-267.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-268.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-269.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-270.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-271.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-272.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-273.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-274.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-275.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-276.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-277.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-278.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-279.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.133:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-299.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-300.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-301.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-302.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-303.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-304.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-305.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-306.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-307.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-308.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-309.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-310.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-311.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-312.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-313.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-314.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-315.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-316.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-317.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-318.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-319.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-320.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-321.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-322.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-323.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-324.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-325.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.134:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-58.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.136:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-326.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.136:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-327.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.136:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-59.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.139:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-60.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.139:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-61.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.139:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-62.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.141:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-63.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.141:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-64.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.142:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-65.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.149:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-66.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.153:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-67.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-68.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-69.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-70.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-71.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-72.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-73.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-74.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-75.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-76.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-77.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-78.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-79.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-80.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-81.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-82.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-83.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-84.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-85.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-86.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-87.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-88.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-89.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-90.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-91.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.155:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-92.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.156:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-93.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.156:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-94.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.156:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-95.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.156:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-96.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.159:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-97.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.159:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-98.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.160:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-99.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.161:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-100.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.161:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-101.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.161:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-102.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.161:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-103.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.165:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-104.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.166:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-105.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.171:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-106.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.171:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-107.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.173:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-108.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.173:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-109.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.173:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-110.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.173:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-111.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.174:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-112.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.174:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-113.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.179:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-114.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.179:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-115.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.179:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-116.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.179:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-117.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.179:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-118.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.181:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-119.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.181:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-120.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.183:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-124.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.184:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-121.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.184:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-122.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.184:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-123.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.187:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-125.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.187:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-126.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.187:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-127.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.187:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-130.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.187:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-131.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.187:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-132.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.187:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-133.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.187:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-134.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.187:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-135.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.187:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-149.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.187:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-150.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.187:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-151.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.187:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-152.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.187:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-153.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.188:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-128.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.188:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-129.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.188:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-136.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.188:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-137.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.188:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-138.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.188:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-139.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.188:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-140.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.188:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-141.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.188:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-142.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.188:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-143.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.188:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-144.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.188:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-145.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.188:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-146.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.188:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-147.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.188:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-148.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.36:C:\Documents and Settings\Carolyn Barrera\Application Data\Netscape\NSB\Profiles\n16wwcrz.default\cookies.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.55:C:\Documents and Settings\Carolyn Barrera\Application Data\Mozilla\Firefox\Profiles\ct5yve59.default\cookies.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.100:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-99.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.101:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-100.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.101:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-101.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.101:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-102.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.101:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-103.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.102:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-104.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.103:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-105.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.105:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-104.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.106:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-105.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.108:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-106.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.108:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-107.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.110:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-108.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.110:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-109.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.110:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-110.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.111:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-106.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.111:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-107.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.111:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-111.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.112:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-112.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.112:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-113.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.113:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-108.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.113:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-109.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.113:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-110.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.114:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-111.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.115:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-112.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.115:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-113.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.117:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-114.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.117:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-115.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.117:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-116.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.117:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-117.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.117:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-118.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.119:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-119.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.119:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-120.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.120:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-114.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.120:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-115.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.120:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-116.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.120:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-117.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.120:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-118.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.121:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-124.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.122:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-119.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.122:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-120.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.122:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-121.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.122:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-122.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.122:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-123.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.124:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-124.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.125:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-121.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.125:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-122.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.125:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-123.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.125:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-125.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.125:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-126.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.125:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-127.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.125:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-130.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.125:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-131.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.125:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-132.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.125:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-133.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.125:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-134.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.125:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-135.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.125:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-149.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.125:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-150.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.125:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-151.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.125:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-152.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.125:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-153.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.126:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-128.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.126:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-129.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.126:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-136.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.126:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-137.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.126:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-138.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.126:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-139.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.126:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-140.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.126:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-141.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.126:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-142.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.126:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-143.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.126:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-144.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.126:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-145.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.126:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-146.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.126:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-147.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.126:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-148.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-125.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-126.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-127.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-130.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-131.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-132.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-133.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-134.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-135.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-149.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-150.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-151.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-152.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.128:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-153.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-128.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-129.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-136.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-137.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-138.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-139.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-140.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-141.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-142.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-143.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-144.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-145.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-146.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-147.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.129:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-148.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.28:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-1.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.29:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-2.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.29:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-3.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.29:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-4.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.31:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-1.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.32:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-2.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.32:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-3.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.32:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-4.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.34:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-5.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.37:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-5.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.39:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-10.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.39:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-11.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.39:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-12.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.39:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-13.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.39:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-6.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.39:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-7.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.39:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-8.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.39:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-9.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.40:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-14.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.40:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-15.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.40:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-16.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.40:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-17.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.40:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-18.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.40:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-19.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.40:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-20.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.40:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-21.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.40:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-22.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.40:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-23.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.40:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-24.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.40:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-25.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.40:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-26.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.41:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-27.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.42:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-10.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.42:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-11.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.42:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-12.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.42:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-13.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.42:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-28.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.42:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-29.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.42:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-30.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.42:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-31.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.42:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-32.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.42:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-33.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.42:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-34.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.42:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-35.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.42:C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\mzwet3er.default\cookies-36.txt ->

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI