Spyware / Malware / Virus Removal

Mylogs

31 min read

Looking for the outcome? Ask AI

EvilAzazel Topic Starter

Post #1May 17, 2007, 10:54 PM UTC

I've been having problems with popups coming from reasonable sites such as yahoo, and norton. I have a few processes I want to block so that they dont come back. I have been having a problem with wualct.exe requiring more Kbs than usual such as going from 1000K to 12600K. I get pop ups randomly(not very often though) from IE explorer which I do not use.(happy mozilla firefox user). I also have 2 processes listed as my video drivers name but one is under owner and the other under System.

Thanks in advance!

Logfile of HijackThis v1.99.1
Scan saved at 3:36:39 PM, on 5/17/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Xfire\Xfire.exe
C:\Program Files\WinZip\WINZIP32.EXE
C:\PROGRA~1\WINZIP\wzqkpick.exe
C:\Documents and Settings\Owner.YOUR-W04GTXLD67\My Documents\download\rochainskool\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus10.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qus10.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qus10.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://qus10.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Common\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Common\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WindowsUpdate] rundll32.exe "C:\WINDOWS\system32\rpemlauk.dll",realset
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.adxgate.net
O15 - Trusted Zone: *.imagesrvr.com
O15 - Trusted Zone: *.snipenet.net
O15 - Trusted Zone: *.adxgate.net (HKLM)
O15 - Trusted Zone: *.errorprotector.com (HKLM)
O15 - Trusted Zone: *.errorsafe.com (HKLM)
O15 - Trusted Zone: *.imagesrvr.com (HKLM)
O15 - Trusted Zone: *.snipenet.net (HKLM)
O15 - Trusted Zone: *.systemdoctor.com (HKLM)
O15 - Trusted Zone: *.winantivirus.com (HKLM)
O15 - Trusted Zone: *.winfixer.com (HKLM)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1159822528687
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} (HGPlugin9USA Class) - http://gamedownload.ijjimax.com/gamedownlo…GPlugin9USA.cab
O16 - DPF: {DD583921-A9E9-4FBF-9266-8DC2AB5EA0AF} (HGPlugin10USA Class) - http://gamedownload.ijjimax.com/gamedownlo…Plugin10USA.cab
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe

MrCharlie

Post #2May 18, 2007, 10:29 PM UTC

Welcome to the forum.

Enable hidden files:
Open Windows Explorer & Go to Tools > Folder Options. Click on the View tab and make sure that "Show hidden files and folders" is checked.
Also uncheck "Hide protected operating system files" and untick "hide extensions for known file types" . Now click "Apply to all folders"
Click "Apply" then "OK" (reverse this procedure when we are done)

——————-

Clean out temp files:

Download and run ATF Cleaner - hit "select all" then just uncheck "cookies" (uncheck cookies is optional - leave it checked if you want to delete all cookies) then click "empty selected" That will clear out all the temp files on the system.

——————-

Download combofix.exe from the link below:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Double click combofix.exe & follow the prompts.
A window will open with a warning.
Type "Y" (and Enter) to start the fix.
When the scan completes it will open a text window.
Please attach that log back here together with a fresh HJT log.
Caution - do not touch your mouse/keyboard until the scan has completed.
The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop.

Combofix will automatically save the log file to C:\combofix.txt

———————

Please download VundoFix.exe to your desktop.
Double-click VundoFix.exe to run it.
Click the Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will reboot your computer, click OK.
Please post the contents of C:\vundofix.txt and a new HiJackThis log.
Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button." when VundoFix appears at
reboot.

——————–

Last…

Please download and install the 30 day trial version of AVG Anti-Spyware 7.5 here:
http://www.ewido.net/en/download/

After it's installed…Check for updates:
Double click on the AVG-AS icon in the system tray or on the desktop> this will bring up the main program if it's not already up.

On the Main Page click the Update Tab and then Start Update.
Download and install any updates if available.

Select the Scanner icon at the top of the screen, then select the Settings tab.
Once in the Settings screen click on Recommended actions and then select Quarantine.
Under Reports
Select Automatically generate report after every scan
Un-Select Only if threats were found

Close ALL open Windows / Programs / Folders.
Open up AVG-AS
Now click the Scanner Icon on top
Click on Complete System Scan
Be patient - it takes a while to run.

IMPORTANT! Do not save the report before you have clicked the Apply all actions button. If you do, the log that is created will indicate "No action taken", making it more difficult to interpret the report. So be sure you save it only AFTER clicking the "Apply all actions" button?

Once the scan is complete do the following:
If you have any infections you will prompted, then select Apply All Actions

Next select the Reports icon at the top.
Copy and paste the scan report in your next reply.

Close AVG-AS and Reboot in Normal Mode.

Post the log from AVG AS, ComboFix, VundoFix, and a fresh HJT log, MrC

EvilAzazel

Post #3May 19, 2007, 8:44 PM UTC

ComboFix log:

"Owner" - 2007-05-18 20:09:42 Service Pack 2
ComboFix 07-05.19.5.V - Running from: "C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Desktop\"

(((((((((((((((((((((((((((((((((((((((((((((((((( V Log )))))))))))))))))))))))))))))))))))))))))))))))))))))))

C:\WINDOWS\system32\agufddud.dll
C:\WINDOWS\system32\ampxckch.dll
C:\WINDOWS\system32\amraggmb.dll
C:\WINDOWS\system32\bvhnpwxq.dll
C:\WINDOWS\system32\dybsgbjj.dll
C:\WINDOWS\system32\ebwkgwvr.dll
C:\WINDOWS\system32\entlpmmu.dll
C:\WINDOWS\system32\eslkodwn.dll
C:\WINDOWS\system32\hgieawnu.dll
C:\WINDOWS\system32\keawmcuo.dll
C:\WINDOWS\system32\ksoricpx.dll
C:\WINDOWS\system32\lfhoawmq.dll
C:\WINDOWS\system32\mewbsfbk.dll
C:\WINDOWS\system32\nmplnujp.dll
C:\WINDOWS\system32\oioqjsga.dll
C:\WINDOWS\system32\ollicetk.dll
C:\WINDOWS\system32\osqunqgi.dll
C:\WINDOWS\system32\ralbilfp.dll
C:\WINDOWS\system32\rpemlauk.dll
C:\WINDOWS\system32\rvjxynff.dll
C:\WINDOWS\system32\sboueevb.dll
C:\WINDOWS\system32\sgciemcj.dll
C:\WINDOWS\system32\sutlxeee.dll
C:\WINDOWS\system32\tcnjpusj.dll
C:\WINDOWS\system32\tuvuuut.dll
C:\WINDOWS\system32\uvdsqsgu.dll
C:\WINDOWS\system32\xoekprsm.dll
C:\WINDOWS\system32\yrduvsrs.dll
C:\WINDOWS\system32\rvwgkwbe.ini
C:\WINDOWS\system32\kbfsbwem.ini
C:\WINDOWS\system32\jmllm.bak1
C:\WINDOWS\system32\jmllm.bak2
C:\WINDOWS\system32\jmllm.ini
C:\WINDOWS\system32\jmllm.ini2
C:\WINDOWS\system32\jmllm.tmp
C:\WINDOWS\system32\agsjqoio.ini
C:\WINDOWS\system32\pfliblar.ini
C:\WINDOWS\system32\kualmepr.ini
C:\WINDOWS\system32\ffnyxjvr.ini
C:\WINDOWS\system32\msrpkeox.ini
C:\WINDOWS\system32\ddccccd.dll
C:\WINDOWS\system32\mllmj.dll

* * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

C:\Program Files\Common Files\Yazzle1281OinAdmin.exe
C:\Program Files\Common Files\Yazzle1281OinUninstaller.exe
C:\r.exe
C:\WINDOWS\retadpu2000219.exe
C:\WINDOWS\10211.exe
C:\WINDOWS\10869.exe
C:\WINDOWS\11563.exe
C:\WINDOWS\12152.exe
C:\WINDOWS\13158.exe
C:\WINDOWS\14854.exe
C:\WINDOWS\15808.exe
C:\WINDOWS\1593.exe
C:\WINDOWS\1633.exe
C:\WINDOWS\17979.exe
C:\WINDOWS\20331.exe
C:\WINDOWS\24183.exe
C:\WINDOWS\24443.exe
C:\WINDOWS\2503.exe
C:\WINDOWS\25887.exe
C:\WINDOWS\261.exe
C:\WINDOWS\28021.exe
C:\WINDOWS\28898.exe
C:\WINDOWS\2890.exe
C:\WINDOWS\28957.exe
C:\WINDOWS\29027.exe
C:\WINDOWS\29173.exe
C:\WINDOWS\29593.exe
C:\WINDOWS\29611.exe
C:\WINDOWS\30476.exe
C:\WINDOWS\31235.exe
C:\WINDOWS\32712.exe
C:\WINDOWS\33147.exe
C:\WINDOWS\34955.exe
C:\WINDOWS\36135.exe
C:\WINDOWS\36415.exe
C:\WINDOWS\37633.exe
C:\WINDOWS\38024.exe
C:\WINDOWS\41468.exe
C:\WINDOWS\42455.exe
C:\WINDOWS\42471.exe
C:\WINDOWS\4271.exe
C:\WINDOWS\43208.exe
C:\WINDOWS\44615.exe
C:\WINDOWS\45664.exe
C:\WINDOWS\46001.exe
C:\WINDOWS\46225.exe
C:\WINDOWS\46739.exe
C:\WINDOWS\48461.exe
C:\WINDOWS\49923.exe
C:\WINDOWS\50236.exe
C:\WINDOWS\50460.exe
C:\WINDOWS\5093.exe
C:\WINDOWS\51064.exe
C:\WINDOWS\5157.exe
C:\WINDOWS\53129.exe
C:\WINDOWS\54078.exe
C:\WINDOWS\54131.exe
C:\WINDOWS\54690.exe
C:\WINDOWS\55176.exe
C:\WINDOWS\55287.exe
C:\WINDOWS\5640.exe
C:\WINDOWS\56883.exe
C:\WINDOWS\57375.exe
C:\WINDOWS\58537.exe
C:\WINDOWS\58930.exe
C:\WINDOWS\59541.exe
C:\WINDOWS\61297.exe
C:\WINDOWS\61780.exe
C:\WINDOWS\62037.exe
C:\WINDOWS\62216.exe
C:\WINDOWS\62472.exe
C:\WINDOWS\62722.exe
C:\WINDOWS\63046.exe
C:\WINDOWS\6440.exe
C:\WINDOWS\64712.exe
C:\WINDOWS\64730.exe
C:\WINDOWS\65787.exe
C:\WINDOWS\66186.exe
C:\WINDOWS\66704.exe
C:\WINDOWS\66933.exe
C:\WINDOWS\68461.exe
C:\WINDOWS\69140.exe
C:\WINDOWS\70735.exe
C:\WINDOWS\71237.exe
C:\WINDOWS\72051.exe
C:\WINDOWS\72251.exe
C:\WINDOWS\73219.exe
C:\WINDOWS\74924.exe
C:\WINDOWS\76312.exe
C:\WINDOWS\78588.exe
C:\WINDOWS\78753.exe
C:\WINDOWS\79695.exe
C:\WINDOWS\80147.exe
C:\WINDOWS\81440.exe
C:\WINDOWS\82867.exe
C:\WINDOWS\86698.exe
C:\WINDOWS\86792.exe
C:\WINDOWS\89286.exe
C:\WINDOWS\89706.exe
C:\WINDOWS\90708.exe
C:\WINDOWS\92161.exe
C:\WINDOWS\92460.exe
C:\WINDOWS\92723.exe
C:\WINDOWS\944.exe
C:\WINDOWS\95412.exe
C:\WINDOWS\95505.exe
C:\WINDOWS\96033.exe
C:\WINDOWS\96436.exe
C:\WINDOWS\96576.exe
C:\WINDOWS\9703.exe
C:\WINDOWS\98319.exe
C:\WINDOWS\985.exe
C:\WINDOWS\99316.exe
C:\WINDOWS\99651.exe
C:\Program Files\ipwindows\ipwins.dll
C:\Program Files\ipwindows\ipwins.exe
C:\Program Files\ipwindows\UnInstall.exe
C:\Program Files\oin search\OINSearch.dll
C:\Program Files\oin search\Uninstall.exe
C:\Program Files\outerinfo\Terms.rtf
C:\WINDOWS\system32\wintsvtr.exe
C:\WINDOWS\DOWNLO~1.\YSBactivex.dll
C:\WINDOWS\b122.exe
C:\Program Files\ipwindows
C:\Program Files\oin search
C:\Program Files\outerinfo
~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Purity ~ ~ ~ ~ ~ ~ ~ ~~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
Folders Quarantined:
C:\qoobox\purity\C\DOCUME~1
C:\qoobox\purity\C\DOCUME~1\OWNER~1.YOU
C:\qoobox\purity\C\DOCUME~1\OWNER~1.YOU\APPLIC~1
C:\qoobox\purity\C\DOCUME~1\OWNER~1.YOU\MYDOCU~1
C:\qoobox\purity\C\DOCUME~1\OWNER~1.YOU\APPLIC~1\RACLE~1
C:\qoobox\purity\C\DOCUME~1\OWNER~1.YOU\APPLIC~1\SMBOLS~1
C:\qoobox\purity\C\DOCUME~1\OWNER~1.YOU\APPLIC~1\YSTEM3~1
C:\qoobox\purity\C\DOCUME~1\OWNER~1.YOU\APPLIC~1\SMBOLS~1\s?mbols
C:\qoobox\purity\C\DOCUME~1\OWNER~1.YOU\APPLIC~1\SMBOLS~1\wuauclt.exe
C:\qoobox\purity\C\DOCUME~1\OWNER~1.YOU\MYDOCU~1\SMBOLS~1
C:\qoobox\purity\C\Program Files\SCURIT~1
C:\qoobox\purity\C\Program Files\SSTEM~1
C:\qoobox\purity\C\Program Files\Common Files\ICROSO~1
C:\qoobox\purity\C\Program Files\Common Files\RACLE~1
C:\qoobox\purity\C\WINDOWS\MCROSO~1.NET
C:\qoobox\purity\C\WINDOWS\STEM32~1

((((((((((((((((((((((((((((((( Files Created from 2007-04-05 to 2007-05-18 ))))))))))))))))))))))))))))))))))

2007-05-18 20:27 132,660 –a—— C:\WINDOWS\system32\xrpxymdv.dll
2007-05-18 20:22 49,204 –a—— C:\WINDOWS\system32\nadousgs.dll
2007-05-18 20:21 76,412 –a—— C:\WINDOWS\system32\nmdkoppy.dll
2007-05-18 19:37 132,660 –a—— C:\WINDOWS\system32\oqddwypn.dll
2007-05-18 16:45 132,660 –a—— C:\WINDOWS\system32\csktrtbm.dll
2007-05-11 09:51 60,928 –a—— C:\WINDOWS\system32\xno.dll
2007-05-01 21:00 d——– C:\DOCUME~1\OWNER~1.YOU\APPLIC~1\Viewpoint

(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-05-19 02:38:30 ——– d—–w C:\DOCUME~1\OWNER~1.YOU\APPLIC~1\Xfire
2007-05-19 02:36:58 ——– d-s—w C:\Program Files\Xfire
2007-05-18 00:34:29 ——– d—–w C:\Program Files\mIRC
2007-05-10 14:05:31 ——– d—–w C:\Program Files\Common Files\AOL
2007-05-10 14:05:31 ——– d—–w C:\Program Files\AIM
2007-05-10 01:26:05 ——– d—–w C:\Program Files\AIM6
2007-05-08 00:17:09 ——– d—–w C:\DOCUME~1\OWNER~1.YOU\APPLIC~1\Azureus
2007-04-23 04:39:49 ——– d—–w C:\Program Files\Soulseek
2007-04-15 06:05:07 ——– d—–w C:\Program Files\Azureus
2007-04-07 21:58:37 ——– d—–w C:\Program Files\Starcraft
2007-04-02 21:28:41 ——– d—–w C:\DOCUME~1\OWNER~1.YOU\APPLIC~1\vlc
2007-04-02 20:12:54 ——– d—–w C:\Program Files\iTunes
2007-04-02 20:12:28 ——– d—–w C:\Program Files\iPod
2007-04-02 20:06:55 ——– d—–w C:\Program Files\QuickTime Alternative
2007-03-31 22:57:37 35,382 —-a-w C:\WINDOWS\scunin.dat
2007-03-31 22:57:36 967 —-a-w C:\WINDOWS\ScUnin.pif
2007-03-31 22:57:35 94,208 —-a-w C:\WINDOWS\ScUnin.exe
2007-03-23 18:09:54 ——– d—–w C:\DOCUME~1\OWNER~1.YOU\APPLIC~1\Opera
2007-03-23 17:54:17 ——– d–h–w C:\Program Files\InstallShield Installation Information
2007-03-17 13:43:01 292,864 —-a-w C:\WINDOWS\system32\winsrv.dll
2007-03-08 15:36:28 577,536 —-a-w C:\WINDOWS\system32\user32.dll
2007-03-08 15:36:28 40,960 —-a-w C:\WINDOWS\system32\mf3216.dll
2007-03-08 15:36:28 281,600 —-a-w C:\WINDOWS\system32\gdi32.dll
2007-03-08 13:47:48 1,843,584 —-a-w C:\WINDOWS\system32\win32k.sys
2007-02-05 20:17:02 185,344 —-a-w C:\WINDOWS\system32\upnphost.dll

(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{02478D38-C3F9-4EFB-9B51-7695ECA05670}=C:\Program Files\Yahoo!\Common\Companion\Installs\cpn\yt.dll [2006-09-07 16:28]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll [2003-05-15 07:47]
{53707962-6F74-2D53-2644-206D7942484F}=C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2005-05-31 01:04]
{5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897}=C:\Program Files\Yahoo!\Common\yiesrvc.dll [2006-07-31 15:32]
{BDF3E430-B101-42AD-A544-FADC6B084872}=c:\Program Files\Norton AntiVirus\NavShExt.dll [2003-08-17 23:34]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AtiPTA"="atiptaxx.exe" [2006-02-21 17:05 C:\WINDOWS\system32\atiptaxx.exe]
"QuickTime Task"="C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" [2007-02-16 10:54]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Yahoo! Pager"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" [2006-09-13 14:17]
"Aim6"="C:\Program Files\AIM6\aim6.exe" [2006-11-07 08:29]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2005-05-31 01:04]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"AllowLegacyWebView"=1 (0x1)
"AllowUnhashedWebView"=1 (0x1)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages msv1_0
Security Packages kerberos msv1_0 schannel wdigest
Notification Packages scecli

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Owner.YOUR-W04GTXLD67^Start Menu^Programs^Startup^Adobe Gamma.lnk]
path=C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Start Menu\Programs\Startup\Adobe Gamma.lnk
backup=C:\WINDOWS\pss\Adobe Gamma.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Owner.YOUR-W04GTXLD67^Start Menu^Programs^Startup^Encarta Dictionary Quickshelf.lnk]
path=C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Start Menu\Programs\Startup\Encarta Dictionary Quickshelf.lnk
backup=C:\WINDOWS\pss\Encarta Dictionary Quickshelf.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Owner.YOUR-W04GTXLD67^Start Menu^Programs^Startup^Organize.lnk]
path=C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Start Menu\Programs\Startup\Organize.lnk
backup=C:\WINDOWS\pss\Organize.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Owner.YOUR-W04GTXLD67^Start Menu^Programs^Startup^spamsubtract.lnk]
path=C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Start Menu\Programs\Startup\spamsubtract.lnk
backup=C:\WINDOWS\pss\spamsubtract.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcxMonitor]
ALCXMNTR.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CamMonitor]
c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp]
"c:\Program Files\Common Files\Symantec Shared\ccApp.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\WINDOWS\System32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPHmon05]
C:\WINDOWS\System32\hphmon05.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPHUPD05]
c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpsysdrv]
c:\windows\system\hpsysdrv.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InfoData]
rundll32.exe "C:\WINDOWS\system32\xjyphmqy.dll",realset

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IpWins]
C:\Program Files\Ipwindows\ipwins.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
"C:\Program Files\iTunes\iTunesHelper.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KBD]
C:\HP\KBD\KBD.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
%systemroot%\system32\dumprep 0 -k

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LTMSG]
LTMSG.exe 7

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"C:\Program Files\Messenger\MSMSGS.EXE" /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NAV CfgWiz]
c:\Program Files\Common Files\Symantec Shared\CfgWiz.exe /GUID NAV /CMDLINE "REBOOT"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nigbljtf]
"C:\Program Files\Common Files\?racle\r?gsvr32.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Notn]
"C:\DOCUME~1\OWNER~1.YOU\APPLIC~1\SMBOLS~1\wuauclt.exe" -vt yazb

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PS2]
C:\WINDOWS\system32\ps2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Recguard]
C:\WINDOWS\SMINST\RECGUARD.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\regcmdcons]
c:\hp\bin\cloaker.exe c:\hp\bin\cmdcons.cmd

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Reminder]
"C:\Windows\Creator\Remind_XP.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\runner1]
C:\WINDOWS\updater.exe 61A847B5BBF72810329B385473F001F0B3E35B6638993F4661AA4EBD86D67C56389B284534F310

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateManager]
"C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTimer]
VTTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WindowsService]
rundll32.exe "C:\WINDOWS\system32\ptjqwucd.dll",realset

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalService Alerter WebClient LmHosts RemoteRegistry upnphost SSDPSRV
NetworkService DnsCache
rpcss RpcSs
imgsvc StiSvc
termsvcs TermService
HTTPFilter HTTPFilter
DcomLaunch DcomLaunch TermService
WudfServiceGroup WUDFSvc

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost *netsvcs*

Contents of the 'Scheduled Tasks' folder
2007-05-18 04:42:03 C:\WINDOWS\tasks\AppleSoftwareUpdate.job
2004-06-06 17:44:22 C:\WINDOWS\tasks\Easy Internet Sign-up.job
2003-10-14 13:32:36 C:\WINDOWS\tasks\Symantec NetDetect.job
2007-05-18 04:50:01 C:\WINDOWS\tasks\WebReg 20040422215047.job
2007-05-18 22:16:00 C:\WINDOWS\tasks\WebReg 20050515151609.job

********************************************************************

catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-05-18 20:28:44
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

********************************************************************

Completion time: 2007-05-18 20:36:28 - machine was rebooted
C:\ComboFix-quarantined-files.txt … 2007-05-18 20:36

— E O F —

VundoFix log:

VundoFix V6.3.23

Checking Java version…

Scan started at 8:50:41 PM 5/18/2007

Listing files found while scanning….

C:\WINDOWS\system32\csktrtbm.dll
C:\WINDOWS\system32\mbtrtksc.ini
C:\WINDOWS\system32\nmdkoppy.dll
C:\WINDOWS\system32\npywddqo.ini
C:\WINDOWS\system32\oqddwypn.dll
C:\WINDOWS\system32\vdmyxprx.ini
C:\WINDOWS\system32\vdmyxprx.tmp
C:\WINDOWS\system32\xrpxymdv.dll

Beginning removal…

Attempting to delete C:\WINDOWS\system32\csktrtbm.dll
C:\WINDOWS\system32\csktrtbm.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\mbtrtksc.ini
C:\WINDOWS\system32\mbtrtksc.ini Has been deleted!

Attempting to delete C:\WINDOWS\system32\nmdkoppy.dll
C:\WINDOWS\system32\nmdkoppy.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\npywddqo.ini
C:\WINDOWS\system32\npywddqo.ini Has been deleted!

Attempting to delete C:\WINDOWS\system32\oqddwypn.dll
C:\WINDOWS\system32\oqddwypn.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\vdmyxprx.ini
C:\WINDOWS\system32\vdmyxprx.ini Has been deleted!

Attempting to delete C:\WINDOWS\system32\vdmyxprx.tmp
C:\WINDOWS\system32\vdmyxprx.tmp Has been deleted!

Attempting to delete C:\WINDOWS\system32\xrpxymdv.dll
C:\WINDOWS\system32\xrpxymdv.dll Has been deleted!

Performing Repairs to the registry.
Done!

EvilAzazel

Post #4May 19, 2007, 8:51 PM UTC

Had to do multiple post because the overall .txt file of all the logs was 131 Kbs and it wouldn't let me make one post. My AVG AS report also had to be cut in half. AVG AS log: ——————————————————— AVG Anti-Spyware - Scan Report ——————————————————— + Created at: 1:12:44 PM 5/19/2007 C:\Program Files\Mozilla Firefox\plugins\npsaix.dll -> Adware.180Solutions : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\thin-172-1-x-x.exe -> Adware.BetterInternet : Cleaned with backup (quarantined). C:\WINDOWS\abiloader.exe -> Adware.BetterInternet : Cleaned with backup (quarantined). C:\WINDOWS\hzyekxk.exe -> Adware.BetterInternet : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\system32\ollicetk.dll.vir -> Adware.BHO : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\system32\osqunqgi.dll.vir -> Adware.BHO : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050481.dll -> Adware.BHO : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050482.dll -> Adware.BHO : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050273.EXE -> Adware.ClearSearch : Cleaned with backup (quarantined). C:\Documents and Settings\Daniels Folder w stuff\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\SecurityClassLoader.class-6fd9f626-74d74e55.class -> Adware.CWS : Cleaned with backup (quarantined). C:\Documents and Settings\Muerte\Application Data\Hotbar -> Adware.HotBar : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050216.dll -> Adware.Ipend : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050274.dll -> Adware.Midaddle : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050276.dll -> Adware.Midaddle : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP333\A0042891.exe -> Adware.PurityScan : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP337\A0043171.dll -> Adware.PurityScan : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP337\A0043172.exe -> Adware.PurityScan : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP338\A0043204.dll -> Adware.PurityScan : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP340\A0044264.dll -> Adware.PurityScan : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP340\A0044265.exe -> Adware.PurityScan : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP341\A0044301.dll -> Adware.PurityScan : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP341\A0044302.exe -> Adware.PurityScan : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP342\A0044338.dll -> Adware.PurityScan : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP342\A0044339.exe -> Adware.PurityScan : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP343\A0044407.dll -> Adware.PurityScan : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP343\A0044408.exe -> Adware.PurityScan : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP344\A0044476.dll -> Adware.PurityScan : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP344\A0044477.exe -> Adware.PurityScan : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP355\A0046740.dll -> Adware.PurityScan : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP355\A0046741.exe -> Adware.PurityScan : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050502.exe -> Adware.PurityScan : Cleaned with backup (quarantined). C:\WINDOWS\system32\xno.dll -> Adware.PurityScan : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\b122.exe.vir -> Adware.Softomate : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050465.exe -> Adware.Softomate : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\BrowserSearch -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\BrowserSearch\BrowserSearch.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\BrowserSearch\BrowserSearch.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\ErrorSearch -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\ErrorSearch\ErrorSearchOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\ErrorSearch\ErrorSearchOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\Games -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\Games\GamesOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\Games\GamesOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\JokeSearch -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\JokeSearch\JokeSearchOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\JokeSearch\JokeSearchOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\Layouts -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\Layouts\PreferencesLayout.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\Layouts\PreferencesLayout.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\Layouts\ToolbarLayout.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\Layouts\ToolbarLayout.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\Manager -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\Manager\ManagerOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\Manager\ManagerOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\Movies -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\Movies\MoviesOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\Movies\MoviesOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\Pranks -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\Pranks\PranksOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\Pranks\PranksOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\RelatedSearch -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\RelatedSearch\RelatedSearchOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\RelatedSearch\RelatedSearchOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\ScreensaversMarketingSitePager -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\SearchAssistPlus -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\SearchAssistPlus\SearchAssistPlusOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\SearchAssistPlus\SearchAssistPlusOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\SearchMatch -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\SearchMatch\SearchMatchOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\SearchMatch\SearchMatchOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\SearchMatch\searchMatchPages -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\SmileyTown -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\SmileyTown\SmileyTownOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\SmileyTown\SmileyTownOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\Toolbar -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\ToolbarLogo -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\ToolbarLogo\ToolbarLogoOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\ToolbarLogo\ToolbarLogoOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\ToolbarSearch -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\ToolbarSearch\ToolbarSearchOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\ToolbarSearch\ToolbarSearchOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\Toolbar\TBProductsOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\Toolbar\TBProductsOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\TravelSearch -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\Application Data\Starware\TravelSearch\TravelSearchOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Danny\Application Data\Starware\TravelSearch\TravelSearchOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\BrowserSearch -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\BrowserSearch\BrowserSearch.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\BrowserSearch\BrowserSearch.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\ErrorSearch -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\ErrorSearch\ErrorSearchOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\ErrorSearch\ErrorSearchOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\Games -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\Games\GamesOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\Games\GamesOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\JokeSearch -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\JokeSearch\JokeSearchOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\JokeSearch\JokeSearchOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\Layouts -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\Layouts\PreferencesLayout.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\Layouts\PreferencesLayout.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\Layouts\ToolbarLayout.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\Layouts\ToolbarLayout.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\Manager -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\Manager\ManagerOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\Manager\ManagerOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\Movies -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\Movies\MoviesOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\Movies\MoviesOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\Pranks -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\Pranks\PranksOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\Pranks\PranksOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\RelatedSearch -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\RelatedSearch\RelatedSearchOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\RelatedSearch\RelatedSearchOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\ScreensaversMarketingSitePager -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\ScreensaversMarketingSitePager\ScreensaversMarketingSitePagerOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\SearchAssistPlus -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\SearchAssistPlus\SearchAssistPlusOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\SearchAssistPlus\SearchAssistPlusOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\SearchMatch -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\SearchMatch\SearchMatchOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\SearchMatch\SearchMatchOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\SmileyTown -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\SmileyTown\SmileyTownOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\SmileyTown\SmileyTownOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\Toolbar -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\ToolbarLogo -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\ToolbarLogo\ToolbarLogoOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\ToolbarLogo\ToolbarLogoOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\ToolbarSearch -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\ToolbarSearch\ToolbarSearchOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\ToolbarSearch\ToolbarSearchOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\Toolbar\TBProductsOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\Toolbar\TBProductsOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\TravelSearch -> Adware.Starware : Cleaned with backup (quarantined). C:\Documents and Settings\Owner\Application Data\Starware\TravelSearch\TravelSearchOptions.xml -> Adware.Starware : Error during cleaning. C:\Documents and Settings\Owner\Application Data\Starware\TravelSearch\TravelSearchOptions.xml.backup -> Adware.Starware : Error during cleaning. C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050200.exe -> Adware.SuspectModule : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050261.exe -> Adware.SuspectModule : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050280.exe -> Adware.SuspectModule : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\system32\ddccccd.dll.vir -> Adware.Virtumonde : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\system32\tuvuuut.dll.vir -> Adware.Virtumonde : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050489.dll -> Adware.Virtumonde : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050506.dll -> Adware.Virtumonde : Cleaned with backup (quarantined). C:\WINDOWS\Downloaded Program Files\peeimp.exe -> Adware.WinFetcher : Cleaned with backup (quarantined). C:\Documents and Settings\Danny\My Documents\download\Nero 7 Premium -GEFIXT- incl. KeyGen - shared by DastaflexX for [www.torrent.to]\KeyGen\Nero7Keygen.exe -> Backdoor.Hupigon : Cleaned with backup (quarantined). C:\Program Files\Common Files\Real\Update_OB\installer_MARKETING35.exe -> Downloader.Adload.a : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\retadpu2000219.exe.vir -> Downloader.Agent.bls : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP339\A0044236.exe -> Downloader.Agent.bls : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050348.exe -> Downloader.Agent.bls : Cleaned with backup (quarantined). C:\WINDOWS\updater.exe.tmp -> Downloader.Agent.bls : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP328\A0042624.exe -> Downloader.Agent.dk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP328\A0042625.exe -> Downloader.Agent.dk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP347\A0046316.exe -> Downloader.Agent.dk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP347\A0046317.exe -> Downloader.Agent.dk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP349\A0046409.exe -> Downloader.Agent.dk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP349\A0046410.exe -> Downloader.Agent.dk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP360\A0048165.exe -> Downloader.Agent.dk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP360\A0048166.exe -> Downloader.Agent.dk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050342.exe -> Downloader.Agent.dk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050343.exe -> Downloader.Agent.dk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050627.exe -> Downloader.Agent.dk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050628.exe -> Downloader.Agent.dk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050224.exe -> Downloader.Femad.x : Cleaned with backup (quarantined). C:\WINDOWS\Downloaded Program Files\CONFLICT.1\on-line.exe -> Downloader.Femad.x : Cleaned with backup (quarantined). C:\WINDOWS\Downloaded Program Files\on-line.exe -> Downloader.Femad.x : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\DOWNLO~1\YSBactivex.dll.vir -> Downloader.IstBar.gz : Cleaned with backup (quarantined). C:\Program Files\Windows Media Player\wmplayer.exe.tmp -> Downloader.Lastad.h : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\Program Files\Common Files\Yazzle1281OinAdmin.exe.vir -> Downloader.PurityScan.eg : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050345.exe -> Downloader.PurityScan.eg : Cleaned with backup (quarantined). C:\Program Files\Internet Explorer\rewquexv.exe -> Downloader.Small.lo : Cleaned with backup (quarantined). C:\WINDOWS\Downloaded Program Files\CONFLICT.9\file.exe -> Downloader.Small.tm : Cleaned with backup (quarantined). C:\counter.cab/counter.exe -> Dropper.Agent.az : Cleaned with backup (quarantined). C:\WINDOWS\Downloaded Program Files\CONFLICT.1\EPXActiveX.ocx -> Dropper.Agent.or : Cleaned with backup (quarantined). C:\WINDOWS\Downloaded Program Files\EPXActiveX.ocx -> Dropper.Agent.or : Cleaned with backup (quarantined). C:\WINDOWS\system\unppc.exe -> Dropper.Delf.gw : Cleaned with backup (quarantined). C:\WINDOWS\pss\337689.exeCommon Startup -> Dropper.Small.rq : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\10869.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\11563.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\12152.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\14854.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\15808.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\20331.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\24183.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\2503.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\2890.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\29027.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\29593.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\29611.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\30476.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\32712.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\42455.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\44615.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\46001.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\48461.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\50236.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\50460.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\5157.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\53129.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\54131.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\55287.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\58930.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\61297.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\62037.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\62472.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\62722.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\63046.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\6440.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\66186.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\69140.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\70735.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\71237.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\72051.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\72251.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\73219.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\76312.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\78588.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\78753.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\79695.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\80147.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\81440.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\86792.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\89286.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\89706.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\90708.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\92161.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\92460.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\95505.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\96436.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\96576.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\9703.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\98319.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\99651.exe.vir -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050350.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050351.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050352.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050354.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050355.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050359.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050360.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050362.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050367.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050369.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050371.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050372.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050373.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050375.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050383.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050387.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050389.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050392.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050394.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050395.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050398.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050399.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050401.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050404.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050409.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050411.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050413.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050415.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050416.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050417.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050418.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050422.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050426.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050427.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050428.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050429.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050430.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050431.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050433.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050434.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050435.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050436.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050437.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050438.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050441.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050442.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050443.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050444.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050445.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050446.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050450.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050452.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050453.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050454.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050455.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050458.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\WINDOWS\winhost.exe -> Hijacker.Delf.bk : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\10211.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\24443.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\261.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\28021.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\28957.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\29173.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\36135.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\37633.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\38024.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\4271.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\43208.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\45664.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\46225.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\49923.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\51064.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\54078.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\5640.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\58537.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\59541.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\62216.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\64730.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\65787.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\66704.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\68461.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\74924.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\82867.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\86698.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\985.exe.vir -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050349.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050361.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050364.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050365.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050368.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050370.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050378.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050380.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050381.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050385.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050386.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050388.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050390.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050393.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050397.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050400.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050405.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050408.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050410.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050414.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050420.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050421.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050423.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050425.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050432.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050439.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050440.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050456.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\WINDOWS\Guard.exe -> Hijacker.StartPage.us : Cleaned with backup (quarantined). C:\WINDOWS\Downloaded Program Files\UWA7P_0001_N91M0809NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.o : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\13158.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\1593.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\1633.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\17979.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\25887.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\28898.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\31235.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\33147.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\34955.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\36415.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\41468.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\42471.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\46739.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\5093.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\54690.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\55176.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\56883.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\57375.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\61780.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\64712.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\66933.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\92723.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\944.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\95412.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\96033.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\99316.exe.vir -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050353.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050356.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050357.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050358.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050363.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050366.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050374.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050376.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050377.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050379.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050382.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050384.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050391.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050396.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050402.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050403.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050406.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050407.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050412.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050419.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050424.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050447.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050448.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050449.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050451.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050457.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined). C:\WINDOWS\ibs.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup (quarantined).

EvilAzazel

Post #5May 19, 2007, 8:52 PM UTC

AVG AS log part 2. cont'd:

:mozilla.145:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.150:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.151:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.152:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.153:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.154:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.155:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.156:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.157:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.158:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.159:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.160:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.161:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.162:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.163:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.164:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.165:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.166:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.167:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.168:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.169:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.170:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.171:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.172:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.173:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.174:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.175:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.176:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.177:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.178:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.179:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.180:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.181:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.182:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.183:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.184:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.185:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.186:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.187:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.188:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.189:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.190:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.191:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.192:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.193:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.194:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.195:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.196:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.197:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.198:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.365:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.382:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.477:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.700:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.411:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.412:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.413:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.420:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.802:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Cookies\owner@adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Cookies\[removed][1].txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.299:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.301:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.308:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.479:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.480:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.481:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.482:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.646:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.204:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.205:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.206:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.207:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.208:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.252:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Cookies\owner@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.594:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.551:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.552:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.553:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.554:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.35:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.36:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.37:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.38:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.39:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.47:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.48:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.49:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.50:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.52:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.53:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.54:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.55:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.405:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Com : Cleaned.
C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Cookies\owner@cpvfeed[3].txt -> TrackingCookie.Cpvfeed : Cleaned.
:mozilla.694:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Dealtime : Cleaned.
:mozilla.100:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.106:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.56:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.739:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Cookies\owner@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.15:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.16:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.6:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.108:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.109:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.110:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.111:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.114:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.115:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.116:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.117:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.118:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Cookies\owner@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.705:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.712:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.611:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.612:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.470:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.471:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.424:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Live : Cleaned.
:mozilla.425:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Live : Cleaned.
:mozilla.426:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Live : Cleaned.
:mozilla.427:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Live : Cleaned.
:mozilla.428:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Live : Cleaned.
:mozilla.429:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Live : Cleaned.
:mozilla.430:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Live : Cleaned.
:mozilla.706:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.707:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.708:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.104:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.105:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Cookies\owner@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][1].txt -> TrackingCookie.Msn : Cleaned.
:mozilla.126:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Netflame : Cleaned.
:mozilla.688:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.689:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.383:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.384:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.385:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.659:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Paypal : Cleaned.
:mozilla.101:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.102:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.103:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.107:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.112:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.113:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.433:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.434:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.437:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.788:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.789:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.790:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.559:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Realtracker : Cleaned.
:mozilla.216:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.220:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.221:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.222:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.223:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.224:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.225:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.226:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.227:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.228:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.229:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.230:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.231:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.232:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.340:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.341:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.342:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.343:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.344:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.345:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.346:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.347:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.348:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.349:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.350:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.351:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.352:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.353:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.354:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.355:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.356:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.357:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.358:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.359:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.360:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.361:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.362:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.363:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Cookies\owner@revsci[2].txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.495:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.496:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.497:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.498:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.499:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.500:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.414:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.415:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.416:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.417:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.418:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.741:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.742:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.743:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.744:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.745:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.501:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.502:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.503:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.504:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.505:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.506:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.507:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.508:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.509:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.510:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.511:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.512:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.513:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.514:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.515:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.516:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.517:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.518:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.519:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.520:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.521:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.522:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.523:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.524:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.525:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.526:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.527:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.528:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.529:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.530:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.531:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.532:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.533:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.534:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.535:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.536:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.537:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.538:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.539:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.540:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.541:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.542:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.543:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.544:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.545:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.546:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.547:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.548:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.549:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.550:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Cookies\owner@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.484:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.486:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.487:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.488:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.489:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.740:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.764:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.316:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.318:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.319:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.320:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.321:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.322:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.323:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.324:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.325:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.283:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.284:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.629:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Webtrends : Cleaned.
:mozilla.783:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.326:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.327:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.328:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.329:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.330:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.331:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.585:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.586:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.587:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.588:C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Application Data\Mozilla\Firefox\Profiles\ijsnubgr.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
C:\Documents and Settings\Owner.YOUR-W04GTXLD67\Cookies\owner@zedo[1].txt -> TrackingCookie.Zedo : Cleaned.
C:\WINDOWS\cerbmod.dll -> Trojan.Dialer.bi : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\file.exe -> Trojan.Dialer.ce : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\CONFLICT.2\file.exe -> Trojan.Dialer.ce : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\CONFLICT.3\file.exe -> Trojan.Dialer.ce : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\CONFLICT.4\file.exe -> Trojan.Dialer.ce : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\CONFLICT.5\file.exe -> Trojan.Dialer.ce : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\CONFLICT.6\file.exe -> Trojan.Dialer.ce : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\CONFLICT.7\file.exe -> Trojan.Dialer.ce : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\file.exe -> Trojan.Dialer.ce : Cleaned with backup (quarantined).
C:\QooBox\Quarantine\C\Program Files\Ipwindows\UnInstall.exe.vir -> Trojan.Rond : Cleaned with backup (quarantined).
C:\QooBox\Quarantine\C\Program Files\Ipwindows\ipwins.dll.vir -> Trojan.Rond : Cleaned with backup (quarantined).
C:\QooBox\Quarantine\C\Program Files\Ipwindows\ipwins.exe.vir -> Trojan.Rond : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP334\A0042959.exe -> Trojan.Rond : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050459.dll -> Trojan.Rond : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050460.exe -> Trojan.Rond : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050461.exe -> Trojan.Rond : Cleaned with backup (quarantined).
C:\QooBox\Quarantine\C\WINDOWS\system32\wintsvtr.exe.vir -> Trojan.Small : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP333\A0042894.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP337\A0043175.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP340\A0044268.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP341\A0044305.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP342\A0044342.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP343\A0044411.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP344\A0044480.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP355\A0046744.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{BC9F3C70-F33F-48FB-93C7-198E1A9B1607}\RP362\A0050464.exe -> Trojan.Small : Cleaned with backup (quarantined).

::Report end

Fresh HJ this log:

Logfile of HijackThis v1.99.1
Scan saved at 1:45:39 PM, on 5/19/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\CTsvcCDA.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Xfire\Xfire.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Documents and Settings\Owner.YOUR-W04GTXLD67\My Documents\download\rochainskool\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qus10.hpwis.com/
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Common\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Common\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Common\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.adxgate.net
O15 - Trusted Zone: *.imagesrvr.com
O15 - Trusted Zone: *.snipenet.net
O15 - Trusted Zone: *.adxgate.net (HKLM)
O15 - Trusted Zone: *.errorprotector.com (HKLM)
O15 - Trusted Zone: *.errorsafe.com (HKLM)
O15 - Trusted Zone: *.imagesrvr.com (HKLM)
O15 - Trusted Zone: *.snipenet.net (HKLM)
O15 - Trusted Zone: *.systemdoctor.com (HKLM)
O15 - Trusted Zone: *.winantivirus.com (HKLM)
O15 - Trusted Zone: *.winfixer.com (HKLM)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1159822528687
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} (HGPlugin9USA Class) - http://gamedownload.ijjimax.com/gamedownlo…GPlugin9USA.cab
O16 - DPF: {DD583921-A9E9-4FBF-9266-8DC2AB5EA0AF} (HGPlugin10USA Class) - http://gamedownload.ijjimax.com/gamedownlo…Plugin10USA.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe

MrCharlie

Post #6May 19, 2007, 10:00 PM UTC

It will take me a while to look through all the logs but do this for now:

First of all, open Spybot S&D, click Mode>Advanced>Tools>Resident and remove the check from the Tea Timer box and for SDHelper. You can reinstate it later but we don't want it interfering with what we need to do. Reboot when done.

—————-

Close ALL programs down, leaving ONLY HijackThis running - Click Scan and…..
Place a check against the following items:

O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O15 - Trusted Zone: *.adxgate.net
O15 - Trusted Zone: *.imagesrvr.com
O15 - Trusted Zone: *.snipenet.net
O15 - Trusted Zone: *.adxgate.net (HKLM)
O15 - Trusted Zone: *.errorprotector.com (HKLM)
O15 - Trusted Zone: *.errorsafe.com (HKLM)
O15 - Trusted Zone: *.imagesrvr.com (HKLM)
O15 - Trusted Zone: *.snipenet.net (HKLM)
O15 - Trusted Zone: *.systemdoctor.com (HKLM)
O15 - Trusted Zone: *.winantivirus.com (HKLM)
O15 - Trusted Zone: *.winfixer.com (HKLM)

Click on Fix Checked and exit HijackThis.

Reboot and post a fresh HijackThis log and we'll take another look. MrC

EvilAzazel

Post #7May 20, 2007, 4:07 PM UTC

Logfile of HijackThis v1.99.1
Scan saved at 9:04:09 AM, on 5/20/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\AIM6\aolsoftware.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\CTsvcCDA.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Xfire\Xfire.exe
C:\Documents and Settings\Owner.YOUR-W04GTXLD67\My Documents\download\rochainskool\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qus10.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qus10.hpwis.com/
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Common\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Common\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Common\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1159822528687
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} (HGPlugin9USA Class) - http://gamedownload.ijjimax.com/gamedownlo…GPlugin9USA.cab
O16 - DPF: {DD583921-A9E9-4FBF-9266-8DC2AB5EA0AF} (HGPlugin10USA Class) - http://gamedownload.ijjimax.com/gamedownlo…Plugin10USA.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe

MrCharlie

Post #8May 20, 2007, 4:22 PM UTC

Your HJT log looks OK.

What do you know about this Starware program? Did you install it and is it in your control panels add/remove programs?

————————

Find and delete this file:

C:\WINDOWS\system32\nadousgs.dll

————————-

Please find these files and upload them
HERE for a free scan - let me know the results.

C:\WINDOWS\scunin.dat
C:\WINDOWS\ScUnin.pif
C:\WINDOWS\ScUnin.exe

If it's too busy - try here:
http://www.virustotal.com/en/indexf.html

MrC

EvilAzazel

Post #9May 20, 2007, 5:08 PM UTC last edited May 20, 2007, 5:09 PM UTC

I have no idea what starware is. I did not install it and it is not in my "Add or Remove Program" list For all the scunin files I received the following message.(uploaded at "virustotal.com" other was way to busy. Like at 92% system load.) "0 bytes size received / Se ha recibido un archivo vacio" But when I opened scunin.dat I saw that it was just some info for Starcraft. And ScUnin.exe seems to be the Starcraft Uninstall.

MrCharlie

Post #10May 20, 2007, 5:38 PM UTC

ScUnin.exe seems to be the Starcraft Uninstall

OK then double click on ScUnin.exe and see if it uninstalls.

Let me know, MrC

EvilAzazel

Post #11May 21, 2007, 3:27 AM UTC

It does not.

"Error: Insufficient Parameters."

MrCharlie

Post #12May 22, 2007, 1:04 AM UTC

OK, then lets delete the folder:

C:\Documents and Settings\Danny\Application Data\Starware

Then run this registry cleanup utility:

http://forums.tomcoyote.org/RegCleaner_t42862.html

Let me know, MrC

EvilAzazel

Post #13May 22, 2007, 11:22 PM UTC

I ran the registry but I can't seem to delete Starware. Whenever I try to access "Application Data" I get some "Access Denied" Message.

MrCharlie

Post #14May 22, 2007, 11:30 PM UTC

OK, lets try this:

1. Please download The Avenger by Swandog46 to your Desktop.

* Click on Avenger.zip to open the file
* Extract avenger.exe to your desktop

2. Copy all the text contained in the code box below to your Clipboard by highlighting it, then right click on it and choose Copy [or by pressing (Ctrl+C)]:

Folders to delete:

C:\Documents and Settings\Danny\Application Data\Starware

Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

3. Now, start The Avenger program by clicking on its icon on your desktop.

* Under "Script file to execute" choose "Input Script Manually".
* Now click on the Magnifying Glass icon which will open a new window titled "View/edit script"
* Right click in the new window and choose Paste or use (Ctrl+V). This will paste the text from the clipboard into the new window.
* Click Done
* Now click on the Green Light to begin execution of the script
* Answer "Yes" twice when prompted.

4. The Avenger will automatically do the following:

* It will Restart your computer. ( In cases where the code to execute contains "Drivers to Unload", The Avenger will actually restart your system twice.)
* On reboot, it will briefly open a black command window on your desktop, this is normal.
* After the restart, it creates a log file that should open with the results of Avenger’s actions. This log file will be located at C:\avenger.txt
* The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.

Post the avenger.txt, MrC

EvilAzazel

Post #15May 25, 2007, 10:56 PM UTC

Logfile of The Avenger version 1, by Swandog46 Running from registry key: \Registry\Machine\System\CurrentControlSet\Services\bnpaarnp ******************* Script file located at: \??\C:\Program Files\wptkexdq.txt Script file opened successfully. Script file read successfully Backups directory opened successfully at C:\Avenger ******************* Beginning to process script file: Folder C:\Documents and Settings\Danny\Application Data\Starware deleted successfully. Completed script processing. ******************* Finished! Terminate.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Mylogs

✨ Ask AI

Ask AI