Spyware / Malware / Virus Removal

Alcra-b Trojan Won't Go Away

7 min read

Looking for the outcome? Ask AI

LeslieR Topic Starter

Post #1May 21, 2007, 11:09 PM UTC

My Windows XP PC is infected with the Alcra-b trojan. Both Symantec Antivirus 10 Corporate Edition as well as Spy Sweeper continually detect it and quarantine it. It keeps coming back. I now have more than 1000 quarantined files with names like dwh3443.tmp, dwh5dff.tmp, etc. When prompted by Spy Sweeper to clear quarantine, I do so, but it fills back up quickly with these files.

My CPU, which has 1 GB of RAM, is running at 100% capacity, even when I am running nothing more than a browser, Symantec and Spy Sweeper.

I have scanned it with both these programs normally and in Safe Mode. Here is my HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 8:50:31 PM, on 5/20/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\SiteAdvisor\6066\SAService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Common Files\TiVo Shared\Beacon\TiVoBeacon.exe
C:\Program Files\Roxio\MyDVD\USBDeviceService.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv4.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\InfoMyCa.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe
C:\Program Files\Lexmark X5100 Series\lxbabmgr.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Adobe\Distillr\Acrotray.exe
C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
C:\Program Files\Roxio\MyDVD\DetectorApp.exe
C:\Program Files\Lexmark X5100 Series\lxbabmon.exe
C:\PROGRA~1\eCopy\Desktop\PCLprint\mrmlnc32.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe
C:\Program Files\TiVo\Desktop\TiVoNotify.exe
C:\Program Files\TiVo\Desktop\TiVoServer.exe
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\Creative\Diagnostics\diagent.exe
C:\Program Files\Launchy\Launchy.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Hijackthis\HijackThis.exe

O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [WUSB54Gv4] "C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\InvokeSvc3.exe"
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe"
O4 - HKLM\..\Run: [Lexmark X5100 Series] "C:\Program Files\Lexmark X5100 Series\lxbabmgr.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6066\SiteAdv.exe"
O4 - HKLM\..\Run: [DetectorApp] "C:\Program Files\Roxio\MyDVD\DetectorApp.exe"
O4 - HKLM\..\Run: [eCopy Desktop Printer Service] C:\PROGRA~1\eCopy\Desktop\PCLprint\mrmlnc32.exe
O4 - HKLM\..\Run: [eCopy Desktop Inbox Monitor] "C:\PROGRA~1\eCopy\Desktop\Bin\INBOXM~1.EXE" -run
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] "C:\Program Files\Google\Gmail Notifier\gnotify.exe"
O4 - HKLM\..\Run: [Picasa Media Detector] "C:\Program Files\Picasa2\PicasaMediaDetector.exe"
O4 - HKLM\..\Run: [diagent] "C:\Program Files\Creative\Diagnostics\diagent.exe" startup
O4 - HKLM\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TivoTransfer] "C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe" /service /registry /auto:TivoTransfer
O4 - HKCU\..\Run: [TivoNotify] "C:\Program Files\TiVo\Desktop\TiVoNotify.exe" /service /registry /auto:TivoNotify
O4 - HKCU\..\Run: [TivoServer] "C:\Program Files\TiVo\Desktop\TiVoServer.exe" /service /registry /auto:TivoServer
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Launchy.lnk = C:\Program Files\Launchy\Launchy.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Copy plain text for WhizFolders - C:\Program Files\WhizFolders Organizer\copytool.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {001EE746-A1F9-460E-80AD-269E088D6A01} (Infotl Control) - http://site.ebrary.com/lib/nyulibrary/supp…s/ebraryRdr.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1140877863953
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - http://128.122.159.181/tsweb/msrdp.cab
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - file://C:\WINDOWS\msxml4.cab
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6066\SAService.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: TiVo Beacon (TivoBeacon2) - Unknown owner - C:\Program Files\Common Files\TiVo Shared\Beacon\TiVoBeacon.exe" /service (file missing)
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Roxio\MyDVD\USBDeviceService.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: WUSB54Gv4SVC - Unknown owner - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe" "WUSB54Gv4.exe (file missing)

Your help is greatly appreciated.

LeslieR

silver

Post #2May 23, 2007, 7:59 AM UTC

Hello and welcome to TomCoyote!

My name is silver and I'll be helping you clean your machine.

First I have a question about an Internet Explorer ActiveX control installed on your machine:
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - http://128.122.159.181/tsweb/msrdp.cab

The IP address appears to be related to New York University, do you know anything about this?

Please click Start->Run and type cleanmgr in the box and press OK
Ensure the boxes for Temporary Files and Temporary Internet Files are checked, you can choose to check other boxes if you wish but they are not required.
Press OK and Yes to confirm

Then please do an online scan with Kaspersky:

Open Kaspersky Online Scanner in Internet Explorer

You will be prompted to install an ActiveX component from Kaspersky,
Click Yes.

The program will launch and then begin downloading the latest definition files:
Once the files have been downloaded click on NEXT and then Scan Settings
In the scan settings make that the following are selected:
- Scan using the following Anti-Virus database:
Extended (if available otherwise Standard)
- Scan Options:
Scan Archives Scan Mail Bases
Click OK
Now under select a target to scan:Select My Computer
The program will start to scan your system.
Once the scan is complete, click on the Save as Text button and save the file to your desktop

Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the license, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license is accepted, reset to 100%.

Please download F-Secure Blacklight (blbeta.exe):
https://europe.f-secure.com/blacklight/try.shtml

Click I ACCEPT and download the graphical user interface version to your Desktop
Double click the file to run it, choose I accept the agreement then press Scan
It will create the "fsbl-xxxxxxx.log" on your desktop.
The log will have a list of all items found.
Do not choose to rename any yet! I want to see the log first because legitimate items can also be present.
Exit Blacklight and post the contents of the log in your next reply.

Once complete, please post the Kaspersky log, the Blacklight log and a new HijackThis log.

LeslieR

Post #3May 23, 2007, 1:55 PM UTC

Silver, Thanks for taking this on. The reference to New York University, my workplace, is to a server I used to remote desktop into from home but no longer do so. I will follow your instructions and post new logs unless you tell me otherwise. LeslieR

silver

Post #4May 23, 2007, 11:32 PM UTC

Hi LeslieR That's fine, please go ahead and continue with the instructions.

LeslieR

Post #5May 25, 2007, 1:27 AM UTC

Here is my HJT log. I ran Blacklight twice, and it said No hiden items were found. It did not produce a log. The Kaspersky log is very long, I'm going to have to break it into several posts after this one.

LeslieR

Logfile of HijackThis v1.99.1
Scan saved at 9:11:19 PM, on 5/24/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\SiteAdvisor\6066\SAService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Common Files\TiVo Shared\Beacon\TiVoBeacon.exe
C:\Program Files\Roxio\MyDVD\USBDeviceService.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv4.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\InfoMyCa.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe
C:\Program Files\Lexmark X5100 Series\lxbabmgr.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Adobe\Distillr\Acrotray.exe
C:\Program Files\Lexmark X5100 Series\lxbabmon.exe
C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
C:\Program Files\Roxio\MyDVD\DetectorApp.exe
C:\PROGRA~1\eCopy\Desktop\PCLprint\mrmlnc32.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe
C:\Program Files\TiVo\Desktop\TiVoNotify.exe
C:\Program Files\TiVo\Desktop\TiVoServer.exe
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\Program Files\Adobe\Acrobat\acrobat_sl.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\Launchy\Launchy.exe
C:\Program Files\Creative\Diagnostics\diagent.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Hijackthis\HijackThis.exe

O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program

Files\Adobe\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [WUSB54Gv4] "C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\InvokeSvc3.exe"
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe"
O4 - HKLM\..\Run: [Lexmark X5100 Series] "C:\Program Files\Lexmark X5100 Series\lxbabmgr.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6066\SiteAdv.exe"
O4 - HKLM\..\Run: [DetectorApp] "C:\Program Files\Roxio\MyDVD\DetectorApp.exe"
O4 - HKLM\..\Run: [eCopy Desktop Printer Service] C:\PROGRA~1\eCopy\Desktop\PCLprint\mrmlnc32.exe
O4 - HKLM\..\Run: [eCopy Desktop Inbox Monitor] "C:\PROGRA~1\eCopy\Desktop\Bin\INBOXM~1.EXE" -run
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] "C:\Program Files\Google\Gmail Notifier\gnotify.exe"
O4 - HKLM\..\Run: [Picasa Media Detector] "C:\Program Files\Picasa2\PicasaMediaDetector.exe"
O4 - HKLM\..\Run: [diagent] "C:\Program Files\Creative\Diagnostics\diagent.exe" startup
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TivoTransfer] "C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe" /service /registry

/auto:TivoTransfer
O4 - HKCU\..\Run: [TivoNotify] "C:\Program Files\TiVo\Desktop\TiVoNotify.exe" /service /registry /auto:TivoNotify
O4 - HKCU\..\Run: [TivoServer] "C:\Program Files\TiVo\Desktop\TiVoServer.exe" /service /registry /auto:TivoServer
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Launchy.lnk = C:\Program Files\Launchy\Launchy.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program

Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program

Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program

Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program

Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program

Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program

Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program

Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program

Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Copy plain text for WhizFolders - C:\Program Files\WhizFolders Organizer\copytool.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} -

C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file

missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network

Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {001EE746-A1F9-460E-80AD-269E088D6A01} (Infotl Control) -

http://site.ebrary.com/lib/nyulibrary/supp…s/ebraryRdr.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -

http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -

http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -

http://update.microsoft.com/windowsupdate/…b?1140877863953
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) -

http://128.122.159.181/tsweb/msrdp.cab
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - file://C:\WINDOWS\msxml4.cab
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec

Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec

Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec

Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec

AntiVirus\DefWatch.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common

Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google

Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common

Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6066\SAService.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec

Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec

Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: TiVo Beacon (TivoBeacon2) - Unknown owner - C:\Program Files\Common Files\TiVo Shared\Beacon\TiVoBeacon.exe"

/service (file missing)
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Roxio\MyDVD\USBDeviceService.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy

Sweeper\SpySweeper.exe
O23 - Service: WUSB54Gv4SVC - Unknown owner - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe"

"WUSB54Gv4.exe (file missing)

LeslieR

Post #6May 25, 2007, 1:46 AM UTC

Silver,

The Kaspersky log is HUGE, I am unable to post it. You can find it at http://libraryweb.law.nyu.edu/leslie/kasperskylog_5.23.pdf

LeslieR

silver

Post #7May 25, 2007, 4:47 AM UTC

Hi LeslieR,

That's the biggest Kaspersky log I've ever seen!

Your HijackThis log was difficult to read, this was because you had Word Wrap selected. Next time you have Notepad open, select the Format menu and make sure Word Wrap is unchecked before posting.

Please print/save a copy of these instructions because we will be using Safe Mode, during which time you won't have access to the internet.

Then download, install, and update AVG Anti-Spyware 7.5
Download the installer from this page:
http://www.ewido.net/en/download/

Save the installer to desktop
Double click the installer, select your language, and then select OK
Click NEXT->Do or don't read the "User License Agreement"
Select I Agree->NEXT->INSTALL
AVG will now install and afterwards click FINISH - the main screen will then open
Next to Resident Shield, click Change state so that active changes to inactive
Right-click the AVG Antispyware tray icon, select Start with Windows to remove the check-mark and OK the prompt
Click the Update tab at the top. Under Manual Update click Start update.
After the update finishes the status bar at the bottom will display Update successful
Close AVG Anti-Spyware. Do not run a scan yet.

Reboot your computer into Safe Mode
To boot into Safe Mode, please restart your computer. Tap F8 before Windows loads.
Select Safe Mode at the top, on the screen that appears.
Sign in with your normal user account

Once in safe mode:

Use Windows Explorer to find and delete this file:
C:\My Documents\My Download Files\mc2.exe

Next click Start->Run and type cleanmgr in the box and press OK
Ensure the boxes for Temporary Files and Temporary Internet Files are checked, you can choose to check other boxes if you wish but they are not required.
Press OK and Yes to confirm

Then run AVG Anti-Spyware 7.5 and click on the Scanner tab at the top
Click the Settings tab and then change the recommended action to Quarantine and ensure that Automatically generate report after every scan is selected and Un-check Only if Threats are found
Click back to the Scan tab and then click on Complete System Scan.
This scan can take quite a while to run, so be prepared.
AVG Anti-Spyware 7.5 will list any infections found on the left hand side.
Then, next to Set all elements to: click on Recommended action and select Quarantine from the list
Click the Apply all actions button. AVG Anti-Spyware 7.5 will display All actions have been applied on the right hand side.
Click on Save Report, then Save Report As. This will create a text file. Make sure you know where to find this file again (like on the Desktop).

Now reboot your computer normally

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.

Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt<-this one will be minimized
Make sure Format->Word Wrap is unchecked
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt in your reply

Once complete, please post the AVG Antispyware log and the DSS log (you don't need to run another HijackThis log as the DSS log includes one). Also, tell me if the detections continue to occur.

LeslieR

Post #8May 26, 2007, 7:38 PM UTC

Dare I hope? It's been almost a day since I followed your instructions, and I have not had any more detections. My CPU is running at normal capacity. My logs are too large to post, but you can see them by following these links.

http://libraryweb.law.nyu.edu/leslie/avg_5.25.07.pdf

http://libraryweb.law.nyu.edu/leslie/main_5.25.07.pdf

I think you've fixed it.

Thank you so much, I really appreciate it.

LeslieR

silver

Post #9May 27, 2007, 2:34 AM UTC

Hi LeslieR,

I'm glad your machine is running better, and you are very welcome to the help, however your machine isn't quite clean yet so we've got a few things still to do:

You have Viewpoint Media Player installed on your system. This program is not malware but it is foistware in that it is usually installed without the user's knowledge or approval, and for this reason I recommend you remove it. If you actually use this program, I recommend you try using alternatives such as VLC Player or Media Player Classic.
To remove, open Start->Control Panel->Add/Remove Programs find Viewpoint Media Player and select Remove

There are some suspect files on your machine that I'd like to check:
Open http://virusscan.jotti.org/
Copy/paste this file and path into the white box at the top:
C:\Windows\uccspecb.sys
Press Submit - this will submit the file for testing.
Copy and paste the results in your next response.
Then repeat this process for these two files:
C:\Windows\uccspecc.sys
C:\WINDOWS\smpwin32.dll

The AVG Antispyware log shows that for all detections "No action taken" was selected.
There were some bad files detected which we need to clean, and the easiest way is to run AVG Antispyware once more however this time just use normal mode and please double-check the instructions in red:

Run AVG Anti-Spyware 7.5 and click on the Scanner tab at the top
Click the Settings tab and under How to act, change Recommended actions to Quarantine and ensure that Automatically generate report after every scan is selected and Un-check Only if Threats are found
Click back to the Scan tab and then click on Complete System Scan.
This scan can take quite a while to run, so be prepared.
AVG Anti-Spyware 7.5 will list any infections found on the left hand side.
When the scan is complete, make sure Set all elements to: is set to Quarantine, if not, click the setting and choose Quarantine
Click the Apply all actions button. AVG Anti-Spyware 7.5 will display All actions have been applied on the right hand side.
Click on Save Report, then Save Report As. This will create a text file. Make sure you know where to find this file again (like on the Desktop).

Once complete, please post the Jotti results, the new AVG Antispyware log and a new HijackThis log.

LeslieR

Post #10May 27, 2007, 11:06 AM UTC

Silver,

Here are my 3 logs. BTW, I uninstalled my Symantec Antivirus and replaced it with the one that my ISP provides, Computer Associates' ETrust EZAntivVirus.

Leslie

JOTTI LOG

Service load: 0% 100%

File: uccspecb.sys
Status: OK
MD5 2cc2d06dfb4c5a1765302158d7028338
Packers detected: -

Scanner results
Scan taken on 27 May 2007 02:51:58 (GMT)
A-Squared Found nothing
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
Panda Antivirus Found nothing
Rising Antivirus Found nothing
VirusBuster Found nothing
VBA32 Found nothing

Service load: 0% 100%

File: uccspecc.sys
Status: INCONCLUSIVE (scan still in progress)
MD5 2aed4c6814523d990ec8b604c82f578b
Packers detected: Analyzing…

Scanner results
Scan taken on 27 May 2007 02:54:16 (GMT)
A-Squared Found nothing
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
Panda Antivirus Found nothing
Rising Antivirus Found nothing
VirusBuster Found nothing
VBA32 Found nothing

File: smpwin32.dll
Status: OK
MD5 fdbf354e9733736c5fc47a4e20da5eac
Packers detected: -

Scanner results
Scan taken on 27 May 2007 02:59:58 (GMT)
A-Squared Found nothing
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
Panda Antivirus Found nothing
Rising Antivirus Found nothing
VirusBuster Found nothing
VBA32 Found nothing

HJT Log

Logfile of HijackThis v1.99.1
Scan saved at 6:57:25 AM, on 5/27/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe
C:\Program Files\Lexmark X5100 Series\lxbabmgr.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\InfoMyCa.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Adobe\Distillr\Acrotray.exe
C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
C:\PROGRA~1\eCopy\Desktop\PCLprint\mrmlnc32.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Lexmark X5100 Series\lxbabmon.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe
C:\Program Files\Creative\Diagnostics\diagent.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\TiVo\Desktop\TiVoNotify.exe
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Launchy\Launchy.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\SiteAdvisor\6066\SAService.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\TiVo Shared\Beacon\TiVoBeacon.exe
C:\Program Files\Roxio\MyDVD\USBDeviceService.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv4.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\TiVo\Desktop\TiVoServer.exe
C:\Program Files\Hijackthis\HijackThis.exe

O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [WUSB54Gv4] "C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\InvokeSvc3.exe"
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe"
O4 - HKLM\..\Run: [Lexmark X5100 Series] "C:\Program Files\Lexmark X5100 Series\lxbabmgr.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6066\SiteAdv.exe"
O4 - HKLM\..\Run: [DetectorApp] "C:\Program Files\Roxio\MyDVD\DetectorApp.exe"
O4 - HKLM\..\Run: [eCopy Desktop Printer Service] C:\PROGRA~1\eCopy\Desktop\PCLprint\mrmlnc32.exe
O4 - HKLM\..\Run: [eCopy Desktop Inbox Monitor] "C:\PROGRA~1\eCopy\Desktop\Bin\INBOXM~1.EXE" -run
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] "C:\Program Files\Google\Gmail Notifier\gnotify.exe"
O4 - HKLM\..\Run: [Picasa Media Detector] "C:\Program Files\Picasa2\PicasaMediaDetector.exe"
O4 - HKLM\..\Run: [diagent] "C:\Program Files\Creative\Diagnostics\diagent.exe" startup
O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TivoTransfer] "C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe" /service /registry /auto:TivoTransfer
O4 - HKCU\..\Run: [TivoNotify] "C:\Program Files\TiVo\Desktop\TiVoNotify.exe" /service /registry /auto:TivoNotify
O4 - HKCU\..\Run: [TivoServer] "C:\Program Files\TiVo\Desktop\TiVoServer.exe" /service /registry /auto:TivoServer
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Launchy.lnk = C:\Program Files\Launchy\Launchy.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Copy plain text for WhizFolders - C:\Program Files\WhizFolders Organizer\copytool.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {001EE746-A1F9-460E-80AD-269E088D6A01} (Infotl Control) - http://site.ebrary.com/lib/nyulibrary/supp…s/ebraryRdr.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1140877863953
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - http://128.122.159.181/tsweb/msrdp.cab
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - file://C:\WINDOWS\msxml4.cab
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6066\SAService.exe
O23 - Service: TiVo Beacon (TivoBeacon2) - Unknown owner - C:\Program Files\Common Files\TiVo Shared\Beacon\TiVoBeacon.exe" /service (file missing)
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Roxio\MyDVD\USBDeviceService.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: WUSB54Gv4SVC - Unknown owner - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe" "WUSB54Gv4.exe (file missing)

AVG Log

———————————————————
AVG Anti-Spyware - Scan Report
———————————————————

+ Created at: 6:55:09 AM 5/27/2007

+ Scan result:

HKLM\SOFTWARE\Classes\CLSID\{5BED3930-2E9E-76D8-BACC-80DF2188D455} -> Adware.CouponBar : Cleaned with backup (quarantined).
C:\My Documents\My Download Files\HijackThis\backups\backup-20041202-235920-753.dll -> Adware.Coupons : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\CLSID\{62960D20-6D0D-1AB4-4BF1-95B0B5B8783A} -> Adware.Generic : Cleaned with backup (quarantined).
C:\Documents and Settings\Leslie\My Documents\Leslie\Computer Security\Kill2me\Kill2Me.exe -> Adware.LookMe : Cleaned with backup (quarantined).
C:\Documents and Settings\Leslie\My Documents\Leslie\Computer Security\Kill2me\kill2me.zip/Kill2Me.exe -> Adware.LookMe : Cleaned with backup (quarantined).
C:\My Documents\My Download Files\kill2me.zip/Kill2Me.exe -> Adware.LookMe : Cleaned with backup (quarantined).
:mozilla.100:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.101:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.102:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.103:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.104:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.105:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.107:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.108:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.109:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.110:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.111:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.112:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.112:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.113:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.113:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.114:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.114:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.115:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.115:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.116:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.117:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.118:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.119:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.120:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.28:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\6e2oejz7.Leslie\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.31:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\6e2oejz7.Leslie\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.33:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\6e2oejz7.Leslie\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.369:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.406:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.439:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.471:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.522:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.657:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.69:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.71:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.722:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.728:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.80:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.81:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.82:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.83:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.85:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.86:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.87:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.88:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.89:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.90:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.91:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.92:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.93:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.98:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.99:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.189:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Aavalue : Cleaned.
:mozilla.195:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Aavalue : Cleaned.
:mozilla.196:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Aavalue : Cleaned.
:mozilla.237:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.239:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.240:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.242:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.588:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.685:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.744:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.778:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.884:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.913:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.928:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\Leslie\Cookies\leslie@admarketplace[2].txt -> TrackingCookie.Admarketplace : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][1].txt -> TrackingCookie.Adobe : Cleaned.
:mozilla.10:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.13:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.152:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.153:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.154:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.15:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.16:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.17:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.18:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.208:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.209:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.210:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.211:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.212:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.9:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.540:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.541:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.573:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.574:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.111:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.133:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.134:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.134:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.135:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.135:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.136:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.137:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.141:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.142:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.44:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.45:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.46:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.48:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.49:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.27:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.40:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.6:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.358:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.940:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.941:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Bfast : Cleaned.
C:\Documents and Settings\Leslie\Cookies\leslie@bfast[2].txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.524:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.740:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.571:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.572:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][1].txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.815:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.102:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.103:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.327:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.328:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.546:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.547:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.548:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.136:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.137:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.138:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.139:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.140:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.14:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.15:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.16:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.17:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.18:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.65:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.66:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.67:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.68:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.69:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.70:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.71:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.72:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.73:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.74:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.94:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.95:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.96:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.97:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][1].txt -> TrackingCookie.Cnn : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][2].txt -> TrackingCookie.Co : Cleaned.
:mozilla.387:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.715:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.716:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Com : Cleaned.
C:\Documents and Settings\Leslie\Cookies\leslie@com[1].txt -> TrackingCookie.Com : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][1].txt -> TrackingCookie.Com : Cleaned.
:mozilla.415:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
:mozilla.496:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
:mozilla.762:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
C:\Documents and Settings\Leslie\Cookies\leslie@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : Cleaned.
:mozilla.148:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Dealtime : Cleaned.
:mozilla.617:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Dealtime : Cleaned.
:mozilla.618:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Dealtime : Cleaned.
:mozilla.619:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Dealtime : Cleaned.
:mozilla.620:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Dealtime : Cleaned.
:mozilla.146:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Directnetadvertising : Cleaned.
:mozilla.147:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Directnetadvertising : Cleaned.
:mozilla.11:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.12:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.14:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.220:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.22:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.26:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.440:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\Leslie\Cookies\leslie@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.542:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.792:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.942:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.216:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.217:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.218:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.723:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.724:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][1].txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.149:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.150:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.151:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.75:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.76:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.79:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
C:\Documents and Settings\Leslie\Cookies\leslie@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.302:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Fortunecity : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][1].txt -> TrackingCookie.Gemius : Cleaned.
:mozilla.420:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.422:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.430:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.52:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.644:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.738:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.15:C:\Documents and Settings\LocalService\Application Data\Mozilla\Firefox\Profiles\zcouim53.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.322:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.323:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.348:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.351:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.363:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.369:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.386:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.421:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.422:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.429:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.430:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.434:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.489:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.527:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.528:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.529:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.530:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.531:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.567:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.568:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.684:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.689:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.817:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.858:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.859:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.860:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\leslie@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.569:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Hitslink : Cleaned.
:mozilla.849:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Hitslink : Cleaned.
:mozilla.303:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.304:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.505:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.506:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][2].txt -> TrackingCookie.Information : Cleaned.
:mozilla.163:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Linksynergy : Cleaned.
:mozilla.164:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Linksynergy : Cleaned.
:mozilla.920:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Live : Cleaned.
:mozilla.921:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Live : Cleaned.
:mozilla.922:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Live : Cleaned.
:mozilla.149:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.150:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.151:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.370:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.371:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.372:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.487:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.490:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.729:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.855:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.856:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][2].txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.501:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.228:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.335:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.336:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.95:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][1].txt -> TrackingCookie.Msn : Cleaned.
:mozilla.139:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Netflame : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][1].txt -> TrackingCookie.Netflame : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][2].txt -> TrackingCookie.Netflame : Cleaned.
:mozilla.202:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.203:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.204:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.255:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.315:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.330:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.399:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Paypal : Cleaned.
:mozilla.568:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Paypal : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][1].txt -> TrackingCookie.Paypal : Cleaned.
:mozilla.189:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.190:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.191:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.192:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.268:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.269:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.270:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.271:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.923:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Pro-market : Cleaned.
:mozilla.924:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Pro-market : Cleaned.
:mozilla.100:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.562:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.563:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.564:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.94:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.95:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.96:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.97:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.98:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.99:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][2].txt -> TrackingCookie.Real : Cleaned.
C:\Documents and Settings\Leslie\Cookies\leslie@real[1].txt -> TrackingCookie.Real : Cleaned.
:mozilla.205:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.206:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.207:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.209:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.210:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.211:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.212:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.213:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.214:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.76:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.77:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.78:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.218:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Realtracker : Cleaned.
:mozilla.106:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.122:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.123:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.124:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.125:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.126:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.127:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.128:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.129:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.83:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.85:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.86:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.87:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.90:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Revsci : Cleaned.
C:\Documents and Settings\Leslie\Cookies\leslie@revsci[2].txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.349:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.575:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.576:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.231:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.232:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.233:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.234:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.235:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.236:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.361:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.362:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.363:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.364:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.365:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.366:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.367:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.82:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.83:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.84:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.85:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.417:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.418:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.267:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.707:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.708:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.709:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.710:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.222:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.223:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.224:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.225:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.226:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.227:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.228:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.229:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.230:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.253:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.254:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.255:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.256:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.257:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.116:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.117:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.118:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.119:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.120:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.132:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.428:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Tracking101 : Cleaned.
:mozilla.513:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.32:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.33:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.34:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.35:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.36:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.37:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.38:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.39:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.431:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.432:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.433:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.434:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.435:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.436:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.437:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.438:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.59:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.60:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.61:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.62:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.63:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.64:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.76:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.77:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.575:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Trafic : Cleaned.
C:\Documents and Settings\Leslie\Cookies\leslie@trafic[1].txt -> TrackingCookie.Trafic : Cleaned.
:mozilla.121:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.75:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.92:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.469:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
C:\Documents and Settings\Leslie\Cookies\leslie@valueclick[1].txt -> TrackingCookie.Valueclick : Cleaned.
C:\Documents and Settings\Leslie\Cookies\leslie@valueclick[2].txt -> TrackingCookie.Valueclick : Cleaned.
C:\Documents and Settings\Leslie\Cookies\[removed][1].txt -> TrackingCookie.Webtrends : Cleaned.
:mozilla.319:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.325:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.578:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.23:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.24:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.25:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.29:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.30:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.31:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.32:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.33:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.34:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.70:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.71:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.72:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.73:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.74:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.8:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.9:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\98dlpuoa.Alex\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.130:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.131:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.132:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.133:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\x32o9fd4.Robert\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.272:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.273:C:\Documents and Settings\Leslie\Application Data\Mozilla\Firefox\Profiles\9esatc56.Taylor\cookies.txt -> TrackingCookie.Zedo : Cleaned.
C:\My Documents\My Download Files\DVD Software\CloneDVD & AnyDVD\Anydvd 5.1.1.1 + CLONEDVD 2.8.2.1 + CLONE CD 5.2.1.1 + Cracks+CLONEDVD 3.0.rar/CLONE CD 5.2.1.1 + Patch.rar/CLONE CD 5.2.1.1 + Patch\CRACK\Patch.exe -> Trojan.Feutel.av : Cleaned with backup (quarantined).
C:\My Documents\My Download Files\DVD Software\CloneDVD & AnyDVD\Anydvd 5.1.1.1 + CLONEDVD 2.8.2.1 + CLONE CD 5.2.1.1 + Cracks+CLONEDVD 3.0.rar/Sly Soft-CLONE DVD 2.8.2.1 + Patch.rar/Sly Soft-CLONE DVD 2.8.2.1 + Patch\Crack\Clone DVD 2.8.2.1 Patch.exe -> Trojan.Feutel.av : Cleaned with backup (quarantined).
C:\My Documents\My Download Files\DVD Software\CloneDVD & AnyDVD\Sly Soft- Anydvd 5.1.1.1 + CLONEDVD 2.8.2.1 + CLONE CD 5.2.1.1 + Cracks.rar/CLONE CD 5.2.1.1 + Patch.rar/CLONE CD 5.2.1.1 + Patch\CRACK\Patch.exe -> Trojan.Feutel.av : Cleaned with backup (quarantined).
C:\My Documents\My Download Files\DVD Software\CloneDVD & AnyDVD\Sly Soft- Anydvd 5.1.1.1 + CLONEDVD 2.8.2.1 + CLONE CD 5.2.1.1 + Cracks.rar/Sly Soft-CLONE DVD 2.8.2.1 + Patch.rar/Sly Soft-CLONE DVD 2.8.2.1 + Patch\Crack\Clone DVD 2.8.2.1 Patch.exe -> Trojan.Feutel.av : Cleaned with backup (quarantined).

::Report end

silver

Post #11May 27, 2007, 11:33 AM UTC

Hi LeslieR,

The logs look better, however the Symantec antivirus program didn't uninstall completely.

Temporarily disable Spy Sweeper

Open Spysweeper and click on Options->Program Options and uncheck Load at Windows Startup
On the left side click Shields and then uncheck everything there
Uncheck Home Page Shield
Uncheck Automatically restore default without notification
Exit the program

Then, open HijackThis, choose Do a system scan only and place a checkmark next to the following line (if present):
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\

Then close all open windows apart from HijackThis, press Fix checked, OK the prompt and close HijackThis.

Re-enable Spy Sweeper

Open Spysweeper and click on Options > Program Options and check Load at Windows Startup
On the left click Shields and then check everything there
Check Home Page Shield
Check Automatically restore default without notification
Exit the program

To complete the uninstall of Norton go to
http://service1.symantec.com/SUPPORT/tsgen…005033108162039
and follow the instructions for Step 2 - Download and run the Norton Removal Tool
You will download a tool and run it from your Desktop, this will clean up the Norton installation.

Empty AVG Antispyware Quarantine

Open AVG Antispyware and select Infections from the top menu
Click Select All and then Remove finally
Close AVG Antispyware

Once complete please post another HijackThis log.

LeslieR

Post #12May 27, 2007, 1:13 PM UTC

Followed instructions. I wasn't sure about was "Uncheck Automatically restore default without notification" and "Uncheck Home Page Shield" in Spy Sweeper instructions, because I did not see that exact language. I unchecked everything that looked close. Here's my latest HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 9:08:58 AM, on 5/27/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\SiteAdvisor\6066\SAService.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe
C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\InfoMyCa.exe
C:\Program Files\Lexmark X5100 Series\lxbabmgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Adobe\Distillr\Acrotray.exe
C:\Program Files\SiteAdvisor\6066\SiteAdv.exe
C:\Program Files\Roxio\MyDVD\DetectorApp.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Lexmark X5100 Series\lxbabmon.exe
C:\Program Files\Common Files\TiVo Shared\Beacon\TiVoBeacon.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Roxio\MyDVD\USBDeviceService.exe
C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe
C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
C:\Program Files\TiVo\Desktop\TiVoNotify.exe
C:\Program Files\Creative\Diagnostics\diagent.exe
C:\Program Files\TiVo\Desktop\TiVoServer.exe
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Launchy\Launchy.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv4.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Hijackthis\HijackThis.exe

O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [WUSB54Gv4] "C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\InvokeSvc3.exe"
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe"
O4 - HKLM\..\Run: [Lexmark X5100 Series] "C:\Program Files\Lexmark X5100 Series\lxbabmgr.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6066\SiteAdv.exe"
O4 - HKLM\..\Run: [DetectorApp] "C:\Program Files\Roxio\MyDVD\DetectorApp.exe"
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] "C:\Program Files\Google\Gmail Notifier\gnotify.exe"
O4 - HKLM\..\Run: [Picasa Media Detector] "C:\Program Files\Picasa2\PicasaMediaDetector.exe"
O4 - HKLM\..\Run: [diagent] "C:\Program Files\Creative\Diagnostics\diagent.exe" startup
O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TivoTransfer] "C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe" /service /registry /auto:TivoTransfer
O4 - HKCU\..\Run: [TivoNotify] "C:\Program Files\TiVo\Desktop\TiVoNotify.exe" /service /registry /auto:TivoNotify
O4 - HKCU\..\Run: [TivoServer] "C:\Program Files\TiVo\Desktop\TiVoServer.exe" /service /registry /auto:TivoServer
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Launchy.lnk = C:\Program Files\Launchy\Launchy.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Copy plain text for WhizFolders - C:\Program Files\WhizFolders Organizer\copytool.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {001EE746-A1F9-460E-80AD-269E088D6A01} (Infotl Control) - http://site.ebrary.com/lib/nyulibrary/supp…s/ebraryRdr.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1140877863953
O16 - DPF: {7584C670-2274-4EFB-B00B-D6AABA6D3850} (Microsoft RDP Client Control (redist)) - http://128.122.159.181/tsweb/msrdp.cab
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} - file://C:\WINDOWS\msxml4.cab
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\ISafe.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6066\SAService.exe
O23 - Service: TiVo Beacon (TivoBeacon2) - Unknown owner - C:\Program Files\Common Files\TiVo Shared\Beacon\TiVoBeacon.exe" /service (file missing)
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Roxio\MyDVD\USBDeviceService.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\VetMsg.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: WUSB54Gv4SVC - Unknown owner - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe" "WUSB54Gv4.exe (file missing)

silver

Post #13May 27, 2007, 1:26 PM UTC

Hi LeslieR,

Your logs look good and I think your machine is finally clean!

A few tips to help you keep it that way:

Operating system vulnerabilities can easily be exploited by malware so please ensure your operating system is automatically kept up to date by using Windows Update:
Go to Start->Control Panel->Automatic Updates
Select Automatic and select a suitable schedule
Also, check that your antivirus and antispyware programs are set to automatically update daily.

Does your new security suite include a firewall module?
If not, you should consider installing a Personal Firewall program. Even if you are behind a NAT router, I recommend you use firewall software as it will improve the security of your computer by monitoring and controlling outbound connections to the internet as well as inbound. There are various free packages available, I recommend Sunbelt Software's Kerio or Zone Alarm:
http://www.sunbelt-software.com/Kerio
http://www.zonelabs.com/

IESPYADS helps protect you from malicious websites by placing a list of known bad websites in Internet Explorer's Restricted Zone. This Zone limits the capabilities of these websites including preventing them from installing software. This will compliment your security software and I recommend you install it:
http://www.spywarewarrior.com/uiuc/resource.htm

Find out more about how to prevent infection in the future
http://forum.malwareremoval.com/viewtopic.php?p=33687

Please post back to let me know you have read this, and if there are any further issues.

LeslieR

Post #14May 27, 2007, 3:35 PM UTC

Silver, Yes, I have read your recommendations and will follow them. Thank you again for your time and patience. You are really good at what you do. I think the whole concept of Tom Coyote and other forums to fight malware is great, and the fact that you and others volunteer your time to make it work is awesome. LeslieR

silver

Post #15May 27, 2007, 11:53 PM UTC

You are very welcome and thank you for your message

Best of luck! —- Since this issue appears to be resolved, this topic has been closed. Glad we could be of assistance. If you are the topic starter and need this topic reopened, please PM a staff member with a link to this thread and we will reopen it for you. Anyone else who needs assistance should begin a new topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Alcra-b Trojan Won't Go Away

✨ Ask AI

Ask AI