What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Weird Content.ie5 Folder Issue

16 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
I am not sure if this is a virus, spyware or malware. My internet searches pull what I am looking for, but clicking on my findings takes me to the wrong place. I have tried google and yahoo searches.

I have a pretty good feeling it has to do with the contents of this folder…

C:\Documents and Settings\Chris\Local Settings\Temp\Temporary Internet Files\Content.IE5

If I use CCleaner, McAfee virus scan, or Adaware they all freeze when they reach this folder. If I simply browse to the folder it causes Explorer.exe to crash, the pc freezes momentarily and then is seemingly back to normal. I have tried all of the above in safe mode with the same results. I also attempted to log in as another user and delete/edit/browse to the folder and I again get the same result.

My system restore also seems to be effected as anytime I try to fall back to a previous restore point it fails.

Here is my hijackthis log…



Logfile of HijackThis v1.99.1
Scan saved at 10:09:55 PM, on 5/17/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology\ELService.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/…/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/…/search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: AT&T Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://supportcenter.rr.com/sdccommon/download/tgctlcm.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photo.walgreens.com/WalgreensActivia.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB…l_v1-0-3-48.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by101fd.bay101.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://zone.msn.com/bingame/luxr/default/mjolauncher.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://cdn2.zone.msn.com/binframework/v10/…gr.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {E856B973-45FD-4559-8F82-EAB539144667} (Dell PC Checkup Installer Control) - http://pccheckup.dellfix.com/rel/41/install/gtdownde.cab
O16 - DPF: {FFFFFFFF-CACE-BABE-BABE-00AA0055595A} - http://www.trueswitch.com/sbc/TrueInstallSBC.exe
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Intel® Quick Resume Technology Drivers (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology\ELService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
Post #2
Hello and welcome to TC.

Please disable Windows Defender Real Time Protection as it may interfere with the fix.

To disable Windows Defender:
  • Open Windows Defender
  • Click Tools
  • Click General Settings
  • Scroll down to Real Time Protection Options
  • Uncheck Turn on Real Time Protection (recommended)
  • After you uncheck this, click on the Save button
  • Close Windows Defender
Once your log is clean you can re-enable Windows Defender Real Time Protection.

===================================

Please download Ccleaner and save it to your desktop.
Tutorial for CCleaner
During the installation be sure to UN-check the box for "Ccleaner Yahoo Toolbar" unless you want it. Do not scan with it yet.

====================================

Download AVG Anti Spyware

Use the link at the bottom of the page under "AVG Anti-Spyware Free for Windows"

[external image: Posted Image]
  • Install AVG Anti Spyware
  • Double-click the icon on Desktop to launch AVG
  • On the top of the main screen click Shield
  • Click the word active to change it to inactive
  • On the top of the main screen click Update.
  • Then click on Start Update. The update will start and a progress bar will show the updates being installed.
  • Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
  • Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
  • Under "Reports"
  • Select "Automatically generate report after every scan"
  • Un-Select "Only if threats were found"
When you have finished updating, EXIT AVG Anti Spyware. Do Not run a scan just yet, we will shortly.

========================================

Scan with HijackThis and put a checkmark against the following entries:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/…/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/…/search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com

Close all browsers including this one and click on "fix checked".

====================================

Reboot your computer in Safe Mode using the F8 method below.
a. If the computer is running, shut down Windows, and then turn off the power.
b. Wait 30 seconds, and then turn the computer on.
c. Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
d. Ensure that the Safe Mode option is selected.
e. Press Enter. The computer then begins to start in Safe mode.

=======================================

From Safe Mode run Ccleaner
  • Click on Options,
  • Select Advanced
  • Now UNCHECK "Only delete files in Windows Temp folders older than 48 hours"
  • Make sure the Cleaner block on the left is selected.
  • Do not use the "Issues" block . It's meant for professionals.
  • Choose the Windows tab.
  • Check everything EXCEPT Advanced part of the Menu.
  • Click on "Analyze". This process could take a while.
  • If you don't want to loose your login passwords to certain sites, click on Options
  • Select cookies and move the ones you want to keep to the "cookies to keep" section, by highlighting and using the arrows in the middle.
  • Choose Run Cleaner.
When CCleaner shows how much has been removed, cleaning is finished. Click Exit.
If you have more than one users, run Ccleaner for every user

========================================

IMPORTANT: Do not open any other windows or programs while AVG Anti-Spyware is scanning, it may interfere with the scanning proccess:
  • Launch AVG Anti-Spyware by double-clicking the icon on your desktop.
  • Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
  • AVG Anti-Spyware will now begin the scanning process, be patient this may take a little time.
    Once the scan is complete do the following:
  • If you have any infections you will prompted, **Please ensure it is set to Quarantine then select "Apply all actions"
  • Next select the "Reports" icon at the top.
  • Select the "Save report as" button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
  • Close AVG Anti-Spyware.
=========================================

Reboot in Normal Mode.

=========================================

Perform an online scan using Internet Explorer with Panda ActiveScan
  • Click on [external image: Posted Image] located at the bottom of the page.
  • A "pop up" window will appear. Please ensure that your pop up blocker doesn't block it
  • Enter your e-mail address, country, and state & click "Free Online Scan" The download of the 8 MB Panda's ActiveX control will take place
Begin the scan by selecting [external image: Posted Image]
  • If it finds any malware, it will offer you a report.
  • Please ignore any entry it finds and the offer to buy the program to remove the entry, as we will address this later.
  • Click on [external image: Posted Image] then click [external image: Posted Image] and post back the contents please.
* You needn't remain online while it's doing the scan but you have to re-connect after it has finished to see the report.

==========================================

Please post back the results from AVG Anti-Spyware and Panda online scans, and a fresh HijackThis log. Also let me know how the system is behaving now.
Post #3
OK, a new developement…
I noticed that my hijackthis icon was changed and was a basic exe icon and it would not run. I tried to download it and run it a few times and my McAfee kept catching it as a worm. So I uninstalled McAfee and then followed your directions. I can reinstall it later if need be.

Here are my results….

I uninstalled Windows defender, I only installed it in an attempt to fix this issue anyway and it never seems to catch anything.

Here is the AVG log…

———————————————————
AVG Anti-Spyware - Scan Report
———————————————————

+ Created at: 11:29:14 PM 5/27/2007

+ Scan result:



C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP518\A0042074.dll -> Adware.ErrorSafe : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\Interface\{3ED808D8-9119-4757-B7BE-40C463452F87} -> Adware.Generic : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\Interface\{580EB069-9905-4A04-A20C-AD6598D8C0A3} -> Adware.Generic : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\TypeLib\{55149956-1A81-44F8-A00A-F9CF7CA03329} -> Adware.Generic : Cleaned with backup (quarantined).
:mozilla.745:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.746:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.10:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.11:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.193:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.194:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.195:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.196:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.197:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.198:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.199:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.200:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.201:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.202:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.203:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.204:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.205:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.207:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.208:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.209:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.210:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.211:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.212:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.213:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.214:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.215:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.216:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.217:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.218:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.219:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.220:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.221:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.222:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.223:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.224:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.225:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.226:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.227:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.228:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.229:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.230:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.231:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.232:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.237:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.238:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.239:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.240:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.241:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.242:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.243:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.244:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.245:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.246:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.247:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.248:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.348:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.384:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.394:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.395:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.430:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.441:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.60:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.61:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.62:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.63:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.64:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.65:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.66:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.67:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.68:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.69:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.6:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.70:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.8:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.9:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@charmingshoppes.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@paypal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Chloe\Cookies\chloe@2o7[2].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Chloe\Cookies\chloe@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.13:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.14:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.15:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.541:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.542:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.543:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.544:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.545:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.546:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.547:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.558:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.786:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.815:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\Amanda\Cookies\[removed][1].txt -> TrackingCookie.Addynamix : Cleaned.
:mozilla.404:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.406:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.83:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Adobe : Cleaned.
:mozilla.246:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.247:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.316:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.317:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.318:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.319:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.65:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.66:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.67:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.68:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.69:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.70:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.71:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@adrevolver[1].txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.49:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.50:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.51:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.52:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.53:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.55:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.56:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.57:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.58:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.59:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.60:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.61:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.62:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.63:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.12:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.34:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.41:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.591:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@atdmt[1].txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\Chloe\Cookies\chloe@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.312:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.748:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.377:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.268:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.317:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.47:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
C:\Documents and Settings\Amanda\Cookies\[removed][1].txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.23:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.24:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.25:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.264:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.265:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.49:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.50:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.51:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@burstnet[2].txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.106:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.107:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.108:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.109:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.110:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.112:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.113:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.114:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.161:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.162:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.163:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.164:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.165:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.35:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.36:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.37:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.39:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.40:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.42:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.203:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.599:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.600:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.601:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.602:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.603:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Com : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@connextra[1].txt -> TrackingCookie.Connextra : Cleaned.
C:\Documents and Settings\Chloe\Cookies\chloe@connextra[1].txt -> TrackingCookie.Connextra : Cleaned.
:mozilla.666:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
C:\Documents and Settings\Amanda\Cookies\[removed][1].txt -> TrackingCookie.Coremetrics : Cleaned.
C:\Documents and Settings\Amanda\Cookies\[removed][1].txt -> TrackingCookie.Coremetrics : Cleaned.
:mozilla.434:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Dealtime : Cleaned.
:mozilla.435:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Dealtime : Cleaned.
:mozilla.563:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Dealtime : Cleaned.
:mozilla.15:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.36:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.439:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.7:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\Chloe\Cookies\chloe@doubleclick[2].txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.709:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.773:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.836:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.837:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.838:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.839:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.843:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.844:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.886:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.887:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.103:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.293:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.741:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.747:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.100:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.323:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.548:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.549:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.550:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.27:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.407:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.408:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.409:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.410:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.81:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.82:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.83:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.227:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.689:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.431:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.432:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.489:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.490:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.491:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.492:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.493:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.494:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.495:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.496:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.680:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.445:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned.
:mozilla.13:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.14:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.342:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.343:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.616:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.617:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
C:\Documents and Settings\Chloe\Cookies\chloe@infinite-ads[1].txt -> TrackingCookie.Infinite-ads : Cleaned.
C:\Documents and Settings\Amanda\Cookies\[removed][2].txt -> TrackingCookie.Live : Cleaned.
C:\Documents and Settings\Amanda\Cookies\[removed][1].txt -> TrackingCookie.Live : Cleaned.
C:\Documents and Settings\Chloe\Cookies\[removed][1].txt -> TrackingCookie.Live : Cleaned.
:mozilla.105:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.106:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.453:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.454:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.455:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.516:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.517:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.58:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.59:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.824:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.825:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.26:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.32:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.33:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.413:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.414:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\Amanda\Cookies\[removed][2].txt -> TrackingCookie.Msn : Cleaned.
C:\Documents and Settings\Chloe\Cookies\[removed][1].txt -> TrackingCookie.Msn : Cleaned.
C:\Documents and Settings\Chloe\Local Settings\Temp\Cookies\[removed][2].txt -> TrackingCookie.Msn : Cleaned.
C:\Documents and Settings\Amanda\Cookies\[removed][1].txt -> TrackingCookie.Myaffiliateprogram : Cleaned.
C:\Documents and Settings\Chloe\Cookies\[removed][1].txt -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.223:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Netflame : Cleaned.
C:\Documents and Settings\Amanda\Cookies\[removed][1].txt -> TrackingCookie.Netflame : Cleaned.
C:\Documents and Settings\Amanda\Cookies\[removed][2].txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.324:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.422:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.423:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.427:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@overture[1].txt -> TrackingCookie.Overture : Cleaned.
C:\Documents and Settings\Amanda\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned.
:mozilla.206:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Paypal : Cleaned.
:mozilla.345:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Paypal : Cleaned.
C:\Documents and Settings\Chloe\Cookies\[removed][1].txt -> TrackingCookie.Paypal : Cleaned.
:mozilla.205:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.207:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.208:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.209:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.214:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.48:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.49:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.50:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.51:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.52:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.53:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.54:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.55:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.56:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.57:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
C:\Documents and Settings\Amanda\Cookies\[removed][2].txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.28:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.29:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.30:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.318:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.319:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.320:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.72:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.73:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.74:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\Chloe\Cookies\chloe@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\Amanda\Cookies\[removed][1].txt -> TrackingCookie.Real : Cleaned.
C:\Documents and Settings\Chloe\Cookies\[removed][1].txt -> TrackingCookie.Real : Cleaned.
C:\Documents and Settings\Chloe\Cookies\[removed][1].txt -> TrackingCookie.Real : Cleaned.
:mozilla.313:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.314:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.315:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.553:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.554:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.555:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.556:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.557:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.558:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.559:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@realmedia[2].txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.215:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.216:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.217:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.218:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.219:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.220:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.221:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.275:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.276:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.277:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.278:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.279:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.280:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.281:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.282:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.283:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.284:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.285:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.286:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.287:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.288:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.289:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.290:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.291:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.292:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.293:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.294:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.295:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.295:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.641:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@revsci[1].txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.107:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.250:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.251:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.252:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.253:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.254:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.255:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.256:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.353:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.354:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@edge.ru4[2].txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.378:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.379:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.380:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.381:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.382:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.383:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.447:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.448:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.449:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.450:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.451:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.452:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.474:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.475:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.476:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.477:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.478:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.499:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.500:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.501:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.603:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
C:\Documents and Settings\Amanda\Cookies\[removed][2].txt -> TrackingCookie.Specificclick : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@specificclick[1].txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.423:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.424:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.425:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.426:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.427:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.428:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.429:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.561:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.562:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.563:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.564:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.565:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.566:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.567:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.568:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.569:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.570:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.571:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.572:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.573:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.574:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.575:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.576:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.577:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.578:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.579:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.580:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.581:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.582:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.583:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.584:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.585:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.586:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.587:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.588:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.589:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.187:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.188:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.189:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.190:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.266:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.267:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.269:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.33:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.34:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.38:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.41:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.826:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.475:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.135:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.136:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.137:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.138:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.139:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.140:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.141:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.142:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.344:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.345:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.346:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.347:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.348:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.349:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.350:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.351:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@trafficmp[1].txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.33:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.84:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.476:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.477:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.478:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.479:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.480:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.481:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.592:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.593:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.594:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.595:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.596:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.597:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.187:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Webtrends : Cleaned.
:mozilla.77:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Webtrends : Cleaned.
C:\Documents and Settings\Amanda\Cookies\[removed][2].txt -> TrackingCookie.Webtrends : Cleaned.
C:\Documents and Settings\Chloe\Cookies\[removed][2].txt -> TrackingCookie.Webtrends : Cleaned.
:mozilla.409:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.631:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
C:\Documents and Settings\Amanda\Cookies\[removed][1].txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.157:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.158:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.159:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.160:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.177:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.178:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.179:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.180:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.62:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.63:C:\Documents and Settings\Chloe\Application Data\Mozilla\Firefox\Profiles\b0qbxpav.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\Amanda\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.166:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.167:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.168:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.169:C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.734:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.735:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.736:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.737:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
C:\Documents and Settings\Amanda\Cookies\amanda@zedo[1].txt -> TrackingCookie.Zedo : Cleaned.


::Report end



Here is my active scan log from Panda…



Incident Status Location

Spyware:Cookie/360i Not disinfected C:\Documents and Settings\Amanda\Cookies\amanda@ct.360i[1].txt
Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Amanda\Cookies\amanda@go[2].txt
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Amanda\Cookies\amanda@target[1].txt
Spyware:Cookie/360i Not disinfected C:\Documents and Settings\Chloe\Cookies\chloe@ct.360i[1].txt
Spyware:Cookie/did-it Not disinfected C:\Documents and Settings\Chloe\Cookies\chloe@did-it[1].txt
Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Chloe\Cookies\chloe@go[1].txt
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Chloe\Cookies\chloe@target[2].txt
Virus:W32/Nurech.A.worm Disinfected Personal Folders\Quarantine\All That Matters\greeting postcard.exe


And here is my latest hijackthis log…


Logfile of HijackThis v1.99.1
Scan saved at 12:52:20 AM, on 5/28/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology\ELService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Documents and Settings\Chris\Desktop\hijackthis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: AT&T Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://supportcenter.rr.com/sdccommon/download/tgctlcm.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photo.walgreens.com/WalgreensActivia.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB…l_v1-0-3-48.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by101fd.bay101.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://zone.msn.com/bingame/luxr/default/mjolauncher.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://cdn2.zone.msn.com/binframework/v10/…gr.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {E856B973-45FD-4559-8F82-EAB539144667} (Dell PC Checkup Installer Control) - http://pccheckup.dellfix.com/rel/41/install/gtdownde.cab
O16 - DPF: {FFFFFFFF-CACE-BABE-BABE-00AA0055595A} - http://www.trueswitch.com/sbc/TrueInstallSBC.exe
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Intel® Quick Resume Technology Drivers (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology\ELService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe



OK, hope that sheds some light on the subject. Also I noticed you had warned against using the 'scan for issues option in Ccleaner. But I have actually used that before with little regard to what it may do. I did not, however use it now.

Thanks for all of your help!
Post #4
Hi,

You're welcome. Your log is clean. Are you still experiencing the redirections?

I noticed that my hijackthis icon was changed and was a basic exe icon and it would not run. I tried to download it and run it a few times and my McAfee kept catching it as a worm. So I uninstalled McAfee and then followed your directions. I can reinstall it later if need be.

Please reinstall it immediately. It's very dangerous to surf the net without any antivirus and firewall protection.

OK, hope that sheds some light on the subject. Also I noticed you had warned against using the 'scan for issues option in Ccleaner. But I have actually used that before with little regard to what it may do. I did not, however use it now.

That part deals with the registry and it has been known to remove some legitimate registry entries. However, it askes if you want to have a backup file created. It's advisable to do so if you ever use it so that you can restore it if anything goes wrong.

Please let me know how the computer is running now.
Post #5 last edited
I am still having the issue, with the exception of the folder that I could not browse to. That folder is gone. (McAfee is reinstalled now) I opened internet explorer and set google as the default search engine and did a serch for "hockey sticks". I saw one of the results was www.hockeygiant.com, which is a site I know of and have used. But when I click on it, it took me here… wwwdotmonstermarketplacedotcom/searchao.asp?q=hockey%20sticks&ref=and1-1615. I can type the URL for the site directly in the address bar and get there just fine. BTW-I do have all the back-ups from CCleaner, just in case. Edited the live link.
Post #7
I will in just a moment. I noticed again that after installing McAfee my hijackthis icon produces a virus message. I am going to uninstall McAfee and install Computer Associates anti-virus that comes free from my ISP. Once I get that done I will post the log. Do you think it is possible that something has corrupted McAfee?
Post #8
Hi,

I will in just a moment. I noticed again that after installing McAfee my hijackthis icon produces a virus message. I am going to uninstall McAfee and install Computer Associates anti-virus that comes free from my ISP. Once I get that done I will post the log. Do you think it is possible that something has corrupted McAfee?


I am sorry it's causing so much trouble. I have never heard of this happen with HijackThis before. You might as well use the Computer Associates antivirus until we're done.

Can you also edit your post where you have the live link. Just change "." to "dot" so that others reading the topic will not be able click on it.
Post #9
Thank you for the quick replies!

I do not see an option to edit the post to change the link. Am I missing something obvious?

Here is the latest hilackthis log

Logfile of HijackThis v1.99.1
Scan saved at 5:07:24 PM, on 5/28/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Yahoo!\Antivirus\ISafe.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Yahoo!\Antivirus\VetMsg.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology\ELService.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Yahoo!\Antivirus\CAVTray.exe
C:\Program Files\Yahoo!\Antivirus\CAVRID.exe
C:\PROGRA~1\Yahoo!\YOP\yop.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Chris\Desktop\hijackthis1\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\Yahoo!\Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\Yahoo!\Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [YOP] C:\PROGRA~1\Yahoo!\YOP\yop.exe /autostart
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: AT&T Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://supportcenter.rr.com/sdccommon/download/tgctlcm.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photo.walgreens.com/WalgreensActivia.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB…l_v1-0-3-48.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by101fd.bay101.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://zone.msn.com/bingame/luxr/default/mjolauncher.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://cdn2.zone.msn.com/binframework/v10/…gr.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {E856B973-45FD-4559-8F82-EAB539144667} (Dell PC Checkup Installer Control) - http://pccheckup.dellfix.com/rel/41/install/gtdownde.cab
O16 - DPF: {FFFFFFFF-CACE-BABE-BABE-00AA0055595A} - http://www.trueswitch.com/sbc/TrueInstallSBC.exe
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\ISafe.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Intel® Quick Resume Technology Drivers (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology\ELService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\VetMsg.exe
Post #10
Hi,

Thank you for the quick replies!

I do not see an option to edit the post to change the link. Am I missing something obvious?


You're welcome …. and I was able to do the editing for you.

I suspect that we are dealing with a rootkitted version of a known infection because it appears to be hiding itself from the scans. Let's try this:

Please download FixWareout from one of these sites:

http://downloads.subratam.org/Fixwareout.exe
http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe

Save it to your desktop and run it. Click Next, then Install, make sure "Run fixit" is checked and click Finish.
The fix will begin; follow the prompts.
You will be asked to reboot your computer; please do so.
Your system may take longer than usual to load; this is normal.
Once the desktop loads post the text that will open (report.txt) and a new Hijackthis log in the forum please.

========================

Please download BlackLight Beta Graphical User Interface version, and save it to your desktop. Click on BlackLight Beta to scan with it. When the scan is completed, there will be a report on your desktop named "fsbl-xxxxxxx.log". Please post that log in your next reply as well.
Post #11
Thanks for editing it for me, I will make sure and not post live links like that.

Here is the fixwareout report…


Fixwareout Last edited 5/15/2007
Post this report in the forums please
…
»»»»»Prerun check
HKLM\SOFTWARE\~\Winlogon\ "System"="kdkxv.exe"

»»»»»

»»»»» Postrun check
HKLM\SOFTWARE\~\Winlogon\ "system"=""
….
….
»»»»» Misc files.
….
»»»»» Checking for older varients.
….

Search five digit cs, dm, kd, jb, other, files.
The following files NEED TO BE SUBMITTED to one of the following URL'S for further inspection.


Click browse, find the file then click submit.
http://www.virustotal.com/flash/index_en.html
Or http://virusscan.jotti.org/

»»»»» Other
C:\WINDOWS\Temp\kdkxv.ren 66009 08/10/2004

»»»»» Current runs
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\\WINDOWS\\ehome\\ehtray.exe"
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_01\\bin\\jusched.exe\""
"SigmatelSysTrayApp"="stsystra.exe"
"IAAnotif"="C:\\Program Files\\Intel\\Intel Matrix Storage Manager\\iaanotif.exe"
"DLA"="C:\\WINDOWS\\System32\\DLA\\DLACTRLW.EXE"
"ISUSPM Startup"="C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\UPDATE~1\\ISUSPM.exe -startup"
"ISUSScheduler"="\"C:\\Program Files\\Common Files\\InstallShield\\UpdateService\\issch.exe\" -start"
"nwiz"="nwiz.exe /install"
"NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"YBrowser"="C:\\PROGRA~1\\Yahoo!\\browser\\ybrwicon.exe"
"CaAvTray"="\"C:\\Program Files\\Yahoo!\\Antivirus\\CAVTray.exe\""
"CAVRID"="\"C:\\Program Files\\Yahoo!\\Antivirus\\CAVRID.exe\""
"YOP"="C:\\PROGRA~1\\Yahoo!\\YOP\\yop.exe /autostart"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"="C:\\Program Files\\Windows Media Player\\WMPNSCFG.exe"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
….
Hosts file was reset, If you use a custom hosts file please replace it
»»»»» End report »»»»»



Here is the hijackthis log…

Logfile of HijackThis v1.99.1
Scan saved at 7:12:00 PM, on 5/28/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Yahoo!\Antivirus\ISafe.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Yahoo!\Antivirus\VetMsg.exe
C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology\ELService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
C:\Program Files\Yahoo!\Antivirus\CAVTray.exe
C:\Program Files\Yahoo!\Antivirus\CAVRID.exe
C:\PROGRA~1\Yahoo!\YOP\yop.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\PROGRA~1\Yahoo!\browser\YBrowser.exe
C:\Documents and Settings\Chris\Desktop\hijackthis1\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\Yahoo!\Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\Yahoo!\Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [YOP] C:\PROGRA~1\Yahoo!\YOP\yop.exe /autostart
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: AT&T Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://supportcenter.rr.com/sdccommon/download/tgctlcm.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photo.walgreens.com/WalgreensActivia.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB…l_v1-0-3-48.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by101fd.bay101.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://zone.msn.com/bingame/luxr/default/mjolauncher.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://cdn2.zone.msn.com/binframework/v10/…gr.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {E856B973-45FD-4559-8F82-EAB539144667} (Dell PC Checkup Installer Control) - http://pccheckup.dellfix.com/rel/41/install/gtdownde.cab
O16 - DPF: {FFFFFFFF-CACE-BABE-BABE-00AA0055595A} - http://www.trueswitch.com/sbc/TrueInstallSBC.exe
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\ISafe.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Intel® Quick Resume Technology Drivers (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology\ELService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\VetMsg.exe



Here is the blacklight beta info…

05/28/07 18:59:53 [Info]: BlackLight Engine 1.0.61 initialized
05/28/07 18:59:53 [Info]: OS: 5.1 build 2600 (Service Pack 2)
05/28/07 18:59:53 [Note]: 7019 4
05/28/07 18:59:53 [Note]: 7005 0
05/28/07 18:59:55 [Note]: 7006 0
05/28/07 18:59:55 [Note]: 7011 2116
05/28/07 18:59:55 [Note]: 7026 0
05/28/07 18:59:55 [Note]: 7026 0
05/28/07 18:59:59 [Note]: FSRAW library version 1.7.1021
05/28/07 19:06:58 [Note]: 2000 1012
05/28/07 19:07:34 [Note]: 7007 0
Post #12 last edited
Hello again,

My suspicion turned out to be correct. Please run AVG Anti Spyware and Panda online scanner one more time and post their logs and also let me know how the system is behaving now.

If you experience any connection problems when you restart your computer, please go to Start>Control Panel, and choose Network Connections. Then right click on your default connection, usually Local Area Connection or Dial-up Connection if you are using Dial-up, and left click on properties. Double-click on the Internet Protocol (TCP/IP) item and select the radio button that says Obtain DNS servers automatically. Click OK twice, and restart your computer.
Post #13
OK, here is the AVG scan…

———————————————————
AVG Anti-Spyware - Scan Report
———————————————————

+ Created at: 9:26:46 PM 5/28/2007

+ Scan result:



:mozilla.26:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.30:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.56:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.43:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.44:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.45:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.46:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
C:\Documents and Settings\Chris\Cookies\chris@advertising[2].txt -> TrackingCookie.Advertising : No action taken.
C:\Documents and Settings\Chris\Cookies\chris@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken.
C:\Documents and Settings\Amanda\Cookies\amanda@bluestreak[1].txt -> TrackingCookie.Bluestreak : No action taken.
C:\Documents and Settings\Amanda\Cookies\amanda@burstnet[2].txt -> TrackingCookie.Burstnet : No action taken.
C:\Documents and Settings\Amanda\Cookies\amanda@casalemedia[1].txt -> TrackingCookie.Casalemedia : No action taken.
C:\Documents and Settings\Chris\Cookies\chris@casalemedia[2].txt -> TrackingCookie.Casalemedia : No action taken.
C:\Documents and Settings\Chris\Cookies\[removed][1].txt -> TrackingCookie.Com : No action taken.
C:\Documents and Settings\Chris\Cookies\chris@com[1].txt -> TrackingCookie.Com : No action taken.
:mozilla.9:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken.
C:\Documents and Settings\Amanda\Cookies\amanda@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.
C:\Documents and Settings\Chris\Cookies\chris@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.
C:\Documents and Settings\Amanda\Cookies\[removed][2].txt -> TrackingCookie.Euroclick : No action taken.
C:\Documents and Settings\Amanda\Cookies\amanda@fastclick[2].txt -> TrackingCookie.Fastclick : No action taken.
C:\Documents and Settings\Chris\Cookies\chris@fastclick[1].txt -> TrackingCookie.Fastclick : No action taken.
C:\Documents and Settings\Chris\Cookies\chris@mediaplex[1].txt -> TrackingCookie.Mediaplex : No action taken.
C:\Documents and Settings\Chris\Cookies\[removed][1].txt -> TrackingCookie.Overture : No action taken.
:mozilla.54:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Paypal : No action taken.
:mozilla.58:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.59:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.60:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.61:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
C:\Documents and Settings\Amanda\Cookies\[removed][2].txt -> TrackingCookie.Pointroll : No action taken.
C:\Documents and Settings\Chris\Cookies\[removed][2].txt -> TrackingCookie.Pointroll : No action taken.
C:\Documents and Settings\Amanda\Cookies\amanda@questionmarket[2].txt -> TrackingCookie.Questionmarket : No action taken.
C:\Documents and Settings\Amanda\Cookies\amanda@realmedia[2].txt -> TrackingCookie.Realmedia : No action taken.
:mozilla.31:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.32:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.33:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
:mozilla.34:C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt -> TrackingCookie.Revsci : No action taken.
C:\Documents and Settings\Chris\Cookies\chris@revsci[2].txt -> TrackingCookie.Revsci : No action taken.
C:\Documents and Settings\Chris\Cookies\[removed]-sys[1].txt -> TrackingCookie.Serving-sys : No action taken.
C:\Documents and Settings\Chris\Cookies\chris@serving-sys[2].txt -> TrackingCookie.Serving-sys : No action taken.
C:\Documents and Settings\Chris\Cookies\chris@tacoda[2].txt -> TrackingCookie.Tacoda : No action taken.
C:\Documents and Settings\Amanda\Cookies\amanda@trafficmp[2].txt -> TrackingCookie.Trafficmp : No action taken.
C:\Documents and Settings\Chris\Cookies\chris@trafficmp[1].txt -> TrackingCookie.Trafficmp : No action taken.
C:\Documents and Settings\Amanda\Cookies\amanda@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : No action taken.
C:\Documents and Settings\Chris\Cookies\chris@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : No action taken.
C:\Documents and Settings\Chris\Cookies\[removed][1].txt -> TrackingCookie.Webtrendslive : No action taken.
C:\Documents and Settings\Amanda\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : No action taken.
C:\Documents and Settings\Chris\Cookies\[removed][2].txt -> TrackingCookie.Yieldmanager : No action taken.
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP569\A0048385.exe -> Trojan.PolyCrypt.b : No action taken.
C:\WINDOWS\Temp\kdkxv.ren -> Trojan.PolyCrypt.b : No action taken.


::Report end



And here is the scan from Panda…


Incident Status Location

Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Amanda\Application Data\Mozilla\Firefox\Profiles\i5dvyspj.default\cookies.txt[.atwola.com/]
Spyware:Cookie/360i Not disinfected C:\Documents and Settings\Amanda\Cookies\amanda@ct.360i[1].txt
Spyware:Cookie/did-it Not disinfected C:\Documents and Settings\Amanda\Cookies\amanda@did-it[1].txt
Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Amanda\Cookies\amanda@go[2].txt
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Amanda\Cookies\amanda@target[1].txt
Spyware:Cookie/360i Not disinfected C:\Documents and Settings\Chloe\Cookies\chloe@ct.360i[1].txt
Spyware:Cookie/did-it Not disinfected C:\Documents and Settings\Chloe\Cookies\chloe@did-it[1].txt
Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Chloe\Cookies\chloe@go[1].txt
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Chloe\Cookies\chloe@target[2].txt
Spyware:Cookie/Tickle Not disinfected C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt[.tickle.com/]
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt[.target.com/]
Spyware:Cookie/WebPower Not disinfected C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt[.webpower.com/]
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt[.belnk.com/]
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt[.atwola.com/]
Spyware:Cookie/Humanclick Not disinfected C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt[hc2.humanclick.com/hc/70256686]
Spyware:Cookie/Humanclick Not disinfected C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt[hc2.humanclick.com/]
Spyware:Cookie/Humanclick Not disinfected C:\Documents and Settings\Chris\Application Data\Mozilla\Firefox\Profiles\6i9wvsl0.default\cookies.txt[hc2.humanclick.com/hc/70256686]
Spyware:Cookie/Humanclick Not disinfected C:\Documents and Settings\Chris\Cookies\[removed][1].txt
Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\fixwareout\FindT\nircmd.exe


And just in case, here is a hijackthis log…

Logfile of HijackThis v1.99.1
Scan saved at 10:59:05 PM, on 5/28/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Yahoo!\Antivirus\ISafe.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Yahoo!\Antivirus\VetMsg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology\ELService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
C:\Program Files\Yahoo!\Antivirus\CAVTray.exe
C:\Program Files\Yahoo!\Antivirus\CAVRID.exe
C:\PROGRA~1\Yahoo!\YOP\yop.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Yahoo!\browser\ybrowser.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Chris\Desktop\hijackthis1\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\Yahoo!\Antivirus\CAVTray.exe"
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\Yahoo!\Antivirus\CAVRID.exe"
O4 - HKLM\..\Run: [YOP] C:\PROGRA~1\Yahoo!\YOP\yop.exe /autostart
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: AT&T Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://supportcenter.rr.com/sdccommon/download/tgctlcm.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photo.walgreens.com/WalgreensActivia.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB…l_v1-0-3-48.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by101fd.bay101.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://zone.msn.com/bingame/luxr/default/mjolauncher.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://cdn2.zone.msn.com/binframework/v10/…gr.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {E856B973-45FD-4559-8F82-EAB539144667} (Dell PC Checkup Installer Control) - http://pccheckup.dellfix.com/rel/41/install/gtdownde.cab
O16 - DPF: {FFFFFFFF-CACE-BABE-BABE-00AA0055595A} - http://www.trueswitch.com/sbc/TrueInstallSBC.exe
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\ISafe.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Intel® Quick Resume Technology Drivers (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology\ELService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\VetMsg.exe



I had no trouble geting online after reboot.

Let me know what you need next. Thanks SOOOO much for your help.
Post #14
Hi,

Well done. Looking very good. :D

You can go ahead and delete BlackLight and Fixwareout from your desktop and delete this folder too: C:\fixwareout Then, run Ccleaner again, it will clean all the third party tracking cookies and the temp folders.

What AVG AS/Panda found were tracking cookies, or small files that store information about what sites you visit online. Advertisers use these for statistical analysis and to target ads that you would be more likely to click on. They're not dangerous in and of themselves, per se, but are definitely a good idea to remove periodically.

They are not the normal, everyday cookies which are used for everything from saving form data to your login information for a particular site.

Here is some reference to cookies (it also tells you how to manage them):

http://www.microsoft.com/info/cookies.mspx

http://support.microsoft.com/default.aspx?…kb;en-us;260971

You can block the third party cookies if you'd like:

To block Third party cookies with IE:

1. Click on the Tools button on the Internet Explorer tool bar.
2. Highlight and click on Internet options at the bottom of the Tools menu.
3. Select the Privacy Tab of the Internet Options menu.
4. Select the Advanced button .
5. Select override automatic cookie handling button.
6. To block third party cookies select block under "Third-party cookies".
7. Select "always allow session cookies".
8. Click on the OK button at the bottom of the screen.

With FireFox 2.0

Open a tab in firefox 2 and type about:config go down to the line network.cookie.cookieBehavior and right click the line and click modify and change it to 1 then Only cookies from the originating server are allowed means no third party just do a search on google for firefox about:config tweaks and you should find what your looking for like on mozillazine has it too.

Your log is clean. Unless you still have the browser redirection, you're set to go and continue with the following instructions:

Since AVG Anti Spyware is a trial version, the realtime guard and automatic update will stop functioning after the trial period. That is why we are not installing the guard so it will not interfere with the cleanup or the malware removal process. You can use AVG-AS as an on-demand scanner (recommended) but you will have to manually update the definition file each time you scan.

Ccleaner is also a useful tool to keep for cleaning your cookies and temp files on a regular basis.

You can re-enable Windows Defender now.

=============================

Create a new System Restore point to prevent reinfection from old restore points.

Go to Start>Run and type sysdm.cpl. Press Enter
  • Select the System Restore Tab
  • Place a check in "Turn off System Restore on all drives"
  • Click Apply
  • next, uncheck the same checkbox.
  • Click Apply
  • Click OK
You can also find instructions on how to disable and re enable system restore here:
Windows XP System Restore Guide

A colleague of ours has excellent information and tips on the prevention of malware here and more on improving speed/system performance after malware removal here.

Happy Surfing! :)
Post #15 last edited
Should I worry about these? (from the AVG scan) C:\WINDOWS\Temp\kdkxv.ren -> Trojan.PolyCrypt.b : No action taken. (from the panda scan) Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\fixwareout\FindT\nircmd.exe I have not been on the PC today to check it out. I was up late doing the Panda software stuff, that is a long sucker. I will check it out and create a new restore point after I get home from work. Also, what exactly was it that was boogering my system, any clue? Again, thank you so much. I realize you are doing this for nothing, and just being a good person. I really appreciate your efforts and time. I will use your link to make a donation to the forum this week.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI