What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Sudden Slow Speed To Log On And Log Off

17 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Hello All, Within the past 10 days, our home computer began taking a very long time to boot-up and shutdown. My wife and I both use this computer and I have been away so I'm not sure what all the activity has been. Last night, I defragged the computer, ran AVG, and ran Spybot S&D. Spybot discovered several items and I "fixed" those problems. In fact, I ran Spybot several times until it quit finding stuff - not sure why it wasn't all found in one scan. Our browser is NETSCAPE 7.2. Please help…. Hez Bolton
Post #2 last edited
Hi Boltons

Download Hijackthis from here
  • Save HJTsetup.exe to your desktop.
  • Double click on the HJTsetup.exe icon on your desktop.
  • By default it will install to C:\Program Files\Hijack This.
  • Continue to click Next in the setup dialogue boxes until you get to the Select Additional Tasks dialogue.
  • Put a check by Create a desktop icon then click Next again.
  • Continue to follow the rest of the prompts from there.
  • At the final dialogue box click Finish and it will launch Hijack This.
  • Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
  • Click Save to save the log file and then the log will open in notepad.
  • Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
  • Come back here to this thread and Paste the log in your next reply.
  • DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
*=========================*

CreateUninstall List with Hijackthis
This is how you do that:
Open HiJackThis
Click on the tab "Open the Misc Tools Session"
Click on the Box that says "Uninstall Manager"
Click on the button "Save list"
Copy and past the List from notepad into your post
*=========================*

Please post the following;

hijackthis log

Uninstall list

Thanks,

Rogue
Post #3
Hello ROgue,

I managed your instructions and the below are the Hijackthis log and the uninstall list.
Look forward to your analysis and feedback.
Some of the items listed in the "uninstall list" I've never used and would love to get rid of. E.g., I tried to "Add/Remove" the Easy Internet Sign-up item and it seems to defy gravity by being unphased by all my efforts (just an example).
Thanks in advance,

Hez Bolton
============================



Logfile of HijackThis v1.99.1
Scan saved at 10:38:17 PM, on 5/31/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\SM1BG.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Palm\HOTSYNC.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\HP\hpcoretech\comp\hpdarc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Netscape\Netscape\Netscp.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.google.com/"); (C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\prefs.js)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: PnIEBrowserHelperObj Class - {4B5F2E08-6F39-479a-B547-B2026E4C7EDF} - C:\Program Files\EarthLink TotalAccess\PnEL.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Pop-Up Blocker - {D7F30B62-8269-41AF-9539-B2697FA7D77E} - C:\Program Files\EarthLink TotalAccess\PnEL.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SM1BG] C:\WINDOWS\SM1BG.EXE
O4 - HKLM\..\Run: [anti_troj] C:\WINDOWS\system32\anti_troj.exe
O4 - HKLM\..\Run: [key2] C:\WINDOWS\system32\winlog.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [anti_troj] C:\WINDOWS\system32\anti_troj.exe
O4 - HKCU\..\Run: [key2] C:\WINDOWS\system32\winlog.exe
O4 - HKCU\..\Run: [german.exe] C:\WINDOWS\system32\wintems.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [E6TaskPanel] "C:\Program Files\EarthLink TotalAccess\TaskPanl.exe" -winstart
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: Add To Compaq Organize… - C:\PROGRA~1\HEWLET~1\COMPAQ~1\bin\core.hp.main\SendTo.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1163468448187
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (file missing)
O23 - Service: UPnPService - Unknown owner - C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe


===========================================
20,000 Recipes
Adobe Acrobat - Reader 6.0.2 Update
Adobe Acrobat and Reader 6.0.3 Update
Adobe Acrobat and Reader 6.0.4 Update
Adobe Flash Player Plugin
Adobe Reader 6.0.1
Agere Systems PCI Soft Modem
AVG 7.5
CardRd81
CCHelp
CCScore
Compaq Connections
Compaq Organize
CR2
Cypress USB Mass Storage Driver Installation
DrawPlus 3.0
Easy Internet Sign-up
ESSAdpt
ESSANUP
ESSBrwr
ESSCAM
ESSCDBK
ESScore
ESSCT
ESSEMAIL
ESSgui
ESShelp
ESSini
ESSPCD
ESSPDock
ESSSONIC
ESSTUTOR
ESSvpaht
ESSvpot
Firebird SQL Server - MAGIX Edition (US)
Gecko Runtime Environment (1.7.2_2004080415)
Help and Support Additions
High Definition Audio Driver Package - KB835221
Hijackthis 1.99.1
HijackThis 1.99.1
HLPCCTR
HLPIndex
HLPPDOCK
HLPSFO
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
HP Extended Capabilities 4.7
HP Image Zone 4.7
HP PSC & OfficeJet 4.2
HP Software Update
IncrediMail Xe
IntelliMover Data Transfer Demo
InterVideo WinDVD Player
iTunes
Jasc Paint Shop Pro 8
Java 2 Runtime Environment, SE v1.4.1_02
Java 2 Runtime Environment, SE v1.4.2_03
Java Web Start
KBD
Kodak EasyShare software
KSU
LiveUpdate 2.5 (Symantec Corporation)
MailWasher
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Standard Edition 2003
Microsoft Plus! Dancer LE
Microsoft Plus! Digital Media Edition Installer
Microsoft Plus! Photo Story 2 LE
Microsoft Web Publishing Wizard 1.52
Microsoft Works 7.0
MSN Music Assistant
MSXML 4.0 SP2 (KB927978)
Napster
Napster 3.5 MP3 Encoder
Napster Burn Engine
Netscape (7.2)
Notifier
OfotoXMI
OTtBP
OTtBPSDK
overland
Palm Desktop
Party Planner
PCDLNCH
PC-Doctor for Windows
PConPoint v2.0
Photo Organizer
PrintMaster
PS2
QuickTime
Registry Mechanic 5.0
Registry Medic 3.01 (Build 408)
RegistryFix v3.0
S3 S3Display
S3 S3Gamma2
S3 S3Info2
S3 S3Overlay
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB883939)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB903235)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB928843)
SFR
SFR2
Sonic RecordNow!
SoulSeek 157 test 8
Spybot - Search & Destroy 1.4
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB908531)
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB930916)
USB Storage Adapter FX (SM1)
VCAMCEN
VIA Rhine-Family Fast Ethernet Adapter
VIA/S3G Display Driver
VPRINTOL
Winamp (remove only)
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows Media Format Runtime
Windows Media Player 10
Windows XP Hotfix - KB834707
Windows XP Hotfix - KB867282
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB883667
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890047
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
Yahoo! Toolbar for Internet Explorer
YH-820 Driver & Utilities
ZoneAlarm
Post #4
Hi Boltons,

OK questions about the files you would like to remove?
Do you still use any Norton (Symantec Corporation) products. AntiVirus, Firewall, Security Suite?
I'll research Easy Internet Sign-up a bit more.
overland, do you know what this program does?
If you can list those you no longer need or are not sure what they do. I'll see what can stay or go.
For now let's do this

Download and install AVG Anti-Spyware v7.5
  • After download, double click on the file to launch the install process.
  • Choose a language, click "OK" and then click "Next".
  • Read the "License Agreement" and click "I Agree".
  • Accept default installation path: C:\Program Files\Grisoft\AVG Anti-Spyware 7.5, click "Next", then click "Install".
  • After setup completes, click "Finish" to start the program automatically or launch AVG Anti-Spyware by double-clicking its icon on your desktop or in the system tray.
  • The main "Status" menu will appear. Select "Change state" to inactivate 'Resident Shield' and 'Automatic Updates'. As AVG Anti-Spyware may interfere with some of our other fixes, we are temporarily disabling it's active protection features until your system is clean, then you can reenable them.
  • Then right click on AVG Anti-Spyware in the system tray and uncheck "Start with Windows".
  • Go to Start > Run and type: services.msc
  • Press "OK".
  • Click the "Extended tab" and scroll down the list to find AVG Anti-Spyware guard.
  • When you find the guard service, double-click on it.
  • In the Properties Window > General Tab that opens, click the "Stop" button.
  • From the drop-down menu next to "Startup Type", click on "Manual".
  • Now click "Apply", then "OK" and close the Services window.
  • Connect to the Internet, go back to AVG Anti-Spyware, select the "Update" button and click "Start update". Wait until you see the "Update successful" message. If you are having problems with the updater, manually update with the AVG Anti-Spyware Full database installer from here.
  • Exit AVG Anti-Spyware when done - DO NOT perform a scan yet.
*========================*

Download ATF Cleaner by Atribune and save it to your Desktop.

Double-click ATF-Cleaner.exe to run the program.
Make sure that all browser windows are closed
Under Main choose: Select All
Click the Empty Selected button.

If you use Firefox browser

Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser

Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Click Exit to close ATF-Cleaner.
*=========================*

Remove Programs
Please Click Start > Control Panel > Add/Remove Programs

Remove these programs by clicking Remove

Java 2 Runtime Environment, SE v1.4.1_02
Java 2 Runtime Environment, SE v1.4.2_03 << Update later in fix

If some programs listed are not present, please do not panic
*=========================*

Start HijackThis as you did to generate a log, but this time click on 'Do a system scan only'.
Place a checkmark in the boxes to the left of the following entries, by clicking on them:

O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [anti_troj] C:\WINDOWS\system32\anti_troj.exe
O4 - HKCU\..\Run: [anti_troj] C:\WINDOWS\system32\anti_troj.exe
O4 - HKCU\..\Run: [key2] C:\WINDOWS\system32\winlog.exe
O4 - HKCU\..\Run: [german.exe] C:\WINDOWS\system32\wintems.exe
O4 - HKLM\..\Run: [key2] C:\WINDOWS\system32\winlog.exe

CLOSE ALL OPEN WINDOWS AND BROWSERS - EXCEPT HJT and click on Fix checked
*=========================*

Boot to Safe Mode
Please print the instructions below or copy and paste to Notepad since you will not have internet access while in Safe Mode.
  • Restart your computer
  • After hearing your computer beep once during startup, but before the Windows icon appears, continually press F8.
  • Instead of Windows loading as normal, a menu should appear
  • Select the first option, to run Windows in Safe Mode.
*=========================*

Using Windows Explore by right-clicking the Start button and left clicking Explore navigate to and find the following files: if found, delete the following (some may not be present after previous steps):

C:\WINDOWS\system32\anti_troj.exe
C:\WINDOWS\system32\winlog.exe << Do not confuse with winlogon.exe in the same folder. winlogon.exe is a critical file
C:\WINDOWS\system32\winlog.dll
C:\WINDOWS\system32\wintems.exe

Again using Windows Explore navigate to and find following folders: if found, delete the following (some may not be present after previous steps):

C:\Windows\exefld
C:\Windows\TEMP << Leave the folder but remove all content.
*=========================*

Scan with AVG Anti-Spyware as follows:
  • Click on the "Scanner" button and choose the "Settings" tab.
  • Under "How to act?", click on "Recommended actions" and choose "Quarantine" to set default action for detected malware.
  • Under "How to Scan?", "Possibly unwanted software", and What to Scan?" leave all the default settings.
  • Under "Reports" select "Automatically generate report after every scan" and UNcheck "Only if threats were found".
  • Click the "Scan" tab to return to scanning options.
  • Click "Complete System Scan" to start.
  • When the scan has finished you will be presented with a list of infected objects found. Click "Apply all actions" to place the files in Quarantine.
IMPORTANT! Do not save the report before you have clicked the Apply all actions button. If you do, the log that is created will indicate "No action taken", making it more difficult to interpret the report. So be sure you save it only AFTER clicking the "Apply all actions" button.
  • Click on "Save Report" to view all completed scans. Click on the most recent scan you just performed and select "Save report as" - the default file name will be in date/time format as follows: Report-Scan-20060620-142816.txt. Save to your desktop. A copy of each report will also be saved in C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Reports\
  • Exit AVG Anti-Spyware when done, reboot normally and submit the log report in your next response.

Note: Close all open windows, programs, and DO NOT USE the computer while AVG Anti-Spyware is scanning. Doing so can hamper AVG Anti-Spyware's ability to clean properly and may result in reinfection.
*=========================*

Restart your PC in Normal Mode
*=========================*

Registry Export

Open Notepad and copy and paste quotebox in it:

regedit /e peek1.txt "HKEY_CURRENT_USER\SOFTWARE\FirstRRRun"
regedit /e peek2.txt "HKEY_CURRENT_USER\Software\DateTime4"
regedit /e peek3.txt "HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Internet Settings"
type peek1.txt >> startup.txt
type peek2.txt >> startup.txt
type peek3.txt >> startup.txt
del peek*.txt
start notepad startup.txt


Save this as look.bat , choose to save as *all files and place it on your desktop.
Doubleclick on look.bat and post the contents of it in your next reply.
It may be long and require a sperate post
*=========================*

Please update Java Runtime Environment
[*]The current version can be downloaded from Sun here: http://java.sun.com/javase/downloads/index.jsp Scroll down the page to 'Java Runtime Environment (JRE) 6u1'

Select either Windows Online or Windows Offline download and press the 'Download' button. On the new web page, click the 'Accept License Agreement' button. Then select 'Windows Offline Installation, Multi-language' in the Windows Platform area just below the Accept button.
*=========================*

Please post the following;

New hijackthis log
List of programs and answers to questions
startup.txt
AVG AntiSpyware log

Thanks,

Rogue
Post #5
Hello ROgue, I ran into problems attempting to complete your instructions. I could not get the MANUAL update to go for AVG Anti-Spyware Full database installer. The initial attempt led to a screen that gave no indication of any action. I even left it for about 20 minutes to be sure it was dormant. Then, I tried the "from here" link. It go failed. I unpacked (extracted) a bunch of ".dat" files but no UPDATE appeared to occur. I then ran ATF CLEANER successfully. At the Control Panel Add/Remove, the first Java 2 …. 1.4.1_02 returned the following message: The InstallShield Engine (iKernel.exe) could not be launched. No such interface supported. I clicked to OK button. The second Java 2 …. 1.4.2_03 was removed successfullyl I started to follow your HijackThis steps, but decided to stop and get back to you. I did not want to proceed and make matters worse. I have the time. ADDITIONALLY, a few weeks ago I was "deleting" unused programs and not using "add/remove". Earthlink's program was one of those I deleted. Now, it seems that everytime I open a program, the "orphaned ?" popup blocker from Earthlink springs into action with an ERROR 1706 message. I usually have to click CANCEL and OK a few times before the program I want eventually launches. Regarding your questions about which files I no longer want or am unclear about what they do, I'll do my homework and get back to you. And, NO - I DO NOT USE ANY NORTON PROJECTS any more. Sorry if I've misinterpreted things on my end and have caused this screw-up. I await your next instructions. I printed out your reply instructions and checked of each step as I proceed. Thanks again…. Hez
Post #6
Hi Boltons Sometimes you have to reboot in order for AVG AntiSpyware to update correctly. If you manually downloaded the definitions file you many try installing them from safe mode. If that still fails we can wait until after the bad files have been removed. Don't worry to much about uninstalling problems with Java. We'll sort that out later. Please continue with the instructions where you left off. Removing the hijackthis entries. Again after you remove those bad files and you're still in Safe Mode try to install the AVG AS definitions. Those programs you didn't remove using add/remove may take some registry fixes..just so you know we have a few more posts together. Rogue
Post #7
Hello Rogue, Sorry for the break in timely responses. I've printed out your last reply and am going to have to research Safe Mode applications and access. To clarify, I should try to update manually the AVG Anti-Spyware Full database installer WHILE IN SAFE MODE. Then, I should re-boot my computer for the update to take. If it doesn't work, I should proceed - while still in Safe Mode - with your instructions. Also, the Java file that did not delete should be ignored until later. So, I should proceed with your instructions. After the Hijackthis entries are removed, I should go back and try to re-do what I could not accomplish before. Any tips on getting into SAFE MODE? I'm still here and trying to accomplish your instructions. Thanks in advance ….. Hez
Post #8 last edited
Hi Boltons,

Let's go this route.

Regarding safemode, if using F8 doesn't get you to Safe Mode, you can try F5.

Just found that the latest version of AVG AntiSpyware will run in Safe Mode. So I have removed the Safe Mode step. Let me know any files you cannot remove.
Still try to boot to safe mode as instructed above at some point. Some malware will mess with those settings

Download the full database from http://www.ewido.net/en/download/updates/ to your Desktop
Click the icon to install the database.
Exit AVG Anti-Spyware when done - DO NOT perform a scan yet.

*=========================*

Start HijackThis as you did to generate a log, but this time click on 'Do a system scan only'.
Place a checkmark in the boxes to the left of the following entries, by clicking on them:

O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [anti_troj] C:\WINDOWS\system32\anti_troj.exe
O4 - HKCU\..\Run: [anti_troj] C:\WINDOWS\system32\anti_troj.exe
O4 - HKCU\..\Run: [key2] C:\WINDOWS\system32\winlog.exe
O4 - HKCU\..\Run: [german.exe] C:\WINDOWS\system32\wintems.exe
O4 - HKLM\..\Run: [key2] C:\WINDOWS\system32\winlog.exe

CLOSE ALL OPEN WINDOWS AND BROWSERS - EXCEPT HJT and click on Fix checked
*=========================*

Using Windows Explore by right-clicking the Start button and left clicking Explore navigate to and find the following files: if found, delete the following (some may not be present after previous steps):

C:\WINDOWS\system32\anti_troj.exe
C:\WINDOWS\system32\winlog.exe << Do not confuse with winlogon.exe in the same folder. winlogon.exe is a critical file
C:\WINDOWS\system32\winlog.dll
C:\WINDOWS\system32\wintems.exe

Again using Windows Explore navigate to and find following folders: if found, delete the following (some may not be present after previous steps):

C:\Windows\exefld
C:\Windows\TEMP << Leave the folder but remove all content.
*=========================*

Scan with AVG Anti-Spyware as follows:
  • Click on the "Scanner" button and choose the "Settings" tab.
  • Under "How to act?", click on "Recommended actions" and choose "Quarantine" to set default action for detected malware.
  • Under "How to Scan?", "Possibly unwanted software", and What to Scan?" leave all the default settings.
  • Under "Reports" select "Automatically generate report after every scan" and UNcheck "Only if threats were found".
  • Click the "Scan" tab to return to scanning options.
  • Click "Complete System Scan" to start.
  • When the scan has finished you will be presented with a list of infected objects found. Click "Apply all actions" to place the files in Quarantine.
IMPORTANT! Do not save the report before you have clicked the Apply all actions button. If you do, the log that is created will indicate "No action taken", making it more difficult to interpret the report. So be sure you save it only AFTER clicking the "Apply all actions" button.
  • Click on "Save Report" to view all completed scans. Click on the most recent scan you just performed and select "Save report as" - the default file name will be in date/time format as follows: Report-Scan-20060620-142816.txt. Save to your desktop. A copy of each report will also be saved in C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Reports\
  • Exit AVG Anti-Spyware when done, reboot normally and submit the log report in your next response.

Note: Close all open windows, programs, and DO NOT USE the computer while AVG Anti-Spyware is scanning. Doing so can hamper AVG Anti-Spyware's ability to clean properly and may result in reinfection.
*=========================*

Registry Export

Open Notepad and copy and paste quotebox in it:

regedit /e peek1.txt "HKEY_CURRENT_USER\SOFTWARE\FirstRRRun"
regedit /e peek2.txt "HKEY_CURRENT_USER\Software\DateTime4"
regedit /e peek3.txt "HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Internet Settings"
type peek1.txt >> startup.txt
type peek2.txt >> startup.txt
type peek3.txt >> startup.txt
del peek*.txt
start notepad startup.txt


Save this as look.bat , choose to save as *all files and place it on your desktop.
Doubleclick on look.bat and post the contents of it in your next reply.
It may be long and require a sperate post
*=========================*

Please update Java Runtime Environment
[*]The current version can be downloaded from Sun here: http://java.sun.com/javase/downloads/index.jsp Scroll down the page to 'Java Runtime Environment (JRE) 6u1'

Select either Windows Online or Windows Offline download and press the 'Download' button. On the new web page, click the 'Accept License Agreement' button. Then select 'Windows Offline Installation, Multi-language' in the Windows Platform area just below the Accept button.
*=========================*

Please post the following;

New hijackthis log
startup.txt
AVG AntiSpyware log

Thanks,

Rogue
Post #9
Hello Rogue, Here we go!!! In reading your latest instructions, I was not sure if I were to enter SAFE MODE to attempt your instructions. I DID NOT GO INTO SAFE MODE. I downloaded the full database from ..../updates/ to the desktop. When I clicked the Icon, the program ran and at the end when I clicked out, I was not in AVG. Therefore, the next step to exit AVG did not apply. I launched HJT and did a system scan only. I checkmarked the boxes for all the files you had listed (7 total); closed all other programs except HJT and clicked "Fix Checked". I when to Explorer and did not find any of the four (4) files you listed - as you stated that some may not be present after the "fix checked" done above. I when to "C:\Windows\exefld" and found it EMPTY. The same was found for C:\Windows\TEMP. However, I turned on the "view hidden files…." (Tools=folder options) in case there was more to be seen. Losts of other stuff came up in Windows Explorer. I panicked and turneo off the "view hidden files…" and rebooted the computer. I opened HJT again but did nothing. I returned to C:\Windows\TEMP and decided to delete the files and the folder - but not the TEMP folder itself. During the file deleting, a nasty-gram popped up stating: Cannot delete ZLT00231: it is being used by another person or program. Close any programs that might be using the file and try again, At this point, I decided to check back with you. The "TEMP" folder has five (5) files and twelve (12) folders currently residing in it. I have a screen capture of the nasty-gram screen and one of the "TEMP" folder content listings in case they may prove helpful to you. Because I'm sure if I got off to as smart start (no Safe Mode) and then playing with the hidden files, I figured I'd "head for high ground" and seek you out for further guidance. Again, sorry for stumbling and tripping along. I await your next directions. Thanks for your patience. Ciao …. Hez the humble…..:-)
Post #10 last edited
Hi Boltons

You're doing fine. Hang in there.

When I clicked the Icon, the program ran and at the end when I clicked out, I was not in AVG.

OK that's fine.

However, I turned on the "view hidden files…." (Tools=folder options) in case there was more to be seen. Losts of other stuff came up in Windows Explorer. I panicked and turneo off the "view hidden files…" and rebooted the computer.

You were doing fine. That's why you couldn't find those files I asked you to remove.

I returned to C:\Windows\TEMP and decided to delete the files and the folder - but not the TEMP folder itself.
During the file deleting, a nasty-gram popped up stating:
Cannot delete ZLT00231: it is being used by another person or program. Close any programs that might be using the file and try again,

Ahhhh figures. Those generally go pretty easy in safe mode but at time can be a bugger. We can try again.
If they don't go away nice this time we'll see if AVG AS picks them up. If not I have a bigger hammer.

As you can see I've removed the steps you have done and added in viewing hidden files.
I have also added for you to try Safe Mode. If F8 dosen't work, try using F5 in it's place.
If neither F8 or F5 works, Restart in Normal Mode and continue beginning with deleting the files and continuing on.
If unable to get into Safe Mode make sure you do the "Look at Safe Mode keys" step.

Now, enable the Show Hidden Folders option, like this:
Click Start.
Open My Computer.
Select the Tools menu and click Folder Options.
Select the View Tab. Under the Hidden files and folders heading select Show hidden files and folders.
Uncheck the Hide protected operating system files (recommended) option.
Click Yes to confirm.
Click OK.
*=========================*

Start in Safe Mode
Please print the instructions below or copy and paste to Notepad since you will not have internet access while in Safe Mode.
  • Restart your computer
  • After hearing your computer beep once during startup, but before the Windows icon appears, continually press F8.
  • Instead of Windows loading as normal, a menu should appear
  • Select the first option, to run Windows in Safe Mode.
*=========================*

Using Windows Explore by right-clicking the Start button and left clicking Explore navigate to and find the following files: if found, delete the following (some may not be present after previous steps):

C:\WINDOWS\system32\anti_troj.exe
C:\WINDOWS\system32\winlog.exe << Do not confuse with winlogon.exe in the same folder. winlogon.exe is a critical file
C:\WINDOWS\system32\winlog.dll
C:\WINDOWS\system32\wintems.exe

Again using Windows Explore navigate to and find following folders: if found, delete the following (some may not be present after previous steps):

C:\Windows\exefld
C:\Windows\TEMP << Leave the folder but remove all content.
*=========================*

Restart your PC in Normal Mode
*=========================*

Scan with AVG Anti-Spyware as follows:
  • Click on the "Scanner" button and choose the "Settings" tab.
  • Under "How to act?", click on "Recommended actions" and choose "Quarantine" to set default action for detected malware.
  • Under "How to Scan?", "Possibly unwanted software", and What to Scan?" leave all the default settings.
  • Under "Reports" select "Automatically generate report after every scan" and UNcheck "Only if threats were found".
  • Click the "Scan" tab to return to scanning options.
  • Click "Complete System Scan" to start.
  • When the scan has finished you will be presented with a list of infected objects found. Click "Apply all actions" to place the files in Quarantine.
IMPORTANT! Do not save the report before you have clicked the Apply all actions button. If you do, the log that is created will indicate "No action taken", making it more difficult to interpret the report. So be sure you save it only AFTER clicking the "Apply all actions" button.
  • Click on "Save Report" to view all completed scans. Click on the most recent scan you just performed and select "Save report as" - the default file name will be in date/time format as follows: Report-Scan-20060620-142816.txt. Save to your desktop. A copy of each report will also be saved in C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Reports\
  • Exit AVG Anti-Spyware when done, reboot normally and submit the log report in your next response.

Note: Close all open windows, programs, and DO NOT USE the computer while AVG Anti-Spyware is scanning. Doing so can hamper AVG Anti-Spyware's ability to clean properly and may result in reinfection.
*=========================*

Registry Export

Open Notepad and copy and paste quotebox in it:

regedit /e peek1.txt "HKEY_CURRENT_USER\SOFTWARE\FirstRRRun"
regedit /e peek2.txt "HKEY_CURRENT_USER\Software\DateTime4"
regedit /e peek3.txt "HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Internet Settings"
type peek1.txt >> startup.txt
type peek2.txt >> startup.txt
type peek3.txt >> startup.txt
del peek*.txt
start notepad startup.txt


Save this as look.bat , choose to save as *all files and place it on your desktop.
Doubleclick on look.bat and post the contents of it in your next reply.
It may be long and require a sperate post
*=========================*

Only if unable to boot to Safe Mode
Look at Safe Mode keys

Click Start > Run > copy and paste the following command please:

regedit /e C:\look.txt "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Safeboot"

Press Enter

Using windows explorer, please find this file:

C:\look.txt then post all of its contents.
*=========================*

Please update Java Runtime Environment
[*]The current version can be downloaded from Sun here: http://java.sun.com/javase/downloads/index.jsp Scroll down the page to 'Java Runtime Environment (JRE) 6u1'

Select either Windows Online or Windows Offline download and press the 'Download' button. On the new web page, click the 'Accept License Agreement' button. Then select 'Windows Offline Installation, Multi-language' in the Windows Platform area just below the Accept button.
*=========================*

Please post the following;

New hijackthis log
startup.txt
C:\look.txt
AVG AntiSpyware log

Thanks,

Rogue
Post #11
Hi Rogue,

I had no trouble getting into SAFE MODE. And, none of the files in the …\system32 folder were found.
I did delete the …\exefld folder (I wasn't sure if the folder needed to be deleted or just emptied. The contents of the …\TEMP folder were deleted.

I got ALMOST all of your remaining/latest instructions done.
I could not find "C:look.txt". Could you tell me where to look for it? I do not see where it is created or where it comes from. SORRY!
I will include the below three (3) items:
1. New Hijackthis log
2. startup.txt
3. AVG AntiSpyware log
=======================
New Hijackthis log
Logfile of HijackThis v1.99.1
Scan saved at 4:04:33 PM, on 6/7/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\SM1BG.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\Program Files\Palm\HOTSYNC.EXE
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\HP\hpcoretech\comp\hpdarc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Netscape\Netscape\Netscp.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.google.com/"); (C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\prefs.js)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: PnIEBrowserHelperObj Class - {4B5F2E08-6F39-479a-B547-B2026E4C7EDF} - C:\Program Files\EarthLink TotalAccess\PnEL.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Pop-Up Blocker - {D7F30B62-8269-41AF-9539-B2697FA7D77E} - C:\Program Files\EarthLink TotalAccess\PnEL.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SM1BG] C:\WINDOWS\SM1BG.EXE
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [E6TaskPanel] "C:\Program Files\EarthLink TotalAccess\TaskPanl.exe" -winstart
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: Add To Compaq Organize… - C:\PROGRA~1\HEWLET~1\COMPAQ~1\bin\core.hp.main\SendTo.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.1_02\bin\npjpi141_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.1_02\bin\npjpi141_02.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1163468448187
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (file missing)
O23 - Service: UPnPService - Unknown owner - C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
END FROM Hez Bolton for HJT Log

====================================
2. Startup.txt
Windows Registry Editor Version 5.00

DELETED BECAUSE ERROR SAID REPLY WAS TOO LONG

===================================
3. AVG AntiSpyware Log
———————————————————
AVG Anti-Spyware - Scan Report
———————————————————

+ Created at: 2:54:29 PM 6/7/2007

+ Scan result:



:mozilla.100:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.101:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.102:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.103:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.104:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.105:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.106:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.107:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.110:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.111:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.112:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.120:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.142:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.143:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.221:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.261:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.264:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.272:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.31:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.32:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.33:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.34:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.35:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.36:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.37:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.38:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.39:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.40:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.41:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.42:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.43:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.44:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.45:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.46:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.47:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.48:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.49:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.50:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.66:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.67:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.68:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.69:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.70:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.71:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.72:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.73:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.74:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.75:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.76:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.77:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.78:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.79:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.80:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.81:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.82:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.83:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.85:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.91:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.92:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.93:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.94:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.95:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.96:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.97:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.97:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.98:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.99:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.160:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.161:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.162:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.28:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.29:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.188:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Adobe : Cleaned.
:mozilla.189:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Adobe : Cleaned.
:mozilla.32:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.33:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.34:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.35:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.36:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.42:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.43:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.44:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.45:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.46:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.104:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Adviva : Cleaned.
:mozilla.105:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Adviva : Cleaned.
:mozilla.12:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.20:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.26:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.27:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.274:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.34:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.117:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.93:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.118:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.96:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.97:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.98:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.99:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.163:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
:mozilla.11:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.13:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.14:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.21:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.233:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.151:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.152:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.251:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.252:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.253:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.255:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.90:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.133:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.213:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.222:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.225:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.237:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.263:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.30:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.67:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.111:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.115:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.116:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.117:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.118:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.119:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.119:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.120:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.122:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.123:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.124:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.125:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.126:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.127:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.128:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.155:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.212:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.268:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.136:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.137:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.20:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.21:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.268:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.269:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.270:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.10:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.19:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.51:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.9:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.132:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Netflame : Cleaned.
:mozilla.86:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.144:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Paypal : Cleaned.
:mozilla.108:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.109:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.113:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.121:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.122:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.123:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.124:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.125:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.126:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.89:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.90:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.13:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.146:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.14:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.15:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.37:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.38:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.40:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.102:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.136:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.137:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.192:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.193:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.194:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.195:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.196:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.197:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.198:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.199:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.200:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.201:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.202:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.203:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.204:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.71:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.72:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.73:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.74:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.75:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.76:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.77:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.78:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.79:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.80:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.81:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.82:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.251:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.252:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.253:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.16:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.172:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.173:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.174:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.175:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.176:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.178:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.17:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.18:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.19:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.20:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.21:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.121:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.122:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.123:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.124:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.125:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.126:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.180:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.181:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.182:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.183:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.184:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.87:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Spylog : Cleaned.
:mozilla.119:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.155:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.158:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.159:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.130:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.131:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.132:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.133:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.134:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.91:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.94:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.95:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.55:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.277:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.278:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.279:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.280:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.281:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.282:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.138:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.139:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.140:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.141:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.171:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.223:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.62:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.63:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.292:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.227:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.228:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.229:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.230:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.65:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.66:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.7:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\default\cfst1ck6.slt\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.31:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.32:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.33:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.56:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.57:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.58:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.59:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.60:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.61:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.64:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.177:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.178:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.179:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\jre9a63y.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.180:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Profiles\Default User\n8qbgbxc.slt\cookies.txt -> TrackingCookie.Zedo : Cleaned.


::Report end
===========================
How do I sent you the "startup.txt" information? Can I just ADD ANOTHER REPLY? I'll try it.
===========================

This is All…..
Look forward to your next directions.

Thanks a bunch………Hez Bolton
Post #12
Hi Rogue, This is PART II to my recent reply (a few minutes ago). This is the "startup.txt" portion of the file. =========================== 2. Startup.txt Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\SOFTWARE\FirstRRRun] "FirstRRRun"=dword:00000001 Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Internet Settings] "User Agent"="Mozilla/4.0 (compatible; MSIE; Win32)" "IE5_UA_Backup_Flag"="5.0" "NoNetAutodial"=dword:00000000 "MigrateProxy"=dword:00000001 "EnableNegotiate"=dword:00000001 "EmailName"="IEUser@" "AutoConfigProxy"="wininet.dll" "MimeExclusionListForCache"="multipart/mixed multipart/x-mixed-replace multipart/x-byteranges " "WarnOnPost"=hex:01,00,00,00 . . . "2001"=dword:00000003 "2004"=dword:00000003 END FROM HEZ BOLTON "Startup.txt" =================================== THIS WAS STILL "TOO LONG FOR POSTING / REPLYING PURPOSES" WHAT SHOULD I DO????? This is All….. Look forward to your next directions. Thanks a bunch………Hez Bolton
Post #13
Hi Boltons, OK If you were able to get into Safe Mode there is no need to look at all of Startup.txt or look.txt. The results from AVG scan were just cookies so no problem there. Your HJT log looks much better. Now going back through the posts you were talking about removing programs you didn't want or need. Is that still what you want to accomplish next?
Post #14
Hi Rogue, Sorry for the delay getting back to you. I was away for the weekend. Yes, there are some files I do not use and would like to get rid of if possible. Also, I'm still getting the "earthlink pop-up blocke" even when I launch My Computer. I when thru the "add/remove" list and have a list of items I don't know what they do. I know that my wife and I do not use them. I just don't what to remove something that is important in the background or where ever. The list is: Compaq connection Compaq organize Cypress mas storage driver Draw Plus Easy Internet Sign-up (I mentioned this to earlier) Firebird … Magix Gecko Runtime Environment Incredimail Kodak Easyshare Software Microsoft Plus! items (three total) PC Doctor for Windows PConPoint Registry Mechanic or Fix S3 items (4 total) Any guidance or information you can share on the above would be greatly appreciated. Look forward to hearing back from you. Thanks in advance, Hez
Post #15 last edited
Hi Boltons,

I'll look up where Earthlink files are stored and see what I can find. Like I mentioned before we may have to go registry searching. No big deal there are some tools to help us.
Question, was this just the popup blocker or was the spam blocker installed also?

I have given some links for guideance and clarification. If you have any questions on one before you remove it let me know.
Those that don't go easily you can try removing in Safe Mode.

Compaq connection
http://www.hp.com/united-states/cpc/presar…ions_faq.html#1
''Compaq Connections'' is a service that automatically sends you support information, tips, ideas, and special offers from HP and our partners, especially designed for HP/Compaq desktop PC owners. It can also deliver on-line surveys that allow you to provide feedback to HP.
This can be safely removed using add/remove programs

Compaq organize
Compaq Organize gives you quick access to all your favorite files, programs and web sites.
http://h10025.www1.hp.com/ewfrf/wc/generic…cname=c00455646
This can be safely removed using add/remove programs

Cypress mas storage driver
Do you have or use an external hard drive or DVD/CD player/burner or an external device that uses a USB port?
This is the driver software for one of those types of devices.

Draw Plus
Drawing & Graphics software
This can be safely removed using add/remove programs

Easy Internet Sign-up (I mentioned this to earlier)
This is a utility that comes bundled with a new PC
http://h10025.www1.hp.com/ewfrf/wc/generic…cname=c00455646
This can be safely removed using add/remove programs

Firebird … Magix
http://www.firebirdsql.org/
Firebird SQL Server. Ring a bell. Do you do database management?
This can be safely removed using add/remove programs

Gecko Runtime Environment
I see where his may be tied to Netscape. I would leave it.

Incredimail
Similar to Yahoo Mail. Unless you use this for sending/receiving emails I would nuke it.
Removal instructions http://www.incredimail.com/english/help/im…ncredimail.html
This can be safely removed using add/remove programs

Kodak Easyshare Software
Do you have a Kodak digital camera, scanner, device?
http://faqs.kodak.com/22_en/TFAQ1.shtm
On section A skip step 4
This can be safely removed using add/remove programs

Microsoft Plus! items (three total) I found four not knowing which three you had.
http://h10025.www1.hp.com/ewfrf/wc/generic…cname=c00455646
Microsoft Plus! Dancer LE
Microsoft Plus! Digital Media Edition Installer
Microsoft Plus! Digital Media Installer
Microsoft Plus! Photo Story
These are productivity related
This can be safely removed using add/remove programs

PC Doctor for Windows
http://h10025.www1.hp.com/ewfrf/wc/generic…cname=c00455646
This can be safely removed using add/remove programs

PConPoint
Claims to safely repairs errors on your computer, removes bugs and restores the overall performance and speed of your PC. I’ve never used or heard of it.
This can be safely removed using add/remove programs

Registry Mechanic or Fix
Another registry cleaner that can clean and repair registry problems. We may have to use one of these but I would like to use one I know. I’m not to familiar with thisone.
This can be safely removed using add/remove programs

S3 items (4 total)
S3 S3 [Display, Gamma2, Info2, Overlay]
System utility. These should not be removed from the system

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI