This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

My Hijack Log File

55 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Logfile of HijackThis v1.99.1
Scan saved at 9:02:06 PM, on 6/19/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\VGFtaWtvIFJvbWVybw\command.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\program files\slide\slide.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\PeoplePC\ISP6300\Browser\Bartshel.exe
C:\Program Files\Common Files\Real\Update_OB\rnathchk.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\PeoplePC\ISP6300\Browser\PPShared.exe
C:\Documents and Settings\Owner\Desktop\hj\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat

6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PeoplePC ScamGuard - {7E3659A6-4BC5-4d93-B3FD-8B5ACC2FEDED} - C:\Program

Files\PeoplePC\Toolbar\ScamGrd.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft

Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: PeoplePal Toolbar - {A8FB8EB3-183B-4598-924D-86F0E5E37085} - C:\Program Files\PeoplePC\Toolbar\PPCToolbar.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital

Imaging\bin\hpdtlk02.dll
O3 - Toolbar: PeoplePal Toolbar - {A8FB8EB3-183B-4598-924D-86F0E5E37085} - C:\Program Files\PeoplePC\Toolbar\PPCToolbar.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AutoTKit] C:\hp\bin\AUTOTKIT.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [Bart Station] C:\Program Files\PeoplePC\ISP6300\BIN\PPCOLink.exe -STATION
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\Hewlett-Packard\Digital Imaging\bin\backupnotify.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [Pwfdbt] "C:\Program Files\Common Files\?ystem32\n?tepad.exe"
O4 - HKCU\..\Run: [omff] C:\PROGRA~1\COMMON~1\omff\omffm.exe
O4 - HKCU\..\Run: [slide.exe] c:\program files\slide\slide.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: AutoTBar.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft

Money\System\mnyside.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -

http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -

http://update.microsoft.com/microsoftupdat…b?1181178933906
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -

http://update.microsoft.com/microsoftupdat…b?1181178636140
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: OPXPGina - C:\Program Files\Softex\OmniPass\opxpgina.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\VGFtaWtvIFJvbWVybw\command.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv.exe
Hi hatsuko,

I'm Gary R, I'll be glad to help you with your computer problems.

Please observe these rules while we work:
  • Perform all actions in the order given.
  • If you don't know, stop and ask! Don't keep going on.
  • Please reply to this thread. Do not start a new topic.
  • Stick with it till you're given the all clear.
  • Remember, absence of symptoms does not mean the infection is all gone.
If you can do these things, everything should go smoothly.
  • Please note you'll need to have Administrator priviledges to perform the fixes. (XP accounts are Administrator by default)
  • Please let me know if you are using a computer with multiple accounts, as this can affect the instructions given.
Go to Control Panel > Add/Remove Programs and uninstall any of these (if found):

PeoplePal Toolbar
Oin
Yazzle by Oin
Purityscan by Oin
Snowballwars by Oin

or anything similar with Oin or Outerinfo in it.
Zolero
Tizzletalk
MediaTickets
Cowabanga

and any other programs you didn't install or don't recognize - if you're not sure please ask first.

Download and run OiUninstaller.exe

Tutorial for the uninstaller if needed

Now install MVPS HOSTS:

Create a new folder somewhere you can find it, and name it Hosts.

Download and unzip hosts.zip to that folder.

Open up the Hosts folder and double-click on the mvps.bat file, it will rename your present HOSTS file to HOSTS.MVP, then it will copy the new HOSTS file to the correct location on your machine. It happens very quickly so don't blink!

You're done with this step.

Next….

We need to remove a service.
  • Click Start > Run now type sc stop cmdService click OK.
  • Click Start > Run now type sc delete cmdService click OK.
Note: There is a space between sc and stop/delete, and a space between stop/delete and cmdService.

Run a scan with HJT and check the following items (if found).

O2 - BHO: PeoplePC ScamGuard - {7E3659A6-4BC5-4d93-B3FD-8B5ACC2FEDED} - C:\Program Files\PeoplePC\Toolbar\ScamGrd.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: PeoplePal Toolbar - {A8FB8EB3-183B-4598-924D-86F0E5E37085} - C:\Program Files\PeoplePC\Toolbar\PPCToolbar.dll

O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)

O3 - Toolbar: PeoplePal Toolbar - {A8FB8EB3-183B-4598-924D-86F0E5E37085} - C:\Program Files\PeoplePC\Toolbar\PPCToolbar.dll

O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE

O4 - HKLM\..\Run: [Bart Station] C:\Program Files\PeoplePC\ISP6300\BIN\PPCOLink.exe -STATION

O4 - HKCU\..\Run: [Pwfdbt] "C:\Program Files\Common Files\?ystem32\n?tepad.exe"

O4 - HKCU\..\Run: [omff] C:\PROGRA~1\COMMON~1\omff\omffm.exe

O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe

O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\VGFtaWtvIFJvbWVybw\command.exe


Now close all open windows and click Fix Checked to remove them.

Make sure that you can see hidden files and folders.
  • Click Start.
  • Click My Computer.
  • Select the Tools menu and click Folder Options.
  • Select the View Tab.
  • Under the Hidden files and folders heading select Show hidden files and folders.
  • Click Yes to confirm.
  • Uncheck the Hide file extensions for known file types.
  • Uncheck Hide protected operating system files a pop up will appear, answer Yes
  • Click OK.
Reboot your computer in Safe Mode
  • If your computer is running, shut down Windows, then turn the power off.
  • Wait 30 seconds, then turn the computer on, and begin tapping the F8 key.
  • The Windows Advanced Options Menu appears. (If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again).
  • Select Safe Mode using the up/down arrow keys.
  • Press Enter.
  • Log on with an account that has administrator priviledges (NOT the account named Administrator).
Now delete the following folders.

These Folders
C:\Program Files\PeoplePC
C:\WINDOWS\VGFtaWtvIFJvbWVybw
C:\Program Files\Common Files\?ystem32
C:\Program Files\Common Files\omff


Let me know of any problems.

NOTE: The folder C:\Program Files\Common Files\?ystem32 is most probably named System32, DO NOT CONFUSE IT WITH THE GENUINE SYSTEM32 FOLDER which is in this location C:\Windows\System32
  • Click Start > Run and type cleanmgr then click OK.
  • This will bring up the Disk Cleanup window.
  • Check the following entries.
    • Temporary Internet Files.
    • Recycle Bin.
    • Temporary Files.
  • Click OK.
  • When a prompt pops up click Yes.
REBOOT INTO NORMAL MODE

Download AVG Anti-Spyware.
  • Install AVG Anti-Spyware.
  • Launch AVG by double-clicking on the icon.
  • The program will now open to the main screen.
  • You will need to update AVG to the latest definition files.
  • At the top of the main screen click Update.
  • Then in the Manual Update section, click on Start Update.
[*]The update will start and a progress bar will show the updates being installed.

[*]When updates are completed, close AVG.

If you are having problems with the updater, you can use this link to manually update AVG.
AVG manual updates

Run a scan with AVG.
  • Click on Scanner
    • Click on the Settings tab, and set the following settings.
      • How to act
      • Click on Recommended actions, and set to Quarantine.
    • How to scan
      • Check all options.
    • Possibly unwanted software.
      • Check all options.
    • Reports
      • Check Automatically generate report after every scan.
      • Uncheck Only if threats were found.
    • What to scan
      • Check Scan every file.
  • Click on the Scan tab.
    • Click on Complete System Scan and the scan will begin.
    • When the scan has finished
    • Make sure that Set all elements to: shows Quarantine, if not click on the link and choose Quarantine from the popup menu.
    • At the bottom of the window click on the Apply all Actions button.
Note: Don't save the report before you hit the Apply action button.

Close AVG Anti-Spyware.

AVG will save a report in the following location C:\Program Files\Grisoft\AVG anti-spyware 7.5\Reports

Please send me the AVG log please, along with a new HJT log please.
Sorry Gary but the windows keep popping up. Here's the new hijack log:

Logfile of HijackThis v1.99.1
Scan saved at 9:32:12 PM, on 6/20/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\program files\slide\slide.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Common Files\Real\Update_OB\rnathchk.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\Owner\Desktop\hj\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AutoTKit] C:\hp\bin\AUTOTKIT.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\Hewlett-Packard\Digital Imaging\bin\backupnotify.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [slide.exe] c:\program files\slide\slide.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1181178933906
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1181178636140
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: OPXPGina - C:\Program Files\Softex\OmniPass\opxpgina.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv.exe
I don't see the AVG log I asked for, can you post it for me please.


I'd like you to check a file for Viruses.
  • Go to VirusTotal or Jotti's, and scan the following file(s).

c:\program files\slide\slide.exe

  • Click on the Browse button at the top of the screen.
  • Browse to the file.
  • Click OK.
  • Click Send, and the file will upload to VirusTotal / Jotti, where it will be scanned by several anti-virus programmes.
  • After a while, a window will open, with details of what the scans found.
  • Note details of any viruses found.
  • Post me the details please.
Also

Download GMER and unzip it to your Desktop. (It will create a folder GMER)

Alternate Download Site
  • Disconnect from the Internet, and close all running programmes.
  • There is a small chance this programme may crash your computer, so save any work you have open.
  • Open the GMER folder, and double click gmer.exe
  • Let the gmer.sys driver load if asked.
  • If it gives you a warning at programme start about rootkit activity and asks if you want to run a scan ….. click OK.
  • If no warning:
    • Click Rootkit tab.
    • Ensure that All the boxes to the right of the program are checked except Show All.
    • Click Scan.
  • Once scan is finished click Copy.
    • Click Start > Run then type Notepad.exe then click OK.
    • This will open a Notepad file.
    • Hit Ctrl+V to paste log into it.
    • Save the log to your Desktop.
  • Reconnect to internet and post the log please.
Please do an online scan with Kaspersky Online Scanner

Note: You must be using Internet Explorer as your browser as it will be necessary to install an Active X component to your computer.

Important If you have previously used Kaspersky Online Scanner (before 8th Aug 2006), you will have to uninstall the old version using Add/Remove Programs in Control Panel before you can use the new version.

Click on Kaspersky Online Scanner

You will be promted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then start to download the latest definition files.
  • Once the scanner is installed and the definitions downloaded, click Next.
  • Now click on Scan Settings.
  • In the scan settings make sure that the following are selected:
    • Scan using the following Anti-Virus database:
      • Extended (If available otherwise Standard)
    • Scan Options:
      • Scan Archives
      • Scan Mail Bases
  • Click OK.
  • Now under select a target to scan select My Computer.
  • The scan will take a while so be patient and let it run. Once the scan is complete it will display if your system has been infected.
  • Now click on the Save as Text button:
  • Save the file to your desktop.
  • Copy and paste that information in your next post.
Note: The Kaspersky online scanner is not yet fully compatible with IE7. You may get returned to a window without the Accept/Decline buttons after allowing the ActiveX control. The buttons are there - you just can't see them! Click on the zoom button (bottom, right of the window) and change it from 100% to 75%. You should now see the buttons. Reset to 100% once the license has been accepted.


Now can you send me the following logs please:
  • AVG log
  • Results of VirusTotal/Jotti's scan
  • GMER log
  • Kaspersky log


Post each separately so they don't get cut off by the forum post size limiter.
I'd like you to check a file for Viruses. Go to VirusTotal or Jotti's, and scan the following file(s). QUOTEc:\program files\slide\slide.exe Click on the Browse button at the top of the screen. Browse to the file. Click OK. Click Send, and the file will upload to VirusTotal / Jotti, where it will be scanned by several anti-virus programmes. After a while, a window will open, with details of what the scans found. Note details of any viruses found. Post me the details please. ================================= Jotti's malware scan 2.99-TRANSITION_TO_3.00-R1 File to upload & scan: Service Service load: 0% 100% File: Slide.exe.log Status: OK MD5: 55211898f86018d41cb80422540b307e Packers detected: - Bit9 reports: File not found Scanner results Scan taken on 22 Jun 2007 22:27:40 (GMT) A-Squared Found nothing AntiVir Found nothing ArcaVir Found nothing Avast Found nothing AVG Antivirus Found nothing BitDefender Found nothing ClamAV Found nothing Dr.Web Found nothing F-Prot Antivirus Found nothing F-Secure Anti-Virus Found nothing Fortinet Found nothing Kaspersky Anti-Virus Found nothing NOD32 Found nothing Norman Virus Control Found nothing Panda Antivirus Found nothing Rising Antivirus Found nothing VirusBuster Found nothing VBA32 Found nothing Here's what Jotti's wrote:
GMER 1.0.12.12244 - http://www.gmer.net
Rootkit scan 2007-06-22 19:23:35
Windows 5.1.2600 Service Pack 2


—- System - GMER 1.0.12 —-

SSDT \SystemRoot\system32\drivers\core.sys ZwClose
SSDT \SystemRoot\system32\drivers\core.sys ZwCreateKey
SSDT \SystemRoot\system32\drivers\core.sys ZwDeleteKey
SSDT \SystemRoot\system32\drivers\core.sys ZwDeleteValueKey
SSDT \SystemRoot\system32\drivers\core.sys ZwLoadKey
SSDT \SystemRoot\system32\drivers\core.sys ZwOpenKey
SSDT \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys ZwOpenProcess
SSDT \SystemRoot\system32\drivers\core.sys ZwReplaceKey
SSDT \SystemRoot\system32\drivers\core.sys ZwRestoreKey
SSDT \SystemRoot\system32\drivers\core.sys ZwSetValueKey
SSDT \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys ZwTerminateProcess

—- Kernel code sections - GMER 1.0.12 —-

? C:\WINDOWS\System32\DRIVERS\update.sys
? C:\WINDOWS\system32\drivers\core.sys The process cannot access the file because it is being used by another process.

—- User code sections - GMER 1.0.12 —-

.text C:\Program Files\Internet Explorer\iexplore.exe[2484] USER32.dll!DialogBoxParamA 77D588E1 5 Bytes JMP 7E38C4D5 C:\WINDOWS\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[2484] USER32.dll!DialogBoxIndirectParamW 77D62598 5 Bytes JMP 7E38C510 C:\WINDOWS\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[2484] USER32.dll!MessageBoxIndirectA 77D6AEF1 5 Bytes JMP 7E38C491 C:\WINDOWS\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[2484] USER32.dll!MessageBoxExW 77D80559 5 Bytes JMP 7E38C3D9 C:\WINDOWS\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[2484] USER32.dll!MessageBoxExA 77D8057D 5 Bytes JMP 7E38C413 C:\WINDOWS\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[2484] USER32.dll!DialogBoxIndirectParamA 77D86CED 5 Bytes JMP 7E38C54B C:\WINDOWS\system32\IEFRAME.dll
.text C:\Program Files\Internet Explorer\iexplore.exe[2484] USER32.dll!MessageBoxIndirectW 77D960B7 5 Bytes JMP 7E38C44D C:\WINDOWS\system32\IEFRAME.dll

—- Devices - GMER 1.0.12 —-

Device \Driver\Tcpip \Device\Ip IRP_MJ_INTERNAL_DEVICE_CONTROL [F9AFA85A] avgtdi.sys
Device \Driver\Tcpip \Device\Tcp IRP_MJ_INTERNAL_DEVICE_CONTROL [F9AFA85A] avgtdi.sys
Device \Driver\Tcpip \Device\Udp IRP_MJ_INTERNAL_DEVICE_CONTROL [F9AFA85A] avgtdi.sys
Device \Driver\Tcpip \Device\RawIp IRP_MJ_INTERNAL_DEVICE_CONTROL [F9AFA85A] avgtdi.sys
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_INTERNAL_DEVICE_CONTROL [F9AFA85A] avgtdi.sys

—- EOF - GMER 1.0.12 —-
You still haven't posted the AVG log I asked for, or the Kaspersky log either. Without these it's impossible for me to diagnose your problems. If you're having problems with these let me know and I'll try and find alternatives.
Gary, I didn't see the Reports file or folder in the Grisoft folder, so I've copied the report results. Here they are: ——————————————————— AVG Anti-Spyware - Scan Report ——————————————————— + Created at: 6:04:23 PM 6/23/2007 + Scan result: C:\Documents and Settings\Owner\Local Settings\Temp\ICD4.tmp\SAIX.dll -> Adware.180Solutions : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP83\A0042183.dll -> Adware.CommAd : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP83\A0042184.exe -> Adware.CommAd : Cleaned. C:\Documents and Settings\Owner\Application Data\Opera\Opera\profile\cache4\temporary_download\OiUninstaller.exe -> Adware.PurityScan : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP55\A0028830.exe -> Adware.PurityScan : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP56\A0028836.dll -> Adware.PurityScan : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP56\A0029781.dll -> Adware.PurityScan : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP56\A0029782.exe -> Adware.PurityScan : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP59\A0029812.exe -> Adware.PurityScan : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP62\A0029988.dll -> Adware.PurityScan : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP83\A0042157.exe -> Adware.PurityScan : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP84\A0042261.exe -> Adware.PurityScan : Cleaned. HKLM\SOFTWARE\Clickspring -> Adware.PurityScan : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP46\A0017366.exe -> Adware.Softomate : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP54\A0028772.exe -> Adware.Softomate : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP54\A0028824.exe -> Adware.Softomate : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP83\A0042190.dll -> Adware.TargetServer : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP62\A0030320.exe -> Adware.Trymedia : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP40\A0012089.exe -> Adware.WebHancer : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP40\A0012090.dll -> Adware.WebHancer : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP40\A0012091.dll -> Adware.WebHancer : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP40\snapshot\MFEX-1.DAT -> Adware.WebHancer : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP40\snapshot\MFEX-2.DAT -> Adware.WebHancer : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP40\snapshot\MFEX-3.DAT -> Adware.WebHancer : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP47\A0018442.exe -> Adware.WebHancer : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP47\A0018443.dll -> Adware.WebHancer : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP47\A0018444.exe -> Adware.WebHancer : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP47\A0019419.dll -> Adware.WebHancer : Cleaned. C:\WINDOWS\b129.exe -> Adware.WebHancer : Cleaned. HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{A8FB8EB3-183B-4598-924D-86F0E5E37085} -> Adware.WhyPPC : Cleaned. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A8FB8EB3-183B-4598-924D-86F0E5E37085} -> Adware.WhyPPC : Cleaned. HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{A8FB8EB3-183B-4598-924D-86F0E5E37085} -> Adware.WhyPPC : Error during cleaning. HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A8FB8EB3-183B-4598-924D-86F0E5E37085} -> Adware.WhyPPC : Cleaned. HKU\S-1-5-21-1470296405-939963419-1719696306-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{A8FB8EB3-183B-4598-924D-86F0E5E37085} -> Adware.WhyPPC : Cleaned. HKU\S-1-5-21-1470296405-939963419-1719696306-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A8FB8EB3-183B-4598-924D-86F0E5E37085} -> Adware.WhyPPC : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP54\A0028823.exe -> Downloader.Agent.ala : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP13\A0001383.exe -> Downloader.Agent.awf : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP54\A0028811.exe -> Downloader.Agent.awf : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP54\A0028812.exe -> Downloader.Agent.awf : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP54\A0028813.exe -> Downloader.Agent.awf : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP54\A0028814.exe -> Downloader.Agent.awf : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP7\A0001039.rbf -> Downloader.Agent.awf : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP41\A0013212.exe -> Downloader.Agent.bls : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP48\A0020500.exe -> Downloader.Agent.bls : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP54\A0028773.exe -> Downloader.Agent.bls : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP54\A0028809.exe -> Downloader.Agent.bmg : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP54\A0028810.exe -> Downloader.Agent.bmg : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP59\A0029817.exe -> Downloader.PurityScan.eg : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP64\A0031322.exe -> Downloader.PurityScan.eh : Cleaned. C:\WINDOWS\b128.exe -> Downloader.PurityScan.eh : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP64\A0031326.exe -> Downloader.Qoologic.at : Cleaned. C:\WINDOWS\b104.exe -> Downloader.Small.buy : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP64\A0031325.exe -> Downloader.TSUpdate.f : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP64\A0031323.exe -> Downloader.TSUpdate.l : Cleaned. C:\WINDOWS\b103.exe -> Downloader.TSUpdate.o : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP64\A0031324.exe -> Downloader.TSUpdate.r : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP62\A0030319.exe -> Hijacker.VB.nh : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP47\A0018440.exe -> Not-A-Virus.Monitor.Win32.NetMon.a : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@247realmedia[1].txt -> TrackingCookie.247realmedia : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@247realmedia[2].txt -> TrackingCookie.247realmedia : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@247realmedia[3].txt -> TrackingCookie.247realmedia : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@247realmedia[4].txt -> TrackingCookie.247realmedia : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@bookspan.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@bookspan.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@2o7[2].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@2o7[3].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@2o7[4].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@2o7[5].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@bookspan.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@brightcove.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@buzznet.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@cbs.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@chumtv.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@dupont.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@embarq.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@entrepreneur.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@fusetv.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@geosign.112.2o7[2].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@gettyimages.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@livenation.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@msnaccountservices.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@msninvite.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@msninvite.112.2o7[2].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@msnportal.112.2o7[2].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@msnportal.112.2o7[3].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@msnportal.112.2o7[4].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@msnportal.112.2o7[5].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@nbcuniversal.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@paypal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@pch.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@shopping.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@sonycorporate.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@sprintnlc.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@viamtvcom.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@wpni.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@youtube.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@bookspan.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@aavalue[2].txt -> TrackingCookie.Aavalue : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Aavalue : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Aavalue : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Aavalue : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Adbrite : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@adbrite[3].txt -> TrackingCookie.Adbrite : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Addynamix : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Addynamix : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Addynamix : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Adjuggler : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@admarketplace[1].txt -> TrackingCookie.Admarketplace : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@admarketplace[2].txt -> TrackingCookie.Admarketplace : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Adobe : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Adobe : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Adobe : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@adrevolver[3].txt -> TrackingCookie.Adrevolver : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@adrevolver[3].txt -> TrackingCookie.Adrevolver : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@adrevolver[3].txt -> TrackingCookie.Adrevolver : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@adrevolver[4].txt -> TrackingCookie.Adrevolver : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@adrevolver[7].txt -> TrackingCookie.Adrevolver : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@adrevolver[9].txt -> TrackingCookie.Adrevolver : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Adrevolver : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@adrevolver[2].txt -> TrackingCookie.Adrevolver : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@adrevolver[3].txt -> TrackingCookie.Adrevolver : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Adserver : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][1].txt -> TrackingCookie.Adserver : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Adserver : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Adserver : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Adserver : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][4].txt -> TrackingCookie.Adserver : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Adserver : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][1].txt -> TrackingCookie.Adserver : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@adtech[2].txt -> TrackingCookie.Adtech : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@adtech[3].txt -> TrackingCookie.Adtech : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Adtrak : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@advertising[2].txt -> TrackingCookie.Advertising : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@advertising[2].txt -> TrackingCookie.Advertising : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@advertising[1].txt -> TrackingCookie.Advertising : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@advertising[2].txt -> TrackingCookie.Advertising : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@advertising[3].txt -> TrackingCookie.Advertising : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@advertising[4].txt -> TrackingCookie.Advertising : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Advertising : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@advertising[1].txt -> TrackingCookie.Advertising : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@advertising[2].txt -> TrackingCookie.Advertising : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@atdmt[1].txt -> TrackingCookie.Atdmt : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@atdmt[1].txt -> TrackingCookie.Atdmt : Cleaned. C:\Documents and Settings\LocalService\Cookies\system@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@atdmt[1].txt -> TrackingCookie.Atdmt : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@atdmt[3].txt -> TrackingCookie.Atdmt : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@atdmt[4].txt -> TrackingCookie.Atdmt : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@atdmt[5].txt -> TrackingCookie.Atdmt : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@atdmt[1].txt -> TrackingCookie.Atdmt : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@bfast[1].txt -> TrackingCookie.Bfast : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@bfast[1].txt -> TrackingCookie.Bfast : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@bfast[1].txt -> TrackingCookie.Bfast : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@bfast[3].txt -> TrackingCookie.Bfast : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@bfast[1].txt -> TrackingCookie.Bfast : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@bluestreak[3].txt -> TrackingCookie.Bluestreak : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@bluestreak[4].txt -> TrackingCookie.Bluestreak : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][2].txt -> TrackingCookie.Bridgetrack : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][2].txt -> TrackingCookie.Bridgetrack : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Bridgetrack : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Bridgetrack : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Bridgetrack : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Bridgetrack : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][5].txt -> TrackingCookie.Bridgetrack : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][2].txt -> TrackingCookie.Bridgetrack : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Burstbeacon : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Burstbeacon : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Burstbeacon : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][4].txt -> TrackingCookie.Burstbeacon : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@burstnet[3].txt -> TrackingCookie.Burstnet : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@burstnet[4].txt -> TrackingCookie.Burstnet : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@burstnet[5].txt -> TrackingCookie.Burstnet : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Burstnet : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Burstnet : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Casalemedia : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Casalemedia : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@casalemedia[1].txt -> TrackingCookie.Casalemedia : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@casalemedia[3].txt -> TrackingCookie.Casalemedia : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@casalemedia[4].txt -> TrackingCookie.Casalemedia : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@casalemedia[1].txt -> TrackingCookie.Casalemedia : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@centrport[1].txt -> TrackingCookie.Centrport : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@centrport[1].txt -> TrackingCookie.Centrport : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@centrport[1].txt -> TrackingCookie.Centrport : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@centrport[2].txt -> TrackingCookie.Centrport : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@centrport[1].txt -> TrackingCookie.Centrport : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@clickbank[2].txt -> TrackingCookie.Clickbank : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Clickhype : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Clickzs : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@com[2].txt -> TrackingCookie.Com : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@com[2].txt -> TrackingCookie.Com : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@com[1].txt -> TrackingCookie.Com : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@com[2].txt -> TrackingCookie.Com : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@com[3].txt -> TrackingCookie.Com : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@com[2].txt -> TrackingCookie.Com : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@commission-junction[2].txt -> TrackingCookie.Commission-junction : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@commission-junction[2].txt -> TrackingCookie.Commission-junction : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@commission-junction[1].txt -> TrackingCookie.Commission-junction : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@commission-junction[2].txt -> TrackingCookie.Commission-junction : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@commission-junction[2].txt -> TrackingCookie.Commission-junction : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@connextra[3].txt -> TrackingCookie.Connextra : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Coremetrics : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][1].txt -> TrackingCookie.Coremetrics : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Coremetrics : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][1].txt -> TrackingCookie.Coremetrics : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@cpvfeed[3].txt -> TrackingCookie.Cpvfeed : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@cpvfeed[4].txt -> TrackingCookie.Cpvfeed : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@dealtime[2].txt -> TrackingCookie.Dealtime : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][2].txt -> TrackingCookie.Dealtime : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@dealtime[2].txt -> TrackingCookie.Dealtime : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][2].txt -> TrackingCookie.Dealtime : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@dealtime[2].txt -> TrackingCookie.Dealtime : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Dealtime : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Dealtime : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@dealtime[2].txt -> TrackingCookie.Dealtime : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][2].txt -> TrackingCookie.Dealtime : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned. C:\Documents and Settings\LocalService\Cookies\system@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@doubleclick[2].txt -> TrackingCookie.Doubleclick : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@doubleclick[3].txt -> TrackingCookie.Doubleclick : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@doubleclick[5].txt -> TrackingCookie.Doubleclick : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Enhance : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@estat[1].txt -> TrackingCookie.Estat : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@estat[2].txt -> TrackingCookie.Estat : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Euroclick : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][1].txt -> TrackingCookie.Euroclick : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Euroclick : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Euroclick : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][4].txt -> TrackingCookie.Euroclick : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][5].txt -> TrackingCookie.Euroclick : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Euroclick : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][1].txt -> TrackingCookie.Euroclick : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Falkag : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][1].txt -> TrackingCookie.Falkag : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Falkag : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Falkag : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][4].txt -> TrackingCookie.Falkag : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Falkag : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Falkag : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Falkag : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][4].txt -> TrackingCookie.Falkag : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Falkag : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Falkag : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Falkag : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][1].txt -> TrackingCookie.Falkag : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@fastclick[3].txt -> TrackingCookie.Fastclick : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@fastclick[5].txt -> TrackingCookie.Fastclick : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Fastclick : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned. C:\Documents and Settings\LocalService\Cookies\system@findwhat[1].txt -> TrackingCookie.Findwhat : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@findwhat[1].txt -> TrackingCookie.Findwhat : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@fortunecity[1].txt -> TrackingCookie.Fortunecity : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@fortunecity[2].txt -> TrackingCookie.Fortunecity : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@fortunecity[3].txt -> TrackingCookie.Fortunecity : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@hitbox[3].txt -> TrackingCookie.Hitbox : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][2].txt -> TrackingCookie.Hitslink : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][2].txt -> TrackingCookie.Hitslink : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Hitslink : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Hitslink : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Hitslink : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][2].txt -> TrackingCookie.Hitslink : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Information : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][1].txt -> TrackingCookie.Information : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Information : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Information : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Information : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][4].txt -> TrackingCookie.Information : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][5].txt -> TrackingCookie.Information : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][1].txt -> TrackingCookie.Information : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@ivwbox[1].txt -> TrackingCookie.Ivwbox : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@ivwbox[1].txt -> TrackingCookie.Ivwbox : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@ivwbox[1].txt -> TrackingCookie.Ivwbox : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@ivwbox[1].txt -> TrackingCookie.Ivwbox : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@linksynergy[1].txt -> TrackingCookie.Linksynergy : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@linksynergy[1].txt -> TrackingCookie.Linksynergy : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@linksynergy[1].txt -> TrackingCookie.Linksynergy : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@linksynergy[2].txt -> TrackingCookie.Linksynergy : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@linksynergy[3].txt -> TrackingCookie.Linksynergy : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@linksynergy[1].txt -> TrackingCookie.Linksynergy : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Live : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][2].txt -> TrackingCookie.Liveperson : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][2].txt -> TrackingCookie.Liveperson : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Liveperson : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Liveperson : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Liveperson : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Liveperson : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][4].txt -> TrackingCookie.Liveperson : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][2].txt -> TrackingCookie.Liveperson : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@mediaplex[2].txt -> TrackingCookie.Mediaplex : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@mediaplex[3].txt -> TrackingCookie.Mediaplex : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@mediaplex[5].txt -> TrackingCookie.Mediaplex : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][2].txt -> TrackingCookie.Msn : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][2].txt -> TrackingCookie.Msn : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Msn : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Msn : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][4].txt -> TrackingCookie.Msn : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][5].txt -> TrackingCookie.Msn : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\[removed][2].txt -> TrackingCookie.Msn : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][2].txt -> TrackingCookie.Msn : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][4].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][4].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][6].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@overture[1].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@overture[2].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@overture[3].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][4].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][5].txt -> TrackingCookie.Overture : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@paycounter[1].txt -> TrackingCookie.Paycounter : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Paypal : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Paypal : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Paypal : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@paypopup[1].txt -> TrackingCookie.Paypopup : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@paypopup[1].txt -> TrackingCookie.Paypopup : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@paypopup[1].txt -> TrackingCookie.Paypopup : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@paypopup[1].txt -> TrackingCookie.Paypopup : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Pointroll : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][1].txt -> TrackingCookie.Pointroll : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Pointroll : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Pointroll : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Pointroll : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][4].txt -> TrackingCookie.Pointroll : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][6].txt -> TrackingCookie.Pointroll : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\[removed][2].txt -> TrackingCookie.Pointroll : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][1].txt -> TrackingCookie.Pointroll : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@popuptraffic[2].txt -> TrackingCookie.Popuptraffic : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@pro-market[2].txt -> TrackingCookie.Pro-market : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@qksrv[1].txt -> TrackingCookie.Qksrv : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@questionmarket[3].txt -> TrackingCookie.Questionmarket : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@questionmarket[4].txt -> TrackingCookie.Questionmarket : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@questionmarket[5].txt -> TrackingCookie.Questionmarket : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@real[2].txt -> TrackingCookie.Real : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@realmedia[1].txt -> TrackingCookie.Realmedia : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@realmedia[1].txt -> TrackingCookie.Realmedia : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Realmedia : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Realmedia : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][4].txt -> TrackingCookie.Realmedia : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@realmedia[1].txt -> TrackingCookie.Realmedia : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@realmedia[2].txt -> TrackingCookie.Realmedia : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@realmedia[3].txt -> TrackingCookie.Realmedia : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@realmedia[4].txt -> TrackingCookie.Realmedia : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@realmedia[5].txt -> TrackingCookie.Realmedia : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@realmedia[2].txt -> TrackingCookie.Realmedia : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@realmedia[1].txt -> TrackingCookie.Realmedia : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Realtracker : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Realtracker : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Reliablestats : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Reliablestats : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@revenue[2].txt -> TrackingCookie.Revenue : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@revenue[2].txt -> TrackingCookie.Revenue : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Revenue : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@revenue[1].txt -> TrackingCookie.Revenue : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@revenue[2].txt -> TrackingCookie.Revenue : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@revenue[3].txt -> TrackingCookie.Revenue : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@revenue[4].txt -> TrackingCookie.Revenue : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@revenue[2].txt -> TrackingCookie.Revenue : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@revsci[1].txt -> TrackingCookie.Revsci : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@revsci[2].txt -> TrackingCookie.Revsci : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@revsci[4].txt -> TrackingCookie.Revsci : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@revsci[5].txt -> TrackingCookie.Revsci : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@edge.ru4[2].txt -> TrackingCookie.Ru4 : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@edge.ru4[2].txt -> TrackingCookie.Ru4 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@edge.ru4[1].txt -> TrackingCookie.Ru4 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@edge.ru4[2].txt -> TrackingCookie.Ru4 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@edge.ru4[3].txt -> TrackingCookie.Ru4 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@edge.ru4[4].txt -> TrackingCookie.Ru4 : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@edge.ru4[6].txt -> TrackingCookie.Ru4 : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@edge.ru4[2].txt -> TrackingCookie.Ru4 : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Searchingbooth : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed]-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed]-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed]-sys[3].txt -> TrackingCookie.Serving-sys : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@serving-sys[3].txt -> TrackingCookie.Serving-sys : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@serving-sys[5].txt -> TrackingCookie.Serving-sys : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@serving-sys[6].txt -> TrackingCookie.Serving-sys : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Sexcounter : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@sexlist[1].txt -> TrackingCookie.Sexlist : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Sextracker : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@sextracker[2].txt -> TrackingCookie.Sextracker : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][1].txt -> TrackingCookie.Sextracker : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@sextracker[2].txt -> TrackingCookie.Sextracker : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Sextracker : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Sextracker : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Sextracker : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Sextracker : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@sextracker[2].txt -> TrackingCookie.Sextracker : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@sextracker[3].txt -> TrackingCookie.Sextracker : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][1].txt -> TrackingCookie.Sextracker : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@sextracker[2].txt -> TrackingCookie.Sextracker : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][2].txt -> TrackingCookie.Sidefind : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][2].txt -> TrackingCookie.Sidefind : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Sidefind : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][2].txt -> TrackingCookie.Sidefind : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Specificclick : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Specificclick : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Specificclick : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][5].txt -> TrackingCookie.Specificclick : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@specificclick[1].txt -> TrackingCookie.Specificclick : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@spylog[1].txt -> TrackingCookie.Spylog : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@spylog[2].txt -> TrackingCookie.Spylog : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Starware : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Starware : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@starware[2].txt -> TrackingCookie.Starware : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Starware : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Starware : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@statcounter[2].txt -> TrackingCookie.Statcounter : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@statcounter[3].txt -> TrackingCookie.Statcounter : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@statcounter[5].txt -> TrackingCookie.Statcounter : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][4].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@tacoda[3].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@tacoda[4].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@tacoda[5].txt -> TrackingCookie.Tacoda : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@targetnet[2].txt -> TrackingCookie.Targetnet : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@login.tracking101[1].txt -> TrackingCookie.Tracking101 : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@tradedoubler[3].txt -> TrackingCookie.Tradedoubler : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@tradedoubler[5].txt -> TrackingCookie.Tradedoubler : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@trafficmp[1].txt -> TrackingCookie.Trafficmp : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@trafficmp[1].txt -> TrackingCookie.Trafficmp : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@trafficmp[1].txt -> TrackingCookie.Trafficmp : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@trafficmp[2].txt -> TrackingCookie.Trafficmp : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@trafficmp[3].txt -> TrackingCookie.Trafficmp : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@trafficmp[5].txt -> TrackingCookie.Trafficmp : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@trafficmp[6].txt -> TrackingCookie.Trafficmp : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@trafficmp[2].txt -> TrackingCookie.Trafficmp : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@trafficmp[1].txt -> TrackingCookie.Trafficmp : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@tribalfusion[3].txt -> TrackingCookie.Tribalfusion : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@tribalfusion[4].txt -> TrackingCookie.Tribalfusion : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@tribalfusion[5].txt -> TrackingCookie.Tribalfusion : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][2].txt -> TrackingCookie.Valuead : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Valuead : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][4].txt -> TrackingCookie.Valuead : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@valueclick[2].txt -> TrackingCookie.Valueclick : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@valueclick[2].txt -> TrackingCookie.Valueclick : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@valueclick[1].txt -> TrackingCookie.Valueclick : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@valueclick[2].txt -> TrackingCookie.Valueclick : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@valueclick[2].txt -> TrackingCookie.Valueclick : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@valueclick[2].txt -> TrackingCookie.Valueclick : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@web-stat[2].txt -> TrackingCookie.Web-stat : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Webtrends : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Webtrendslive : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][1].txt -> TrackingCookie.Webtrendslive : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Webtrendslive : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Webtrendslive : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][4].txt -> TrackingCookie.Webtrendslive : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][1].txt -> TrackingCookie.Webtrendslive : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@xxxcounter[1].txt -> TrackingCookie.Xxxcounter : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@xxxcounter[1].txt -> TrackingCookie.Xxxcounter : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@xxxcounter[1].txt -> TrackingCookie.Xxxcounter : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@xxxcounter[1].txt -> TrackingCookie.Xxxcounter : Cleaned. C:\Documents and Settings\Administrator\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\Documents and Settings\Default User\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][3].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][4].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\Documents and Settings\Owner\Cookies\[removed][5].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@yieldmanager[4].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\[removed][1].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@ysbweb[1].txt -> TrackingCookie.Ysbweb : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@ysbweb[1].txt -> TrackingCookie.Ysbweb : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@ysbweb[1].txt -> TrackingCookie.Ysbweb : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@ysbweb[1].txt -> TrackingCookie.Ysbweb : Cleaned. C:\Documents and Settings\Administrator\Cookies\owner@zedo[2].txt -> TrackingCookie.Zedo : Cleaned. C:\Documents and Settings\Default User\Cookies\owner@zedo[2].txt -> TrackingCookie.Zedo : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@zedo[2].txt -> TrackingCookie.Zedo : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@zedo[3].txt -> TrackingCookie.Zedo : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@zedo[4].txt -> TrackingCookie.Zedo : Cleaned. C:\Documents and Settings\Owner\Cookies\owner@zedo[5].txt -> TrackingCookie.Zedo : Cleaned. C:\Documents and Settings\Owner\Local Settings\Temp\Cookies\owner@zedo[2].txt -> TrackingCookie.Zedo : Cleaned. C:\WINDOWS\system32\config\systemprofile\Cookies\owner@zedo[2].txt -> TrackingCookie.Zedo : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP54\A0028825.exe -> Trojan.LipGame.c : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP59\A0029811.exe -> Trojan.PurityAd : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP46\A0017434.dll -> Trojan.Rond : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP46\A0017435.exe -> Trojan.Rond : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP46\A0017436.exe -> Trojan.Rond : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP54\A0028768.exe -> Trojan.Rond : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP54\A0028769.dll -> Trojan.Rond : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP54\A0028770.exe -> Trojan.Rond : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP47\A0018439.vbs -> Trojan.Small : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP55\A0028833.exe -> Trojan.Small : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP56\A0028839.exe -> Trojan.Small : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP59\A0029813.exe -> Trojan.Small : Cleaned. C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP83\A0042185.vbs -> Trojan.Small : Cleaned. ::Report end
The Kaspersky online scanner window was accidentally closed so I'm running it again. Too bad it takes forever. Even though AVG says it's cleaned most of the problems, the ad windows keep popping open. I'll get you the log hopefully tonight.
——————————————————————————- KASPERSKY ONLINE SCANNER REPORT Sunday, June 24, 2007 1:56:46 AM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.93.0 Kaspersky Anti-Virus database last update: 24/06/2007 Kaspersky Anti-Virus database records: 351540 ——————————————————————————- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: A:\ C:\ D:\ E:\ Scan Statistics: Total number of scanned objects: 127667 Number of viruses found: 11 Number of infected objects: 40 Number of suspicious objects: 0 Duration of the scan process: 07:16:20 Infected Object Name / Virus Name / Last Action C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Broderbund Software\Print\Business Card Creator\PMWPRINT.INI Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\Owner\Application Data\Opera\Opera\profile\cache4\temporary_download\SmitfraudFix.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\Documents and Settings\Owner\Application Data\Opera\Opera\profile\cache4\temporary_download\SmitfraudFix.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\Documents and Settings\Owner\Application Data\Opera\Opera\profile\cache4\temporary_download\SmitfraudFix.exe RarSFX: infected - 2 skipped C:\Documents and Settings\Owner\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Owner\Local Settings\Application Data\AOL OCP\AIM\Storage\All Users\localStorage\common.cls Object is locked skipped C:\Documents and Settings\Owner\Local Settings\Application Data\AOL OCP\AIM\Storage\data\mandiromance\localStorage\common.cls Object is locked skipped C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Owner\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Owner\Local Settings\Temp\Perflib_Perfdata_960.dat Object is locked skipped C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Owner\NTUSER.DAT Object is locked skipped C:\Documents and Settings\Owner\ntuser.dat.LOG Object is locked skipped C:\hp\bin\KillWind.exe Infected: not-a-virus:RiskTool.Win32.PsKill.p skipped C:\Program Files\HP\hpcoretech\hpcmerr.log Object is locked skipped C:\Program Files\Sofeting\ace.dll Infected: Trojan.Win32.Crypt.t skipped C:\Program Files\Sofeting\distmadm.exe Infected: Trojan.Win32.Crypt.t skipped C:\Program Files\Sofeting\hneomuid.exe Infected: Trojan.Win32.Crypt.t skipped C:\Program Files\Sofeting\WinGenerics.dll Infected: Trojan.Win32.Crypt.t skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP82\A0041962.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP82\A0041971.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP82\A0041971.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP82\A0041971.exe RarSFX: infected - 2 skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP82\A0041972.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP82\A0041972.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP82\A0041972.exe RarSFX: infected - 2 skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042369.exe/stream/data0002/data0002 Infected: Trojan-Downloader.Win32.PurityScan.eh skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042369.exe/stream/data0002 Infected: Trojan-Downloader.Win32.PurityScan.eh skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042369.exe/stream/data0004 Infected: not-a-virus:AdWare.Win32.Softomate.u skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042369.exe/stream Infected: not-a-virus:AdWare.Win32.Softomate.u skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042369.exe NSIS: infected - 4 skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042370.exe/stream/data0002 Infected: Trojan-Downloader.Win32.TSUpdate.o skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042370.exe/stream/data0004 Infected: not-a-virus:AdWare.Win32.Softomate.u skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042370.exe/stream Infected: not-a-virus:AdWare.Win32.Softomate.u skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042370.exe NSIS: infected - 3 skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042371.exe/stream/data0002 Infected: Trojan-Downloader.Win32.Small.buy skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042371.exe/stream/data0004 Infected: not-a-virus:AdWare.Win32.Softomate.u skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042371.exe/stream Infected: not-a-virus:AdWare.Win32.Softomate.u skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042371.exe NSIS: infected - 3 skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042372.exe/data0002 Infected: not-a-virus:AdWare.Win32.PurityScan.fk skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042372.exe/data0003 Infected: not-a-virus:AdWare.Win32.PurityScan.bu skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042372.exe NSIS: infected - 2 skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042373.exe/stream/data0002 Infected: not-a-virus:AdWare.Win32.WebHancer.390 skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042373.exe/stream/data0005 Infected: not-a-virus:AdWare.Win32.WebHancer.390 skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042373.exe/stream/data0006 Infected: not-a-virus:AdWare.Win32.WebHancer.390 skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042373.exe/stream/data0008 Infected: not-a-virus:AdWare.Win32.Softomate.u skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042373.exe/stream Infected: not-a-virus:AdWare.Win32.Softomate.u skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP85\A0042373.exe NSIS: infected - 5 skipped C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP86\change.log Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\EventCache\{59E0822B-9B49-4CAD-BA37-EFC22942E97C}.bin Object is locked skipped C:\WINDOWS\SoftwareDistribution\EventCache\{64D7B1A0-49DF-4C82-BDD9-47337B0F1693}.bin Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\Internet.evt Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\drivers\core.cache.dsk Object is locked skipped C:\WINDOWS\system32\drivers\core.sys Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\whCC-GIANT.exe/data.rar/WhAgent.exe Infected: not-a-virus:AdWare.Win32.WebHancer.351 skipped C:\WINDOWS\whCC-GIANT.exe/data.rar Infected: not-a-virus:AdWare.Win32.WebHancer.351 skipped C:\WINDOWS\whCC-GIANT.exe RarSFX: infected - 2 skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped Scan process completed.
Logfile of HijackThis v1.99.1
Scan saved at 7:00:29 PM, on 6/24/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Real\Update_OB\rnathchk.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\program files\slide\slide.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\PROGRA~1\Grisoft\AVG7\avgw.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\Owner\Desktop\hj\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AutoTKit] C:\hp\bin\AUTOTKIT.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\Hewlett-Packard\Digital Imaging\bin\backupnotify.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [slide.exe] c:\program files\slide\slide.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photos.walmart.com/WalmartActivia.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1181178933906
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1181178636140
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: OPXPGina - C:\Program Files\Softex\OmniPass\opxpgina.dll
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv.exe
  • Please download AproposFix
  • Save it to your desktop but do NOT run it yet.
    • NOW
    • Please reboot your computer in Safe Mode by doing the following.
      • Restart your computer
      • After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
      • Instead of Windows loading as normal, a menu should appear
      • Select the first option, to run Windows in Safe Mode.
    • Once in Safe Mode
      • Double-click aproposfix.exe and unzip it to your Desktop.
      • Open the aproposfix folder on your desktop and run RunThis.bat
      • Follow the prompts.
  • When the tool is finished, please reboot back into normal mode
Download OTMoveIt by OldTimer to your Desktop.
  • Double click OTMoveIt.exe to launch it.
  • Copy/Paste the contents of the box below into the left hand pane of OTMoveIt.

C:\Program Files\Sofeting
C:\WINDOWS\whCC-GIANT.exe

  • Click the Move It button.
  • The list will be processed and the results will appear in the right hand pane.
  • If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.
  • When finished click Exit to exit the programme.
  • A log C:\_OTMoveIt\MovedFiles\mmddyyyy_hhmmss.log will be created (where mmddyyyy_hhmmss are numbers giving date and time the log was created).
  • Post the log back here please.
Now run a further Kaspersky scan, and send me the log, along with the OTMoveIt log and a new HJT log please.

IMPORTANT
  • It is unclear from your log whether or not you have a firewall installed.
  • If you have one running, please disregard this.
  • If it is disabled, please enable it.
  • If you are using the firewall that comes with Windows, or Service Pack 2, you should replace it. It doesn't monitor outgoing traffic, so anything on your computer can 'phone home' at will.
Below is a list of some free firewalls (in no order of preference).It is important to note that you should only have one firewall installed at a time, but you can download to your Desktop and install each in turn to see which one you prefer.
C:\Program Files\Sofeting\Cache moved successfully. C:\Program Files\Sofeting moved successfully. C:\WINDOWS\whCC-GIANT.exe moved successfully. Created on 06/25/2007 21:21:09

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI