|
|
|
|
|||||
|
|
|
|
|
|
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
| Resolved HJT Threads Resolved spyware and popup issues. |
|
|
LinkBack | Thread Tools |
02-27-2006, 11:28 PM
|
#1 (permalink) |
|
Registered User
Join Date: Feb 2005
Posts: 16
OS: XP
|
Nowfind.net Hijack - Please Help!
Below you will find my Hijackthis log file. Look forward to your assistance.
Logfile of HijackThis v1.99.1 Scan saved at 11:20:01 PM, on 2/27/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\AGRSMMSG.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe C:\Program Files\Handspring\Hotsync.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZENG10.exe C:\Documents and Settings\Denise Potvin\Desktop\Problem programs\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.nowfind.net/009/index.html R1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nowfind.net/009/index.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nowfind.net/009/index.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nowfind.net/009/index.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nowfind.net/009/index.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.nowfind.net/009/index.html R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.nowfind.net/009/index.html R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.nowfind.net/009/index.html N3 - Netscape 7: user_pref("browser.startup.homepage", "www.yahoo.com"); (C:\Documents and Settings\Denise Potvin\Application Data\Mozilla\Profiles\default\kevfz1b1.slt\prefs.js) N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Denise Potvin\Application Data\Mozilla\Profiles\default\kevfz1b1.slt\prefs.js) O1 - Hosts: auto.search.msn.com 127.0.0.1 O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [VAIO Recovery] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" O4 - Startup: HotSync Manager.LNK = C:\Program Files\Handspring\Hotsync.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: HotSync Manager.lnk = C:\Program Files\Handspring\Hotsync.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O13 - DefaultPrefix: http://nowfind.net/rand/gallery.php?url= O13 - WWW Prefix: http://nowfind.net/rand/gallery.php?url= O13 - Home Prefix: http://nowfind.net/rand/gallery.php?url= O13 - Mosaic Prefix: http://nowfind.net/rand/gallery.php?url= O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople O20 - Winlogon Notify: iexplore - C:\WINDOWS\ O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe O23 - Service: VAIO Media Music Server (VAIOMediaPlatform-MusicServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Music\SSSvr.exe" /Service=VAIOMediaPlatform-MusicServer-AppServer /DisplayName="VAIO Media Music Server (file missing) O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-MusicServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\MusicServer\HTTP (file missing) O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe O23 - Service: VAIO Media Photo Server (VAIOMediaPlatform-PhotoServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Photo\appsrv\PhotoAppSrv.exe O23 - Service: VAIO Media Photo Server (HTTP) (VAIOMediaPlatform-PhotoServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-PhotoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\PhotoServer\HTTP (file missing) O23 - Service: VAIO Media Photo Server (UPnP) (VAIOMediaPlatform-PhotoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe O23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Video\GPVSvr.exe" /Service=VAIOMediaPlatform-VideoServer-AppServer /DisplayName="VAIO Media Video Server (file missing) O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-VideoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\VideoServer\HTTP (file missing) O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe |
|
     |
| Sponsored Links |
|
02-28-2006, 04:07 AM
|
#2 (permalink) |
|
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
Join Date: May 2005
Posts: 23,238
OS: N/A
|
Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted.
Please read this post completely before begining the fix. If there's anything that you do not understand, kindly ask your questions before proceeding. Please ensure that there aren't any any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix. * * * * * * ADDITIONAL DOWNLOADS * * * * * * * * * * * * * * Download & install CleanUp.exe (not recommended for WinXP64) Download - CWShredder.exe
Download and install Ewido Security Suite
'UNPLUG'/DISCONNECT your computer from the Internet when you have finished downloading. It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence. * * * * * * FIXING ENTRIES WITH HIJACKTHIS * * * * * * * * * * Do a HijackThis scan & place a check next to these items and select "Fix checked": R1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.nowfind.net/009/index.html R1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nowfind.net/009/index.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nowfind.net/009/index.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nowfind.net/009/index.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nowfind.net/009/index.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.nowfind.net/009/index.html R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.nowfind.net/009/index.html R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.nowfind.net/009/index.html O1 - Hosts: auto.search.msn.com 127.0.0.1 O13 - DefaultPrefix: http://nowfind.net/rand/gallery.php?url= O13 - WWW Prefix: http://nowfind.net/rand/gallery.php?url= O13 - Home Prefix: http://nowfind.net/rand/gallery.php?url= O13 - Mosaic Prefix: http://nowfind.net/rand/gallery.php?url= O20 - Winlogon Notify: iexplore - C:\WINDOWS\ * * * * * * RESTART WINDOWS IN SAFE MODE * * * * * * * * * * 1. Restart your computer 2. After hearing your computer beep once during startup, but before the Windows icon appears, press F8. 3. Instead of Windows loading as normal, a menu should appear 4. Select the option to run Windows in Safe Mode. * * * * * * PURGING TEMP FOLDERS * * * * * * * * * * * * * * * Run Cleanup! using the following configuration: 1. Click Options... 2. Set the slider initially to Standard CleanUp! 3. Uncheck the following:
5. Press the CleanUp! button to start the program. 6. Do NOT reboot/logoff if prompted. * CleanUp! will not create any backups!! * * * * * * RUNNING ADDITIONAL SCANNERS * * * * * * * * * * * Run CWShredder & click on Fix. * * * * * * Run Ewido with it's updated definitions:(...it's important that all windows must be closed)
** Ewido scan would require at least an hour. I suggest that you go grab a cup of coffee & do something else while you wait for it to complete. * * * * * * REBOOT TO NORMAL MODE * * * * * * * * * * * * * * Establish an internet connection & perform an online scan with Internet Explorer at Kaspersky Online Scanner Answer Yes, when prompted to install an ActiveX component.
* * * * * * CHECK LIST * * * * * * * * * * * * * * * * * * * * * In your next post, please include fresh logs from:
__________________
|
|
|
|
|
03-01-2006, 08:56 PM
|
#3 (permalink) |
|
Registered User
Join Date: Feb 2005
Posts: 16
OS: XP
|
Latest Nowfind update
Here is the update. I seem to still have the problem I look forward to more of your wisdom.
Logfile of HijackThis v1.99.1 Scan saved at 11:39:01 PM, on 2/28/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\ewido anti-malware\ewidoctrl.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Handspring\Hotsync.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe C:\Documents and Settings\Denise Potvin\Desktop\Problem programs\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.nowfind.net/009/index.html R1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nowfind.net/009/index.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://nowfind.net/rand/gallery.php?url=www.google.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nowfind.net/009/index.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nowfind.net/009/index.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.nowfind.net/009/index.html R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.nowfind.net/009/index.html R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.nowfind.net/009/index.html N3 - Netscape 7: user_pref("browser.startup.homepage", "www.yahoo.com"); (C:\Documents and Settings\Denise Potvin\Application Data\Mozilla\Profiles\default\kevfz1b1.slt\prefs.js) N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Denise Potvin\Application Data\Mozilla\Profiles\default\kevfz1b1.slt\prefs.js) O1 - Hosts: auto.search.msn.com 127.0.0.1 O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [VAIO Recovery] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" O4 - Startup: HotSync Manager.LNK = C:\Program Files\Handspring\Hotsync.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: HotSync Manager.lnk = C:\Program Files\Handspring\Hotsync.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O13 - DefaultPrefix: http://nowfind.net/rand/gallery.php?url= O13 - WWW Prefix: http://nowfind.net/rand/gallery.php?url= O13 - Home Prefix: http://nowfind.net/rand/gallery.php?url= O13 - Mosaic Prefix: http://nowfind.net/rand/gallery.php?url= O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/k...an_unicode.cab O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe O23 - Service: VAIO Media Music Server (VAIOMediaPlatform-MusicServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Music\SSSvr.exe" /Service=VAIOMediaPlatform-MusicServer-AppServer /DisplayName="VAIO Media Music Server (file missing) O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-MusicServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\MusicServer\HTTP (file missing) O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe O23 - Service: VAIO Media Photo Server (VAIOMediaPlatform-PhotoServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Photo\appsrv\PhotoAppSrv.exe O23 - Service: VAIO Media Photo Server (HTTP) (VAIOMediaPlatform-PhotoServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-PhotoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\PhotoServer\HTTP (file missing) O23 - Service: VAIO Media Photo Server (UPnP) (VAIOMediaPlatform-PhotoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe O23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Video\GPVSvr.exe" /Service=VAIOMediaPlatform-VideoServer-AppServer /DisplayName="VAIO Media Video Server (file missing) O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-VideoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\VideoServer\HTTP (file missing) O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe --------------------------------------------------------- ewido anti-malware - Scan report --------------------------------------------------------- + Created on: 10:26:47 PM, 2/28/2006 + Report-Checksum: 5533A4E6 + Scan result: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\ins -> Adware.WebRebates : Cleaned with backup [1096] C:\WINDOWS\system32\mtwirl.dll -> Hijacker.StartPage.mz : Cleaned with backup C:\backups\backup-20041231-164423-676.dll -> Adware.Relevance : Cleaned with backup C:\backups\backup-20050220-224421-725.dll -> Trojan.Dialer.bi : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B1A.tmp -> TrackingCookie.2o7 : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B1B.tmp -> TrackingCookie.2o7 : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B1F.tmp -> TrackingCookie.Casalemedia : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B20.tmp -> TrackingCookie.Casalemedia : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B21.tmp -> TrackingCookie.Centrport : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B22.tmp -> TrackingCookie.Centrport : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B27.tmp -> TrackingCookie.Ru4 : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B28.tmp -> TrackingCookie.Fastclick : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B29.tmp -> TrackingCookie.Fastclick : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B2A.tmp -> TrackingCookie.Gator : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B2B.tmp -> TrackingCookie.Gator : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B2F.tmp -> TrackingCookie.Paycounter : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B30.tmp -> TrackingCookie.Questionmarket : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B31.tmp -> TrackingCookie.Questionmarket : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B32.tmp -> TrackingCookie.Revenue : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B33.tmp -> TrackingCookie.Revenue : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B34.tmp -> TrackingCookie.Serving-sys : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B35.tmp -> TrackingCookie.Serving-sys : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B36.tmp -> TrackingCookie.Trafficmp : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B37.tmp -> TrackingCookie.Trafficmp : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B38.tmp -> TrackingCookie.Shopathomeselect : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B39.tmp -> TrackingCookie.Xxxcounter : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1B3A.tmp -> TrackingCookie.Adserver : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1C63.tmp -> Downloader.Dyfuca.ds : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1C66.tmp -> Downloader.Dyfuca.dp : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1C68.tmp -> Downloader.TSUpdate.f : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1D16.tmp -> TrackingCookie.247realmedia : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1D19.tmp -> TrackingCookie.Com : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1D1B.tmp -> TrackingCookie.Euniverseads : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1D1C.tmp -> TrackingCookie.Hypertracker : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1D1F.tmp -> TrackingCookie.Qksrv : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1D21.tmp -> TrackingCookie.Specificclick : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1D22.tmp -> TrackingCookie.Spylog : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1D23.tmp -> TrackingCookie.Statcounter : Cleaned with backup C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1D26.tmp -> TrackingCookie.Zedo : Cleaned with backup :mozilla.7:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup :mozilla.8:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup :mozilla.10:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup :mozilla.11:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup :mozilla.16:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup :mozilla.18:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.32:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.33:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.34:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.35:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.36:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.37:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.38:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.39:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.40:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.41:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.42:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.43:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.44:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.45:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.46:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.47:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.48:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.49:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.50:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.51:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.52:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.53:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.54:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.55:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.56:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.57:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.58:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.59:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.60:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.61:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.62:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.63:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.64:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.65:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.66:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.67:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.68:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.69:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.70:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.71:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.72:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.73:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.74:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.75:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.76:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.77:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.78:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.79:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.80:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.81:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.82:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.83:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.84:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.85:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.86:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.89:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.91:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Realtracker : Cleaned with backup :mozilla.93:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Realtracker : Cleaned with backup :mozilla.95:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Linksynergy : Cleaned with backup :mozilla.96:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Linksynergy : Cleaned with backup :mozilla.108:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.109:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.110:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.111:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.112:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.113:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.114:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.115:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.116:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.117:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.120:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup :mozilla.121:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup :mozilla.122:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup :mozilla.140:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.147:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned with backup :mozilla.154:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup :mozilla.163:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup :mozilla.170:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.171:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.172:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.173:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.175:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.176:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.177:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.178:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.192:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.193:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.195:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.196:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.211:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.212:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.213:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.222:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.226:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.227:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.229:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.242:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.246:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.250:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.251:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.252:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.253:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.254:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.277:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.353:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.354:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.355:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.356:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.360:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.361:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.363:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.364:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.365:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.366:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.367:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.368:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.369:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.370:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.371:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.372:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.375:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.376:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.404:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned with backup :mozilla.405:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned with backup :mozilla.410:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup :mozilla.413:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup :mozilla.461:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.462:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.468:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.469:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.470:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.471:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.472:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.473:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.476:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.477:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.478:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.479:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.480:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.481:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.482:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.524:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.526:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup :mozilla.527:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup :mozilla.539:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.540:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.553:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup :mozilla.566:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.575:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.576:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.579:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.597:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.600:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.609:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.616:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned with backup :mozilla.622:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.629:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.632:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.681:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.682:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.683:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.684:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.685:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.686:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.687:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.688:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.689:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.690:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.691:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.709:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.714:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.715:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.716:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.717:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.725:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup :mozilla.726:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup :mozilla.729:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.734:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup :mozilla.739:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup :mozilla.753:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Centrport : Cleaned with backup :mozilla.754:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Centrport : Cleaned with backup :mozilla.755:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Centrport : Cleaned with backup :mozilla.758:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.779:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.780:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.781:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.784:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup :mozilla.785:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup :mozilla.787:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.788:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.789:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.790:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.791:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.792:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.793:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.798:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.799:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.803:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup :mozilla.813:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.814:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.815:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned with backup :mozilla.819:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.820:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.821:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.822:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.823:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.827:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.839:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup :mozilla.840:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup :mozilla.841:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup :mozilla.842:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned with backup :mozilla.860:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.861:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.862:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.870:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.871:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.873:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.877:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned with backup :mozilla.891:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Findwhat : Cleaned with backup :mozilla.895:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.899:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.933:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.934:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.948:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.950:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.953:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.955:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.956:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.957:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.958:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.959:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.960:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.961:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.962:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.963:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.964:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.965:C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.48:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.51:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup :mozilla.52:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup :mozilla.53:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup :mozilla.54:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.55:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.56:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.57:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.58:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.59:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.60:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.61:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.62:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.63:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.64:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.65:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.66:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.67:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.68:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.69:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.70:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.71:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.72:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.73:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.74:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.75:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.76:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.77:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.78:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.80:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.81:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.82:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.83:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.84:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.85:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.86:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.90:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.91:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.92:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.93:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.94:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.95:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.96:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.97:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.107:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.108:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.109:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.139:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.152:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.187:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.188:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.189:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.190:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.191:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.192:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.196:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup :mozilla.197:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup :mozilla.209:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.210:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.211:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.212:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.218:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Paycounter : Cleaned with backup :mozilla.227:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup :mozilla.234:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned with backup :mozilla.235:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup :mozilla.236:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.237:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.241:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Trafic : Cleaned with backup :mozilla.242:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup :mozilla.243:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup :mozilla.253:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.265:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Hypertracker : Cleaned with backup :mozilla.269:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup :mozilla.270:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.271:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.272:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.273:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.274:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.287:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.288:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.289:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.296:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.305:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup :mozilla.306:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup :mozilla.308:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Centrport : Cleaned with backup :mozilla.309:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Centrport : Cleaned with backup :mozilla.325:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned with backup :mozilla.327:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup :mozilla.336:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup :mozilla.337:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup :mozilla.338:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup :mozilla.339:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup :mozilla.340:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup :mozilla.341:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup :mozilla.343:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Sexlist : Cleaned with backup :mozilla.344:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Sexlist : Cleaned with backup :mozilla.345:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Sexlist : Cleaned with backup :mozilla.346:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Sexlist : Cleaned with backup :mozilla.352:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.353:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.354:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.355:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.356:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.363:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup :mozilla.364:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup :mozilla.366:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Kmpads : Cleaned with backup :mozilla.367:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Kmpads : Cleaned with backup :mozilla.368:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.369:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.370:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.371:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.372:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.373:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.379:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.380:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.381:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.382:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.394:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.397:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.398:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.399:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.400:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.409:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned with backup :mozilla.436:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup :mozilla.437:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup :mozilla.440:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup :mozilla.441:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup :mozilla.442:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup :mozilla.443:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup :mozilla.444:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup :mozilla.445:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup :mozilla.446:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup :mozilla.447:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup :mozilla.449:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup :mozilla.450:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup :mozilla.453:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned with backup :mozilla.460:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup :mozilla.461:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup :mozilla.462:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup :mozilla.463:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup :mozilla.465:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.471:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.474:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.475:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.490:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup :mozilla.491:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Pro-market : Cleaned with backup :mozilla.507:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Bfast : Cleaned with backup :mozilla.514:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.515:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.516:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.517:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.518:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.519:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.522:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.523:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.534:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Linksynergy : Cleaned with backup :mozilla.535:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Linksynergy : Cleaned with backup :mozilla.546:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.569:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.580:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.589:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.636:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.637:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.638:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.639:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.640:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.641:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.642:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.643:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.644:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.645:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.646:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.647:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.648:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup :mozilla.653:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup :mozilla.688:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.689:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.690:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.698:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.702:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.9:C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Profiles\default\xk9ly8am.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup C:\Documents and Settings\Paul Potvin\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\SecurityClassLoader.class-42aa640a-67e38092.class -> Hijacker.Spywad.b : Cleaned with backup C:\Program Files\Common Files\System\MSMAPI\1033\mtrslib2.js -> Downloader.Small.ag : Cleaned with backup C:\WINDOWS\system32\mtrslib2.js -> Downloader.Small.ag : Cleaned with backup C:\WINDOWS\system32\mtwirl.dll -> Hijacker.StartPage.mz : Cleaned with backup C:\WINDOWS\system32\tmpf0:.exe -> Hijacker.Small.du : Cleaned with backup C:\WINDOWS\system32\tmpf03.exe -> Hijacker.Small.du : Cleaned with backup C:\WINDOWS\system32\tmpf04.exe -> Downloader.Small.agk : Cleaned with backup C:\WINDOWS\system32\tmpf05.exe -> Downloader.Small.agk : Cleaned with backup C:\WINDOWS\system32\tmpf06.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup C:\WINDOWS\system32\tmpf1:.exe -> Dropper.Small.qo : Cleaned with backup C:\WINDOWS\system32\tmpf10.exe -> Downloader.Small.agk : Cleaned with backup C:\WINDOWS\system32\tmpf11.exe -> Downloader.Small.agk : Cleaned with backup C:\WINDOWS\system32\tmpf12.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup C:\WINDOWS\system32\tmpf16.exe -> Hijacker.Small.du : Cleaned with backup C:\WINDOWS\system32\tmpf17.exe -> Downloader.Small.agk : Cleaned with backup C:\WINDOWS\system32\tmpf18.exe -> Downloader.Small.agk : Cleaned with backup C:\WINDOWS\system32\tmpf19.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup C:\WINDOWS\system32\tmpf2:.exe -> Downloader.Small.agk : Cleaned with backup C:\WINDOWS\system32\tmpf22.exe -> Hijacker.Small.du : Cleaned with backup C:\WINDOWS\system32\tmpf23.exe -> Downloader.Small.agk : Cleaned with backup C:\WINDOWS\system32\tmpf24.exe -> Downloader.Small.agk : Cleaned with backup C:\WINDOWS\system32\tmpf25.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup C:\WINDOWS\system32\tmpf29.exe -> Hijacker.Small.du : Cleaned with backup C:\WINDOWS\system32\tmpf3:.exe -> Adware.WinAD : Cleaned with backup C:\WINDOWS\system32\tmpf30.exe -> Downloader.Small.agk : Cleaned with backup C:\WINDOWS\system32\tmpf31.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup C:\WINDOWS\system32\tmpf35.exe -> Hijacker.Small.du : Cleaned with backup C:\WINDOWS\system32\tmpf36.exe -> Downloader.Small.agk : Cleaned with backup C:\WINDOWS\system32\tmpf37.exe -> Downloader.Small.agk : Cleaned with backup C:\WINDOWS\system32\tmpf38.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup C:\WINDOWS\system32\tmpf4:.exe -> Downloader.Small.agk : Cleaned with backup C:\WINDOWS\system32\tmpf41.exe -> Hijacker.Small.du : Cleaned with backup C:\WINDOWS\system32\tmpf42.exe -> Downloader.Small.agk : Cleaned with backup C:\WINDOWS\system32\tmpf43.exe -> Downloader.Small.agk : Cleaned with backup C:\WINDOWS\system32\tmpf44.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup C:\WINDOWS\system32\tmpf48.exe -> Hijacker.Small.du : Cleaned with backup C:\WINDOWS\system32\tmpf49.exe -> Downloader.Small.agk : Cleaned with backup C:\WINDOWS\system32\tmpf50.exe -> Not-A-Virus.PornDownloader.Win32.TibSystems : Cleaned with backup ::Report End |
|
|
|
|
03-01-2006, 08:58 PM
|
#4 (permalink) |
|
Registered User
Join Date: Feb 2005
Posts: 16
OS: XP
|
Latest Post Part2
Here is the virus scan, it did not fit on the last post.
------------------------------------------------------------------------------- KASPERSKY ON-LINE SCANNER REPORT Tuesday, February 28, 2006 23:37:34 Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky On-line Scanner version: 5.0.67.0 Kaspersky Anti-Virus database last update: 1/03/2006 Kaspersky Anti-Virus database records: 179360 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: A:\ C:\ D:\ E:\ F:\ G:\ Scan Statistics: Total number of scanned objects: 79699 Number of viruses found: 18 Number of infected objects: 53 Number of suspicious objects: 6 Duration of the scan process: 3307 sec Infected Object Name - Virus Name C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1C12.tmp Infected: Trojan-Downloader.Win32.Dluca.gen C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq1CFC.tmp Infected: Trojan-Downloader.Win32.Dyfuca.ck C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DyFuCAInternetOptimizer10.zip/install.exe Suspicious: Password-protected-EXE C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DyFuCAInternetOptimizer10.zip Suspicious: Password-protected-EXE C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DyFuCAInternetOptimizer3.zip/optimize.exe Suspicious: Password-protected-EXE C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DyFuCAInternetOptimizer3.zip Suspicious: Password-protected-EXE C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy1.zip/msexreg.exe Suspicious: Password-protected-EXE C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eXactAdvertisingBargainsBuddy1.zip Suspicious: Password-protected-EXE C:\Documents and Settings\Paul Potvin\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-2fa9f21f-1b31a70d.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c C:\Documents and Settings\Paul Potvin\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-2fa9f21f-1b31a70d.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify C:\Documents and Settings\Paul Potvin\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-2fa9f21f-1b31a70d.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a C:\Documents and Settings\Paul Potvin\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-2fa9f21f-1b31a70d.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v C:\Documents and Settings\Paul Potvin\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-2fa9f21f-1b31a70d.zip Infected: Trojan-Downloader.Java.OpenConnection.v C:\Documents and Settings\Paul Potvin\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\count.jar-1101e5-5ed269c0.zip/BlackBox.class Infected: Exploit.Java.ByteVerify C:\Documents and Settings\Paul Potvin\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\count.jar-1101e5-5ed269c0.zip/VerifierBug.class Infected: Exploit.Java.ByteVerify C:\Documents and Settings\Paul Potvin\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\count.jar-1101e5-5ed269c0.zip/Beyond.class Infected: Trojan-Downloader.Java.OpenConnection.aa C:\Documents and Settings\Paul Potvin\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\count.jar-1101e5-5ed269c0.zip Infected: Trojan-Downloader.Java.OpenConnection.aa C:\Program Files\Common Files\System\MSMAPI\1033\a679a0.js Infected: Trojan-Downloader.JS.Small.af C:\Program Files\Common Files\System\MSMAPI\1033\as Infected: Trojan-Clicker.JS.Linker.j C:\Program Files\Common Files\System\MSMAPI\1033\bad Infected: Trojan-Clicker.JS.Linker.m C:\Program Files\Yahoo!\YPSR(2)\Quarantine(2)\ppqE.tmp Infected: Trojan-Downloader.Win32.Dluca.gen C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP277\A0017298.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.c C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP277\A0017299.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.c C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP277\A0017301.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.c C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017681.dll Infected: not-a-virus:AdWare.Win32.Relevance.b C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017682.dll Infected: Trojan.Win32.Dialer.bi C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017683.exe Infected: Trojan-Clicker.Win32.Small.du C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017684.exe Infected: Trojan-Downloader.Win32.Small.agk C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017685.exe Infected: Trojan-Downloader.Win32.Small.agk C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017686.exe Infected: not-a-virus:Porn-Downloader.Win32.TibSystems C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017687.exe Infected: Trojan-Downloader.Win32.Small.agk C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017688.exe Infected: Trojan-Downloader.Win32.Small.agk C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017689.exe Infected: not-a-virus:Porn-Downloader.Win32.TibSystems C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017690.exe Infected: Trojan-Clicker.Win32.Small.du C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017691.exe Infected: Trojan-Downloader.Win32.Small.agk C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017692.exe Infected: Trojan-Downloader.Win32.Small.agk C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017693.exe Infected: not-a-virus:Porn-Downloader.Win32.TibSystems C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017694.exe Infected: Trojan-Clicker.Win32.Small.du C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017695.exe Infected: Trojan-Downloader.Win32.Small.agk C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017696.exe Infected: Trojan-Downloader.Win32.Small.agk C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017697.exe Infected: not-a-virus:Porn-Downloader.Win32.TibSystems C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017698.exe Infected: Trojan-Clicker.Win32.Small.du C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017699.exe Infected: Trojan-Downloader.Win32.Small.agk C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017700.exe Infected: not-a-virus:Porn-Downloader.Win32.TibSystems C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017701.exe Infected: Trojan-Clicker.Win32.Small.du C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017702.exe Infected: Trojan-Downloader.Win32.Small.agk C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017703.exe Infected: Trojan-Downloader.Win32.Small.agk C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017704.exe Infected: not-a-virus:Porn-Downloader.Win32.TibSystems C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017705.exe Infected: Trojan-Clicker.Win32.Small.du C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017706.exe Infected: Trojan-Downloader.Win32.Small.agk C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017707.exe Infected: Trojan-Downloader.Win32.Small.agk C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017708.exe Infected: not-a-virus:Porn-Downloader.Win32.TibSystems C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017709.exe Infected: Trojan-Clicker.Win32.Small.du C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017710.exe Infected: Trojan-Downloader.Win32.Small.agk C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017711.exe Infected: not-a-virus:Porn-Downloader.Win32.TibSystems C:\System Volume Information\_restore{47E7117B-18F3-4A10-B47C-105BED1BFF9B}\RP285\A0017713.dll Infected: Trojan.Win32.StartPage.mz C:\WINDOWS\system32\a679a0.js Infected: Trojan-Downloader.JS.Small.af C:\WINDOWS\system32\as Infected: Trojan-Clicker.JS.Linker.j C:\WINDOWS\system32\bad Infected: Trojan-Clicker.JS.Linker.m Scan process completed. |
|
|
|
|
03-01-2006, 09:38 PM
|
#5 (permalink) |
|
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
Join Date: May 2005
Posts: 23,238
OS: N/A
|
Please read this post completely before begining the fix.
Right click on this & choose "Save As..." DelO15Domains.inf - DelO15Domains.inf Right click on DelO15Domains.inf and choose Install. It will run immediately (you won't be able to see anything happen). You may delete the file afterwards. SpywareBlaster 3.5.1 Install & update SpywareBlaster with the latest definitions. After you have updated, click the button - enable protection for all unprotected items IE-SpyAD - Extract the contents to a new folder From within the folder, double-click install.bat Select Option #2 - Install the new IE-SPYAD list. Then return to the main menu. Select option #4 - Add the old porn sites domain * * * * * * FIXING ENTRIES WITH HIJACKTHIS * * * * * * * * * * Do a HijackThis scan & place a check next to these items and select "Fix checked": R1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.nowfind.net/009/index.html R1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nowfind.net/009/index.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://nowfind.net/rand/gallery.php?url=www.google.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nowfind.net/009/index.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nowfind.net/009/index.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.nowfind.net/009/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.nowfind.net/009/index.html R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.nowfind.net/009/index.html R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.nowfind.net/009/index.html O1 - Hosts: auto.search.msn.com 127.0.0.1 O13 - DefaultPrefix: http://nowfind.net/rand/gallery.php?url= O13 - WWW Prefix: http://nowfind.net/rand/gallery.php?url= O13 - Home Prefix: http://nowfind.net/rand/gallery.php?url= O13 - Mosaic Prefix: http://nowfind.net/rand/gallery.php?url= * * * * * * RESTART WINDOWS IN SAFE MODE * * * * * * * * * * 1. Restart your computer 2. After hearing your computer beep once during startup, but before the Windows icon appears, press F8. 3. Instead of Windows loading as normal, a menu should appear 4. Select the option to run Windows in Safe Mode. * * * * * * DELETING FILES/FOLDERS * * * * * * * * * * * * * * * If you have not done so already, please enable the viewing of Hidden files From Windows Explorer, go to Tools -> Folder Options -> View tab.
* * * * * * PURGING TEMP FOLDERS * * * * * * * * * * * * * * * Run Cleanup! using the following configuration: 1. Click Options... 2. Set the slider initially to Standard CleanUp! 3. Uncheck the following:
5. Press the CleanUp! button to start the program. * * * * * * REBOOT TO NORMAL MODE * * * * * * * * * * * * * * This will clear the System Volume Information folder Go to Start >> Run - type control sysdm.cpl,,4 & press Enter
* * * * * * Perform an online scan with Internet Explorer with Panda ActiveScan
*You needn't remain online while it's doing the scan but you have to re-connect after it has finished to see the report. *Turn off the real time scanner of any existing antivirus program while performing the online scan * * * * * * CHECK LIST * * * * * * * * * * * * * * * * * * * * * In your next post, please include fresh logs from:
__________________
Last edited by sUBs; 03-01-2006 at 09:39 PM. |
|
|
|
|
03-02-2006, 11:50 PM
|
#6 (permalink) |
|
Registered User
Join Date: Feb 2005
Posts: 16
OS: XP
|
Latest Report
Here is the latest Virus Scan and Hijackthis reports.
Incident Status Location Adware:adware/cws Not disinfected C:\Documents and Settings\Denise Potvin\Favorites\Forbidden Conversations.url Adware:adware/searchaid Not disinfected C:\Documents and Settings\Denise Potvin\Favorites\Search the web.url Adware:adware/dyfuca Not disinfected C:\WINDOWS\STWSI Adware:adware/instdollars Not disinfected Windows Registry Spyware:Spyware/Redhotnetworks Not disinfected C:\backups\backup-20041231-164425-130.inf Adware:Adware/IST.ISTBar Not disinfected C:\backups\backup-20050207-204621-943.inf Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Denise Potvin\Application Data\Mozilla\Firefox\Profiles\a9gjzs9k.default\cookies.txt[] Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Denise Potvin\Application Data\Mozilla\Firefox\Profiles\a9gjzs9k.default\cookies.txt[dcsr03oxdpljwpg8ie0t5a8gc_8g6x] Spyware:Cookie/did-it Not disinfected C:\Documents and Settings\Denise Potvin\Application Data\Netscape\NSB\Profiles\3e7fhuxr.default\cookies.txt[] Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Paul Potvin\Application Data\Mozilla\Firefox\Profiles\d743nlbh.default\cookies.txt[] Adware:Adware/IST.XXXToolbar Not disinfected C:\Program Files\Common Files\System\MSMAPI\1033\156172 Adware:Adware/IST.XXXToolbar Not disinfected C:\WINDOWS\system32\156172 Adware:Adware/SAHAgent Not disinfected C:\WINDOWS\system32\xmltok.dll Logfile of HijackThis v1.99.1 Scan saved at 11:49:33 PM, on 3/2/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\ewido anti-malware\ewidoctrl.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Handspring\Hotsync.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Denise Potvin\Desktop\Problem programs\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ N3 - Netscape 7: user_pref("browser.startup.homepage", "www.yahoo.com"); (C:\Documents and Settings\Denise Potvin\Application Data\Mozilla\Profiles\default\kevfz1b1.slt\prefs.js) N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Denise Potvin\Application Data\Mozilla\Profiles\default\kevfz1b1.slt\prefs.js) O1 - Hosts: auto.search.msn.com 127.0.0.1 O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [VAIO Recovery] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" O4 - Startup: HotSync Manager.LNK = C:\Program Files\Handspring\Hotsync.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: HotSync Manager.lnk = C:\Program Files\Handspring\Hotsync.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/k...an_unicode.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe O23 - Service: VAIO Media Music Server (VAIOMediaPlatform-MusicServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Music\SSSvr.exe" /Service=VAIOMediaPlatform-MusicServer-AppServer /DisplayName="VAIO Media Music Server (file missing) O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-MusicServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\MusicServer\HTTP (file missing) O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe O23 - Service: VAIO Media Photo Server (VAIOMediaPlatform-PhotoServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Photo\appsrv\PhotoAppSrv.exe O23 - Service: VAIO Media Photo Server (HTTP) (VAIOMediaPlatform-PhotoServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-PhotoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\PhotoServer\HTTP (file missing) O23 - Service: VAIO Media Photo Server (UPnP) (VAIOMediaPlatform-PhotoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe O23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Video\GPVSvr.exe" /Service=VAIOMediaPlatform-VideoServer-AppServer /DisplayName="VAIO Media Video Server (file missing) O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-VideoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\VideoServer\HTTP (file missing) O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe The computer seems to be acting OK now. Let me know if you see anything that needs cleaning. Thanks for your help. |
|
|
|
|
03-03-2006, 12:01 AM
|
#7 (permalink) |
|
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
Join Date: May 2005
Posts: 23,238
OS: N/A
|
Did you choose NOT to fix this entry?
O1 - Hosts: auto.search.msn.com 127.0.0.1 Please delete all these files/folders: C:\Documents and Settings\Denise Potvin\Favorites\Forbidden Conversations.url C:\Documents and Settings\Denise Potvin\Favorites\Search the web.url C:\WINDOWS\STWSI C:\backups\ C:\Program Files\Common Files\System\MSMAPI\1033\156172 C:\WINDOWS\system32\156172 C:\WINDOWS\system32\xmltok.dll Let me know how that went
__________________
Last edited by sUBs; 03-03-2006 at 12:06 AM. |
|
|
|
|
03-03-2006, 07:32 PM
|
#8 (permalink) |
|
Registered User
Join Date: Feb 2005
Posts: 16
OS: XP
|
Latest - I think everything looks good now
Logfile of HijackThis v1.99.1
Scan saved at 7:30:57 PM, on 3/3/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\AGRSMMSG.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\Program Files\Handspring\Hotsync.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe C:\Program Files\ewido anti-malware\ewidoctrl.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\HPZipm12.exe C:\Documents and Settings\Denise Potvin\Desktop\Problem programs\HijackThis.exe C:\WINDOWS\system32\wuauclt.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ N3 - Netscape 7: user_pref("browser.startup.homepage", "www.yahoo.com"); (C:\Documents and Settings\Denise Potvin\Application Data\Mozilla\Profiles\default\kevfz1b1.slt\prefs.js) N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Denise Potvin\Application Data\Mozilla\Profiles\default\kevfz1b1.slt\prefs.js) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [VAIO Recovery] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" O4 - Startup: HotSync Manager.LNK = C:\Program Files\Handspring\Hotsync.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: HotSync Manager.lnk = C:\Program Files\Handspring\Hotsync.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/k...an_unicode.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe O23 - Service: VAIO Media Music Server (VAIOMediaPlatform-MusicServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Music\SSSvr.exe" /Service=VAIOMediaPlatform-MusicServer-AppServer /DisplayName="VAIO Media Music Server (file missing) O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-MusicServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\MusicServer\HTTP (file missing) O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe O23 - Service: VAIO Media Photo Server (VAIOMediaPlatform-PhotoServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Photo\appsrv\PhotoAppSrv.exe O23 - Service: VAIO Media Photo Server (HTTP) (VAIOMediaPlatform-PhotoServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-PhotoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\PhotoServer\HTTP (file missing) O23 - Service: VAIO Media Photo Server (UPnP) (VAIOMediaPlatform-PhotoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe O23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Video\GPVSvr.exe" /Service=VAIOMediaPlatform-VideoServer-AppServer /DisplayName="VAIO Media Video Server (file missing) O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Unknown owner - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-VideoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\VideoServer\HTTP (file missing) O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe |
|
|
|
|
03-03-2006, 09:21 PM
|
#9 (permalink) |
|
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
Join Date: May 2005
Posts: 23,238
OS: N/A
|
Your system is clean. Kindly follow these simple steps in order to keep your computer clean and secure:
Update all these programs regularly. Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released. Follow this list and your potential for being infected again will reduce dramatically. Here are some additional utilities that will further enhance your safety.
To find out more information about how you got infected in the first place and some great guidelines to follow to prevent future infections you can read this article by Tony Klein After doing all these, your system will be optimised against future threats. It's okay to delete the Hijack This folder in a couple weeks if everything is working okay. Have a safe & happy computing day.  Please respond to this thread one more time so we can mark this thread as resolved.
__________________
|
|
|
|
| Thread Tools | |
|
|
