[asmodeus718]

hi, I am new to this site. I read the instructions/guidelines about what to do before posting. I hope I'm doing this right. anyway, I keep getting the "Aurora - Part of the ABI Network" popups.. and I mean LOTS of them. anyway, I followed instructions from another site, and I thought it had worked, but it didn't. after looking through several computer support sites, I decided to join this one, as it seemed like it had the most knowledgable people assisting people like myself. anyway, below is my HijackThis Log and I used the HijackThis Analyzer program as well, as was outlined in one of the "newbie" posts on this site. I am not familiar with HijackThis at all, so what you see below is all Japanese to me, basically. anyway, any help would be GREATLY appreciated, as I'm one step away from throwing my computer out the window! thanks in advance!

Scott Douglas

====================================================================
Log was analyzed using KRC HijackThis Analyzer - Updated on 8/4/05
Get updates at http://www.greyknight17.com/download.htm#programs

***Security Programs Detected***

C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Logfile of HijackThis v1.99.1
Scan saved at 1:17:45 PM, on 9/1/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\WINDOWS\system32\ksjxnik.exe
C:\Program Files\winCMAPP\wincmapp.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search-desc.ebay.com/def-lep...0QQsacatZQ2d1QQsacurZ0QQsadisZ200QQsalicZQ2d1
5QQsaslopZ1QQsofocusZbsQQsojsZ1QQsorefinesearchZ1
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.emachines.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: PicShow Class - {4487598C-2EC7-43A2-870E-6D8D720FDD9F} - C:\WINDOWS\system32\pkshxcfd.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [HPHUPD04] "C:\Program Files\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe"
O4 - HKLM\..\Run: [flpatsr] C:\WINDOWS\system32\ksjxnik.exe r
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [pshower] C:\WINDOWS\system32\pshwr.exe
O4 - HKCU\..\Run: [wincmap] "C:\Program Files\winCMAPP\wincmapp.exe"
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {B9F3009B-976B-41C4-A992-229DCCF3367C} (CoAxTrack Class) - http://cdn.digitalcity.com/_media/dalaillama/ampx.cab
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe


End of KRC HijackThis Analyzer Log.
====================================================================

 

[skate_punk_21]

Please print out the instructions here or Save this page to your desktop so that you can follow along more easily.


Downloads
Download, install, and update Ewido Security Suitehttp://www.ewido.net/en/download/

• Install ewido security suite
• Launch ewido, there should be a big E icon on your desktop, double-click it.
• The program will prompt you to update click the OK button
• The program will now go to the main screen

You will need to update ewido to the latest definition files.

• On the left hand side of the main screen click update
• Click on Start

The update will start and a progress bar will show the updates being installed.
After the updates are installed, EXIT

Download nailfix.exe from http://www.noidea.us/easyfile/file.php?download=20050711214630636

Download Process Explorer from http://www.sysinternals.com/Utilities/ProcessExplorer.html

To begin: Please open Hijack This and click on Scan.
look for any entry in the O4 section that has a lonely " r" at the end with a seemingly random file name. LEAVE HIJACKTHIS OPEN, and note the path to that file

Run Process Explorer and find the file we just found in HijackThis in the list of Processes.
Select the process and click Process > Suspend.
DO NOT CLOSE THIS PROGRAM

Then in HijackThis click Config > Misc Tools > Delete a file on reboot...
In the explorer Window Navigate to the file we just found and click Open
When prompted if you want to reboot click YES
Leave Process explorer running with the process suspended.


Boot Into Safe Mode
Reboot into Safe Mode by hitting the F8 key repeatedly until a menu shows up (and choose Safe Mode from the list). In some systems, this may be the F5 key, so try that if F8 doesn't work.


View Hidden Files and Folders
Go to My Computer >Tools >Folder Options >View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing / visible. Uncheck the Hide protected operating system files option.


Run Downloaded Program #1
1. Launch Nailfix.exe
2. Click "Next" in the setup, then make sure "Run Nailfix" is checked and click "Finish".
3. Your desktop and icons will disappear and reappear, and a window should open and close very quickly --- this is normal.

Run Downloaded Program #2
Run Ewido Security Suite . Set the program up as follows:

• Click on scanner
• Click on Complete System Scan and the scan will begin.
• You will be prompted to clean the first infection.
• Select "Perform action on all infections", then proceed.
• Once the scan has completed, there will be a button located on the bottom of the screen named Save report
• Click Save report.
• Save the report .txt file to your desktop or a location where you can find it easily.

Close ewido security suite.

Potential Uninstallations
Click > Start > Control Panel > Add / Remove Programs and uninstall the following programs:
WeatherBug - it's adware. If you didn't install this yourself, uninstall it. If you did install it yourself, you may keep it and ignore any fixes/deletions listed below. For a safer alternative please see Herehttp://www.theweathernetwork.com/inter/weathercentre/index.htmhttp://www.theweathernetwork.com/inter/weathercentre/index.htm

winCMAPP <--Unless you know what this is uninstall it and remove its entry.


Start HijackThis Fix
Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any):

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search-desc.ebay.com/def-lep...0QQsa licZQ2d1
5QQsaslopZ1QQsofocusZbsQQsojsZ1QQsorefinesearchZ1
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
O2 - BHO: PicShow Class - {4487598C-2EC7-43A2-870E-6D8D720FDD9F} - C:\WINDOWS\system32\pkshxcfd.dll
O4 - HKLM\..\Run: [flpatsr] C:\WINDOWS\system32\ksjxnik.exe r <--entry with lone " r"
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - HKCU\..\Run: [pshower] C:\WINDOWS\system32\pshwr.exe
O4 - HKCU\..\Run: [wincmap] "C:\Program Files\winCMAPP\wincmapp.exe"
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe

Please remember to close all other windows, including browsers then click Fix checked.



File/Folder Deletions

C:\WINDOWS\Nail.exe
C:\WINDOWS\system32\pkshxcfd.dll
C:\Program Files\AWS\
C:\WINDOWS\system32\pshwr.exe
C:\Program Files\winCMAPP\
C:\WINDOWS\svcproc.exe



Stop NT Service

Part1

• Click Start>Run, type services.msc into the Open editbox and click the Ok button.
• Locate the "System Startup Service (SvcProc)" service and double-click on it to open the Properties dialog.
• Click the Stop button.
• In the Startup type dropdown select Disabled.
• Click the Apply button and then the Ok button.
• Close the Services window

Part 2

• Click Start>Run, type cmd into the Open editbox and click the Ok button.
• Copy/paste the line below into the Command Prompt window and press the Enter key:
• sc delete SvcProc
• Close the Command Prompt window

Reboot your system in Normal Mode.



Downloads again...
Download FindIt's.zip http://forums.net-integration.net/index.php?act=Attach&type=post&id=142443 to your desktop.

1. Unzip/extract the files inside to a folder on your desktop.
2. Open the folder. Double click on FindIt's.bat and wait for Notepad to open a text file. It will take a while so please be patient... Note: If you are having problems using FindIt's.bat (16 bit error), copy autoexec.nt from the C:\WINDOWS\repair folder to C:\WINDOWS\system32 folder. Now try running FindIt's.bat. Save That file and post it here


Please post a fresh Hijack This log, FindIt log, and the Log from the Ewido Scan so that we can check if your system is clean.

 

[asmodeus718]

Microsoft Windows XP [Version 5.1.2600]
The current date is: Thu 09/01/2005
PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
»»»»»»»»»»»»»»»»»»»»»»»» Todo Files found »»»»»»»»»»»»»»»»»»»»»»»»»»»»»


»»»»»»»»»»»»»»»»»»»»»»»» aurora Files found »»»»»»»»»»»»»»»»»»»»»»»»»»»


»»»»»»»»»»»»»»»»»»»»»»»» Suspect's »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Dont delete file's in the section without guidance
If any doubt back them up first

* UPX! C:\WINDOWS\TSC.EXE

»»»»» lagitamate file's can/will show in this section.

* UPX! C:\WINDOWS\RMAGEN~1.DLL
* UPX! C:\WINDOWS\VSAPI32.DLL
»»»»»»»»»»»»»»»»»»»»»»»» Buddy file's »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

»»»»»»»»»»»»»»»»»»»»»»»» SAHAgent Files found »»»»»»»»»»»»»»»»»»»»»»»»»

»»»»»»»»»»»»»»»»»»»»»»»» Misc checks »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»


»»»»» Check for Windows\SYSTEM32\cache32_rtneg* folder.

Volume in drive C has no label.
Volume Serial Number is B486-BCC2

Directory of C:\WINDOWS\SYSTEM32

»»»»» Checking for SAHAgent ico files.
Volume in drive C has no label.
Volume Serial Number is B486-BCC2

Directory of C:\WINDOWS\system32

08/24/2005 12:27 AM 3,262 creditcard32123123123asdsa123.ico
08/24/2005 12:27 AM 3,262 kill all spyware.ico
08/23/2001 06:44 PM 1,758 OemLinkIcon.ico
08/24/2005 12:27 AM 3,262 popupblocker1231.ico
4 File(s) 11,544 bytes
0 Dir(s) 10,245,267,456 bytes free

»»»»»»»»»»»»»»»»»»»»»»»».

---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------

+ Created on: 4:48:23 PM, 9/1/2005
+ Report-Checksum: 374B0874

+ Scan result:

:mozilla.12:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.15:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.22:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.23:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.24:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.25:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.26:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.27:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.28:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.38:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.43:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.45:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.46:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.47:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.48:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.49:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.50:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.51:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.52:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.53:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.54:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.55:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.56:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.57:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.58:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.59:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.60:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.61:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.62:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.63:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.64:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.65:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.66:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.67:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.68:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.69:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.70:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.71:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.72:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.73:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.74:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.75:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.76:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.77:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.78:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.79:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.80:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.81:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.82:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.83:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.84:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.85:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.86:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.87:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.88:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.89:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.90:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.91:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.98:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.106:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.107:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
:mozilla.108:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
:mozilla.114:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.115:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.116:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.117:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.118:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.119:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.120:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.121:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.122:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.123:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.124:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.125:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.126:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.127:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.128:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.129:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.130:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.131:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.132:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.133:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.134:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.140:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.141:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.142:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.143:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.144:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.145:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.146:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.147:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.148:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.149:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.150:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.151:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.152:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.153:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.154:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.155:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.156:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.157:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.158:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.159:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.160:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.180:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.181:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.182:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.183:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.184:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.185:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.186:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.187:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.188:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.189:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.190:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.191:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.192:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.193:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.194:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.195:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.196:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.197:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.198:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.199:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.200:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.201:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.202:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.203:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.204:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.205:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.206:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.207:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.208:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.209:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.210:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.211:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.212:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.213:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.214:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Paypopup : Cleaned with backup
:mozilla.216:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.217:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.224:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.225:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.226:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.227:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.242:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.243:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.244:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.245:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.246:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.270:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.271:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.289:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.290:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.291:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.292:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.293:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.300:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.301:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Addynamix : Cleaned with backup
:mozilla.302:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.303:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.304:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.305:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.306:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.307:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.308:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.309:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.310:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.311:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.312:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.313:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.314:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.315:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.316:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.317:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.318:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.319:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.320:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.321:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.322:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.323:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.324:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.325:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.326:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.327:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.328:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.329:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.330:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.331:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.332:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.333:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.334:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.335:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.345:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.346:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.347:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.348:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.349:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.350:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.351:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.352:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.353:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.354:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.355:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.356:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.357:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.358:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.360:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.361:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.362:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.363:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.364:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.365:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.366:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.367:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.368:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.369:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.370:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.371:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.372:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.373:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.374:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.375:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.376:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.377:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.378:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.379:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.380:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.381:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.382:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.383:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.384:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.393:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Spylog : Cleaned with backup
:mozilla.403:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup
:mozilla.404:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup
:mozilla.405:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.406:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup
:mozilla.407:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Adocean : Cleaned with backup
:mozilla.408:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.409:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.427:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.481:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.482:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.483:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.484:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.485:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.486:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.487:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.488:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.489:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.490:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.491:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.492:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.493:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.494:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.495:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.496:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.498:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.499:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.500:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.503:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.505:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.506:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Cj : Cleaned with backup
:mozilla.507:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.514:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.515:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.520:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.529:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.530:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.531:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.532:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.534:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.535:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.536:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.538:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.539:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.547:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.548:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.554:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.753:C:\Documents and Settings\Scott\Application Data\Mozilla\Firefox\Profiles\95qalmm2.default\cookies.txt -> Spyware.Cookie.Burstbeacon : Cleaned with backup
C:\Documents and Settings\Scott\Cookies\[email protected][2].txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
C:\Documents and Settings\Scott\Cookies\[email protected][2].txt -> Spyware.Cookie.Atdmt : Cleaned with backup
C:\Documents and Settings\Scott\Cookies\[email protected][2].txt -> Spyware.Cookie.Bfast : Cleaned with backup
C:\Documents and Settings\Scott\Cookies\[email protected][2].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
C:\Documents and Settings\Scott\Cookies\[email protected][1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Scott\Cookies\[email protected][1].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Scott\Cookies\[email protected][2].txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Scott\Cookies\[email protected][1].txt -> Spyware.Cookie.Findwhat : Cleaned with backup
C:\Documents and Settings\Scott\Cookies\[email protected][2].txt -> Spyware.Cookie.Linksynergy : Cleaned with backup
C:\Documents and Settings\Scott\Cookies\[email protected][1].txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
C:\Documents and Settings\Scott\Cookies\[email protected][2].txt -> Spyware.Cookie.Qksrv : Cleaned with backup
C:\Documents and Settings\Scott\Cookies\[email protected][1].txt -> Spyware.Cookie.Burstbeacon : Cleaned with backup
C:\Documents and Settings\Scott\Cookies\[email protected][1].txt -> Spyware.Cookie.Adserver : Cleaned with backup
C:\WINDOWS\purompanp.exe -> Adware.BetterInternet : Cleaned with backup
C:\WINDOWS\system32\pkshxcfd.dll -> Spyware.SafeSurfing : Cleaned with backup
C:\WINDOWS\system32\pshwr.exe -> Spyware.SafeSurfing : Cleaned with backup


::Report End


------------------------------------------------------------------------------


Logfile of HijackThis v1.99.1
Scan saved at 5:15:36 PM, on 9/1/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\mHotkey.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
C:\WINDOWS\system32\hphmon04.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Messenger\msmsgs.exe
C:\HJT\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.emachines.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINDOWS\system32\hphmon04.exe
O4 - HKLM\..\Run: [HPHUPD04] "C:\Program Files\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKCU\..\Run: [TClockEx] C:\Program Files\TClockEx\TCLOCKEX.EXE
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {B9F3009B-976B-41C4-A992-229DCCF3367C} (CoAxTrack Class) - http://cdn.digitalcity.com/_media/dalaillama/ampx.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Pml Driver HPH11 - HP - C:\WINDOWS\system32\HPHipm11.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

 

[skate_punk_21]

Almost there!!!
Goto C:\windows system32 and delete the following files...
creditcard32123123123asdsa123.ico
kill all spyware.ico
popupblocker1231.ico

Congratulations Your Log is Clean!!

If you are still having trouble, please dont continue with these instructions just yet. LET ME KNOW!

Otherwise, we have a few clean up items to deal with.

1. System Restore
Now that we know your system is clean, we want to purge any potentially infected restore points. To do that, complete the following:

Turn off System Restore by Clicking Start > right-click My Computer and then click Properties. Click the System Restore tab > Check "Turn off System Restore" or "Turn off System Restore on all drives". Click Apply. When turning off System Restore, the existing restore points will be deleted. Click Yes to do this. Click OK.

To re-enable this function - simply uncheck this same box, and click "apply" and "ok"

2. Reset Hidden Files & Folders

Go to My Computer >Tools >Folder Options >View tab and make sure that Show hidden files and folders is UNchecked. Also make sure that the System Files and Folders are invisible. CHECK the Hide protected operating system files option.


Preventative Measures

This is a good time to set up protection against further attacks. Read How Did I Get Infected In The First Place?.

Also Consider...

• SpywareBlaster to help prevent spyware from installing in the first place.
  
• SpywareGuard to catch and block spyware before it can execute.
  
• IESpy-Ad to block access to malicious websites so you cannot be redirected to them from an infected site or email.

You should also have a good firewall. Here are 3 free ones available for personal use:

• Sygate Personal Firewall
  
• Kerio Personal Firewall
  
• ZoneAlarm

How is she running now? Any further problems? If not, Good work, and Happy Computing!

Please reply once more so we know you have read these measures.

 

[asmodeus718]

skate punk, you are a GOD! thank you SOOO MUCH... everything seems to be running normally again. I'm still trying to figure out how I got the Aurora thing in the first place. should I get it again (hopefully not), should I jsut follow all these steps again, or should I make another post? I don't feel comfortable deleting things with hijackthis that I don't know what they are. anyway, thanks again!

Scott

 

[skate_punk_21]

Good!!! You shouldnt be deleting things in HijackThis without proper training, several things may look ugly but infact are entirely safe - or even system critical. If you would like to learn to analyze these logs feel free to join our academy from the link in my signature.

--EDIT: most infections are not the same. Its always best to either post a new log or learn to do it yourself :grin: