Tech Support banner
Status
Not open for further replies.
1 - 8 of 8 Posts

·
Registered
Joined
·
10 Posts
Discussion Starter · #1 ·
Okay, sorry about making a second topic, so moderators feel free to delete my other one.

I ran a malware scan earlier with PrevX and found 1 thing of Malware in C:\Program Files\Daemon Tools, so I moved it to the jail. All of a sudden, everything on my computer started working, including my internet. AIM and Limewire both started up like they are supposed to. I thought that the problem was solved. Everything was working except for my sound and printer.

I decided to restart the computer, and this is where my problem began (again.) One quick thing is that when I'm starting up, on the screens where it says 'System Loading' (or something to that affect) when I'm starting up and 'System Saving' (again, something to that affect) when I'm shutting down take a REALLY long time to load. Anyways, on to the problem.

My internet wouldn't work and my startup items wouldn't load (except for Winamp, AVG Free Edition, and PrevX). Also, the dreaded 'Install.exe' program is still on my desktop, however, I'm not completely sure what it is. Whenever I start it, it starts the Virtual Drive installation, but it doesn't really get through much of it, it just sort of freezes.

When I'm shutting down or restarting, AIM and other various programs that didn't start up report as 'not responding' and I have to manually end them when I shut down. Here is the log from HijackThisLog: (one thing to note is that with all the running processes, I can't see most of them (such as AIM, Steam, Bittorrent, Limewire).

Logfile of HijackThis v1.99.1
Scan saved at 9:58:58 PM, on 1/22/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Prevx1\PXAgent.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\GE\97769 Dual Scroll Optical Mouse\Amoumain.exe
C:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Prevx1\PXConsole.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Lexmark 4300 Series\lxcemon.exe
C:\Program Files\Lexmark 4300 Series\ezprint.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\AIM\aim.exe
C:\program files\steam\steam.exe
C:\Program Files\BitTorrent\bittorrent.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Documents and Settings\kameron\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
F1 - win.ini: run=C:\WESTWOOD\C&C95\INSTICON.EXE C:\WESTWOOD\C&C95\INSTICON.EXE C:\WESTWOOD\C&C95\INSTICON.EXE C:\WESTWOOD\C&C95\INSTICON.EXE
O1 - Hosts: 63.161.183.91 bnls.valhallalegends.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Malicious Scripts Scanner - {55EA1964-F5E4-4D6A-B9B2-125B37655FCB} - C:\Documents and Settings\All Users\Application Data\Prevx\pxbho.dll
O2 - BHO: (no name) - {68aa99af-32b4-46b7-ac5b-6c932eb83767} - C:\WINDOWS\system32\jgpseq.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [WheelMouse] Amoumain.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [VirtualDrive] "C:\Program Files\FarStone\VirtualDrive\VDTask.exe" /AutoRestore
O4 - HKLM\..\Run: [PrevxOne] "C:\Program Files\Prevx1\PXConsole.exe"
O4 - HKLM\..\Run: [LXCECATS] rundll32 C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\LXCEtime.dll,[email protected]
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [lxcemon.exe] "C:\Program Files\Lexmark 4300 Series\lxcemon.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 4300 Series\ezprint.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {10093E98-C073-4C75-8D0E-FB5CD3A71D33} (ZoneUpwords Object) - http://messenger.zone.msn.com/binary/Upwords.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1142117466747
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://messenger.zone.msn.com/binary/ZAxRcMgr.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://games.pogo.com/online2/pogo/zuma/popcaploader_v5.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O20 - Winlogon Notify: jgpseq - jgpseq.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: lxce_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcecoms.exe
O23 - Service: Prevx Agent (PREVXAgent) - Unknown owner - C:\Program Files\Prevx1\PXAgent.exe" -f (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Unknown owner - C:\WINDOWS\system32\ZoneLabs\vsmon.exe (file missing)

Thanks in advance.
 

·
Registered
Joined
·
2,335 Posts
Hello GoShox, and welcome to TSF


Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools,
then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.


Please read this post completely before begining the fix. If there's anything that you do not understand, kindly ask your questions before proceeding.
Please ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this
webpage would not be available when you're carrying out the fix.



IT IS IMPORTANT THAT YOU DON'T MISS A STEP & PERFORM EVERYTHING IN THE RIGHT ORDER.

----------------------------------------

The fixes we will use are specific to your problems and should only be used for this issue on this machine.

Please only use this topic to reply to. Do not start another thread.
If any other issues arise let me know.

The process is not instant. Please continue to review my answers until I tell you your machine is clear.
Absence of symptoms does not mean that everything is clear. So lets do this to the end!

Please make every effort to reply to my posts in a timely manner. Malware breeds malware and the longer an infection remains on a system, the more
likely additional infections will result.


----------------------------------------

You have a bit of junk on your system. We'll clean that up and see what else may be hiding.


----------------------------------------

DOWNLOADS


CLEANUP! version 4.52 – TEMP FILE CLEANING


Please download Cleanup! and install it. You will use this later.

Alternative link Cleanup Alt


*NOTE* Cleanup deletes EVERYTHING out of temporary folders and does not make backups.



AVG Anti-Spyware 7.5



Please download AVG Anti Spyware

Use the link at the bottom of the page under "AVG Anti-Spyware Free for Windows"





  1. Install AVG Anti-Spyware 7.5.
  2. Double-click the icon on Desktop to launch AVG A-S 7.5
  3. On the top of the main screen click Shield
  4. Click the word active to change it to inactive
  5. On the top of the main screen click Update.
  6. Then click on Start Update. The update will start and a progress bar will show the updates being installed.
  7. I also recommend changing the "Update interval" to something more reasonable like 12 hours.




ComboFix



1. Download this file - You MUST save it to your desktop

COMBOFIX





2. 2. Go to <<Start>> then <<Run>> then paste in the single line command then click OK

"%userprofile%\desktop\combofix.exe" /v jgpseq



3. When finished, it shall produce a log for you. Post that log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

----------------------------------------

SAFE MODE RE-BOOT

Please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Use the up arrow key to highlight Safe Mode and press Enter.
5) Login with your usual account. Make sure to close any open browsers.

----------------------------------------

FIXES AND DELETIONS



Open HijackThis and click on 'Do a System Scan Only'. Check the following entries (If they still exist, make sure you do not miss any)

F1 - win.ini: run=C:\WESTWOOD\C&C95\INSTICON.EXE C:\WESTWOOD\C&C95\INSTICON.EXE C:\WESTWOOD\C&C95\INSTICON.EXE C:\WESTWOOD\C&C95\INSTICON.EXE
The F1 entry is related to a Command & Conquer game. If you use it, leave the entry. If not, fix it

O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - Startup: PowerReg Scheduler V3.exe
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://games.pogo.com/online2/pogo/z...ploader_v5.cab



Please remember to close all other windows, including browsers then click Fix checked.

----------------------------------------

RUNNING SCANNERS


Cleanup

Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu).
Set the program up as follows:

Click "Options..."
Move the arrow down to "Custom CleanUp!"
Put a check next to the following (Make sure nothing else is checked!):
  • Empty Recycle Bins
  • Delete Cookies
  • Delete Prefetch files (if present)
  • Cleanup! All Users
  • Click on the Temporary Files tab and uncheck the box for Scan drives for files matching if it’s checked.
Click OK
Press the CleanUp! button to start the program and DO NOT reboot when prompted.


AVG Anti-Spyware 7.5

  • Run AVG A-s with it's updated definitions: (...it's important that all windows must be closed)
    This scan can take quite a while to run, so be prepared.
  • Click Scanner
  • Click on the Scan tab
  • Click Complete System Scan to begin scanning.



  • When the scan is complete click Recommended Action and change it to Quarantine (1),
  • If not click Recommended Action and choose Quarantine from the popup menu. (2)
  • At the bottom of the window click on the Apply all Actions button. (3)

When done, click the Save Scan Report button. (4) then click Save Report As and save it to your desktop.

IMPORTANT : Don't click on the "Save Scan Report" button before you did hit the "Apply all Actions" button.



Note: DO NOT USE the computer while AVG A/S is scanning. If Explorer or the Control Panel are opened some malware types will
reinfect your system or will not be cleaned properly.

----------------------------------------

SYSTEM RE-BOOT

Reboot into Normal Mode.

----------------------------------------


ON-LINE SCANS

Perform an online scan with Internet Explorer with Panda ActiveScan

  1. Click on
    located at the bottom of the page.
  2. A "pop up" window will appear. * Please ensure that your pop up blocker doesn't block it *
  3. Enter your e-mail address, country, and state & click "Free Online Scan" * The download of the 8 MB Panda's ActiveX control will take place *

Begin the scan by selecting

  • If it finds any malware, it will offer you a report.
  • Please ignore any entry it finds and the offer to buy the program to remove the entry, as we will address this later.
  • Click on
    then click

* You needn't remain online while it's doing the scan but you have to re-connect after it has finished to see the report.
* Turn off the real time scanner of any existing antivirus program while performing the online scan


----------------------------------------

FOLLOW-UP

Please return and post these items in the order listed:

c:\combofix.txt
AVG A/S
Panda scan
A new HJT log run in Normal Mode


Please note: In order to properly see what is on your system, all HJT logs must be run in the normal mode

Please let me know how your system is behaving.
 

·
Registered
Joined
·
10 Posts
Discussion Starter · #3 ·
First of all, I want to thank you for the reply. You guys do a lot of hard work around here, and I know a lot of people, including me, really really appreciate it. I hope I did these right; here are the scans you requested:

ComboFix:

"kameron" - 07-01-24 17:04:30 Service Pack 2
ComboFix 07-01-24.2 - Running from: "C:\Documents and Settings\kameron\desktop"
Command switches used :: /v jgpseq

((((((((((((((((((((((((((((((( Files Created from 2006-12-24 to 2007-01-24 ))))))))))))))))))))))))))))))))))


2007-01-24 16:58 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-01-21 00:53 90,396 --a------ C:\LSPRegBackup_21012007_005316.REG
2007-01-21 00:52 11,520 --a------ C:\WINDOWS\system32\drivers\pxscrmbl.sys
2007-01-21 00:29 <DIR> d-------- C:\DOCUME~1\kameron\Application Data\Uniblue
2007-01-20 23:54 11,264 --a------ C:\WINDOWS\system32\SpOrder.dll
2007-01-20 23:52 <DIR> d-------- C:\WINDOWS\system32\ZoneLabs
2007-01-20 23:52 <DIR> d-------- C:\WINDOWS\Internet Logs
2007-01-20 23:14 <DIR> d--h----- C:\WINDOWS\PIF
2007-01-20 23:06 <DIR> d--hs---- C:\WINDOWS\CSC
2007-01-20 22:29 <DIR> d-------- C:\DOCUME~1\kameron\Application Data\FarStone
2007-01-20 22:22 81,048 --a------ C:\WINDOWS\system32\drivers\fvxscsi.sys
2007-01-20 22:22 17,840 --a------ C:\WINDOWS\system32\drivers\fcdabus.sys
2007-01-14 14:45 <DIR> d-------- C:\Program Files\Common Files\SystemRequirementsLab
2007-01-14 14:45 <DIR> d-------- C:\DOCUME~1\kameron\Application Data\System Requirements Lab
2007-01-11 15:39 <DIR> d-------- C:\DOCUME~1\kameron\Application Data\Viewpoint
2007-01-09 17:20 <DIR> d-------- C:\Program Files\Valve
2006-12-28 22:36 <DIR> d-------- C:\Downloads
2006-12-28 22:36 <DIR> d-------- C:\DOCUME~1\kameron\Application Data\GetRightToGo
2006-12-27 02:30 <DIR> d-------- C:\Program Files\Last.fm
2006-12-25 16:03 21,504 --a------ C:\WINDOWS\system32\hidserv.dll
2006-12-25 16:03 14,848 --a------ C:\WINDOWS\system32\drivers\kbdhid.sys


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2007-01-24 17:03 -------- d-------- C:\Program Files\mozilla firefox
2007-01-24 16:58 -------- d-------- C:\Program Files\grisoft
2007-01-24 16:53 -------- d-------- C:\Program Files\steam
2007-01-23 19:27 -------- d-------- C:\Program Files\stealthbot
2007-01-23 19:16 -------- d-------- C:\Program Files\lx_cats
2007-01-23 18:38 -------- d-------- C:\Program Files\starcraft
2007-01-22 20:17 -------- d-------- C:\Program Files\consoleclassix.com
2007-01-08 15:34 -------- d--h----- C:\Program Files\installshield installation information
2007-01-08 15:34 -------- d-------- C:\Program Files\Common Files\installshield
2007-01-02 02:29 -------- d-------- C:\Program Files\warcraft iii
2007-01-01 01:45 -------- d-------- C:\DOCUME~1\kameron\Application Data\.gaim
2006-12-22 14:10 -------- d-------- C:\DOCUME~1\kameron\Application Data\myspace
2006-12-20 22:04 -------- d-------- C:\Program Files\quicktime
2006-12-20 22:04 -------- d-------- C:\Program Files\itunes
2006-12-20 22:04 -------- d-------- C:\Program Files\ipod
2006-12-19 18:10 -------- d-------- C:\DOCUME~1\kameron\Application Data\acccore
2006-12-17 00:05 -------- d-------- C:\DOCUME~1\kameron\Application Data\google
2006-12-16 22:59 -------- d-------- C:\Program Files\winamp
2006-12-16 22:59 -------- d-------- C:\Program Files\starforge
2006-12-10 13:51 -------- d-------- C:\Program Files\java
2006-12-10 13:36 -------- d-------- C:\Program Files\Common Files\java
2006-12-10 13:14 98304 --a------ C:\WINDOWS\system32\cmdlineext.dll
2006-12-10 11:24 -------- d-------- C:\Program Files\real
2006-12-10 11:24 -------- d-------- C:\Program Files\mediashout ev
2006-12-10 10:26 639224 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2006-12-10 10:19 -------- d-------- C:\Program Files\undisker
2006-12-08 18:12 -------- d-------- C:\DOCUME~1\kameron\Application Data\bittorrent
2006-12-08 17:49 -------- d-------- C:\Program Files\bittorrent
2006-12-07 02:04 2071368 --a------ C:\WINDOWS\system32\wmvcore.dll
2006-12-04 16:30 -------- d-------- C:\Program Files\apple software update
2006-11-24 15:11 -------- d-------- C:\Program Files\limewire
2006-11-07 23:06 679424 --a------ C:\WINDOWS\system32\inetcomm.dll


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"msnmsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"
"AIM"="C:\\Program Files\\AIM\\aim.exe -cnetwait.odl"
"Steam"="\"c:\\program files\\steam\\steam.exe\" -silent"
"MySpaceIM"="C:\\Program Files\\MySpace\\IM\\MySpaceIM.exe"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"BitTorrent"="\"C:\\Program Files\\BitTorrent\\bittorrent.exe\" --force_start_minimized"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"TkBellExe"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"WheelMouse"="Amoumain.exe"
"WinampAgent"="C:\\Program Files\\Winamp\\winampa.exe"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"AVG7_EMC"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgemc.exe"
"VirtualDrive"="\"C:\\Program Files\\FarStone\\VirtualDrive\\VDTask.exe\" /AutoRestore"
"KernelFaultCheck"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,\
65,6d,33,32,5c,64,75,6d,70,72,65,70,20,30,20,2d,6b,00
"ViewMgr"="C:\\Program Files\\Viewpoint\\Viewpoint Manager\\ViewMgr.exe"
"SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_01\\bin\\jusched.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"lxcemon.exe"="\"C:\\Program Files\\Lexmark 4300 Series\\lxcemon.exe\""
"FaxCenterServer"="\"C:\\Program Files\\Lexmark Fax Solutions\\fm3032.exe\" /s"
"EzPrint"="\"C:\\Program Files\\Lexmark 4300 Series\\ezprint.exe\""
"AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgcc.exe /STARTUP"
"ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"
"LXCECATS"="rundll32 C:\\WINDOWS\\system32\\spool\\DRIVERS\\W32X86\\3\\LXCEtime.dll,[email protected]"
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"=""
"hkey"="HKLM"
"command"=""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"


[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0

*newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_AVG_ANTI-SPYWARE_DRIVER
*newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_AVG_ANTI-SPYWARE_GUARD


Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\AppleSoftwareUpdate.job

Completion time: 07-01-24 17:08:31

AVG A/S:

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 6:16:16 PM 1/24/2007

+ Scan result:



C:\Program Files\Common Files\Real\WeatherBug\MiniBugTransporter.dll -> Adware.Minibug : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{21915684-3353-4F5E-9E4A-A9CC6774A24C}\RP1\A0014067.exe -> Adware.SaveNow : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\WUSN.1 -> Adware.SaveNow : Cleaned with backup (quarantined).
C:\Documents and Settings\kameron\My Documents\BitTorrent Downloads\HOODLUM\HLM-INTR.EXE -> Backdoor.Hupigon.kg : Cleaned with backup (quarantined).
C:\Documents and Settings\kameron\unused stuff\HOODLUM\HLM-INTR.EXE -> Backdoor.Hupigon.kg : Cleaned with backup (quarantined).
:mozilla.478:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.479:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.480:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.481:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.482:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.483:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.484:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.485:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.486:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.487:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.488:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.489:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.490:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.491:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.492:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.493:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.494:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.495:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.496:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.497:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.498:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.499:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.500:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.501:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.502:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.503:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.504:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.505:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.506:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.507:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.508:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.509:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.510:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.511:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.512:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.513:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.514:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.515:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.516:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.517:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.518:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.519:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.520:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.521:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.522:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.523:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.524:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.525:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.526:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.527:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.602:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.610:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.621:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.780:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.803:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.467:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.468:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.469:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.470:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.471:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.472:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.824:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.877:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.558:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Addynamix : Cleaned.
:mozilla.625:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.626:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.627:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.416:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.417:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.418:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.419:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.420:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.421:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.422:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.423:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.424:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.27:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.34:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.37:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.38:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.39:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.26:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.448:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.355:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.695:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.660:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.661:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.248:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.249:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.250:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.251:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.252:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.253:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.254:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.255:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.113:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.115:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.826:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Cpvfeed : Cleaned.
:mozilla.827:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Cpvfeed : Cleaned.
:mozilla.829:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Cpvfeed : Cleaned.
:mozilla.831:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Cpvfeed : Cleaned.
:mozilla.55:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.356:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.357:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.358:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.359:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.753:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.48:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.49:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.50:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.51:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.52:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.53:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.54:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.403:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.404:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.405:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.407:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.645:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.646:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.647:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.648:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.649:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.651:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.652:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.666:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.667:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.668:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.738:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.896:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.324:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Information : Cleaned.
:mozilla.288:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.289:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.734:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.735:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.736:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.612:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.613:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.614:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.615:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.616:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.441:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.442:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.443:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.444:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.321:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.549:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.550:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.551:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.552:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.553:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.554:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.555:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.556:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.453:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.454:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.455:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.456:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.457:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.814:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.915:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.916:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.917:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.701:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.702:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.703:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.704:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.705:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.706:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.707:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.708:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.709:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.710:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.711:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.712:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.713:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.714:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.715:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.716:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.717:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.718:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.719:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.720:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.721:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.722:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.723:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.724:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.725:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.726:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.727:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.728:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.729:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.730:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.731:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.732:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.733:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.579:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.580:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.581:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.587:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.588:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.589:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.760:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Targetnet : Cleaned.
:mozilla.761:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Targetnet : Cleaned.
:mozilla.537:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.121:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.122:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.123:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.124:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.125:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.126:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.128:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.129:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.130:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.131:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.107:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.108:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.861:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.862:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.863:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.864:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.865:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.866:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.305:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.319:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.320:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.834:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.235:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.236:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.237:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.238:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.239:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.240:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.241:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.242:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.243:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.329:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.330:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.331:C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt -> TrackingCookie.Zedo : Cleaned.


::Report end

Panda Scan:


Incident Status Location

Potentially unwanted tool:application/mywebsearch Not disinfected HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
Adware:adware/whenusearch Not disinfected Windows Registry
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.advertising.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.advertising.com/]
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.com.com/]
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.tribalfusion.com/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.atdmt.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.fastclick.net/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[media.fastclick.net/]
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.adrevolver.com/]
Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.trafficmp.com/]
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.realmedia.com/]
Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.gostats.com/]
Spyware:Cookie/Toplist Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.toplist.cz/]
Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.gostats.com/]
Spyware:Cookie/Cd Freaks Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.club.cdfreaks.com/]
Spyware:Cookie/Cd Freaks Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.cdfreaks.com/]
Spyware:Cookie/Cd Freaks Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.club.cdfreaks.com/]
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.atwola.com/]
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.target.com/]
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.belnk.com/]
Spyware:Cookie/Go Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.go.com/]
Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.xiti.com/]
Spyware:Cookie/bravenetA Not disinfected C:\Documents and Settings\kameron\Application Data\Mozilla\Firefox\Profiles\4vxl1c64.Kameron\cookies.txt[.bravenet.com/]
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\kameron\Cookies\[email protected][1].txt

HJT Log (in normal mode):

Logfile of HijackThis v1.99.1
Scan saved at 3:07:00 PM, on 1/25/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\GE\97769 Dual Scroll Optical Mouse\Amoumain.exe
C:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Lexmark 4300 Series\lxcemon.exe
C:\Program Files\Lexmark 4300 Series\ezprint.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\rsvp.exe
C:\WINDOWS\system32\lxcecoms.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Documents and Settings\kameron\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
O1 - Hosts: 63.161.183.91 bnls.valhallalegends.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {68aa99af-32b4-46b7-ac5b-6c932eb83767} - C:\WINDOWS\system32\jgpseq.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [WheelMouse] Amoumain.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [VirtualDrive] "C:\Program Files\FarStone\VirtualDrive\VDTask.exe" /AutoRestore
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [lxcemon.exe] "C:\Program Files\Lexmark 4300 Series\lxcemon.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 4300 Series\ezprint.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [LXCECATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCEtime.dll,[email protected]
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {10093E98-C073-4C75-8D0E-FB5CD3A71D33} (ZoneUpwords Object) - http://messenger.zone.msn.com/binary/Upwords.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1142117466747
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://messenger.zone.msn.com/binary/ZAxRcMgr.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: lxce_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcecoms.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Unknown owner - C:\WINDOWS\system32\ZoneLabs\vsmon.exe (file missing)

My system has been running better. My start up and shut down times don't take forever (they are pretty much normal, but my start up time might be a little bit more.) Instead of my internet not loading at all, it loads about 20 - 30 minutes after the computer starts up, which is better than nothing. I will restart my computer right now and if I notice something different, I will put it on here. I know there is probably still more work to do, though.
 

·
Registered
Joined
·
2,335 Posts
Please read this post completely before begining the fix. If there's anything that you do not understand, kindly ask your questions before proceeding.
Please ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this
webpage would not be available when you're carrying out the fix.



IT IS IMPORTANT THAT YOU DON'T MISS A STEP & PERFORM EVERYTHING IN THE RIGHT ORDER.

----------------------------------------

P2P - I see you have P2P software installed on your machine. We are not here to pass judgment on file-sharing as a concept.
However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more
susceptible to re-infections. It may be contributing to your current situation. This page will give you further information.

These programs are:

BitTorrent
Limewire


----------------------------------------

CLEAN-OUTS

Clear IE's Cookies and Cache

  • Close all instances of Outlook Express and Internet Explorer.
  • Go to Control Panel » Internet Options » General tab.
  • Click the Delete Cookies.
  • Next to it, Click the Delete Files button.
  • When prompted, place a check in: Delete all offline content, click OK.



Clear Firefox' Cookies

  • Open Firefox.
  • Click Tools » Options.
  • Click the Privacy tab, then the Cookies tab.
  • Click the Clear Cookies Now button.
  • Then click OK to exit.



CLEAR AVG A/S QUARANTINE

  • Launch AVG A/S
  • Click on Show Quarantine
  • Click on Select All
  • Click on Remove Finally
  • Close AVG A/S

----------------------------------------

DOWNLOADS

REGISTRY FIX

Download the attached shox.zip file at the bottom of this post to your desktop. Double click on the zip folder,
then double click on the .reg file within.
Click yes to allow it to merge into your registry.

----------------------------------------

Open HijackThis and click on 'Do a System Scan Only'. Check the following entries (If they still exist, make sure you do not miss any)


O1 - Hosts: 63.161.183.91 bnls.valhallalegends.com
O2 - BHO: (no name) - {68aa99af-32b4-46b7-ac5b-6c932eb83767} - C:\WINDOWS\system32\jgpseq.dll (file missing)




Please remember to close all other windows, including browsers then click Fix checked.

----------------------------------------

ON-LINE SCANS


Kaspersky - Extended

Establish an internet connection & perform an online scan with Internet Explorer at Kaspersky Online Scanner

Answer Yes, when prompted to install an ActiveX component.

  • The program will then begin downloading the latest definition files.
  • Once the files have been downloaded click on NEXT
  • Locate the Scan Settings button & configure to:
    • Scan using the following Anti-Virus database:
      • Extended
    • Scan Options:
      • Scan Archives
        [*]Scan Mail Bases
  • Click OK & have it scan My Computer
  • Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect.
    We only require a report from it.
  • Click the Save as Text button to save the file to your desktop so that you may post it in your next reply

* Turn off the real time scanner of any existing antivirus program while performing the online scan
----------------------------------------

FOLLOW-UP

Please return and post these items in the order listed:


Kaspersky scan
A new HJT log run in Normal Mode


Please note: In order to properly see what is on your system, all HJT logs must be run in the normal mode

Please let me know how your system is behaving.
 

·
Registered
Joined
·
10 Posts
Discussion Starter · #5 ·
Thank you for the post, but one question: How do you view attachments? It's probably a pretty obvious answer, but I'm not able to find the 'shox.zip' file anywhere on here.
 

·
Registered
Joined
·
10 Posts
Discussion Starter · #7 ·
Haha, no problem. I just wasn't sure if I had missed something. Again, thanks for the reply. Here are the scans you asked for.
Kapersky Scan:
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Saturday, January 27, 2007 7:52:37 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 27/01/2007
Kaspersky Anti-Virus database records: 262638
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
H:\
I:\
J:\
K:\

Scan Statistics:
Total number of scanned objects: 44757
Number of viruses found: 1
Number of infected objects: 2 / 0
Number of suspicious objects: 0
Duration of the scan process: 01:48:53

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\kameron\Application Data\AVG7\Log\emc.log Object is locked skipped
C:\Documents and Settings\kameron\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\kameron\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\kameron\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\kameron\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\kameron\Local Settings\History\History.IE5\MSHist012007012620070127\index.dat Object is locked skipped
C:\Documents and Settings\kameron\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\kameron\My Documents\My Received Files\My Downloads\vnc-4_1_1-x86_win32.exe/data0001 Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4110 skipped
C:\Documents and Settings\kameron\My Documents\My Received Files\My Downloads\vnc-4_1_1-x86_win32.exe Inno: infected - 1 skipped
C:\Documents and Settings\kameron\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\kameron\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{21915684-3353-4F5E-9E4A-A9CC6774A24C}\RP1\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{A5BDC2C4-A3F3-4708-81BE-05FB65B1ACB3}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{C804DC5C-DC44-4B11-9015-4F0F4B9182E2}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

HijackThis Log (Normal Mode):

Logfile of HijackThis v1.99.1
Scan saved at 11:53:39 AM, on 1/27/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\GE\97769 Dual Scroll Optical Mouse\Amoumain.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Lexmark 4300 Series\lxcemon.exe
C:\Program Files\Lexmark 4300 Series\ezprint.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\rsvp.exe
C:\WINDOWS\system32\lxcecoms.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\kameron\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [WheelMouse] Amoumain.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [VirtualDrive] "C:\Program Files\FarStone\VirtualDrive\VDTask.exe" /AutoRestore
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [lxcemon.exe] "C:\Program Files\Lexmark 4300 Series\lxcemon.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 4300 Series\ezprint.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe" -H
O4 - HKLM\..\Run: [LXCECATS] rundll32 C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\LXCEtime.dll,[email protected]
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {10093E98-C073-4C75-8D0E-FB5CD3A71D33} (ZoneUpwords Object) - http://messenger.zone.msn.com/binary/Upwords.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1142117466747
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://messenger.zone.msn.com/binary/ZAxRcMgr.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: lxce_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcecoms.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Unknown owner - C:\WINDOWS\system32\ZoneLabs\vsmon.exe (file missing)

I'm going to restart and let you know how the computer runs afterward.
 

·
Registered
Joined
·
2,335 Posts
Delete the following Files indicated in RED and Folders indicated in BLUE if they still exist.

C:\Documents and Settings\kameron\My Documents\My Received Files\My Downloads\vnc-4_1_1-x86_win32.exe


This is infected with a Remote Administrator which will allow others access to your system
----------------------------------------

Your logs are now clean. Please complete the next "housekeeping" steps and read through the information below.


----------------------------------------

Windows XP - Reset Hidden Files


  • Click Start.
  • Open My Computer.
  • Select the Tools menu and click Folder Options.
  • Select the View tab.
  • Deselect the Show hidden files and folders option.
  • Select the Hide file extensions for known types option.
  • Select the Hide protected operating system files option.
  • Click Yes to confirm.
  • Click OK.

----------------------------------------

Clean-out and Reset System Restore

This will clean out any junk or malicious files left behind in System Restore

  • To turn off System Restore click Start > Right Click My Computer > Properties.
  • Click the System Restore tab and Check
  • "Turn off System Restore" or "Turn off System Restore on all drives" Click Apply.
  • When turning off System Restore, the existing restore points will be deleted. Click Yes to do this then Click OK.

  • Turn on System Restore by Clicking Start. Right-click My Computer, and then click Properties.
  • Click the System Restore tab. Uncheck "Turn off System Restore" or "Turn off System Restore on all drives."
  • Click Apply, and then OK.

This will create a new Restore Point.

----------------------------------------

RE-ENABLE ANTI-SPYWARE APPLICATIONS

If you were instructed to dis-able Anti-spyware applications during this fix, you may re-enable them

----------------------------------------

Please read through the following information to help protect your computer in the future.


KEEP YOUR OPERATING SYSTEM UPDATED

Please ensure that you have already patched your system against the recent WMF exploit. Go to this page to get the KB912919 patch

MICROSOFT UPDATES

It is very important that you get all of the critical updates for your Operating System and Internet Explorer. Keeping your OS and browser
up to date will help make you less susceptible to attacks by Trojans and viruses. Please go to Microsoft
and download all the critical updates to help prevent possible re-infection.


ENABLE WINDOWS AUTO UPDATE

Go to Start>Run - type wuaucpl.cpl
tick on the checkbox - "Keep my computer up to date"
Under settings, choose "Automatically download the updates, and install them on the schedule that I specify".
Click on "OK".


ENABLE WINDOWS AUTO UPDATE

From within Internet Explorer click on the Tools menu and then click on Internet Options.
  • Select the Security tab
    • Click once on the Internet icon so it becomes highlighted.
    • Select Custom Level .
      • Change 'Download signed ActiveX controls' to Prompt
      • Change 'Download unsigned ActiveX controls' to Disable
      • Change 'Initialize and script ActiveX controls not marked as safe' to Disable
      • Change 'Installation of desktop items' to Prompt
      • Change 'Launching programs and files in an IFRAME' to Prompt
      • Change 'Navigate sub-frames across different domains' to Prompt
      • When all these changes have been made, click on the OK button.
    • If it prompts you as to whether or not you want to save the settings, press the Yes button.
  • Select OK to exit the Internet Properties page.



TOOLS TO HELP KEEP YOUR SYSTEM CLEAN

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programs:

SpywareBlaster to help prevent spyware from installing in the first place.
  • Install & update SpywareBlaster with the latest definitions.
  • After you have updated, click the button - enable protection for all unprotected items


SpywareGuard to catch and block spyware before it can execute.


SPYBOT - SEARCH & DESTROY Download and install Spybot - Search & Destroy with its
TeaTimer option.
This will provide realtime spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with
the program on a regular basis just as you would an antivirus software. A tutorial on installing & using this product can be found here


AD-AWARE Download and install Ad-Aware. You should use this program to scan
your computer on a regular basis just as you would an antivirus software in conjunction with Spybot. A tutorial on installing & using this product
can be found here


IE-SPYAD IE/Spyad places more than 4000 dubious websites and domains in the IE Restricted list. This severely impair attempts to infect your system. It basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites.
  • Download IE-SpyAD - Extract the contents to a new folder
  • From within the folder, double-click install.bat
  • Select Option #2 - Install the new IE-SPYAD list.
  • Then return to the main menu.
  • Select option #4 - Add the old porn sites domain

A tutorial for IE-SPYAD can be found here


MVPS HOST FILE The MVPS Hosts file replaces your current HOSTS file
with one that will restrict known ad sites form serving you unsolicited advertisements. Basically, this prevents your computer from connecting to
those sites by redirecting them to 127.0.0.1 which is the IP of your local computer.

  • Download Host.zip to your desktop.
  • From your Desktop right-click (hosts.zip) and select:
    Extract All from the menu.
  • Click Next, click Next, select the option:
    "Show Extracted files"
  • Click Finish

This will open the newly created hosts folder on your Desktop.

Double-click on the included mvps.bat file, this will rename the existing HOSTS file to HOSTS.MVP, then it will copy the included updated
HOSTS file to the correct location on your machine.


MCAFEE SITE ADVISOR SITE ADVISOR is a free IE plug-in (also suport for Firefox browser)
which is used in conjunction with the Google search engine. It advises which web sites are considered safe and which sites could pose a problem.
It also shows what problems were encountered with each site, such as malicious downloads, spam, and related links.


ANTI-VIRUS AND FIREWALL PROGRAMS


ANTIVIRUS SOFTWARE It is very important that you have anti-virus software running on your machine.
This alone can save you a lot of trouble with malware in the future.
See this link for a listing of some online antivirus scanners: Anti-Spyware Tutorial

Here are some very good free Antivirus products which are available:




If you do not have a firewall, here are 4 free ones available for personal use:

Understanding and Using Firewalls



INFORMATIONAL READING


In light of your recent troubles, I'm sure you'll like to avoid any future infections. Please take a look at these well written articles:




Please respond one more time and let me know you received this post so it can be marked resolved



If you feel that we have helped you, please help us keep this site free for all. Please visit our DONATION PAGE.
 
1 - 8 of 8 Posts
Status
Not open for further replies.
Top