Piriform Community Forums > Logs...web Searches Redirected...etc

Full Version: Logs...web Searches Redirected...etc

Piriform Community Forums > Computer Help and Discussion > Spyware Hell

paulvinthemix

Jan 10 2007, 12:08 AM

SUPERAntiSpyware Scan Log
Generated 01/09/2007 at 03:23 PM

Application Version : 3.4.1000

Core Rules Database Version : 3161
Trace Rules Database Version: 1173

Scan type : Quick Scan
Total Scan Time : 00:20:45

Memory items scanned : 459
Memory threats detected : 0
Registry items scanned : 692
Registry threats detected : 0
File items scanned : 34038
File threats detected : 248

Adware.Tracking Cookie
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@cnn.122.2o7[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@realmedia[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@apmebf[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@casalemedia[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@adecn[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@interclick[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@www.drivecleaner[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ads.pointroll[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@statcounter[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@stats.drivecleaner[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@fastclick[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@www.burstbeacon[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@adultfriendfinder[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@z1.adserver[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@questionmarket[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@cs.sexcounter[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ads.ratemyprofessors[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@targetnet[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@bluestreak[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@login.tracking101[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ads.revsci[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@citi.bridgetrack[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@partygaming.122.2o7[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@pt.crossmediaservices[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@nextag[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@atdmt[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@rotator.adjuggler[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@precisionclick[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@revsci[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@statse.webtrendslive[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@perf.overture[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@cbs.112.2o7[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@counter9.sextracker[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@trafficmp[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@1071868927[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@counter4.sextracker[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-hollywoodmedia.hitbox[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@adrevolver[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ad.contentmedianetwork[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-wachovia.hitbox[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ad1.clickhype[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@azjmp[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@tracker.myspacemaps[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@pitchforkmedia[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@riskwaters[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@1070312496[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@stat.onestat[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@www.serials[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ads.as4x.tmcs[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@www.fatpenguinmedia[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-dig.hitbox[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@qksrv[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@tacoda[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@cgi-bin[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@edge.ru4[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@try.starware[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@www.ticketsnow[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@247realmedia[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@data1.perf.overture[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@chicagosuntimes.122.2o7[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@mediaplex[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ads.jolinko[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ads.cnn[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@tribalfusion[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-legonewyorkinc.hitbox[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@media.adrevolver[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ad.yieldmanager[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@hitbox[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@partypoker[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@drivecleaner[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@bizrate[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-hollywood.hitbox[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@itxt.vibrantmedia[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@html[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@adinterax[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@zedo[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@cpvfeed[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@revenue[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@anat.tacoda[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@belnk[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@atwola[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@burstnet[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@advertising[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@2o7[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@adknowledge[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@sextracker[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@doubleclick[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@banner[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-foxsports.hitbox[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@as-us.falkag[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@maxserving[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@buycom.122.2o7[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@msnportal.112.2o7[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@adbrite[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@web4.realtracker[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@network.realmedia[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@tripod[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@stats.crossmediaservices[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@crossmediaservices[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-nyjets.hitbox[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@www.virusbursters[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ads.adbrite[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@01[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-warnerbrothers.hitbox[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@adopt.euroclick[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@lynxtrack[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@38262[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@www.stopzilla[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@stopzilla[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@data3.perf.overture[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@bs.serving-sys[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@kanoodle[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@findwhat[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@jamster[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-legacy.hitbox[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@h.starware[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@38266[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@3.adbrite[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ads.glispa[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@1071332492[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@cz11.clickzs[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@usatoday1.112.2o7[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@www.short-media[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@rambler[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@adopt.specificclick[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ticketsnow[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@serving-sys[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@adtech[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@tradedoubler[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@heavycom.122.2o7[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@roiservice[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@server2.bkvtrack[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@risk[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@overture[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-technuity.hitbox[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@campaign.indieclick[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@enterprise.clickdefense[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@sbc[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-bestbuy.hitbox[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@tracking.foxnews[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@warlog[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@www.sestat[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ads.belointeractive[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@dist.belnk[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-citgopetroleum.hitbox[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@goclick[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@imedia.foxsports[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@adserv.pitchforkmedia[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ads.as4x.tmcs.ticketmaster[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@counter5.sextracker[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@www.burstnet[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@fandango[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@valueclick[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@clicksor[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@server.lon.liveperson[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@4.adbrite[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@adserver.adreactor[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@track.adrevolver[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@toplist[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@reduxads.valuead[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@data2.perf.overture[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@dcsi583rp10000oevcqz9y4us_6l6d[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@mb[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@wpni.112.2o7[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ads.addynamix[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@e-2dj6wgkogkc5whq.stats.esomniture[2].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@mediaservices.myspace[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@66702201[1].txt
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@enhance[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@247realmedia[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@2o7[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@a.tribalfusion[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@ad.yieldmanager[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@adecn[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@adknowledge[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@adopt.specificclick[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@adrevolver[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@adrevolver[3].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@ads.addynamix[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@ads.cnn[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@ads.pointroll[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@ads.realcastmedia[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@ads.realtechnetwork[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@adv.webmd[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@advertising[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@apmebf[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@as-eu.falkag[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@atdmt[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@ath.belnk[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@atwola[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@azjmp[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@b.casalemedia[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@bannerspace[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@banner[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@belnk[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@bluestreak[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@c5.zedo[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@campaign.indieclick[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@casalemedia[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@citi.bridgetrack[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@clicksor[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@cnn.122.2o7[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@counter12.sextracker[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@counter9.sextracker[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@cs.sexcounter[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@dist.belnk[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@doubleclick[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@edge.ru4[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@ehg-dig.hitbox[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@ehg-foxsports.hitbox[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@fastclick[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@focalex[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@h.starware[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@hitbox[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@icc.intellisrv[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@kanoodle[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@maxserving[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@media.fastclick[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@mediaplex[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@msnportal.112.2o7[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@network.realmedia[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@nextag[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@optimize.indieclick[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@partypoker[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@perf.overture[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@qksrv[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@questionmarket[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@realmedia[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@revenue[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@revsci[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@roiservice[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@servedby.advertising[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@serving-sys[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@sextracker[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@stat.onestat[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@statse.webtrendslive[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@statsgold[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@tacoda[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@toplist[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@tradedoubler[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@trafficmp[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@tribalfusion[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@valueclick[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@www.4xxxtremepleasures[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@www.hardsextacy[2].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@www.starware[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@z1.adserver[1].txt
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@zedo[2].txt

AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 6:49:27 PM 1/9/2007

+ Scan result:

C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@247realmedia[1].txt -> TrackingCookie.247realmedia : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@247realmedia[1].txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.102:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.103:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.104:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.111:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@buycom.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@cbs.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@chicagosuntimes.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@cnn.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@heavycom.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@usatoday1.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@wpni.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@2o7[2].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@cnn.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@7search[2].txt -> TrackingCookie.7search : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@www.abcsearch[1].txt -> TrackingCookie.Abcsearch : Cleaned.
:mozilla.139:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.140:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.144:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.39:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Addynamix : Cleaned.
:mozilla.40:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Addynamix : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ads.addynamix[2].txt -> TrackingCookie.Addynamix : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@ads.addynamix[1].txt -> TrackingCookie.Addynamix : Cleaned.
:mozilla.172:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.173:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.174:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.175:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.176:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.177:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.178:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@rotator.adjuggler[2].txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.306:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.307:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.308:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.309:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.310:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.311:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@adrevolver[2].txt -> TrackingCookie.Adrevolver : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@track.adrevolver[1].txt -> TrackingCookie.Adrevolver : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@adrevolver[3].txt -> TrackingCookie.Adrevolver : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@z1.adserver[1].txt -> TrackingCookie.Adserver : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@z1.adserver[1].txt -> TrackingCookie.Adserver : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.10:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.6:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.7:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.8:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.9:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@advertising[1].txt -> TrackingCookie.Advertising : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@advertising[2].txt -> TrackingCookie.Advertising : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@servedby.advertising[2].txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.291:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.31:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.33:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.359:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.360:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.361:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@citi.bridgetrack[1].txt -> TrackingCookie.Bridgetrack : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@citi.bridgetrack[2].txt -> TrackingCookie.Bridgetrack : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@www.burstbeacon[1].txt -> TrackingCookie.Burstbeacon : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@www.burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.78:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.79:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.80:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.81:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.82:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.83:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@casalemedia[1].txt -> TrackingCookie.Casalemedia : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@b.casalemedia[1].txt -> TrackingCookie.Casalemedia : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@casalemedia[1].txt -> TrackingCookie.Casalemedia : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@centrport[1].txt -> TrackingCookie.Centrport : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@centrport[2].txt -> TrackingCookie.Centrport : Cleaned.
:mozilla.142:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned.
:mozilla.143:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ad1.clickhype[2].txt -> TrackingCookie.Clickhype : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@cz11.clickzs[2].txt -> TrackingCookie.Clickzs : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@com[1].txt -> TrackingCookie.Com : Cleaned.
:mozilla.358:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@data.coremetrics[1].txt -> TrackingCookie.Coremetrics : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@twci.coremetrics[1].txt -> TrackingCookie.Coremetrics : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@twci.coremetrics[1].txt -> TrackingCookie.Coremetrics : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Cleaned.
:mozilla.213:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.32:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@enhance[2].txt -> TrackingCookie.Enhance : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@e-2dj6wgkogkc5whq.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.366:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.367:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@as-us.falkag[2].txt -> TrackingCookie.Falkag : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@as-eu.falkag[2].txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.67:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.69:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.71:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.72:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.73:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@media.fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@findwhat[1].txt -> TrackingCookie.Findwhat : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@goclick[1].txt -> TrackingCookie.Goclick : Cleaned.
:mozilla.202:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.203:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.207:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.208:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.209:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.274:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.275:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-bestbuy.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-citgopetroleum.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-dig.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-foxsports.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-hollywood.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-hollywoodmedia.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-legacy.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-legonewyorkinc.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-nyjets.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-technuity.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-wachovia.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ehg-warnerbrothers.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@ehg-dig.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@ehg-foxsports.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@server.lon.liveperson[2].txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.41:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.42:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.279:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.280:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@stat.onestat[1].txt -> TrackingCookie.Onestat : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@stat.onestat[2].txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.256:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.257:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@data1.perf.overture[1].txt -> TrackingCookie.Overture : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@data2.perf.overture[1].txt -> TrackingCookie.Overture : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@data3.perf.overture[1].txt -> TrackingCookie.Overture : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@overture[1].txt -> TrackingCookie.Overture : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@perf.overture[1].txt -> TrackingCookie.Overture : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@perf.overture[1].txt -> TrackingCookie.Overture : Cleaned.
:mozilla.183:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.184:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.185:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.186:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.187:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.236:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
:mozilla.237:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@qksrv[2].txt -> TrackingCookie.Qksrv : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@qksrv[2].txt -> TrackingCookie.Qksrv : Cleaned.
:mozilla.145:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.146:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.147:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@ads.realcastmedia[1].txt -> TrackingCookie.Realcastmedia : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@web4.realtracker[1].txt -> TrackingCookie.Realtracker : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@revenue[1].txt -> TrackingCookie.Revenue : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@revenue[1].txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.299:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.300:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.303:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.305:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@edge.ru4[2].txt -> TrackingCookie.Ru4 : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@edge.ru4[1].txt -> TrackingCookie.Ru4 : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@counter4.sextracker[1].txt -> TrackingCookie.Sextracker : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@counter5.sextracker[1].txt -> TrackingCookie.Sextracker : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@counter9.sextracker[1].txt -> TrackingCookie.Sextracker : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@sextracker[2].txt -> TrackingCookie.Sextracker : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@counter12.sextracker[1].txt -> TrackingCookie.Sextracker : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@counter9.sextracker[1].txt -> TrackingCookie.Sextracker : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@sextracker[1].txt -> TrackingCookie.Sextracker : Cleaned.
:mozilla.292:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.293:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.294:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.295:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@adopt.specificclick[1].txt -> TrackingCookie.Specificclick : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@adopt.specificclick[2].txt -> TrackingCookie.Specificclick : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@h.starware[1].txt -> TrackingCookie.Starware : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@try.starware[1].txt -> TrackingCookie.Starware : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@h.starware[1].txt -> TrackingCookie.Starware : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@www.starware[1].txt -> TrackingCookie.Starware : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@statcounter[2].txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.152:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.153:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.154:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@anat.tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@targetnet[1].txt -> TrackingCookie.Targetnet : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@login.tracking101[2].txt -> TrackingCookie.Tracking101 : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@trafficmp[2].txt -> TrackingCookie.Trafficmp : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@trafficmp[2].txt -> TrackingCookie.Trafficmp : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@trafic[1].txt -> TrackingCookie.Trafic : Cleaned.
:mozilla.76:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.77:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@a.tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@reduxads.valuead[2].txt -> TrackingCookie.Valuead : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@valueclick[2].txt -> TrackingCookie.Valueclick : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@valueclick[1].txt -> TrackingCookie.Valueclick : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.63:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.64:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.65:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.66:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.68:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.148:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.149:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.150:C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\f6toegkh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
C:\Documents and Settings\HP_Administrator\Cookies\hp_administrator@zedo[2].txt -> TrackingCookie.Zedo : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@c5.zedo[1].txt -> TrackingCookie.Zedo : Cleaned.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\Cookies\hp_administrator@zedo[2].txt -> TrackingCookie.Zedo : Cleaned.
C:\System Volume Information\_restore{D7BD54B8-C977-4903-8CE7-9415B851EC71}\RP368\A0073577.exe -> Trojan.Small.fb : Cleaned with backup (quarantined).

::Report end

Logfile of HijackThis v1.97.7
Scan saved at 7:07:23 PM, on 1/9/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Avant Browser\avant.exe
c:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\HP_Administrator\Desktop\Paul's Stuff\setup\Setups\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O4 - HKLM\..\Run: [HPHUPD08] "c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe"
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPwuSchd2.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [CTSysVol] "C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Add to AD Black List - C:\Program Files\Avant Browser\AddToADBlackList.htm
O8 - Extra context menu item: Block All Images from the Same Server - C:\Program Files\Avant Browser\AddAllToADBlackList.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Highlight - C:\Program Files\Avant Browser\Highlight.htm
O8 - Extra context menu item: Open All Links in This Page... - C:\Program Files\Avant Browser\OpenAllLinks.htm
O8 - Extra context menu item: Open In New Avant Browser - C:\Program Files\Avant Browser\OpenInNewBrowser.htm
O8 - Extra context menu item: Search - C:\Program Files\Avant Browser\Search.htm
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Connection Help (HKLM)
O9 - Extra 'Tools' menuitem: Connection Help (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4FE89055-5300-469E-AFAD-DEB3181EDE76} (PearsonAsstX Control) - http://asp.mathxl.com/applets/PearsonInstallAsst.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/get/flash...ent/swflash.cab
O16 - DPF: {E6D23284-0E9B-417D-A782-03E4487FC947} (Pearson MathXL Player) - http://asp.mathxl.com/books/_Players/MathPlayer.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{24C35E9D-43DE-47B3-8C8D-C6AC403DF807}: NameServer = 85.255.116.131,85.255.112.206
O17 - HKLM\System\CCS\Services\Tcpip\..\{310B44D2-E97A-4504-AD25-9508F9AA06ED}: NameServer = 85.255.116.131,85.255.112.206
O17 - HKLM\System\CCS\Services\Tcpip\..\{EAB497CF-E13A-4504-8BFD-3289EA10B418}: NameServer = 85.255.116.131,85.255.112.206
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.131 85.255.112.206
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.131 85.255.112.206

any help would be greatful

rridgely

Jan 10 2007, 01:18 AM

Please download VundoFix.exe
to your desktop.

Double-click VundoFix.exe to run it.
Click the Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will reboot your computer, click OK.
Please post the contents of C:\vundofix.txt into your next reply

Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above
instructions starting from "Click the Scan for Vundo button." when
VundoFix appears at reboot.

Post the vundofix log and a new hijackthis log.

paulvinthemix

Jan 10 2007, 01:54 AM

vundo didnt find anything, but here is another hijackthis log. any other advice?

Logfile of HijackThis v1.97.7
Scan saved at 8:54:25 PM, on 1/9/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\dllhost.exe
c:\windows\system\hpsysdrv.exe
C:\Program Files\Common Files\Microsoft Shared\Speech\sapisvr.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Avant Browser\avant.exe
C:\Documents and Settings\HP_Administrator\Desktop\Paul's Stuff\setup\Setups\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O4 - HKLM\..\Run: [HPHUPD08] "c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe"
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPwuSchd2.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [CTSysVol] "C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Add to AD Black List - C:\Program Files\Avant Browser\AddToADBlackList.htm
O8 - Extra context menu item: Block All Images from the Same Server - C:\Program Files\Avant Browser\AddAllToADBlackList.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Highlight - C:\Program Files\Avant Browser\Highlight.htm
O8 - Extra context menu item: Open All Links in This Page... - C:\Program Files\Avant Browser\OpenAllLinks.htm
O8 - Extra context menu item: Open In New Avant Browser - C:\Program Files\Avant Browser\OpenInNewBrowser.htm
O8 - Extra context menu item: Search - C:\Program Files\Avant Browser\Search.htm
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Connection Help (HKLM)
O9 - Extra 'Tools' menuitem: Connection Help (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4FE89055-5300-469E-AFAD-DEB3181EDE76} (PearsonAsstX Control) - http://asp.mathxl.com/applets/PearsonInstallAsst.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/get/flash...ent/swflash.cab
O16 - DPF: {E6D23284-0E9B-417D-A782-03E4487FC947} (Pearson MathXL Player) - http://asp.mathxl.com/books/_Players/MathPlayer.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{24C35E9D-43DE-47B3-8C8D-C6AC403DF807}: NameServer = 85.255.116.131,85.255.112.206
O17 - HKLM\System\CCS\Services\Tcpip\..\{310B44D2-E97A-4504-AD25-9508F9AA06ED}: NameServer = 85.255.116.131,85.255.112.206
O17 - HKLM\System\CCS\Services\Tcpip\..\{EAB497CF-E13A-4504-8BFD-3289EA10B418}: NameServer = 85.255.116.131,85.255.112.206
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.131 85.255.112.206
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.131 85.255.112.206

rridgely

Jan 10 2007, 03:18 AM

You may want to print out these instructions for reference, since you will have to restart your computer during the fix.

Please download FixWareout from one of these sites:
http://downloads.subratam.org/Fixwareout.exe
http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe

Save it to your desktop and run it. Click Next, then Install, make sure "Run fixit" is checked and click Finish.
The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.

Once the desktop loads please post the text that will open (report.txt) and a new Hijackthis log.

paulvinthemix

Jan 10 2007, 05:08 AM

fixwareout and hijack list. thanks again for all this...

Fixwareout
Last edited 1/1/2006
Post this report in the forums please
...
Prerun check
»»»»» HKLM run and Winlogon System values
»»»»» System restarted
...
Reg Entries that were deleted
...
Random Runs removed from HKLM
...

PLEASE NOTE, There WILL be LEGITIMATE FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.

»»»»» Searching by size/names...

»»»»»
Search five digit cs, dm kd and jb files.
This WILL/CAN also list Legit Files, Submit them at Virustotal

Other suspects.

»»»»» Misc files.

»»»»» Checking for older varients covered by the Rem3 tool.

»»»»» Postrun check
»»»»» HKLM run
»»»»» Winlogon System value
"system"=""
»»»»»

Logfile of HijackThis v1.97.7
Scan saved at 12:08:22 AM, on 1/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe
C:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Avant Browser\avant.exe
C:\Documents and Settings\HP_Administrator\Desktop\Paul's Stuff\setup\Setups\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O4 - HKLM\..\Run: [HPHUPD08] "c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe"
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPwuSchd2.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [CTSysVol] "C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Add to AD Black List - C:\Program Files\Avant Browser\AddToADBlackList.htm
O8 - Extra context menu item: Block All Images from the Same Server - C:\Program Files\Avant Browser\AddAllToADBlackList.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Highlight - C:\Program Files\Avant Browser\Highlight.htm
O8 - Extra context menu item: Open All Links in This Page... - C:\Program Files\Avant Browser\OpenAllLinks.htm
O8 - Extra context menu item: Open In New Avant Browser - C:\Program Files\Avant Browser\OpenInNewBrowser.htm
O8 - Extra context menu item: Search - C:\Program Files\Avant Browser\Search.htm
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Connection Help (HKLM)
O9 - Extra 'Tools' menuitem: Connection Help (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4FE89055-5300-469E-AFAD-DEB3181EDE76} (PearsonAsstX Control) - http://asp.mathxl.com/applets/PearsonInstallAsst.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/Facebo...otoUploader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/get/flash...ent/swflash.cab
O16 - DPF: {E6D23284-0E9B-417D-A782-03E4487FC947} (Pearson MathXL Player) - http://asp.mathxl.com/books/_Players/MathPlayer.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{24C35E9D-43DE-47B3-8C8D-C6AC403DF807}: NameServer = 85.255.116.131,85.255.112.206
O17 - HKLM\System\CCS\Services\Tcpip\..\{310B44D2-E97A-4504-AD25-9508F9AA06ED}: NameServer = 85.255.116.131,85.255.112.206
O17 - HKLM\System\CCS\Services\Tcpip\..\{EAB497CF-E13A-4504-8BFD-3289EA10B418}: NameServer = 85.255.116.131,85.255.112.206
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.131 85.255.112.206
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.131 85.255.112.206

paulvinthemix

Jan 12 2007, 10:41 PM

anything else i can do?

rridgely

Jan 12 2007, 10:42 PM

Actually yes there is...

I was just waiting on a second opinion from another helper.

Lets try this:

Download Blacklight beta HERE and save it to your desktop.
Run the program, accept statement > click next then scan
When its finished scanning exit the program and post back the log if it detects hidden files, The log is called 'fsbl-<date/time>.log' which will save to the same location as the blbeta.exe file.

paulvinthemix

Jan 12 2007, 11:03 PM

01/12/07 17:54:43 [Info]: BlackLight Engine 1.0.55 initialized
01/12/07 17:54:43 [Info]: OS: 5.1 build 2600 (Service Pack 2)
01/12/07 17:54:43 [Note]: 7019 4
01/12/07 17:54:43 [Note]: 7005 0
01/12/07 17:54:46 [Note]: 7006 0
01/12/07 17:54:46 [Note]: 7011 1440
01/12/07 17:54:46 [Note]: 7026 0
01/12/07 17:54:46 [Note]: 7026 0
01/12/07 17:55:15 [Note]: FSRAW library version 1.7.1021
01/12/07 18:00:17 [Note]: 2000 1012
01/12/07 18:02:24 [Note]: 7007 0

rridgely

Jan 13 2007, 06:24 AM

Run Kaspersky WebScanner

Please go HERE and click Kaspersky Online Scanner
Read and Accept the Agreement
You will be promted to install an ActiveX component from Kaspersky, Click Yes.
If you see a Windows dialog asking if you want to install this software, click the Install button.
The program will launch and then begin downloading the latest definition files,
When the "Update progress" line changes to "Ready" and the "NEXT ->" button becomes available, please click on it.
Click on the Scan Settings button, and in the next window select the Extended database, and click Ok.
Under "Please select a target to scan:", click My Computer to start the scan.
When the scan is finished, click the "Save as Text" button, and save the file as kavscan.txt to your Desktop, close the Kaspersky On-line Scanner window.
Paste kaspersky log onto forum.

paulvinthemix

Jan 14 2007, 08:39 PM

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Sunday, January 14, 2007 3:37:28 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 14/01/2007
Kaspersky Anti-Virus database records: 258402
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\
F:\
G:\
H:\
I:\

Scan Statistics:
Total number of scanned objects: 121622
Number of viruses found: 3
Number of infected objects: 6 / 0
Number of suspicious objects: 0
Duration of the scan process: 01:24:31

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\eHome\logs\ehRecvr.log Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\Aim\paulvinthemix\cert8.db Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\Aim\paulvinthemix\key3.db Object is locked skipped
C:\Documents and Settings\HP_Administrator\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\Desktop\Paul's Stuff\setup\Setups\kmd171gu_en (1).exe/data0004/cd_clint.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
C:\Documents and Settings\HP_Administrator\Desktop\Paul's Stuff\setup\Setups\kmd171gu_en (1).exe/data0004/cd_htm.dll Infected: not-a-virus:AdWare.Win32.Cydoor skipped
C:\Documents and Settings\HP_Administrator\Desktop\Paul's Stuff\setup\Setups\kmd171gu_en (1).exe/data0004 Infected: not-a-virus:AdWare.Win32.Cydoor skipped
C:\Documents and Settings\HP_Administrator\Desktop\Paul's Stuff\setup\Setups\kmd171gu_en (1).exe Inno: infected - 3 skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\History\History.IE5\MSHist012007011420070115\index.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\hpodvd09.log Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\_hphtra07.log Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\My Documents\My Music\iTunes\iTunes Library.itl Object is locked skipped
C:\Documents and Settings\HP_Administrator\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\HP_Administrator\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\hp\bin\KillWind.exe Infected: not-a-virus:RiskTool.Win32.PsKill.p skipped
C:\Program Files\Steam\Steam.log Object is locked skipped
C:\Program Files\Steam\SteamApps\winui.gcf Object is locked skipped
C:\Program Files\Steam\SteamLogs\SteamStats.log Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{D7BD54B8-C977-4903-8CE7-9415B851EC71}\RP336\A0068098.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\_restore{D7BD54B8-C977-4903-8CE7-9415B851EC71}\RP373\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{955E3F31-CBC5-442A-A913-7614F7B5AB81}.crmlog Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{09FD3F33-658E-4B2E-A18B-336159EEFD71}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\Media Ce.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\drivers\sptd0701.sys Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\_audioscrobbler.log Object is locked skipped

Scan process completed.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.