BleepingComputer.com: dwwin.exe - bad image error

Jump to content

Forum Guidelines

Posted Image Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.

Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help


Posted Image Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic will be looked at and responded to. So please be patient.


Posted Image DO NOT RUN ComboFix unless requested to.


Posted Image Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log.


Posted Image When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc.


Posted Image Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.
  • 4 Pages +
  • 1
  • 2
  • 3
  • 4
  • You cannot start a new topic
  • This topic is locked

dwwin.exe - bad image error

#31 User is offline   Elise 

  • Bleepin' Blonde
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Study Hall Admin
  • Posts: 38,982
  • Joined: 05-October 07
  • Gender:Female
  • Location:Romania

Posted 19 January 2010 - 02:19 PM

What fails to boot? Your backup drive? Just boot normally, go to My Computer, right click on your d drive and select scan sith Norton antivirus (or something like that). If the context-menu option isn't there, open Norton, and do a custom scan of the k drive only (I am not too familiar with Norton, so no detailed instructions for that).
regards, Elise

"The mind is its own place, and in itself can make a heaven of hell, a hell of heaven." ~ John Milton
Posted Image Follow BleepingComputer on: Facebook | Twitter | Google+

#32 User is offline   pringles06 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 25
  • Joined: 31-December 09

Posted 19 January 2010 - 03:15 PM

No, Norton fails to boot.

#33 User is offline   Elise 

  • Bleepin' Blonde
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Study Hall Admin
  • Posts: 38,982
  • Joined: 05-October 07
  • Gender:Female
  • Location:Romania

Posted 19 January 2010 - 03:23 PM

Hello pringles06,

Lets try Super antispyware instead. Note this may take a while, you can scan one drive at a time.

Before we start fixing anything you should print out these instructions or copy them to a NotePad file so they will be accessible. Some steps will require you to disconnect from the Internet or use Safe Mode and you will not have access to this page.

TFC
--------
Download TFC by OldTimer to your desktop.
(TFC only cleans temp folders. It will not clean URL history, prefetch, or cookies).
Close any open windows.
  • Double click the TFC icon to run the program
  • TFC will close all open programs itself in order to run,
  • Click the Start button to begin the process.
  • Allow TFC to run uninterrupted.
  • The program should not take long to finish it's job.
Once its finished it should automatically reboot your machine, if it doesn't, manually reboot to ensure a complete clean

NOTE:
It's normal after running TFC cleaner that the PC will be slower to boot the first time.

TFC (Temp File Cleaner) will clear out all temp folders for all user accounts (temp, IE temp, java, FF, Opera, Chrome, Safari), including Administrator, All Users, LocalService, NetworkService, and any other accounts in the user folder.


SUPERANTISPYWARE
-----------------------------
Please download and scan with SUPERAntiSpyware Free
  • Double-click SUPERAntiSypware.exe and use the default settings for installation.
  • An icon will be created on your desktop. Double-click that icon to launch the program.
  • If it will not start, go to Start > All Prgrams > SUPERAntiSpyware and click on Alternate Start.
  • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)
  • In the Main Menu, click the Preferences... button.
  • Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.
  • Click the "Scanning Control" tab, and under Scanner Options, make sure the following are checked (leave all others unchecked):
    • Close browsers before scanning.
    • Scan for tracking cookies.
    • Terminate memory threats before quarantining.

  • Click the "Close" button to leave the control center screen and exit the program.
  • Do not run a scan just yet.
Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Scan with SUPERAntiSpyware as follows:
  • Launch the program and back on the main screen, under "Scan for Harmful Software" click Scan your computer.
  • On the left, make sure you check C:\Fixed Drive as well as your backup drives (if the scan takes too long, scan each drive separately).
  • On the right, under "Complete Scan", choose Perform Complete Scan and click "Next".
  • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
  • Make sure everything has a checkmark next to it and click "Next".
  • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
  • If asked if you want to reboot, click "Yes" and reboot normally.
  • To retrieve the removal information after reboot, launch SUPERAntispyware again.
    • Click Preferences, then click the Statistics/Logs tab.
    • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    • Please copy and paste the Scan Log results in your next reply.

  • Click Close to exit the program.

In your next reply, please include the following:
  • SUPERAntiSpyware scan log
regards, Elise

"The mind is its own place, and in itself can make a heaven of hell, a hell of heaven." ~ John Milton
Posted Image Follow BleepingComputer on: Facebook | Twitter | Google+

#34 User is offline   pringles06 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 25
  • Joined: 31-December 09

Posted 20 January 2010 - 09:23 AM

Scan will probably take a few days at this point. I ran it all night in safe mode and it got through 1 1/3 hard drives, with the third hard drive being twice as big as the first two. Will post logs when completed. Thanks!

#35 User is offline   Elise 

  • Bleepin' Blonde
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Study Hall Admin
  • Posts: 38,982
  • Joined: 05-October 07
  • Gender:Female
  • Location:Romania

Posted 20 January 2010 - 11:25 AM

Okay, will wait for that, take your time.
regards, Elise

"The mind is its own place, and in itself can make a heaven of hell, a hell of heaven." ~ John Milton
Posted Image Follow BleepingComputer on: Facebook | Twitter | Google+

#36 User is offline   Elise 

  • Bleepin' Blonde
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Study Hall Admin
  • Posts: 38,982
  • Joined: 05-October 07
  • Gender:Female
  • Location:Romania

Posted 25 January 2010 - 12:51 PM

Hello, are you still there?
regards, Elise

"The mind is its own place, and in itself can make a heaven of hell, a hell of heaven." ~ John Milton
Posted Image Follow BleepingComputer on: Facebook | Twitter | Google+

#37 User is offline   pringles06 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 25
  • Joined: 31-December 09

Posted 01 February 2010 - 12:44 PM

Okay here we go (finally). Sorry for the wait. Three separate scans to complete the whole thing:

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 01/30/2010 at 07:06 PM

Application Version : 4.33.1000

Core Rules Database Version : 4495
Trace Rules Database Version: 2310

Scan type : Complete Scan
Total Scan Time : 02:26:37

Memory items scanned : 217
Memory threats detected : 0
Registry items scanned : 5756
Registry threats detected : 0
File items scanned : 571326
File threats detected : 576

Trojan.Unclassified-Packed/Suspicious
C:\SYSTEM VOLUME INFORMATION\_RESTORE{6140D920-5605-41B7-91F9-A11B337AB566}\RP11\A0001850.DLL
K:\C\C BACKUP\C\DOCUMENTS AND SETTINGS\COLE\APPLICATION DATA\IEBAR.DLL

Trojan.Dropper/BHONew-B
C:\SYSTEM VOLUME INFORMATION\_RESTORE{6140D920-5605-41B7-91F9-A11B337AB566}\RP11\A0001851.DLL
K:\C\C BACKUP\C\DOCUMENTS AND SETTINGS\COLE\APPLICATION DATA\SPOOLSV.DLL
K:\C\C BACKUP\C\DOCUMENTS AND SETTINGS\COLE\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\0FGVYZK5\VSVSKLXOLDILET[1].DLL

Trojan.Downloader-Gen/SnickerSnack
C:\SYSTEM VOLUME INFORMATION\_RESTORE{6140D920-5605-41B7-91F9-A11B337AB566}\RP11\A0001852.EXE
K:\C\C BACKUP\C\SYSVWIV.EXE

Adware.Tracking Cookie
.sixapart.adbureau.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.sixapart.adbureau.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.sixapart.adbureau.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.sixapart.adbureau.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.sixapart.adbureau.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.sixapart.adbureau.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ad.doubleclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.doubleclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.advertising.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.advertising.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.advertising.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.advertising.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.advertising.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.realmedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.realmedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.realmedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.realmedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.realmedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.realmedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.realmedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.realmedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.realmedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.realmedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.realmedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.atdmt.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.adrevolver.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
media.adrevolver.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
media.adrevolver.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
media.adrevolver.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
media.adrevolver.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
media.adrevolver.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.adrevolver.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.adrevolver.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.adbrite.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.adbrite.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
4.adbrite.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.adbrite.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.mediaplex.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.mediaplex.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
optimize.indieclick.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ads.addynamix.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ads.addynamix.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ads.addynamix.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ads.addynamix.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ads.addynamix.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ads.addynamix.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ads.addynamix.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ads.addynamix.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.casalemedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.casalemedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.casalemedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.casalemedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.casalemedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.casalemedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.casalemedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.casalemedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.casalemedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.casalemedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.casalemedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.casalemedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.apmebf.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.apmebf.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.cvs.pnimedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
cvs.pnimedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.cvs.pnimedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.questionmarket.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.questionmarket.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ads.pointroll.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ads.pointroll.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ads.pointroll.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ads.pointroll.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ads.pointroll.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ads.pointroll.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ads.pointroll.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ads.pointroll.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ads.pointroll.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.hitbox.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.hitbox.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.v7.stats.load.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.v7.stats.load.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.imrworldwide.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.imrworldwide.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.adtech.de [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ehg-rodale.hitbox.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.sexuality.about.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.tacoda.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.tacoda.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.tacoda.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.tacoda.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.tacoda.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.tacoda.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
ad.yieldmanager.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.yieldmanager.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
ad.yieldmanager.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
ad.yieldmanager.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
ad.yieldmanager.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
ad.yieldmanager.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.tribalfusion.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.tribalfusion.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.tribalfusion.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.tribalfusion.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.fastclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statcounter.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.fastclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.fastclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.fastclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.fastclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.fastclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.fastclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.fastclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.fastclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
gearslutz.advertserve.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.specificclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.specificclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.specificclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.specificclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.specificclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.specificclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.revenue.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.richmedia.yahoo.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.adlegend.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
anad.tacoda.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.zedo.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.zedo.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.zedo.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.zedo.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.zedo.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.trafficmp.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.trafficmp.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.trafficmp.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.trafficmp.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.trafficmp.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
www.googleadservices.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.spylog.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.kontera.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.kontera.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
www.burstnet.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.burstnet.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.burstnet.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
server.iad.liveperson.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
server.iad.liveperson.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.serving-sys.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.serving-sys.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.serving-sys.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.serving-sys.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.serving-sys.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.serving-sys.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.bs.serving-sys.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
ads.bridgetrack.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
ads.bridgetrack.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
ads.bridgetrack.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
www.googleadservices.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.precisionclick.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.precisionclick.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
statse.webtrendslive.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
stats.sphere.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.atwola.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.revsci.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.revsci.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.revsci.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.revsci.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.revsci.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.revsci.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.revsci.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.revsci.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.revsci.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.revsci.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.revsci.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.revsci.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.revsci.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.revsci.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.revsci.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.insightexpressai.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ehg-dig.hitbox.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ehg-dig.hitbox.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ehg-dig.hitbox.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ehg-dig.hitbox.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ehg-dig.hitbox.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ehg-dig.hitbox.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.collective-media.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.collective-media.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.collective-media.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.collective-media.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.bluestreak.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.statsync.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
www.statsync.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.adopt.euroclick.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.adopt.euroclick.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.adopt.euroclick.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.media6degrees.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.media6degrees.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.adopt.specificclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.adopt.specificclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.adopt.specificclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.overture.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.valueclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.scot.valueclick.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.libertymutual.112.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.mybleep.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
ads2.drivelinemedia.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.myvagina.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.myvagina.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
www.googleadservices.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
www.googleadservices.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.paypal.112.2o7.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.ehg-youtube.hitbox.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.videoegg.adbureau.net [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.yadro.ru [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.blogforadults.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.blogforadults.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
advancedcleaner.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.soundclick.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.soundclick.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.eyewonder.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
.eyewonder.com [ K:\C\C backup\C\Documents and Settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\cookies.txt ]
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@2.adbrite[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@3.adbrite[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@a.websponsors[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@account.juno[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@accounts[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ad.bannerconnect[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ad.contentmedianetwork[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ad.greenmarquee[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ad.interclick[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ad.thewheelof[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ad.uolmg[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ad.wanderlist[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ad.xplusone[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ad.yieldx[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ad1.clickhype[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@adecn[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@adknowledge[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@admarketplace[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@adopt.hbmediapro[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.1001skins[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.adbrite[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.as4x.tmcs.ticketmaster[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.as4x.tmcs[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.belointeractive[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.buddypic[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.cnn[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.humorbua[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.mediamayhemcorp[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.mininova[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.mobiledia[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.monster[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.realtechnetwork[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.sheknows[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.treehugger[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.us.e-planning[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.ytmnd[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads2.howardchui[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@adsmediaonline[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@adultadworld[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@adultcheck[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@adultsvideoondemand[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@adv.webmd[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@aff.primaryads[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@altbleep[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@anad.tacoda[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@anat.tacoda[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@atlas.fixionmedia[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@atwola[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@azjmp[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@belnk[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@burstnet[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@chordfind[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@clicks.emarketmakers[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@clicksor[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@clicktorrent[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@coolsavings[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@cpvfeed[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@cz4.clickzs[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@data1.perf.overture[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@data2.perf.overture[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@data3.perf.overture[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@diemotherbleeper.ytmnsfw[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@diemotherbleepers.ytmnsfw[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@dist.belnk[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ez-tracks[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@findadeath[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@find-me-a-gift.co[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@futuristicsexrobotz[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@gostats[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@h.starware[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@hbstats.livejournal[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@i.screensavers[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@icc.intellisrv[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@image.masterstats[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@insightbb[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@insightcom[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@insightfirst[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@kanoodle[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@login.tracking101[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@m1.webstats.motigo[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@media.vemuk[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@media.www.readbuzz[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@members.tripod[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@nextag[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@oasc02.247realmedia[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@optimize.indieclick[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@partner2profit[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@pitchforkmedia[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@podtrac.advertserve[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@pornotube[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@publishers.clickbooth[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@qnsr[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@real-sexy-search[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@redorbit[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@sales.liveperson[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@screensavers[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@server.cpmstar[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@serving.rpowermedia[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@sexdvd2000[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@sexliesandtruth[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@sexstoriespost[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@sexuality.about[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@sexyswedishbabe[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@soundclick[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@stats[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@superstats[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@te100.kontera[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@teenkelly[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@tgp.xxxkey[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@theeyes3.tripod[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@toplist[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@track.bestbuy[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@track.dmipartners[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@tracker.wholinked[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@tracking.foxnews[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@try.screensavers[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@try.starware[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@usenext[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@warlog[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@www.burstbeacon[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@www.ez-tracks[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@www.fatpenguinmedia[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@www.fullreleases[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@www.imediaconnection[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@www.sexdvd2000[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@www.sexstoriespost[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@www.soundclick[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@www.tns-counter[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@www.traffic[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@www.windowsmedia[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@www.xctrk[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@www.xxxseek[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@www.yourdailymedia[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@xiti[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@yadro[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@yieldmanager[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@yourdailymedia[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ytcracker[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@www.comprabanner[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@adopt.specificclick[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@azjmp[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@interclick[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@mediaservices.myspace[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@soundclick[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@www.burstbeacon[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@accounts[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ad.creafi[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@anad.tacoda[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@atwola[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@kanoodle[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@media.www.michigandaily[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@mediaservices.myspace[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@tripod[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@adopt.specificclick[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.adbrite[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@burstnet[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@drivecleaner[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@eas.apm.emediate[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@go.drivecleaner[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@interclick[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@qnsr[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@www.fullreleases[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@2.adbrite[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.expedia[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.joinaxxess[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@go.winantispyware[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@go.winantivirus[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@media.hotels[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@partner2profit[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@richmedia.yahoo[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@winantivirus[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@3.adbrite[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@ads.joinaxxess[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@adultadworld[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@anat.tacoda[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@discounttire[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@edge.ru4[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@enhance[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@go.winantispyware[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@linkto.mediafire[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@media.mtvnservices[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@mediafire[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@richmedia.yahoo[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@sales.liveperson[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@screensavers[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Cookies\cole@te.kontera[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Local Settings\Temp\Cookies\cole@adopt.specificclick[2].txt
K:\C\C backup\C\Documents and Settings\Cole\Local Settings\Temp\Cookies\cole@burstnet[1].txt
K:\C\C backup\C\Documents and Settings\Cole\Local Settings\Temp\Cookies\cole@www.burstbeacon[1].txt

Trojan.Downloader-FindFast/Fake
K:\C\C BACKUP\C\DOCUMENTS AND SETTINGS\COLE\APPLICATION DATA\FINDFAST.EXE

Trojan.SpySheriff
K:\C\C BACKUP\C\DOCUMENTS AND SETTINGS\COLE\LOCAL SETTINGS\TEMP\1169128465OP14A.EXE
K:\C\C BACKUP\C\DOCUMENTS AND SETTINGS\COLE\LOCAL SETTINGS\TEMP\1174617079JRT0A.EXE

Trojan.Downloader-Metasploit
K:\C\C BACKUP\C\DOCUMENTS AND SETTINGS\COLE\LOCAL SETTINGS\TEMP\METASPLOIT.EXE

Adware.ClickSpring
K:\C\C BACKUP\C\DOCUMENTS AND SETTINGS\COLE\LOCAL SETTINGS\TEMP\TEMP.FR01D0
K:\C\C BACKUP\C\DOCUMENTS AND SETTINGS\COLE\LOCAL SETTINGS\TEMP\TEMP.FR167C

Trojan.Dropper/SVCHost-Fake
K:\C\C BACKUP\C\DOCUMENTS AND SETTINGS\COLE\START MENU\PROGRAMS\STARTUP\SVCHOST.EXE

Trojan.Downloader-Gen/Suspicious
K:\C\C BACKUP\C\PROGRAM FILES\WINBUDGET\BIN\CRAP.1191434837.OLD
K:\C\C BACKUP\C\QOOBOX\QUARANTINE\C\PROGRAM FILES\WINBUDGET\BIN\CRAP.1191434837.OLD.VIR

Adware.Vundo Variant/Rel
K:\C\C BACKUP\C\WINDOWS\SYSTEM32\MCRH.TMP

Trojan.Unknown Origin
K:\C\C BACKUP\C\WINDOWS\SYSTEM32\WNSTSTR.EXE
K:\C\C BACKUP\C\QOOBOX\QUARANTINE\C\WINDOWS\SYSTEM32\WNSTSTR.EXE.VIR

Trojan.Downloader-XLIB
K:\C\C BACKUP\C\WINDOWS\SYSTEM32\XLIBGFL254.DLL

Worm.Rbot Variant
K:\C\C BACKUP\C\WINDOWS\SYSTEM32\SPOOLVS.EXE

Trojan.Downloader-Gen/JA
K:\C\C BACKUP\C\WINDOWS\TEMP\JA.EXE

Trojan.Downloader-Gen/Exefile
K:\C\C BACKUP\C\WINDOWS\4974339.EXE
K:\C\C BACKUP\C\4974339.EXE
K:\C\C BACKUP\C\QOOBOX\QUARANTINE\C\WINDOWS\4974339.EXE.VIR
K:\C\C BACKUP\C\QOOBOX\QUARANTINE\C\4974339.EXE.VIR

Trojan.Freeprod
K:\C\C BACKUP\C\SSTRAY.EXE
K:\C\C BACKUP\C\QOOBOX\QUARANTINE\C\SSTRAY.EXE.VIR

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 01/21/2010 at 01:00 PM

Application Version : 4.33.1000

Core Rules Database Version : 4495
Trace Rules Database Version: 2310

Scan type : Complete Scan
Total Scan Time : 14:10:56

Memory items scanned : 219
Memory threats detected : 0
Registry items scanned : 5753
Registry threats detected : 0
File items scanned : 79011
File threats detected : 0


SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 01/20/2010 at 08:59 AM

Application Version : 4.33.1000

Core Rules Database Version : 4495
Trace Rules Database Version: 2310

Scan type : Complete Scan
Total Scan Time : 08:03:07

Memory items scanned : 218
Memory threats detected : 0
Registry items scanned : 5756
Registry threats detected : 20
File items scanned : 163880
File threats detected : 211

Trojan.Agent/Gen-SSHNas[FakeAlert]
HKLM\System\ControlSet001\Services\SSHNAS
C:\WINDOWS\SYSTEM32\SSHNAS21.DLL
HKLM\System\ControlSet001\Enum\Root\LEGACY_SSHNAS
HKLM\System\ControlSet002\Services\SSHNAS
HKLM\System\ControlSet002\Enum\Root\LEGACY_SSHNAS
HKLM\System\CurrentControlSet\Services\SSHNAS
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_SSHNAS

Adware.Tracking Cookie
C:\Documents and Settings\Cole\Cookies\cole@ad.yieldmanager[1].txt
C:\Documents and Settings\Cole\Cookies\cole@adknowledge[2].txt
C:\Documents and Settings\Cole\Cookies\cole@ad1.clickhype[2].txt
C:\Documents and Settings\Cole\Cookies\cole@cgi-bin[4].txt
C:\Documents and Settings\Cole\Cookies\cole@cgi-bin[1].txt
C:\Documents and Settings\Cole\Cookies\cole@sexstoriespost[2].txt
C:\Documents and Settings\Cole\Cookies\cole@51992737[1].txt
C:\Documents and Settings\Cole\Cookies\cole@login.tracking101[2].txt
C:\Documents and Settings\Cole\Cookies\cole@find-me-a-gift.co[1].txt
C:\Documents and Settings\Cole\Cookies\cole@publishers.clickbooth[2].txt
C:\Documents and Settings\Cole\Cookies\cole@h.starware[2].txt
C:\Documents and Settings\Cole\Cookies\cole@soundclick[2].txt
C:\Documents and Settings\Cole\Cookies\cole@yadro[2].txt
C:\Documents and Settings\Cole\Cookies\cole@dist.belnk[2].txt
C:\Documents and Settings\Cole\Cookies\cole@icc.intellisrv[2].txt
C:\Documents and Settings\Cole\Cookies\cole@anad.tacoda[2].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.us.e-planning[1].txt
C:\Documents and Settings\Cole\Cookies\cole@74307622[1].txt
C:\Documents and Settings\Cole\Cookies\cole@kanoodle[1].txt
C:\Documents and Settings\Cole\Cookies\cole@rotator.hadj7.adjuggler[1].txt
C:\Documents and Settings\Cole\Cookies\cole@cgi-bin[3].txt
C:\Documents and Settings\Cole\Cookies\cole@burstnet[1].txt
C:\Documents and Settings\Cole\Cookies\cole@sexuality.about[1].txt
C:\Documents and Settings\Cole\Cookies\cole@data2.perf.overture[2].txt
C:\Documents and Settings\Cole\Cookies\cole@adopt.specificclick[1].txt
C:\Documents and Settings\Cole\Cookies\cole@xiti[1].txt
C:\Documents and Settings\Cole\Cookies\cole@nextag[2].txt
C:\Documents and Settings\Cole\Cookies\cole@belnk[1].txt
C:\Documents and Settings\Cole\Cookies\cole@track.bestbuy[2].txt
C:\Documents and Settings\Cole\Cookies\cole@www.burstbeacon[1].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.cnn[1].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.monster[2].txt
C:\Documents and Settings\Cole\Cookies\cole@atlas.fixionmedia[1].txt
C:\Documents and Settings\Cole\Cookies\cole@atwola[2].txt
C:\Documents and Settings\Cole\Cookies\cole@anat.tacoda[2].txt
C:\Documents and Settings\Cole\Cookies\cole@content.yieldmanager[2].txt
C:\Documents and Settings\Cole\Cookies\cole@partner2profit[2].txt
C:\Documents and Settings\Cole\Cookies\cole@adecn[2].txt
C:\Documents and Settings\Cole\Cookies\cole@diemotherbleeper.ytmnsfw[2].txt
C:\Documents and Settings\Cole\Cookies\cole@mb[8].txt
C:\Documents and Settings\Cole\Cookies\cole@list[1].txt
C:\Documents and Settings\Cole\Cookies\cole@www.traffic[1].txt
C:\Documents and Settings\Cole\Cookies\cole@server.cpmstar[1].txt
C:\Documents and Settings\Cole\Cookies\cole@184905[1].txt
C:\Documents and Settings\Cole\Cookies\cole@www.fatpenguinmedia[1].txt
C:\Documents and Settings\Cole\Cookies\cole@a[1].txt
C:\Documents and Settings\Cole\Cookies\cole@specificclick[2].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.realtechnetwork[1].txt
C:\Documents and Settings\Cole\Cookies\cole@qnsr[1].txt
C:\Documents and Settings\Cole\Cookies\cole@www.windowsmedia[2].txt
C:\Documents and Settings\Cole\Cookies\cole@cz4.clickzs[2].txt
C:\Documents and Settings\Cole\Cookies\cole@www.soundclick[1].txt
C:\Documents and Settings\Cole\Cookies\cole@findadeath[1].txt
C:\Documents and Settings\Cole\Cookies\cole@6991968[1].txt
C:\Documents and Settings\Cole\Cookies\cole@adultcheck[1].txt
C:\Documents and Settings\Cole\Cookies\cole@2.adbrite[2].txt
C:\Documents and Settings\Cole\Cookies\cole@sales.liveperson[2].txt
C:\Documents and Settings\Cole\Cookies\cole@insightcom[2].txt
C:\Documents and Settings\Cole\Cookies\cole@cgi-bin[8].txt
C:\Documents and Settings\Cole\Cookies\cole@www.xctrk[1].txt
C:\Documents and Settings\Cole\Cookies\cole@ad[2].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.mininova[1].txt
C:\Documents and Settings\Cole\Cookies\cole@cgi-bin[6].txt
C:\Documents and Settings\Cole\Cookies\cole@cgi-bin[5].txt
C:\Documents and Settings\Cole\Cookies\cole@theeyes3.tripod[1].txt
C:\Documents and Settings\Cole\Cookies\cole@a.websponsors[2].txt
C:\Documents and Settings\Cole\Cookies\cole@data3.perf.overture[1].txt
C:\Documents and Settings\Cole\Cookies\cole@insightfirst[2].txt
C:\Documents and Settings\Cole\Cookies\cole@data1.perf.overture[1].txt
C:\Documents and Settings\Cole\Cookies\cole@tracking.foxnews[2].txt
C:\Documents and Settings\Cole\Cookies\cole@9758056[1].txt
C:\Documents and Settings\Cole\Cookies\cole@try.starware[1].txt
C:\Documents and Settings\Cole\Cookies\cole@chordfind[2].txt
C:\Documents and Settings\Cole\Cookies\cole@media.www.readbuzz[1].txt
C:\Documents and Settings\Cole\Cookies\cole@podtrac.advertserve[1].txt
C:\Documents and Settings\Cole\Cookies\cole@cgi-bin[2].txt
C:\Documents and Settings\Cole\Cookies\cole@image.masterstats[1].txt
C:\Documents and Settings\Cole\Cookies\cole@serving.rpowermedia[2].txt
C:\Documents and Settings\Cole\Cookies\cole@hbstats.livejournal[1].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.sheknows[1].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.ytmnd[2].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.as4x.tmcs.ticketmaster[1].txt
C:\Documents and Settings\Cole\Cookies\cole@yieldmanager[2].txt
C:\Documents and Settings\Cole\Cookies\cole@mb[2].txt
C:\Documents and Settings\Cole\Cookies\cole@www.yourdailymedia[1].txt
C:\Documents and Settings\Cole\Cookies\cole@azjmp[2].txt
C:\Documents and Settings\Cole\Cookies\cole@clicktorrent[2].txt
C:\Documents and Settings\Cole\Cookies\cole@clicksor[2].txt
C:\Documents and Settings\Cole\Cookies\cole@yourdailymedia[1].txt
C:\Documents and Settings\Cole\Cookies\cole@diemotherbleepers.ytmnsfw[2].txt
C:\Documents and Settings\Cole\Cookies\cole@toplist[1].txt
C:\Documents and Settings\Cole\Cookies\cole@indiads[1].txt
C:\Documents and Settings\Cole\Cookies\cole@28856772[2].txt
C:\Documents and Settings\Cole\Cookies\cole@usenext[2].txt
C:\Documents and Settings\Cole\Cookies\cole@3.adbrite[2].txt
C:\Documents and Settings\Cole\Cookies\cole@i.screensavers[1].txt
C:\Documents and Settings\Cole\Cookies\cole@members.tripod[2].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.belointeractive[1].txt
C:\Documents and Settings\Cole\Cookies\cole@insightbb[2].txt
C:\Documents and Settings\Cole\Cookies\cole@www.fullreleases[2].txt
C:\Documents and Settings\Cole\Cookies\cole@screensavers[2].txt
C:\Documents and Settings\Cole\Cookies\cole@jensondemo[2].txt
C:\Documents and Settings\Cole\Cookies\cole@44153975[1].txt
C:\Documents and Settings\Cole\Cookies\cole@superstats[1].txt
C:\Documents and Settings\Cole\Cookies\cole@try.screensavers[1].txt
C:\Documents and Settings\Cole\Cookies\cole@adv.webmd[1].txt
C:\Documents and Settings\Cole\Cookies\cole@26480833[1].txt
C:\Documents and Settings\Cole\Cookies\cole@adsmediaonline[2].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.mediamayhemcorp[1].txt
C:\Documents and Settings\Cole\Cookies\cole@ad.contentmedianetwork[1].txt
C:\Documents and Settings\Cole\Cookies\cole@coolsavings[2].txt
C:\Documents and Settings\Cole\Cookies\cole@gostats[2].txt
C:\Documents and Settings\Cole\Cookies\cole@aff.primaryads[1].txt
C:\Documents and Settings\Cole\Cookies\cole@futuristicsexrobotz[2].txt
C:\Documents and Settings\Cole\Cookies\cole@mb[1].txt
C:\Documents and Settings\Cole\Cookies\cole@ad.wanderlist[2].txt
C:\Documents and Settings\Cole\Cookies\cole@track.dmipartners[1].txt
C:\Documents and Settings\Cole\Cookies\cole@tracker.wholinked[1].txt
C:\Documents and Settings\Cole\Cookies\cole@html[4].txt
C:\Documents and Settings\Cole\Cookies\cole@pitchforkmedia[2].txt
C:\Documents and Settings\Cole\Cookies\cole@ads2.howardchui[2].txt
C:\Documents and Settings\Cole\Cookies\cole@ad.greenmarquee[2].txt
C:\Documents and Settings\Cole\Cookies\cole@adopt.hbmediapro[2].txt
C:\Documents and Settings\Cole\Cookies\cole@adultadworld[1].txt
C:\Documents and Settings\Cole\Cookies\cole@mb[5].txt
C:\Documents and Settings\Cole\Cookies\cole@www.comprabanner[1].txt
C:\Documents and Settings\Cole\Cookies\cole@LPearthlink_elink1[1].txt
C:\Documents and Settings\Cole\Cookies\cole@eas.apm.emediate[1].txt
C:\Documents and Settings\Cole\Cookies\cole@enhance[2].txt
C:\Documents and Settings\Cole\Cookies\cole@tripod[1].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.buddypic[2].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.1001skins[1].txt
C:\Documents and Settings\Cole\Cookies\cole@media.samuraimediagroup[1].txt
C:\Documents and Settings\Cole\Cookies\cole@www.imediaconnection[1].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.as4x.tmcs[1].txt
C:\Documents and Settings\Cole\Cookies\cole@42726361[1].txt
C:\Documents and Settings\Cole\Cookies\cole@ez-tracks[2].txt
C:\Documents and Settings\Cole\Cookies\cole@clicks.emarketmakers[1].txt
C:\Documents and Settings\Cole\Cookies\cole@warlog[1].txt
C:\Documents and Settings\Cole\Cookies\cole@optimize.indieclick[1].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.humorbua[1].txt
C:\Documents and Settings\Cole\Cookies\cole@cgi-bin[7].txt
C:\Documents and Settings\Cole\Cookies\cole@redorbit[1].txt
C:\Documents and Settings\Cole\Cookies\cole@ytcracker[2].txt
C:\Documents and Settings\Cole\Cookies\cole@account.juno[1].txt
C:\Documents and Settings\Cole\Cookies\cole@m1.webstats.motigo[2].txt
C:\Documents and Settings\Cole\Cookies\cole@1071965287[1].txt
C:\Documents and Settings\Cole\Cookies\cole@admarketplace[1].txt
C:\Documents and Settings\Cole\Cookies\cole@oasc02.247realmedia[1].txt
C:\Documents and Settings\Cole\Cookies\cole@ad.bannerconnect[2].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.gamersmedia[1].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.expedia[1].txt
C:\Documents and Settings\Cole\Cookies\cole@ad.yieldx[2].txt
C:\Documents and Settings\Cole\Cookies\cole@cgi-bin[9].txt
C:\Documents and Settings\Cole\Cookies\cole@www.ez-tracks[1].txt
C:\Documents and Settings\Cole\Cookies\cole@media.www.michigandaily[1].txt
C:\Documents and Settings\Cole\Cookies\cole@media.hotels[1].txt
C:\Documents and Settings\Cole\Cookies\cole@www.zango[1].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.adbrite[2].txt
C:\Documents and Settings\Cole\Cookies\cole@LandingPage[1].txt
C:\Documents and Settings\Cole\Cookies\cole@specificmedia[1].txt
C:\Documents and Settings\Cole\Cookies\cole@ads.treehugger[2].txt
C:\Documents and Settings\Cole\Cookies\cole@statcounter[1].txt
C:\Documents and Settings\Cole\Cookies\cole@zedo[1].txt
C:\Documents and Settings\Cole\Cookies\cole@1072674299[1].txt
C:\Documents and Settings\Cole\Cookies\cole@cdn4.specificclick[2].txt
C:\Documents and Settings\Cole\Cookies\cole@catalog[1].txt
C:\Documents and Settings\Cole\Cookies\cole@69191305[2].txt
C:\Documents and Settings\Cole\Cookies\cole@te.kontera[2].txt
C:\Documents and Settings\Cole\Cookies\cole@www.burstnet[2].txt
C:\Documents and Settings\Cole\Cookies\cole@media.vemuk[1].txt
C:\Documents and Settings\Cole\Cookies\cole@stat1.vipstat[2].txt
C:\Documents and Settings\Cole\Cookies\cole@tase[1].txt
C:\Documents and Settings\Cole\Cookies\cole@sexliesandtruth[1].txt
C:\Documents and Settings\Cole\Cookies\cole@content.yieldmanager[3].txt
C:\Documents and Settings\Cole\Cookies\cole@media.mtvnservices[1].txt
C:\Documents and Settings\Cole\Cookies\cole@mediafire[2].txt
C:\Documents and Settings\Cole\Cookies\cole@richmedia.yahoo[2].txt
C:\Documents and Settings\Cole\Cookies\cole@linkto.mediafire[1].txt
C:\Documents and Settings\Cole\Cookies\cole@43518785[2].txt
C:\Documents and Settings\Cole\Cookies\cole@LPearthlink_elink1[3].txt
C:\Documents and Settings\Cole\Cookies\cole@ad.thewheelof[2].txt
C:\Documents and Settings\Cole\Cookies\cole@revsci[1].txt
C:\Documents and Settings\Cole\Cookies\cole@interclick[1].txt
C:\Documents and Settings\Cole\Cookies\cole@discounttire[1].txt
C:\Documents and Settings\Cole\Cookies\cole@hosted.zango[2].txt
C:\Documents and Settings\Cole\Cookies\cole@cpvfeed[2].txt

Rootkit.Unclassified/KR_Done
C:\WINDOWS\system32\kr_done1

Trojan.Dropper/Win-NV
HKLM\SYSTEM\CurrentControlSet\Services\SSHNAS#Type
HKLM\SYSTEM\CurrentControlSet\Services\SSHNAS#Start
HKLM\SYSTEM\CurrentControlSet\Services\SSHNAS#ErrorControl
HKLM\SYSTEM\CurrentControlSet\Services\SSHNAS#ImagePath
HKLM\SYSTEM\CurrentControlSet\Services\SSHNAS#DisplayName
HKLM\SYSTEM\CurrentControlSet\Services\SSHNAS#ObjectName
HKLM\SYSTEM\CurrentControlSet\Services\SSHNAS\Parameters
HKLM\SYSTEM\CurrentControlSet\Services\SSHNAS\Parameters#ServiceDll
HKLM\SYSTEM\CurrentControlSet\Services\SSHNAS\Security
HKLM\SYSTEM\CurrentControlSet\Services\SSHNAS\Security#Security
HKLM\SYSTEM\CurrentControlSet\Services\SSHNAS\Enum
HKLM\SYSTEM\CurrentControlSet\Services\SSHNAS\Enum#0
HKLM\SYSTEM\CurrentControlSet\Services\SSHNAS\Enum#Count
HKLM\SYSTEM\CurrentControlSet\Services\SSHNAS\Enum#NextInstance
C:\WINDOWS\MSA.EXE

Trojan.Unclassified-Packed/Suspicious
C:\DOCUMENTS AND SETTINGS\COLE\APPLICATION DATA\IEBAR.DLL

Trojan.Dropper/BHONew-B
C:\DOCUMENTS AND SETTINGS\COLE\APPLICATION DATA\SPOOLSV.DLL

Trojan.Downloader-Gen/Exefile
C:\QOOBOX\QUARANTINE\C\4974339.EXE.VIR
C:\QOOBOX\QUARANTINE\C\WINDOWS\4974339.EXE.VIR

Trojan.Downloader-Gen/Suspicious
C:\QOOBOX\QUARANTINE\C\PROGRAM FILES\WINBUDGET\BIN\CRAP.1191434837.OLD.VIR

Trojan.Freeprod
C:\QOOBOX\QUARANTINE\C\SSTRAY.EXE.VIR

#38 User is offline   Elise 

  • Bleepin' Blonde
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Study Hall Admin
  • Posts: 38,982
  • Joined: 05-October 07
  • Gender:Female
  • Location:Romania

Posted 02 February 2010 - 01:28 PM

Hello, I didn't overlook your topic, but just got back from the hospital, where I spent a few days with my son, my apologies for the delay!

That took care of quite some stuff! For now, can you please turn off the back-up application?

After that, please delete your old copy of Combofix and download a new one. Run it as instructed before and post me the log please.
regards, Elise

"The mind is its own place, and in itself can make a heaven of hell, a hell of heaven." ~ John Milton
Posted Image Follow BleepingComputer on: Facebook | Twitter | Google+

#39 User is offline   pringles06 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 25
  • Joined: 31-December 09

Posted 02 February 2010 - 02:59 PM

aw, i'm sorry! hope your son is doing better.


ComboFix 10-02-01.05 - Cole 02/02/2010 14:19:40.7.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.447.71 [GMT -5:00]
Running from: i:\documents\ComboFix.exe
AV: Norton AntiVirus *On-access scanning disabled* (Outdated) {B5510F6F-87E1-47F7-A411-360BC453007C}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
c:\windows\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job

.
((((((((((((((((((((((((( Files Created from 2010-01-02 to 2010-02-02 )))))))))))))))))))))))))))))))
.

2010-01-20 05:49 . 2010-01-20 05:49 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2010-01-20 05:48 . 2010-01-20 05:48 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-01-20 05:48 . 2010-01-20 05:48 -------- d-----w- c:\documents and settings\Cole\Application Data\SUPERAntiSpyware.com
2010-01-19 17:14 . 2002-02-04 07:43 82432 ----a-w- c:\windows\system32\msxml4r.dll
2010-01-19 17:14 . 2010-01-19 17:14 -------- d-----w- c:\program files\Convar
2010-01-19 17:14 . 2003-07-18 18:58 516784 ----a-r- c:\windows\system32\XceedCry.dll
2010-01-19 17:14 . 2002-02-28 14:46 217088 ----a-w- c:\windows\system32\DartSock.dll
2010-01-19 17:14 . 2002-02-21 15:12 118784 ----a-w- c:\windows\system32\DartWeb.dll
2010-01-19 17:14 . 1998-06-14 03:53 44544 ----a-w- c:\windows\system32\Gif89.dll
2010-01-19 17:13 . 2002-02-04 07:52 1230336 ----a-w- c:\windows\system32\msxml4.dll
2010-01-15 18:57 . 2004-08-27 04:43 56320 ----a-w- c:\windows\system32\DeltTray.exe
2010-01-12 11:11 . 2010-01-12 11:11 -------- d-----w- C:\spoolerlogs
2010-01-12 05:07 . 2010-01-12 05:08 -------- d-----w- c:\documents and settings\Cole\Application Data\PACE Anti-Piracy
2010-01-12 05:07 . 2010-01-12 05:08 -------- d-----w- c:\documents and settings\All Users\Application Data\PACE Anti-Piracy
2010-01-12 05:07 . 2010-01-12 05:07 -------- d-----w- c:\program files\Common Files\PACE Anti-Piracy
2010-01-12 05:07 . 2010-01-12 05:07 -------- d-----w- c:\documents and settings\Cole\Local Settings\Application Data\PACE Anti-Piracy
2010-01-12 04:52 . 2010-01-12 04:52 -------- d-----w- c:\program files\InterLok
2010-01-12 04:52 . 2010-01-12 04:52 -------- d-----w- c:\documents and settings\Cole\Application Data\Antares
2010-01-12 04:52 . 2010-01-12 04:52 -------- d-----w- c:\program files\Antares Audio Technologies
2010-01-11 22:32 . 2010-01-11 22:32 -------- d-----w- c:\documents and settings\Cole\Application Data\SynthMaker
2010-01-10 17:12 . 2010-01-10 17:12 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2010-01-07 18:39 . 2010-01-07 18:42 -------- d-----w- c:\documents and settings\Cole\Local Settings\Application Data\Temp
2010-01-07 15:24 . 2010-01-07 15:24 -------- d-----w- c:\program files\RAR Password Recovery Magic
2010-01-06 15:53 . 2007-11-13 17:31 204288 ----a-w- c:\windows\system32\M-AudioTaskBarIcon.exe
2010-01-06 15:53 . 2007-11-14 21:20 20168 ----a-w- c:\windows\system32\drivers\usb11ldr.sys
2010-01-06 15:53 . 2007-11-14 21:20 424456 ----a-w- c:\windows\system32\ma_cmidn.dll
2010-01-06 15:53 . 2007-11-14 21:20 31752 ----a-w- c:\windows\system32\drivers\ma_cmidi.sys
2010-01-06 15:53 . 2006-08-16 12:24 82944 ----a-w- c:\windows\system32\USBMN1X1.DLL
2010-01-06 15:53 . 2006-08-16 12:24 22208 ----a-w- c:\windows\system32\drivers\USBMN1X1.SYS
2010-01-06 15:53 . 2010-01-06 15:53 -------- d-----w- c:\program files\M-Audio
2010-01-06 15:51 . 2010-01-06 15:51 -------- d-----w- c:\documents and settings\Cole\Application Data\InstallShield
2010-01-06 03:01 . 2010-01-06 03:01 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Apple
2010-01-05 14:14 . 2010-01-05 14:15 -------- dc-h--w- c:\windows\ie8
2010-01-05 04:31 . 2010-01-05 04:31 -------- d-----w- c:\program files\Free M4a to MP3 Converter
2010-01-05 02:07 . 2010-01-05 02:07 -------- d-----w- c:\program files\SoulseekNS
2010-01-05 01:02 . 2010-01-05 01:02 -------- d-sh--w- c:\documents and settings\Cole\IECompatCache
2010-01-05 01:01 . 2010-01-05 01:01 -------- d-sh--w- c:\documents and settings\Cole\PrivacIE

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-02 17:24 . 2006-12-20 09:13 10 ----a-w- c:\windows\popcinfo.dat
2010-01-20 14:24 . 2009-12-31 14:47 -------- d-----w- c:\documents and settings\All Users\Application Data\RegCure
2010-01-20 05:48 . 2005-02-28 22:31 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-01-19 17:13 . 2000-04-29 10:59 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-01-19 01:56 . 2006-07-17 01:21 -------- d-----w- c:\program files\QuickTime
2010-01-19 01:56 . 2004-06-01 02:26 -------- d-----w- c:\program files\iTunes
2010-01-18 22:52 . 2007-10-22 18:36 -------- d-----w- c:\documents and settings\Cole\Application Data\uTorrent
2010-01-15 18:50 . 2004-10-11 00:26 -------- d-----w- c:\documents and settings\Cole\Application Data\Skype
2010-01-14 21:44 . 2000-04-29 10:48 -------- d-----w- c:\program files\Microsoft Works
2010-01-14 21:44 . 2000-04-29 10:56 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-01-13 22:49 . 2000-04-29 10:30 -------- d-----w- c:\program files\aim
2010-01-05 02:09 . 2004-05-31 23:02 -------- d-----w- c:\program files\Soulseek
2010-01-05 02:00 . 2004-05-31 16:41 -------- d-----w- c:\program files\MA311 PCI Adapter Configuration Utility
2010-01-05 01:30 . 2009-12-30 23:44 -------- d-----w- c:\program files\V CAST Music with Rhapsody
2010-01-04 05:49 . 2004-06-01 02:27 -------- d-----w- c:\documents and settings\Cole\Application Data\Apple Computer
2010-01-01 15:13 . 2010-01-01 15:11 -------- d-----w- c:\documents and settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2010-01-01 15:12 . 2005-10-11 14:06 -------- d-----w- c:\program files\iPod
2010-01-01 15:12 . 2010-01-01 15:06 -------- d-----w- c:\program files\Common Files\Apple
2010-01-01 15:10 . 2010-01-01 15:10 -------- d-----w- c:\program files\Bonjour
2010-01-01 15:08 . 2010-01-01 15:08 -------- d-----w- c:\program files\Apple Software Update
2010-01-01 14:25 . 2004-06-13 14:17 -------- d-----w- c:\program files\Warcraft III
2010-01-01 14:14 . 2006-10-11 12:18 -------- d-----w- c:\documents and settings\Cole\Application Data\Aim
2010-01-01 14:12 . 2007-08-26 18:58 -------- d-----w- c:\program files\QuickVideo weeCam
2010-01-01 05:44 . 2000-04-29 11:01 -------- d-----w- c:\program files\BigFix
2009-12-31 14:48 . 2009-12-31 14:19 -------- d-----w- c:\program files\Registry Patrol
2009-12-31 14:07 . 2007-10-03 22:15 -------- d-----w- c:\program files\Project64 1.6
2009-12-31 13:26 . 2009-12-31 13:26 -------- d-----w- c:\program files\SDHelper (Spybot - Search & Destroy)
2009-12-31 13:26 . 2009-12-31 13:26 -------- d-----w- c:\program files\File Scanner Library (Spybot - Search & Destroy)
2009-12-31 13:26 . 2009-12-31 13:26 -------- d-----w- c:\program files\TeaTimer (Spybot - Search & Destroy)
2009-12-31 13:26 . 2009-12-31 13:26 -------- d-----w- c:\program files\Misc. Support Library (Spybot - Search & Destroy)
2009-12-31 06:22 . 2009-12-31 06:22 -------- d-----w- c:\program files\ASIO4ALL v2
2009-12-31 05:02 . 2004-10-16 22:36 -------- d-----w- c:\program files\Image-Line
2009-12-31 05:02 . 2009-12-31 05:02 -------- d-----w- c:\program files\Outsim
2009-12-30 23:52 . 2004-04-20 17:31 -------- d-----w- c:\program files\eMachines Bay Reader
2009-12-30 23:33 . 2004-06-05 19:00 47552 ----a-w- c:\documents and settings\Cole\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-12-30 23:07 . 2000-04-29 10:03 76487 ----a-w- c:\windows\PCHealth\HelpCtr\OfflineCache\index.dat
2009-12-30 19:35 . 2009-12-30 19:35 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-12-30 19:35 . 2004-07-15 19:07 -------- d-----w- c:\program files\Java
2009-12-26 04:44 . 2009-12-26 04:44 -------- d-----w- c:\documents and settings\All Users\Application Data\Soulseek
2004-11-19 02:42 . 2004-09-01 02:27 165376 ----a-w- c:\program files\UNWISE.EXE
2004-11-19 02:42 . 2004-09-01 02:27 126976 ----a-w- c:\program files\AAT3 DirectX Register.exe
2001-11-18 02:29 . 2004-09-01 02:27 4550656 ----a-w- c:\program files\AutoTune.ax
2001-11-18 02:21 . 2004-09-01 02:27 49152 ----a-w- c:\program files\InstallShieldHelper.dll
2001-11-18 01:35 . 2004-09-01 02:27 20590 ----a-w- c:\program files\ReadMe.txt
2001-10-06 07:15 . 2004-09-01 02:27 370741 ----a-w- c:\program files\Auto-Tune3_Manual.pdf
2001-09-17 03:04 . 2004-09-01 02:27 3717 ----a-w- c:\program files\license.txt
.

((((((((((((((((((((((((((((((((((((((((((((( AWF ))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-08-08 18:10 . 2004-11-19 03:42 135168 k:\c\C backup\C\Program Files\eMachines Bay Reader\bak\shwiconem.exe
2007-08-08 18:10 . 2007-01-16 01:46 38924 k:\c\C backup\C\Program Files\eMachines Bay Reader\shwiconem.exe

2010-01-18 08:18 . 2006-06-14 21:24 278528 k:\c\C backup\C\Program Files\iTunes\bak\iTunesHelper.exe
2007-08-08 18:30 . 2006-06-14 22:24 278528 k:\c\C backup\C\Program Files\iTunes\iTunesHelper.exe

2010-01-18 08:18 . 2006-07-17 01:21 282624 k:\c\C backup\C\Program Files\QuickTime\bak\qttask.exe
2007-08-08 18:42 . 2006-07-17 02:21 282624 k:\c\C backup\C\Program Files\QuickTime\qttask.exe

2010-01-18 08:20 . 2004-08-27 04:43 56320 k:\c\C backup\C\WINDOWS\system32\bak\DeltTray.exe
2010-01-18 08:20 . 2004-08-27 04:43 56320 k:\c\C backup\C\WINDOWS\system32\DeltTray.exe

2010-01-18 08:18 . 2004-11-19 02:41 684032 k:\c\C backup\C\Qoobox\Quarantine\C\Program Files\Adaptec\Easy CD Creator 5\DirectCD\bak\DirectCD.exe.vir

2010-01-18 08:18 . 2005-08-05 20:08 67160 k:\c\C backup\C\Qoobox\Quarantine\C\Program Files\aim\bak\aim.exe.vir

2010-01-18 08:18 . 2005-10-11 16:02 180269 k:\c\C backup\C\Qoobox\Quarantine\C\Program Files\Common Files\Real\Update_OB\bak\realsched.exe.vir

2010-01-18 08:18 . 2004-11-19 02:42 73728 k:\c\C backup\C\Qoobox\Quarantine\C\Program Files\Common Files\Symantec Shared\bak\ccApp.exe.vir

2010-01-18 08:18 . 2004-11-02 22:59 218240 k:\c\C backup\C\Qoobox\Quarantine\C\Program Files\Common Files\Symantec Shared\Security Center\bak\UsrPrmpt.exe.vir

2010-01-18 08:18 . 2004-11-19 02:41 36864 k:\c\C backup\C\Qoobox\Quarantine\C\Program Files\Java\j2re1.4.2_04\bin\bak\jusched.exe.vir

2010-01-18 08:18 . 2004-11-19 02:41 32768 k:\c\C backup\C\Qoobox\Quarantine\C\Program Files\Microsoft Works\bak\WkDetect.exe.vir

2010-01-18 08:18 . 2004-11-19 02:41 114688 k:\c\C backup\C\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Manager\bak\ViewMgr.exe.vir

2010-01-18 08:18 . 2005-08-05 21:08 67160 k:\c\C backup\C\Qoobox\Quarantine\k\C\C backup\C\Program Files\aim\bak\aim.exe.vir

2010-01-18 08:18 . 2005-10-11 17:02 180269 k:\c\C backup\C\Qoobox\Quarantine\k\C\C backup\C\Program Files\Common Files\Real\Update_OB\bak\realsched.exe.vir

2010-01-18 08:18 . 2004-11-19 03:42 73728 k:\c\C backup\C\Qoobox\Quarantine\k\C\C backup\C\Program Files\Common Files\Symantec Shared\bak\ccApp.exe.vir

2010-01-18 08:18 . 2004-08-27 05:43 56320 k:\c\C backup\C\Qoobox\Quarantine\k\C\C backup\C\WINDOWS\system32\bak\DeltTray.exe.vir

.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="" [N/A]
"EZBack-it-up Tray Scheduler"="c:\program files\EZBackitup\EZBkuptray.exe" [2004-06-03 631808]
"findfast"="c:\documents and settings\Cole\Application Data\findfast.exe" [N/A]
"Google Update"="c:\documents and settings\Cole\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2010-01-07 135664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="nwiz.exe" [2004-11-19 741376]
"nForce Tray Options"="sstray.exe" [N/A]
"CHotkey"="zHotkey.exe" [2004-11-19 496640]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-12-30 149280]
"DeltTray"="DeltTray.exe" [2004-08-27 56320]
"findfast"="c:\documents and settings\Cole\Application Data\findfast.exe" [N/A]
"EarthLink Installer"="" [N/A]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-07-17 282624]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2006-06-14 278528]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2003-10-07 5058560]

[HKEY_CURRENT_USER\software\microsoft\windows\Currentversion\policies\explorer\Run]
"{88707C22-0828-1033-0330-040805030001}"="c:\program files\Common Files\{88707C22-0828-1033-0330-040805030001}\Update.exe" [N/A]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2004-10-31 113664]
Configuration Utility.lnk - c:\program files\MA311 PCI Adapter Configuration Utility\wlanutil.exe [2010-1-4 890368]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [2000-1-21 65588]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 19:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer"=APTRRNTm.dll
"wave"=APTRRNTm.dll
"Midi1"=usbmn1x1.dll
"midi3"=ma_cmidn.dll
"midi4"=ma_cmidn.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0SsiEfr.e

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\SoulseekNS\\slsk.exe"=
"c:\\Program Files\\Soulseek\\slsk.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\V CAST Music with Rhapsody\\rhapsody.exe"=
"c:\\Program Files\\SmartFTP Client 2.0\\SmartFTP.exe"=
"c:\\Documents and Settings\\Cole\\Local Settings\\Application Data\\Google\\Google Talk Plugin\\googletalkplugin.dll"=
"c:\\Documents and Settings\\Cole\\Local Settings\\Application Data\\Google\\Google Talk Plugin\\googletalkplugin.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [1/5/2010 7:56 AM 9968]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [1/5/2010 7:56 AM 74480]
R2 RVIEGVST;VSC VST Engine;c:\program files\Roland\Virtual Sound Canvas VST\RVIEg01VST.sys [10/4/2004 2:20 PM 188276]
R3 MA311;NETGEAR Wireless LAN Driver;c:\windows\system32\drivers\ma311n51.sys [5/31/2004 11:41 AM 54784]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [1/5/2010 7:56 AM 7408]
S3 Bulk503;Chameleon Mega Digital Camera;c:\windows\system32\Drivers\Bulk503.sys --> c:\windows\system32\Drivers\Bulk503.sys [?]
S3 ISO503;Chameleon Mega Video Camera;c:\windows\system32\Drivers\ISO503.SYS --> c:\windows\system32\Drivers\ISO503.SYS [?]
S3 mscnr;SigmaTel MSCN Audio Player Control Driver;c:\windows\system32\Drivers\mscnr.sys --> c:\windows\system32\Drivers\mscnr.sys [?]
S3 UKS11LDR;M-Audio USB Keystation Loader;c:\windows\system32\drivers\uks11ldr.sys [12/28/2004 4:48 PM 13504]
S3 USBKT1X1;M-Audio USB Keystation;c:\windows\system32\drivers\usbkt1x1.sys [12/28/2004 4:48 PM 22304]
.
Contents of the 'Scheduled Tasks' folder

2010-01-27 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 17:34]

2010-02-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2675144800-245186961-2302628932-1006Core.job
- c:\documents and settings\Cole\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-01-07 18:39]

2010-02-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2675144800-245186961-2302628932-1006UA.job
- c:\documents and settings\Cole\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-01-07 18:39]

2010-02-02 c:\windows\Tasks\Symantec NetDetect.job
- c:\program files\Symantec\LiveUpdate\NDETECT.EXE [2000-04-29 23:26]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com
uInternet Connection Wizard,ShellNext = hxxp://www.emachines.com/
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = about:blank
IE: &Yahoo! Search - file:///c:\program files\Yahoo!\Common/ycsrch.htm
IE: Yahoo! &Dictionary - file:///c:\program files\Yahoo!\Common/ycdict.htm
IE: Yahoo! &Maps - file:///c:\program files\Yahoo!\Common/ycmap.htm
IE: Yahoo! &SMS - file:///c:\program files\Yahoo!\Common/ycsms.htm
FF - ProfilePath - c:\documents and settings\Cole\Application Data\Mozilla\Firefox\Profiles\l4rc2r85.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.gmail.com
FF - plugin: c:\documents and settings\Cole\Application Data\Mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\documents and settings\Cole\Local Settings\Application Data\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\progra~1\Yahoo!\Common\npyaxmpb.dll
FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-02 14:35
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(728)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\windows\system32\WININET.dll
.
Completion time: 2010-02-02 14:54:29
ComboFix-quarantined-files.txt 2010-02-02 19:54
ComboFix2.txt 2010-01-19 13:56
ComboFix3.txt 2010-01-15 13:55
ComboFix4.txt 2010-01-14 22:03
ComboFix5.txt 2010-02-02 19:18

Pre-Run: 3,964,755,968 bytes free
Post-Run: 4,136,996,864 bytes free

- - End Of File - - A4AAFFE7A916A43B93D66492BB6E9B33

#40 User is offline   Elise 

  • Bleepin' Blonde
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Study Hall Admin
  • Posts: 38,982
  • Joined: 05-October 07
  • Gender:Female
  • Location:Romania

Posted 02 February 2010 - 03:10 PM

At this point your CF log looks good, but there are still some bad files on your backup drive. its very hard to clean those and replace them with the legit file, because Combofix is not able to do this on another drive than the one windows is installed on.
Simply deleting those files is not possible, since this has to be done on reboot (no alternative drive access for tools like Combofix on reboot).

At this point I can only say your backups contained quite some malware and I am almost sure Super Antispyware didn't catch all of it. Unfortunately not too many scanners are designed for multiple drives, so at this point I really would recomment you to consider erasing all backups and taking new ones once we are clean.

Can you please let me know how your computer is behaving so far? Any problems left?
regards, Elise

"The mind is its own place, and in itself can make a heaven of hell, a hell of heaven." ~ John Milton
Posted Image Follow BleepingComputer on: Facebook | Twitter | Google+

#41 User is offline   pringles06 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 25
  • Joined: 31-December 09

Posted 03 February 2010 - 11:38 PM

For the most part it's okay, I only have an issue every now and then. Much better than when we started! Thank you so much for your help!

#42 User is offline   Elise 

  • Bleepin' Blonde
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Study Hall Admin
  • Posts: 38,982
  • Joined: 05-October 07
  • Gender:Female
  • Location:Romania

Posted 04 February 2010 - 02:53 AM

Hello pringles06,

UPDATE XP
--------------
Your Microsoft Windows installation is out of date. Using unpatched Windows systems on the Internet is a security risk to everyone. When there are insecure computers connected to the Internet, malware spreads faster and more extensively, distributed denial-of-service attacks are easier to launch, and spammers have more platforms from which to send e-mail. Whenever a security problem in its software is found, Microsoft will usually create a patch for it. After the patch is installed, attackers can't use the vulnerability to install malicious software on your computer. Keeping up-to-date with all these security patches will help prevent malware from reinfecting your machine. If you are not sure how to do this, see How to use Microsoft Update.

For additional information, be sure to read "Windows Xp Service Pack 3 (sp3) Information".

Then go here to check for & install updates to Microsoft applications.
Note: The update process uses ActiveX, so you will need to use Internet Explorer for it, and allow the ActiveX control that it wants to install.

Please reboot and repeat the update process until there are no more updates to install.[/color]


ESET ONLINE SCANNER
----------------------------
I'd like us to scan your machine with ESET OnlineScan
  • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  • Click the Posted Image button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on Posted Image to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the Posted Image icon on your desktop.

  • Check Posted Image
  • Click the Posted Image button.
  • Accept any security warnings from your browser.
  • Check Posted Image
  • Push the Start button.
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push Posted Image
  • Push Posted Image, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
    Note - when ESET doesn't find any threats, no report will be created.
  • Push the Posted Image button.
  • Push Posted Image

In your next reply, please include the following:
  • ESET online scan results
regards, Elise

"The mind is its own place, and in itself can make a heaven of hell, a hell of heaven." ~ John Milton
Posted Image Follow BleepingComputer on: Facebook | Twitter | Google+

#43 User is offline   pringles06 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 25
  • Joined: 31-December 09

Posted 04 February 2010 - 11:29 PM

Eh, I really have avoided installing SP3 because I'm worried about a compatibility issue with my PCI networking card. There are apparently no drivers for SP3, so I'd have to buy a new one...and I should be buying a new laptop soon so I'm really not wanting to do that.

Running the online scan, will update when it's finished.

#44 User is offline   Elise 

  • Bleepin' Blonde
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Study Hall Admin
  • Posts: 38,982
  • Joined: 05-October 07
  • Gender:Female
  • Location:Romania

Posted 05 February 2010 - 06:42 AM

Okay, thats up to you. Let me know if ESET finds something.
regards, Elise

"The mind is its own place, and in itself can make a heaven of hell, a hell of heaven." ~ John Milton
Posted Image Follow BleepingComputer on: Facebook | Twitter | Google+

#45 User is offline   pringles06 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 25
  • Joined: 31-December 09

Posted 05 February 2010 - 08:40 AM

C:\Documents and Settings\Cole\Application Data\Sun\Java\Deployment\cache\6.0\28\9e5575c-307bb2b1 a variant of Java/TrojanDownloader.Agent.NAD trojan deleted - quarantined
C:\Documents and Settings\Cole\My Documents\Programs\Install_AIM.exe Win32/Adware.WBug.A application deleted - quarantined
C:\Documents and Settings\Cole\My Documents\Programs\iZotope_Trash_Setup_v1_06.rar probably a variant of Win32/Agent trojan deleted - quarantined
C:\Documents and Settings\Cole\My Documents\Programs\Shareaza_2.1.0.0.exe multiple threats deleted - quarantined
C:\Documents and Settings\Cole\My Documents\Programs\iZotope_Trash_Setup_v1_06\IZotope.Trash.DX.VST.RTAS.v1.06.incl.KeyGen-H2O\trash_keygen.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
C:\Downloads\WinZumaSetup-dm[1].exe Win32/Adware.Trymedia application cleaned by deleting - quarantined
C:\Program Files\FruityLoops 3.56\Plugins\Fruity\Generators\Fruity DX10\Fruity DX10.dll probably a variant of Win32/PSW.Delf trojan cleaned by deleting - quarantined
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
C:\Qoobox\Quarantine\C\Program Files\WinBudget\bin\crap.1187453986.old.vir probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
C:\Qoobox\Quarantine\C\Program Files\WinBudget\bin\matrix.dll.1189092945.old.vir probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
C:\Qoobox\Quarantine\C\PROGRA~1\AWS\WEATHE~1\MINIBU~1.DLL.vir Win32/Adware.WBug.A application cleaned by deleting - quarantined
C:\Qoobox\Quarantine\k\av2.zip a variant of Win32/TrojanDownloader.Agent.AWF trojan deleted - quarantined
C:\Qoobox\Quarantine\k\C\C backup\C\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe.vir a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
C:\Qoobox\Quarantine\k\C\C backup\C\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe.vir a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
C:\Qoobox\Quarantine\k\C\C backup\C\Program Files\Java\j2re1.4.2_04\bin\jusched.exe.vir a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
C:\Qoobox\Quarantine\k\C\C backup\C\Program Files\Microsoft Works\WkDetect.exe.vir a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
C:\Qoobox\Quarantine\k\C\C backup\C\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe.vir a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP11\A0001848.dll Win32/TrojanDownloader.FakeAlert.ARF trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP11\A0001849.exe a variant of Win32/Kryptik.BWV trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002570.exe Win32/Adware.Trymedia application cleaned by deleting - quarantined
C:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002571.dll probably a variant of Win32/PSW.Delf trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002572.exe a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
I:\Soulseek Downloads\kg-trilogy.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
I:\Soulseek Downloads\[VSTi] Spectrasonics Trilogy Module.v1.0-Keygen.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
I:\Soulseek Downloads\My Music\nbst11kg.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
I:\Soulseek Downloads\My Music\Novation Bass Station VSTi v1.1.ace probably a variant of Win32/Agent trojan deleted - quarantined
I:\Soulseek Downloads\My Music\novation bass station.rar probably a variant of Win32/Agent trojan deleted - quarantined
I:\Soulseek Downloads\My Music\reaktor_v4.002_patcher.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
I:\Soulseek Downloads\My Music\My Music\Fruity DX 10 for FruityLoops.exe probably a variant of Win32/PSW.Delf trojan deleted - quarantined
I:\Soulseek Downloads\My Music\My Music\FruityLoops plugins-full pack (All plugins).exe probably a variant of Win32/PSW.Delf trojan deleted - quarantined
I:\Soulseek Downloads\My Music\My Music\FruityLoops plugins-full pack (All plugins)\FruityLoop DX 10-synth-ok.zip probably a variant of Win32/PSW.Delf trojan deleted - quarantined
I:\Steinberg\elektrik_piano_keygen.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\C\C backup\C\Documents and Settings\Cole\Application Data\Sun\Java\Deployment\cache\6.0\3\12a49b83-3e0825ae multiple threats deleted - quarantined
K:\C\C backup\C\Documents and Settings\Cole\igLoader Files\supergerball\supergerball.dll probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\C\C backup\C\Documents and Settings\Cole\Local Settings\Temp\moz7 probably a variant of Win32/Agent trojan deleted - quarantined
K:\C\C backup\C\Documents and Settings\Cole\Local Settings\Temp\1187624733ab0Na.exe probably a variant of Win32/TrojanDownloader.Agent trojan cleaned by deleting - quarantined
K:\C\C backup\C\Documents and Settings\Cole\Local Settings\Temp\temp.fr5E95 probably a variant of Win32/BHO trojan cleaned by deleting - quarantined
K:\C\C backup\C\Documents and Settings\Cole\My Documents\Programs\Install_AIM.exe Win32/Adware.WBug.A application deleted - quarantined
K:\C\C backup\C\Documents and Settings\Cole\My Documents\Programs\iZotope_Trash_Setup_v1_06.rar probably a variant of Win32/Agent trojan deleted - quarantined
K:\C\C backup\C\Documents and Settings\Cole\My Documents\Programs\Shareaza_2.1.0.0.exe multiple threats deleted - quarantined
K:\C\C backup\C\Documents and Settings\Cole\My Documents\Programs\iZotope_Trash_Setup_v1_06\IZotope.Trash.DX.VST.RTAS.v1.06.incl.KeyGen-H2O\trash_keygen.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\C\C backup\C\Downloads\WinZumaSetup-dm[1].exe Win32/Adware.Trymedia application cleaned by deleting - quarantined
K:\C\C backup\C\My Music\Cubase SX 1.02.RB0 Win32/Parite.B virus cleaned - quarantined
K:\C\C backup\C\Program Files\AWS\WeatherBug\MiniBugTransporter.dll Win32/Adware.WBug.A application cleaned by deleting - quarantined
K:\C\C backup\C\Program Files\eMachines Bay Reader\shwiconem.exe a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
K:\C\C backup\C\Program Files\FruityLoops 3.56\Plugins\Fruity\Generators\Fruity DX10\Fruity DX10.dll probably a variant of Win32/PSW.Delf trojan cleaned by deleting - quarantined
K:\C\C backup\C\Program Files\Java\j2re1.4.2_04\bin\jusched.exe a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
K:\C\C backup\C\Program Files\WinBudget\bin\crap.1187453986.old probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\C\C backup\C\Program Files\WinBudget\bin\matrix.dll.1189092945.old probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\C\C backup\C\Program Files\WinBudget\bin\matrix.dll probably a variant of Win32/BHO trojan cleaned by deleting - quarantined
K:\C\C backup\C\Qoobox\Quarantine\C\PROGRA~1\AWS\WEATHE~1\MINIBU~1.DLL.vir Win32/Adware.WBug.A application cleaned by deleting - quarantined
K:\C\C backup\C\Qoobox\Quarantine\C\Program Files\WinBudget\bin\crap.1187453986.old.vir probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\C\C backup\C\Qoobox\Quarantine\C\Program Files\WinBudget\bin\matrix.dll.1189092945.old.vir probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\C\C backup\C\Qoobox\Quarantine\k\av2.zip a variant of Win32/TrojanDownloader.Agent.AWF trojan deleted - quarantined
K:\C\C backup\C\Qoobox\Quarantine\k\C\C backup\C\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe.vir a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
K:\C\C backup\C\Qoobox\Quarantine\k\C\C backup\C\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe.vir a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
K:\C\C backup\C\Qoobox\Quarantine\k\C\C backup\C\Program Files\Java\j2re1.4.2_04\bin\jusched.exe.vir a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
K:\C\C backup\C\Qoobox\Quarantine\k\C\C backup\C\Program Files\Microsoft Works\WkDetect.exe.vir a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
K:\C\C backup\C\Qoobox\Quarantine\k\C\C backup\C\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe.vir a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
K:\I\I backup\I\Soulseek Downloads\[VSTi] Spectrasonics Trilogy Module.v1.0-Keygen.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\I\I backup\I\Soulseek Downloads\kg-trilogy.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\I\I backup\I\Soulseek Downloads\My Music\nbst11kg.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\I\I backup\I\Soulseek Downloads\My Music\Novation Bass Station VSTi v1.1.ace probably a variant of Win32/Agent trojan deleted - quarantined
K:\I\I backup\I\Soulseek Downloads\My Music\novation bass station.rar probably a variant of Win32/Agent trojan deleted - quarantined
K:\I\I backup\I\Soulseek Downloads\My Music\reaktor_v4.002_patcher.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\I\I backup\I\Soulseek Downloads\My Music\My Music\Fruity DX 10 for FruityLoops.exe probably a variant of Win32/PSW.Delf trojan deleted - quarantined
K:\I\I backup\I\Soulseek Downloads\My Music\My Music\FruityLoops plugins-full pack (All plugins).exe probably a variant of Win32/PSW.Delf trojan deleted - quarantined
K:\I\I backup\I\Soulseek Downloads\My Music\My Music\FruityLoops plugins-full pack (All plugins)\FruityLoop DX 10-synth-ok.zip probably a variant of Win32/PSW.Delf trojan deleted - quarantined
K:\I\I backup\I\Steinberg\elektrik_piano_keygen.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP2\A0000433.exe a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP2\A0000435.exe a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP2\A0000437.exe a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP2\A0000438.exe a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP2\A0000440.exe a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP19\A0002160.EXE Win32/TrojanDownloader.Nurech.NAT trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP19\A0002161.EXE a variant of Win32/TrojanDownloader.Small.OUG trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP19\A0002162.exe a variant of Win32/Adware.SpySheriff application cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP19\A0002163.exe a variant of Win32/Adware.SpySheriff application cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP19\A0002164.exe Win32/TrojanDownloader.Small.NFP trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP19\A0002165.EXE a variant of Win32/TrojanDownloader.Small.OUG trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP19\A0002166.old probably a variant of Win32/TrojanDropper.Agent trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP19\A0002169.EXE a variant of Win32/TrojanDownloader.Small.OUG trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP19\A0002170.EXE a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP19\A0002171.EXE Win32/TrojanDownloader.Small.NFP trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP19\A0002172.EXE Win32/TrojanDownloader.Small.NFP trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP19\A0002173.EXE multiple threats deleted - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002580.dll probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002581.exe probably a variant of Win32/TrojanDownloader.Agent trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002582.exe Win32/Adware.WBug.A application deleted - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002583.exe multiple threats deleted - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002584.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002585.exe Win32/Adware.Trymedia application cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002586.dll Win32/Adware.WBug.A application cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002587.exe a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002588.dll probably a variant of Win32/PSW.Delf trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002589.exe a variant of Win32/TrojanDownloader.Agent.AWF trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002590.old probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002591.old probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002592.dll probably a variant of Win32/BHO trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002593.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002594.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002595.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002596.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002597.exe probably a variant of Win32/PSW.Delf trojan deleted - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002598.exe probably a variant of Win32/PSW.Delf trojan deleted - quarantined
K:\System Volume Information\_restore{6140D920-5605-41B7-91F9-A11B337AB566}\RP23\A0002599.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined
K:\Steinberg\elektrik_piano_keygen.exe probably a variant of Win32/Agent trojan cleaned by deleting - quarantined

Share this topic:


  • 4 Pages +
  • 1
  • 2
  • 3
  • 4
  • You cannot start a new topic
  • This topic is locked

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users