BleepingComputer.com: Infected by Anti Spyware Soft

Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Infected by Anti Spyware Soft

#1 User is offline   fasthelp 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 7
  • Joined: 17-April 10

Posted 17 April 2010 - 08:23 PM

have this nasty fake virus, dont know how to delete it.

tried anti malware scan didnt work

need helpppp

#2 User is offline   rosiesdad 

  • Forum Regular
  • PipPipPip
  • Find Topics
  • Group: Members
  • Posts: 216
  • Joined: 14-February 08

Posted 17 April 2010 - 08:30 PM

There is a special forum here for malware help.
You could go to this http://www.bleepingcomputer.com/virus-removal

#3 User is offline   fasthelp 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 7
  • Joined: 17-April 10

Posted 17 April 2010 - 08:33 PM

View Postrosiesdad, on Apr 17 2010, 09:30 PM, said:

There is a special forum here for malware help.
You could go to this http://www.bleepingcomputer.com/virus-removal



dont see my rogue malware

#4 User is offline   boopme 

  • To Insanity and Beyond
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 46,216
  • Joined: 10-September 04
  • Gender:Male
  • Location:NJ USA

Posted 17 April 2010 - 09:24 PM

Hello,do you have the name correct?

Let's try this way. Run these tools..

FixExe.reg

FixExe.reg
....click Run when the box opens


RKill....

Please download Rkill by Grinler and save it to your desktop.
  • Double-click on the Rkill desktop icon to run the tool.
  • If using Vista, right-click on it and Run As Administrator.
  • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
  • If not, delete the file, then download and use the one provided in Link 2.
  • If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
  • If the tool does not run from any of the links provided, please let me know.
Do not reboot your computer after running rkill as the malware programs will start again.



Now run SAS:
Download and scan with SUPERAntiSpyware Free for Home Users
  • Double-click SUPERAntiSpyware.exe and use the default settings for installation.
  • An icon will be created on your desktop. Double-click that icon to launch the program.
  • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)
  • In the Main Menu, click the Preferences... button.
  • Click the Scanning Control tab.
  • Under Scanner Options make sure the following are checked (leave all others unchecked):
    • Close browsers before scanning.
    • Scan for tracking cookies.
    • Terminate memory threats before quarantining.

  • Click the "Close" button to leave the control center screen.
  • Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
  • On the left, make sure you check C:\Fixed Drive.
  • On the right, under "Complete Scan", choose Perform Complete Scan.
  • Click "Next" to start the scan. Please be patient while it scans your computer.
  • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
  • Make sure everything has a checkmark next to it and click "Next".
  • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
  • If asked if you want to reboot, click "Yes".
  • To retrieve the removal information after reboot, launch SUPERAntispyware again.
    • Click Preferences, then click the Statistics/Logs tab.
    • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    • Please copy and paste the Scan Log results in your next reply.

  • Click Close to exit the program.
If you have a problem downloading, installing or getting SAS to run, try downloading and using the SUPERAntiSpyware Portable Scanner instead. Save the randomly named file (i.e. SAS_1710895.COM) to a usb drive or CD and transfer to the infected computer. Then double-click on it to launch and scan. The file is randomly named to help keep malware from blocking the scanner.



Rerun MBAM (MalwareBytes) like this:

Open MBAM in normal mode and click Update tab, select Check for Updates,when done
click Scanner tab,select Quick scan and scan (normal mode).
After scan click Remove Selected, Post new scan log and Reboot into normal mode.






Hello,do you have the name correct?

Let's try this way. Run these tools..

FixExe.reg

FixExe.reg
....click Run when the box opens


RKill....

Please download Rkill by Grinler and save it to your desktop.
  • Double-click on the Rkill desktop icon to run the tool.
  • If using Vista, right-click on it and Run As Administrator.
  • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
  • If not, delete the file, then download and use the one provided in Link 2.
  • If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
  • If the tool does not run from any of the links provided, please let me know.
Do not reboot your computer after running rkill as the malware programs will start again.



Now run SAS:
Download and scan with SUPERAntiSpyware Free for Home Users
  • Double-click SUPERAntiSpyware.exe and use the default settings for installation.
  • An icon will be created on your desktop. Double-click that icon to launch the program.
  • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)
  • In the Main Menu, click the Preferences... button.
  • Click the Scanning Control tab.
  • Under Scanner Options make sure the following are checked (leave all others unchecked):
    • Close browsers before scanning.
    • Scan for tracking cookies.
    • Terminate memory threats before quarantining.

  • Click the "Close" button to leave the control center screen.
  • Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
  • On the left, make sure you check C:\Fixed Drive.
  • On the right, under "Complete Scan", choose Perform Complete Scan.
  • Click "Next" to start the scan. Please be patient while it scans your computer.
  • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
  • Make sure everything has a checkmark next to it and click "Next".
  • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
  • If asked if you want to reboot, click "Yes".
  • To retrieve the removal information after reboot, launch SUPERAntispyware again.
    • Click Preferences, then click the Statistics/Logs tab.
    • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    • Please copy and paste the Scan Log results in your next reply.

  • Click Close to exit the program.
If you have a problem downloading, installing or getting SAS to run, try downloading and using the SUPERAntiSpyware Portable Scanner instead. Save the randomly named file (i.e. SAS_1710895.COM) to a usb drive or CD and transfer to the infected computer. Then double-click on it to launch and scan. The file is randomly named to help keep malware from blocking the scanner.



Rerun MBAM (MalwareBytes) like this:

Open MBAM in normal mode and click Update tab, select Check for Updates,when done
click Scanner tab,select Quick scan and scan (normal mode).
After scan click Remove Selected, Post new scan log and Reboot into normal mode.
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook

#5 User is offline   fasthelp 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 7
  • Joined: 17-April 10

Posted 18 April 2010 - 11:27 AM

running SAS, does this clear the virus too? or do i have to pay for full version?

#6 User is offline   boopme 

  • To Insanity and Beyond
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 46,216
  • Joined: 10-September 04
  • Gender:Male
  • Location:NJ USA

Posted 18 April 2010 - 01:59 PM

Eveything I offer you to use is with the free version. If something actually asks to pay..Do NOt,but tell me as they shouldn't.
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook

#7 User is offline   fasthelp 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 7
  • Joined: 17-April 10

Posted 22 April 2010 - 02:09 PM

well it was gone for a few days but its back again. running superantispyware atm.

cant access anything expect mozilla

#8 User is offline   fasthelp 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 7
  • Joined: 17-April 10

Posted 22 April 2010 - 02:22 PM

my log from few days ago, forgot to post



SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 04/18/2010 at 02:24 PM

Application Version : 4.35.1002

Core Rules Database Version : 4744
Trace Rules Database Version: 1978

Scan type : Complete Scan
Total Scan Time : 02:02:00

Memory items scanned : 394
Memory threats detected : 0
Registry items scanned : 5584
Registry threats detected : 44
File items scanned : 182746
File threats detected : 565

Adware.Gamevance
HKU\S-1-5-21-3430174671-1107372823-176894438-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BEAC7DC8-E106-4C6A-931E-5A42E7362883}

Unclassified.Oreans32
HKLM\System\ControlSet003\Services\oreans32
C:\WINDOWS\SYSTEM32\DRIVERS\OREANS32.SYS
HKLM\System\ControlSet003\Enum\Root\LEGACY_oreans32
HKLM\System\ControlSet006\Services\oreans32
HKLM\System\ControlSet006\Enum\Root\LEGACY_oreans32
HKLM\System\ControlSet007\Services\oreans32
HKLM\System\ControlSet007\Enum\Root\LEGACY_oreans32
HKLM\System\CurrentControlSet\Services\oreans32
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_oreans32
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32#NextInstance
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Service
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Legacy
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#ConfigFlags
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Class
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#ClassGUID
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#DeviceDesc
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000#Capabilities
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000\LogConf
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000\Control
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_OREANS32\0000\Control#ActiveService
HKLM\SYSTEM\CurrentControlSet\Services\oreans32#Type
HKLM\SYSTEM\CurrentControlSet\Services\oreans32#Start
HKLM\SYSTEM\CurrentControlSet\Services\oreans32#ErrorControl
HKLM\SYSTEM\CurrentControlSet\Services\oreans32#ImagePath
HKLM\SYSTEM\CurrentControlSet\Services\oreans32#DisplayName
HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Security
HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Security#Security
HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Enum
HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Enum#0
HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Enum#Count
HKLM\SYSTEM\CurrentControlSet\Services\oreans32\Enum#NextInstance

Adware.Tracking Cookie
C:\Documents and Settings\Mel\Cookies\mel@ads.tportal[1].txt
C:\Documents and Settings\Mel\Cookies\mel@adnethr.adocean[1].txt
C:\Documents and Settings\Mel\Cookies\mel@msnportal.112.2o7[1].txt
C:\Documents and Settings\Mel\Cookies\mel@ad.wsod[2].txt
C:\Documents and Settings\Mel\Cookies\mel@collective-media[1].txt
C:\Documents and Settings\Mel\Cookies\mel@xfire.adbureau[3].txt
C:\Documents and Settings\Mel\Cookies\mel@ad.httpool[1].txt
C:\Documents and Settings\Mel\Cookies\mel@ad.slobodnadalmacija[2].txt
C:\Documents and Settings\Mel\Cookies\mel@ad.vecernji[1].txt
C:\Documents and Settings\Mel\Cookies\mel@xiti[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@247realmedia[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@247realmedia[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@2o7[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@a.websponsors[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@a.websponsors[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@a1.interclick[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@a1.interclick[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@accounting-and-bookkeeping-tips[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@accounts[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@accounts[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ad.beepworld[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ad.ent.tbn[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ad.httpool[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ad.httpool[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ad.m5prod[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ad.poz[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ad.slobodnadalmacija[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ad.slobodnadalmacija[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ad.vecernji[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ad.vecernji[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ad.wsod[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ad.wsod[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ad.yieldmanager[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ad.yieldmanager[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ad.zanox[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ad2.doublepimp[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adbrite[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adbrite[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adbureau[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adbureau[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adcentriconline[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adecn[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adfarm1.adition[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adknowledge[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adknowledge[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adlegend[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adnethr.adocean[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adnethr.adocean[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adrevolver[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.abc[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.ad4game[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.adgoto[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.adultadvertising[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.adultadvertising[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.audxch[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.bridgetrack[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.bridgetrack[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.cellfish[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.financialcontent[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.fulldls[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.gamersmedia[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.gamesbannernet[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.glispa[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.humornsex[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.lycos[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.monster[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.njuskalo[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.pointroll[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.pointroll[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.sexinyourcity[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.sexinyourcity[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.tportal[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.tportal[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.undertone[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.vertor[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.widgetbucks[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ads.xapads[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adsby.webtraffic[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adserv01[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adserve.amazingrewardsonline[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adserve.brandgivewaycentre[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adserver.adtechus[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adserver.adtechus[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adserver.cromoda[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adserver.croportal[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adserver.croportal[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adserving.contextualmarketplace[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adtech[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adultadworld[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adultfriendfinder[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adultfriendfinder[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adultmatchfirm[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adv.dmv[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@adv.mobango[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@advertising.healthguru[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@advertising[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@advertising[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@aff.primaryads[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@affiliate.immstracker[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@affiliate.nsstracker[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@affiliate.tfntracker[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@affiliate.zantracker[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@apmebf[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@apmebf[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@at.atwola[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@at.atwola[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@atdmt[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@atdmt[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@atwola[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@azjmp[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@azjmp[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@bandbanner028[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@beacon.dmsinsights[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@bizrate[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@blindscom.122.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@bluestreak[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@bluestreak[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@bonerbanner656[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@bs.serving-sys[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@bs.serving-sys[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@burstbeacon[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@burstbeacon[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@burstnet[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@burstnet[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@c7.zedo[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@casalemedia[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@casalemedia[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@cb.adbureau[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@cdn4.specificclick[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@cdn4.specificclick[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@chitika[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@chitika[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@classmates.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@click.bsftransmit1[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@click.mediadome[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@clickaider[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@clickaider[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@clickbank[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@clickboothlnk[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@clicksor[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@clicks[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@cms.trafficmp[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@collective-media[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@collective-media[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@comcastauthorizedoffers[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@comcastauthorizedoffers[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@content.yieldmanager[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@content.yieldmanager[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@content.yieldmanager[4].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@counter.hitslink[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@counter.top[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@counter2.hitslink[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@crossbleepry[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@croteen[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@d.mediaforceads[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@data.coremetrics[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@data.coremetrics[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@dealtime[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@densebanner335[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@discountcigarettes4u[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@discountcigarettesbox[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@discountcigarettesmall[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@dmcontactmanagement.122.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@dmtracker[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@dominionenterprises.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@doubleclick[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@doubleclick[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@eas.apm.emediate[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ecnext.advertserve[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@edge.ru4[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@educationsuccess.122.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@educationsuccess.122.2o7[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@eharmony.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ehg-centaur.hitbox[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ehg-shaklee.hitbox[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@elephantgroup.122.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@enter.pornhubpremium[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@eyewonder[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@eyewonder[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@fastclick[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@fastclick[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@fbogroup.122.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@fmimedia.infusionsoft[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ford.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@free.hotbar[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@freesexoffenderreports[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@bleepbookdating[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@bleepbookdating[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ge.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@gemoneysusrsfeapply.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@gmgmacmortgage.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@highbeam.122.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@hitbox[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@homemadebleepvideos[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@homestore.122.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@homestore.122.2o7[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@hotbar[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@humornsex[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@hypertracker[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@hypertracker[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@iacas.adbureau[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@imrworldwide[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@insightexpressai[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@insightexpressai[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@interclick[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@interclick[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@intermundomedia[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@invitemedia[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@invitemedia[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@kontera[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@kontera[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@largebanner360[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@leapfrogonline.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@lfstmedia[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@lfstmedia[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@link.mercent[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@linksynergy.walmart[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@login.tracking101[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@lucidmedia[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@lynxtrack[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@media.adfrontiers[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@media.adfrontiers[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@media.adrevolver[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@media.licenseacquisition[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@media.telaustria[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@media6degrees[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@media6degrees[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@mediaplex[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@mediaplex[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@mediatraffic[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@media[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@microsoftwindows.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@microsoftwindows.112.2o7[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@microsoftwlsearchcrm.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@msnportal.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@msnportal.112.2o7[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@myaccount.bellsouth[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@myaccount.bellsouth[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@mybanktracker[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@myroitracking[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@myroitracking[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@mywebsearch[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@mywebsearch[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@naiadsystems[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@naiadsystems[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@nextag[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@nextag[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@oasn03.247realmedia[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@oasn04.247realmedia[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@oddcast[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@onetoone.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@onetoone.112.2o7[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@online-media-archive[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@openx.sexsearchcom[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@optimost[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ordie.adbureau[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@overture[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@overture[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@paypal.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@paypal.112.2o7[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@peoplefinders[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@perf.overture[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@pointroll[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@pointroll[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@pornhubpremium[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@pornhub[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@pornhub[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@premiumonlinemedia[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@pro-market[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@pro-market[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@publishers.clickbooth[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@publishers.clickbooth[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@qksrv[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@qnsr[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@questionmarket[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@questionmarket[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@realmedia[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@realmedia[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@revenue[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@revenue[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@revsci[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@revsci[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@richmedia.yahoo[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@roiservice[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@roiservice[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@rotator.adjuggler[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@sales.liveperson[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@samsclub.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@sec1.liveperson[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@secure.pornhub[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@server.cpmstar[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@server.iad.liveperson[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@server.iad.liveperson[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@server.iad.liveperson[4].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@serving-sys[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@serving-sys[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@sex.healthguru[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@sexinyourcity[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@sexinyourcity[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@shopping.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@snagajob.122.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@snap9.advertserve[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@sparknetworks.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@specificclick[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@specificclick[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@specificmedia[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@specificmedia[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@stat.dealtime[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@stat.onestat[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@stat.onestat[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@statcounter[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@statcounter[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@stats.adbrite[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@statse.webtrendslive[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@statse.webtrendslive[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@tacoda[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@tacoda[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@test.coremetrics[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@tns-counter[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@toplist[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@tour.xxxmatch[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@tour1.xxxmatch[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@track.adform[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@track.bigbrandpromotions[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@track.tester-rewards[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@track.webbranddeals[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@track.webbranddeals[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@tracking.admarketplace[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@tracking.admarketplace[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@tracking.gajmp[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@tracking.gajmp[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@tracking.realtor[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@tracking.realtor[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@track[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@tradedoubler[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@tradedoubler[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@trafficmp[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@trafficmp[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@trafficregenerator[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@traveladvertising[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@tribalfusion[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@tribalfusion[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@tripod[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ussearch.122.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@ussearch.122.2o7[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@videoegg.adbureau[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@w3track[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@web4.realtracker[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@web4.realtracker[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@webads.hookedmediagroup[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@webpower[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@webreports.digitalinsight[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@webreports.digitalinsight[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@westernunionglobal.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@wt.xxxmatch[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.adftrack[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.adultadvertising[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.burstbeacon[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.burstbeacon[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.counterservis[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.counterservis[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.cpctrack[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.crossbleepry[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.discountcigarettesmall[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.ebtaccount.jpmorgan[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.ebtaccount.jpmorgan[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.exgfsextapes[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.exgfsextapes[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.gmbtrack[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.gmbtrack[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.googleadservices[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.googleadservices[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.googleadservices[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.homemadebleepvideos[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.humornsex[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.kntrack[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.linktrack66[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.matracking[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.mybanktracker[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.mywebstats[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.peoplefinders[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.porndad[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.pornhublive[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.pornhublive[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.pornhub[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.pornhub[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.rmllctrack[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.russiansexbrides[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.tracklead[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.x3track[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www.x3track[3].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www2.burstnet[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www3.addfreestats[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www5.addfreestats[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@www7.addfreestats[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@xiti[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@xiti[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@xxxmatch[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@yadro[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@yadro[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@yellowpages.112.2o7[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@yieldmanager[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@yieldmanager[2].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@zedo[1].txt
C:\Documents and Settings\Jasmin\Cookies\jasmin@zedo[2].txt
C:\Documents and Settings\Jasmin\Local Settings\Temp\Cookies\jasmin@ad.slobodnadalmacija[1].txt
C:\Documents and Settings\Jasmin\Local Settings\Temp\Cookies\jasmin@doubleclick[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@1zz.cqcounter[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@ad.slobodnadalmacija[2].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@ad.vecernji[2].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@ad.wsod[2].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@ad.yieldmanager[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@adecn[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@adnethr.adocean[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@ads.gamesbannernet[2].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@ads.tportal[2].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@atdmt[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@bizzclick[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@br.naked[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@chitika[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@collective-media[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@content.yieldmanager[2].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@content.yieldmanager[3].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@data.coremetrics[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@doubleclick[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@fastclick[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@imrworldwide[2].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@insightexpressai[2].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@interclick[2].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@landing.hitfarm[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@media6degrees[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@microsoftwindows.112.2o7[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@msnportal.112.2o7[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@naked[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@pornhub[2].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@tribalfusion[2].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@www.dixiecountysheriff[1].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@www.pornhublive[2].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@www.pornhub[2].txt
C:\Documents and Settings\Jasmin 2\Cookies\jasmin_2@xiti[1].txt
C:\Documents and Settings\LocalService\Cookies\system@247realmedia[1].txt
C:\Documents and Settings\LocalService\Cookies\system@ad.yieldmanager[2].txt
C:\Documents and Settings\LocalService\Cookies\system@advertise[1].txt
C:\Documents and Settings\LocalService\Cookies\system@advertise[2].txt
C:\Documents and Settings\LocalService\Cookies\system@advertise[3].txt
C:\Documents and Settings\LocalService\Cookies\system@clickpayz10.91462.asklots[1].txt
C:\Documents and Settings\LocalService\Cookies\system@clickpayz3.91462.blueseek[1].txt
C:\Documents and Settings\LocalService\Cookies\system@content.yieldmanager[1].txt
C:\Documents and Settings\LocalService\Cookies\system@discountedgoldbullion[1].txt
C:\Documents and Settings\LocalService\Cookies\system@invitemedia[2].txt
C:\Documents and Settings\LocalService\Cookies\system@realmedia[1].txt
C:\Documents and Settings\LocalService\Cookies\system@yadro[2].txt
C:\Documents and Settings\Mel\Cookies\mel@xfire.adbureau[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@2o7[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@ad.wsod[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@ad.yieldmanager[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@adbrite[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@ads.pointroll[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@ads.undertone[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@ads.vuze[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@adserver.adtechus[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@affiliate.immstracker[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@at.atwola[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@atdmt[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@bs.serving-sys[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@cdn4.specificclick[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@collective-media[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@content.yieldmanager[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@contentcatalog.hotbar[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@da-tracking[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@findlocaljobstoday[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@hotbar[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@interclick[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@intermundomedia[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@invitemedia[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@linksynergy.walmart[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@lynxtrack[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@media.licenseacquisition[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@media6degrees[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@microsoftwindows.112.2o7[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@msnportal.112.2o7[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@perf.overture[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@pointroll[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@pro-market[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@questionmarket[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@reliablebestoffers[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@revsci[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@serving-sys[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@specificmedia[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@t.pointroll[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@tacoda[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@tracking.admarketplace[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@tracking.gajmp[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@track[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@trafficmp[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@tribalfusion[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@videoegg.adbureau[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@www.findit-quick[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@www.hotbar[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@www.socialtrack[1].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@www.tracklead[2].txt
C:\Documents and Settings\Mel_2\Cookies\mel_2@yeprevenue[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@247realmedia[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@247realmedia[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@2o7[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@ad.yieldmanager[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@ad.yieldmanager[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@ad.yieldmanager[4].txt
C:\Documents and Settings\NetworkService\Cookies\system@ads.redorbit[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@adserver.adtechus[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@advertise[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@advertise[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@advertise[3].txt
C:\Documents and Settings\NetworkService\Cookies\system@advertise[4].txt
C:\Documents and Settings\NetworkService\Cookies\system@adxpose[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@adxpose[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@at.atwola[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@bs.serving-sys[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@cdn4.specificclick[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@clickpayz10.91462.blueseek[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@clickthrough.kanoodle[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@collective-media[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@collective-media[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@collective-media[4].txt
C:\Documents and Settings\NetworkService\Cookies\system@content.yieldmanager[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@content.yieldmanager[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@dc.tremormedia[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@dc.tremormedia[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@homestore.122.2o7[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@imrworldwide[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@invitemedia[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@invitemedia[3].txt
C:\Documents and Settings\NetworkService\Cookies\system@media6degrees[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@media6degrees[3].txt
C:\Documents and Settings\NetworkService\Cookies\system@network.realmedia[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@network.realmedia[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@overture[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@questionmarket[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@realmedia[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@realmedia[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@realmedia[3].txt
C:\Documents and Settings\NetworkService\Cookies\system@revsci[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@revsci[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@serving-sys[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@specificclick[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@specificmedia[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@tacoda[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@tracking.realtor[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@viacom.adbureau[2].txt
C:\Documents and Settings\NetworkService\Cookies\system@www.burstbeacon[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@www.findweblocate[1].txt
C:\Documents and Settings\NetworkService\Cookies\system@www.googleadservices[1].txt
C:\WINDOWS\system32\config\systemprofile\Cookies\system@admarketplace[1].txt
C:\WINDOWS\system32\config\systemprofile\Cookies\system@advertise[2].txt
C:\WINDOWS\system32\config\systemprofile\Cookies\system@overture[2].txt
C:\WINDOWS\system32\config\systemprofile\Cookies\system@revsci[1].txt
C:\WINDOWS\system32\config\systemprofile\Cookies\system@specificclick[2].txt
C:\WINDOWS\system32\config\systemprofile\Cookies\system@trafficmp[1].txt
C:\WINDOWS\system32\config\systemprofile\Cookies\system@tribalfusion[1].txt
C:\WINDOWS\system32\config\systemprofile\Cookies\system@trvlnet.adbureau[2].txt
C:\WINDOWS\system32\config\systemprofile\Cookies\system@www.justclicklocal[2].txt

Adware.MyWebSearch/FunWebProducts
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE#NextInstance
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#Service
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#Legacy
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#ConfigFlags
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#Class
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#ClassGUID
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#DeviceDesc

Rogue.AntivirusSoft
HKU\.DEFAULT\Software\avsoft
HKU\S-1-5-21-3430174671-1107372823-176894438-1008\Software\avsoft
HKU\S-1-5-18\Software\avsoft

Adware.OneStep/PotentiallyUnwantedProgram
C:\PROGRAM FILES\BROWSERQUEST\BROWSERQUEST.DLL

Adware.Vundo/Variant-LockDown
C:\WINDOWS\SYSTEM32\PRAGMADCKXTOYXOO.DLL

#9 User is offline   fasthelp 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 7
  • Joined: 17-April 10

Posted 22 April 2010 - 03:17 PM

new scan log


SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 04/22/2010 at 04:08 PM

Application Version : 4.35.1002

Core Rules Database Version : 4744
Trace Rules Database Version: 1978

Scan type : Complete Scan
Total Scan Time : 00:44:23

Memory items scanned : 274
Memory threats detected : 0
Registry items scanned : 5599
Registry threats detected : 1
File items scanned : 59260
File threats detected : 1

Rogue.AntivirusSoft
HKU\S-1-5-21-3430174671-1107372823-176894438-1008\Software\avsoft

Trojan.Agent/Gen-RogueAV
C:\DOCUMENTS AND SETTINGS\JASMIN\LOCAL SETTINGS\APPLICATION DATA\AVE.EXE



still have antivirussoft

#10 User is offline   boopme 

  • To Insanity and Beyond
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 46,216
  • Joined: 10-September 04
  • Gender:Male
  • Location:NJ USA

Posted 22 April 2010 - 03:53 PM

OK again run RKill....

Please download Rkill by Grinler and save it to your desktop.
  • Double-click on the Rkill desktop icon to run the tool.
  • If using Vista, right-click on it and Run As Administrator.
  • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
  • If not, delete the file, then download and use the one provided in Link 2.
  • If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
  • If the tool does not run from any of the links provided, please let me know.

Do not reboot your computer after running rkill as the malware programs will start again.


Rerun MBAM (MalwareBytes) like this:

Open MBAM in normal mode and click Update tab, select Check for Updates,when done
click Scanner tab,select FULL scan and scan (normal mode).
After scan click Remove Selected, Post new scan log and Reboot into normal mode.
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook

#11 User is offline   fasthelp 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 7
  • Joined: 17-April 10

Posted 22 April 2010 - 04:53 PM

just ran a mbam scan(in safe mode) cant access anything in normal mode

nothing came up as infected

This post has been edited by fasthelp: 22 April 2010 - 04:54 PM

#12 User is offline   boopme 

  • To Insanity and Beyond
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 46,216
  • Joined: 10-September 04
  • Gender:Male
  • Location:NJ USA

Posted 22 April 2010 - 11:04 PM

I think our other option here is to create and boot off a rescue disk. Hopefully we can get normal mode back and then advance.
Avira AntiVir Rescue System
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook

#13 User is offline   H. Rubicundus 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 1
  • Joined: 24-April 10

Posted 24 April 2010 - 08:17 PM

This is a virus that appears to mutate. The infection started as spyware soft. Malwarebytes can find only two registry entries for it. It disables Internet Explorer. Reinstallation of Windows Explorer also resuts in a non-working version. FireFox is not disabled. The registry editor is disabled. Most other spyware scanners require an update with Internet Explorer before they will run. PC Tools will scan and find 44 registry entries and display them, however it won't do anything to fix them without money. That's how this whole thing started with Spyware Soft wanting money to fix something they "found". SuperAntispyware cannot find the registry entries that Pc Tools finds. They are real because I can go into the registry editor and see them. It's just that even as administrator, editing is blocked.

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users