Missing/Hidden Data

Forum Guidelines

Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.

Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help

Posted Image

Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic will be looked at and responded to. So please be patient.

Posted Image

DO NOT RUN ComboFix unless requested to.

Posted Image

Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log.

Posted Image

When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc.

Posted Image

Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.

2 Pages
1
2
→

You cannot start a new topic
This topic is locked

Missing/Hidden Data

#1 melissamc212

Member

Group: Members
Posts: 20
Joined: 11-September 09

Posted 15 August 2011 - 12:44 PM

I'm not sure what is wrong with my computer. When started, it comes up with a blank screen w/start taskbar, a balloon that says "Your computer may be at risk" and a big window that says AVG License Error - not able to recognize your license number. I don't recall having a license number because I downloaded a free copy of AVG a while back so I click close... then nothing. My desktop never comes up. It looks like I have no files/documents. In the start menu there are no Programs. I can see programs from the control panel under add/remove programs - but I can't remove them. I know my documents and pictures are still there as I can see them scrolling through when I am running SAS.

I tried this so far...

1. Checked the LAN setting option.
2. Rebooted into Safe Mode with Networking.
3. Downloaded and ran RKill.
4. Ran SAS (actually the logs below are from when I ran this twice before I ran RKill. I can't find the log from the scan I did afterwards.)
5. Rebooted to normal and ran MBAM.

Here are the logs.

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 08/14/2011 at 05:02 PM

Application Version : 5.0.1118

Core Rules Database Version : 7561
Trace Rules Database Version: 5373

Scan type : Quick Scan
Total Scan Time : 00:14:01

Operating System Information
Windows XP Home Edition 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned : 509
Memory threats detected : 0
Registry items scanned : 31830
Registry threats detected : 2
File items scanned : 9352
File threats detected : 925

Disabled.TaskManager
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM#DISABLETASKMGR
HKU\S-1-5-21-1516730583-2979589852-1062222659-1009\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM#DISABLETASKMGR

Adware.Tracking Cookie
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@1.sharkadnetwork[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@247realmedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@247realmedia[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@2o7[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@2o7[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@a.websponsors[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@a1.interclick[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@a1.interclick[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@a1.interclick[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@accountmanager.att[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@accountonline[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad.adbull[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad.turn[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad.us-ec.adtechus[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad.wsod[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad.wsod[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad.wsod[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad.wsod[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad.yieldmanager[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad.yieldmanager[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad.yieldmanager[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad.yieldmanager[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad.yieldmanager[5].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad.yieldmanager[6].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad.yieldmanager[7].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad.yieldmanager[9].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad.zanox[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad1.emediate[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ad2.popcap[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adbrite[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adbrite[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adbrite[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adbrite[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adbureau[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adecn[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adecn[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adecn[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adinterax[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adinterax[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adinterax[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adinterax[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adinterax[6].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adknowledge[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adlegend[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads-vrx.adbrite[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.ad4game[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.ad4game[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.addynamix[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.adgarden[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.advance[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.as4x.tmcs.ticketmaster[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.as4x.tmcs[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.associatedcontent[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.bcserving[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.bleepingcomputer[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.bridgetrack[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.bridgetrack[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.cartoonnetwork[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.cnn[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.cnn[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.contactmusic[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.cpxadroit[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.creative-serving[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.gamesbannernet[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.gamesbannernet[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.gmodules[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.intergi[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.intergi[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.inviziads[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.monster[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.nascar[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.nascar[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.nba[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.pgatour[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.pgatour[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.pointroll[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.pointroll[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.pointroll[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.pubmatic[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.pubmatic[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.pubmatic[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.raasnet[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.shorttail[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.shorttail[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.silive[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.undertone[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.undertone[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.undertone[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.us.e-planning[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.webkinz[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.webkinz[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.webkinz[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.webme[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.webme[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads2.ljworld[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adserver.adpredictive[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adserver.adreactor[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adserver.adtechus[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adserver.adtechus[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adserver.adtechus[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adserving.contextualmarketplace[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adserving.versaneeds[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adtech[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adtech[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@advanceinternet.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@advertising.sheknows[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@advertising[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@advertising[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@advertising[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@advertising[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adviva[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adxpose[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adxpose[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adxpose[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@alliancedata.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@am.sexinfo101[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@amazonmerchants.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@amex-insights[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@amtk-media[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@andomedia[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@answerology.seventeen[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@apmebf[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@apmebf[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@apmebf[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@apmebf[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ar.atwola[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@associatedcontent.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@at.atwola[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@at.atwola[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@at.atwola[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@atdmt[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@atdmt[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@atdmt[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@atwola[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@avgtechnologies.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@avgtechnologies.112.2o7[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@azjmp[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@banner.adchemy[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@bbfadnet[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@bdsmongolianbarbeque.fbmta[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@beacon.dmsinsights[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@bestbuy.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@bizrate[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@bizrate[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@bizrate[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@bluestreak[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@borders.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@breakmedia.checkm8[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@bs.serving-sys[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@buildabear.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@burstbeacon[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@burstbeacon[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@burstnet[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@burstnet[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@burstnet[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@c.gigcount[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@care2.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@carolynscountrycousins[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@casalemedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@casalemedia[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@casalemedia[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@cb.adbureau[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@cbsdigitalmedia.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@cdn1.trafficmp[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@cdn4.specificclick[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ces.rotator.hadj1.adjuggler[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@charmingshoppes.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@chitika[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@citi.bridgetrack[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@citi.bridgetrack[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@citizensports.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@clickaider[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@clickbank[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@clicksor[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@cms.trafficmp[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@cn.clickable[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@collective-media[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@collective-media[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@collective-media[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@collective-media[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@commission-junction[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@content.yieldmanager[10].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@content.yieldmanager[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@content.yieldmanager[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@content.yieldmanager[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@content.yieldmanager[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@content.yieldmanager[5].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@content.yieldmanager[6].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@content.yieldmanager[7].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@content.yieldmanager[8].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@content.yieldmanager[9].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@counter.hitslink[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@counter.rewardsnetwork[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@counter.rewardsnetwork[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@counter.surfcounters[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@counters.gigya[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@countryclubplaza[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@cz4.clickzs[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@d.coedmediagroup[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@d.mediadakine[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@d.mediaforge[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@data.coremetrics[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@db.rwtrack[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@dc.tremormedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@dc.tremormedia[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@dmtracker[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@dmtracker[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@doctorjeff98.tripod[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@doubleclick[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@doubleclick[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@doubleclick[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@doubleclick[5].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@e-2dj6wfk4ulajkkp.stats.esomniture[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@e-2dj6wflisicpgfq.stats.esomniture[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@e-2dj6wgkiehcjwfo.stats.esomniture[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@eas.apm.emediate[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@edgeadx[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@edgeadx[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ehg-nelnetinc.hitbox[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ehg-nestleusainc.hitbox[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ehg-zoomerang.hitbox[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@email.illuminateadvertising[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@encyclomedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ewstv.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@eyewonder[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@eyewonder[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@fastclick[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@fastclick[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@fastclick[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@fidelity.rotator.hadj7.adjuggler[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@findarticles[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@findgift[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@findlatitudeandlongitude[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@findtuition[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@focalex[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@foxmobile.directtrack[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ge.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ge.112.2o7[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@gettyimages.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@giftcertificatescom.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@giftscom.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@googleads.g.doubleclick[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@googleads.g.doubleclick[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@gotacha.rotator.hadj7.adjuggler[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@gr.burstnet[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@hc2.humanclick[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@hearstmagazines.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@hearstmagazines.112.2o7[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@hg1.hitbox[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@hitbox[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@hitbox[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@hotlog[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@hpi.rotator.hadj7.adjuggler[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@hpi.rotator.hadj7.adjuggler[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@hyundaimotoramerica.122.2o7[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@imrworldwide[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@imrworldwide[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@imrworldwide[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@in.getclicky[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@in.getclicky[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@insightexpressai[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@insightexpressai[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@insightexpressai[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@interclick[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@interclick[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@interclick[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@interclick[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@intermundomedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@intermundomedia[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@invitemedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@invitemedia[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@invitemedia[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@invitemedia[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@invitemedia[5].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@invitemedia[6].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@journalregistercompany.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@kantarmedia[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@kitaramedia.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@kontera[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@kontera[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@kontera[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@landing.hitfarm[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@landing.hitfarm[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@legolas-media[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@legolas-media[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@lfstmedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@lfstmedia[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@lfstmedia[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@linksynergy[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@liveperson[10].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@liveperson[11].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@liveperson[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@liveperson[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@liveperson[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@liveperson[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@liveperson[5].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@liveperson[6].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@liveperson[7].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@liveperson[8].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@liveperson[9].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@lucidmedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@lucidmedia[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@lucidmedia[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@lucidmedia[5].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@marketlive.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@marketlive.122.2o7[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@marthastewart.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@maxmedia.educationworld[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media.adfrontiers[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media.adsvelocity[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media.causes[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media.photobucket[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media.studyisland[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media2.legacy[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media2.legacy[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media303[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media6degrees[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media6degrees[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media6degrees[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media6degrees[5].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media6degrees[6].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@mediabrandsww[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@mediabrandsww[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@mediabrandsww[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@mediaforge[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@mediaforge[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@mediaplex[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@mediaplex[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@mediaplex[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@mediaplex[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@mediaplex[6].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@mediaplex[7].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@metroleap.rotator.hadj7.adjuggler[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@microsoftwlsearchcrm.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@mlbam.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@mm.chitika[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@movieticketscom.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@movieticketscom.122.2o7[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@msnaccountservices.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@msnbc.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@msnbc.112.2o7[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@msnportal.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@msnportal.112.2o7[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@mtvn.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@mtvn.112.2o7[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@mywebsearch[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@neoedge.adbureau[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@network.realmedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@nextag[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@nextag[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@oasn04.247realmedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@oddcast[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@optimize.indieclick[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@optimize.indieclick[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ordie.adbureau[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@overture[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@overture[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@paypal.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@paypal.112.2o7[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@pfizer.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@pointroll[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@pointroll[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@pointroll[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@pop.webfile[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@popcapgames.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@pro-market[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@pro-market[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@questionmarket[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@questionmarket[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@questionmarket[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@questionmarket[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@questionmarket[6].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@r1-ads.ace.advertising[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@r1-ads.ace.advertising[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@realmedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@realmedia[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@revenue[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@revenue[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@revenue[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@revsci[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@revsci[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@revsci[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@richmedia.yahoo[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@richmedia.yahoo[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@rm.yieldmanager[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@rotator.adjuggler[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@rotator.hadj7.adjuggler[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@rotator.hadj7.adjuggler[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ru4[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ru4[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ru4[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ru4[5].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@rwtrack[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@s.clickability[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@sales.liveperson[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@sales.liveperson[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@sales.liveperson[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@sales.liveperson[5].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@segittur.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@servedby.precisionclick[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@server.cpmstar[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@server.cpmstar[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@server.iad.liveperson[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@serving-sys[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@serving-sys[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@serving-sys[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@serving-sys[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@serving-sys[5].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@serving-sys[6].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@serving-sys[7].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@serving-sys[8].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@seventeen[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@seventeen[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@sexinfo101[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@sexualhealth[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@smartadserver[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@socialadserve[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@specificclick[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@specificclick[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@specificclick[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@specificmedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@specificmedia[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@specificmedia[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@specificmedia[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@specificmedia[5].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@stat.onestat[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@statcounter[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@statcounter[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@statcounter[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@stats.adurr[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@stats.clear-media[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@stats.goomradio[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@statsadv.dadapro[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@statse.webtrendslive[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@statse.webtrendslive[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@steelhousemedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@superstats[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@surveymonkey.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@surveys4teens[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tacoda.at.atwola[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tacoda.at.atwola[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tacoda.at.atwola[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tacoda[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@target.db.advertising[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@target.db.advertising[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@teenadvice.about[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@teennick[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@teenpartyideas[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@test.coremetrics[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@thebuzzmedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@timeinc.122.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tjx.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tracker.adjump[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tracking.foxnews[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tracksrvr[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tradedoubler[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@traffic.prod.cobaltgroup[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@traffic.prod.cobaltgroup[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@traffic.syncmyride[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@trafficmp[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@trafficmp[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@traveladvertising[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@traveladvertising[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tribalfusion[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tribalfusion[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tripod[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tripod[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@twc.rotator.hadj7.adjuggler[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@usatoday1.112.2o7[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@user.lucidmedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@user.lucidmedia[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@viacom.adbureau[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@viacom.adbureau[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@videoegg.adbureau[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@virtualteen[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@w3counter[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@walmart.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@walmart.112.2o7[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.3dstats[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.accountonline[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.burstbeacon[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.burstbeacon[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.burstnet[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.burstnet[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.clickmanage[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.countryuniverse[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.encyclomedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.findgift[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.findlatitudeandlongitude[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.googleadservices[10].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.googleadservices[11].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.googleadservices[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.googleadservices[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.googleadservices[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.googleadservices[4].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.googleadservices[5].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.googleadservices[6].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.googleadservices[7].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.googleadservices[8].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.googleadservices[9].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.insightexpress[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.maxstats[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.pixeltrack66[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.seventeen[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.seventeen[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.sexinfo101[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.socialtrack[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.surveys4teens[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.teennick[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.teennick[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.thebuzzmedia[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.tltrack[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.tracklead[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@xiti[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@yadro[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@yadro[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@yieldmanager[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@yieldmanager[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@yieldmanager[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@zanox[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@zedo[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@zedo[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@zedo[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ziggymedia.go2cloud[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@zillow.adbureau[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@CA5VRL9W.txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@CAKHZ40O.txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@CADRC27K.txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@webstat[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@CA8WL4EQ.txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@CA2L42F1.txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@CASXHVK3.txt
.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.247realmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.a.websponsors.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.accountonline.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.accountonline.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ad1.emediate.dk [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adecn.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adinterax.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adinterax.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adinterax.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adknowledge.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adknowledge.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adknowledge.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ads-vrx.adbrite.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ads.gamesbannernet.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ads.gamesbannernet.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adserver.adpredictive.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adserver.adreactor.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adserver.adtechus.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adserving.contextualmarketplace.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adserving.contextualmarketplace.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.advertising.sheknows.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adxpose.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.answerology.seventeen.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.atdmt.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.azjmp.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.banner.adchemy.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.banner.adchemy.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.banner.adchemy.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.banner.adchemy.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.bdsmongolianbarbeque.fbmta.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.bizrate.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.bluestreak.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.bs.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.buildabear.122.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.burstnet.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.casalemedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.casalemedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.cb.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.cb.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.cb.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.cb.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.cb.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.cb.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.cb.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.chitika.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.citi.bridgetrack.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.clickaider.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.clickbank.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.clicksor.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.clicksor.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.clicksor.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.clicksor.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.clicksor.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.commission-junction.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.commission-junction.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.counter.hitslink.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.cz4.clickzs.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.cz4.clickzs.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.d.mediadakine.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.d.mediadakine.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.d.mediadakine.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.dc.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.dmtracker.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.edgeadx.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ehg-nestleusainc.hitbox.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ehg-zoomerang.hitbox.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.estat.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.eyewonder.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.fastclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.findarticles.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.findarticles.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.findarticles.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.findarticles.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.findtuition.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.findtuition.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.findtuition.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.findtuition.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.findtuition.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.focalex.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.focalex.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ge.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.googleads.g.doubleclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.googleads.g.doubleclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.hc2.humanclick.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.hearstmagazines.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.hg1.hitbox.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.hitbox.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.in.getclicky.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.kitaramedia.122.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.kontera.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.kontera.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.kontera.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.kontera.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.kontera.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.legolas-media.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.legolas-media.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.lfstmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.linksynergy.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.linksynergy.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.linksynergy.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.liveperson.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.liveperson.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.liveperson.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.liveperson.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.liveperson.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.marthastewart.122.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.media.causes.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.media.causes.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.media.causes.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.media.causes.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.media.causes.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.media.photobucket.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.mediabrandsww.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.mediaplex.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.metroleap.rotator.hadj7.adjuggler.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.metroleap.rotator.hadj7.adjuggler.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.microsoftwlsearchcrm.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.movieticketscom.122.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.msnaccountservices.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.msnportal.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.mywebsearch.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.mywebsearch.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.neoedge.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.neoedge.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.network.realmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.nextag.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.nextag.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.optimize.indieclick.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ordie.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ordie.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ordie.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.overture.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.overture.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.overture.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.popcapgames.122.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.pro-market.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.questionmarket.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.questionmarket.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.realmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.realmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.realmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.realmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.revenue.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.richmedia.yahoo.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ru4.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ru4.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ru4.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ru4.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ru4.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ru4.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ru4.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.ru4.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.segittur.122.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.server.cpmstar.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.seventeen.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.seventeen.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.smartadserver.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.socialadserve.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.socialadserve.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.specificmedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.statcounter.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.stats.goomradio.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.statse.webtrendslive.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.tacoda.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.tacoda.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.tacoda.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.tjx.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.tribalfusion.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.tribalfusion.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.tribalfusion.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.tribalfusion.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.tribalfusion.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.tribalfusion.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.tripod.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.us.sitestat.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.us.sitestat.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.viacom.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.viacom.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.viacom.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.viacom.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.viacom.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.viacom.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.videoegg.adbureau.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.walmart.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.www.accountonline.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.xiti.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.yadro.ru [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.yieldmanager.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.zedo.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.pro-market.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.pro-market.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.advertising.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.adbrite.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.content.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\KQFBO2FD.DEFAULT\COOKIES.SQLITE ]

Trojan.Agent/Gen-FakeSecurity
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\19128100.EXE

Trojan.Agent/Gen-FakeAlert[Qnp]
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\QGDGWUNALPK.EXE

Trojan.Agent/Gen-Virut
C:\WINDOWS\SYSTEM32\DRIVERS\10311.SYS------

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 08/14/2011 at 07:03 PM

Application Version : 5.0.1118

Core Rules Database Version : 7561
Trace Rules Database Version: 5373

Scan type : Complete Scan
Total Scan Time : 01:49:58

Operating System Information
Windows XP Home Edition 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned : 463
Memory threats detected : 0
Registry items scanned : 37632
Registry threats detected : 0
File items scanned : 120792
File threats detected : 113

Adware.Tracking Cookie
142.memecounter.com [ C:\DOCUMENTS AND SETTINGS\ALEX\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\NLM4RXZX ]
interclick.com [ C:\DOCUMENTS AND SETTINGS\ALEX\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\NLM4RXZX ]
media2.hallpass.com [ C:\DOCUMENTS AND SETTINGS\ALEX\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\NLM4RXZX ]
memecounter.com [ C:\DOCUMENTS AND SETTINGS\ALEX\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\NLM4RXZX ]
oddcast.com [ C:\DOCUMENTS AND SETTINGS\ALEX\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\NLM4RXZX ]
udn.specificclick.net [ C:\DOCUMENTS AND SETTINGS\ALEX\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\NLM4RXZX ]
video.redorbit.com [ C:\DOCUMENTS AND SETTINGS\ALEX\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\NLM4RXZX ]
C:\DOCUMENTS AND SETTINGS\ALEX\COOKIES\ALEX@ATDMT[1].TXT
C:\DOCUMENTS AND SETTINGS\ALEX\COOKIES\ALEX@CONTENT.YIELDMANAGER[1].TXT
C:\DOCUMENTS AND SETTINGS\ALEX\COOKIES\ALEX@DOUBLECLICK[2].TXT
C:\DOCUMENTS AND SETTINGS\ALEX\COOKIES\ALEX@INSIGHTEXPRESSAI[1].TXT
C:\DOCUMENTS AND SETTINGS\ALEX\COOKIES\ALEX@INTERCLICK[1].TXT
C:\DOCUMENTS AND SETTINGS\ALEX\COOKIES\ALEX@INVITEMEDIA[1].TXT
C:\DOCUMENTS AND SETTINGS\ALEX\COOKIES\ALEX@LUCIDMEDIA[1].TXT
C:\DOCUMENTS AND SETTINGS\ALEX\COOKIES\ALEX@QUESTIONMARKET[2].TXT
c2.zedo.com [ C:\DOCUMENTS AND SETTINGS\CARLIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\U8YY6UZM ]
cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\CARLIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\U8YY6UZM ]
interclick.com [ C:\DOCUMENTS AND SETTINGS\CARLIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\U8YY6UZM ]
macromedia.com [ C:\DOCUMENTS AND SETTINGS\CARLIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\U8YY6UZM ]
udn.specificclick.net [ C:\DOCUMENTS AND SETTINGS\CARLIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\U8YY6UZM ]
C:\DOCUMENTS AND SETTINGS\CARLIE\COOKIES\CARLIE@DOUBLECLICK[1].TXT
C:\DOCUMENTS AND SETTINGS\CARLIE\COOKIES\CARLIE@TRIBALFUSION[2].TXT
2mdn.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
bc.youporn.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
cdn-www.pornhub.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
click-sl.playfirst.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
content.oddcast.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
convoad.technoratimedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
core.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
ec.atdmt.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
ia.media-imdb.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
macromedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
media.kyte.tv [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
media.mtvnservices.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
media.scanscout.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
media1.break.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
mediaforgews.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
mediaservice.mirror-image.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
msnbcmedia.msn.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
objects.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
oddcast.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
s0.2mdn.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
secure-us.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
serving-sys.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
sftrack.searchforce.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
speed.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
static.2mdn.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
udn.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
www.media.perthnow.com.au [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
www.pornhub.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
www.pornotube.com [ C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\E5VSYG96 ]
interclick.com [ C:\DOCUMENTS AND SETTINGS\KATIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\5UHCJ2NF ]
media.tattomedia.com [ C:\DOCUMENTS AND SETTINGS\KATIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\5UHCJ2NF ]
cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\KELSIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\MYA2TNVT ]
crackle.com [ C:\DOCUMENTS AND SETTINGS\KELSIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\MYA2TNVT ]
interclick.com [ C:\DOCUMENTS AND SETTINGS\KELSIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\MYA2TNVT ]
m1.2mdn.net [ C:\DOCUMENTS AND SETTINGS\KELSIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\MYA2TNVT ]
macromedia.com [ C:\DOCUMENTS AND SETTINGS\KELSIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\MYA2TNVT ]
media.tattomedia.com [ C:\DOCUMENTS AND SETTINGS\KELSIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\MYA2TNVT ]
media1.clubpenguin.com [ C:\DOCUMENTS AND SETTINGS\KELSIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\MYA2TNVT ]
oddcast.com [ C:\DOCUMENTS AND SETTINGS\KELSIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\MYA2TNVT ]
stat.radioblogclub.com [ C:\DOCUMENTS AND SETTINGS\KELSIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\MYA2TNVT ]
udn.specificclick.net [ C:\DOCUMENTS AND SETTINGS\KELSIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\MYA2TNVT ]
yo.static.presidiomedia.com [ C:\DOCUMENTS AND SETTINGS\KELSIE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\MYA2TNVT ]
C:\DOCUMENTS AND SETTINGS\KELSIE\COOKIES\KELSIE@ADSERVER.ADTECHUS[1].TXT
2mdn.net [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
bannerfarm.ace.advertising.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
cdn.eyewonder.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
cdn1.eyewonder.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
cdn4.specificclick.net [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
content.oddcast.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
crossmediaservices.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
doubleclick.net [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
ec.atdmt.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
interclick.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
m1.2mdn.net [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
macromedia.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
media-0.phonezoo.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
media.ign.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
media.mtvnservices.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
media.redlasso.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
media.resulthost.org [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
media.scanscout.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
media.socialvibe.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
media.tattomedia.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
media.thewb.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
media1.break.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
media4.redlasso.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
mediaplex.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
memecounter.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
msnbcmedia.msn.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
objects.tremormedia.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
oddcast.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
pointroll.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
richmedia247.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
sas-origin.onstreammedia.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
secure-us.imrworldwide.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
serving-sys.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
spe.atdmt.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
udn.specificclick.net [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
video.redorbit.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
video.unrulymedia.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
web.adknowledge.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
www.countryinns.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
www.soundclick.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
yieldmanager.edgesuite.net [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
yo.static.presidiomedia.com [ C:\USERDATA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\JH7WJ9MZ ]
C:\USERDATA\COOKIES\COMPAQ_OWNER@QUESTIONMARKET[1].TXT

Trojan.Agent/Gen-FakeSecurity
C:\SYSTEM VOLUME INFORMATION\_RESTORE{2466A83D-1B81-456E-9766-38C2B7E48210}\RP724\A0133342.EXE

Trojan.Agent/Gen-FakeAlert[Qnp]
C:\SYSTEM VOLUME INFORMATION\_RESTORE{2466A83D-1B81-456E-9766-38C2B7E48210}\RP724\A0133343.EXE

Trojan.Agent/Gen-Virut
C:\SYSTEM VOLUME INFORMATION\_RESTORE{2466A83D-1B81-456E-9766-38C2B7E48210}\RP724\A0133344.SYS

Rogue.SecurityShield
C:\USERDATA\DESKTOP\SECURITY TOOL.LNK

-----

Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Database version: 7468

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

8/15/2011 12:20:45 PM
mbam-log-2011-08-15 (12-20-45).txt

Scan type: Quick scan
Objects scanned: 304324
Time elapsed: 24 minute(s), 48 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 2
Registry Data Items Infected: 2
Folders Infected: 1
Files Infected: 4

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\qgDgwUnAlpk (Rogue.Agent.SA) -> Value: qgDgwUnAlpk -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer (PUM.Bad.Proxy) -> Value: ProxyServer -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoChangingWallPaper (PUM.Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDesktop (PUM.Hidden.Desktop) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
c:\documents and settings\compaq_owner\start menu\Programs\windows recovery (Trojan.FakeAV) -> Quarantined and deleted successfully.

Files Infected:
c:\documents and settings\compaq_owner\local settings\Temp\ms0cfg32.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\compaq_owner\Desktop\windows recovery.lnk (Trojan.FakeAV) -> Quarantined and deleted successfully.
c:\documents and settings\compaq_owner\start menu\Programs\windows recovery\uninstall windows recovery.lnk (Trojan.FakeAV) -> Quarantined and deleted successfully.
c:\documents and settings\compaq_owner\start menu\Programs\windows recovery\windows recovery.lnk (Trojan.FakeAV) -> Quarantined and deleted successfully.

This post has been edited by hamluis: 15 August 2011 - 01:02 PM
Reason for edit: Added emphasis, moved to Am I Infected.

#2 hamluis

Forum Addict

Group: Moderator
Posts: 31,449
Joined: 03-September 05
Gender:Male
Location:Killeen, TX

Posted 15 August 2011 - 01:00 PM

Hmmm, not good, IMO.

I'm afraid I have very bad news.

Your system is infected with a nasty variant of Virut, a dangerous polymorphic file infector with IRCBot functionality which infects .exe, .scr files, and opens a back door that compromises your computer. Using this backdoor, a remote attacker can access and instruct the infected computer to download and execute more malicious files.

-- Note: As with most malware infections, the threat name may be different depending on the anti-virus or anti-malware program which detected it. Each security vendor uses their own naming conventions to identify various types of malware.

With this particular infection, the safest solution and only sure way to remove it effectively is to reformat and reinstall the OS.

Why? According to this Norman White Paper Assessment of W32/Virut, some variants can infect the HOSTS file and block access to security related web sites. Other variants of virut can even penetrate and infect .exe files within compressed files (.zip, .cab, rar). The Virux and Win32/Virut.17408 variants are an even more complex file infectors which can embed an iframe into the body of web-related files and infect script files (.php, .asp, .htm, .html, .xml). When Virut creates infected files, it also creates non-functional files that are corrupted beyond repair and in some instances can disable Windows File Protection. In many cases the infected files cannot be disinfected properly by your anti-virus. When disinfection is attempted, the files become corrupted and the system may become irreparable. The longer virut remains on a computer, the more critical system files will become infected and corrupt so the degree of damage can vary.

Quote

The virus disables Windows File Protection by injecting code into the "winlogon.exe" process that patches system code in memory.

CA Virus detail of W32/Virut

Quote

The virus has a number of bugs in its code, and as a result it may misinfect a proportion of executable files....some W32/Virut.h infections are corrupted beyond repair.

McAfee Risk Assessment and Overview of W32/Virut

Quote

There are bugs in the viral code. When the virus produces infected files, it also creates non-functional files that also contain the virus...Due to the damaged caused to files by virut it's possible to find repaired but corrupted files. They became corrupted by the incorrect writing of the viral code during the process of infection. undetected, corrupted files (possibly still containing part of the viral code) can also be found. this is caused by incorrectly written and non-function viral code present in these files.

AVG Overview of W32/Virut

Virut is commonly spread via a flash drive (usb, pen, thumb, jump) infection using RUNDLL32.EXE and other malicious files. It is often contracted by visiting remote, crack and keygen sites. These type of sites are infested with a smörgåsbord of malware and a major source of system infection.

Quote

...warez and crack web pages are being used by cybercriminals as download sites for malware related to VIRUT and VIRUX. Searches for serial numbers, cracks, and even antivirus products like Trend Micro yield malcodes that come in the form of executables or self-extracting files...quick links in these sites also lead to malicious files. Ads and banners are also infection vectors...

Keygen and Crack Sites Distribute VIRUX and FakeAV

However, the CA Security Advisor Research Blog have found MySpace user pages carrying the malicious Virut URL. Either way you can end up with a computer system so badly damaged that recovery is not possible and it cannot be repaired. When that happens there is nothing you can do besides reformatting and reinstalling the OS.

Since virut is not effectively disinfectable, your best option is to perform a full reformat as there is no guarantee this infection can be completely removed. In most instances it may have caused so much damage to your system files that it cannot be completely cleaned or repaired. In many cases the infected files (which could number in the thousands) cannot be deleted and anti-malware scanners cannot disinfect them properly. Security vendors that claim to be able to remove file infectors cannot guarantee that all traces of it will be removed as they may not find all the remnants. If something goes awry during the malware removal process there is always a risk the computer may become unstable or unbootable and you could loose access to all your data.

Further, your machine has likely been compromised by the backdoor Trojan and there is no way to be sure the computer can ever be trusted again. It is dangerous and incorrect to assume the computer is secure even if your anti-virus reports that the malware appears to have been removed.

Many experts in the security community believe that once infected with this type of malware, the best course of action is to reformat and reinstall the OS. Reinstalling Windows without first wiping the entire hard drive with a repartition and/or format will not remove the infection. The reinstall will only overwrite the Windows files. Any malware on the system will still be there afterwards. Please read:

Quote

Whenever a system has been compromised by a backdoor payload, it is impossible to know if or how much the backdoor has been used to affect your system...There are only a few ways to return a compromised system to a confident security configuration. These include:
• Reimaging the system
• Restoring the entire system using a full system backup from before the backdoor infection
• Reformatting and reinstalling the system

Backdoors and What They Mean to You

This is what security expert miekiemoes has to say: Virut and other File infectors - Throwing in the Towel?

Quote

If I guide someone with Virut (or any other File Infector) present and their Antivirus cannot properly disinfect it, then I recommend a format and reinstall...dealing with such infections is a waste of time and that's why I prefer the fastest and safest solution - which is a format and reinstall...After all, I think it would be irresponsible to let the malware "stew" (download/spread/run more malware) for another couple of days/weeks if you already know it's a lost case.

This is what Jesper M. Johansson at Microsoft TechNet has to say: Help: I Got Hacked. Now What Do I Do?.

Quote

The only way to clean a compromised system is to flatten and rebuild. That’s right. If you have a system that has been completely compromised, the only thing you can do is to flatten the system (reformat the system disk) and rebuild it from scratch (reinstall Windows and your applications).

Since I am no malware authority, I will move this topic to Am I Infected and they can either confirm/refute my suspicion re your infection.

Louis

This post has been edited by hamluis: 15 August 2011 - 01:01 PM

Am I Infected, What Do I Do?
Preparation Guide, Malware Log Topics
Using The Report Button
Misplaced Malware Logs
Discussion Forum Rules

#3 melissamc212

Member

Group: Members
Posts: 20
Joined: 11-September 09

Posted 15 August 2011 - 01:14 PM

I understand now that I may need to ditch this computer. But is there any way to get the pictures off safely?

#4 Farbar

Just Curious

Group: Malware Response Instructor
Posts: 17,817
Joined: 08-December 07
Gender:Male
Location:The Netherlands

Posted 15 August 2011 - 01:33 PM

Hi melissamc212,

Welcome to Bleeping computer. I'm going to assist you with the issue.

Please download unhide.exe to your desktop and run it.
Tell me if your hidden files are unhidden.
Please download TDSSKiller.zip and and extract it.
- Run TDSSKiller.exe.
- Click Start scan.
- When it is finished the utility outputs a list of detected objects with description.
  The utility automatically selects an action (Cure or Delete) for malicious objects.
  The utility prompts the user to select an action to apply to suspicious objects (Skip, by default). Let the options as it is and click Continue
- Let reboot if needed and tell me if the tool needed a reboot.
- Click on Report and post the contents of the text file that will open.
  
  Note: By default, the utility outputs the log into system disk (it is usually the disk with installed operating system, C:\) root folder. The Log have a name like: TDSSKiller.Version_Date_Time_log.txt.

#5 Farbar

Just Curious

Group: Malware Response Instructor
Posts: 17,817
Joined: 08-December 07
Gender:Male
Location:The Netherlands

Posted 15 August 2011 - 01:53 PM

Please don't miss my previous post. Just to let you know I'm going to move the topic to the the Virus, Trojan, Spyware, and Malware Removal Logs forum.

#6 melissamc212

Member

Group: Members
Posts: 20
Joined: 11-September 09

Posted 15 August 2011 - 02:13 PM

After running unhide, I can now see my hidden files. I ran TDSSKiller scan. It only ran for 22 seconds, found 209 objects and found no infection. It did not need to reboot. Also, the log below is from the report button on the tool. I didn't go to the C:/root folder. Do I still need to?

2011/08/15 14:05:15.0984 3412 TDSS rootkit removing tool 2.5.15.0 Aug 11 2011 16:32:13
2011/08/15 14:05:16.0312 3412 ================================================================================
2011/08/15 14:05:16.0312 3412 SystemInfo:
2011/08/15 14:05:16.0312 3412
2011/08/15 14:05:16.0312 3412 OS Version: 5.1.2600 ServicePack: 3.0
2011/08/15 14:05:16.0312 3412 Product type: Workstation
2011/08/15 14:05:16.0312 3412 ComputerName: MELISSA
2011/08/15 14:05:16.0312 3412 UserName: Compaq_Owner
2011/08/15 14:05:16.0312 3412 Windows directory: C:\WINDOWS
2011/08/15 14:05:16.0312 3412 System windows directory: C:\WINDOWS
2011/08/15 14:05:16.0312 3412 Processor architecture: Intel x86
2011/08/15 14:05:16.0312 3412 Number of processors: 1
2011/08/15 14:05:16.0312 3412 Page size: 0x1000
2011/08/15 14:05:16.0312 3412 Boot type: Normal boot
2011/08/15 14:05:16.0312 3412 ================================================================================
2011/08/15 14:05:18.0859 3412 Initialize success
2011/08/15 14:05:38.0781 3532 ================================================================================
2011/08/15 14:05:38.0781 3532 Scan started
2011/08/15 14:05:38.0781 3532 Mode: Manual;
2011/08/15 14:05:38.0781 3532 ================================================================================
2011/08/15 14:05:39.0421 3532 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2011/08/15 14:05:39.0515 3532 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys
2011/08/15 14:05:39.0734 3532 AE1000 (678c8fdb9d6094d41f322b7159853c54) C:\WINDOWS\system32\DRIVERS\AE1000XP.sys
2011/08/15 14:05:39.0859 3532 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
2011/08/15 14:05:39.0953 3532 AFD (7618d5218f2a614672ec61a80d854a37) C:\WINDOWS\System32\drivers\afd.sys
2011/08/15 14:05:40.0234 3532 AgereSoftModem (593aefc67283d409f34cc1245d00a509) C:\WINDOWS\system32\DRIVERS\AGRSM.sys
2011/08/15 14:05:40.0703 3532 ALCXWDM (781c5ec517c53f5214b61253b20c13c4) C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2011/08/15 14:05:40.0890 3532 AmdK8 (59301936898ae62245a6f09c0aba9475) C:\WINDOWS\system32\DRIVERS\AmdK8.sys
2011/08/15 14:05:41.0031 3532 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
2011/08/15 14:05:41.0359 3532 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
2011/08/15 14:05:41.0453 3532 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
2011/08/15 14:05:41.0578 3532 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
2011/08/15 14:05:41.0703 3532 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
2011/08/15 14:05:41.0859 3532 AVGIDSDriver (0c61f066f4d94bd67063dc6691935143) C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys
2011/08/15 14:05:41.0968 3532 AVGIDSEH (84853f800cd69252c3c764fe50d0346f) C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys
2011/08/15 14:05:42.0046 3532 AVGIDSFilter (28d6adcd03e10f3838488b9b5d407dd4) C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys
2011/08/15 14:05:42.0156 3532 AVGIDSShim (0eb16f4dbbb946360af30d2b13a52d1d) C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys
2011/08/15 14:05:42.0312 3532 Avgldx86 (5fe5a2c2330c376a1d8dcff8d2680a2d) C:\WINDOWS\system32\DRIVERS\avgldx86.sys
2011/08/15 14:05:42.0406 3532 Avgmfx86 (54f1a9b4c9b540c2d8ac4baa171696b1) C:\WINDOWS\system32\DRIVERS\avgmfx86.sys
2011/08/15 14:05:42.0500 3532 Avgrkx86 (8da3b77993c5f354cc2977b7ea06d03a) C:\WINDOWS\system32\DRIVERS\avgrkx86.sys
2011/08/15 14:05:42.0609 3532 Avgtdix (660788ec46f10ece80274d564fa8b4aa) C:\WINDOWS\system32\DRIVERS\avgtdix.sys
2011/08/15 14:05:42.0765 3532 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
2011/08/15 14:05:42.0875 3532 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
2011/08/15 14:05:43.0015 3532 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
2011/08/15 14:05:43.0156 3532 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
2011/08/15 14:05:43.0250 3532 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
2011/08/15 14:05:43.0328 3532 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
2011/08/15 14:05:43.0671 3532 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
2011/08/15 14:05:43.0750 3532 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys
2011/08/15 14:05:43.0921 3532 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys
2011/08/15 14:05:44.0046 3532 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
2011/08/15 14:05:44.0203 3532 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
2011/08/15 14:05:44.0375 3532 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
2011/08/15 14:05:44.0531 3532 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
2011/08/15 14:05:44.0609 3532 fasttx2k (1e580770bdece924494b368ac980749e) C:\WINDOWS\system32\DRIVERS\fasttx2k.sys
2011/08/15 14:05:44.0718 3532 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
2011/08/15 14:05:44.0812 3532 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys
2011/08/15 14:05:44.0937 3532 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
2011/08/15 14:05:45.0015 3532 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
2011/08/15 14:05:45.0125 3532 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
2011/08/15 14:05:45.0265 3532 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
2011/08/15 14:05:45.0390 3532 gagp30kx (3a74c423cf6bcca6982715878f450a3b) C:\WINDOWS\system32\DRIVERS\gagp30kx.sys
2011/08/15 14:05:45.0468 3532 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
2011/08/15 14:05:45.0609 3532 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
2011/08/15 14:05:45.0765 3532 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
2011/08/15 14:05:46.0046 3532 HPZid412 (d03d10f7ded688fecf50f8fbf1ea9b8a) C:\WINDOWS\system32\DRIVERS\HPZid412.sys
2011/08/15 14:05:46.0156 3532 HPZipr12 (89f41658929393487b6b7d13c8528ce3) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
2011/08/15 14:05:46.0250 3532 HPZius12 (abcb05ccdbf03000354b9553820e39f8) C:\WINDOWS\system32\DRIVERS\HPZius12.sys
2011/08/15 14:05:46.0375 3532 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
2011/08/15 14:05:46.0593 3532 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
2011/08/15 14:05:46.0703 3532 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
2011/08/15 14:05:46.0906 3532 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys
2011/08/15 14:05:47.0000 3532 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys
2011/08/15 14:05:47.0093 3532 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
2011/08/15 14:05:47.0218 3532 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
2011/08/15 14:05:47.0343 3532 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
2011/08/15 14:05:47.0437 3532 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
2011/08/15 14:05:47.0562 3532 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
2011/08/15 14:05:47.0687 3532 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
2011/08/15 14:05:47.0750 3532 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
2011/08/15 14:05:47.0859 3532 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
2011/08/15 14:05:47.0921 3532 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
2011/08/15 14:05:48.0031 3532 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
2011/08/15 14:05:48.0296 3532 MBAMSwissArmy (b18225739ed9caa83ba2df966e9f43e8) C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2011/08/15 14:05:48.0546 3532 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
2011/08/15 14:05:48.0656 3532 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys
2011/08/15 14:05:48.0781 3532 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys
2011/08/15 14:05:48.0875 3532 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys
2011/08/15 14:05:49.0062 3532 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
2011/08/15 14:05:49.0234 3532 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
2011/08/15 14:05:49.0406 3532 MRxSmb (0ea4d8ed179b75f8afa7998ba22285ca) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
2011/08/15 14:05:49.0593 3532 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
2011/08/15 14:05:49.0671 3532 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
2011/08/15 14:05:49.0734 3532 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2011/08/15 14:05:49.0781 3532 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
2011/08/15 14:05:49.0843 3532 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
2011/08/15 14:05:49.0968 3532 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
2011/08/15 14:05:50.0078 3532 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys
2011/08/15 14:05:50.0156 3532 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
2011/08/15 14:05:50.0281 3532 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
2011/08/15 14:05:50.0406 3532 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
2011/08/15 14:05:50.0500 3532 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
2011/08/15 14:05:50.0609 3532 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
2011/08/15 14:05:50.0687 3532 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
2011/08/15 14:05:50.0750 3532 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
2011/08/15 14:05:50.0906 3532 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
2011/08/15 14:05:50.0968 3532 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
2011/08/15 14:05:51.0125 3532 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
2011/08/15 14:05:51.0281 3532 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
2011/08/15 14:05:51.0390 3532 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
2011/08/15 14:05:51.0484 3532 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
2011/08/15 14:05:51.0593 3532 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
2011/08/15 14:05:51.0703 3532 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
2011/08/15 14:05:51.0875 3532 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
2011/08/15 14:05:51.0984 3532 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys
2011/08/15 14:05:52.0031 3532 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
2011/08/15 14:05:52.0125 3532 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys
2011/08/15 14:05:52.0296 3532 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys
2011/08/15 14:05:52.0437 3532 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys
2011/08/15 14:05:52.0546 3532 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys
2011/08/15 14:05:53.0078 3532 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
2011/08/15 14:05:53.0156 3532 Processor (a32bebaf723557681bfc6bd93e98bd26) C:\WINDOWS\system32\DRIVERS\processr.sys
2011/08/15 14:05:53.0250 3532 Ps2 (9b793a1ffd480155fe9ee5261153f21b) C:\WINDOWS\system32\DRIVERS\PS2.sys
2011/08/15 14:05:53.0390 3532 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
2011/08/15 14:05:53.0500 3532 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
2011/08/15 14:05:53.0625 3532 PxHelp20 (7c81ae3c9b82ba2da437ed4d31bc56cf) C:\WINDOWS\system32\Drivers\PxHelp20.sys
2011/08/15 14:05:53.0984 3532 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
2011/08/15 14:05:54.0046 3532 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
2011/08/15 14:05:54.0156 3532 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
2011/08/15 14:05:54.0328 3532 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
2011/08/15 14:05:54.0390 3532 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
2011/08/15 14:05:54.0515 3532 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
2011/08/15 14:05:54.0656 3532 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys
2011/08/15 14:05:54.0781 3532 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys
2011/08/15 14:05:54.0937 3532 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
2011/08/15 14:05:55.0062 3532 SASDIFSV (39763504067962108505bff25f024345) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
2011/08/15 14:05:55.0093 3532 SASKUTIL (77b9fc20084b48408ad3e87570eb4a85) C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
2011/08/15 14:05:55.0406 3532 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
2011/08/15 14:05:55.0515 3532 Serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
2011/08/15 14:05:55.0578 3532 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys
2011/08/15 14:05:55.0625 3532 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
2011/08/15 14:05:55.0875 3532 SiS315 (509d96916c7d9218e4083940b8711b9b) C:\WINDOWS\system32\DRIVERS\sisgrp.sys
2011/08/15 14:05:55.0984 3532 SiSkp (2c921a4cce0b3eb372ebf448939fa3bf) C:\WINDOWS\system32\DRIVERS\srvkp.sys
2011/08/15 14:05:56.0093 3532 SISNIC (5529b51aacff16fbdde4b34ff0af2b76) C:\WINDOWS\system32\DRIVERS\sisnic.sys
2011/08/15 14:05:56.0203 3532 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
2011/08/15 14:05:56.0343 3532 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
2011/08/15 14:05:56.0437 3532 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys
2011/08/15 14:05:56.0593 3532 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
2011/08/15 14:05:56.0718 3532 StillCam (a9573045baa16eab9b1085205b82f1ed) C:\WINDOWS\system32\DRIVERS\serscan.sys
2011/08/15 14:05:56.0875 3532 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
2011/08/15 14:05:56.0984 3532 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
2011/08/15 14:05:57.0062 3532 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
2011/08/15 14:05:57.0609 3532 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
2011/08/15 14:05:57.0765 3532 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
2011/08/15 14:05:57.0906 3532 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
2011/08/15 14:05:58.0015 3532 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
2011/08/15 14:05:58.0156 3532 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
2011/08/15 14:05:58.0437 3532 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
2011/08/15 14:05:58.0671 3532 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
2011/08/15 14:05:58.0843 3532 USBAAPL (d4fb6ecc60a428564ba8768b0e23c0fc) C:\WINDOWS\system32\Drivers\usbaapl.sys
2011/08/15 14:05:58.0968 3532 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys
2011/08/15 14:05:59.0078 3532 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
2011/08/15 14:05:59.0218 3532 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
2011/08/15 14:05:59.0359 3532 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
2011/08/15 14:05:59.0453 3532 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys
2011/08/15 14:05:59.0609 3532 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
2011/08/15 14:05:59.0718 3532 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
2011/08/15 14:05:59.0859 3532 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
2011/08/15 14:05:59.0953 3532 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
2011/08/15 14:06:00.0093 3532 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
2011/08/15 14:06:00.0203 3532 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys
2011/08/15 14:06:00.0343 3532 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys
2011/08/15 14:06:00.0500 3532 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
2011/08/15 14:06:00.0671 3532 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
2011/08/15 14:06:00.0859 3532 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\Drivers\wpdusb.sys
2011/08/15 14:06:00.0968 3532 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
2011/08/15 14:06:01.0125 3532 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
2011/08/15 14:06:01.0296 3532 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
2011/08/15 14:06:01.0421 3532 MBR (0x1B8) (0ac6d996bce152aed9600e6d6b797e2e) \Device\Harddisk0\DR0
2011/08/15 14:06:01.0468 3532 Boot (0x1200) (0701dadbabfa3ac3eb882525d1eaf09a) \Device\Harddisk0\DR0\Partition0
2011/08/15 14:06:01.0484 3532 Boot (0x1200) (d65c20f4ed1c307e0e6dd66518ffa472) \Device\Harddisk0\DR0\Partition1
2011/08/15 14:06:01.0500 3532 ================================================================================
2011/08/15 14:06:01.0500 3532 Scan finished
2011/08/15 14:06:01.0500 3532 ================================================================================
2011/08/15 14:06:01.0515 3732 Detected object count: 0
2011/08/15 14:06:01.0515 3732 Actual detected object count: 0

#7 Farbar

Just Curious

Group: Malware Response Instructor
Posts: 17,817
Joined: 08-December 07
Gender:Male
Location:The Netherlands

Posted 15 August 2011 - 02:16 PM

Well done. :thumbup2:

The log is sufficient.

To make sure I need a couple of logs.

Please download MBRCheck by clicking here and save it to your desktop.
- Double click on the file to run it (Vista and Windows 7 users will have to confirm the UAC prompt).
- A window will open on your desktop.
- If an unknown bootcode is found you will have further options available to you, at this time press N then press Enter twice.
- If nothing unusual is found just press Enter.
- A .txt file named MBRCheck_mm.dd.yy_hh.mm.txt should appear on your desktop.
- Please post the contents of that file in your next reply.
Please download OTL by OldTimer.
- Save it to your desktop.
- Double click on the OTL icon on your desktop.
- Check the "Scan All Users" checkbox.
- Check the "Standard Output".
- Click Run Scan button.
- Two reports will open, copy and paste OTL.txt and attacht Extra.txt to your reply:
  - OTL.txt <-- Will be opened
  - Extra.txt <-- Will be minimized

#8 melissamc212

Member

Group: Members
Posts: 20
Joined: 11-September 09

Posted 15 August 2011 - 02:46 PM

MBRCheck, version 1.2.3
© 2010, AD

Command-line:
Windows Version: Windows XP Home Edition
Windows Information: Service Pack 3 (build 2600)
Logical Drives Mask: 0x020003dc

Kernel Drivers (total 125):
0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
0x806D1000 \WINDOWS\system32\hal.dll
0xBA5A8000 \WINDOWS\system32\KDCOM.DLL
0xBA4B8000 \WINDOWS\system32\BOOTVID.dll
0xBA0A8000 mmlokgar.sys
0xB9F79000 ACPI.sys
0xBA5AA000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
0xB9F68000 pci.sys
0xBA0B8000 isapnp.sys
0xBA0C8000 ohci1394.sys
0xBA0D8000 \WINDOWS\system32\DRIVERS\1394BUS.SYS
0xBA670000 pciide.sys
0xBA328000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
0xBA0E8000 MountMgr.sys
0xB9F49000 ftdisk.sys
0xBA330000 PartMgr.sys
0xBA0F8000 VolSnap.sys
0xB9F31000 atapi.sys
0xB9EF6000 \WINDOWS\system32\DRIVERS\SCSIPORT.SYS
0xBA108000 disk.sys
0xBA118000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
0xB9ED6000 fltmgr.sys
0xB9EC4000 sr.sys
0xBA338000 PxHelp20.sys
0xB9EAD000 KSecDD.sys
0xB9E9A000 WudfPf.sys
0xB9E0D000 Ntfs.sys
0xB9DE0000 NDIS.sys
0xB9DC6000 Mup.sys
0xBA128000 gagp30kx.sys
0xBA340000 avgrkx86.sys
0xBA138000 AVGIDSEH.Sys
0xB97BC000 \SystemRoot\system32\DRIVERS\AmdK8.sys
0xB9029000 \SystemRoot\system32\DRIVERS\sisgrp.sys
0xB9015000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
0xB97AC000 \SystemRoot\system32\DRIVERS\imapi.sys
0xB979C000 \SystemRoot\system32\DRIVERS\cdrom.sys
0xB978C000 \SystemRoot\system32\DRIVERS\redbook.sys
0xB8FF2000 \SystemRoot\system32\DRIVERS\ks.sys
0xBA398000 \SystemRoot\SYSTEM32\DRIVERS\GEARAspiWDM.sys
0xB8DBC000 \SystemRoot\system32\drivers\ALCXWDM.SYS
0xB8D98000 \SystemRoot\system32\drivers\portcls.sys
0xB977C000 \SystemRoot\system32\drivers\drmk.sys
0xBA3A0000 \SystemRoot\system32\DRIVERS\usbohci.sys
0xB8D74000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0xBA3A8000 \SystemRoot\system32\DRIVERS\usbehci.sys
0xBA3B0000 \SystemRoot\system32\DRIVERS\sisnic.sys
0xB8C3E000 \SystemRoot\system32\DRIVERS\AGRSM.sys
0xBA3B8000 \SystemRoot\System32\Drivers\Modem.SYS
0xB976C000 \SystemRoot\system32\DRIVERS\nic1394.sys
0xB975C000 \SystemRoot\system32\DRIVERS\serial.sys
0xB9D82000 \SystemRoot\system32\DRIVERS\serenum.sys
0xB8C2A000 \SystemRoot\system32\DRIVERS\parport.sys
0xB974C000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0xBA3C0000 \SystemRoot\system32\DRIVERS\mouclass.sys
0xBA3C8000 \SystemRoot\system32\DRIVERS\PS2.sys
0xBA3D0000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0xBA6CE000 \SystemRoot\system32\DRIVERS\audstub.sys
0xB973C000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0xB9D7E000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0xB8C13000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0xBA198000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0xBA1A8000 \SystemRoot\system32\DRIVERS\raspptp.sys
0xBA3D8000 \SystemRoot\system32\DRIVERS\TDI.SYS
0xB8C02000 \SystemRoot\system32\DRIVERS\psched.sys
0xBA1B8000 \SystemRoot\system32\DRIVERS\msgpc.sys
0xBA3E0000 \SystemRoot\system32\DRIVERS\ptilink.sys
0xBA3E8000 \SystemRoot\system32\DRIVERS\raspti.sys
0xBA1C8000 \SystemRoot\system32\DRIVERS\termdd.sys
0xBA5E0000 \SystemRoot\system32\DRIVERS\swenum.sys
0xB8BA4000 \SystemRoot\system32\DRIVERS\update.sys
0xBA544000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0xBA1D8000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xBA218000 \SystemRoot\system32\DRIVERS\usbhub.sys
0xBA5E6000 \SystemRoot\system32\DRIVERS\USBD.SYS
0xBA238000 \SystemRoot\system32\DRIVERS\avgmfx86.sys
0xBA5E8000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xBA739000 \SystemRoot\System32\Drivers\Null.SYS
0xBA5EA000 \SystemRoot\System32\Drivers\Beep.SYS
0xBA408000 \SystemRoot\System32\drivers\vga.sys
0xBA5EC000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xBA5EE000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xBA410000 \SystemRoot\System32\Drivers\Msfs.SYS
0xBA418000 \SystemRoot\System32\Drivers\Npfs.SYS
0xB906A000 \SystemRoot\system32\DRIVERS\rasacd.sys
0xAF9A9000 \SystemRoot\system32\DRIVERS\ipsec.sys
0xAF950000 \SystemRoot\system32\DRIVERS\tcpip.sys
0xAF908000 \SystemRoot\system32\DRIVERS\avgtdix.sys
0xAF8E2000 \SystemRoot\system32\DRIVERS\ipnat.sys
0xBA248000 \SystemRoot\system32\DRIVERS\wanarp.sys
0xBA258000 \SystemRoot\system32\DRIVERS\arp1394.sys
0xAF8BA000 \SystemRoot\system32\DRIVERS\netbt.sys
0xAF898000 \SystemRoot\System32\drivers\afd.sys
0xBA268000 \SystemRoot\system32\DRIVERS\netbios.sys
0xBA56C000 \SystemRoot\system32\DRIVERS\srvkp.sys
0xAF876000 \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
0xBA420000 \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
0xAF84B000 \SystemRoot\system32\DRIVERS\rdbss.sys
0xAF7DB000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xBA288000 \SystemRoot\System32\Drivers\Fips.SYS
0xBA428000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
0xAF714000 \SystemRoot\system32\DRIVERS\AE1000XP.sys
0xAF6D8000 \SystemRoot\system32\DRIVERS\avgldx86.sys
0xAE90F000 \SystemRoot\System32\Drivers\Fastfat.SYS
0xAE87F000 \SystemRoot\System32\Drivers\dump_atapi.sys
0xBA624000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
0xBF800000 \SystemRoot\System32\win32k.sys
0xAE90B000 \SystemRoot\System32\drivers\Dxapi.sys
0xBA488000 \SystemRoot\System32\watchdog.sys
0xBF000000 \SystemRoot\System32\drivers\dxg.sys
0xBA7F5000 \SystemRoot\System32\drivers\dxgthk.sys
0xBF012000 \SystemRoot\System32\SiSGRV.dll
0xAE733000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0xAE4C2000 \SystemRoot\system32\DRIVERS\mrxdav.sys
0xAE597000 \SystemRoot\system32\DRIVERS\AVGIDSShim.Sys
0xAE2F5000 \SystemRoot\system32\drivers\wdmaud.sys
0xAE3D2000 \SystemRoot\system32\drivers\sysaudio.sys
0xAE17A000 \SystemRoot\System32\Drivers\Cdfs.SYS
0xADD9F000 \SystemRoot\system32\DRIVERS\srv.sys
0xAE107000 \SystemRoot\system32\DRIVERS\AVGIDSFilter.Sys
0xADC37000 \SystemRoot\system32\DRIVERS\AVGIDSDriver.Sys
0xAD76E000 \SystemRoot\System32\Drivers\HTTP.sys
0xBA5E4000 \SystemRoot\system32\DRIVERS\serscan.sys
0xACA0A000 \SystemRoot\system32\drivers\kmixer.sys
0x7C900000 \WINDOWS\system32\ntdll.dll

Processes (total 55):
0 System Idle Process
4 System
632 C:\WINDOWS\system32\smss.exe
680 C:\PROGRA~1\AVG\AVG10\avgchsvx.exe
868 csrss.exe
892 C:\WINDOWS\system32\winlogon.exe
940 C:\WINDOWS\system32\services.exe
952 C:\WINDOWS\system32\lsass.exe
1104 C:\WINDOWS\system32\svchost.exe
1160 svchost.exe
1200 C:\WINDOWS\system32\svchost.exe
1236 C:\WINDOWS\system32\svchost.exe
1436 svchost.exe
1508 svchost.exe
1828 C:\WINDOWS\system32\spoolsv.exe
1916 svchost.exe
1948 C:\Program Files\SUPERAntiSpyware\SASCore.exe
1960 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
1976 C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
128 C:\Program Files\AVG\AVG10\avgwdsvc.exe
156 C:\Program Files\Bonjour\mDNSResponder.exe
268 C:\WINDOWS\ALCXMNTR.EXE
376 C:\Program Files\Java\jre6\bin\jusched.exe
384 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
420 C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
432 C:\Program Files\QuickTime\QTTask.exe
260 C:\Program Files\iTunes\iTunesHelper.exe
508 C:\WINDOWS\system32\svchost.exe
520 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
528 C:\WINDOWS\system32\ctfmon.exe
588 C:\Program Files\Messenger\msmsgs.exe
832 C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
332 C:\Program Files\Java\jre6\bin\jqs.exe
1484 C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
2172 C:\WINDOWS\system32\svchost.exe
2264 C:\WINDOWS\system32\svchost.exe
2376 C:\WINDOWS\system32\svchost.exe
2544 C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
4076 C:\hp\KBD\KBD.exe
852 C:\WINDOWS\AGRSMMSG.exe
392 C:\WINDOWS\system\hpsysdrv.exe
2612 C:\WINDOWS\system32\wuauclt.exe
3360 C:\WINDOWS\system32\svchost.exe
3672 C:\Program Files\iPod\bin\iPodService.exe
3104 C:\WINDOWS\system32\wscntfy.exe
3860 alg.exe
184 C:\PROGRA~1\Yahoo!\MESSEN~1\Ymsgr_tray.exe
2204 C:\Program Files\Internet Explorer\iexplore.exe
2512 C:\Program Files\Internet Explorer\iexplore.exe
2096 C:\PROGRA~1\AVG\AVG10\avgrsx.exe
568 C:\Program Files\AVG\AVG10\avgcsrvx.exe
1752 C:\Program Files\Internet Explorer\iexplore.exe
2540 C:\WINDOWS\explorer.exe
3124 C:\Program Files\Internet Explorer\iexplore.exe
3740 C:\Documents and Settings\Compaq_Owner\Desktop\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000001`7fe80000 (NTFS)
\\.\D: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (FAT32)

PhysicalDrive0 Model Number: Maxtor6B200M0, Rev: BANC1B10

Size Device Name MBR Status
--------------------------------------------
186 GB \\.\PhysicalDrive0 Legit MBR code detected
SHA1: F75A10171F7488C11BA9A98CEC3D186D7A8D3972

Done!

----

OTL logfile created on: 8/15/2011 2:26:09 PM - Run 1
OTL by OldTimer - Version 3.2.26.4 Folder = C:\Documents and Settings\Compaq_Owner\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.87 Gb Total Physical Memory | 1.05 Gb Available Physical Memory | 56.00% Memory free
3.04 Gb Paging File | 2.22 Gb Available in Paging File | 73.18% Paging File free
Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 180.31 Gb Total Space | 44.20 Gb Free Space | 24.51% Space Free | Partition Type: NTFS
Drive D: | 5.99 Gb Total Space | 0.98 Gb Free Space | 16.40% Space Free | Partition Type: FAT32

Computer Name: MELISSA | User Name: Compaq_Owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/08/15 14:24:27 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Compaq_Owner\Desktop\OTL.exe
PRC - [2011/08/12 16:37:06 | 004,603,264 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
PRC - [2011/08/11 18:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCore.exe
PRC - [2010/12/05 17:26:40 | 000,654,176 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgrsx.exe
PRC - [2010/12/05 17:26:12 | 000,650,592 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgchsvx.exe
PRC - [2010/10/22 05:58:18 | 000,265,400 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgwdsvc.exe
PRC - [2010/10/22 05:56:58 | 000,845,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgcsrvx.exe
PRC - [2008/11/09 15:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2006/07/25 19:03:42 | 000,100,032 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe

========== Modules (No Company Name) ==========

MOD - [2011/08/15 12:51:14 | 000,052,736 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll
MOD - [2011/08/14 16:41:32 | 000,117,760 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
MOD - [2011/08/14 16:41:32 | 000,063,488 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
MOD - [2011/08/14 16:41:32 | 000,052,224 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
MOD - [2010/03/19 17:27:46 | 000,929,792 | ---- | M] () -- C:\Program Files\Yahoo!\Messenger\yui.dll
MOD - [2010/02/05 13:27:45 | 001,291,776 | ---- | M] () -- C:\WINDOWS\system32\quartz.dll
MOD - [2009/11/03 15:51:42 | 000,067,872 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2009/02/14 06:04:38 | 000,756,040 | ---- | M] () -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
MOD - [2008/04/13 19:12:42 | 000,148,992 | ---- | M] () -- C:\WINDOWS\system32\mpg2splt.ax
MOD - [2008/04/13 19:12:03 | 000,562,176 | ---- | M] () -- C:\WINDOWS\system32\qedit.dll
MOD - [2008/04/13 19:11:59 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2008/04/13 19:11:52 | 000,498,742 | ---- | M] () -- C:\WINDOWS\system32\dxmasf.dll
MOD - [2008/04/13 19:11:51 | 000,059,904 | ---- | M] () -- C:\WINDOWS\system32\devenum.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
SRV - [2011/08/11 18:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE -- (!SASCORE)
SRV - [2011/01/06 16:23:18 | 006,128,720 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2010/10/22 05:58:18 | 000,265,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\avgwdsvc.exe -- (avgwd)
SRV - [2010/01/15 07:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2008/11/09 15:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2006/07/25 19:03:42 | 002,119,360 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_0.EXE -- (LiveUpdate)
SRV - [2006/07/25 19:03:42 | 000,100,032 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe -- (Automatic LiveUpdate Scheduler)

========== Driver Services (SafeList) ==========

DRV - [2011/07/22 11:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2011/07/12 16:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2011/07/06 19:52:42 | 000,041,272 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2010/12/08 05:12:38 | 000,251,728 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2010/11/12 14:19:38 | 000,299,984 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2010/09/13 16:27:24 | 000,025,680 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys -- (AVGIDSEH)
DRV - [2010/09/07 04:48:56 | 000,034,384 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2010/09/07 04:48:50 | 000,026,064 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\avgrkx86.sys -- (Avgrkx86)
DRV - [2010/08/19 21:42:38 | 000,030,288 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter)
DRV - [2010/08/19 21:42:36 | 000,123,472 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver)
DRV - [2010/08/19 21:42:34 | 000,026,192 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys -- (AVGIDSShim)
DRV - [2010/02/12 15:36:38 | 000,816,672 | R--- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AE1000XP.sys -- (AE1000)
DRV - [2005/04/20 11:00:56 | 002,317,696 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2005/04/12 11:42:16 | 000,011,904 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\srvkp.sys -- (SiSkp)
DRV - [2005/04/12 11:08:44 | 000,247,296 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sisgrp.sys -- (SiS315)
DRV - [2005/03/09 16:53:00 | 000,036,352 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2004/08/03 23:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2004/06/29 12:07:18 | 001,268,204 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2003/12/02 20:23:20 | 000,142,336 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\WINDOWS\system32\DRIVERS\fasttx2k.sys -- (fasttx2k)
DRV - [2003/07/11 17:28:56 | 000,032,768 | ---- | M] (SiS Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sisnic.sys -- (SISNIC)
DRV - [2002/07/29 16:43:50 | 000,023,808 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\PS2.sys -- (Ps2)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=presario&pf=desktop
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=presario&pf=desktop

IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q305&bd=presario&pf=desktop&parm1=seconduser
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=presario&pf=desktop&parm1=seconduser
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=presario&pf=desktop&parm1=seconduser
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=presario&pf=desktop&parm1=seconduser
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q305&bd=presario&pf=desktop&parm1=seconduser
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q305&bd=presario&pf=desktop&parm1=seconduser
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=presario&pf=desktop&parm1=seconduser
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=presario&pf=desktop&parm1=seconduser
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=presario&pf=desktop&parm1=seconduser
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q305&bd=presario&pf=desktop&parm1=seconduser
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/?fr=fp-yie8
IE - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=presario&pf=desktop
IE - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?ilc=1
IE - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll (Yahoo! Inc.)
IE - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local>

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://en-US.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..network.proxy.no_proxies_on: "*.local"

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2027: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.2088: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1040: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine,version=1.0: C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine: C:\Documents and Settings\Compaq_Owner\Application Data\nprhapengine.dll File not found
FF - HKCU\Software\MozillaPlugins\@yahoo.com/BrowserPlus,version=2.9.8: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll (Yahoo! Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG10\Firefox4\ [2011/05/22 18:59:44 | 000,000,000 | ---D | M]

[2010/09/25 23:52:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Extensions
[2010/09/25 23:52:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\kqfbo2fd.default\extensions
[2009/10/16 16:07:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NORTON\COFFPLGN
[2010/01/14 12:44:43 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF

O1 HOSTS File: ([2004/08/04 13:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll (Yahoo! Inc.)
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll (Google Inc.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll (Yahoo! Inc.)
O3 - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009\..\Toolbar\WebBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009\..\Toolbar\WebBrowser: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found.
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [HPBootOp] C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [SiSPower] C:\WINDOWS\System32\SiSPower.dll (Silicon Integrated Systems Corporation)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009..\Run: [Messenger (Yahoo!)] C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O4 - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009..\Run: [Weather] File not found
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Compaq Connections.lnk = C:\Program Files\Compaq Connections\6750491\Program\Compaq Connections.exe (Hewlett-Packard)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O4 - Startup: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Startup\RollerCoaster Tycoon 3 Registration.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm ()
O9 - Extra 'Tools' menuitem : Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/sites/production/ieawsdc32.cab (Microsoft Office Template and Media Control)
O16 - DPF: {16F67783-7E72-4C39-99C4-4780A8335484} http://www.syncmyride.com/Own/Modules/UpdateCenter/applets/sync.cab (SyncXfer Class)
O16 - DPF: {28B66320-9687-4B13-8757-36F901887AB5} http://www.seehere.com/ips-opdata/layout/fujius02/objects/canvasx.cab (CanvasX Class)
O16 - DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} http://www.seehere.com/ips-opdata/layout/fujius02/objects/jordan.cab (JordanUploader Class)
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab (HP Download Manager)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {924B4927-D3BA-41EA-9F7E-8A89194AB3AC} http://panda-plugin.disney.go.com/plugin/win32/p3dactivex.cab (P3DActiveX Control)
O16 - DPF: {A9F8D9EC-3D0A-4A60-BD82-FBD64BAD370D} http://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab (DDRevision Class)
O16 - DPF: {BEA7310D-06C4-4339-A784-DC3804819809} http://images3.pnimedia.com/ProductAssets/costcous/activex/v3_0_0_7/PhotoCenter_ActiveX_Control.cab (Photo Upload Plugin Class)
O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab (Java Plug-in 1.5.0)
O16 - DPF: {CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_17-windows-i586.cab (Java Plug-in 1.5.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/2.9.2.0/GarminAxControl.CAB (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 68.87.72.134 68.87.77.134 192.168.1.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O24 - Desktop WallPaper: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/01/26 23:53:38 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2001/07/28 07:07:38 | 000,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT -- [ FAT32 ]
O32 - AutoRun File - [2004/04/30 23:01:14 | 000,000,053 | -HS- | M] () - D:\Autorun.inf -- [ FAT32 ]
O33 - MountPoints2\##192.168.1.138#memory_card\Shell - "" = AutoRun
O33 - MountPoints2\##192.168.1.138#memory_card\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\##192.168.1.138#memory_card\Shell\AutoRun\command - "" = Z:\setupSNK.exe
O33 - MountPoints2\{4bc0476b-f5b7-11de-91e8-0013d4130ad2}\Shell\AutoRun\command - "" = F:\setupSNK.exe
O33 - MountPoints2\{57bf0556-319f-11e0-9299-687f7476f60d}\Shell\Auto\command - "" = J:\launcher.exe
O33 - MountPoints2\{57bf0556-319f-11e0-9299-687f7476f60d}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{57bf0556-319f-11e0-9299-687f7476f60d}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL launcher.exe
O33 - MountPoints2\{c5e5d41a-16a0-11df-9219-0013d4130ad2}\Shell\AutoRun\command - "" = J:\Connect.exe
O33 - MountPoints2\D\Shell - "" = AutoRun
O33 - MountPoints2\D\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\D\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync) - C:\Program Files\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart) - C:\Program Files\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/08/15 14:24:25 | 000,579,584 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Compaq_Owner\Desktop\OTL.exe
[2011/08/15 00:06:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/08/15 00:05:59 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware2
[2011/08/14 16:41:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Owner\Application Data\SUPERAntiSpyware.com
[2011/08/14 16:40:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SUPERSetup
[2011/08/14 16:40:17 | 012,472,736 | ---- | C] (SUPERAntiSpyware.com) -- C:\Documents and Settings\Compaq_Owner\Desktop\SAS.exe
[2011/08/14 16:38:42 | 009,466,208 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Compaq_Owner\Desktop\Fixer.exe
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\Documents and Settings\Compaq_Owner\My Documents\*.tmp files -> C:\Documents and Settings\Compaq_Owner\My Documents\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2050/06/10 17:56:10 | 003,444,086 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\PICT0493.AVI
[2050/06/10 17:46:28 | 007,016,662 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\PICT0486.AVI
[2050/06/10 17:39:38 | 004,318,138 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\PICT0485.AVI
[2050/06/10 17:39:22 | 001,329,860 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\PICT0484.AVI
[2050/06/10 17:39:08 | 002,135,086 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\PICT0483.AVI
[2050/06/10 17:38:34 | 002,616,876 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\PICT0482.AVI
[2050/06/10 17:37:56 | 001,745,654 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\PICT0481.AVI
[2050/06/10 17:37:02 | 003,435,262 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\PICT0480.AVI
[2050/06/10 17:36:28 | 003,627,540 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\PICT0478.AVI
[2050/06/10 17:35:54 | 002,591,706 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\PICT0477.AVI
[2011/08/15 14:24:27 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Compaq_Owner\Desktop\OTL.exe
[2011/08/15 14:22:29 | 000,002,515 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\Microsoft Office Word 2007 (2).lnk
[2011/08/15 14:20:38 | 000,080,384 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\MBRCheck.exe
[2011/08/15 14:04:41 | 001,388,507 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\tdsskiller.zip
[2011/08/15 13:50:00 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/08/15 13:50:00 | 000,000,882 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/08/15 13:41:46 | 000,684,297 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\unhide.exe
[2011/08/15 12:49:43 | 000,000,249 | ---- | M] () -- C:\WINDOWS\System\hpsysdrv.dat
[2011/08/15 12:48:44 | 000,000,452 | ---- | M] () -- C:\WINDOWS\tasks\RegCure Program Check.job
[2011/08/15 12:48:44 | 000,000,392 | ---- | M] () -- C:\WINDOWS\tasks\RegCure Startup.job
[2011/08/15 12:48:38 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/08/15 12:48:37 | 2012,794,880 | -HS- | M] () -- C:\hiberfil.sys
[2011/08/14 23:22:02 | 000,000,436 | ---- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{5EB07A36-24DE-4B37-8241-D78A0EC7D484}.job
[2011/08/14 16:40:45 | 000,001,686 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2011/08/14 16:38:50 | 009,466,208 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Compaq_Owner\Desktop\Fixer.exe
[2011/08/14 16:36:54 | 012,472,736 | ---- | M] (SUPERAntiSpyware.com) -- C:\Documents and Settings\Compaq_Owner\Desktop\SAS.exe
[2011/08/11 08:27:01 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/07/28 15:17:09 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/07/24 20:20:56 | 000,000,104 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Shortcut to .lnk
[2011/07/24 20:20:40 | 000,000,104 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\Shortcut to .lnk
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\Documents and Settings\Compaq_Owner\My Documents\*.tmp files -> C:\Documents and Settings\Compaq_Owner\My Documents\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/08/15 14:20:36 | 000,080,384 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Desktop\MBRCheck.exe
[2011/08/15 14:04:37 | 001,388,507 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Desktop\tdsskiller.zip
[2011/08/15 14:02:20 | 000,000,808 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Yahoo! Messenger.lnk
[2011/08/15 14:02:19 | 000,002,393 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\TurboTax 2008.lnk
[2011/08/15 14:02:19 | 000,002,187 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Safari.lnk
[2011/08/15 14:02:19 | 000,001,943 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\The Sims™ Life Stories.lnk
[2011/08/15 14:02:19 | 000,001,921 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\NetLibrary Media Center.lnk
[2011/08/15 14:02:19 | 000,001,921 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Launch NetLibrary Media Center.lnk
[2011/08/15 14:02:19 | 000,001,888 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\OverDrive Media Console.lnk
[2011/08/15 14:02:19 | 000,001,866 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\HP Photosmart Essential 2.01.lnk
[2011/08/15 14:02:19 | 000,001,854 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2011/08/15 14:02:19 | 000,001,829 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Compaq Organize.lnk
[2011/08/15 14:02:19 | 000,001,778 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\RollerCoaster Tycoon 3.lnk
[2011/08/15 14:02:19 | 000,001,737 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2011/08/15 14:02:19 | 000,001,733 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Documentation.lnk
[2011/08/15 14:02:19 | 000,001,663 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\PAF 5.lnk
[2011/08/15 14:02:19 | 000,001,619 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\McAfee Security Scan Plus.lnk
[2011/08/15 14:02:19 | 000,001,612 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2011/08/15 14:02:19 | 000,001,610 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/08/15 14:02:19 | 000,001,577 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Quicken Starter Edition 2009.lnk
[2011/08/15 14:02:19 | 000,001,550 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2011/08/15 14:02:19 | 000,001,475 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Yahoo! Mail.lnk
[2011/08/15 14:02:19 | 000,000,923 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\RealPlayer.lnk
[2011/08/15 14:02:19 | 000,000,905 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\RealPlayer.lnk
[2011/08/15 14:02:19 | 000,000,905 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\OpenOffice.org 3.1.lnk
[2011/08/15 14:02:19 | 000,000,826 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Messenger.lnk
[2011/08/15 14:02:19 | 000,000,823 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Internet Explorer 2.lnk
[2011/08/15 14:02:19 | 000,000,808 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2011/08/15 14:02:19 | 000,000,749 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\SmartMusic 2011.lnk
[2011/08/15 14:02:19 | 000,000,740 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Acrobat_com.lnk
[2011/08/15 14:02:19 | 000,000,731 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Software Repair Wizard.lnk
[2011/08/15 14:02:19 | 000,000,709 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Pivot Stickfigure Animator.lnk
[2011/08/15 14:02:19 | 000,000,698 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\AVG 2011.lnk
[2011/08/15 14:02:19 | 000,000,656 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Rhapsody.lnk
[2011/08/15 14:02:19 | 000,000,638 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Rhapsody.lnk
[2011/08/15 14:02:19 | 000,000,194 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Play More Great Games!.url
[2011/08/15 14:02:19 | 000,000,079 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2011/08/15 14:02:16 | 000,001,918 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Compaq Connections.lnk
[2011/08/15 14:02:16 | 000,001,738 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
[2011/08/15 14:02:16 | 000,001,611 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
[2011/08/15 14:02:11 | 000,002,487 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Excel.lnk
[2011/08/15 14:02:11 | 000,002,475 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft PowerPoint.lnk
[2011/08/15 14:02:11 | 000,002,463 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Access.lnk
[2011/08/15 14:02:11 | 000,002,425 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Apple Software Update.lnk
[2011/08/15 14:02:11 | 000,002,347 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Reader 9.lnk
[2011/08/15 14:02:11 | 000,002,081 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Photoshop Album Starter Edition 3.0.lnk
[2011/08/15 14:02:11 | 000,001,942 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Plus! Photo Story 2 LE.lnk
[2011/08/15 14:02:11 | 000,001,936 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\MSN.lnk
[2011/08/15 14:02:11 | 000,001,854 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Safari.lnk
[2011/08/15 14:02:11 | 000,001,835 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Compaq Organize.lnk
[2011/08/15 14:02:11 | 000,001,818 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Cisco Connect.lnk
[2011/08/15 14:02:11 | 000,001,775 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Office PowerPoint Viewer 2003.lnk
[2011/08/15 14:02:11 | 000,001,701 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Works Task Launcher.lnk
[2011/08/15 14:02:11 | 000,001,678 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\PC-Doctor.lnk
[2011/08/15 14:02:11 | 000,001,459 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Yahoo! Mail.lnk
[2011/08/15 14:02:11 | 000,000,786 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Windows Movie Maker.lnk
[2011/08/15 14:02:11 | 000,000,746 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Acrobat_com.lnk
[2011/08/15 14:02:11 | 000,000,731 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\I.R.I.S. OCR Registration.lnk
[2011/08/15 14:02:11 | 000,000,609 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Windows Messenger.lnk
[2011/08/15 14:02:11 | 000,000,231 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Multi-channel Sound Manager.lnk
[2011/08/15 14:02:11 | 000,000,152 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\HP Music.url
[2011/08/15 13:41:45 | 000,684,297 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Desktop\unhide.exe
[2011/08/15 00:06:03 | 000,000,810 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes' Anti-Malware.lnk
[2011/08/15 00:06:03 | 000,000,792 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/08/14 22:39:52 | 2012,794,880 | -HS- | C] () -- C:\hiberfil.sys
[2011/08/14 16:40:45 | 000,001,686 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2011/07/24 20:20:56 | 000,000,104 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Shortcut to .lnk
[2011/07/24 20:20:40 | 000,000,104 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Desktop\Shortcut to .lnk
[2011/05/08 15:22:44 | 000,000,232 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\~19128100
[2011/05/08 15:22:44 | 000,000,152 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\~19128100r
[2011/05/08 15:22:41 | 000,000,336 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\19128100
[2010/12/29 02:33:12 | 000,147,593 | ---- | C] () -- C:\WINDOWS\hpoins21.dat
[2010/12/29 02:33:11 | 000,008,138 | ---- | C] () -- C:\WINDOWS\hpomdl21.dat
[2010/10/27 18:08:37 | 000,001,940 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
[2010/10/27 18:03:34 | 000,001,940 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
[2010/09/12 15:44:59 | 000,013,931 | R--- | C] () -- C:\WINDOWS\System32\RaCoInst.dat
[2010/05/14 20:36:00 | 000,000,023 | ---- | C] () -- C:\WINDOWS\popcinfot.dat
[2010/05/14 20:36:00 | 000,000,000 | ---- | C] () -- C:\WINDOWS\popcreg.dat
[2010/04/25 20:10:33 | 000,048,648 | ---- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2010/02/07 01:38:26 | 000,033,280 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/01/14 10:42:57 | 000,077,352 | ---- | C] () -- C:\WINDOWS\hpqins05.dat
[2009/12/10 12:32:53 | 000,870,128 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\mcs.rma
[2009/12/10 12:32:53 | 000,000,004 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\C48D35
[2009/11/30 21:51:08 | 000,164,761 | ---- | C] () -- C:\WINDOWS\hpoins21.dat.temp
[2009/11/30 21:51:08 | 000,007,262 | ---- | C] () -- C:\WINDOWS\hpomdl21.dat.temp
[2009/11/30 21:24:21 | 000,001,208 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\wklnhst.dat
[2009/10/21 22:02:58 | 000,163,840 | ---- | C] () -- C:\WINDOWS\idatoqih.dll
[2008/11/09 14:07:17 | 000,000,074 | ---- | C] () -- C:\WINDOWS\ImportClient.INI
[2008/07/14 16:56:03 | 000,000,019 | ---- | C] () -- C:\WINDOWS\popcinfo.dat
[2007/10/23 20:37:08 | 000,000,254 | ---- | C] () -- C:\WINDOWS\Busytown.INI
[2007/06/13 19:12:00 | 000,000,161 | ---- | C] () -- C:\WINDOWS\mrpotato.ini
[2007/05/31 20:40:28 | 000,023,022 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2007/04/14 19:54:20 | 000,000,118 | ---- | C] () -- C:\WINDOWS\Sansa Media Converter.INI
[2007/01/24 23:59:46 | 000,000,140 | ---- | C] () -- C:\WINDOWS\encore_launcher.ini
[2007/01/14 21:34:05 | 000,000,509 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2006/08/13 20:17:51 | 000,000,067 | ---- | C] () -- C:\WINDOWS\PLAY-DOH.INI
[2006/08/11 17:51:00 | 000,741,852 | ---- | C] () -- C:\WINDOWS\PUZZLES.DAT
[2006/08/11 17:39:25 | 000,000,073 | ---- | C] () -- C:\WINDOWS\PUZZLES.INI
[2006/08/09 17:49:27 | 000,000,106 | ---- | C] () -- C:\WINDOWS\QTW.INI
[2006/07/24 17:21:04 | 000,000,036 | ---- | C] () -- C:\WINDOWS\Tiny_Run.ini
[2006/03/28 20:09:54 | 000,000,000 | ---- | C] () -- C:\WINDOWS\alphax.ini
[2006/03/28 19:13:57 | 000,001,607 | ---- | C] () -- C:\WINDOWS\hegames.ini
[2006/03/25 14:08:27 | 000,000,776 | ---- | C] () -- C:\WINDOWS\disney.ini
[2006/01/19 20:31:52 | 000,000,000 | ---- | C] () -- C:\WINDOWS\JDSecure31.INI
[2006/01/19 15:28:48 | 000,090,112 | ---- | C] () -- C:\WINDOWS\RSetupCE.exe
[2005/12/28 17:05:20 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ka.ini
[2005/10/17 17:05:14 | 000,000,165 | ---- | C] () -- C:\WINDOWS\Quicken.ini
[2005/09/05 14:44:45 | 000,000,335 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2005/08/07 23:46:25 | 000,000,340 | ---- | C] () -- C:\WINDOWS\mswgidll.ini
[2005/08/06 20:53:13 | 000,000,429 | ---- | C] () -- C:\WINDOWS\PINOCHLE.INI
[2005/08/04 20:50:16 | 000,000,438 | ---- | C] () -- C:\WINDOWS\PowerReg.dat
[2005/07/18 23:00:51 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Brownie.ini
[2005/07/18 22:22:51 | 000,000,462 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2005/07/18 22:22:51 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2005/07/18 22:13:48 | 000,027,019 | ---- | C] () -- C:\WINDOWS\maxlink.ini
[2005/05/14 08:00:54 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2005/05/14 07:58:41 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2005/05/14 07:58:41 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2005/05/14 07:58:41 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2005/05/14 07:58:41 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2005/05/14 07:58:41 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2005/05/14 07:58:41 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2005/05/14 07:31:21 | 000,118,784 | R--- | C] () -- C:\WINDOWS\bwUnin-6.3.2.62.exe
[2005/05/14 07:30:27 | 000,013,975 | ---- | C] () -- C:\WINDOWS\System32\CHODDI.SYS
[2005/05/14 07:30:22 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\hpreg.dll
[2005/05/14 07:30:02 | 000,002,158 | ---- | C] () -- C:\WINDOWS\System32\ssmute.ini
[2005/05/14 07:27:33 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005/05/14 07:14:55 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2005/05/14 07:12:13 | 000,001,040 | ---- | C] () -- C:\WINDOWS\System32\drivers\alcxinit.dat
[2005/05/14 07:09:14 | 000,094,143 | ---- | C] () -- C:\WINDOWS\System32\VGAunistlog.ini
[2005/05/14 07:09:14 | 000,083,779 | ---- | C] () -- C:\WINDOWS\VGAsetup.ini
[2005/05/14 07:09:13 | 000,032,768 | ---- | C] () -- C:\WINDOWS\InstFunc.exe
[2005/05/14 07:09:07 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\sis760.bin
[2005/05/14 07:09:07 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\sis741.bin
[2005/05/14 07:09:07 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\sis660.bin
[2005/05/14 07:00:10 | 000,000,780 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2005/05/14 06:58:20 | 000,323,584 | ---- | C] () -- C:\WINDOWS\System32\pythoncom22.dll
[2005/05/14 06:58:20 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\pywintypes22.dll
[2005/05/14 06:57:59 | 000,016,896 | ---- | C] () -- C:\WINDOWS\System32\bcbmm.dll
[2005/02/18 12:56:18 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2005/01/28 04:12:02 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2005/01/26 23:58:08 | 000,382,022 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2005/01/26 23:58:08 | 000,053,640 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2005/01/26 23:56:22 | 000,235,168 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2005/01/26 23:53:16 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2005/01/26 23:51:30 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2004/08/04 13:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/08/04 07:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/08/04 07:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/08/04 07:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/08/04 07:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/08/04 07:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/08/04 07:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004/08/04 07:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2004/06/15 23:38:00 | 000,000,592 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2003/04/11 00:04:00 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\JAWTAccessBridge.dll
[2001/08/23 18:12:28 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001/08/23 18:11:02 | 000,004,490 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat

========== Alternate Data Streams ==========

@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\zoo.ppt:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\WWRecipes.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\World Map.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\World Map Outline.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Why so stressed.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\VisionSavingsIDCard.pdf:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Valley Forge.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\US govt notes 4 purposes.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Types of Government notes.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Tiffany.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\The Girl Scout Promise.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Superfracxofjbdfhn0gf.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\SponsershipPacketCover[1].doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\SONG OF LIFE.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\SONG OF LIFE L.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Social studies SCHOOL.ppt:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\SISTE.ppt:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\ScreeningVisitsourcewksht.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Scavenger Hunt_FDOS.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Review for ch 5.1 civics.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Presentation1.ppt:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\potholder_webinst.pdf:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Poetry book.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Poems.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Party Chicken.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Nana_s_meds11006.xls:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Name.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\MSWR.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Mom Bucks.ppt:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Market on the Green.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Map of South America.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Map of Europe.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Map of Central America.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Map of Asia.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Map of Africa.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Make Your Own Invisible Ink.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Laura Madalyn.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Lat-Long.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Key Events in the Revolutionary War.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Jeopardy1Template.ppt:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\IMG_1100_edited.jpg:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\IMG_1100.jpg:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\GS Creative%20Situpons[1].pdf:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Growing Hostas.pdf:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Graph Paper.pdf:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Geography Test.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Geography test review.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Fun Facts.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Full List of Expelled and Censured.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\FootballCampFlyerFinal[1].doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Football Stretch and Running.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Football Certificate.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Flexible Benefits Reimbursement Form.pdf:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\FB(1).xls:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Emergency Contacts for Girls.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Econ Videos.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\econ ch 1.3 notes.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Document.rtf:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\depth charts 2007(1).xls:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Defensive Depth Chart.xls:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Declaration of Independence.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Conferences Attended.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Companion Pass Change.rtf:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\civics 2.1 quiz.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\civics 16.1 quiz.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Civics 16.1 crime notes.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\civics 15.3 test.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\civics 15.3 notes.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\christmas.ppt:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Chores Check your name A chore for every kid.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Ch 5.1 Civics test.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\ch 5.1 civics notes.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Calendar Summer 2007.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Calendar - Nov 2006.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Calendar - Blank.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Budget2009Feb.xls:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Budget2008Oct.xls:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Budget2008May8.xls:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Budget2008Jan1.xls:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Budget2007Oct.xls:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Budget(1).xls:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Book2.xls:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\Book1.xls:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\AdoptionletterfromMelissa[1].doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\2008 McClafferty M Form 1040 Individual Tax Return.pdf:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\2.1 quiz review.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\2.1 notes.doc:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Documents and Settings\Compaq_Owner\My Documents\08 FB Roster.xls:Roxio EMC Stream
@Alternate Data Stream - 147 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8

< End of report >

----

OTL Extras logfile created on: 8/15/2011 2:26:11 PM - Run 1
OTL by OldTimer - Version 3.2.26.4 Folder = C:\Documents and Settings\Compaq_Owner\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.87 Gb Total Physical Memory | 1.05 Gb Available Physical Memory | 56.00% Memory free
3.04 Gb Paging File | 2.22 Gb Available in Paging File | 73.18% Paging File free
Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 180.31 Gb Total Space | 44.20 Gb Free Space | 24.51% Space Free | Partition Type: NTFS
Drive D: | 5.99 Gb Total Space | 0.98 Gb Free Space | 16.40% Space Free | Partition Type: FAT32

Computer Name: MELISSA | User Name: Compaq_Owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

[HKEY_USERS\S-1-5-21-1516730583-2979589852-1062222659-1009\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"80:TCP" = 80:TCP:*:Enabled:WWW

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\AVG\AVG10\avgdiagex.exe" = C:\Program Files\AVG\AVG10\avgdiagex.exe:*:Disabled:AVG Diagnostics 2011 -- (AVG Technologies CZ, s.r.o.)
"C:\Program Files\Compaq Connections\6750491\Program\Compaq Connections.exe" = C:\Program Files\Compaq Connections\6750491\Program\Compaq Connections.exe:*:Disabled:BackWeb for Presario -- (Hewlett-Packard)
"C:\Program Files\EarthLink TotalAccess\TaskPanl.exe" = C:\Program Files\EarthLink TotalAccess\TaskPanl.exe:*:Disabled:Earthlink
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Disabled:hpiscnapp.exe
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Disabled:hpoews01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Disabled:hpofxm08.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Disabled:hposfx08.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Disabled:hposid01.exe -- (Hewlett-Packard Co.)
"E:\setup\HPZNUI01.EXE" = E:\setup\HPZNUI01.EXE:*:Disabled:hpznui01.exe
"C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\7zS505D\setup\HPZnui01.exe" = C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\7zS505D\setup\HPZnui01.exe:*:Disabled:hpznui01.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Disabled:hpzwiz01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\SecondLife\SLVoice.exe" = C:\Program Files\SecondLife\SLVoice.exe:*:Disabled:SLVoice
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" = C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Disabled:Yahoo! Messenger -- (Yahoo! Inc.)
"C:\Program Files\Microsoft Games\Zoo Tycoon 2\zt.exe" = C:\Program Files\Microsoft Games\Zoo Tycoon 2\zt.exe:*:Disabled:Zoo Tycoon 2 Executable -- (Microsoft Corporation)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{001E7FB6-BB6B-4ED0-BEDC-B5404ED96D4E}" = DocProc
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{075473F5-846A-448B-BCB3-104AA1760205}" = Sonic RecordNow Data
"{0EB5D9B7-8E6C-4A9E-B74F-16B7EE89A67B}" = Microsoft Plus! Photo Story 2 LE
"{10E1E87C-656C-4D08-86D6-5443D28583BE}" = TrayApp
"{13F00518-807A-4B3A-83B0-A7CD90F3A398}" = MarketResearch
"{1753255A-0AEB-4220-8C75-607B73F0C133}" = Copy
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{21657574-BD54-48A2-9450-EB03B2C7FC29}" = Sonic MyDVD Plus
"{22466889-7642-488d-AA0E-F619704CF7AB}" = DeviceDiscovery
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2614F54E-A828-49FA-93BA-45A3F756BFAA}" = 32 Bit HP CIO Components Installer
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java™ 6 Update 17
"{29FA38B4-0AE4-4D0D-8A51-6165BB990BB0}" = WebReg
"{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}" = Rhapsody Player Engine
"{2F28B3C9-2C89-4206-8B33-8ADC9577C49B}" = Scan
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Sonic Update Manager
"{3248F0A8-6813-11D6-A77B-00B0D0150000}" = J2SE Runtime Environment 5.0
"{3248F0A8-6813-11D6-A77B-00B0D0150170}" = J2SE Runtime Environment 5.0 Update 17
"{324CEC09-007A-48eb-90E0-9D42D4D5EB0A}" = NetDeviceManager
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{353FE16B-30FE-469A-BF55-B978F4218003}" = iTunes
"{36FDBE6E-6684-462B-AE98-9A39A1B200CC}" = HP Product Assistant
"{3700194C-C5DD-439A-BE06-A66960CA4C70}" = MSVCSetup
"{3912A629-0020-0005-3757-2FBA74D4DF0A}" = InterVideo WinDVD Player
"{3BA95526-6AE0-4B87-A62D-17187EF565FC}" = HP Boot Optimizer
"{416D80BA-6F6D-4672-B7CF-F54DA2F80B44}" = Microsoft Works
"{44B2E182-DD85-45FC-9F51-326B81D7C7F1}" = Fax
"{45FEE772-AAD2-4d52-BA21-63E484D75984}" = NetLibrary Media Center
"{4CCC7F68-A437-4559-A840-F5E010934951}" = HP Driver Diagnostics
"{543E938C-BDC4-4933-A612-01293996845F}" = UnloadSupport
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{612F4E20-3661-4D44-AD79-823F1B613FB3}" = HP Update
"{6421F085-1FAA-DE13-D02A-CFB412C522A4}" = Acrobat.com
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Sonic Express Labeler
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6C1E7AA1-44E9-446D-AAB2-0DE6D9EFEAB1}" = Safari
"{6E45BA47-383C-4C1E-8ED0-0D4845C293D7}" = Microsoft Plus! Digital Media Edition Installer
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{730837D4-FF5E-48DB-BA49-33E732DFF0B3}" = PanoStandAlone
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{779DECD7-E072-4B56-9B6B-BEB5973EEEB5}" = MobileMe Control Panel
"{824D3839-DAA1-4315-A822-7AE3E620E528}" = VideoToolkit01
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8389382B-53BA-4A87-8854-91E3D80A5AC7}" = HP Photosmart Essential2.01
"{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert
"{853A4763-6643-4604-8D64-28BDD8925F4C}" = Apple Application Support
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{8ED929E5-37D5-4E01-8052-4FF5E67F403D}" = OverDrive Media Console
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{907B4640-266B-4A21-92FB-CD1A86CD0F63}" = RollerCoaster Tycoon 3
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}" = InterVideo WinDVD Player
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A73ACE08-4CA7-4d08-912E-EFE4DF521B39}" = c7200_Help
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}" = HP Help and Support 4.0
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AB708C9B-97C8-4AC9-899B-DBF226AC9382}" = Sonic RecordNow Audio
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.2
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{AEA07F97-9088-497c-8821-0F36BD5DC251}" = HPProductAssistant
"{AEF68ACB-1B00-4FCA-A33C-C26DBADD8C5B}" = Microsoft Office Live Meeting 2007
"{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan
"{B1102A25-3AA3-446B-AA0F-A699B07A02FD}" = Garmin USB Drivers
"{B12665F4-4E93-4AB4-B7FC-37053B524629}" = Sonic RecordNow Copy
"{B3AEF776-7FFF-4C50-A402-9119E3849EE0}" = AVG 2011
"{B508B3F1-A24A-32C0-B310-85786919EF28}" = Microsoft .NET Framework 2.0 Service Pack 1
"{B7FB6B99-C93C-4818-825B-37EF4B64C80C}" = PS_AIO_02_Software
"{B8DBED1E-8BC3-4d08-B94A-F9D7D88E9BBF}" = HPSSupply
"{BABA6734-23CF-42AC-9E4C-EA2C7C80AA4E}" = AVG 2011
"{BCD6CD1A-0DBE-412E-9F25-3B500D1E6BA1}" = SolutionCenter
"{BEAD39CD-901D-4267-8B8B-EAA83CB4B70D}" = Pivot Stickfigure Animator
"{C2E4B5BD-32DB-4817-A060-341AB17C3F90}" = Bonjour
"{CACAEB5F-174D-4C7C-AC56-A33289A807CA}" = Apple Mobile Device Support
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CE4888DB-CE49-485b-AA3A-A9E0F361B277}" = C7200
"{D0122362-6333-4DE4-93F6-A5A2F3CC101A}" = Compaq Organize
"{D0E39A1D-0CEE-4D85-B4A2-E3BE990D075E}" = Destination Component
"{D25BDCF5-19F6-4d9e-B9C9-273FE81446C4}" = PS_AIO_02_ProductContext
"{D64BC2CF-0F12-47d7-B412-B4F3FD684253}" = HP Photosmart All-In-One Software 9.0
"{DA932D71-E52A-43D5-009E-395A1AEC1474}" = The Sims™ Life Stories
"{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}" = HpSdpAppCoreApp
"{DBCC73BA-C69A-4BF5-B4BF-F07501EE7039}" = AnswerWorks 5.0 English Runtime
"{E2662C24-B31E-4349-A084-32EB76E8B760}" = BufferChm
"{E6B87DC4-2B3D-4483-ADFF-E483BF718991}" = OpenOffice.org 3.1
"{E9C18EBD-85BE-47D0-AA73-3FEDCC976B04}" = Toolbox
"{ED2A3C11-3EA8-4380-B59C-F2C1832731B0}" = Quicken 2009
"{EF0D2E55-6FE2-4e35-BE22-A742E85D84E3}" = PS_AIO_02_Software_min
"{F619E2AF-677D-49bc-9618-D60BDFB925DB}" = C7200_doccd
"{F72E2DDC-3DB8-4190-A21D-63883D955FE7}" = PSSWCORE
"{FD8D8B04-BEAD-4A55-AA1D-62D2373E7DEA}" = Status
"045C89A0-CA37-443C-8826-F750227DE69C" = Shooting Stars Pool from Compaq (remove only)
"29FF6D07-4A15-41F1-9D5E-E0F3A58012C6" = Bounce Symphony from Compaq (remove only)
"45A7283175C62FAC673F913C1F532C5361F97841" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices (03/08/2007 2.2.1.0)
"657A0149-EEC7-4FB2-AB4F-CB7AA027748E" = Final Drive Nitro from Compaq (remove only)
"66195170-D19D-46C5-8FB7-8A4630071ADC" = Tradewinds from Compaq (remove only)
"8BA6F58B-7A91-461F-95F8-E34F8BD8AA4E" = Slyder from Compaq (remove only)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_PhotoShop_Album" = Remove Adobe Photoshop Album 2.0 Starter Edition installer
"Agere Systems Soft Modem" = Agere Systems PCI Soft Modem
"AVG" = AVG 2011
"BackWeb-6750491 Uninstaller" = Compaq Connections
"C43D84CD-EBFC-48D3-A330-7868C8AD415A" = Crystal Maze from Compaq (remove only)
"CCCDE323-C76D-44DA-BB5B-B8ABE767756E" = Phoenix Assault from Compaq (remove only)
"Cisco Connect" = Cisco Connect
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"conduitEngine" = Conduit Engine
"F05A08BF-E600-4FBD-A53A-3D47296B1275" = Lexibox Deluxe from Compaq (remove only)
"Help and Support Additions" = Help and Support Additions
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"HP Imaging Device Functions" = HP Imaging Device Functions 9.0
"HP Photosmart Essential" = HP Photosmart Essential 2.01
"HP Solution Center & Imaging Support Tools" = HP Solution Center 9.0
"HPExtendedCapabilities" = HP Customer Participation Program 9.0
"HPOCR" = HP OCR Software 9.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"Insaniquarium Deluxe 1.1" = Insaniquarium Deluxe 1.1
"LiveUpdate" = LiveUpdate 3.0 (Symantec Corporation)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.1.1800
"McAfee Security Scan" = McAfee Security Scan Plus
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Money" = Remove Microsoft Money 2005 installer
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PS2" = PS2
"Python 2.2.3" = Python 2.2.3
"pywin32-py2.2" = Python 2.2 pywin32 extensions (build 203)
"Quicken_NUE" = Remove Quicken New User Edition installer
"RealPlayer 6.0" = RealPlayer
"Rhapsody" = Rhapsody
"Shop for HP Supplies" = Shop for HP Supplies
"SiS VGA Driver" = SiS VGA Utilities
"SmartMusic 2011" = SmartMusic 2011
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Software Update" = Yahoo! Software Update
"Zoo Tycoon 2" = Zoo Tycoon 2

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1516730583-2979589852-1062222659-1009\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Yahoo! BrowserPlus" = Yahoo! BrowserPlus 2.9.8

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 8/15/2011 12:30:03 AM | Computer Name = MELISSA | Source = MsiInstaller | ID = 1023
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update 'Dr.
Watson' could not be installed. Error code 1603. Additional information is available
in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup4123.txt.

Error - 8/15/2011 12:30:03 AM | Computer Name = MELISSA | Source = MsiInstaller | ID = 1023
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update '.NET
Framework 1' could not be installed. Error code 1603. Additional information is
available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup4123.txt.

Error - 8/15/2011 12:30:03 AM | Computer Name = MELISSA | Source = MsiInstaller | ID = 1023
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update '.NET
Framework 2' could not be installed. Error code 1603. Additional information is
available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup4123.txt.

Error - 8/15/2011 12:30:03 AM | Computer Name = MELISSA | Source = MsiInstaller | ID = 1023
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update '.NET
Framework ASP .NET' could not be installed. Error code 1603. Additional information
is available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup4123.txt.

Error - 8/15/2011 12:30:03 AM | Computer Name = MELISSA | Source = MsiInstaller | ID = 1023
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update '.NET
Framework WinForms' could not be installed. Error code 1603. Additional information
is available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup4123.txt.

Error - 8/15/2011 1:04:29 AM | Computer Name = MELISSA | Source = LiveUpdate | ID = 2752568
Description = 6002: LiveUpdate failed because the LiveUpdate package could not be
uncompressed. Make sure your disk is not full and run LiveUpdate again.

Error - 8/15/2011 4:34:52 AM | Computer Name = MELISSA | Source = LiveUpdate | ID = 2752568
Description = 6002: LiveUpdate failed because the LiveUpdate package could not be
uncompressed. Make sure your disk is not full and run LiveUpdate again.

Error - 8/15/2011 8:38:51 AM | Computer Name = MELISSA | Source = LiveUpdate | ID = 2752568
Description = 6002: LiveUpdate failed because the LiveUpdate package could not be
uncompressed. Make sure your disk is not full and run LiveUpdate again.

Error - 8/15/2011 12:20:37 PM | Computer Name = MELISSA | Source = LiveUpdate | ID = 2752568
Description = 6002: LiveUpdate failed because the LiveUpdate package could not be
uncompressed. Make sure your disk is not full and run LiveUpdate again.

Error - 8/15/2011 1:53:49 PM | Computer Name = MELISSA | Source = LiveUpdate | ID = 2752568
Description = 6002: LiveUpdate failed because the LiveUpdate package could not be
uncompressed. Make sure your disk is not full and run LiveUpdate again.

[ OSession Events ]
Error - 3/13/2010 12:41:00 PM | Computer Name = MELISSA | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 63532
seconds with 2520 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 8/14/2011 8:56:35 PM | Computer Name = MELISSA | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
AmdK8 Avgldx86 Avgmfx86 Fips SASDIFSV SASKUTIL

Error - 8/14/2011 11:39:01 PM | Computer Name = MELISSA | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service EventSystem
with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 8/14/2011 11:40:02 PM | Computer Name = MELISSA | Source = Service Control Manager | ID = 7000
Description = The MCSTRM service failed to start due to the following error: %%2

Error - 8/14/2011 11:41:27 PM | Computer Name = MELISSA | Source = Service Control Manager | ID = 7022
Description = The HP CUE DeviceDiscovery Service service hung on starting.

Error - 8/15/2011 12:31:01 AM | Computer Name = MELISSA | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework
3.5 Family Update for .NET versions 2.0 through 3.5 (KB951847) x86.

Error - 8/15/2011 12:54:36 AM | Computer Name = MELISSA | Source = Service Control Manager | ID = 7000
Description = The MCSTRM service failed to start due to the following error: %%2

Error - 8/15/2011 12:55:59 AM | Computer Name = MELISSA | Source = Service Control Manager | ID = 7022
Description = The HP CUE DeviceDiscovery Service service hung on starting.

Error - 8/15/2011 1:48:55 PM | Computer Name = MELISSA | Source = Service Control Manager | ID = 7000
Description = The MCSTRM service failed to start due to the following error: %%2

Error - 8/15/2011 1:50:19 PM | Computer Name = MELISSA | Source = Service Control Manager | ID = 7022
Description = The HP CUE DeviceDiscovery Service service hung on starting.

Error - 8/15/2011 1:50:19 PM | Computer Name = MELISSA | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
fasttx2k

< End of report >

#9 melissamc212

Member

Group: Members
Posts: 20
Joined: 11-September 09

Posted 15 August 2011 - 02:49 PM

attachment

Attached File(s)

Extras.Txt (51.24K)
Number of downloads: 2

#10 Farbar

Just Curious

Group: Malware Response Instructor
Posts: 17,817
Joined: 08-December 07
Gender:Male
Location:The Netherlands

Posted 15 August 2011 - 03:29 PM

The MBR is legit.

I would like to make a full checkup for any leftover.

Please open OTL.

Copy the text in code box and paste it to Custom Scans/Fixes section:

:otl
O33 - MountPoints2\##192.168.1.138#memory_card\Shell - "" = AutoRun
O33 - MountPoints2\##192.168.1.138#memory_card\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\##192.168.1.138#memory_card\Shell\AutoRun\command - "" = Z:\setupSNK.exe
O33 - MountPoints2\{4bc0476b-f5b7-11de-91e8-0013d4130ad2}\Shell\AutoRun\command - "" = F:\setupSNK.exe
O3 - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009\..\Toolbar\WebBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009\..\Toolbar\WebBrowser: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found.
O4 - HKU\S-1-5-21-1516730583-2979589852-1062222659-1009..\Run: [Weather] File not found
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/2.9.2.0/GarminAxControl.CAB (Reg Error: Key error.)
O32 - AutoRun File - [2004/04/30 23:01:14 | 000,000,053 | -HS- | M] () - D:\Autorun.inf -- [ FAT32 ]

Click Run Fix button.
If the fix needed a reboot please do it.
After finished a log will open. Copy and paste the log to your reply.

Important Note: Your version of Java is out of date. Older versions have vulnerabilities that malicious sites can use to exploit and infect your system.
- Download the latest version of Java Runtime Environment (JRE) Version 6 and save it to your desktop.
- Look for "SE 6 Update 26 (JDK or JRE)".
- Click the "Download JRE" button to the right.
- Select your Platform: "Windows".
- Select your Language: "Multi-language".
- Read the License Agreement, and then check the box that says: "I agree to the Java SE...License Agreement".
- Click Continue and the page will refresh.
- Under Required Files, check the box for Windows Offline Installation, click the link below it and save the file to your desktop.
- Close any programs you may have running - especially your web browser.
Go to > Control Panel, double-click on Add/Remove Programs or Programs and Features in Vista/Windows 7 and remove all older versions of Java.
- Check (highlight) any item with Java Runtime Environment (JRE or J2SE) in the name.
- Click the Remove or Change/Remove button and follow the onscreen instructions for the Java uninstaller.
- Repeat as many times as necessary to remove each Java versions.
- Reboot your computer once all Java components are removed.
- Then from your desktop double-click on jre-6u26-windows-i586.exe to install the newest version.
- If using Windows 7 or Vista and the installer refuses to launch due to insufficient user permissions, then Run As Administrator.
- When the Java Setup - Welcome window opens, click the Install > button.
- If offered to install a Toolbar, just uncheck the box before continuing unless you want it.
-- Starting with Java 6u10, the uninstaller incorporated in each new release uses Enhanced Auto update to automatically remove the previous version when updating to a later update release. It will not remove older versions, so they will need to be removed manually.
-- Java is updated frequently. If you want to be automatically notified of future updates, just turn on the Java Automatic Update feature and you will not have to remember to update when Java releases a new version.

Note: The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications but it's not necessary.
To disable the JQS service if you don't want to use it:
- Go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter.
- Click Ok and reboot your computer.
ESET Online Scanner:

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

Vista users: You will need to to right-click on the either the IE or FF icon in the Start Menu or Quick Launch Bar on the Taskbar and select Run as Administrator from the context menu.
- Please go here then click on:
  
  Quote
  Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
  All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
- Select the option YES, I accept the Terms of Use then click on:
- When prompted allow the Add-On/Active X to install.
- Make sure that the option Remove found threats and the option Scan archives are checked.
- Now click on Advanced Settings and select the following:
- Enable Anti-Stealth Technology
- Now click on:
- The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
- When completed the Online Scan will begin automatically.
- Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
- When completed select Uninstall application on close if you so wish, make sure you copy the logfile first!
- Now click on:
- Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
- Copy and paste that log as a reply to this topic.
Note: Do not forget to re-enable your Anti-Virus application after running the above scan!

#11 melissamc212

Member

Group: Members
Posts: 20
Joined: 11-September 09

Posted 15 August 2011 - 09:25 PM

========== OTL ==========
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\##192.168.1.138#memory_card\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\##192.168.1.138#memory_card\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\##192.168.1.138#memory_card\ not found.
File Z:\setupSNK.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4bc0476b-f5b7-11de-91e8-0013d4130ad2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4bc0476b-f5b7-11de-91e8-0013d4130ad2}\ not found.
File F:\setupSNK.exe not found.
Registry value HKEY_USERS\S-1-5-21-1516730583-2979589852-1062222659-1009\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}\ not found.
Registry value HKEY_USERS\S-1-5-21-1516730583-2979589852-1062222659-1009\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{472734EA-242A-422B-ADF8-83D1E48CC825} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{472734EA-242A-422B-ADF8-83D1E48CC825}\ not found.
Registry value HKEY_USERS\S-1-5-21-1516730583-2979589852-1062222659-1009\Software\Microsoft\Windows\CurrentVersion\Run\\Weather deleted successfully.
Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
C:\WINDOWS\Downloaded Program Files\gp.inf not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Starting removal of ActiveX control Garmin Communicator Plug-In
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Garmin Communicator Plug-In\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Garmin Communicator Plug-In\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found.
D:\Autorun.inf moved successfully.

OTL by OldTimer - Version 3.2.26.4 log created on 08152011_153202

----

C:\Documents and Settings\All Users\Application Data\c6fb992\5437.mof Win32/RogueAV.A trojan cleaned by deleting - quarantined
C:\Documents and Settings\Compaq_Owner\Application Data\Sun\Java\Deployment\cache\6.0\1\238be681-290ae95a multiple threats deleted - quarantined
C:\Documents and Settings\Compaq_Owner\Application Data\Sun\Java\Deployment\cache\6.0\1\4a40e101-505987d8 multiple threats deleted - quarantined
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\jar_cache2816442235341977971.tmp probably a variant of Java/TrojanDownloader.OpenStream.NBU trojan deleted - quarantined
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\jar_cache5511110104887740958.tmp a variant of Java/Exploit.CVE-2010-0842.L trojan deleted - quarantined
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\$inst\temp_0.tmp a variant of Win32/Kryptik.NEI trojan deleted - quarantined
D:\I386\Apps\APP07603\src\SpyInstall_HPPre.exe probably a variant of Win32/Agent.HVEUCPZ trojan deleted - quarantined
D:\System Volume Information\_restore{2466A83D-1B81-456E-9766-38C2B7E48210}\RP734\A0136392.exe probably a variant of Win32/Agent.HVEUCPZ trojan deleted - quarantined

#12 Farbar

Just Curious

Group: Malware Response Instructor
Posts: 17,817
Joined: 08-December 07
Gender:Male
Location:The Netherlands

Posted 16 August 2011 - 05:05 AM

Well done. :thumbup2:

How is the system running? Are you able to use your Internet browser without getting redirected? Are you noticing any issues?

#13 Farbar

Just Curious

Group: Malware Response Instructor
Posts: 17,817
Joined: 08-December 07
Gender:Male
Location:The Netherlands

Posted 19 August 2011 - 07:59 PM

Are you still there?

#14 melissamc212

Member

Group: Members
Posts: 20
Joined: 11-September 09

Posted 22 August 2011 - 07:28 AM

Sorry. My last post on 16Aug11 must not have saved. I am not noticing any issues. It is running well. I am not getting redirected. Is it now safe to download my pictures to a flashdrive? Or would I be transferring a problem?

#15 Farbar

Just Curious

Group: Malware Response Instructor
Posts: 17,817
Joined: 08-December 07
Gender:Male
Location:The Netherlands

Posted 22 August 2011 - 10:44 AM

You may disregard the initial bad news post of hamluis about Virut infection as it was a false alarm and he referred you to us to judge it.

The system looks clean and you are good to go. :thumbup2:

Please run OTL.
- Click Clean Up button.
- Accept any prompts.
- This will remove any tools we used, including OTL, and will require a reboot.
You may delete any tool or log we used from your computer.
First Set a New Restore Point then Remove the Old Restore Points to prevent possible reinfection from an old one. Some of the malware you picked up could have been saved in System Restore. Since System Restore is a protected directory, your tools can not access it to delete these bad files which sometimes can reinfect your system. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

To set a new restore point:
- Go to Start > Programs > Accessories > System Tools and click "System Restore".
- Choose the radio button marked "Create a Restore Point" on the first screen then click "Next".
- Give the Restore Point a name then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
To remove the old restore points:
- Go to Start > Run then type: Cleanmgr in the box and click "OK".
- You get a window to select the drive to clean, the default is already set to (C:) drive. Click OK.
- Click the "More Options" Tab.
- Click "Clean Up" in the System Restore section to remove all previous restore points except the newly created one.
- Click OK and Yes.
Recommendations:
- I recommend using Site Advisor for safe surfing. It is a free extension both for Internet Explorer and Firefox. When you search a site it gives you an indication of how safe a site is.
- I recommend installing this small application for safe surfing: Javacools© SpywareBlaster
  SpywareBlaster will add a large list of programs and sites into your Internet Explorer and Firefox settings and that will protect you from running and downloading known malicious programs.[list]
- Download and install it.
- Update it manually by clicking on Updates in the left pane and then Check for Updates.
- Then enable all the protections by clicking on Protection Status on the left pane. Then click on Enable All Protection.
- The free version doesn't have an automatic update. Update it once in two or three weeks and enable all protection again.