BleepingComputer.com: slow internet connection after rootkit.zeroaccess removal

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.


If you have not received help after three days, please post a link to your topic HERE.
  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

slow internet connection after rootkit.zeroaccess removal

#16 User is offline   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,388
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 21 December 2011 - 12:21 PM

Lets go ahead and try an online scan provided free of charge by ESET Online Scanner and then post the resulting log.

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

#17 User is offline   sgivens 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 16
  • Joined: 16-December 11

Posted 21 December 2011 - 04:44 PM

I got the warning to accept the ActiveX app, but after that, nothing ever loads in the web page.

#18 User is offline   sgivens 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 16
  • Joined: 16-December 11

Posted 21 December 2011 - 07:14 PM

Any more ideas or Hail Mary's? Just trying to think of ideas here...I have a working desktop that I could install this system's drive into (as a "slave" drive) and run the scan from there, but only if there is no chance of it infecting my working desktop. Didn't know if this would invalidate the scan if it's not running an OS from it though.

Also...I've spent almost a week on this; not really the way I want to spend my xmas vacation. I could do a WinXP refresh. I didn't think the owner had the original system drivers, but it turns out he does (this was originally keeping me from considering a refresh).

I think I have a clean, old PATA drive that I'll donate to the cause, but if I can't find it, is there any chance any virus/malware/rootkit etc can survive a full format and OS refresh on the original drive?

#19 User is offline   sgivens 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 16
  • Joined: 16-December 11

Posted 23 December 2011 - 01:11 AM

The owner has business related files on this PC (I had a talk with him about running his business with outdated hardware/software, he agreed to buy a new system in the next couple weeks), so I have to move along with with refresh option.

I installed the system drive as a "slave" drive into a clean system, then ran full, updated scans with MSE, MBAM, SAS and ESET. The first two came up clean, the last two found issues; logs are below. I couldn't run GMER on it from the clean system, as it's a 64 bit Win7 system.

I'll install the drive back into it's original system and see if the network issue has been resolved or not. Either way, I'll post the results. After that I'm going to refresh the system.

Thank you so much for your patience and assistance, your valuable time is greatly appreciated, especially around the holidays. From the looks of the forum, this problem looks to be very common. Kind of ironic that the internet can both host such vile malware, but also the good natured folks to help eradicate it.

Cheers!

SAS:

(G:\ is the infected drive, somehow SAS still scanned C:\ even though I told it not to)

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 12/22/2011 at 09:26 PM

Application Version : 5.0.1142

Core Rules Database Version : 8085
Trace Rules Database Version: 5897

Scan type : Complete Scan
Total Scan Time : 00:31:29

Operating System Information
Windows 7 Professional 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned : 716
Memory threats detected : 0
Registry items scanned : 71411
Registry threats detected : 0
File items scanned : 61184
File threats detected : 345

Adware.Tracking Cookie
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\3LIY5J9D.txt [ /ads.pointroll.com ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\23WZMBQU.txt [ /doubleclick.net ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\NC0HG0RP.txt [ /andomedia.com ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\L8K4DN52.txt [ /collective-media.net ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\AXXPAEO4.txt [ /pointroll.com ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\8LC6QSTU.txt [ /ad.yieldmanager.com ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\ASW52KLJ.txt [ /apmebf.com ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\WE0V1R8T.txt [ /ru4.com ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\F2HYTKP2.txt [ /adxpose.com ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\DZC3Q4XJ.txt [ /atdmt.com ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\ZV9ZHMP0.txt [ /realmedia.com ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\GFSDU29W.txt [ /ads.livenation.com ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\98GYG43T.txt [ /e-shop.vermontcountrystore.com ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\WFZI7CUT.txt [ /network.realmedia.com ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\EFOEWB7A.txt [ /imrworldwide.com ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\LRHW526O.txt [ /mediaplex.com ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\B4QZ7OKH.txt [ /revsci.net ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\XGTYDEE6.txt [ /c.atdmt.com ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\R3QVRT9C.txt [ /invitemedia.com ]
C:\Users\Scott\AppData\Roaming\Microsoft\Windows\Cookies\HZ7OAGL3.txt [ /specificclick.net ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\B3F9N8K3.txt [ Cookie:guest@www.googleadservices.com/pagead/conversion/1067096761/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\MF78GX8J.txt [ Cookie:guest@revsci.net/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\HDZ2LMHD.txt [ Cookie:guest@doubleclick.net/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\WU18BESF.txt [ Cookie:guest@media6degrees.com/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\NG3L1DTP.txt [ Cookie:guest@imrworldwide.com/cgi-bin ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\HO526LWR.txt [ Cookie:guest@invitemedia.com/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\X72HW8VE.txt [ Cookie:guest@www.googleadservices.com/pagead/conversion/1007698380/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\F8RRV33B.txt [ Cookie:guest@lucidmedia.com/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\9E5DUUZF.txt [ Cookie:guest@2o7.net/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\OA49ZLKV.txt [ Cookie:guest@marketlive.122.2o7.net/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\TVTR1843.txt [ Cookie:guest@content.yieldmanager.com/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\FZ96WCI9.txt [ Cookie:guest@pro-market.net/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\GA7VUHDH.txt [ Cookie:guest@mediaplex.com/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\KNGW3OX4.txt [ Cookie:guest@tribalfusion.com/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\014TG2A4.txt [ Cookie:guest@liveperson.net/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\8PXVKYH7.txt [ Cookie:guest@questionmarket.com/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\T16229W2.txt [ Cookie:guest@ru4.com/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\6QYZN1Y0.txt [ Cookie:guest@pointroll.com/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\2X43TGRY.txt [ Cookie:guest@collective-media.net/ ]
C:\USERS\GUEST\AppData\Roaming\Microsoft\Windows\Cookies\Low\CM8H7KHE.txt [ Cookie:guest@advertising.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\FXOZYQU5.txt [ Cookie:scott@insightexpressai.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\GGVQC3A4.txt [ Cookie:scott@accountonline.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\AWIC6Z8P.txt [ Cookie:scott@ads.pointroll.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\JDSZCCGD.txt [ Cookie:scott@timeinc.122.2o7.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\J0VTEZD1.txt [ Cookie:scott@harborfreight.122.2o7.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\8VJFYHH1.txt [ Cookie:scott@kontera.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\CPWVUTSB.txt [ Cookie:scott@microsoftwlcashback.112.2o7.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\GJN4728Z.txt [ Cookie:scott@collective-media.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\037CVG46.txt [ Cookie:scott@ad.yieldmanager.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\YVTGAVPR.txt [ Cookie:scott@pointroll.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\HJYJJOGN.txt [ Cookie:scott@yieldmanager.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\Q7XT9RN6.txt [ Cookie:scott@amazonmerchants.122.2o7.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\E74PRE10.txt [ Cookie:scott@apmebf.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\L6B3YK2B.txt [ Cookie:scott@microsoftsto.112.2o7.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\68N634YN.txt [ Cookie:scott@ru4.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\17V456SD.txt [ Cookie:scott@akamai.interclickproxy.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\L95S1K7U.txt [ Cookie:scott@sales.liveperson.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\IAGNZFQC.txt [ Cookie:scott@tacoda.at.atwola.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\VDR63DQ3.txt [ Cookie:scott@legolas-media.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\AK27BN7V.txt [ Cookie:scott@lfstmedia.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\I1SWCWC2.txt [ Cookie:scott@adxpose.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\DSJL2P7S.txt [ Cookie:scott@realmedia.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\PSGCF70E.txt [ Cookie:scott@xiti.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\6B1CTAZO.txt [ Cookie:scott@casalemedia.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\CN0KY2UI.txt [ Cookie:scott@at.atwola.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\GQRS7KYP.txt [ Cookie:scott@steelhousemedia.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\R60J3J8J.txt [ Cookie:scott@snapfish.112.2o7.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\8FZV1XSQ.txt [ Cookie:scott@interclick.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\EZKGO9M6.txt [ Cookie:scott@r1-ads.ace.advertising.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\3N32NU9W.txt [ Cookie:scott@us.sitestat.com/future/maximum-pc/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\1S4S7HBU.txt [ Cookie:scott@adinterax.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\FKYLT70D.txt [ Cookie:scott@tribalfusion.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\Z3CG6HQL.txt [ Cookie:scott@server.iad.liveperson.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\YOS7ZT22.txt [ Cookie:scott@2o7.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\0GG4Y9C6.txt [ Cookie:scott@service.liveperson.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\0AFX7VA1.txt [ Cookie:scott@serving-sys.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\NY1Q58BE.txt [ Cookie:scott@fastclick.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\699RERA8.txt [ Cookie:scott@amazon-adsystem.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\KUMQZFPH.txt [ Cookie:scott@dmtracker.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\C8GIKUOZ.txt [ Cookie:scott@media6degrees.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\1M1RFRDG.txt [ Cookie:scott@amazonlocal.122.2o7.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\22Y70VSQ.txt [ Cookie:scott@statse.webtrendslive.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\72E1QGSG.txt [ Cookie:scott@optimost.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\DAXCZG8C.txt [ Cookie:scott@us.sitestat.com/future/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\O0L83883.txt [ Cookie:scott@e-shop.vermontcountrystore.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\8LNOLVIU.txt [ Cookie:scott@adserver.adtechus.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\ZELP0TUX.txt [ Cookie:scott@liveperson.net/hc/88287119 ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\VANTMEI6.txt [ Cookie:scott@pro-market.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\Q4QTBL9O.txt [ Cookie:scott@a1.interclick.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\HJPTN8RK.txt [ Cookie:scott@www.burstnet.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\M3YL092X.txt [ Cookie:scott@network.realmedia.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\FY1811H1.txt [ Cookie:scott@247realmedia.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\JXXZL6W8.txt [ Cookie:scott@imrworldwide.com/cgi-bin ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\S6QC7IY1.txt [ Cookie:scott@trafficmp.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\LLXMNXPH.txt [ Cookie:scott@dealtime.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\APLI28KN.txt [ Cookie:scott@advertising.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\1ULAYLLD.txt [ Cookie:scott@ad.yieldmanager.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\W9WDOFJ5.txt [ Cookie:scott@zedo.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\8FYSG4U9.txt [ Cookie:scott@revsci.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\IS6D7LJY.txt [ Cookie:scott@c.atdmt.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\40TRIMAS.txt [ Cookie:scott@invitemedia.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\5RURBJYS.txt [ Cookie:scott@stat.dealtime.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\5PN497QG.txt [ Cookie:scott@specificclick.net/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\V7UQRRJM.txt [ Cookie:scott@adlegend.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\79NI1OSE.txt [ Cookie:scott@in.getclicky.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\8KJNLJY1.txt [ Cookie:scott@www.googleadservices.com/pagead/conversion/986691772/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\616ALT1Y.txt [ Cookie:scott@hitbox.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\ZGCYWA0L.txt [ Cookie:scott@bs.serving-sys.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\278UYZ1C.txt [ Cookie:scott@lucidmedia.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\MALONDHT.txt [ Cookie:scott@c1.atdmt.com/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\Q84ZJ40K.txt [ Cookie:scott@verizon.com/vztracker/ ]
C:\USERS\SCOTT\AppData\Roaming\Microsoft\Windows\Cookies\Low\4ZZ0EWVP.txt [ Cookie:scott@eyewonder.com/ ]
C:\USERS\SCOTT\Cookies\3LIY5J9D.txt [ Cookie:scott@ads.pointroll.com/ ]
C:\USERS\SCOTT\Cookies\NC0HG0RP.txt [ Cookie:scott@andomedia.com/ ]
C:\USERS\SCOTT\Cookies\L8K4DN52.txt [ Cookie:scott@collective-media.net/ ]
C:\USERS\SCOTT\Cookies\AXXPAEO4.txt [ Cookie:scott@pointroll.com/ ]
C:\USERS\SCOTT\Cookies\8LC6QSTU.txt [ Cookie:scott@ad.yieldmanager.com/ ]
C:\USERS\SCOTT\Cookies\ASW52KLJ.txt [ Cookie:scott@apmebf.com/ ]
C:\USERS\SCOTT\Cookies\WE0V1R8T.txt [ Cookie:scott@ru4.com/ ]
C:\USERS\SCOTT\Cookies\F2HYTKP2.txt [ Cookie:scott@adxpose.com/ ]
C:\USERS\SCOTT\Cookies\ZV9ZHMP0.txt [ Cookie:scott@realmedia.com/ ]
C:\USERS\SCOTT\Cookies\98GYG43T.txt [ Cookie:scott@e-shop.vermontcountrystore.com/ ]
C:\USERS\SCOTT\Cookies\WFZI7CUT.txt [ Cookie:scott@network.realmedia.com/ ]
C:\USERS\SCOTT\Cookies\EFOEWB7A.txt [ Cookie:scott@imrworldwide.com/cgi-bin ]
C:\USERS\SCOTT\Cookies\B4QZ7OKH.txt [ Cookie:scott@revsci.net/ ]
C:\USERS\SCOTT\Cookies\XGTYDEE6.txt [ Cookie:scott@c.atdmt.com/ ]
C:\USERS\SCOTT\Cookies\R3QVRT9C.txt [ Cookie:scott@invitemedia.com/ ]
C:\USERS\SCOTT\Cookies\HZ7OAGL3.txt [ Cookie:scott@specificclick.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\14BGRKFF.txt [ Cookie:senta@2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\8EZUT8MN.txt [ Cookie:senta@media.mercola.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\NX8LMAVX.txt [ Cookie:senta@realmedia.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\DDD67FLM.txt [ Cookie:senta@elitecarseats.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\4JF5UULD.txt [ Cookie:senta@trafficmp.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\G0RGE360.txt [ Cookie:senta@ad.yieldmanager.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\senta@apmebf[1].txt [ Cookie:senta@apmebf.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\senta@mediaplex[2].txt [ Cookie:senta@mediaplex.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\R3J1VN5Y.txt [ Cookie:senta@adbrite.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\senta@doubleclick[2].txt [ Cookie:senta@doubleclick.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@liveperson[7].txt [ Cookie:senta@liveperson.net/hc/30525497 ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@walmart.112.2o7[1].txt [ Cookie:senta@walmart.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\WFUN3V6W.txt [ Cookie:senta@network.realmedia.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@revenue[2].txt [ Cookie:senta@revenue.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@www.backcountry[2].txt [ Cookie:senta@www.backcountry.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@data.coremetrics[1].txt [ Cookie:senta@data.coremetrics.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\Q8RYAY3U.txt [ Cookie:senta@statcounter.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\UN8HX8UH.txt [ Cookie:senta@at.atwola.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\9XB1B3QN.txt [ Cookie:senta@a1.interclick.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@paypal.112.2o7[1].txt [ Cookie:senta@paypal.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\JLTTM6NH.txt [ Cookie:senta@realmedia.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\3K5B36HB.txt [ Cookie:senta@gs.serving-sys.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@bonniercorp.122.2o7[1].txt [ Cookie:senta@bonniercorp.122.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\B0FQ5J71.txt [ Cookie:senta@media.adfrontiers.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@liveperson[1].txt [ Cookie:senta@liveperson.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@roiservice[2].txt [ Cookie:senta@roiservice.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@backcountry[1].txt [ Cookie:senta@backcountry.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@andomedia[1].txt [ Cookie:senta@andomedia.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\R6YGNXF0.txt [ Cookie:senta@247realmedia.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\XCET5O9W.txt [ Cookie:senta@lucidmedia.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@coxhsi.112.2o7[1].txt [ Cookie:senta@coxhsi.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\8A4S5DIC.txt [ Cookie:senta@trafficmp.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@e-2dj6wjmykhczihq.stats.esomniture[2].txt [ Cookie:senta@e-2dj6wjmykhczihq.stats.esomniture.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@fr.sitestat[3].txt [ Cookie:senta@fr.sitestat.com/kiabi/kiabi/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@imrworldwide[2].txt [ Cookie:senta@imrworldwide.com/cgi-bin ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\LI17TGOI.txt [ Cookie:senta@collective-media.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\6T8LSDHP.txt [ Cookie:senta@serving-sys.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@dominionenterprises.112.2o7[1].txt [ Cookie:senta@dominionenterprises.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\EDWQZDMQ.txt [ Cookie:senta@ad.yieldmanager.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@adxpose[1].txt [ Cookie:senta@adxpose.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\ME4JL4IL.txt [ Cookie:senta@tribalfusion.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\4GFHDM1W.txt [ Cookie:senta@target.db.advertising.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@apmebf[2].txt [ Cookie:senta@apmebf.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\2NAMCWFU.txt [ Cookie:senta@media6degrees.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@specificmedia[2].txt [ Cookie:senta@specificmedia.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\BUM29B2W.txt [ Cookie:senta@mediaplex.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\IH9MBC6E.txt [ Cookie:senta@legolas-media.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\ZYFW1JOF.txt [ Cookie:senta@ru4.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@evite.112.2o7[1].txt [ Cookie:senta@evite.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\H7ZYX9L8.txt [ Cookie:senta@www.burstnet.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\Y661UG51.txt [ Cookie:senta@adbrite.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@liveperson[3].txt [ Cookie:senta@liveperson.net/hc/56294818 ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@fr.sitestat[2].txt [ Cookie:senta@fr.sitestat.com/okaidi/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\UL68V14A.txt [ Cookie:senta@yieldmanager.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\TEJ1ZFVK.txt [ Cookie:senta@advertising.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@marketlive.122.2o7[1].txt [ Cookie:senta@marketlive.122.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\QNZPZ06Q.txt [ Cookie:senta@stats.paypal.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\86A28NQW.txt [ Cookie:senta@mediaforge.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\GRU40IY4.txt [ Cookie:senta@doubleclick.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\2IY6UD8J.txt [ Cookie:senta@tacoda.at.atwola.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@fr.sitestat[4].txt [ Cookie:senta@fr.sitestat.com/kiabi/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\X6HLLYND.txt [ Cookie:senta@adserver.adtechus.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\G8XOCHXH.txt [ Cookie:senta@zedo.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\QHK4YRDL.txt [ Cookie:senta@traveladvertising.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\PDI1JQNC.txt [ Cookie:senta@statse.webtrendslive.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@liveperson[2].txt [ Cookie:senta@liveperson.net/hc/35686923 ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\ER83U1FT.txt [ Cookie:senta@2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\K9D7ERMH.txt [ Cookie:senta@media.mercola.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@jcwhitney.112.2o7[1].txt [ Cookie:senta@jcwhitney.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@traffic.buyservices[1].txt [ Cookie:senta@traffic.buyservices.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@pubads.g.doubleclick.media-centrix[2].txt [ Cookie:senta@pubads.g.doubleclick.media-centrix.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@harborfreight.122.2o7[1].txt [ Cookie:senta@harborfreight.122.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@ewstv.112.2o7[1].txt [ Cookie:senta@ewstv.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\LXL53UW4.txt [ Cookie:senta@mm.chitika.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\NN4SB8ZD.txt [ Cookie:senta@casalemedia.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@dc.tremormedia[2].txt [ Cookie:senta@dc.tremormedia.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@counter.hitslink[1].txt [ Cookie:senta@counter.hitslink.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@microsoftinternetexplorer.112.2o7[1].txt [ Cookie:senta@microsoftinternetexplorer.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\OIYVU0SF.txt [ Cookie:senta@adsonar.com/adserving ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\EM69Y85K.txt [ Cookie:senta@kontera.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\RGSCYSR3.txt [ Cookie:senta@bookit.advertserve.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@thomasvillefurniture.122.2o7[1].txt [ Cookie:senta@thomasvillefurniture.122.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@liveperson[6].txt [ Cookie:senta@liveperson.net/hc/5255712 ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@timeinc.122.2o7[1].txt [ Cookie:senta@timeinc.122.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@fr.sitestat[1].txt [ Cookie:senta@fr.sitestat.com/okaidi/okaidi/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@weil.rotator.hadj1.adjuggler[2].txt [ Cookie:senta@weil.rotator.hadj1.adjuggler.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\CKPR6YZS.txt [ Cookie:senta@stat.dealtime.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\C7MZXVDX.txt [ Cookie:senta@pro-market.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\01WX4U3J.txt [ Cookie:senta@ad.yieldmanager.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@pluckit.demandmedia[1].txt [ Cookie:senta@pluckit.demandmedia.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\8VPJZLQT.txt [ Cookie:senta@r1-ads.ace.advertising.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\LFLX3NYR.txt [ Cookie:senta@bs.serving-sys.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@graco.112.2o7[1].txt [ Cookie:senta@graco.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@www.google[1].txt [ Cookie:senta@www.google.com/accounts ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@w3counter[1].txt [ Cookie:senta@w3counter.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\QSOBM2LP.txt [ Cookie:senta@liveperson.net/hc/37457093 ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\LN3BQUYY.txt [ Cookie:senta@testdata.coremetrics.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@dmtracker[1].txt [ Cookie:senta@dmtracker.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@in.getclicky[1].txt [ Cookie:senta@in.getclicky.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@buildabear.122.2o7[1].txt [ Cookie:senta@buildabear.122.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\ZLEFIYHU.txt [ Cookie:senta@steelhousemedia.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\Y8D3VB89.txt [ Cookie:senta@beacon.dmsinsights.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@hitbox[2].txt [ Cookie:senta@hitbox.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@traffic.ourhubbub[1].txt [ Cookie:senta@traffic.ourhubbub.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\L5211FXO.txt [ Cookie:senta@flagandbanner.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\YVBIHWCQ.txt [ Cookie:senta@www.elitecarseats.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\9J4U0RAR.txt [ Cookie:senta@gsimedia.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\WFKM51SM.txt [ Cookie:senta@web-stat.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\MURBZ96Z.txt [ Cookie:senta@elitecarseats.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\JEXLMW3C.txt [ Cookie:senta@clickfuse.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\HH5S1T5W.txt [ Cookie:senta@greatschools.122.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@buycom.122.2o7[1].txt [ Cookie:senta@buycom.122.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\YVZL01SI.txt [ Cookie:senta@burstnet.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@nasdaq.122.2o7[1].txt [ Cookie:senta@nasdaq.122.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@homestore.122.2o7[1].txt [ Cookie:senta@homestore.122.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\RWEO1Y50.txt [ Cookie:senta@liveperson.net/hc/36005843 ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@web4.realtracker[1].txt [ Cookie:senta@web4.realtracker.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\Z7TZSRT9.txt [ Cookie:senta@insightexpressai.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@adlegend[3].txt [ Cookie:senta@adlegend.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@adtech[1].txt [ Cookie:senta@adtech.de/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\9M04JZWL.txt [ Cookie:senta@googleads.g.doubleclick.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\FYJVYLC0.txt [ Cookie:senta@reservationcounter.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\9YCSV37U.txt [ Cookie:senta@ghmedia.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@snapfish.112.2o7[2].txt [ Cookie:senta@snapfish.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\LZZM36FU.txt [ Cookie:senta@www.burstbeacon.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\QM03B9LC.txt [ Cookie:senta@carlson.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\F4M48F5Q.txt [ Cookie:senta@optimize.indieclick.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\0DG16JK9.txt [ Cookie:senta@www7.addfreestats.com/cgi-bin ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@stats.shimanoweb[2].txt [ Cookie:senta@stats.shimanoweb.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\8UEX1QR9.txt [ Cookie:senta@tripod.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@www.3dstats[1].txt [ Cookie:senta@www.3dstats.com/cgi-bin ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\YZKNA9KJ.txt [ Cookie:senta@www.googleadservices.com/pagead/conversion/1037220795/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@philips.112.2o7[1].txt [ Cookie:senta@philips.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\FUFAOH11.txt [ Cookie:senta@liveperson.net/hc/85084061 ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\U1F99VPB.txt [ Cookie:senta@shinystat.com/cgi-bin/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\RDASQ0Z8.txt [ Cookie:senta@amtk-media.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\VVUE72EW.txt [ Cookie:senta@burstbeacon.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@interchangecorporation.122.2o7[1].txt [ Cookie:senta@interchangecorporation.122.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\AHJ0DQYS.txt [ Cookie:senta@www.countryliving.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@de.sitestat[1].txt [ Cookie:senta@de.sitestat.com/haba/haba-de/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\G7C1YAKH.txt [ Cookie:senta@findthebest.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@CAQH3SD0.txt [ Cookie:senta@liveperson.net/hc/34292599 ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\UQ80IRP4.txt [ Cookie:senta@ad.doubleclick.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@e-2dj6wjnyejazabo.stats.esomniture[2].txt [ Cookie:senta@e-2dj6wjnyejazabo.stats.esomniture.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@CA92XQ3A.txt [ Cookie:senta@liveperson.net/hc/69606660 ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@de.sitestat[2].txt [ Cookie:senta@de.sitestat.com/haba/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\BGTIH8F2.txt [ Cookie:senta@www.homesinpinetop.com/Util/Stats.ashx ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\PRBL04SA.txt [ Cookie:senta@tracking.keywordmax.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\1GL2T38D.txt [ Cookie:senta@bonton.122.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\B1ASC47R.txt [ Cookie:senta@c.gigcount.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\I5V1M1H3.txt [ Cookie:senta@amazon-adsystem.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\YHX0SPTF.txt [ Cookie:senta@liveperson.net/hc/15744040 ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\NT2TJ4KX.txt [ Cookie:senta@care2.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@associatedcontent.112.2o7[1].txt [ Cookie:senta@associatedcontent.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\senta@storkieexpress.122.2o7[1].txt [ Cookie:senta@storkieexpress.122.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\9GDKYA7G.txt [ Cookie:senta@www.adf01.net/pubs/cpa/track/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\7RAWDL1A.txt [ Cookie:senta@samsclub.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\L7V8E2ID.txt [ Cookie:senta@rotator.adjuggler.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\IJCLO9VQ.txt [ Cookie:senta@e-2dj6wmmyumazoap.stats.esomniture.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\VE6DXM9U.txt [ Cookie:senta@tricyclesforadults.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\DBUPC79G.txt [ Cookie:senta@www.googleadservices.com/pagead/conversion/1071924517/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\4XWTPGXB.txt [ Cookie:senta@www.googleadservices.com/pagead/conversion/1033495010/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\SYJCEQSI.txt [ Cookie:senta@content.yieldmanager.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\63BH4YVE.txt [ Cookie:senta@hearstmagazines.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\AJD2JZY3.txt [ Cookie:senta@www.googleadservices.com/pagead/conversion/1055527270/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\KVZ0NEAB.txt [ Cookie:senta@liveperson.net/hc/89501883 ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\Q6CGA9S5.txt [ Cookie:senta@tracking.waterfrontmedia.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\QU241GK6.txt [ Cookie:senta@e-2dj6wjmyepcjodp.stats.esomniture.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\GPWB3FQX.txt [ Cookie:senta@vikingrivercruises.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\C1FXE448.txt [ Cookie:senta@www.bizrate.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\Y33PZCND.txt [ Cookie:senta@millenniumhotels.122.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\489B2CTO.txt [ Cookie:senta@nakedfoodcooking.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\V4RVM5QJ.txt [ Cookie:senta@www.google.com/accounts/recovery ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\REI2ZESI.txt [ Cookie:senta@media.gsimedia.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\ROU2J4IH.txt [ Cookie:senta@media2.legacy.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\ZMJAKW4V.txt [ Cookie:senta@www.googleadservices.com/pagead/conversion/1018037730/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\7HWSBFFK.txt [ Cookie:senta@scotts.122.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\XO3Y2FYO.txt [ Cookie:senta@accounts.youtube.com/accounts ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\75C1VCCO.txt [ Cookie:senta@www.googleadservices.com/pagead/conversion/1071764698/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\3V41QL66.txt [ Cookie:senta@www.flagandbanner.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\EIGUKD12.txt [ Cookie:senta@sales.liveperson.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\OLPM4DAL.txt [ Cookie:senta@traffic.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\T1H2BU6W.txt [ Cookie:senta@www.googleadservices.com/pagead/conversion/1006038543/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\7OBQGMU9.txt [ Cookie:senta@www.googleadservices.com/pagead/conversion/1018540628/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\O0UCQ6C0.txt [ Cookie:senta@accounts.google.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\DXN9F3YQ.txt [ Cookie:senta@www.googleadservices.com/pagead/conversion/1069095226/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\11OECQGC.txt [ Cookie:senta@www.googleadservices.com/pagead/conversion/1028131097/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\5P6CY28R.txt [ Cookie:senta@www.googleadservices.com/pagead/conversion/1070254509/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\AB2HI407.txt [ Cookie:senta@c1.atdmt.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\HYX0EHN2.txt [ Cookie:senta@www.googleadservices.com/pagead/conversion/1071871169/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\EZO74DTM.txt [ Cookie:senta@www.googleadservices.com/pagead/conversion/1070464995/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\5OCKRCL7.txt [ Cookie:senta@bravenet.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\6SPWVNT8.txt [ Cookie:senta@www.googleadservices.com/pagead/conversion/974503249/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\8T8Q6NS7.txt [ Cookie:senta@liveperson.net/hc/LPneimanmarcus ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\FIVVHFTF.txt [ Cookie:senta@a.intentmedia.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\9WQZ15OC.txt [ Cookie:senta@hearstdigital.122.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\FNBL1Y7Y.txt [ Cookie:senta@microsoftsto.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\0DFXPY26.txt [ Cookie:senta@www.googleadservices.com/pagead/conversion/1049327773/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\2KM07DXG.txt [ Cookie:senta@warnerbros.112.2o7.net/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\2P7SK63D.txt [ Cookie:senta@www.googleadservices.com/pagead/conversion/1030833090/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\9A8QKR6D.txt [ Cookie:senta@google.com/accounts/recovery/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\4T39LRZD.txt [ Cookie:senta@e-2dj6wfmicmd5ieq.stats.esomniture.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\WTMF51Z2.txt [ Cookie:senta@atwola.com/ ]
C:\USERS\SENTA\AppData\Roaming\Microsoft\Windows\Cookies\Low\VT2S1LLO.txt [ Cookie:senta@countryliving.com/ ]
C:\USERS\SENTA\Cookies\14BGRKFF.txt [ Cookie:senta@2o7.net/ ]
C:\USERS\SENTA\Cookies\8EZUT8MN.txt [ Cookie:senta@media.mercola.com/ ]
C:\USERS\SENTA\Cookies\NX8LMAVX.txt [ Cookie:senta@realmedia.com/ ]
C:\USERS\SENTA\Cookies\DDD67FLM.txt [ Cookie:senta@elitecarseats.com/ ]
C:\USERS\SENTA\Cookies\4JF5UULD.txt [ Cookie:senta@trafficmp.com/ ]
C:\USERS\SENTA\Cookies\G0RGE360.txt [ Cookie:senta@ad.yieldmanager.com/ ]
C:\USERS\SENTA\Cookies\senta@apmebf[1].txt [ Cookie:senta@apmebf.com/ ]
C:\USERS\SENTA\Cookies\senta@mediaplex[2].txt [ Cookie:senta@mediaplex.com/ ]
C:\USERS\SENTA\Cookies\R3J1VN5Y.txt [ Cookie:senta@adbrite.com/ ]
C:\USERS\SENTA\Cookies\senta@doubleclick[2].txt [ Cookie:senta@doubleclick.net/ ]
G:\DOCUMENTS AND SETTINGS\OWNER\COOKIES\OWNER@ATDMT[2].TXT [ /ATDMT ]

Trojan.Agent/Gen-Nullo[Short]
G:\SYSTEM VOLUME INFORMATION\_RESTORE{09C9DBED-815C-4ECC-8F83-1EF4829C0334}\RP5\A0002260.EXE
G:\SYSTEM VOLUME INFORMATION\_RESTORE{09C9DBED-815C-4ECC-8F83-1EF4829C0334}\RP5\A0002271.EXE


ESET:

G:\Qoobox\Quarantine\C\Documents and Settings\All Users\Application Data\Tarma Installer\{DE3B7BF9-0770-4104-BC0B-B1CCCCE2F053}\_Setupx.dll.vir a variant of Win32/Adware.Yontoo.B application cleaned by deleting - quarantined
G:\smit\test.exe multiple threats deleted - quarantined
G:\smit\SmitfraudFix\Process.exe Win32/PrcView application cleaned by deleting - quarantined
G:\smit\SmitfraudFix\restart.exe Win32/Shutdown.NAA application cleaned by deleting - quarantined

#20 User is offline   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,388
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 23 December 2011 - 06:02 AM

since you ran Combofix, Please follow the instructions in ==>Malware Removal and Log Section Preparation Guide<==.

Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include the link to this topic in your new topic and a description of your computer issues and what you have done to resolve them.

If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.

Once you have created the new topic, please reply back here with a link to the new topic.

Most importantly please be patient till you get a reply to your topic.

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

#21 User is offline   sgivens 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 16
  • Joined: 16-December 11

Posted 02 January 2012 - 10:52 AM

Quick update...I ended up re-installing XP and was still experiencing internet connectivity issues. Turns out the onboard LAN had stopped functioning properly. Once I installed a PCI LAN card, the issue went away (it was still slow though, but given the age of the computer, I suppose it's not suprising). So, I'm guessing that I would have not had a need to post to this forum if I knew that it was a hardware problem up front. The owner will be retiring this computer to his son and purchasing a new one. Thanks for all the help and support!

-Scott

#22 User is offline   cryptodan 

  • Bleepin Madman
  • PipPipPipPipPipPip
  • Find Topics
  • Group: BC Advisor
  • Posts: 18,388
  • Joined: 08-September 08
  • Gender:Male
  • Location:Catonsville, Md

Posted 02 January 2012 - 04:35 PM

Well its best to go to the doctor when feeling ill and see what the issue first hand then waiting.

But glad the issue is resolved.

My work schedule is as follows: Mon and Tues 1800 to 0600, Friday - Sunday 1800EST to 0600, and Wednesday to Thursday 1800est to 0600. So if I do not respond right away I am at work.
----------------
If I am helping you, then Please Send Me a Message!with your thread link in it. This is only if I haven't replied back to you within 24 to 48 hours.
----------------
My Main Site || My Backup Site || steam://friends/add/cryptodan Add me to your Steam Friends.

Share this topic:


  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users