Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Doginhispen


  • This topic is locked This topic is locked
44 replies to this topic

#1 rayandi

rayandi

  • Members
  • 189 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Virginia
  • Local time:01:21 PM

Posted 09 March 2008 - 04:58 PM

Okay let me start by saying that I am new here and not overly computer literate.
I have recently noticed that my windows opens with an unwanted tab of doginhispen and will then shut down. I have ran super anti spyware which found about 675 infected files and such. We deleted them and thought we were okay. No such luck, within 30 minutes it was doing the same thing. HELP!!!!!


BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,026 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:02:21 PM

Posted 09 March 2008 - 08:42 PM

Hello and welcome. What is your Operating System (XP,Vista etc...) ?
What is your antivirus? have you run a scan from safe mode?
Could you please post the SUperAnitispyware scan log?

To retrieve the removal information, launch SUPERAntispyware again.
Click Preferences, then click the Statistics/Logs tab.
Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
If there are several logs, click the current dated log and press View log.
A text file will open in your default text editor.
Please copy and paste the Scan Log results in your next reply.
Click Close to exit the program.

NEXT
Click HERE to download FindAWF.exe and save it to your desktop.
Double-click on the FindAWF.exe file to run it.
It will open a command prompt and ask you to "Press any key to continue".
You will be presented with a Menu.
Type 1, then press Enter.
FindAWF tool will begin scanning.
It may take a few minutes to complete so be patient.
When the scan is finished, a text file in notepad called AWF.txt will automatically open.
Return to this thread and copy and paste the contents of the AWF.txt file in your next reply.

Edited by boopme, 09 March 2008 - 08:44 PM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 rayandi

rayandi
  • Topic Starter

  • Members
  • 189 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Virginia
  • Local time:01:21 PM

Posted 10 March 2008 - 03:04 PM

Thank you so much for your help. It is much appreciated. I am running Windows XP. I currently have avast installed and recently installed super anitspyware trying to find and get rid of this darn virus, to no avail. Here is the report...





Find AWF report by noahdfear ©2006
Version 1.40

The current date is: Mon 03/10/2008
The current time is: 15:22:59.82


bak folders found
~~~~~~~~~~~


Directory of C:\WINDOWS\BAK

11/30/1998 07:04 PM 497,376 p_981116.exe
1 File(s) 497,376 bytes

Directory of C:\PROGRA~1\DELLAI~1\BAK

06/02/2003 02:25 PM 270,336 dlbkbmgr.exe
1 File(s) 270,336 bytes

Directory of C:\PROGRA~1\ITUNES\BAK

12/11/2007 01:10 PM 267,048 iTunesHelper.exe
1 File(s) 267,048 bytes

Directory of C:\PROGRA~1\MESSEN~1\BAK

10/13/2004 12:24 PM 1,694,208 msmsgs.exe
1 File(s) 1,694,208 bytes

Directory of C:\PROGRA~1\NORTON~1\BAK

12/11/2003 07:35 PM 70,800 UrlLstCk.exe
1 File(s) 70,800 bytes

Directory of C:\PROGRA~1\QUICKT~1\BAK

12/11/2007 11:56 AM 286,720 qttask.exe
1 File(s) 286,720 bytes

Directory of C:\PROGRA~1\SYMNET~1\BAK

11/11/2005 05:57 PM 100,056 SNDMon.exe
1 File(s) 100,056 bytes

Directory of C:\WINDOWS\SYSTEM32\BAK

08/04/2004 03:56 AM 15,360 ctfmon.exe
11/01/2004 05:22 PM 262,144 ElkCtrl.exe
06/22/2005 12:44 AM 126,976 hkcmd.exe
06/22/2005 12:48 AM 155,648 igfxtray.exe
12/09/2005 03:32 PM 225,280 LVCOMSX.EXE
5 File(s) 785,408 bytes

Directory of C:\PROGRA~1\ALWILS~1\AVAST4\BAK

12/04/2007 09:00 AM 79,224 ashDisp.exe
1 File(s) 79,224 bytes

Directory of C:\PROGRA~1\COMMON~1\SYMANT~1\BAK

03/23/2005 04:34 PM 58,992 ccApp.exe
1 File(s) 58,992 bytes

Directory of C:\PROGRA~1\CREATIVE\MEDIAS~1\BAK

03/08/2006 09:56 AM 278,528 MtdAcqu.exe
1 File(s) 278,528 bytes

Directory of C:\PROGRA~1\CREATIVE\SYNCMA~1\BAK

11/23/2006 06:12 PM 851,968 CTSyncU.exe
1 File(s) 851,968 bytes

Directory of C:\PROGRA~1\DELL\MEDIAE~1\BAK

08/26/2003 08:47 PM 204,800 PCMService.exe
1 File(s) 204,800 bytes

Directory of C:\PROGRA~1\LOGITECH\VIDEO\BAK

12/07/2005 10:33 AM 73,728 InstallHelper.exe
1 File(s) 73,728 bytes

Directory of C:\PROGRA~1\MICROS~3\SYSTEM\BAK

06/18/2003 01:00 PM 200,704 mnyexpr.exe
1 File(s) 200,704 bytes

Directory of C:\PROGRA~1\MUSICM~1\MUSICM~2\BAK

01/17/2006 02:03 PM 53,248 mmtask.exe
1 File(s) 53,248 bytes

Directory of C:\WINDOWS\SYSTEM32\DLA\BAK

03/15/2004 02:04 AM 122,933 tfswctrl.exe
1 File(s) 122,933 bytes

Directory of C:\PROGRA~1\ADOBE\READER~1.0\READER\BAK

10/10/2007 08:51 PM 39,792 Reader_sl.exe
1 File(s) 39,792 bytes

Directory of C:\PROGRA~1\COMMON~1\ADOBE\UPDATER5\BAK

03/01/2007 11:37 AM 2,321,600 AdobeUpdater.exe
1 File(s) 2,321,600 bytes

Directory of C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\BAK

09/11/2006 04:40 AM 218,032 ISUSPM.exe
1 File(s) 218,032 bytes

Directory of C:\PROGRA~1\COMMON~1\SONIC\UPDATE~1\BAK

08/19/2003 02:01 AM 110,592 sgtray.exe
1 File(s) 110,592 bytes

Directory of C:\PROGRA~1\CREATIVE\MEDIAS~2\DETECTOR\BAK

12/02/2004 07:23 PM 102,400 CTDetect.exe
1 File(s) 102,400 bytes

Directory of C:\PROGRA~1\JAVA\JRE15~1.0_1\BIN\BAK

12/15/2006 04:23 AM 75,520 jusched.exe
1 File(s) 75,520 bytes


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

14348 Feb 26 2008 "C:\WINDOWS\p_981116.exe"
497376 Nov 30 1998 "C:\WINDOWS\bak\p_981116.exe"
14348 Feb 26 2008 "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
270336 Jun 2 2003 "C:\Program Files\Dell AIO Printer A920\bak\dlbkbmgr.exe"
267048 Jan 15 2008 "C:\Program Files\iTunes\iTunesHelper.exe1887153740"
267048 Dec 11 2007 "C:\Program Files\iTunes\bak\iTunesHelper.exe"
102400 Feb 26 2008 "C:\WINDOWS\Installer\{80FD852F-5AAC-4129-B931-06AAFFA43138}\iTunesIco.exe"
116024 Sep 24 2007 "C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\IJYLFVCD\iTunesSetupAdmin[1].exe"
75048 Feb 26 2008 "C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.6.1.9\iTunesSetupAdmin.exe"
116288 Jun 11 2007 "C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\3539SBIX\iTunesSetupAdmin[1].exe"
14348 Feb 26 2008 "C:\Program Files\Messenger\msmsgs.exe"
1667584 Aug 4 2004 "C:\WINDOWS\$NtUninstallKB887472$\msmsgs.exe"
1694208 Oct 13 2004 "C:\Program Files\Messenger\bak\msmsgs.exe"
1694208 Oct 13 2004 "C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe"
14348 Feb 26 2008 "C:\Program Files\Norton Internet Security\UrlLstCk.exe"
70800 Dec 11 2003 "C:\Program Files\Norton Internet Security\bak\UrlLstCk.exe"
385024 Feb 1 2008 "C:\Program Files\QuickTime\QTTask.exe"
286720 Dec 11 2007 "C:\Program Files\QuickTime\bak\qttask.exe"
14348 Feb 26 2008 "C:\Program Files\SymNetDrv\SNDMon.exe"
100056 Nov 11 2005 "C:\Program Files\SymNetDrv\bak\SNDMon.exe"
15360 Aug 4 2004 "C:\WINDOWS\SYSTEM32\ctfmon.exe"
15360 Aug 4 2004 "C:\WINDOWS\SYSTEM32\bak\ctfmon.exe"
14348 Feb 26 2008 "C:\WINDOWS\SYSTEM32\ElkCtrl.exe"
262144 Nov 1 2004 "C:\WINDOWS\SYSTEM32\bak\ElkCtrl.exe"
114688 Apr 7 2003 "C:\DRIVERS\VIDEO\HKCMD.EXE"
14348 Feb 26 2008 "C:\WINDOWS\SYSTEM32\hkcmd.exe"
126976 Jun 22 2005 "C:\DRIVERS\R106456\Win2000\hkcmd.exe"
126976 Jun 22 2005 "C:\WINDOWS\SYSTEM32\bak\hkcmd.exe"
126976 Jun 22 2005 "C:\WINDOWS\SYSTEM32\ReinstallBackups\0003\DriverFiles\hkcmd.exe"
155648 Apr 7 2003 "C:\DRIVERS\VIDEO\IGFXTRAY.EXE"
14348 Feb 26 2008 "C:\WINDOWS\SYSTEM32\igfxtray.exe"
155648 Jun 22 2005 "C:\DRIVERS\R106456\Win2000\igfxtray.exe"
155648 Jun 22 2005 "C:\WINDOWS\SYSTEM32\bak\igfxtray.exe"
155648 Jun 22 2005 "C:\WINDOWS\SYSTEM32\ReinstallBackups\0003\DriverFiles\igfxtray.exe"
14348 Feb 26 2008 "C:\WINDOWS\SYSTEM32\LVCOMSX.EXE"
225280 Dec 9 2005 "C:\WINDOWS\SYSTEM32\bak\LVCOMSX.EXE"
79224 Dec 4 2007 "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
79224 Dec 4 2007 "C:\Program Files\Alwil Software\Avast4\bak\ashDisp.exe"
14348 Feb 26 2008 "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
58992 Mar 23 2005 "C:\Program Files\Common Files\Symantec Shared\bak\ccApp.exe"
58488 Aug 13 2004 "C:\Documents and Settings\new account\Local Settings\Temp\ccCommon\CCAPP.EXE"
14348 Feb 26 2008 "C:\Program Files\Creative\MediaSource5\MtdAcqu.exe"
278528 Mar 8 2006 "C:\Program Files\Creative\MediaSource5\bak\MtdAcqu.exe"
14348 Feb 26 2008 "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
851968 Nov 23 2006 "C:\Program Files\Creative\Sync Manager Unicode\bak\CTSyncU.exe"
14348 Feb 26 2008 "C:\Program Files\Dell\Media Experience\PCMService.exe"
204800 Aug 26 2003 "C:\Program Files\Dell\Media Experience\bak\PCMService.exe"
14348 Feb 26 2008 "C:\Program Files\Logitech\Video\InstallHelper.exe"
73728 Dec 7 2005 "C:\Program Files\Logitech\Video\bak\InstallHelper.exe"
15872 Feb 21 2003 "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\InstallUtil.exe"
28672 Apr 13 2007 "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe"
14348 Feb 26 2008 "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
200704 Jun 18 2003 "C:\Program Files\Microsoft Money\System\bak\mnyexpr.exe"
14348 Feb 26 2008 "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe"
53248 Jan 17 2006 "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\bak\mmtask.exe"
14348 Feb 26 2008 "C:\WINDOWS\SYSTEM32\dla\tfswctrl.exe"
122933 Mar 15 2004 "C:\Program Files\Sonic\DLA\install\tfswctrl.exe"
122933 Mar 15 2004 "C:\WINDOWS\SYSTEM32\dla\bak\tfswctrl.exe"
14348 Feb 26 2008 "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
39792 Oct 10 2007 "C:\Program Files\Adobe\Reader 8.0\Reader\bak\Reader_sl.exe"
140920 May 10 2007 "C:\Program Files\Adobe\Reader 8.0\Reader\AdobeUpdateCheck.exe"
45760 Mar 1 2007 "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdaterInstallMgr.exe"
2321600 Mar 1 2007 "C:\Program Files\Common Files\Adobe\Updater5\bak\AdobeUpdater.exe"
14348 Feb 26 2008 "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe"
218032 Sep 11 2006 "C:\Program Files\Common Files\InstallShield\UpdateService\bak\ISUSPM.exe"
14348 Feb 26 2008 "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe"
110592 Aug 19 2003 "C:\Program Files\Common Files\Sonic\Update Manager\bak\sgtray.exe"
14348 Feb 26 2008 "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe"
102400 Dec 2 2004 "C:\Program Files\Creative\MediaSource\Detector\bak\CTDetect.exe"
14348 Feb 26 2008 "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
75520 Dec 15 2006 "C:\Program Files\Java\jre1.5.0_11\bin\bak\jusched.exe"


end of report

#4 rayandi

rayandi
  • Topic Starter

  • Members
  • 189 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Virginia
  • Local time:01:21 PM

Posted 10 March 2008 - 03:31 PM

And here is the antispyware log as requested...I did delete everything that it found. Thanks again!





SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 03/09/2008 at 10:37 AM

Application Version : 4.0.1154

Core Rules Database Version : 3416
Trace Rules Database Version: 1408

Scan type : Complete Scan
Total Scan Time : 00:50:34

Memory items scanned : 436
Memory threats detected : 0
Registry items scanned : 5926
Registry threats detected : 50
File items scanned : 24313
File threats detected : 623

Adware.MyWebSearch
HKLM\Software\Classes\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}
HKCR\CLSID\{00A6FAF1-072E-44CF-8957-5838F569A31D}
HKCR\CLSID\{00A6FAF1-072E-44CF-8957-5838F569A31D}
HKCR\CLSID\{00A6FAF1-072E-44CF-8957-5838F569A31D}\InprocServer32
HKCR\CLSID\{00A6FAF1-072E-44CF-8957-5838F569A31D}\InprocServer32#ThreadingModel
HKCR\CLSID\{00A6FAF1-072E-44CF-8957-5838F569A31D}\Programmable
C:\PROGRAM FILES\MYWEBSEARCH\SRCHASTT\2.BIN\MWSSRCAS.DLL
HKLM\Software\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}
HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}
HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}
HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}\InprocServer32
HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}\InprocServer32#ThreadingModel
HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}\Programmable
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}
HKU\S-1-5-21-2550059761-3596505653-168532230-1010\Software\Microsoft\Internet Explorer\URLSearchHooks#{00A6FAF6-072E-44cf-8957-5838F569A31D}

Unclassified.Unknown Origin
HKLM\Software\Classes\CLSID\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}
HKCR\CLSID\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}
HKCR\CLSID\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}
HKCR\CLSID\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}#AppID
HKCR\CLSID\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}\InprocServer32
HKCR\CLSID\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}\InprocServer32#ThreadingModel
HKCR\CLSID\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}\ProgID
HKCR\CLSID\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}\Programmable
HKCR\CLSID\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}\TypeLib
HKCR\CLSID\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}\VersionIndependentProgID
C:\PROGRAM FILES\WINBUDGET\BIN\_MATRIX.DLL
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}

Adware.Tracking Cookie
C:\Documents and Settings\new account\Cookies\new_account@adrevolver[1].txt
C:\Documents and Settings\new account\Cookies\new_account@www.incentaclick[2].txt
C:\Documents and Settings\new account\Cookies\new_account@banners.adultfriendfinder[1].txt
C:\Documents and Settings\new account\Cookies\new_account@aff.primaryads[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.bleepingcomputer[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.cnn[2].txt
C:\Documents and Settings\new account\Cookies\new_account@stat.onestat[1].txt
C:\Documents and Settings\new account\Cookies\new_account@www6.addfreestats[1].txt
C:\Documents and Settings\new account\Cookies\new_account@serving-sys[2].txt
C:\Documents and Settings\new account\Cookies\new_account@revsci[2].txt
C:\Documents and Settings\new account\Cookies\new_account@buildabear.122.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@atdmt[2].txt
C:\Documents and Settings\new account\Cookies\new_account@e-2dj6wjloapd5ifo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Cookies\new_account@sales.liveperson[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ehg-lifetimeentertainment.hitbox[1].txt
C:\Documents and Settings\new account\Cookies\new_account@adinterax[2].txt
C:\Documents and Settings\new account\Cookies\new_account@updates.liquiddigitalmedia[2].txt
C:\Documents and Settings\new account\Cookies\new_account@cts.metricsdirect[2].txt
C:\Documents and Settings\new account\Cookies\new_account@clickbank[2].txt
C:\Documents and Settings\new account\Cookies\new_account@burstnet[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.realtechnetwork[3].txt
C:\Documents and Settings\new account\Cookies\new_account@linksynergy[1].txt
C:\Documents and Settings\new account\Cookies\new_account@atwola[2].txt
C:\Documents and Settings\new account\Cookies\new_account@richmedia.yahoo[2].txt
C:\Documents and Settings\new account\Cookies\new_account@server2.bkvtrack[1].txt
C:\Documents and Settings\new account\Cookies\new_account@adopt.specificclick[1].txt
C:\Documents and Settings\new account\Cookies\new_account@entrepreneur.122.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@bs.serving-sys[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.pointroll[2].txt
C:\Documents and Settings\new account\Cookies\new_account@trafficmp[1].txt
C:\Documents and Settings\new account\Cookies\new_account@bluestreak[1].txt
C:\Documents and Settings\new account\Cookies\new_account@partners.tattomedia[2].txt
C:\Documents and Settings\new account\Cookies\new_account@media6degrees[1].txt
C:\Documents and Settings\new account\Cookies\new_account@prospect.adbureau[2].txt
C:\Documents and Settings\new account\Cookies\new_account@tribalfusion[1].txt
C:\Documents and Settings\new account\Cookies\new_account@kroger.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@hotbar[2].txt
C:\Documents and Settings\new account\Cookies\new_account@doubleclick[1].txt
C:\Documents and Settings\new account\Cookies\new_account@valueclick[1].txt
C:\Documents and Settings\new account\Cookies\new_account@msnportal.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@adserver.adreactor[2].txt
C:\Documents and Settings\new account\Cookies\new_account@atlas.entrepreneur[1].txt
C:\Documents and Settings\new account\Cookies\new_account@casalemedia[1].txt
C:\Documents and Settings\new account\Cookies\new_account@adserver.easyad[1].txt
C:\Documents and Settings\new account\Cookies\new_account@media.adrevolver[3].txt
C:\Documents and Settings\new account\Cookies\new_account@www.zango[2].txt
C:\Documents and Settings\new account\Cookies\new_account@fastclick[2].txt
C:\Documents and Settings\new account\Cookies\new_account@adultfriendfinder[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.adbrite[2].txt
C:\Documents and Settings\new account\Cookies\new_account@2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@reduxads.valuead[1].txt
C:\Documents and Settings\new account\Cookies\new_account@media.adrevolver[1].txt
C:\Documents and Settings\new account\Cookies\new_account@4.adbrite[2].txt
C:\Documents and Settings\new account\Cookies\new_account@tremor.adbureau[2].txt
C:\Documents and Settings\new account\Cookies\new_account@server.iad.liveperson[3].txt
C:\Documents and Settings\new account\Cookies\new_account@socialmedia[2].txt
C:\Documents and Settings\new account\Cookies\new_account@www.burstnet[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.realtechnetwork[4].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.joinaxxess[1].txt
C:\Documents and Settings\new account\Cookies\new_account@onlinerewardcenter[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.revsci[1].txt
C:\Documents and Settings\new account\Cookies\new_account@hypertracker[1].txt
C:\Documents and Settings\new account\Cookies\new_account@iacas.adbureau[2].txt
C:\Documents and Settings\new account\Cookies\new_account@freecodesource.advertserve[2].txt
C:\Documents and Settings\new account\Cookies\new_account@kaboose.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@anat.tacoda[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ads4.blastro[1].txt
C:\Documents and Settings\new account\Cookies\new_account@content.licenseacquisition[2].txt
C:\Documents and Settings\new account\Cookies\new_account@usatoday1.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@e-2dj6wjlyghcpiaq.stats.esomniture[2].txt
C:\Documents and Settings\new account\Cookies\new_account@e-2dj6wfk4cnazohp.stats.esomniture[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ice.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@eyewonder[1].txt
C:\Documents and Settings\new account\Cookies\new_account@zango[1].txt
C:\Documents and Settings\new account\Cookies\new_account@247realmedia[2].txt
C:\Documents and Settings\new account\Cookies\new_account@sales.liveperson[3].txt
C:\Documents and Settings\new account\Cookies\new_account@media.licenseacquisition[2].txt
C:\Documents and Settings\new account\Cookies\new_account@tacoda[1].txt
C:\Documents and Settings\new account\Cookies\new_account@rocku.adbureau[2].txt
C:\Documents and Settings\new account\Cookies\new_account@www.burstbeacon[1].txt
C:\Documents and Settings\new account\Cookies\new_account@eliteskills[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ad.yieldmanager[2].txt
C:\Documents and Settings\new account\Cookies\new_account@overture[1].txt
C:\Documents and Settings\new account\Cookies\new_account@www.zango[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ehg-dig.hitbox[2].txt
C:\Documents and Settings\new account\Cookies\new_account@adbrite[1].txt
C:\Documents and Settings\new account\Cookies\new_account@zedo[2].txt
C:\Documents and Settings\new account\Cookies\new_account@optimize.indieclick[2].txt
C:\Documents and Settings\new account\Cookies\new_account@servedby.clickfly[1].txt
C:\Documents and Settings\new account\Cookies\new_account@mywebsearch[2].txt
C:\Documents and Settings\new account\Cookies\new_account@directtrack[1].txt
C:\Documents and Settings\new account\Cookies\new_account@charmingshoppes.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.addynamix[1].txt
C:\Documents and Settings\new account\Cookies\new_account@server.iad.liveperson[2].txt
C:\Documents and Settings\new account\Cookies\new_account@interclick[1].txt
C:\Documents and Settings\new account\Cookies\new_account@revenue[2].txt
C:\Documents and Settings\new account\Cookies\new_account@statse.webtrendslive[2].txt
C:\Documents and Settings\new account\Cookies\new_account@realmedia[2].txt
C:\Documents and Settings\new account\Cookies\new_account@e-2dj6whmiwmd5seq.stats.esomniture[2].txt
C:\Documents and Settings\new account\Cookies\new_account@specificclick[1].txt
C:\Documents and Settings\new account\Cookies\new_account@precisionclick[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ehg-oreilly.hitbox[2].txt
C:\Documents and Settings\new account\Cookies\new_account@divx.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@client.roiadtracker[1].txt
C:\Documents and Settings\new account\Cookies\new_account@advertising[1].txt
C:\Documents and Settings\new account\Cookies\new_account@mediaplex[2].txt
C:\Documents and Settings\new account\Cookies\new_account@pt.crossmediaservices[1].txt
C:\Documents and Settings\new account\Cookies\new_account@eas.apm.emediate[1].txt
C:\Documents and Settings\new account\Cookies\new_account@adlegend[1].txt
C:\Documents and Settings\new account\Cookies\new_account@sitestat.mayoclinic[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ads3.blastro[2].txt
C:\Documents and Settings\new account\Cookies\new_account@smileycentral[1].txt
C:\Documents and Settings\new account\Cookies\new_account@tradedoubler[2].txt
C:\Documents and Settings\new account\Cookies\new_account@statcounter[2].txt
C:\Documents and Settings\new account\Cookies\new_account@wrigley.122.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.bridgetrack[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.realtechnetwork[1].txt
C:\Documents and Settings\new account\Cookies\new_account@edge.ru4[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.realtechnetwork[2].txt
C:\Documents and Settings\new account\Cookies\new_account@azjmp[2].txt
C:\Documents and Settings\new account\Cookies\new_account@questionmarket[1].txt
C:\Documents and Settings\new account\Cookies\new_account@imrworldwide[1].txt
C:\Documents and Settings\new account\Cookies\new_account@adopt.euroclick[1].txt
C:\Documents and Settings\new account\Cookies\new_account@incentaclick[1].txt
C:\Documents and Settings\new account\Cookies\new_account@perf.overture[1].txt
C:\Documents and Settings\new account\Cookies\new_account@anad.tacoda[1].txt
C:\Documents and Settings\new account\Cookies\new_account@e-2dj6whloeoazgbo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Cookies\new_account@collective-media[1].txt
C:\Documents and Settings\new account\Cookies\new_account@www.googleadservices[8].txt
C:\Documents and Settings\new account\Cookies\new_account@akqa.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@malwarecrush[1].txt
C:\Documents and Settings\new account\Cookies\new_account@teenhelp[2].txt
C:\Documents and Settings\new account\Cookies\new_account@scrippsfoodnet.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@intouch.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@m1.webstats.motigo[1].txt
C:\Documents and Settings\new account\Cookies\new_account@commission-junction[2].txt
C:\Documents and Settings\new account\Cookies\new_account@counter2.hitslink[1].txt
C:\Documents and Settings\new account\Cookies\new_account@vnet.valueclick[1].txt
C:\Documents and Settings\new account\Cookies\new_account@stampscom.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@bizrate[1].txt
C:\Documents and Settings\new account\Cookies\new_account@dl1.ads2media[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ge.bridgetrack[2].txt
C:\Documents and Settings\new account\Cookies\new_account@hosted.zango[1].txt
C:\Documents and Settings\new account\Cookies\new_account@scan.malwarecrush[3].txt
C:\Documents and Settings\new account\Cookies\new_account@nextag[1].txt
C:\Documents and Settings\new account\Cookies\new_account@apmebf[1].txt
C:\Documents and Settings\new account\Cookies\new_account@citi.bridgetrack[1].txt
C:\Documents and Settings\new account\Cookies\new_account@viamtvnvideo.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@media.mtvnservices[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ad.lookery[2].txt
C:\Documents and Settings\new account\Cookies\new_account@rotator.adjuggler[3].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.mobiledia[1].txt
C:\Documents and Settings\new account\Cookies\new_account@www.ez-tracks[1].txt
C:\Documents and Settings\new account\Cookies\new_account@login.tracking101[1].txt
C:\Documents and Settings\new account\Cookies\new_account@msnprod.oberon-media[1].txt
C:\Documents and Settings\new account\Cookies\new_account@hitbox[1].txt
C:\Documents and Settings\new account\Cookies\new_account@upspiral[2].txt
C:\Documents and Settings\new account\Cookies\new_account@tracking.foxnews[2].txt
C:\Documents and Settings\new account\Cookies\new_account@redorbit[2].txt
C:\Documents and Settings\new account\Cookies\new_account@dl2.ads2media[1].txt
C:\Documents and Settings\new account\Cookies\new_account@qnsr[1].txt
C:\Documents and Settings\new account\Cookies\new_account@server.iad.liveperson[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ringtones.ez-tracks[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.nascar[1].txt
C:\Documents and Settings\new account\Cookies\new_account@coolsavings[1].txt
C:\Documents and Settings\new account\Cookies\new_account@pro-market[2].txt
C:\Documents and Settings\new account\Cookies\new_account@www.googleadservices[7].txt
C:\Documents and Settings\new account\Cookies\new_account@www.xxxblackbook[2].txt
C:\Documents and Settings\new account\Cookies\new_account@adecn[2].txt
C:\Documents and Settings\new account\Cookies\new_account@findwhat[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.tmcs[2].txt
C:\Documents and Settings\new account\Cookies\new_account@www.addfreestats[1].txt
C:\Documents and Settings\new account\Cookies\new_account@yieldmanager[1].txt
C:\Documents and Settings\new account\Cookies\new_account@publishers.clickbooth[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.soft32[1].txt
C:\Documents and Settings\new account\Cookies\new_account@e-2dj6wdliogcpmdq.stats.esomniture[1].txt
C:\Documents and Settings\new account\Cookies\new_account@eb.adbureau[2].txt
C:\Documents and Settings\new account\Cookies\new_account@www.googleadservices[6].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.medbanner[1].txt
C:\Documents and Settings\new account\Cookies\new_account@sr1.ads2media[2].txt
C:\Documents and Settings\new account\Cookies\new_account@vhost.oddcast[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.associatedcontent[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ehg-researchinmotion.hitbox[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ehg-lowermybills.hitbox[1].txt
C:\Documents and Settings\new account\Cookies\new_account@uk.sitestat[1].txt
C:\Documents and Settings\new account\Cookies\new_account@sitestat.mayoclinic[1].txt
C:\Documents and Settings\new account\Cookies\new_account@counter.hitslink[1].txt
C:\Documents and Settings\new account\Cookies\new_account@tripod[1].txt
C:\Documents and Settings\new account\Cookies\new_account@partner2profit[1].txt
C:\Documents and Settings\new account\Cookies\new_account@stanzapub.advertserve[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.10click[2].txt
C:\Documents and Settings\new account\Cookies\new_account@mobileentertainment.directtrack[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ehg-comcast.hitbox[2].txt
C:\Documents and Settings\new account\Cookies\new_account@e-2dj6wjmyoicpmcp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Cookies\new_account@linksynergy.overstock[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ehg-foxsports.hitbox[2].txt
C:\Documents and Settings\new account\Cookies\new_account@sales.liveperson[1].txt
C:\Documents and Settings\new account\Cookies\new_account@media.mgnetwork[1].txt
C:\Documents and Settings\new account\Cookies\new_account@inteletrack[2].txt
C:\Documents and Settings\new account\Cookies\new_account@xiti[1].txt
C:\Documents and Settings\new account\Cookies\new_account@tgn.122.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@e-2dj6wjny-1jcjgd.stats.esomniture[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ehg-kodak.hitbox[2].txt
C:\Documents and Settings\new account\Cookies\new_account@teengrowth[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.quizapps[1].txt
C:\Documents and Settings\new account\Cookies\new_account@giftscom.122.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@viamtvcom.112.2o7[2].txt
C:\Documents and Settings\new account\Cookies\new_account@cbsdigitalmedia.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@server.koadserver[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ehg-space.hitbox[1].txt
C:\Documents and Settings\new account\Cookies\new_account@nielsen.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@videoegg.adbureau[1].txt
C:\Documents and Settings\new account\Cookies\new_account@oasc09.247realmedia[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ehg-jobster.hitbox[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.monster[2].txt
C:\Documents and Settings\new account\Cookies\new_account@monstercom.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@sales.liveperson[4].txt
C:\Documents and Settings\new account\Cookies\new_account@112.2o7[2].txt
C:\Documents and Settings\new account\Cookies\new_account@stat.dealtime[2].txt
C:\Documents and Settings\new account\Cookies\new_account@oasc02.247realmedia[1].txt
C:\Documents and Settings\new account\Cookies\new_account@loadxl.exelator[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ehg-aha.hitbox[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ez-tracks[1].txt
C:\Documents and Settings\new account\Cookies\new_account@cbs.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@e-2dj6wgk4smczedo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Cookies\new_account@track.cbs[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ehg-myspaceinc.hitbox[2].txt
C:\Documents and Settings\new account\Cookies\new_account@metacafe.122.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@brightcove.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ads.gametap[1].txt
C:\Documents and Settings\new account\Cookies\new_account@sparknetworks.112.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ad1.clickhype[1].txt
C:\Documents and Settings\new account\Cookies\new_account@highbeam.122.2o7[1].txt
C:\Documents and Settings\new account\Cookies\new_account@e-2dj6wjmiqndpkhp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Cookies\new_account@e-2dj6walyaiczeeo.stats.esomniture[1].txt
C:\Documents and Settings\new account\Cookies\new_account@rotator.adjuggler[1].txt
C:\Documents and Settings\new account\Cookies\new_account@www.entrepreneur[1].txt
C:\Documents and Settings\new account\Cookies\new_account@e-2dj6wdkygpdzeho.stats.esomniture[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ar.atwola[2].txt
C:\Documents and Settings\new account\Cookies\new_account@ad.us-ec.adtechus[1].txt
C:\Documents and Settings\new account\Cookies\new_account@ehg-gameshownet.hitbox[2].txt
C:\Documents and Settings\new account\Cookies\new_account@qksrv[1].txt
C:\Documents and Settings\new account\Cookies\new_account@xxxblackbook[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@as1.falkag[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjloegdpwbo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@efashionsolutions.122.2o7[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@onlinerewardcenter[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@hg1.hitbox[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjnyegd5glp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@trafficmp[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@keywordmax[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@christianteens.about[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjnywodpskp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@www.ticketsnow1[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@mmm.elitemediagroup[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@microsofteup.112.2o7[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@statse.webtrendslive[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjnyamdjedo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@statcounter[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@eztracks.aavalue[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wgkoqjczslo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@247realmedia[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@wrigley.122.2o7[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfkygjdzggo.stats.esomniture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@updates.liquiddigitalmedia[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjkyshdzago.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@www.nextag[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjmysjd5gep.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ads.bridgetrack[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjlycicjgko.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wgkyaiczgao.stats.esomniture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfliukd5iep.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfmigncjwhp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@perf.overture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@www.screensavers[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@atwola[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@citi.bridgetrack[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@apmebf[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@revenue[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@data1.perf.overture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@experclick[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@data3.perf.overture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@data4.perf.overture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@data2.perf.overture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@bizrate[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfkyuidzskp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@tradedoubler[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@screensavers[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfkywiczsgq.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@m1.webstats4u[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfkyujcjcgo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@questionmarket[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@adrevolver[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wflokjajgdp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@realmedia[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ads.monster[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@xiti[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjmiomazafp.stats.esomniture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@icc.intellisrv[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@fastclick[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ehg-foxinteractive.hitbox[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@sideshow.directtrack[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@edge.ru4[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@overture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@reduxads.valuead[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjlygpdzmcp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ehg-cbs.hitbox[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjny-1gajod.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@login.tracking101[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjkyghazgco.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjmigjd5aeo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjmismcpggo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@adrevolver[3].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@try.starware[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ads.cnn[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@msnportal.112.2o7[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@adv.webmd[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@phg.hitbox[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ad.yieldmanager[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfkognazwgo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjnywmczmbp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfkiunczkdq.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ehg-theviptour.hitbox[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@blockbuster.112.2o7[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@www.clickxchange[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjlosoajgfo.stats.esomniture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjlyekcpkco.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjmicic5cco.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@coolsavings[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@counter2.hitslink[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ath.belnk[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wflowpczelp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@tribalfusion[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjmyaic5ekp.stats.esomniture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfmiwgczako.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjkyakazofo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjkowkazigo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@mediaplex[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@www.findhairstyles[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjk4ohczakp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ads.realtechnetwork[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjloskajwap.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@meetupcom.122.2o7[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjk4kldjehp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@partypoker[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@cz3.clickzs[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@hotlog[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@kanoodle[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@anheuserbusch.122.2o7[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@mediaservices.myspace[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@weborama[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@advertising[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjnysndzwkp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@belnk[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjmywhd5okq.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfmiugazsko.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@maxserving[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfkyakcjibo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@z1.adserver[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@multimedia[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@yieldmanager[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ads.digitalpoint[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjmiuld5mdp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjlicjcpccp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@pro-market[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjliomc5mfp.stats.esomniture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ehg-melbourneit.hitbox[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@marketlive.122.2o7[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@hitbox[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjmiancjicp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ad.musicmatch[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@stat.onestat[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@www.burstbeacon[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfkyslazalp.stats.esomniture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfliwhczkko.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjmiwmc5cho.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjlyukcpmgp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wgkykhd5sgo.stats.esomniture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjkoqjd5eho.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjnygndzcco.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjkooldzcko.stats.esomniture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@adorigin[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjliskdzglo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfkiwhazacq.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ads.as4x.tmcs[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@admarketplace[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ads.addynamix[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@server.iad.liveperson[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@sel.as-us.falkag[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@adsrevenue[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@valueclick[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjkoopdpskq.stats.esomniture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ehg-helio.hitbox[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfmishcjoko.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@entrepreneur[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjkyohdpkap.stats.esomniture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjloqidpcbp.stats.esomniture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@adinterax[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ads2.drivelinemedia[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjkowod5idp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@casalemedia[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjnyopdjaho.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@fcstats.bcentral[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ehg-hasbro.hitbox[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@mediamgr.ugo[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@www.entrepreneur[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@exitexchange[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@azoogleads[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@counter.hitslink[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjkyggc5cko.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@i.screensavers[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjmicmazcgo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjnysldjiko.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wgkiwmdzakp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@entrepreneur.us.intellitxt[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjnywldpkbp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfkywmdjocp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@adlegend[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjlocncjmdq.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjk4onazico.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@adultfilmdatabase[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@count3.exitexchange[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjkoenajsbp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfk4kgcpahp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@entrepreneur.122.2o7[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ehg-reebok.hitbox[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfkykjcjwho.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@qnsr[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ads.cc214142[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@serving-sys[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfkiuncjcap.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@pacificpoker[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@anat.tacoda[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@offeroptimizer[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ads.pointroll[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@anad.tacoda[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@spylog[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@smileycentral[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@adknowledge[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ads.newgrounds[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@as.casalemedia[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@targetnet[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@as-us.falkag[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@adserve.webtoolcafe[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjk4ukd5mfp.stats.esomniture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@msnprod.oberon-media[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@sel.as-eu.falkag[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@www.findarticles[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@partner2profit[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ehg-dig.hitbox[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@burstnet[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@adopt.euroclick[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjkycgdpiao.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjnysjazcap.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfmikhajalo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjk4wicjoho.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfk4undjmgo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfl4khd5oaq.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjny-1nczmg.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@folica.122.2o7[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@www.ticketsnow[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ticketsnow[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@server.cpmstar[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@www.macromedia[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@adecn[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ww1.ez-tracks[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjkyaodpego.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjnyegdjeho.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@bluestreak[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@roiservice[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@2o7[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjnyujajseq.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjlieodjsdp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@azjmp[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@qksrv[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@tacoda[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@adbrite[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@sprintnlc.112.2o7[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wgl4gicpaap.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ww3.shoshkeles[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfkiclcjwcp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@bs.serving-sys[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@atdmt[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjmyopd5olo.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@partygaming.122.2o7[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@stat.dealtime[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@media3.sitebrand[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjkyohd5wlp.stats.esomniture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@interclick[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjk4shdpmkp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@a.websponsors[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfkyopdzkho.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@tripod[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@greatschools.122.2o7[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wfmiemd5mko.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@dist.belnk[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@sales.liveperson[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ru4[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@adopt.specificclick[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjkyejczkko.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@fortunecity[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@nextag[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ehg-groupernetworks.hitbox[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@rotator.adjuggler[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@www.burstnet[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@revsci[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@image.masterstats[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjnyandjglp.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjnyokcjikp.stats.esomniture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@ehg-gameshownet.hitbox[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@h.starware[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjlyclc5acq.stats.esomniture[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@as-eu.falkag[2].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@adserver[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@doubleclick[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@e-2dj6wjkyopdzmko.stats.esomniture[1].txt
C:\Documents and Settings\new account\Local Settings\Temp\Cookies\new account@zedo[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@ehg-tdc.hitbox[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@apmebf[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@bizrate[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@www.soundtrackcollector[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@adinterax[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@revenue[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@fl01.ct2.comclick[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@rightmedia[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@atwola[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@icc.intellisrv[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@www.mediablvd[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@doubleclick[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@stat.onestat[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@kmart.crossmediaservices[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@bluestreak[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@ads.as4x.tmcs[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@ads.addynamix[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@targetnet[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@tracking.thunderdownloads[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@dist.belnk[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@intellisrv[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@track.effiliation[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@as1.falkag[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@ads.tripod.lycos[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@burstnet[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@www.smartadserver[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@ads.pointroll[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@adserver.71i[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@as-us.falkag[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@www.burstbeacon[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@2o7[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@server.iad.liveperson[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@hitbox[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@statcounter[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@iv2.bluestreak[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@windowsmedia[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@clickagents[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@web4.realtracker[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@adserver[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@ads.expedia[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@trafficmp[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@adtech[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@phg.hitbox[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@adrevolver[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@click-fr[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@adviva[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@ads.wanadooregie[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@yourmedia[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@citi.bridgetrack[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@advertising[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@partner2profit[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@ehg-dig.hitbox[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@atdmt[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@ads.planetactive[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@edge.ru4[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@overture[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@elite-clip.skyblog[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@maxserving[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@realmedia[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@z1.adserver[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@qksrv[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@fastclick[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@realmedia[3].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@valueclick[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@azjmp[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@bs.serving-sys[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@tradedoubler[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@247realmedia[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@counter[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@counter2.hitslink[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@perf.overture[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@www.xxxgateways[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@mediaplex[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@teenchat[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@casalemedia[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@okcounter[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@tripod[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@ehg-communityconnect.hitbox[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@www.ez-tracks[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@tracker.affistats[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@weborama[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@counter.sexsuche[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@xiti[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@ehg-idg.hitbox[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@chat.teenchat[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@ads.chartsinfrance[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@serving-sys[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@www.cibleclick[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@zedo[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@adv.surinter[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@pt.crossmediaservices[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@teenpeople[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@questionmarket[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@servedby.advertising[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@tribalfusion[1].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@adknowledge[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@www.clickmanage[2].txt
C:\Documents and Settings\new account_2\Cookies\new account_2@ads.adsag[1].txt

Adware.Zango Toolbar/Hb
HKCR\Interface\{00B77587-BE1B-4201-B8E9-09FCF50AB771}
HKCR\Interface\{00B77587-BE1B-4201-B8E9-09FCF50AB771}\ProxyStubClsid
HKCR\Interface\{00B77587-BE1B-4201-B8E9-09FCF50AB771}\ProxyStubClsid32
HKCR\Interface\{00B77587-BE1B-4201-B8E9-09FCF50AB771}\TypeLib
HKCR\Interface\{00B77587-BE1B-4201-B8E9-09FCF50AB771}\TypeLib#Version
HKCR\Interface\{2B81F920-6660-4F76-93BF-B1C67BF5D1A0}
HKCR\Interface\{2B81F920-6660-4F76-93BF-B1C67BF5D1A0}\ProxyStubClsid
HKCR\Interface\{2B81F920-6660-4F76-93BF-B1C67BF5D1A0}\ProxyStubClsid32
HKCR\Interface\{2B81F920-6660-4F76-93BF-B1C67BF5D1A0}\TypeLib
HKCR\Interface\{2B81F920-6660-4F76-93BF-B1C67BF5D1A0}\TypeLib#Version

Trojan.VideoCach/Gen
HKCR\TypeLib\{A8954909-1F0F-41A5-A7FA-3B376D69E226}
HKCR\TypeLib\{A8954909-1F0F-41A5-A7FA-3B376D69E226}\1.0
HKCR\TypeLib\{A8954909-1F0F-41A5-A7FA-3B376D69E226}\1.0\0
HKCR\TypeLib\{A8954909-1F0F-41A5-A7FA-3B376D69E226}\1.0\0\win32
HKCR\TypeLib\{A8954909-1F0F-41A5-A7FA-3B376D69E226}\1.0\FLAGS
HKCR\TypeLib\{A8954909-1F0F-41A5-A7FA-3B376D69E226}\1.0\HELPDIR
HKCR\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}
HKCR\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}\ProxyStubClsid
HKCR\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}\ProxyStubClsid32
HKCR\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}\TypeLib
HKCR\Interface\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}\TypeLib#Version

Rogue.SpyDefender Pro
HKU\S-1-5-21-2550059761-3596505653-168532230-1010\Software\SpyDefender
HKU\S-1-5-21-2550059761-3596505653-168532230-1010\Software\SWD123
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1376\A0427987.EXE

Adware.Zango/ShoppingReport
HKU\S-1-5-21-2550059761-3596505653-168532230-1010\Software\ShoppingReport
HKLM\Software\ShoppingReport

Adware.180solutions/ZangoSearch
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1368\A0423862.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1368\A0423863.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1368\A0423864.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1368\A0423865.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP1373\A0426896.DLL

#5 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,026 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:02:21 PM

Posted 10 March 2008 - 03:50 PM

Thanks in the meantime while I get your next steps,please tell me what is your Operating System (XP etc...) and
what antivirus and spyware tools are installed?
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#6 rayandi

rayandi
  • Topic Starter

  • Members
  • 189 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Virginia
  • Local time:01:21 PM

Posted 10 March 2008 - 03:59 PM

I am running Windows XP, I have avast, and super antispyware installed. In looking through the programs Norton is also in there but it is an older version that ran out a year or so ago. I think that is everything.

#7 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,026 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:02:21 PM

Posted 10 March 2008 - 04:24 PM

Well you've certainly pulled a lot of junk off your PC.it has to be running better already.

You have a downloader trojan called Downloader.Agent.awf or Downloader.Agent.ayy. This trojan replaces legitimate files that are common on most computers with an infected file. It then moves the legitimate file to a "bak" or backup folder. Please follow steps below:

Copy the file paths in quote below to the clipboard, highlight all of them right-click and choose copy, or highlight them and press Ctrl+C:

"C:\WINDOWS\bak\p_981116.exe"
"C:\Program Files\Dell AIO Printer A920\bak\dlbkbmgr.exe"
"C:\Program Files\iTunes\bak\iTunesHelper.exe"
"C:\Program Files\Messenger\bak\msmsgs.exe"
"C:\Program Files\Norton Internet Security\bak\UrlLstCk.exe"
"C:\Program Files\QuickTime\bak\qttask.exe"
"C:\WINDOWS\SYSTEM32\bak\ctfmon.exe"
"C:\WINDOWS\SYSTEM32\bak\ElkCtrl.exe"
"C:\WINDOWS\SYSTEM32\bak\hkcmd.exe"
"C:\WINDOWS\SYSTEM32\bak\igfxtray.exe"
"C:\WINDOWS\SYSTEM32\bak\LVCOMSX.EXE"
"C:\Program Files\Alwil Software\Avast4\bak\ashDisp.exe"
"C:\Program Files\Common Files\Symantec Shared\bak\ccApp.exe"
"C:\Program Files\Creative\MediaSource5\bak\MtdAcqu.exe"
"C:\Program Files\Creative\Sync Manager Unicode\bak\CTSyncU.exe"
"C:\Program Files\Dell\Media Experience\bak\PCMService.exe"
"C:\Program Files\Logitech\Video\bak\InstallHelper.exe"
"C:\Program Files\Microsoft Money\System\bak\mnyexpr.exe"
"C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\bak\mmtask.exe"
"C:\WINDOWS\SYSTEM32\dla\bak\tfswctrl.exe"
"C:\Program Files\Adobe\Reader 8.0\Reader\bak\Reader_sl.exe"
"C:\Program Files\Common Files\Adobe\Updater5\bak\AdobeUpdater.exe"
"C:\Program Files\Common Files\InstallShield\UpdateService\bak\ISUSPM.exe"
"C:\Program Files\Common Files\Sonic\Update Manager\bak\sgtray.exe"
"C:\Program Files\Creative\MediaSource\Detector\bak\CTDetect.exe"
"C:\Program Files\Java\jre1.5.0_11\bin\bak\jusched.exe"


Double-click on the FindAWF.exe file to run it.
It will open a command prompt and ask you to "Press any key to continue".
You will be presented with a Menu.
Type 2, then press Enter.
Press any key to continue.
A Notepad document files.txt will appear with instructions to click below the line and paste the list of files to be restored.
Right click below the line and paste the list of files that were copied to the clipboard (Ctrl+V).
Close Notepad and you will receive prompt to save the changes, click Yes.
The program will proceed with working.
It may take a few minutes to complete so be patient.
When the scan is finished, it will open a text file in notepad called AWF.txt.
Return to this thread and copy and paste the contents of the AWF.txt file in your next reply.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#8 rayandi

rayandi
  • Topic Starter

  • Members
  • 189 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Virginia
  • Local time:01:21 PM

Posted 10 March 2008 - 07:20 PM

Yes, the computer is running faster. Here is the report...




Find AWF report by noahdfear ©2006
Version 1.40
Option 2 run successfully

The current date is: Mon 03/10/2008
The current time is: 19:38:01.79


bak folders found
~~~~~~~~~~~


Directory of C:\WINDOWS\BAK

11/30/1998 07:04 PM 497,376 p_981116.exe
1 File(s) 497,376 bytes

Directory of C:\PROGRA~1\DELLAI~1\BAK

06/02/2003 02:25 PM 270,336 dlbkbmgr.exe
1 File(s) 270,336 bytes

Directory of C:\PROGRA~1\ITUNES\BAK

12/11/2007 01:10 PM 267,048 iTunesHelper.exe
1 File(s) 267,048 bytes

Directory of C:\PROGRA~1\MESSEN~1\BAK

10/13/2004 12:24 PM 1,694,208 msmsgs.exe
1 File(s) 1,694,208 bytes

Directory of C:\PROGRA~1\NORTON~1\BAK

12/11/2003 07:35 PM 70,800 UrlLstCk.exe
1 File(s) 70,800 bytes

Directory of C:\PROGRA~1\QUICKT~1\BAK

12/11/2007 11:56 AM 286,720 qttask.exe
1 File(s) 286,720 bytes

Directory of C:\PROGRA~1\SYMNET~1\BAK

11/11/2005 05:57 PM 100,056 SNDMon.exe
1 File(s) 100,056 bytes

Directory of C:\WINDOWS\SYSTEM32\BAK

08/04/2004 03:56 AM 15,360 ctfmon.exe
11/01/2004 05:22 PM 262,144 ElkCtrl.exe
06/22/2005 12:44 AM 126,976 hkcmd.exe
06/22/2005 12:48 AM 155,648 igfxtray.exe
12/09/2005 03:32 PM 225,280 LVCOMSX.EXE
5 File(s) 785,408 bytes

Directory of C:\PROGRA~1\ALWILS~1\AVAST4\BAK

12/04/2007 09:00 AM 79,224 ashDisp.exe
1 File(s) 79,224 bytes

Directory of C:\PROGRA~1\COMMON~1\SYMANT~1\BAK

03/23/2005 04:34 PM 58,992 ccApp.exe
1 File(s) 58,992 bytes

Directory of C:\PROGRA~1\CREATIVE\MEDIAS~1\BAK

03/08/2006 09:56 AM 278,528 MtdAcqu.exe
1 File(s) 278,528 bytes

Directory of C:\PROGRA~1\CREATIVE\SYNCMA~1\BAK

11/23/2006 06:12 PM 851,968 CTSyncU.exe
1 File(s) 851,968 bytes

Directory of C:\PROGRA~1\DELL\MEDIAE~1\BAK

08/26/2003 08:47 PM 204,800 PCMService.exe
1 File(s) 204,800 bytes

Directory of C:\PROGRA~1\LOGITECH\VIDEO\BAK

12/07/2005 10:33 AM 73,728 InstallHelper.exe
1 File(s) 73,728 bytes

Directory of C:\PROGRA~1\MICROS~3\SYSTEM\BAK

06/18/2003 01:00 PM 200,704 mnyexpr.exe
1 File(s) 200,704 bytes

Directory of C:\PROGRA~1\MUSICM~1\MUSICM~2\BAK

01/17/2006 02:03 PM 53,248 mmtask.exe
1 File(s) 53,248 bytes

Directory of C:\WINDOWS\SYSTEM32\DLA\BAK

03/15/2004 02:04 AM 122,933 tfswctrl.exe
1 File(s) 122,933 bytes

Directory of C:\PROGRA~1\ADOBE\READER~1.0\READER\BAK

10/10/2007 08:51 PM 39,792 Reader_sl.exe
1 File(s) 39,792 bytes

Directory of C:\PROGRA~1\COMMON~1\ADOBE\UPDATER5\BAK

03/01/2007 11:37 AM 2,321,600 AdobeUpdater.exe
1 File(s) 2,321,600 bytes

Directory of C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\BAK

09/11/2006 04:40 AM 218,032 ISUSPM.exe
1 File(s) 218,032 bytes

Directory of C:\PROGRA~1\COMMON~1\SONIC\UPDATE~1\BAK

08/19/2003 02:01 AM 110,592 sgtray.exe
1 File(s) 110,592 bytes

Directory of C:\PROGRA~1\CREATIVE\MEDIAS~2\DETECTOR\BAK

12/02/2004 07:23 PM 102,400 CTDetect.exe
1 File(s) 102,400 bytes

Directory of C:\PROGRA~1\JAVA\JRE15~1.0_1\BIN\BAK

12/15/2006 04:23 AM 75,520 jusched.exe
1 File(s) 75,520 bytes


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

497376 Nov 30 1998 "C:\WINDOWS\p_981116.exe"
497376 Nov 30 1998 "C:\WINDOWS\bak\p_981116.exe"
270336 Jun 2 2003 "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe"
270336 Jun 2 2003 "C:\Program Files\Dell AIO Printer A920\bak\dlbkbmgr.exe"
267048 Jan 15 2008 "C:\Program Files\iTunes\iTunesHelper.exe1887153740"
267048 Dec 11 2007 "C:\Program Files\iTunes\bak\iTunesHelper.exe"
102400 Feb 26 2008 "C:\WINDOWS\Installer\{80FD852F-5AAC-4129-B931-06AAFFA43138}\iTunesIco.exe"
116024 Sep 24 2007 "C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\IJYLFVCD\iTunesSetupAdmin[1].exe"
75048 Feb 26 2008 "C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.6.1.9\iTunesSetupAdmin.exe"
116288 Jun 11 2007 "C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\3539SBIX\iTunesSetupAdmin[1].exe"
1694208 Oct 13 2004 "C:\Program Files\Messenger\msmsgs.exe"
1667584 Aug 4 2004 "C:\WINDOWS\$NtUninstallKB887472$\msmsgs.exe"
1694208 Oct 13 2004 "C:\Program Files\Messenger\bak\msmsgs.exe"
1694208 Oct 13 2004 "C:\WINDOWS\$hf_mig$\KB887472\SP2QFE\msmsgs.exe"
70800 Dec 11 2003 "C:\Program Files\Norton Internet Security\UrlLstCk.exe"
70800 Dec 11 2003 "C:\Program Files\Norton Internet Security\bak\UrlLstCk.exe"
286720 Dec 11 2007 "C:\Program Files\QuickTime\qttask.exe"
286720 Dec 11 2007 "C:\Program Files\QuickTime\bak\qttask.exe"
14348 Feb 26 2008 "C:\Program Files\SymNetDrv\SNDMon.exe"
100056 Nov 11 2005 "C:\Program Files\SymNetDrv\bak\SNDMon.exe"
15360 Aug 4 2004 "C:\WINDOWS\SYSTEM32\ctfmon.exe"
15360 Aug 4 2004 "C:\WINDOWS\SYSTEM32\bak\ctfmon.exe"
262144 Nov 1 2004 "C:\WINDOWS\SYSTEM32\ElkCtrl.exe"
262144 Nov 1 2004 "C:\WINDOWS\SYSTEM32\bak\ElkCtrl.exe"
114688 Apr 7 2003 "C:\DRIVERS\VIDEO\HKCMD.EXE"
126976 Jun 22 2005 "C:\WINDOWS\SYSTEM32\hkcmd.exe"
126976 Jun 22 2005 "C:\DRIVERS\R106456\Win2000\hkcmd.exe"
126976 Jun 22 2005 "C:\WINDOWS\SYSTEM32\bak\hkcmd.exe"
126976 Jun 22 2005 "C:\WINDOWS\SYSTEM32\ReinstallBackups\0003\DriverFiles\hkcmd.exe"
155648 Apr 7 2003 "C:\DRIVERS\VIDEO\IGFXTRAY.EXE"
155648 Jun 22 2005 "C:\WINDOWS\SYSTEM32\igfxtray.exe"
155648 Jun 22 2005 "C:\DRIVERS\R106456\Win2000\igfxtray.exe"
155648 Jun 22 2005 "C:\WINDOWS\SYSTEM32\bak\igfxtray.exe"
155648 Jun 22 2005 "C:\WINDOWS\SYSTEM32\ReinstallBackups\0003\DriverFiles\igfxtray.exe"
225280 Dec 9 2005 "C:\WINDOWS\SYSTEM32\LVCOMSX.EXE"
225280 Dec 9 2005 "C:\WINDOWS\SYSTEM32\bak\LVCOMSX.EXE"
79224 Dec 4 2007 "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
79224 Dec 4 2007 "C:\Program Files\Alwil Software\Avast4\bak\ashDisp.exe"
58992 Mar 23 2005 "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
58992 Mar 23 2005 "C:\Program Files\Common Files\Symantec Shared\bak\ccApp.exe"
58488 Aug 13 2004 "C:\Documents and Settings\new account\Local Settings\Temp\ccCommon\CCAPP.EXE"
278528 Mar 8 2006 "C:\Program Files\Creative\MediaSource5\MtdAcqu.exe"
278528 Mar 8 2006 "C:\Program Files\Creative\MediaSource5\bak\MtdAcqu.exe"
851968 Nov 23 2006 "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
851968 Nov 23 2006 "C:\Program Files\Creative\Sync Manager Unicode\bak\CTSyncU.exe"
204800 Aug 26 2003 "C:\Program Files\Dell\Media Experience\PCMService.exe"
204800 Aug 26 2003 "C:\Program Files\Dell\Media Experience\bak\PCMService.exe"
73728 Dec 7 2005 "C:\Program Files\Logitech\Video\InstallHelper.exe"
73728 Dec 7 2005 "C:\Program Files\Logitech\Video\bak\InstallHelper.exe"
15872 Feb 21 2003 "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\InstallUtil.exe"
28672 Apr 13 2007 "C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe"
200704 Jun 18 2003 "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
200704 Jun 18 2003 "C:\Program Files\Microsoft Money\System\bak\mnyexpr.exe"
53248 Jan 17 2006 "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe"
53248 Jan 17 2006 "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\bak\mmtask.exe"
122933 Mar 15 2004 "C:\WINDOWS\SYSTEM32\dla\tfswctrl.exe"
122933 Mar 15 2004 "C:\Program Files\Sonic\DLA\install\tfswctrl.exe"
122933 Mar 15 2004 "C:\WINDOWS\SYSTEM32\dla\bak\tfswctrl.exe"
39792 Oct 10 2007 "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
39792 Oct 10 2007 "C:\Program Files\Adobe\Reader 8.0\Reader\bak\Reader_sl.exe"
140920 May 10 2007 "C:\Program Files\Adobe\Reader 8.0\Reader\AdobeUpdateCheck.exe"
45760 Mar 1 2007 "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdaterInstallMgr.exe"
2321600 Mar 1 2007 "C:\Program Files\Common Files\Adobe\Updater5\bak\AdobeUpdater.exe"
218032 Sep 11 2006 "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe"
218032 Sep 11 2006 "C:\Program Files\Common Files\InstallShield\UpdateService\bak\ISUSPM.exe"
110592 Aug 19 2003 "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe"
110592 Aug 19 2003 "C:\Program Files\Common Files\Sonic\Update Manager\bak\sgtray.exe"
102400 Dec 2 2004 "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe"
102400 Dec 2 2004 "C:\Program Files\Creative\MediaSource\Detector\bak\CTDetect.exe"
75520 Dec 15 2006 "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
75520 Dec 15 2006 "C:\Program Files\Java\jre1.5.0_11\bin\bak\jusched.exe"


end of report

#9 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,026 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:02:21 PM

Posted 10 March 2008 - 08:45 PM

So far so good,hopefully it accepts all this and we don't have to do it twice.

Copy the paths in quote below to the clipboard, highlight all of them right-click and choose copy, or highlight them and press Ctrl+C:

C:\WINDOWS\bak
C:\Program Files\Dell AIO Printer A920\bak
C:\Program Files\iTunes\bak
C:\Program Files\Messenger\bak
C:\Program Files\Norton Internet Security\bak
C:\Program Files\QuickTime\bak
C:\Program Files\SymNetDrv\bak
C:\WINDOWS\SYSTEM32\bak
C:\Program Files\Alwil Software\Avast4\bak
C:\Program Files\Common Files\Symantec Shared\bak
C:\Program Files\Creative\MediaSource5\bak
C:\Program Files\Creative\Sync Manager Unicode\bak
C:\Program Files\Dell\Media Experience\bak
C:\Program Files\Logitech\Video\bak
C:\Program Files\Microsoft Money\System\bak
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\bak
C:\WINDOWS\SYSTEM32\dla\bak
C:\Program Files\Adobe\Reader 8.0\Reader\bak
C:\Program Files\Common Files\Adobe\Updater5\bak
C:\Program Files\Common Files\InstallShield\UpdateService\bak
C:\Program Files\Common Files\Sonic\Update Manager\bak
C:\Program Files\Creative\MediaSource\Detector\bak
C:\Program Files\Java\jre1.5.0_11\bin\bak


Double-click on the FindAWF.exe file to run it.
It will open a command prompt and ask you to "Press any key to continue".
You will be presented with a Menu.
Type 3, then press Enter.
Press any key to continue.
A Notepad document folders.txt will appear with instructions to click below the line and paste the list of folders to be removed.
Right click below the line and paste the list of paths that were copied to the clipboard (Ctrl+V).
Close Notepad and you will receive prompt to save the changes, click Yes.
The program will proceed with working.
It may take a few minutes to complete so be patient.
When the scan is finished, it will open a text file in notepad called AWF.txt.
Return to this thread and copy and paste the contents of the AWF.txt file in your next reply.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#10 rayandi

rayandi
  • Topic Starter

  • Members
  • 189 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Virginia
  • Local time:01:21 PM

Posted 11 March 2008 - 07:15 AM

As someone who knows only the basics on the computer, I just want to let you know how much I appreciate you taking your time to help me out. Your directions are so easy to follow, makes me feel like I know what i'm doing :thumbsup:
Here is the report...




Find AWF report by noahdfear ©2006
Version 1.40
Option 3 run successfully

The current date is: Tue 03/11/2008
The current time is: 8:00:57.57


bak folders found
~~~~~~~~~~~


Directory of C:\PROGRA~1\COMMON~1\ADOBE\UPDATER5\BAK

03/01/2007 11:37 AM 2,321,600 AdobeUpdater.exe
1 File(s) 2,321,600 bytes


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

140920 May 10 2007 "C:\Program Files\Adobe\Reader 8.0\Reader\AdobeUpdateCheck.exe"
45760 Mar 1 2007 "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdaterInstallMgr.exe"
2321600 Mar 1 2007 "C:\Program Files\Common Files\Adobe\Updater5\bak\AdobeUpdater.exe"


end of report

#11 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,026 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:02:21 PM

Posted 11 March 2008 - 12:33 PM

You're very welcome. Looks like we need to run Option 2 & 3 on one file. So let's go

Copy the file paths in quote below to the clipboard, highlight all of them right-click and choose copy, or highlight them and press Ctrl+C:

"C:\Program Files\Common Files\Adobe\Updater5\bak\AdobeUpdater.exe"


Double-click on the FindAWF.exe file to run it.
It will open a command prompt and ask you to "Press any key to continue".
You will be presented with a Menu.
Type 2, then press Enter.
Press any key to continue.
A Notepad document files.txt will appear with instructions to click below the line and paste the list of files to be restored.
Right click below the line and paste the list of files that were copied to the clipboard (Ctrl+V).
Close Notepad and you will receive prompt to save the changes, click Yes.
The program will proceed with working.
It may take a few minutes to complete so be patient.
When the scan is finished, it will open a text file in notepad called AWF.txt.
Return to this thread and copy and paste the contents of the AWF.txt file in your next reply.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#12 rayandi

rayandi
  • Topic Starter

  • Members
  • 189 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Virginia
  • Local time:01:21 PM

Posted 11 March 2008 - 04:52 PM

here is the report..



Find AWF report by noahdfear ©2006
Version 1.40
Option 2 run successfully

The current date is: Tue 03/11/2008
The current time is: 17:26:28.60


bak folders found
~~~~~~~~~~~


Directory of C:\PROGRA~1\COMMON~1\ADOBE\UPDATER5\BAK

03/01/2007 11:37 AM 2,321,600 AdobeUpdater.exe
1 File(s) 2,321,600 bytes


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

140920 May 10 2007 "C:\Program Files\Adobe\Reader 8.0\Reader\AdobeUpdateCheck.exe"
45760 Mar 1 2007 "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdaterInstallMgr.exe"
2321600 Mar 1 2007 "C:\Program Files\Common Files\Adobe\Updater5\bak\AdobeUpdater.exe"


end of report

#13 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,026 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:02:21 PM

Posted 11 March 2008 - 06:32 PM

Good, let's hope it croaks this time !

Copy the paths in quote below to the clipboard, highlight all of them right-click and choose copy, or highlight them and press Ctrl+C:

C:\Program Files\Common Files\Adobe\Updater5\bak


Double-click on the FindAWF.exe file to run it.
It will open a command prompt and ask you to "Press any key to continue".
You will be presented with a Menu.
Type 3, then press Enter.
Press any key to continue.
A Notepad document folders.txt will appear with instructions to click below the line and paste the list of folders to be removed.
Right click below the line and paste the list of paths that were copied to the clipboard (Ctrl+V).
Close Notepad and you will receive prompt to save the changes, click Yes.
The program will proceed with working.
It may take a few minutes to complete so be patient.
When the scan is finished, it will open a text file in notepad called AWF.txt.
Return to this thread and copy and paste the contents of the AWF.txt file in your next reply.


Your Java is out of date. Older versions have vulnerabilities that malicious sites can use to exploit and infect your system. Please follow these steps to remove older version Java components and update:
  • Download the latest version of Java Runtime Environment (JRE) Version 6 and save it to your desktop.
  • Scroll down to where it says "Java Runtime Environment (JRE) 6 Update 5...allows end-users to run Java applications".
  • Click the "Download" button to the right.
  • Select your Platform: "Windows".
  • Select your Language: "English".
  • Read the License Agreement, and then check the box that says: "Accept License Agreement".
  • Click Continue and the page will refresh.
  • Click on the link to download Windows Offline Installation and save the file to your desktop.
  • Close any programs you may have running - especially your web browser.
  • Go to Start > Settings > Control Panel, double-click on Add/Remove Programs and remove all older versions of Java.
  • Check (highlight) any item with Java Runtime Environment (JRE or J2SE) in the name.
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on jre-6u5-windows-i586-p.exe to install the newest version.

Edited by boopme, 11 March 2008 - 09:25 PM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#14 rayandi

rayandi
  • Topic Starter

  • Members
  • 189 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Virginia
  • Local time:01:21 PM

Posted 12 March 2008 - 07:47 AM

here is the report







Find AWF report by noahdfear ©2006
Version 1.40
Option 3 run successfully

The current date is: Wed 03/12/2008
The current time is: 8:36:00.75


bak folders found
~~~~~~~~~~~


Directory of C:\PROGRA~1\COMMON~1\ADOBE\UPDATER5\BAK

03/01/2007 11:37 AM 2,321,600 AdobeUpdater.exe
1 File(s) 2,321,600 bytes


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

140920 May 10 2007 "C:\Program Files\Adobe\Reader 8.0\Reader\AdobeUpdateCheck.exe"
45760 Mar 1 2007 "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdaterInstallMgr.exe"
2321600 Mar 1 2007 "C:\Program Files\Common Files\Adobe\Updater5\bak\AdobeUpdater.exe"


end of report

#15 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,026 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:02:21 PM

Posted 12 March 2008 - 06:54 PM

Open Windows Explorer, [Start > All Programs > Acccessories>Windows Explorer]
navigate to and delete the following bak folder:

C:\Program Files\Common Files\Adobe\Updater5\bak <- this folder

Double-click on the FindAWF.exe file to run it.
It will open a command prompt and ask you to "Press any key to continue".
You will be presented with a Menu.
Press 4, then press Enter.
Press 1 then Enter to continue.
When done, you will receive similar message like this:Done! Zones have been reset
Press E then Enter to exit.


Please download ATF Cleaner by Atribune. (This program is for XP and Windows 2000 only)Double-click ATF-Cleaner.exe to run the program.
Under Main "Select Files to Delete" choose: Select All.
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users