Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Foolishly I Deleted It Thinking All Would Be Well Again.


  • This topic is locked This topic is locked
9 replies to this topic

#1 heavyd

heavyd

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Alberta Canada
  • Local time:01:22 PM

Posted 04 April 2008 - 02:55 AM

Hi people.

Im not sure what the problem really is here about a week ago bought the new avg 8.0.90 antivirus
and when it scanned it picked up a bunch of cookies and a potentially unwanted program.
All were moved to the virus vault and I foolishly deleted them thinking all should be well.

Then I tried to go to the online avg site to look up some info but it wouldnt connect. Many other sites would so
I tried mcaffee which i use to use. No connection. Tried norton got an error. Also now my msn wont connect.

Ive ran a hijack this log file if it should need posted.

please help : :thumbsup:

BC AdBot (Login to Remove)

 


#2 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:09:22 PM

Posted 04 April 2008 - 08:26 AM

Hi and welcom to this site :thumbsup:

I think we need a bit of clarification here ; you have mentioned at least THREE antivirus programs ?which is your present installed antivirus program ?

which windows version are you running and what other protection programs do you have on board?

how does your computer connect to the internet and who is your ISP?

#3 heavyd

heavyd
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Alberta Canada
  • Local time:01:22 PM

Posted 04 April 2008 - 12:07 PM

Hi there.

Thank you for the reply.

Im only running AVG Internet Security 8.090. I was told to never run two antivirus at once. I just tried to go to the other antivirus sites because I could not connect to the AVG site. I also run superantispyware along with the AVG which has its own spyware.

Im using WindowsXP on a Dell comp. I looked in my system info but Im not sure what info you need exactly or Im not sure where to look.

Its high speed internet through Telus with a 2 wire modem at 100 mbps.

#4 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 37,046 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:03:22 PM

Posted 07 April 2008 - 11:28 PM

Hello heavyd,

It sounds as though AVG flagged some files that you needed. My thought is that your best bet at this point is to use System Restore, choosing a date and time just before you ran that AVG scan. That may resolve your problem.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Internet Security, NoScript Firefox ext.


animinionsmalltext.gif

#5 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:09:22 PM

Posted 08 April 2008 - 02:25 AM

Hi people.

Im not sure what the problem really is here about a week ago bought the new avg 8.0.90 antivirus and when it scanned it picked up a bunch of cookies and a potentially unwanted program.
All were moved to the virus vault and I foolishly deleted them thinking all should be well.

Then I tried to go to the online avg site to look up some info but it wouldnt connect. Many other sites would so
I tried mcaffee which i use to use. No connection. Tried norton got an error. Also now my msn wont connect.

Ive ran a hijack this log file if it should need posted.

please help : :thumbsup:

another thought to throw in;from where DID you obtain this program, as we are at present assuming it to be a legit one and,just maybe it is NOT?

#6 heavyd

heavyd
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Alberta Canada
  • Local time:01:22 PM

Posted 08 April 2008 - 10:38 PM

I tried to system restore to before the scan and when windows rebooted it said the cannot restore to that point. I tried an earlier point and it still wouldnt work.

I bought it online from the site. I was using the avg free 7.5 for a long time before but i went to the avg website and bought AVG 8 Internet Security.

#7 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 37,046 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:03:22 PM

Posted 08 April 2008 - 11:36 PM

Hello heavyd,

Did you retain the log from that scan? If so, could you paste it in your next reply? This should provide us the information we need to know which files were removed that you need.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Internet Security, NoScript Firefox ext.


animinionsmalltext.gif

#8 heavyd

heavyd
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Alberta Canada
  • Local time:01:22 PM

Posted 09 April 2008 - 01:11 AM

Heres the 2 scans that found spyware.


March 29

"Scan ""Scan whole computer"" was finished."
"Infections found:";"0"
"Infected objects removed or healed";"0"
"Not removed or healed.";"0"
"Spyware found:";"1"
"Spyware removed:";"1"
"Not removed:";"0"
"Warnings count:";"71"
"Information count:";"0"
"Scan started:";"2008-03-29, 10:34:08 PM"
"Total object scanned:";"582499"
"Time needed:";"1 hour(s) 18 minute(s) 29 second(s) "
"Errors encountered:";"0"

"Spyware"
"File";"Infection";"Result"
"C:\Program Files\DIGStream\digstream.exe";"Adware Generic.VDM";"Moved to Virus Vault"

"Warnings"
"File";"Infection";"Result"
"HKLM\SOFTWARE\Classes\CLSID\{C7310572-AC80-11D1-8DF3-00C04FB6EF4F}\InprocServer32\\";"Found Adware.RogueSuspect";"Potentially dangerous object"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0EDC6C20-A31C-11DB-8AB9-0800200C9A66}";"Found Adware.RogueSuspect";"Potentially dangerous object"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3AAC4C68-AFC8-11DB-80EF-8AF955D89593}";"Found Adware.RogueSuspect";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@2o7[2].txt:\2o7.net.ae6e14c4";"Found Tracking cookie.2o7";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@2o7[2].txt";"Found Tracking cookie.2o7";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ad.yieldmanager[2].txt:\ad.yieldmanager.com.539b0606";"Found Tracking cookie.Yieldmanager";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ad.yieldmanager[2].txt:\ad.yieldmanager.com.557bf2b0";"Found Tracking cookie.Yieldmanager";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ad.yieldmanager[2].txt:\ad.yieldmanager.com.b68f2b7b";"Found Tracking cookie.Yieldmanager";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ad.yieldmanager[2].txt:\ad.yieldmanager.com.830b6f08";"Found Tracking cookie.Yieldmanager";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ad.yieldmanager[2].txt:\ad.yieldmanager.com.ff92306";"Found Tracking cookie.Yieldmanager";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ad.yieldmanager[2].txt:\ad.yieldmanager.com.e762f029";"Found Tracking cookie.Yieldmanager";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ad.yieldmanager[2].txt";"Found Tracking cookie.Yieldmanager";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@adbrite[2].txt:\adbrite.com.d5e309c2";"Found Tracking cookie.Adbrite";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@adbrite[2].txt:\adbrite.com.71beeff9";"Found Tracking cookie.Adbrite";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@adbrite[2].txt";"Found Tracking cookie.Adbrite";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@advertising[2].txt:\advertising.com.203aa218";"Found Tracking cookie.Advertising";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@advertising[2].txt:\advertising.com.f62113d5";"Found Tracking cookie.Advertising";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@advertising[2].txt:\advertising.com.1820df7a";"Found Tracking cookie.Advertising";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@advertising[2].txt:\advertising.com.b624fa46";"Found Tracking cookie.Advertising";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@advertising[2].txt:\advertising.com.525a5fb9";"Found Tracking cookie.Advertising";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@advertising[2].txt";"Found Tracking cookie.Advertising";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@atdmt[2].txt:\atdmt.com.b3e33b5f";"Found Tracking cookie.Atdmt";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@atdmt[2].txt";"Found Tracking cookie.Atdmt";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@bs.serving-sys[2].txt:\bs.serving-sys.com.5bf1f00f";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@bs.serving-sys[2].txt";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@casalemedia[2].txt:\casalemedia.com.80ad4799";"Found Tracking cookie.Casalemedia";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@casalemedia[2].txt:\casalemedia.com.987e6b46";"Found Tracking cookie.Casalemedia";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@casalemedia[2].txt:\casalemedia.com.1773afc";"Found Tracking cookie.Casalemedia";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@casalemedia[2].txt:\casalemedia.com.1d158016";"Found Tracking cookie.Casalemedia";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@casalemedia[2].txt:\casalemedia.com.6a12b080";"Found Tracking cookie.Casalemedia";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@casalemedia[2].txt:\casalemedia.com.837115b5";"Found Tracking cookie.Casalemedia";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@casalemedia[2].txt";"Found Tracking cookie.Casalemedia";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@doubleclick[1].txt:\doubleclick.net.bf396750";"Found Tracking cookie.Doubleclick";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@doubleclick[1].txt";"Found Tracking cookie.Doubleclick";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@fastclick[1].txt:\fastclick.net.fac3d6f0";"Found Tracking cookie.Fastclick";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@fastclick[1].txt:\fastclick.net.8a6435e9";"Found Tracking cookie.Fastclick";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@fastclick[1].txt:\fastclick.net.57e8da10";"Found Tracking cookie.Fastclick";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@fastclick[1].txt";"Found Tracking cookie.Fastclick";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@m.webtrends[2].txt:\m.webtrends.com.b4ca7df0";"Found Tracking cookie.Webtrends";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@m.webtrends[2].txt";"Found Tracking cookie.Webtrends";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@media.adrevolver[1].txt:\media.adrevolver.com.5fed601d";"Found Tracking cookie.Adrevolver";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@media.adrevolver[1].txt";"Found Tracking cookie.Adrevolver";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@mediaplex[1].txt:\mediaplex.com.f652b123";"Found Tracking cookie.Mediaplex";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@mediaplex[1].txt";"Found Tracking cookie.Mediaplex";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@overture[1].txt:\overture.com.52ca467a";"Found Tracking cookie.Overture";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@overture[1].txt";"Found Tracking cookie.Overture";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@questionmarket[2].txt:\questionmarket.com.4dd5e426";"Found Tracking cookie.Questionmarket";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@questionmarket[2].txt:\questionmarket.com.3eb5a9f1";"Found Tracking cookie.Questionmarket";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@questionmarket[2].txt";"Found Tracking cookie.Questionmarket";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@revsci[1].txt:\revsci.net.44927ec";"Found Tracking cookie.Revsci";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@revsci[1].txt:\revsci.net.f7ac007f";"Found Tracking cookie.Revsci";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@revsci[1].txt:\revsci.net.e9dbeb91";"Found Tracking cookie.Revsci";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@revsci[1].txt:\revsci.net.2df99d79";"Found Tracking cookie.Revsci";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@revsci[1].txt";"Found Tracking cookie.Revsci";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@serving-sys[2].txt:\serving-sys.com.c9034af6";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@serving-sys[2].txt:\serving-sys.com.606c3d3b";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@serving-sys[2].txt:\serving-sys.com.4b416ef8";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@serving-sys[2].txt:\serving-sys.com.255d6f2f";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@serving-sys[2].txt:\serving-sys.com.6a1cf9e8";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@serving-sys[2].txt:\serving-sys.com.400f83f";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@serving-sys[2].txt";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ssl-hints.netflame[1].txt:\ssl-hints.netflame.cc.441d9a41";"Found Tracking cookie.Netflame";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ssl-hints.netflame[1].txt";"Found Tracking cookie.Netflame";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@statse.webtrendslive[1].txt:\statse.webtrendslive.com.b4ca7df0";"Found Tracking cookie.Webtrendslive";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@statse.webtrendslive[1].txt";"Found Tracking cookie.Webtrendslive";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@tribalfusion[2].txt:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@tribalfusion[2].txt";"Found Tracking cookie.Tribalfusion";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@zedo[1].txt:\zedo.com.775ee79c";"Found Tracking cookie.Zedo";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@zedo[1].txt:\zedo.com.ff8ec9c0";"Found Tracking cookie.Zedo";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@zedo[1].txt:\zedo.com.c1dd09f2";"Found Tracking cookie.Zedo";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@zedo[1].txt";"Found Tracking cookie.Zedo";"Potentially dangerous object"




March 30

"Scan ""Scheduled scan"" was finished."
"Infections found:";"0"
"Infected objects removed or healed";"0"
"Not removed or healed.";"0"
"Spyware found:";"1"
"Spyware removed:";"1"
"Not removed:";"0"
"Warnings count:";"73"
"Information count:";"0"
"Scan started:";"2008-03-30, 3:00:01 AM"
"Total object scanned:";"742431"
"Time needed:";"2 hour(s) 9 minute(s) 31 second(s) "
"Errors encountered:";"0"

"Spyware"
"File";"Infection";"Result"
"C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP480\A0047892.exe";"Adware Generic.VDM";"Moved to Virus Vault"

"Warnings"
"File";"Infection";"Result"
"HKLM\SOFTWARE\Classes\CLSID\{C7310572-AC80-11D1-8DF3-00C04FB6EF4F}\InprocServer32\\";"Found Adware.RogueSuspect";"Potentially dangerous object"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0EDC6C20-A31C-11DB-8AB9-0800200C9A66}";"Found Adware.RogueSuspect";"Potentially dangerous object"
"HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{3AAC4C68-AFC8-11DB-80EF-8AF955D89593}";"Found Adware.RogueSuspect";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@2o7[2].txt:\2o7.net.ae6e14c4";"Found Tracking cookie.2o7";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@2o7[2].txt";"Found Tracking cookie.2o7";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ad.yieldmanager[2].txt:\ad.yieldmanager.com.539b0606";"Found Tracking cookie.Yieldmanager";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ad.yieldmanager[2].txt:\ad.yieldmanager.com.557bf2b0";"Found Tracking cookie.Yieldmanager";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ad.yieldmanager[2].txt:\ad.yieldmanager.com.b68f2b7b";"Found Tracking cookie.Yieldmanager";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ad.yieldmanager[2].txt:\ad.yieldmanager.com.830b6f08";"Found Tracking cookie.Yieldmanager";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ad.yieldmanager[2].txt:\ad.yieldmanager.com.ff92306";"Found Tracking cookie.Yieldmanager";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ad.yieldmanager[2].txt:\ad.yieldmanager.com.e762f029";"Found Tracking cookie.Yieldmanager";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ad.yieldmanager[2].txt";"Found Tracking cookie.Yieldmanager";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@adbrite[2].txt:\adbrite.com.d5e309c2";"Found Tracking cookie.Adbrite";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@adbrite[2].txt:\adbrite.com.71beeff9";"Found Tracking cookie.Adbrite";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@adbrite[2].txt";"Found Tracking cookie.Adbrite";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@advertising[2].txt:\advertising.com.203aa218";"Found Tracking cookie.Advertising";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@advertising[2].txt:\advertising.com.f62113d5";"Found Tracking cookie.Advertising";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@advertising[2].txt:\advertising.com.1820df7a";"Found Tracking cookie.Advertising";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@advertising[2].txt:\advertising.com.b624fa46";"Found Tracking cookie.Advertising";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@advertising[2].txt:\advertising.com.525a5fb9";"Found Tracking cookie.Advertising";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@advertising[2].txt";"Found Tracking cookie.Advertising";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@atdmt[2].txt:\atdmt.com.b3e33b5f";"Found Tracking cookie.Atdmt";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@atdmt[2].txt";"Found Tracking cookie.Atdmt";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@bs.serving-sys[2].txt:\bs.serving-sys.com.5bf1f00f";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@bs.serving-sys[2].txt";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@casalemedia[2].txt:\casalemedia.com.80ad4799";"Found Tracking cookie.Casalemedia";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@casalemedia[2].txt:\casalemedia.com.987e6b46";"Found Tracking cookie.Casalemedia";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@casalemedia[2].txt:\casalemedia.com.1773afc";"Found Tracking cookie.Casalemedia";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@casalemedia[2].txt:\casalemedia.com.1d158016";"Found Tracking cookie.Casalemedia";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@casalemedia[2].txt:\casalemedia.com.6a12b080";"Found Tracking cookie.Casalemedia";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@casalemedia[2].txt:\casalemedia.com.837115b5";"Found Tracking cookie.Casalemedia";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@casalemedia[2].txt";"Found Tracking cookie.Casalemedia";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@doubleclick[1].txt:\doubleclick.net.bf396750";"Found Tracking cookie.Doubleclick";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@doubleclick[1].txt";"Found Tracking cookie.Doubleclick";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@fastclick[1].txt:\fastclick.net.fac3d6f0";"Found Tracking cookie.Fastclick";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@fastclick[1].txt:\fastclick.net.8a6435e9";"Found Tracking cookie.Fastclick";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@fastclick[1].txt:\fastclick.net.57e8da10";"Found Tracking cookie.Fastclick";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@fastclick[1].txt";"Found Tracking cookie.Fastclick";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@m.webtrends[2].txt:\m.webtrends.com.b4ca7df0";"Found Tracking cookie.Webtrends";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@m.webtrends[2].txt";"Found Tracking cookie.Webtrends";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@media.adrevolver[1].txt:\media.adrevolver.com.5fed601d";"Found Tracking cookie.Adrevolver";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@media.adrevolver[1].txt";"Found Tracking cookie.Adrevolver";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@mediaplex[1].txt:\mediaplex.com.f652b123";"Found Tracking cookie.Mediaplex";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@mediaplex[1].txt";"Found Tracking cookie.Mediaplex";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@overture[1].txt:\overture.com.52ca467a";"Found Tracking cookie.Overture";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@overture[1].txt";"Found Tracking cookie.Overture";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@questionmarket[2].txt:\questionmarket.com.4dd5e426";"Found Tracking cookie.Questionmarket";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@questionmarket[2].txt:\questionmarket.com.3eb5a9f1";"Found Tracking cookie.Questionmarket";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@questionmarket[2].txt";"Found Tracking cookie.Questionmarket";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@revsci[1].txt:\revsci.net.44927ec";"Found Tracking cookie.Revsci";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@revsci[1].txt:\revsci.net.f7ac007f";"Found Tracking cookie.Revsci";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@revsci[1].txt:\revsci.net.e9dbeb91";"Found Tracking cookie.Revsci";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@revsci[1].txt:\revsci.net.2df99d79";"Found Tracking cookie.Revsci";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@revsci[1].txt";"Found Tracking cookie.Revsci";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@serving-sys[2].txt:\serving-sys.com.c9034af6";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@serving-sys[2].txt:\serving-sys.com.606c3d3b";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@serving-sys[2].txt:\serving-sys.com.4b416ef8";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@serving-sys[2].txt:\serving-sys.com.255d6f2f";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@serving-sys[2].txt:\serving-sys.com.6a1cf9e8";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@serving-sys[2].txt:\serving-sys.com.400f83f";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@serving-sys[2].txt";"Found Tracking cookie.Serving-sys";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ssl-hints.netflame[1].txt:\ssl-hints.netflame.cc.441d9a41";"Found Tracking cookie.Netflame";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@ssl-hints.netflame[1].txt";"Found Tracking cookie.Netflame";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@statcounter[1].txt:\statcounter.com.d8db2766";"Found Tracking cookie.Statcounter";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@statcounter[1].txt";"Found Tracking cookie.Statcounter";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@statse.webtrendslive[1].txt:\statse.webtrendslive.com.b4ca7df0";"Found Tracking cookie.Webtrendslive";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@statse.webtrendslive[1].txt";"Found Tracking cookie.Webtrendslive";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@tribalfusion[2].txt:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@tribalfusion[2].txt";"Found Tracking cookie.Tribalfusion";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@zedo[1].txt:\zedo.com.775ee79c";"Found Tracking cookie.Zedo";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@zedo[1].txt:\zedo.com.ff8ec9c0";"Found Tracking cookie.Zedo";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@zedo[1].txt:\zedo.com.c1dd09f2";"Found Tracking cookie.Zedo";"Potentially dangerous object"
"C:\Documents and Settings\Donald McDonald\Cookies\donald_mcdonald@zedo[1].txt";"Found Tracking cookie.Zedo";"Potentially dangerous object"

#9 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 37,046 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:03:22 PM

Posted 09 April 2008 - 11:22 PM

Hello heavyd,

This issue will require further investigation and probably the use of more powerful tools than we recommend in this forum. Before that can be done you will need you to create and post a hijackthis log.

Please read the pinned topic titled "Preparation Guide For Use Before Posting A Hijackthis Log" and complete all the steps. There are instructions for downloading and running Deckard's System Scanner (DSS) which will create a hijackthis log for you, or automatically download and install the most current version of HijackThis if it's not already installed on your computer.

When you have done that, post your log in the HijackThis Logs and Malware Removal forum, NOT here, for assistance by the HJT Team Experts. A member of the Team will walk you through, step by step, on how to clean your computer. If you post your log back in this thread, the response from the HJT Team will be delayed because your post will have to be moved. This means it will fall in line behind any others posted that same day.

Start a new topic, give it a relevant title and post your log along with a brief description of your problem, a summary of any anti-malware tools you have used and a summary of any steps that you have performed on your own. An expert will analyze your log and reply with instructions advising you what to fix. After doing this, we would appreciate if you post a link to your log back here so we know that your getting help from the HJT Team.

Please be patient. It may take a while to get a response because the HJT Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT "bump" your post or make another reply until it has been responded to by a member of the HJT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.

Orange Blossom :thumbsup:
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Internet Security, NoScript Firefox ext.


animinionsmalltext.gif

#10 TMacK

TMacK

  • Members
  • 4,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:B.C. Canada
  • Local time:01:22 PM

Posted 12 April 2008 - 12:39 AM

Hello heavyd,

Now that you have a new HJT log posted in the HijackThis Logs and Malware Removal forum, I'm going to close this Topic.

You shouldn't make any changes to your system, while your HJT log is posted, as that could change the results of the posted log, making it difficult to properly clean your system.
At this point, the HJT Team should be the only members that you take advice from, until they have verified your log as clean.

If you have any questions, don't hesitate to send me a PM.
Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.

aaaaaaaa a~Suzie Wagner




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users